quine-global-labs/aurora
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
3643 commits 2 branches 0 tags 386 MiB
Commit graph

3643 commits

This branch
This branch
All branches
Author SHA1 Message Date
Philip Peterson
36b34ba66c build.yml: checkout, the upstream merge and the build's GitHub downloads from our pull mirrors [skip ci] 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 22:23:32 -08:00
Philip Peterson
9fe274acb8 vendor-images.sh: copy digest-pinned images by digest, store them by tag
All checks were successful
Build Aurora / build (push) Successful in 4m12s
Details 
skopeo refuses a reference with both a tag and a digest, so common, brew
and chunkah weren't vendored (run 4).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 21:40:06 -08:00
Philip Peterson
4ccf023d2e Vendor upstream images into the forge's mirror/ before building
Some checks failed
Build Aurora / build (push) Failing after 3m32s
Details 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 19:55:20 -08:00
Philip Peterson
6fb8a69e5b Tag the image with the commit built, not the one the run started on [skip ci] 
After Merge upstream, $GITHUB_SHA is still the pre-merge commit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 13:54:29 -08:00
forgejo-actions
085b5d2e65 Merge upstream ublue-os/aurora main 2026-10-30 21:48:29 +00:00
Philip Peterson
70a5717120 Merge upstream daily, then build [skip ci] 
A daily schedule (and Run workflow) first merges github.com/ublue-os/aurora
main into ours and pushes the merge, then builds and publishes, picking up
upstream's changes and the day's Fedora package updates.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 13:47:57 -08:00
Philip Peterson
12ef486714 Build on Forgejo and push to its registry [skip ci] 
.forgejo/workflows/build.yml: just build, then push
forge.quinefoundation.com/quine-global-labs/aurora (stable,
stable-<date>, the commit). Its existence also stops Forgejo from running
upstream's .github/workflows.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 05:10:22 -08:00
ubot-7274[bot]
71dbbd7716
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 2a1fea9 (#3121) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-30 03:58:51 +00:00
ubot-7274[bot]
1724a27916
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 87090e4 (#3118) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-29 03:12:54 +00:00
ubot-7274[bot]
a9fcc79966
chore(deps): update dependency sigstore/cosign to v3.1.4 (#3111) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-28 16:59:21 +00:00
ubot-7274[bot]
cc0676b10b
chore(deps): update zizmorcore/zizmor-action action to v0.8.0 (#3114) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-28 16:52:10 +00:00
ubot-7274[bot]
c38c174c6a
chore(deps): update oras-project/setup-oras action to v2.0.3 (#3113) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-28 16:46:59 +00:00
ubot-7274[bot]
45a1f73c1c
chore(deps): update github/codeql-action action to v4.39.1 (#3112) 2026-10-28 18:25:09 +02:00
inffy
0f7d21d2c5
fix(renovate): add cosign to exclusion rules and remove cooldown (#3110) 
* fix(renovate): add cosign to exclusion rules

* remove cooldown for now

* also add zizmor to excludes
 2026-10-28 17:13:27 +01:00
renner
59f4248e8f
fix: set timestamp for unpackaged content to EPOCH=1 instead of 0 (#3096) 
resolves: https://github.com/ublue-os/aurora/issues/3093
 2026-10-28 04:48:58 +00:00
ubot-7274[bot]
c57816a3ee
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 0218c33 (#3108) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-28 03:13:34 +00:00
ubot-7274[bot]
0826f8d081
chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 0c9703f (#3106) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-27 19:46:56 +00:00
ubot-7274[bot]
c34f1fa928
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 2888e95 (#3105) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-27 13:02:30 +00:00
inffy
a26c26e938
feat: use terra pkg to get gaming udev rules (#3103) 2026-10-27 12:24:10 +00:00
ubot-7274[bot]
54f446c39e
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 79afb5b (#3101) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-27 05:25:57 +00:00
inffy
481bdfe702
fix: Regenerate CA trust and crypto policies for eMudhra incident (#3098) 
This handles an issue where the three way /etc merge can leave a user unpatched despite having the new package.

Adapted from https://gitlab.com/fedora/bootc/base-images/-/merge_requests/663
(cherry picked from commit bfa213b13bc967d4652a908ec457e3f1aed34d6d
 https://github.com/ublue-os/main/pull/3029)

Co-authored-by: Kyle Gospodnetich <me@kylegospodneti.ch>
 2026-10-26 14:10:26 +00:00
ubot-7274[bot]
a0855c4ccc
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 6887b7c (#3094) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-26 03:22:50 +00:00
ubot-7274[bot]
cff9396a0f
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 76f11d8 (#3092) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-25 06:38:22 +00:00
ubot-7274[bot]
bc033fb2fd
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 879ac56 (#3090) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-25 03:18:20 +00:00
ubot-7274[bot]
f86fe91bd6
chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 025ddf2 (#3089) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-25 02:04:48 +00:00
ubot-7274[bot]
ad6bba35dd
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to f09d75a (#3087) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-24 15:44:55 +00:00
ubot-7274[bot]
f4ec630469
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 0b90841 (#3086) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-24 05:47:40 +00:00
ubot-7274[bot]
444e886530
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to b7b6e5d (#3084) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-24 03:16:29 +00:00
Quinn!
6ee91e0dca
chore: remove xwaylandvideobridge (#3082) 
The bridge runs a background process at login and is no longer needed
now that Discord and Zoom support the desktop portal.

Closes #3066
 2026-10-24 01:08:00 +00:00
renner
aaf45e678a
feat: Add various OpenCL runtimes (#3061) 
Add weak_deps=False to main dnf install so we don't pull in the world,
some things that are gonna be noticeable I added here manually.

OpenCL in containers/flatpak is kinda bad to my understanding. So we
sadly have to include them on the host.

resovles: https://github.com/ublue-os/aurora/issues/2998

Co-authored-by: Jed <ivelisvale73@gmail.com>
 2026-10-23 23:33:44 +00:00
ubot-7274[bot]
88d8e4960f
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 2b932e3 (#3077) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-23 03:20:53 +00:00
ubot-7274[bot]
54cbc2a853
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 4427cbf (#3070) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-22 03:18:21 +00:00
ubot-7274[bot]
607b9f5190
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 97cf7d9 (#3067) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-21 03:16:27 +00:00
ubot-7274[bot]
fbf4762eb6
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to eca0916 (#3063) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-20 03:19:08 +00:00
inffy
04f1bfe77f
fix(ci): fix blankiet installation permissions for backport action (#3060) 2026-10-19 16:26:08 +02:00
inffy
c15ef2cd16
feat(renovate): delay renovate for 3 days (#3059) 
* feat(renovate): delay renovate for 3 days

* add comment + link
 2026-10-19 15:41:52 +02:00
renner
293ddd493b
fix(renovate): trigger automerge for stable branch for kinoite (#3054) 
We had to enable it manually, not sure when this broke.
 2026-10-19 04:01:24 +00:00
ubot-7274[bot]
6f59f93768
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to df08f4b (#3057) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-19 02:53:41 +00:00
renner
253e910312
chore: move flathub remote config to /usr (#3052) 
/usr is generally preferred over /etc
 2026-10-18 15:45:42 +00:00
ubot-7274[bot]
42b90550b9
chore(deps): update ghcr.io/get-aurora-dev/common:latest docker digest to 7c45eba (#3053) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-18 14:46:52 +00:00
renner
eee1a0285c
fix: only reset timestmaps for files that aren't already epoch 0 (#3051) 
This caused a little regression in the build times as it would relabel
absolutely everything, vast majority of content is of course RPM
packages which already have this timestamp set.

Before the normal image build was around 5-7min, now it has gone up by
2-3min.

Follow-up of: 3ef1256cd3.

Figured out by Bazzite in [1].

[1] a4ccbec9f6
 2026-10-18 11:20:42 +00:00
ubot-7274[bot]
37fde370b1
chore(deps): update zizmorcore/zizmor-action action to v0.7.1 (#3045) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-18 06:31:00 +00:00
ubot-7274[bot]
e1e8e88f5c
chore(deps): update actions/create-github-app-token digest to 64ab729 (#3041) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-18 06:28:55 +00:00
ubot-7274[bot]
905b5d868a
chore(deps): update ossf/scorecard-action action to v2.5.0 (main) (#3044) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-18 09:29:56 +03:00
ubot-7274[bot]
4c4181720a
chore(deps): update github/codeql-action action to v4.39.0 (main) (#3042) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-18 09:29:29 +03:00
ubot-7274[bot]
9f40cb110a
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to db874cd (#3047) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-18 04:02:35 +00:00
ubot-7274[bot]
ba9a0fbd2c
chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to ce2de9e (#3043) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-18 02:06:36 +00:00
ubot-7274[bot]
3dd50f7edd
chore(deps): update quay.io/fedora-ostree-desktops/kinoite:45 docker digest to 6391cbd (#3039) 
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
 2026-10-17 03:20:59 +00:00
renner
15c49f9547
fix(just): use login shell for run recipe (#3037) 
It's quite annoying not having things like shell completions inside the
container by default.
 2026-10-16 15:37:22 +00:00
renner
3ef1256cd3
feat: timestamp all files with epoch 0 (#3028) 
* feat: timestamp all files with epoch 0

We have been using this chunkah feature [1] to put non-rpm content like
the brew tarball in dedicated layers, we didn't actually save any
bandwith on downloads with this as the copying sets the file
modification and access time. Which makes it non-reproducible and every
single update would re-download everything not in RPMs.

This should make updates smaller especially noticeable on daily/multiple
daily image builds. I'm not sure how much of a positive effect this is
gonna have on the stable weekly images as the brew tarball is refreshed
weekly. Things like the wallpapers should at least no longer be
downloaded when they haven't changed. There are still some files we
could do but I think it's mostly not worth it.

xref: https://github.com/ublue-os/aurora/issues/2579

[1] https://github.com/coreos/chunkah#customizing-the-layers

* typo

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>

---------

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>
 2026-10-16 07:11:44 +00:00