@j0rge Currently a hypothetical question - if I were to work on a cybersecurity spin of ublue (conta

@j0rge Currently a hypothetical question - if I were to work on a cybersecurity spin of ublue (containing stuff like metasploit, burp suite, wireshark etc), would you be willing to accept that as an "official" ublue project?
Like an ~~immutable~~ image-based version of Kali Linux

j0rge•1/16/24, 12:23 AM

I'm kinda thinking pause on new images in the org and concentrating on some tech debt

j0rge•1/16/24, 12:23 AM

and I kind of wish there were other orgs making images so it doesn't look like we're the only ones that can do this

j0rge•1/16/24, 12:24 AM

like, it's not looking like beyond is changing, still unsure about this kera thing (who's using it?), and we have cinnamon and another one that are out of band too

j0rge•1/16/24, 12:25 AM

bazzifin were originally intended as hello worlds but kind of became "products"

RobertOP•1/16/24, 12:26 AM

I'll probably move my images to their own dedicated org and start thinking of them as real projects sometime soon

j0rge•1/16/24, 12:26 AM

I thought about removing bluefin from the org but that's both bad and good.

j0rge•1/16/24, 12:26 AM

and also this was supposed to be in Fedora for 38 so by now I think we were expecting there to be people doing this already

j0rge•1/16/24, 12:27 AM

then we had a long pause

Jj0rge like, it's not looking like beyond is changing, still unsure about this kera thi...

tryhardsoccermomswag•1/16/24, 12:27 AM

i was thinking something similar when i posted the community image list on discourse. some of these images seem to be unmaintained or technically do not fit into our project

tryhardsoccermomswag•1/16/24, 12:27 AM

i know that's different than official

tryhardsoccermomswag•1/16/24, 12:27 AM

but idk something i was thinking

j0rge•1/16/24, 12:27 AM

we never really got around to calling anything official

tryhardsoccermomswag•1/16/24, 12:28 AM

yea

RRobert @j0rge Currently a hypothetical question - if I were to work on a cybersecurity ...

fiftydinar•1/16/24, 12:28 AM

Idk if this fits your "security" goal, but secureblue exists:
https://github.com/secureblue/secureblue

So maybe you can help there too with your knowledge

j0rge•1/16/24, 12:28 AM

what I for sure don't want to do is be the "come up with an idea and ublue will host it for you" because that's just running a SaaS and that's out of scope. Though we made an exception for like, working with an upstream, etc.

Ffiftydinar Idk if this fits your "security" goal, but secureblue exists: https://github.com...

RobertOP•1/16/24, 12:29 AM

Yeah, this looks like a cool project, but it's more privacy focused, rather than the purple-team (attack/defend) focused image I'm looking to create.

RRobert Yeah, this looks like a cool project, but it's more privacy focused, rather than...

fiftydinar•1/16/24, 12:29 AM

Interestingly, in their goal, it says security only

The following are not in scope for this project:
"Anything related to increasing "privacy", especially when at odds with improving security"

Jj0rge like, it's not looking like beyond is changing, still unsure about this kera thi...

ChaiQi•1/16/24, 12:30 AM

Still a placeholder because the Kera developer is still refactoring it for contributions between freelance work and attempting to move from Turkey to Germany

Ttryhardsoccermomswag i was thinking something similar when i posted the community image list on disco...

Noel•1/16/24, 12:30 AM

Do we know who maintains the other spins that we have? Like the ones with cinnamon? Are those upstream and we just build those?

fiftydinar•1/16/24, 12:30 AM

secureblue vs securepurple will be?

Noel•1/16/24, 12:32 AM

Like the main images I know from upstream are Silverblue, Kinoite, Sericea, and CoreOS.

j0rge•1/16/24, 12:32 AM

the ones not in main are out of band

Noel•1/16/24, 12:32 AM

But I have seen on our full image list many more than that.

j0rge•1/16/24, 12:33 AM

oh and budgie will go away with the 38 cleanup because onyx did not exist at the time

Noel•1/16/24, 12:33 AM

Oh right Onyx as well.

fiftydinar•1/16/24, 12:33 AM

LxQT Ublue based image is worse than Fedora's Lazurite as an example

ChaiQi•1/16/24, 12:33 AM

Lazurite is new

j0rge•1/16/24, 12:33 AM

we turned lxqt off

fiftydinar•1/16/24, 12:34 AM

yes, just making an example on how unofficial images can be worse

fiftydinar•1/16/24, 12:34 AM

especially if they are not maintained

j0rge•1/16/24, 12:34 AM

yeah, no one ever maintained that

Jj0rge the ones not in main are out of band

Noel•1/16/24, 12:34 AM

Ahhh ok. That helps.

j0rge•1/16/24, 12:35 AM

and some of them never need to be touched

j0rge•1/16/24, 12:35 AM

like cinnamon looks abandoned but it also only needs to be touched twice a year

Noel•1/16/24, 12:36 AM

I see, so the supported ones would be in our build Ublue job on main.

j0rge•1/16/24, 12:36 AM

though latest tag seems out of date

Noel•1/16/24, 12:36 AM

Like this one: https://github.com/ublue-os/main/actions/runs/7530642961

GitHub

build-ublue · ublue-os/main@cb54f2c

OCI base images of Fedora with batteries included. Contribute to ublue-os/main development by creating an account on GitHub.

tryhardsoccermomswag•1/16/24, 12:37 AM

thats the one yeah

j0rge•1/16/24, 12:37 AM

https://github.com/ublue-os/cinnamon/pkgs/container/cinnamon-main/versions

j0rge•1/16/24, 12:37 AM

but also no one is using it

tryhardsoccermomswag•1/16/24, 12:37 AM

we can have our own linux mint clone right here /s

Jj0rge https://github.com/ublue-os/cinnamon/pkgs/container/cinnamon-main/versions

Noel•1/16/24, 12:38 AM

Do we think it might wise to cut down the amount of images we advertise if they are going unused / unsupported?

j0rge•1/16/24, 12:39 AM

we don't really advertise other than pointing people to the list

j0rge•1/16/24, 12:39 AM

but some of those are for sure worse than others

Jj0rge but some of those are for sure worse than others

Noel•1/16/24, 12:39 AM

Right, I just get concerned if we are pointing people to them and they have a bad experience, it reflects poorly on the project.

Noel•1/16/24, 12:40 AM

Just food for thought, I don't think we need to make any immediate decisions around it.

j0rge•1/16/24, 12:41 AM

F38's EOL will force us to decide, so that won't be a problem until at least may

j0rge•1/16/24, 12:42 AM

and for some of them you don't explicitly delete, we just don't bring forward. Like for Budgie we never brought it to 39, so it'll just get garbage collected

Noel•1/16/24, 12:43 AM

For sure!

j0rge•1/16/24, 12:44 AM

deepin is also pretty behind as well