mcubi

My custom Universal Blue images

Rebasing to mcubi

To rebase an existing atomic Fedora installation to the latest build:

Rebasing to the unsigned image, to get the proper signing keys and policies installed:

• For mcubi-bluefin:

  rpm-ostree rebase ostree-unverified-registry:ghcr.io/tecncr/mcubi-bluefin:latest
  

• For mcubi-bluefin-dx:

  rpm-ostree rebase ostree-unverified-registry:ghcr.io/tecncr/mcubi-bluefin-dx:latest
  

• For mcubi-bluefin-dx-nvidia:

  rpm-ostree rebase ostree-unverified-registry:ghcr.io/tecncr/mcubi-bluefin-dx-nvidia:latest
  

Reboot to complete the rebase

systemctl reboot

Then rebase to the signed image, like so:

• For mcubi-bluefin:

  rpm-ostree rebase ostree-image-signed:docker://ghcr.io/tecncr/mcubi-bluefin:latest
  

• For mcubi-bluefin-dx:

  rpm-ostree rebase ostree-image-signed:docker://ghcr.io/tecncr/mcubi-bluefin-dx:latest
  

• For mcubi-bluefin-dx-nvidia:

  rpm-ostree rebase ostree-image-signed:docker://ghcr.io/tecncr/mcubi-bluefin-dx-nvidia:latest
  

Reboot again to complete the rebase

systemctl reboot

The latest tag will automatically point to the latest build. That build will still always use the Fedora version specified in the files located at the recipes directory.

Verification

These images are signed with Sigstore's cosign. You can verify the signature by downloading the cosign.pub file from this repo and running the following command:

cosign verify --key cosign.pub ghcr.io/tecncr/mcubi