Universal Blue•3y ago

btw @hermmm optfix doesn't work

GerbleshOP•9/6/23, 6:37 AM

GerbleshOP•9/6/23, 6:37 AM

other than that not much else to really comment on

GerbleshOP•9/6/23, 6:37 AM

everything else in the startingpoint rewrite works from what I can tell

GerbleshOP•9/6/23, 6:39 AM

nix-me-down # run the ublue nix uninstaller by dnkmmr
nix-me-up # run the ublue nix installer by dnkmmr

need to fix this

GGerblesh Click to see attachment

GerbleshOP•9/6/23, 6:42 AM

it uses a file for some reason, instead of a directory

GerbleshOP•9/6/23, 7:03 AM

ok I think I fixed it now

Jj0rge anything reusable or you shoving it all thru docker-slim?

Wimpy•9/6/23, 7:10 AM

Just more thoughtful dependency inclusion. For example, V4L2loopback DKMS is not required in the container which has a knock on effect of not pulling in kernel headers and build tools.

As @Bigpod says, slim-toolkit can't be used for desktop apps.

Wimpy•9/6/23, 7:15 AM

That said @Bigpod and I did manage to make a FROM scratch Ubuntu container base image that was smaller than the official base image from Canonical. Again, without using slim-toolkit.

So there might be a little wiggle room with Ubuntu-toolbox.

GGerblesh ok I *think* I fixed it now

GerbleshOP•9/6/23, 7:21 AM

yeah, it's fixed, i'll make a PR tmro

GerbleshOP•9/6/23, 7:21 AM

and figure out what's up with rpm-ostreed.confrpm-ostreed.conf

GGerblesh btw @hermmm optfix doesn't work

GerbleshOP•9/6/23, 7:30 AM

fixed:
https://github.com/ublue-os/startingpoint/pull/144

GitHub

fix(rpm-ostree): format string in optfix by gerblesh · Pull Reques...

This fixes optfix and makes the symlink not broken

GGerblesh fixed: https://github.com/ublue-os/startingpoint/pull/144

xyny•9/6/23, 7:56 AM

thanks

xyny•9/6/23, 7:57 AM

i didn't write optfix i copied it from aura

GGerblesh > nix-me-down # run the ublue nix uninstaller by dnkmmr > nix...

xyny•9/6/23, 7:57 AM

yeah, oversight

Xxyny i didn't write optfix i copied it from aura

GerbleshOP•9/6/23, 7:59 AM

Yeah, it was some error with loading the value from the config

GGerblesh Problem I have is that it doesn't run without enrolling the key

bsherman•9/6/23, 1:25 PM

just disable secure boot

Bbsherman just disable secure boot 😉 ?

GerbleshOP•9/6/23, 2:31 PM

I'd rather avoid it, especially because I want to use TPM for disk encryption in the future

GGerblesh I'd rather avoid it, especially because I want to use TPM for disk encryption in...

bsherman•9/6/23, 2:31 PM

yeah, I was mostly joking. I have secure boot, mostly for TPM disk decrypt, too.

bsherman•9/6/23, 2:32 PM

seriously, the key loading is a problem for anything secureboot which is not trusted by microsoft (basically)

GerbleshOP•9/6/23, 2:32 PM

IMO we should avoid putting kernel modules in main, save for nvidia

akdev•9/6/23, 2:32 PM

We should add your script to bluefin

akdev•9/6/23, 2:32 PM

Some people seemed interested

Aakdev We should add your script to bluefin

bsherman•9/6/23, 2:32 PM

mine? feel free

akdev•9/6/23, 2:32 PM

I was looking into that setup but using my yubikey

bsherman•9/6/23, 2:32 PM

or i can

akdev•9/6/23, 2:33 PM

I think we need to install some package for dracut u2f

GGerblesh IMO we should avoid putting kernel modules in main, save for nvidia

bsherman•9/6/23, 2:36 PM

I agree its a gray area. But the community did agree on it in the past, and it fits scope to some degree
https://universal-blue.org/scope/ since it enables hardware that Fedora won't.

I believe it's MUCH worse to face a "broken system" due to not enrolling the Ublue MOK for nvidia than for a game controller... So, I'm not too worried about it for now.

bsherman•9/6/23, 2:37 PM

Its sadly just the cost of secureboot.

GerbleshOP•9/6/23, 2:37 PM

Kernel modules MUST NOT be included, they are added to ublue-os/akmods.

GGerblesh > Kernel modules MUST NOT be included, they are added to ublue-os/akmods. ?

bsherman•9/6/23, 2:39 PM

that meant not built in the repo, but could be clarified

GerbleshOP•9/6/23, 2:39 PM

Bbsherman I agree its a gray area. But the community did agree on it in the past, and it f...

GerbleshOP•9/6/23, 2:46 PM

Yeah, I understand, I'd just rather not have to enroll the key when my controller already works without the modules

GGerblesh IMO we should avoid putting kernel modules in main, save for nvidia

bsherman•9/6/23, 2:47 PM

But yeah, we do have some trouble where either becasue the kmods are signed and not loading, or the controller doesn't like our driver, it causes issues... so, I question the decision, too, even though i was part of it. The bigger issue is I'd want a good plan before REMOVING something.

I do know the akmods repo needs to be better documented... i've filed issues for it so I don't forget, but anyone can help with it.

So one idea would be:

make sure akmods repo is well documented on how users can include any of those individual drivers in their custom repos
remove the game controller drivers from *-main*-main (would still leave the v4l driver, i think)
add those game controller drivers to bluefine/bazzite

GerbleshOP•9/6/23, 2:47 PM

Makes sense

bsherman•9/6/23, 2:48 PM

I should be clear, I'm not very sympathetic to the "i don't like enrolling a secure boot MOK"

but i'm very sympathetic to pre-installing things that can cause trouble, specifically that seems to be the xone/xpad-noone driver compo

bsherman•9/6/23, 2:49 PM

and I'm also biased to as few additions to main as possible

Bbsherman and I'm also biased to as few additions to main as possible

bsherman•9/6/23, 2:53 PM

that's been a learned bias though, as I more and more see main as the foundation of a toolkit, and... anything added is difficult/impossible to remove downstream

j0rge•9/6/23, 2:58 PM

I wouldn't say it's a bias, that's just how you're supposed to do it.

Waffleophagus•9/6/23, 4:36 PM

What is the status of Forge? I was listening to a podcast yesterday that was talking about Gitea beginning the process of trying to 1:1 github actions and it made me think "huh, I wanna have my ublue running entirely self hosted, maybe this'll work"

Waffleophagus•9/6/23, 4:36 PM

https://docs.gitea.com/next/usage/actions/overview I'd love to look into it, and maybe help push forge along if it fits

Gitea Actions | Gitea Documentation

Starting with Gitea 1.19, Gitea Actions are available as a built-in CI/CD solution.