Universal Blue•17mo ago

HeliumLeadOS Sorry...

~~Helium~~LeadOS
Sorry...

RRobert ~~Helium~~LeadOS Sorry...

Noel•8/15/24, 4:42 PM

Wow shots fired. He just got in here lol

imbev•8/15/24, 4:43 PM

Which tooling creates the current ublue ostree commits?

Iimbev Which tooling creates the current ublue ostree commits?

Kyle Gospo•8/15/24, 4:43 PM

buildah & rpm-ostree

Kyle Gospo•8/15/24, 4:43 PM

and as long as bootc is in the image

Kyle Gospo•8/15/24, 4:43 PM

and you don't layer anything

Kyle Gospo•8/15/24, 4:44 PM

you can use bootc on any ublue image today

imbev•8/15/24, 4:44 PM

What I mean to ask is how are ublue images currently built? I see https://github.com/castrojo/ublue, but that appears to be no longer used?

KKyle Gospo you can use bootc on *any* ublue image *today*

RobertOP•8/15/24, 4:44 PM

If you use bootc on an existing ublue image, is it any different to an image where you started with bootc from the beginning?

RRobert If you use bootc on an existing ublue image, is it any different to an image whe...

Kyle Gospo•8/15/24, 4:44 PM

nope

Iimbev What I mean to ask is how are ublue images currently built? I see https://github...

Kyle Gospo•8/15/24, 4:44 PM

https://github.com/ublue-os/main/

GitHub

GitHub - ublue-os/main: OCI base images of Fedora with batteries in...

OCI base images of Fedora with batteries included. Contribute to ublue-os/main development by creating an account on GitHub.

RRobert If you use bootc on an existing ublue image, is it any different to an image whe...

imbev•8/15/24, 4:45 PM

How does rpm-ostree handle /etc?

antheas•8/15/24, 4:45 PM

it doesnt

antheas•8/15/24, 4:45 PM

ostree does

antheas•8/15/24, 4:45 PM

with a 3way merge before rebooting to the new deployment

antheas•8/15/24, 4:45 PM

new files and changed files remain

antheas•8/15/24, 4:45 PM

in the new image, and replace the new image's /etc

imbev•8/15/24, 4:46 PM

That behavior is shared by bootc

Iimbev That behavior is shared by bootc

Kyle Gospo•8/15/24, 4:46 PM

because bootc uses ostree

antheas•8/15/24, 4:46 PM

bootc is a thin layer over ostree so yes

Kyle Gospo•8/15/24, 4:46 PM

it's all ostree

Noel•8/15/24, 4:47 PM

All roads lead back to OSTree lol. I wish rpm-ostree was named something different. I got confused by that for the longest time.

antheas•8/15/24, 4:50 PM

the fedora bootc repo is kinda cursed imo

antheas•8/15/24, 4:50 PM

the way they build the base image is very complicated

imbev•8/15/24, 4:50 PM

Looking at https://github.com/ublue-os/main/blob/main/Containerfile, the install scripts will need to be replaced by bootc configuration such as https://gitlab.com/fedora/bootc/base-images/-/blob/main/tier-0/kernel.yaml for the base images, and regular dnf commands for downstream images

GitLab

tier-0/kernel.yaml · main · fedora / bootc / Base Images · GitLab

GitLab.com

Iimbev Looking at https://github.com/ublue-os/main/blob/main/Containerfile, the install...

antheas•8/15/24, 4:51 PM

https://gitlab.com/fedora/bootc/base-images/-/blob/main/tier-0/kernel.yaml this is rpm-ostree stuff

Aantheas the way they build the base image is very complicated

imbev•8/15/24, 4:51 PM

include this.yaml, include that.yaml

antheas•8/15/24, 4:51 PM

youre not meant to use as an end user

antheas•8/15/24, 4:51 PM

because everyone here was like no

antheas•8/15/24, 4:51 PM

i aint using that

antheas•8/15/24, 4:51 PM

lmao

antheas•8/15/24, 4:51 PM

i had suggested it

Aantheas https://gitlab.com/fedora/bootc/base-images/-/blob/main/tier-0/kernel.yaml this ...

imbev•8/15/24, 4:51 PM

really? I expect that'll make migration easier

antheas•8/15/24, 4:52 PM

Colin found his niche, people like containers, so everything is a container now

antheas•8/15/24, 4:52 PM

and the treefile stuff went out the window

RobertOP•8/15/24, 4:52 PM

Timothee currently maintains that rpm-ostree compose stuff, and will eventually move over to the bootc base images when things like local layering is sorted
So the raw compose files will hopefully always be abstracted away from us

KKyle Gospo https://github.com/ublue-os/main/

imbev•8/15/24, 4:56 PM

Does that handle all of ublue configuration? Or is that only for base images?

Iimbev Does that handle all of ublue configuration? Or is that only for base images?

RobertOP•8/15/24, 4:57 PM

This is just the base images. So basic hardware enablement and unopinionated changes.
More opinionated images (Bluefin/Bazzite) use the images built in ublue-os/main as base images in their containerfiles

FROM ghcr.io/ublue-os/silverblue-main:40
COPY <bluefin-files>
RUN rpm-ostree install <bluefin-packages>

FROM ghcr.io/ublue-os/silverblue-main:40
COPY <bluefin-files>
RUN rpm-ostree install <bluefin-packages>

RRobert This is just the base images. So basic hardware enablement and unopinionated ch...

imbev•8/15/24, 4:59 PM

Ok. Is there anything preventing usage of dnf within the downstream Containerfiles?

antheas•8/15/24, 4:59 PM

yeah, an error condition

antheas•8/15/24, 4:59 PM

but other than that theoretically nothing

imbev•8/15/24, 5:00 PM

A migration to bootc would make that possible instead of using

rpm-ostree install

rpm-ostree install

antheas•8/15/24, 5:00 PM

something in fedora-bootc enables it

antheas•8/15/24, 5:00 PM

which is not done if the image comes from the other repos

antheas•8/15/24, 5:01 PM

if you do that dnf will work in your image

antheas•8/15/24, 5:02 PM

bootc is broadly a rebrand of the portfolio,

rpm-ostree install

rpm-ostree install

is a reimplementation of

dnf install

dnf install

when running in a container

antheas•8/15/24, 5:03 PM

the problem with building base images using OCI is preserving permissions

antheas•8/15/24, 5:03 PM

until ubuntu 24, containers used to crap on permissions so the image would not work afterwards

antheas•8/15/24, 5:03 PM

but now that is much less of a problem if you use a recent podman

Iimbev Ok. Is there anything preventing usage of dnf within the downstream Containerfil...

fiftydinar•8/15/24, 5:03 PM

dnf5

dnf5

appears to work in a Containerfile, but can't guarantee if there are some micro-issues with it, like with missing SeLinux labels, permissions & such

antheas•8/15/24, 5:04 PM

every selinux label you add in a container is thrown away

HeliumLeadOS Sorry...

Similar Threads

Similar Threads

Similar Threads