This commit is contained in:
randogoth 2025-12-23 21:11:11 +02:00
parent 83e657e74b
commit 4695571654
4 changed files with 12 additions and 12 deletions

View file

@ -1,6 +1,6 @@
# randofin-os   [![bluebuild build badge](https://github.com/randogoth/randofin-os/actions/workflows/build.yml/badge.svg)](https://github.com/randogoth/randofin-os/actions/workflows/build.yml) # Deinonyxus   [![bluebuild build badge](https://github.com/randogoth/deinonyxus/actions/workflows/build.yml/badge.svg)](https://github.com/randogoth/deinonyxus/actions/workflows/build.yml)
randofin-os is a personal spin of the UBlue Bluefin DX image with Nix baked in and a first-login bootstrap for home-manager packages. *Deinonyxus* is a personal spin of the UBlue Bluefin DX image with experimental Nix package manager baked in (borrowed from the great [Daemonix](https://github.com/DXC-0/daemonix/) image) and a first-login bootstrap for `home-manager` packages.
## Whats inside ## Whats inside
- Base: `ghcr.io/ublue-os/bluefin-dx:latest` without Cockpit, Docker, Firefox, VS Code - Base: `ghcr.io/ublue-os/bluefin-dx:latest` without Cockpit, Docker, Firefox, VS Code
@ -11,7 +11,7 @@ randofin-os is a personal spin of the UBlue Bluefin DX image with Nix baked in a
## First login behavior ## First login behavior
- Triggers for each non-root user on their first session. - Triggers for each non-root user on their first session.
- Writes state to `~/.local/state/randofin-os/nixpkgs-init.done`; delete it to rerun. - Writes state to `~/.local/state/deinonyxus/nixpkgs-init.done`; delete it to rerun.
- Bootstraps `~/.config/home-manager/home.nix` and runs `home-manager switch` with the package set above. - Bootstraps `~/.config/home-manager/home.nix` and runs `home-manager switch` with the package set above.
## Install / Rebase ## Install / Rebase
@ -20,11 +20,11 @@ randofin-os is a personal spin of the UBlue Bluefin DX image with Nix baked in a
```bash ```bash
# First pull unsigned to get signing policy # First pull unsigned to get signing policy
rpm-ostree rebase ostree-unverified-registry:ghcr.io/randogoth/randofin-os:latest rpm-ostree rebase ostree-unverified-registry:ghcr.io/randogoth/deinonyxus:latest
systemctl reboot systemctl reboot
# Then move to the signed image # Then move to the signed image
rpm-ostree rebase ostree-image-signed:docker://ghcr.io/randogoth/randofin-os:latest rpm-ostree rebase ostree-image-signed:docker://ghcr.io/randogoth/deinonyxus:latest
systemctl reboot systemctl reboot
``` ```
@ -38,5 +38,5 @@ bluebuild build --recipe recipes/recipe.yml
## Signature verification ## Signature verification
Images are signed with Sigstore/cosign. Verify with the repo's `cosign.pub`: Images are signed with Sigstore/cosign. Verify with the repo's `cosign.pub`:
```bash ```bash
cosign verify --key cosign.pub ghcr.io/randogoth/randofin-os cosign verify --key cosign.pub ghcr.io/randogoth/deinonyxus
``` ```

View file

@ -1,13 +1,13 @@
[Unit] [Unit]
Description=Install Nix Home Manager and packages on first login Description=Install Nix Home Manager and packages on first login
ConditionUser=!root ConditionUser=!root
ConditionPathExists=!%h/.local/state/randofin-os/nixpkgs-init.done ConditionPathExists=!%h/.local/state/deinonyxus/nixpkgs-init.done
[Service] [Service]
Type=oneshot Type=oneshot
ExecStart=/usr/libexec/randofin-os/nixpkgs.sh ExecStart=/usr/libexec/deinonyxus/nixpkgs.sh
ExecStartPost=/usr/bin/mkdir -p %h/.local/state/randofin-os ExecStartPost=/usr/bin/mkdir -p %h/.local/state/deinonyxus
ExecStartPost=/usr/bin/touch %h/.local/state/randofin-os/nixpkgs-init.done ExecStartPost=/usr/bin/touch %h/.local/state/deinonyxus/nixpkgs-init.done
[Install] [Install]
WantedBy=default.target WantedBy=default.target

View file

@ -1,7 +1,7 @@
--- ---
# yaml-language-server: $schema=https://schema.blue-build.org/recipe-v1.json # yaml-language-server: $schema=https://schema.blue-build.org/recipe-v1.json
# image will be published to ghcr.io/<user>/<name> # image will be published to ghcr.io/<user>/<name>
name: randofin-os name: deinonyxus
# description will be included in the image's metadata # description will be included in the image's metadata
description: This is my personal spin based on the latest bluefin image. description: This is my personal spin based on the latest bluefin image.