what's unsigned bazzite?

K

Kyle Gospo•9/4/23, 7:25 AM

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

K

kaotikfunkOP•9/4/23, 7:25 AM

ah, will try. thanks

K

Kyle Gospo•9/4/23, 7:25 AM

np

K

kaotikfunkOP•9/4/23, 7:25 AM

$ rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
Pulling manifest: ostree-unverified-image:docker://ghcr.io/ublue-os/bazzite-nvidia:latest
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

$ rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
Pulling manifest: ostree-unverified-image:docker://ghcr.io/ublue-os/bazzite-nvidia:latest
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

$ rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
Pulling manifest: ostree-unverified-image:docker://ghcr.io/ublue-os/bazzite-nvidia:latest
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

$ rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
Pulling manifest: ostree-unverified-image:docker://ghcr.io/ublue-os/bazzite-nvidia:latest
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

K

Kyle Gospo•9/4/23, 7:26 AM

your issue isn't the command, your issue is your system is configured to look for a key that isn't there

K

Kyle Gospo•9/4/23, 7:26 AM

no idea how that happened

K

Kyle Gospo•9/4/23, 7:26 AM

try rpm-ostree reset

K

Kyle Gospo•9/4/23, 7:26 AM

and then reboot

K

Kyle Gospo•9/4/23, 7:26 AM

and then run that

K

kaotikfunkOP•9/4/23, 7:27 AM

$ rpm-ostree reset
No change.

$ rpm-ostree reset
No change.

$ rpm-ostree reset
No change.

$ rpm-ostree reset
No change.

K

kaotikfunkOP•9/4/23, 7:29 AM

so I'm in a state where I can upgrade to new silverblue images and just updated, although I suppose those are not using OCI

K

kaotikfunkOP•9/4/23, 7:29 AM

the fact that

podman pull

podman pull

podman pull

podman pull is failing is new to me. I've never seen a pull fail like that

K

kaotikfunkOP•9/4/23, 7:34 AM

and the file exists - is an SELinux policy missing / corrupted?

 podman pull ghcr.io/ublue-os/config
Trying to pull ghcr.io/ublue-os/config:latest...
Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory
[patrick@fedora containers]$ pwd
/etc/pki/containers
[patrick@fedora containers]$ ls -l
total 4
-rw-r--r--. 1 root root 178 Sep  2 16:15 ublue-os.pub
[patrick@fedora containers]$ cat ublue-os.pub 
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7lh7fJMV4dBT2jT1XafixUJa7OVA
cT+QFVD8IfIJIS/KBAc8hx1aslzkH3tfeM0cwyCLB7kOStZ4sh6RyFQD9w==
-----END PUBLIC KEY-----

 podman pull ghcr.io/ublue-os/config
Trying to pull ghcr.io/ublue-os/config:latest...
Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory
[patrick@fedora containers]$ pwd
/etc/pki/containers
[patrick@fedora containers]$ ls -l
total 4
-rw-r--r--. 1 root root 178 Sep  2 16:15 ublue-os.pub
[patrick@fedora containers]$ cat ublue-os.pub 
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7lh7fJMV4dBT2jT1XafixUJa7OVA
cT+QFVD8IfIJIS/KBAc8hx1aslzkH3tfeM0cwyCLB7kOStZ4sh6RyFQD9w==
-----END PUBLIC KEY-----

 podman pull ghcr.io/ublue-os/config
Trying to pull ghcr.io/ublue-os/config:latest...
Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory
[patrick@fedora containers]$ pwd
/etc/pki/containers
[patrick@fedora containers]$ ls -l
total 4
-rw-r--r--. 1 root root 178 Sep  2 16:15 ublue-os.pub
[patrick@fedora containers]$ cat ublue-os.pub 
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7lh7fJMV4dBT2jT1XafixUJa7OVA
cT+QFVD8IfIJIS/KBAc8hx1aslzkH3tfeM0cwyCLB7kOStZ4sh6RyFQD9w==
-----END PUBLIC KEY-----

 podman pull ghcr.io/ublue-os/config
Trying to pull ghcr.io/ublue-os/config:latest...
Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory
[patrick@fedora containers]$ pwd
/etc/pki/containers
[patrick@fedora containers]$ ls -l
total 4
-rw-r--r--. 1 root root 178 Sep  2 16:15 ublue-os.pub
[patrick@fedora containers]$ cat ublue-os.pub 
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7lh7fJMV4dBT2jT1XafixUJa7OVA
cT+QFVD8IfIJIS/KBAc8hx1aslzkH3tfeM0cwyCLB7kOStZ4sh6RyFQD9w==
-----END PUBLIC KEY-----

K

kaotikfunkOP•9/4/23, 7:38 AM

aha - I had to delete the reference to that key in

/etc/containers/policy.json

/etc/containers/policy.json

/etc/containers/policy.json

/etc/containers/policy.json

K

kaotikfunkOP•9/4/23, 7:39 AM

now it's attempting to pull & rebase using

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest as suggested

K

kaotikfunkOP•9/4/23, 7:39 AM

GHCR.io is SLOOOOOOOOW

K

Kyle Gospo•9/4/23, 7:39 AM

Nice job

Kkaotikfunk GHCR.io is SLOOOOOOOOW

K

Kyle Gospo•9/4/23, 7:39 AM

At least it's free

G

Gerblesh•9/4/23, 7:40 AM

(docker hub)

K

kaotikfunkOP•9/4/23, 7:40 AM

hmm well its going faster than before. Earlier I tried this and it was getting 1-2 Mbps, so I let it run and it didn't seem to finish. Getting faster results now

Kkaotikfunk hmm well its going faster than before. Earlier I tried this and it was getting 1...

K

kaotikfunkOP•9/4/23, 7:47 AM

And... I'm in. Thanks for the help!

Kkaotikfunk And... I'm in. Thanks for the help!

K

kaotikfunkOP•9/4/23, 7:47 AM

$ rpm-ostree status
State: idle
Deployments:
● ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
                   Digest: sha256:b765e37b226fc4cda444dd7e46977d087d39a7b3db4b5304b305a1bb322026c0
                  Version: 38.20230903.0 (2023-09-04T04:19:08Z)

$ rpm-ostree status
State: idle
Deployments:
● ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
                   Digest: sha256:b765e37b226fc4cda444dd7e46977d087d39a7b3db4b5304b305a1bb322026c0
                  Version: 38.20230903.0 (2023-09-04T04:19:08Z)

$ rpm-ostree status
State: idle
Deployments:
● ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
                   Digest: sha256:b765e37b226fc4cda444dd7e46977d087d39a7b3db4b5304b305a1bb322026c0
                  Version: 38.20230903.0 (2023-09-04T04:19:08Z)

$ rpm-ostree status
State: idle
Deployments:
● ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
                   Digest: sha256:b765e37b226fc4cda444dd7e46977d087d39a7b3db4b5304b305a1bb322026c0
                  Version: 38.20230903.0 (2023-09-04T04:19:08Z)

J

j0rge•9/4/23, 2:20 PM

heads up, the updated checkout action breaks ... tar?!?

J

j0rge•9/4/23, 2:21 PM

https://github.com/ublue-os/main/actions/runs/6074626413/job/16479087624

J

j0rge•9/4/23, 2:23 PM

oh just had to rerun the build

A

akdev•9/4/23, 5:07 PM

Is Rpmfusion building f39 nvidia akmods yet?

GGerblesh https://github.com/ublue-os/startingpoint/pull/142 this is ready to merge if any...

G

Gerblesh•9/4/23, 5:12 PM

@hermmm resolved all the comments you made if you want to take a look

Aakdev Is Rpmfusion building f39 nvidia akmods yet?

J

j0rge•9/4/23, 5:15 PM

I lost the url, link me and I'll pin it lol

A

akdev•9/4/23, 5:17 PM

https://muug.ca/mirror/rpmfusion/free/fedora/development/39/Everything/x86_64/os/repoview/index.html

A

akdev•9/4/23, 5:18 PM

Not there

A

akdev•9/4/23, 5:19 PM

I have some time today, I’m thinking of setting up a ublue bot here

Something that can at least interact with issues

A

akdev•9/4/23, 5:19 PM

Do you know if there’s anything like that already?

J

j0rge•9/4/23, 5:20 PM

I would 100% support any chatops we can do here

J

j0rge•9/4/23, 5:20 PM

bots, automation, triggering builds by checking github perms, all of it.

J

j0rge•9/4/23, 5:20 PM

like I wanna do

/build akmods

/build akmods

/build akmods

/build akmods and stuff

J

j0rge•9/4/23, 5:21 PM

and

/build all

/build all

/build all

/build all

A

akdev•9/4/23, 5:32 PM

I think I’ll have to build my own I don’t see anything that could work

J

j0rge•9/4/23, 5:33 PM

I've seen kyle and marco talk about it before, there's prior art out there

J

j0rge•9/4/23, 7:13 PM

@akdev https://social.treehouse.systems/@marcan/111004964769835513

treehouse.systemsHector Martin

Hector Martin (@marcan@treehouse.systems)

Attached: 1 image

We're switching to Calamares on Fedora KDE, just like the Arch images - except now it's 100% Wayland, no Xorg or

setxkbmap

setxkbmap

setxkbmap

setxkbmap in sight, thanks to some Calamares patches I wrote and upstreamed.

This means we now have zero usage of the native Xorg server on Fedora Asahi KDE ima...