Universal Blue•3y ago

i didn't write optfix i copied it from aura

GGerblesh > nix-me-down # run the ublue nix uninstaller by dnkmmr > nix...

xynyOP•9/6/23, 7:57 AM

yeah, oversight

Xxyny i didn't write optfix i copied it from aura

Gerblesh•9/6/23, 7:59 AM

Yeah, it was some error with loading the value from the config

GGerblesh Problem I have is that it doesn't run without enrolling the key

bsherman•9/6/23, 1:25 PM

just disable secure boot

Bbsherman just disable secure boot 😉 ?

Gerblesh•9/6/23, 2:31 PM

I'd rather avoid it, especially because I want to use TPM for disk encryption in the future

GGerblesh I'd rather avoid it, especially because I want to use TPM for disk encryption in...

bsherman•9/6/23, 2:31 PM

yeah, I was mostly joking. I have secure boot, mostly for TPM disk decrypt, too.

bsherman•9/6/23, 2:32 PM

seriously, the key loading is a problem for anything secureboot which is not trusted by microsoft (basically)

Gerblesh•9/6/23, 2:32 PM

IMO we should avoid putting kernel modules in main, save for nvidia

akdev•9/6/23, 2:32 PM

We should add your script to bluefin

akdev•9/6/23, 2:32 PM

Some people seemed interested

Aakdev We should add your script to bluefin

bsherman•9/6/23, 2:32 PM

mine? feel free

akdev•9/6/23, 2:32 PM

I was looking into that setup but using my yubikey

bsherman•9/6/23, 2:32 PM

or i can

akdev•9/6/23, 2:33 PM

I think we need to install some package for dracut u2f

GGerblesh IMO we should avoid putting kernel modules in main, save for nvidia

bsherman•9/6/23, 2:36 PM

I agree its a gray area. But the community did agree on it in the past, and it fits scope to some degree
https://universal-blue.org/scope/ since it enables hardware that Fedora won't.

I believe it's MUCH worse to face a "broken system" due to not enrolling the Ublue MOK for nvidia than for a game controller... So, I'm not too worried about it for now.

bsherman•9/6/23, 2:37 PM

Its sadly just the cost of secureboot.

Gerblesh•9/6/23, 2:37 PM

Kernel modules MUST NOT be included, they are added to ublue-os/akmods.

GGerblesh > Kernel modules MUST NOT be included, they are added to ublue-os/akmods. ?

bsherman•9/6/23, 2:39 PM

that meant not built in the repo, but could be clarified

Gerblesh•9/6/23, 2:39 PM

Bbsherman I agree its a gray area. But the community did agree on it in the past, and it f...

Gerblesh•9/6/23, 2:46 PM

Yeah, I understand, I'd just rather not have to enroll the key when my controller already works without the modules

GGerblesh IMO we should avoid putting kernel modules in main, save for nvidia

bsherman•9/6/23, 2:47 PM

But yeah, we do have some trouble where either becasue the kmods are signed and not loading, or the controller doesn't like our driver, it causes issues... so, I question the decision, too, even though i was part of it. The bigger issue is I'd want a good plan before REMOVING something.

I do know the akmods repo needs to be better documented... i've filed issues for it so I don't forget, but anyone can help with it.

So one idea would be:

make sure akmods repo is well documented on how users can include any of those individual drivers in their custom repos
remove the game controller drivers from *-main*-main (would still leave the v4l driver, i think)
add those game controller drivers to bluefine/bazzite

Gerblesh•9/6/23, 2:47 PM

Makes sense

bsherman•9/6/23, 2:48 PM

I should be clear, I'm not very sympathetic to the "i don't like enrolling a secure boot MOK"

but i'm very sympathetic to pre-installing things that can cause trouble, specifically that seems to be the xone/xpad-noone driver compo

bsherman•9/6/23, 2:49 PM

and I'm also biased to as few additions to main as possible

Bbsherman and I'm also biased to as few additions to main as possible

bsherman•9/6/23, 2:53 PM

that's been a learned bias though, as I more and more see main as the foundation of a toolkit, and... anything added is difficult/impossible to remove downstream

j0rge•9/6/23, 2:58 PM

I wouldn't say it's a bias, that's just how you're supposed to do it.

Waffleophagus•9/6/23, 4:36 PM

What is the status of Forge? I was listening to a podcast yesterday that was talking about Gitea beginning the process of trying to 1:1 github actions and it made me think "huh, I wanna have my ublue running entirely self hosted, maybe this'll work"

Waffleophagus•9/6/23, 4:36 PM

https://docs.gitea.com/next/usage/actions/overview I'd love to look into it, and maybe help push forge along if it fits

Gitea Actions | Gitea Documentation

Starting with Gitea 1.19, Gitea Actions are available as a built-in CI/CD solution.

WWaffleophagus What is the status of Forge? I was listening to a podcast yesterday that was tal...

j0rge•9/6/23, 4:37 PM

someone needs to try it and see if it works.

Waffleophagus•9/6/23, 4:38 PM

I'm down. On the "vision" I won't be doing 4 though PXE boot the clients, select ublue in the menuPXE boot the clients, select ublue in the menu

Waffleophagus•9/6/23, 4:39 PM

so this looks like it'd be deployed via podman cluster?

Waffleophagus•9/6/23, 4:39 PM

ok, so ucore VM

Waffleophagus•9/6/23, 4:40 PM

Really I just want to in house my image creation

j0rge•9/6/23, 4:42 PM

it should run on any linux with podman or docker iirc

Waffleophagus•9/6/23, 4:43 PM

Is it a single container? Cause if so, I'll just attempt to throw it in the mix on unraid

Waffleophagus•9/6/23, 4:43 PM

if its orchastrating multiple containers I may throw a VM at it for testing

j0rge•9/6/23, 4:43 PM

https://github.com/ublue-os/forge/blob/main/forge-pod.yml

GitHub

forge/forge-pod.yml at main · ublue-os/forge

On-prem Universal Blue. Contribute to ublue-os/forge development by creating an account on GitHub.

j0rge•9/6/23, 4:43 PM

it's a few

Waffleophagus•9/6/23, 4:43 PM

yea, I'll just spin up a VM to test it in

Waffleophagus•9/6/23, 4:43 PM

keep it contained

WWaffleophagus https://docs.gitea.com/next/usage/actions/overview I'd love to look into it, and...

bsherman•9/6/23, 4:44 PM

I use gitea for git and their actions with act_runner for CI builds and as a container registry...

i can tell you that the buildah actions we use today don't work on act_runner, but could almost certainly be swapped out for docker's builder action (and still probably run against podman, if you like)

Waffleophagus•9/6/23, 4:45 PM

Honestly if Forge does what it advertises (and if it doesn't, I bet its way further along than me starting from scratch) I think its probably the better starting point than trying to slam gitea in

Waffleophagus•9/6/23, 4:45 PM

¯\_(ツ)_/¯

Waffleophagus•9/6/23, 4:45 PM

but that conversation made me really curious to get it all building locally

Waffleophagus•9/6/23, 4:46 PM

Especially since I'll have multiple machines on the same image, save internet bandwidth

Waffleophagus•9/6/23, 4:46 PM

have it build locally then distribute to the entire house

bsherman•9/6/23, 4:46 PM

yea, i'd like to build locally too... i'd kinda like to get the workflows setup so theyd run on either github or gitea if possible

WWaffleophagus have it build locally then distribute to the entire house

bsherman•9/6/23, 4:46 PM

this is related

bsherman•9/6/23, 4:46 PM

I saw an interesting post by Walters today: https://github.com/coreos/fedora-coreos-tracker/issues/1263#issuecomment-1680999863

The important line is:

[Users can] mirror the OS update containers on their own to a registry and update it on their own timeframe and schedule. Which is what they already need to know how to do for application containers!

the context is replacing zincati/simplifying its function and instead of having complexity, managing things in a better way.

Got me thinking, having frequent upgrades of ucore/ublue is great, but the best way to gate them is to install from a local mirror, and then I choose when I want to sync the mirror with ghcr... it not only provides a buffer between build and install, but saves bandwidth for those are are running ublue/ucore on multiple systems.

Waffleophagus•9/6/23, 4:46 PM

yea, read that

bsherman•9/6/23, 4:46 PM

so, even if building in github, could just mirror to a local container registry

i didn't write optfix i copied it from aura

Similar Threads

Similar Threads

Similar Threads