Previously we were fetching the public keys over the network, this method
was not resilient against bad actors who take over one of our
dependencies and publish malicious images with those keys.
* feat: enable KDE 6.6 Beta builds
latest kernel is nasty, so just going for the coreos-stable kernel now
on beta
The panel task manager widget config is not present in the beta packages
* fix: use latest kernel
ostree hotfix and sysext is fixed in 6.18.5
* fix firewall installation
* feat: FROM quay.io/fedora-ostree-desktops/kinoite
Instead of using the ublue-os/kinoite-main base image we would be using
the ones built by Timothée over at https://gitlab.com/fedora/ostree/ci-test
This is a good path forward for Aurora because:
- we no longer have to undo things we inherit from ublue-os/main
- less overall dependencies
- we can make more conscious decisions about what goes into the image
- it's easier now to build images on top of upcoming Fedora versions
(even KDE nightly ones) or to base on top of potential future images
that are more aligned with our goals and needs
This would come at the cost of maintaining most of what main did
previously ourselves.
* chore: remove ublue-os-akmods-addons
* chore: codecs from negativo
* feat: add flathub
* fix: fedora flatpak be gone
* feat: miscellaneous workarounds
* feat: CoreOS rescue boot generator
* feat: allow brew programs with sudo
* chore: re-add packages from main
* chore: remove packages we removed in main
* chore: renovate
there is no latest tag
* fix: remove explicit ublue akmods copr cleanup
already included with all the others
* chore: remove added fedora flatpak service
We don't need this
* fix(renovate): set proper tag
---------
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
We have been using titanoboa for a while now and this won't be coming
back anytime soon.
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
* chore: refactor where get-aurora-dev/common image is declared
* feat: build with common sha of image-versions.yml
* feat: verify common image with cosign
* fix: just dance
* chore: don't specifcy tag of common
This is not needed, it was not broken or anything.
The build pulls in the pinned version specified in image.yml
* chore: see previous commit
* fix: add common image tag + sha to verification step
---------
Co-authored-by: renner <renner0@posteo.de>
Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
* chore: clean up repo
* chore: overrides and remove tailscale repo
* remove base image changes script
* refactor dx and build scripts
* add better way to install openrazer-daemon
* move the pinned packages to packages.sh
* fix typo
* sunshine is not excluded package anymore
* fix toolip
* update fedora version to 42
* fix: remove unnecessary bootc lint
we do that in the containerfile at the end
* remove /opt stuff
---------
Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
* feat: enable testing repo for beta
* chore: beta gates for akmods
* chore: rpmfusion beta
* chore: more enablements
* fix: beta should check the beta tag on main
* sunshine copr not avaialble for f43
* update packages and repo files
* chore(deps): update ghcr.io/ublue-os/kinoite-main:latest docker digest to 55277ae (#1092)
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
* remove some packages from beta f43
* move special packages away from packages.json
* another if override for beta
* update
* cleanup for copr repos
* more cleanup
* revert akmods changes
* exclude mozilla fonts
* fix excluded packages
* Update build_files/base/03-install-kernel-akmods.sh
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* cleanup some packages
* scx-scheds be gone
---------
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* feat(ci): consistently use rootful container storage
* feat(ci): add sleep before mounting container storage
would be funny if this worked
* chore: use default value for loopback-free
* chore: undo 5s wait
* revertme: use my testing branch for action
* Revert "revertme: use my testing branch for action"
This reverts commit 27b15386c3e5a9e88d8cb65dca7d0b8f46e0555a.
* chore: use newer version of the action
* fix(build): use GITHUB_TOKEN for curl when needed
* use /tmp instead of /usr/local
* missed one
* pass -E to sudo
---------
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
* add aurora copr for anaconda live stuff
* fix(iso): Handle platform differences
* feat(iso): Live ISO using anaconda as the installer
* fix(iso): anaconda artifact name (#2539)
* fix: improve the live anaconda hook
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
* add a pull request run if the configure script changes
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
* set a funny name
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
* fixups
* fixup! set a funny name
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
* reorder
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
* make our own profiles
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
* desktop icon, don't constantly rebuild images
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
* figure out how to get libblockdev-btrfs on lts
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
* fix: remove gts workflow
* add flatpaks for ISO
* small fixes
* remove the unneeded LTS workflow
* don't hide the parts of the installer
* few small fixes
* remove google fonts from live iso
* remove motd and brew from iso
* un-break building
* add -live notion to ISOs
* ignore image builds
---------
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
Co-authored-by: m2 <69128853+m2Giles@users.noreply.github.com>
Co-authored-by: Niklas <40402114+NiHaiden@users.noreply.github.com>
* fix(iso): Get Anaconda ISOs updated (#2485)
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
Co-authored-by: m2 <69128853+m2Giles@users.noreply.github.com>
* fixup
* remove unneeded comment
Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>
* iso naming to way it was
* fix iso workflow naming
* remove the unneeded iso build from HWE image workflow
* same for stable
* rename stable iso workflow
---------
Signed-off-by: m2 <69128853+m2Giles@users.noreply.github.com>
Co-authored-by: Jorge O. Castro <jorge.castro@gmail.com>
Co-authored-by: m2 <69128853+m2Giles@users.noreply.github.com>
Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>
* chore(ci): support combined akmods-kernel-cache in build
Relates: ublue-os/akmods#295
This is expected to fail until the akmods PR is merged.
* seems to miss an ) at the end
---------
Co-authored-by: Juha Uotila <10782843+inffy@users.noreply.github.com>
* feat: embed actual image version into os-release
* feat: embed actual image version into os-release
* feat: embed actual image version into os-release
* chore(bluefin, removal): remove bluefin from the build system
* fix: remove bluefin from changelogs and issue template
* Also remove "de" image_matrix because now only it's only kde
* chore: remove some bluefin mentions
* chore: rename files and text from bluefin to aurora
* Thanks https://github.com/inffy for PR with bluefin-cli --> aurora-cli changes
* chore: always use /usr/bin/ksshaskpass as SUDO_ASKPASS
* fix: remove bluefin from README.md
