We had it for a period of time on uBlue images
We had it for a period of time on uBlue images
NOK, that's what I figured.
AYeah it enables verity on the base image
ASo the whole image is signed
Nit was. I'm not sure what happened there. @M2 and I enabled it and then we had to disable it for some reason. Then I kinda went on hiatus for a bit.
AThe iso broke
RGuys I installed bazzite os gnome on my msi claw and my controls and not working
Noh, that's a bug we should file with @Skynet then. bootc should work.
ANice, open a help thread plz
GDoes the composefs changes also change us to UKI?
AWe can't use uki with secure boot
AWell with Ms secure boot
AIf some of you want to enroll your own keys you can use uki
GOh yeah that's right lol because Microsoft only wants to sign a shim
AUsers have to sign their ukis
RGuys help
AThe infra for producing ukis that can adapt to devices is not there yet
AAt least for bazzite
APerhaps it's there for bluefin
AWith ukis you have to sign all kernel parameters
AAny user will use
AAnd the users can't change them afterwards
GHow could I test this in a custom image?
AUh have fun reading the systemd uki docs
AI only know what you have to do in theory
AIf secure boot is on the uki ignores the kernel parameters you pass to it
AAnd you have to make uki extensions that get conditionally loaded based on the device to change the kernel params
GDoes ostree/silverblue even support booting them?
SWhat's a bug? The tests I run on my repo use a bootc image. If they're passing, then you should be able to install a bootc image since installing is one of the tests
NYeah, I feel like I need to do some new testing as I feel like we aren't operating on current info.
APerhaps not generating them yet
ABut if you make them and make a grub config booting them should work
Rbumping this again since at least the "" removal needs to be merged https://github.com/ublue-os/config/pull/315
N@antheas @Kyle Gospo in the meeting early if we want to chat before Red Hat folks get in.
Asame link?
Nyes
MWe have bootc still on Bluefin.
Noh did it just get pulled from Main?
MYepp
NOK, so there is no issues with ISOs then, otherwise bluefin would be broken 
MYepp
Rdid fedora go ahead and drop fuse??
Roh
Rrpm-ostree 2024.7 shipped before fedora merged the patch to include fuse
RFYI @Kyle Gospo
Rfuse2 deprecation confirmed :clueless:
Rspeaking of rpm-ostree 2024.7, we now have --no-install-recommends available in rpm-ostree
Rtime for even smaller images?
K@RoyalOughtness https://github.com/ublue-os/main/pull/631
GitHub
fedora-silverblue/issue-tracker#589
