I agree its a gray area. But the community did agree on it in the past, and it fits scope to some de

I agree its a gray area. But the community did agree on it in the past, and it fits scope to some degree
https://universal-blue.org/scope/ since it enables hardware that Fedora won't.

I believe it's MUCH worse to face a "broken system" due to not enrolling the Ublue MOK for nvidia than for a game controller... So, I'm not too worried about it for now.

bshermanOP•9/6/23, 2:37 PM

Its sadly just the cost of secureboot.

Gerblesh•9/6/23, 2:37 PM

Kernel modules MUST NOT be included, they are added to ublue-os/akmods.

GGerblesh > Kernel modules MUST NOT be included, they are added to ublue-os/akmods. ?

bshermanOP•9/6/23, 2:39 PM

that meant not built in the repo, but could be clarified

Gerblesh•9/6/23, 2:39 PM

Bbsherman I agree its a gray area. But the community did agree on it in the past, and it f...

Gerblesh•9/6/23, 2:46 PM

Yeah, I understand, I'd just rather not have to enroll the key when my controller already works without the modules

GGerblesh IMO we should avoid putting kernel modules in main, save for nvidia

bshermanOP•9/6/23, 2:47 PM

But yeah, we do have some trouble where either becasue the kmods are signed and not loading, or the controller doesn't like our driver, it causes issues... so, I question the decision, too, even though i was part of it. The bigger issue is I'd want a good plan before REMOVING something.

I do know the akmods repo needs to be better documented... i've filed issues for it so I don't forget, but anyone can help with it.

So one idea would be:

make sure akmods repo is well documented on how users can include any of those individual drivers in their custom repos
remove the game controller drivers from
```
*-main
```
```
*-main
```
(would still leave the v4l driver, i think)
add those game controller drivers to bluefine/bazzite

Gerblesh•9/6/23, 2:47 PM

Makes sense

bshermanOP•9/6/23, 2:48 PM

I should be clear, I'm not very sympathetic to the "i don't like enrolling a secure boot MOK"

but i'm very sympathetic to pre-installing things that can cause trouble, specifically that seems to be the xone/xpad-noone driver compo

bshermanOP•9/6/23, 2:49 PM

and I'm also biased to as few additions to main as possible

Bbsherman and I'm also biased to as few additions to main as possible

bshermanOP•9/6/23, 2:53 PM

that's been a learned bias though, as I more and more see main as the foundation of a toolkit, and... anything added is difficult/impossible to remove downstream

j0rge•9/6/23, 2:58 PM

I wouldn't say it's a bias, that's just how you're supposed to do it.

Waffleophagus•9/6/23, 4:36 PM

What is the status of Forge? I was listening to a podcast yesterday that was talking about Gitea beginning the process of trying to 1:1 github actions and it made me think "huh, I wanna have my ublue running entirely self hosted, maybe this'll work"

Waffleophagus•9/6/23, 4:36 PM

https://docs.gitea.com/next/usage/actions/overview I'd love to look into it, and maybe help push forge along if it fits

Gitea Actions | Gitea Documentation

Starting with Gitea 1.19, Gitea Actions are available as a built-in CI/CD solution.

WWaffleophagus What is the status of Forge? I was listening to a podcast yesterday that was tal...

j0rge•9/6/23, 4:37 PM

someone needs to try it and see if it works.

Waffleophagus•9/6/23, 4:38 PM

I'm down. On the "vision" I won't be doing 4 though

PXE boot the clients, select ublue in the menu

PXE boot the clients, select ublue in the menu

Waffleophagus•9/6/23, 4:39 PM

so this looks like it'd be deployed via podman cluster?

Waffleophagus•9/6/23, 4:39 PM

ok, so ucore VM

Waffleophagus•9/6/23, 4:40 PM

Really I just want to in house my image creation

j0rge•9/6/23, 4:42 PM

it should run on any linux with podman or docker iirc

Waffleophagus•9/6/23, 4:43 PM

Is it a single container? Cause if so, I'll just attempt to throw it in the mix on unraid

Waffleophagus•9/6/23, 4:43 PM

if its orchastrating multiple containers I may throw a VM at it for testing

j0rge•9/6/23, 4:43 PM

https://github.com/ublue-os/forge/blob/main/forge-pod.yml

GitHub

forge/forge-pod.yml at main · ublue-os/forge

On-prem Universal Blue. Contribute to ublue-os/forge development by creating an account on GitHub.

j0rge•9/6/23, 4:43 PM

it's a few

Waffleophagus•9/6/23, 4:43 PM

yea, I'll just spin up a VM to test it in

Waffleophagus•9/6/23, 4:43 PM

keep it contained

WWaffleophagus https://docs.gitea.com/next/usage/actions/overview I'd love to look into it, and...

bshermanOP•9/6/23, 4:44 PM

I use gitea for git and their actions with act_runner for CI builds and as a container registry...

i can tell you that the buildah actions we use today don't work on act_runner, but could almost certainly be swapped out for docker's builder action (and still probably run against podman, if you like)

Waffleophagus•9/6/23, 4:45 PM

Honestly if Forge does what it advertises (and if it doesn't, I bet its way further along than me starting from scratch) I think its probably the better starting point than trying to slam gitea in

Waffleophagus•9/6/23, 4:45 PM

¯\_(ツ)_/¯

Waffleophagus•9/6/23, 4:45 PM

but that conversation made me really curious to get it all building locally

Waffleophagus•9/6/23, 4:46 PM

Especially since I'll have multiple machines on the same image, save internet bandwidth

Waffleophagus•9/6/23, 4:46 PM

have it build locally then distribute to the entire house

bshermanOP•9/6/23, 4:46 PM

yea, i'd like to build locally too... i'd kinda like to get the workflows setup so theyd run on either github or gitea if possible

WWaffleophagus have it build locally then distribute to the entire house

bshermanOP•9/6/23, 4:46 PM

this is related

bshermanOP•9/6/23, 4:46 PM

I saw an interesting post by Walters today: https://github.com/coreos/fedora-coreos-tracker/issues/1263#issuecomment-1680999863

The important line is:

[Users can] mirror the OS update containers on their own to a registry and update it on their own timeframe and schedule. Which is what they already need to know how to do for application containers!

the context is replacing zincati/simplifying its function and instead of having complexity, managing things in a better way.

Got me thinking, having frequent upgrades of ucore/ublue is great, but the best way to gate them is to install from a local mirror, and then I choose when I want to sync the mirror with ghcr... it not only provides a buffer between build and install, but saves bandwidth for those are are running ublue/ucore on multiple systems.

Waffleophagus•9/6/23, 4:46 PM

yea, read that

bshermanOP•9/6/23, 4:46 PM

so, even if building in github, could just mirror to a local container registry

Waffleophagus•9/6/23, 4:47 PM

My inclination, at least with some of this, is to get it off of github

Waffleophagus•9/6/23, 4:47 PM

Personally I don't love the idea of "hey, my entire system configuration is in a public repo"

Waffleophagus•9/6/23, 4:48 PM

the tradeoffs right now are totally in the "worth it" camp, but if I can help get it to where its entirely onprem I'll happily be a guinea pig.

Waffleophagus•9/6/23, 4:50 PM

really dumb question... how large are these images? Like I'm looking at one of the images on github and for the life of me it doesn't show a filesize.

WWaffleophagus really dumb question... how large are these images? Like I'm looking at one of t...

bshermanOP•9/6/23, 4:52 PM

total size is around 6GB depending which variant and nvidia or no

bshermanOP•9/6/23, 4:52 PM

you can just

podman pull

podman pull

an image to see

Waffleophagus•9/6/23, 4:52 PM

ah, larger than I thought.

Waffleophagus•9/6/23, 4:52 PM

Not huge though.

bshermanOP•9/6/23, 4:53 PM

and really most of the work I do for ublue involves locally running

podman build Containerfile

podman build Containerfile

from our various repos with different build args

bshermanOP•9/6/23, 4:53 PM

usually only the github workflows themselves need to be in github for testing

Waffleophagus•9/6/23, 4:55 PM

at ~6gb, to replicate github's 90 day retention, that's about a half a TB per image

Waffleophagus•9/6/23, 4:55 PM

ouch

Waffleophagus•9/6/23, 4:55 PM

I'd probably cut back a bit

Waffleophagus•9/6/23, 4:57 PM

one of the things I've been thinking of doing, which is really dumb, is to do a local cached repo for dnf, then once you have that, in theory you could build N images on the fly from from it, but that sounds like hyper-overkill

I agree its a gray area. But the community did agree on it in the past, and it fits scope to some de

Similar Threads

Similar Threads

Similar Threads