Universal Blue•17mo ago

It's enabled in the base image builds https://gitlab.com/fedora/bootc/base-images/-/blob/main/tier-0

It's enabled in the base image builds
https://gitlab.com/fedora/bootc/base-images/-/blob/main/tier-0/ostree.yaml#L13-14

GitLab

tier-0/ostree.yaml · main · fedora / bootc / Base Images · GitLab

GitLab.com

antheas•8/20/24, 3:30 PM

If it takes 20s off the update size

antheas•8/20/24, 3:30 PM

I'm up for it

antheas•8/20/24, 3:30 PM

Queue the 200 proton bugs

GGerblesh https://github.com/ublue-os/bazzite/blob/main/system_files/desktop/shared/usr/li...

antheas•8/20/24, 3:30 PM

After rechunk this shouldn't be rewuired

antheas•8/20/24, 3:30 PM

Plz check gamescope has the correct perms

antheas•8/20/24, 3:31 PM

Caps

antheas•8/20/24, 3:32 PM

At least it has the cap before it enters rechunk

antheas•8/20/24, 3:32 PM

And every other file with caps works after rechunk

RRobert It's enabled in the base image builds https://gitlab.com/fedora/bootc/base-image...

Noel•8/20/24, 3:33 PM

I'd be curious if it still works even without composefs

Noel•8/20/24, 3:33 PM

what I was told by Dan Walsh was composefs is primarily used with a feature in the kernel to verify files on the disk to ensure they have not changed.

NNoel I'd be curious if it still works even without composefs

Gerblesh•8/20/24, 3:34 PM

I think bootc works without yes

Gerblesh•8/20/24, 3:34 PM

We had it for a period of time on uBlue images

Noel•8/20/24, 3:34 PM

OK, that's what I figured.

antheas•8/20/24, 3:35 PM

Yeah it enables verity on the base image

antheas•8/20/24, 3:36 PM

So the whole image is signed

GGerblesh We had it for a period of time on uBlue images

Noel•8/20/24, 3:36 PM

it was. I'm not sure what happened there. @M2 and I enabled it and then we had to disable it for some reason. Then I kinda went on hiatus for a bit.

antheas•8/20/24, 3:36 PM

The iso broke

R3ZEN•8/20/24, 3:36 PM

Guys I installed bazzite os gnome on my msi claw and my controls and not working

Noel•8/20/24, 3:36 PM

oh, that's a bug we should file with @Skynet then. bootc should work.

RR3ZEN Guys I installed bazzite os gnome on my msi claw and my controls and not working

antheas•8/20/24, 3:36 PM

Nice, open a help thread plz

Gerblesh•8/20/24, 3:36 PM

Does the composefs changes also change us to UKI?

RR3ZEN Guys I installed bazzite os gnome on my msi claw and my controls and not working

Noel•8/20/24, 3:36 PM

🛟bazzite-help

antheas•8/20/24, 3:37 PM

We can't use uki with secure boot

antheas•8/20/24, 3:37 PM

Well with Ms secure boot

antheas•8/20/24, 3:37 PM

If some of you want to enroll your own keys you can use uki

Gerblesh•8/20/24, 3:38 PM

Oh yeah that's right lol because Microsoft only wants to sign a shim

antheas•8/20/24, 3:38 PM

Users have to sign their ukis

Aantheas Nice, open a help thread plz

R3ZEN•8/20/24, 3:38 PM

Guys help

antheas•8/20/24, 3:38 PM

The infra for producing ukis that can adapt to devices is not there yet

antheas•8/20/24, 3:39 PM

At least for bazzite

RR3ZEN Guys help

Noel•8/20/24, 3:39 PM

bazzite or #bazzite-help are the best places to ask for help. This channel is used for Universal Blue Development.

antheas•8/20/24, 3:39 PM

Perhaps it's there for bluefin

antheas•8/20/24, 3:40 PM

With ukis you have to sign all kernel parameters

antheas•8/20/24, 3:40 PM

Any user will use

antheas•8/20/24, 3:40 PM

And the users can't change them afterwards

Aantheas With ukis you have to sign all kernel parameters

Gerblesh•8/20/24, 3:42 PM

How could I test this in a custom image?

antheas•8/20/24, 3:42 PM

Uh have fun reading the systemd uki docs

antheas•8/20/24, 3:42 PM

I only know what you have to do in theory

antheas•8/20/24, 3:43 PM

If secure boot is on the uki ignores the kernel parameters you pass to it

antheas•8/20/24, 3:43 PM

And you have to make uki extensions that get conditionally loaded based on the device to change the kernel params

Aantheas Uh have fun reading the systemd uki docs

Gerblesh•8/20/24, 3:45 PM

Does ostree/silverblue even support booting them?

NNoel oh, that's a bug we should file with @Skynet then. bootc should work.

Skynet•8/20/24, 3:46 PM

What's a bug? The tests I run on my repo use a bootc image. If they're passing, then you should be able to install a bootc image since installing is one of the tests

SSkynet What's a bug? The tests I run on my repo use a bootc image. If they're passing, ...

Noel•8/20/24, 3:47 PM

Yeah, I feel like I need to do some new testing as I feel like we aren't operating on current info.

GGerblesh Does ostree/silverblue even support booting them?

antheas•8/20/24, 3:47 PM

Perhaps not generating them yet

antheas•8/20/24, 3:47 PM

But if you make them and make a grub config booting them should work