Idk if this fits your "security" goal, but secureblue exists: https://github.com/secureblue/securebl

Idk if this fits your "security" goal, but secureblue exists:
https://github.com/secureblue/secureblue

So maybe you can help there too with your knowledge

j0rge•1/16/24, 12:28 AM

what I for sure don't want to do is be the "come up with an idea and ublue will host it for you" because that's just running a SaaS and that's out of scope. Though we made an exception for like, working with an upstream, etc.

Ffiftydinar Idk if this fits your "security" goal, but secureblue exists: https://github.com...

Robert•1/16/24, 12:29 AM

Yeah, this looks like a cool project, but it's more privacy focused, rather than the purple-team (attack/defend) focused image I'm looking to create.

RRobert Yeah, this looks like a cool project, but it's more privacy focused, rather than...

fiftydinarOP•1/16/24, 12:29 AM

Interestingly, in their goal, it says security only

The following are not in scope for this project:
"Anything related to increasing "privacy", especially when at odds with improving security"

Jj0rge like, it's not looking like beyond is changing, still unsure about this kera thi...

ChaiQi•1/16/24, 12:30 AM

Still a placeholder because the Kera developer is still refactoring it for contributions between freelance work and attempting to move from Turkey to Germany

Ttryhardsoccermomswag i was thinking something similar when i posted the community image list on disco...

Noel•1/16/24, 12:30 AM

Do we know who maintains the other spins that we have? Like the ones with cinnamon? Are those upstream and we just build those?

fiftydinarOP•1/16/24, 12:30 AM

secureblue vs securepurple will be?

Noel•1/16/24, 12:32 AM

Like the main images I know from upstream are Silverblue, Kinoite, Sericea, and CoreOS.

j0rge•1/16/24, 12:32 AM

the ones not in main are out of band

Noel•1/16/24, 12:32 AM

But I have seen on our full image list many more than that.

j0rge•1/16/24, 12:33 AM

oh and budgie will go away with the 38 cleanup because onyx did not exist at the time

Noel•1/16/24, 12:33 AM

Oh right Onyx as well.

fiftydinarOP•1/16/24, 12:33 AM

LxQT Ublue based image is worse than Fedora's Lazurite as an example

ChaiQi•1/16/24, 12:33 AM

Lazurite is new

j0rge•1/16/24, 12:33 AM

we turned lxqt off

fiftydinarOP•1/16/24, 12:34 AM

yes, just making an example on how unofficial images can be worse

fiftydinarOP•1/16/24, 12:34 AM

especially if they are not maintained

j0rge•1/16/24, 12:34 AM

yeah, no one ever maintained that

Jj0rge the ones not in main are out of band

Noel•1/16/24, 12:34 AM

Ahhh ok. That helps.

j0rge•1/16/24, 12:35 AM

and some of them never need to be touched

j0rge•1/16/24, 12:35 AM

like cinnamon looks abandoned but it also only needs to be touched twice a year

Noel•1/16/24, 12:36 AM

I see, so the supported ones would be in our build Ublue job on main.

j0rge•1/16/24, 12:36 AM

though latest tag seems out of date

Noel•1/16/24, 12:36 AM

Like this one: https://github.com/ublue-os/main/actions/runs/7530642961

GitHub

build-ublue · ublue-os/main@cb54f2c

OCI base images of Fedora with batteries included. Contribute to ublue-os/main development by creating an account on GitHub.

tryhardsoccermomswag•1/16/24, 12:37 AM

thats the one yeah

j0rge•1/16/24, 12:37 AM

https://github.com/ublue-os/cinnamon/pkgs/container/cinnamon-main/versions

j0rge•1/16/24, 12:37 AM

but also no one is using it

tryhardsoccermomswag•1/16/24, 12:37 AM

we can have our own linux mint clone right here /s

Jj0rge https://github.com/ublue-os/cinnamon/pkgs/container/cinnamon-main/versions

Noel•1/16/24, 12:38 AM

Do we think it might wise to cut down the amount of images we advertise if they are going unused / unsupported?

j0rge•1/16/24, 12:39 AM

we don't really advertise other than pointing people to the list

j0rge•1/16/24, 12:39 AM

but some of those are for sure worse than others

Jj0rge but some of those are for sure worse than others

Noel•1/16/24, 12:39 AM

Right, I just get concerned if we are pointing people to them and they have a bad experience, it reflects poorly on the project.

Noel•1/16/24, 12:40 AM

Just food for thought, I don't think we need to make any immediate decisions around it.

j0rge•1/16/24, 12:41 AM

F38's EOL will force us to decide, so that won't be a problem until at least may

j0rge•1/16/24, 12:42 AM

and for some of them you don't explicitly delete, we just don't bring forward. Like for Budgie we never brought it to 39, so it'll just get garbage collected

Noel•1/16/24, 12:43 AM

For sure!

j0rge•1/16/24, 12:44 AM

deepin is also pretty behind as well

j0rge•1/16/24, 12:44 AM

but hopefully at some point fedora will have OCIs of the supported ones, then it's easy, we'll only make those.

Noel•1/16/24, 12:45 AM

Yeah, I just noticed cinnamon has it's own repo: https://github.com/ublue-os/cinnamon

j0rge•1/16/24, 12:46 AM

right, and the reason we make it is Fedora makes a Cinnamon spin but doesn't make an OCI of it

j0rge•1/16/24, 12:46 AM

like what I hope is once oci is the default all the spins have an official OCI

Noel•1/16/24, 12:46 AM

Also I can't delete link previews on mobile discord

Jj0rge like what I hope is once oci is the default all the spins have an official OCI

Noel•1/16/24, 12:47 AM

That makes sense! I would hope they would!

j0rge•1/16/24, 12:48 AM

so maybe that's just fine, "we'll run a cinnamon build as a community courtesy until there's an official OCI from Fedora." and then the quality will be based on demand.

Noel•1/16/24, 12:49 AM

I wonder if I should reach out to Matthew Miller on Matrix about the state of OCI over there. I gotta think there is more pressure now that Red Hat is working on it.

Noel•1/16/24, 12:49 AM

He's pretty responsive in there from what I can tell.

j0rge•1/16/24, 12:49 AM

even the naming hasn't gone anywhere lol, don't get your hopes up

Noel•1/16/24, 12:50 AM

Fedora 40 isn't that far away.

NNoel Also I can't delete link previews on mobile discord 😠

ChaiQi•1/16/24, 12:50 AM

Yeah, have to use < > to suppress it, unfortunately

j0rge•1/16/24, 12:50 AM

I'm fully expecting another punt,but at least all the components will be finished. It won't be because the tech isn't there it'll be because of process, but that's fine, another 6 months of beta lol

Jj0rge I'm fully expecting another punt,but at least all the components will be finishe...

Noel•1/16/24, 12:52 AM

For sure. That's my prediction too. I wonder if Timothee has some insight I can garner. Set up an internal call with him or something.