blue-build  

Personal BlueBuild repository that produces two custom Fedora Atomic OCI images.

Image	Base	Desktop	Use
ghcr.io/mahagon/work-aurora-desktop	Aurora DX (stable)	KDE Plasma	Work laptop
ghcr.io/mahagon/gaming-desktop	Bazzite (stable)	KDE Plasma	Gaming PC

Images are built automatically via GitHub Actions on every relevant push and on a daily schedule. Only the image(s) affected by changed files are rebuilt on push. All install scripts are linted and executed in CI before the image build starts.

Installation

Warning

This is an experimental feature, try at your own discretion.

Replace <image> with work-aurora-desktop or gaming-desktop.

Install a stock Fedora Atomic desktop (e.g. Aurora or Bazzite) from the official ISO, then switch to the custom image:

Step 1 - switch to the custom image (unsigned, to get signing keys installed):

sudo bootc switch ghcr.io/mahagon/<image>:latest
systemctl reboot

Step 2 - after rebooting, enforce signature verification for all future updates:

sudo bootc switch --enforce-container-sigpolicy ghcr.io/mahagon/<image>:latest

Secure Boot

On first boot after rebasing, the system will prompt you to enroll the Secure Boot key (MOK). When asked for a password, enter:

universalblue

Verification

Images are signed with cosign. Verify with:

cosign verify --key cosign.pub ghcr.io/mahagon/<image>

ISO

If running on Fedora Atomic, you can generate an offline ISO using the instructions here.