Hi, I want to customize flatpak configuration of my image and replace the fedora repos with flathub,

Hi, I want to customize flatpak configuration of my image and replace the fedora repos with flathub, I believe that this configuration is not a part of the ostree image and that it should be configured with a tool like yafti, but I am not sure about that

budalaOP•6/19/24, 12:48 AM

What is the best way to do this?

Bbudala Hi, I want to customize flatpak configuration of my image and replace the fedora...

Kyle Gospo•6/19/24, 12:48 AM

fedora ships flathub now

Kyle Gospo•6/19/24, 12:48 AM

this was needed prior to F40

KKyle Gospo fedora ships flathub now

budalaOP•6/19/24, 12:48 AM

it does but it shipis both user and system and it has to be enabled by the switch

budalaOP•6/19/24, 12:48 AM

they also add the fedora repos

Kyle Gospo•6/19/24, 12:48 AM

We customize the flatpak repos via hardware/user setup scripts

Kyle Gospo•6/19/24, 12:49 AM

both are systemd services

budalaOP•6/19/24, 12:49 AM

I want to just have one user flathub repo and nothing else

KKyle Gospo both are systemd services

budalaOP•6/19/24, 12:49 AM

Can you link me the services please?

Kyle Gospo•6/19/24, 12:49 AM

https://github.com/ublue-os/bazzite/blob/main/system_files/desktop/shared/usr/libexec/bazzite-hardware-setup

GitHub

bazzite/system_files/desktop/shared/usr/libexec/bazzite-hardware-se...

Bazzite is a custom image built upon Fedora Atomic Desktops that brings the best of Linux gaming to all of your devices - including your favorite handheld. - ublue-os/bazzite

Kyle Gospo•6/19/24, 12:49 AM

https://github.com/ublue-os/bazzite/blob/main/system_files/desktop/shared/usr/libexec/bazzite-user-setup

GitHub

bazzite/system_files/desktop/shared/usr/libexec/bazzite-user-setup ...

Bazzite is a custom image built upon Fedora Atomic Desktops that brings the best of Linux gaming to all of your devices - including your favorite handheld. - ublue-os/bazzite

budalaOP•6/19/24, 12:50 AM

I'll look into these, thanks

budalaOP•6/19/24, 12:50 AM

I don't know why I make so many typos, probably because it's a bit late

KKyle Gospo added extra line at end

RoyalOughtness•6/19/24, 1:12 AM

do you mind doing a click on hwe for a rebuild

RoyalOughtness•6/19/24, 1:12 AM

just so all the images are good on latest

Kyle Gospo•6/19/24, 1:13 AM

Done

RoyalOughtness•6/19/24, 1:14 AM

thanks

RoyalOughtness•6/19/24, 2:30 AM

one question is, will this affect ucore at some point down the line? I assume it would

RoyalOughtness•6/19/24, 2:31 AM

probably good to do it well in advance now that we know what the fix is

j0rge•6/19/24, 3:31 AM

@Kyle Gospo back

j0rge•6/19/24, 3:31 AM

https://universal-blue.discourse.group/t/bluefin-no-longer-boots-after-update-bad-shim-signature/2373/10

Universal Blue

Bluefin no longer boots after update ("bad shim signature")

Yeah we’re going to see if we can fix this without having to do all that, hang tight if you can or just stay on yesterday’s image.

j0rge•6/19/24, 3:31 AM

what am I saying here

j0rge•6/19/24, 3:31 AM

sorry, I'm slow and sauced rn lol

j0rge•6/19/24, 3:32 AM

hung out with an old oss friend, described his action usage, we're so small still lol

Kyle Gospo•6/19/24, 3:59 AM

You can just say it's fixed, and to ensure they have our akmod secure boot key enrolled

fiftydinar•6/19/24, 11:29 AM

Should the MOK screen be requested always now instead of in UEFI only in isogenerator?

fiftydinar•6/19/24, 11:29 AM

nvm, it's all good

M2•6/19/24, 12:42 PM

Uefi is the only thing with secureboot

M2•6/19/24, 12:42 PM

My question is how did this not trigger when F40 was released?

antheas•6/19/24, 1:10 PM

how did this happen? there are no breaking changes with 6.9

antheas•6/19/24, 1:10 PM

did fedora really change the signing key?

M2•6/19/24, 1:20 PM

That's what's confusing for me. There were reports that something like this happened for regular silverblue installs during F40 beta but we never got hit

antheas•6/19/24, 1:21 PM

yeah because ublue has a custom signing key

EyeCantCU•6/19/24, 1:24 PM

Trying to understand more of it but the gist is the shim for grub needed to be updated but SB doesn't currently do that. Why it needed to be updated isn't clear to me

antheas•6/19/24, 1:25 PM

but from what i understand fedora cant update grub or the shim

antheas•6/19/24, 1:25 PM

so they must have cycled the signing key

EyeCantCU•6/19/24, 1:25 PM

Possibly. I'll link the issue if you all want to dig with me

antheas•6/19/24, 1:25 PM

i looked through it

antheas•6/19/24, 1:25 PM

cant understand what happened

EyeCantCU•6/19/24, 1:27 PM

Yeah, I've read through most of it. Causation isn't so clear: https://github.com/fedora-silverblue/issue-tracker/issues/543

EyeCantCU•6/19/24, 1:27 PM

And... Why now and not 3 months ago? What was shielding us?

antheas•6/19/24, 1:28 PM

so the shim contains the singing keys the kernel is allowed to use

antheas•6/19/24, 1:28 PM

old shim = not new keys

antheas•6/19/24, 1:29 PM

probably most ublue installs use a new shim

antheas•6/19/24, 1:29 PM

still not clear what happened to the kernel

antheas•6/19/24, 1:29 PM

bazzite is not affected as it does not use the fedora key anywhere else than grub

antheas•6/19/24, 1:29 PM

and grub is paired with the shim

EyeCantCU•6/19/24, 1:33 PM

Almost sounds like we could've prevented this in 40 at least with this?:

RUN rpm-ostree install bootupd \
    &&\
    /usr/bin/bootupctl backend generate-update-metadata \
    && \
    ostree container commit

RUN rpm-ostree install bootupd \
    &&\
    /usr/bin/bootupctl backend generate-update-metadata \
    && \
    ostree container commit

antheas•6/19/24, 1:34 PM

the bootloader resides in /efi

Hi, I want to customize flatpak configuration of my image and replace the fedora repos with flathub,

Similar Threads

Similar Threads

Similar Threads