d818c4ee09
* chore: be explicit about secrets needed for image build Instead of inheriting *all* the secrets we are only selectively giving the called workflows access to the secrets we actually need. Currently we only have one secret we use for image signing but in the future we may want to have a separate testing key we use to sign testing builds only made in PRs and things like that. We may want to look into setting things up in a way so production keys are only ever used when we push to ublue-os/aurora. This also happens to make the experience a little bit nicer in new forks as the workflow will fail right after the start when the SIGNING_SECRET wasn't set, as opposed to when signing the image. xref: https://github.com/ublue-os/aurora/issues/2528 * chore: remove secrets from generate-release parts I don't know why this exists, we don't need our cosign key in this part of the workflow. |
||
|---|---|---|
| .github | ||
| build_files | ||
| system_files/shared | ||
| .devcontainer.json | ||
| .gitattributes | ||
| .gitignore | ||
| .pre-commit-config.yaml | ||
| artifacthub-repo.yml | ||
| Containerfile.in | ||
| CONTRIBUTING.md | ||
| cosign.pub | ||
| image-versions.yml | ||
| Justfile | ||
| LICENSE | ||
| quay.io-fedora-ostree-desktops.pub | ||
| README.md | ||
Aurora
Aurora is a delightful KDE desktop experience for end-users that are looking for reliability and developers for the most-hassle free setup. Zero maintenance included.
Documentation
- Discussions and Announcements - strongly recommended!
- Documentation
- Contributing Guide
- Local Building Guide
The system_files, flatpak and logos directory have been moved to here.
Secure Boot
Secure Boot is supported by default on our systems, providing an additional layer of security. After the first installation, you will be prompted to enroll the secure boot key in the BIOS.
Enter the password universalblue
when prompted to enroll our key.
If this step is not completed during the initial setup, you can manually enroll the key by running the following command in the terminal:
ujust enroll-secure-boot-key
Secure boot is supported with our custom key. The pub key can be found in the root of the akmods repository here. If you'd like to enroll this key prior to installation or rebase, download the key and run the following:
sudo mokutil --timeout -1
sudo mokutil --import public_key.der
Repobeats
