mirror of
				https://github.com/optim-enterprises-bv/secureblue.git
				synced 2025-11-03 20:07:53 +00:00 
			
		
		
		
	Add bluefin images
This commit is contained in:
		
							
								
								
									
										8
									
								
								.github/workflows/build.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										8
									
								
								.github/workflows/build.yml
									
									
									
									
										vendored
									
									
								
							@@ -45,6 +45,8 @@ jobs:
 | 
			
		||||
          - recipes/desktop/recipe-silverblue-nvidia.yml
 | 
			
		||||
          - recipes/desktop/recipe-kinoite-main.yml
 | 
			
		||||
          - recipes/desktop/recipe-kinoite-nvidia.yml
 | 
			
		||||
          - recipes/desktop/recipe-bluefin-main.yml
 | 
			
		||||
          - recipes/desktop/recipe-bluefin-nvidia.yml
 | 
			
		||||
          - recipes/desktop/recipe-lazurite-main.yml
 | 
			
		||||
          - recipes/desktop/recipe-lazurite-nvidia.yml
 | 
			
		||||
          - recipes/desktop/recipe-sericea-main.yml
 | 
			
		||||
@@ -54,6 +56,8 @@ jobs:
 | 
			
		||||
          - recipes/laptop/recipe-silverblue-nvidia-laptop.yml
 | 
			
		||||
          - recipes/laptop/recipe-kinoite-main-laptop.yml
 | 
			
		||||
          - recipes/laptop/recipe-kinoite-nvidia-laptop.yml
 | 
			
		||||
          - recipes/laptop/recipe-bluefin-main-laptop.yml
 | 
			
		||||
          - recipes/laptop/recipe-bluefin-nvidia-laptop.yml
 | 
			
		||||
          - recipes/laptop/recipe-lazurite-main-laptop.yml
 | 
			
		||||
          - recipes/laptop/recipe-lazurite-nvidia-laptop.yml
 | 
			
		||||
          - recipes/laptop/recipe-sericea-main-laptop.yml
 | 
			
		||||
@@ -67,6 +71,8 @@ jobs:
 | 
			
		||||
          - recipes/desktop/recipe-silverblue-nvidia-userns.yml
 | 
			
		||||
          - recipes/desktop/recipe-kinoite-main-userns.yml
 | 
			
		||||
          - recipes/desktop/recipe-kinoite-nvidia-userns.yml
 | 
			
		||||
          - recipes/desktop/recipe-bluefin-main-userns.yml
 | 
			
		||||
          - recipes/desktop/recipe-bluefin-nvidia-userns.yml
 | 
			
		||||
          - recipes/desktop/recipe-lazurite-main-userns.yml
 | 
			
		||||
          - recipes/desktop/recipe-lazurite-nvidia-userns.yml
 | 
			
		||||
          - recipes/desktop/recipe-sericea-main-userns.yml
 | 
			
		||||
@@ -76,6 +82,8 @@ jobs:
 | 
			
		||||
          - recipes/laptop/recipe-silverblue-nvidia-laptop-userns.yml
 | 
			
		||||
          - recipes/laptop/recipe-kinoite-main-laptop-userns.yml
 | 
			
		||||
          - recipes/laptop/recipe-kinoite-nvidia-laptop-userns.yml
 | 
			
		||||
          - recipes/laptop/recipe-bluefin-main-laptop-userns.yml
 | 
			
		||||
          - recipes/laptop/recipe-bluefin-nvidia-laptop-userns.yml
 | 
			
		||||
          - recipes/laptop/recipe-lazurite-main-laptop-userns.yml
 | 
			
		||||
          - recipes/laptop/recipe-lazurite-nvidia-laptop-userns.yml
 | 
			
		||||
          - recipes/laptop/recipe-sericea-main-laptop-userns.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -60,6 +60,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
 | 
			
		||||
##### desktop
 | 
			
		||||
- kinoite-main-hardened
 | 
			
		||||
- kinoite-nvidia-hardened
 | 
			
		||||
- bluefin-main-hardened
 | 
			
		||||
- bluefin-nvidia-hardened
 | 
			
		||||
- lazurite-main-hardened
 | 
			
		||||
- lazurite-nvidia-hardened
 | 
			
		||||
- silverblue-main-hardened
 | 
			
		||||
@@ -70,6 +72,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
 | 
			
		||||
##### laptop
 | 
			
		||||
- kinoite-main-laptop-hardened
 | 
			
		||||
- kinoite-nvidia-laptop-hardened
 | 
			
		||||
- bluefin-main-laptop-hardened
 | 
			
		||||
- bluefin-nvidia-laptop-hardened
 | 
			
		||||
- lazurite-main-laptop-hardened
 | 
			
		||||
- lazurite-nvidia-laptop-hardened
 | 
			
		||||
- silverblue-main-laptop-hardened
 | 
			
		||||
@@ -86,6 +90,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
 | 
			
		||||
##### desktop
 | 
			
		||||
- kinoite-main-userns-hardened
 | 
			
		||||
- kinoite-nvidia-userns-hardened
 | 
			
		||||
- bluefin-main-userns-hardened
 | 
			
		||||
- bluefin-nvidia-userns-hardened
 | 
			
		||||
- lazurite-main-userns-hardened
 | 
			
		||||
- lazurite-nvidia-userns-hardened
 | 
			
		||||
- silverblue-main-userns-hardened
 | 
			
		||||
@@ -96,6 +102,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
 | 
			
		||||
##### laptop
 | 
			
		||||
- kinoite-main-laptop-userns-hardened
 | 
			
		||||
- kinoite-nvidia-laptop-userns-hardened
 | 
			
		||||
- bluefin-main-laptop-userns-hardened
 | 
			
		||||
- bluefin-nvidia-laptop-userns-hardened
 | 
			
		||||
- lazurite-main-laptop-userns-hardened
 | 
			
		||||
- lazurite-nvidia-laptop-userns-hardened
 | 
			
		||||
- silverblue-main-laptop-userns-hardened
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										14
									
								
								config/common/bluefin-packages.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										14
									
								
								config/common/bluefin-packages.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,14 @@
 | 
			
		||||
type: rpm-ostree
 | 
			
		||||
remove:
 | 
			
		||||
  - gnome-shell-extension-gsconnect
 | 
			
		||||
  - nautilus-gsconnect
 | 
			
		||||
  - samba-common-tools
 | 
			
		||||
  - samba-dcerpc
 | 
			
		||||
  - samba-ldb-ldap-modules
 | 
			
		||||
  - samba-winbind
 | 
			
		||||
  - samba-winbind-clients
 | 
			
		||||
  - samba-winbind-modules
 | 
			
		||||
  - samba
 | 
			
		||||
  - usbmuxd
 | 
			
		||||
  - cockpit-bridge
 | 
			
		||||
  - gvfs-afc
 | 
			
		||||
							
								
								
									
										3
									
								
								config/common/bluefin-scripts.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										3
									
								
								config/common/bluefin-scripts.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,3 @@
 | 
			
		||||
type: script
 | 
			
		||||
scripts:
 | 
			
		||||
  - disabletailscale.sh
 | 
			
		||||
@@ -12,8 +12,6 @@ install:
 | 
			
		||||
  - bubblejail
 | 
			
		||||
  
 | 
			
		||||
remove:
 | 
			
		||||
  - firefox
 | 
			
		||||
  - firefox-langpacks
 | 
			
		||||
  - virtualbox-guest-additions
 | 
			
		||||
  - open-vm-tools
 | 
			
		||||
  - open-vm-tools-desktop
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										9
									
								
								config/common/remove-firefox.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										9
									
								
								config/common/remove-firefox.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,9 @@
 | 
			
		||||
type: rpm-ostree
 | 
			
		||||
remove:
 | 
			
		||||
  - firefox
 | 
			
		||||
  - firefox-langpacks
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										20
									
								
								config/recipes/desktop/recipe-bluefin-main-userns.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										20
									
								
								config/recipes/desktop/recipe-bluefin-main-userns.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,20 @@
 | 
			
		||||
# image will be published to ghcr.io/<user>/<name>
 | 
			
		||||
name: bluefin-main-userns-hardened
 | 
			
		||||
# description will be included in the image's metadata
 | 
			
		||||
description: "Bluefin main with some hardening applied"
 | 
			
		||||
 | 
			
		||||
# the base image to build on top of (FROM) and the version tag to use
 | 
			
		||||
base-image: ghcr.io/ublue-os/bluefin
 | 
			
		||||
image-version: 39
 | 
			
		||||
 | 
			
		||||
# list of modules, executed in order
 | 
			
		||||
# you can include multiple instances of the same module
 | 
			
		||||
modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/bluefin-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/bluefin-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
							
								
								
									
										22
									
								
								config/recipes/desktop/recipe-bluefin-main.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										22
									
								
								config/recipes/desktop/recipe-bluefin-main.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,22 @@
 | 
			
		||||
# image will be published to ghcr.io/<user>/<name>
 | 
			
		||||
name: bluefin-main-hardened
 | 
			
		||||
# description will be included in the image's metadata
 | 
			
		||||
description: "Bluefin main with some hardening applied"
 | 
			
		||||
 | 
			
		||||
# the base image to build on top of (FROM) and the version tag to use
 | 
			
		||||
base-image: ghcr.io/ublue-os/bluefin
 | 
			
		||||
image-version: 39
 | 
			
		||||
 | 
			
		||||
# list of modules, executed in order
 | 
			
		||||
# you can include multiple instances of the same module
 | 
			
		||||
modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/bluefin-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/bluefin-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
  - from-file: common/disableuserns-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
							
								
								
									
										20
									
								
								config/recipes/desktop/recipe-bluefin-nvidia-userns.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										20
									
								
								config/recipes/desktop/recipe-bluefin-nvidia-userns.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,20 @@
 | 
			
		||||
# image will be published to ghcr.io/<user>/<name>
 | 
			
		||||
name: bluefin-nvidia-userns-hardened
 | 
			
		||||
# description will be included in the image's metadata
 | 
			
		||||
description: "Bluefin nvidia with some hardening applied"
 | 
			
		||||
 | 
			
		||||
# the base image to build on top of (FROM) and the version tag to use
 | 
			
		||||
base-image: ghcr.io/ublue-os/bluefin-nvidia
 | 
			
		||||
image-version: 39
 | 
			
		||||
 | 
			
		||||
# list of modules, executed in order
 | 
			
		||||
# you can include multiple instances of the same module
 | 
			
		||||
modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/bluefin-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/bluefin-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
							
								
								
									
										22
									
								
								config/recipes/desktop/recipe-bluefin-nvidia.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										22
									
								
								config/recipes/desktop/recipe-bluefin-nvidia.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,22 @@
 | 
			
		||||
# image will be published to ghcr.io/<user>/<name>
 | 
			
		||||
name: bluefin-nvidia-hardened
 | 
			
		||||
# description will be included in the image's metadata
 | 
			
		||||
description: "Bluefin nvidia with some hardening applied"
 | 
			
		||||
 | 
			
		||||
# the base image to build on top of (FROM) and the version tag to use
 | 
			
		||||
base-image: ghcr.io/ublue-os/bluefin-nvidia
 | 
			
		||||
image-version: 39
 | 
			
		||||
 | 
			
		||||
# list of modules, executed in order
 | 
			
		||||
# you can include multiple instances of the same module
 | 
			
		||||
modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/bluefin-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/bluefin-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
  - from-file: common/disableuserns-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/kinoite-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/kinoite-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/kinoite-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/kinoite-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/lazurite-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/lazurite-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/lazurite-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/lazurite-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -13,6 +13,7 @@ modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -13,6 +13,7 @@ modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -13,6 +13,7 @@ modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -13,6 +13,7 @@ modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/silverblue-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/silverblue-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/silverblue-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/silverblue-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										21
									
								
								config/recipes/laptop/recipe-bluefin-main-laptop-userns.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										21
									
								
								config/recipes/laptop/recipe-bluefin-main-laptop-userns.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,21 @@
 | 
			
		||||
# image will be published to ghcr.io/<user>/<name>
 | 
			
		||||
name: bluefin-main-laptop-userns-hardened
 | 
			
		||||
# description will be included in the image's metadata
 | 
			
		||||
description: "Bluefin main with some hardening applied, for laptops"
 | 
			
		||||
 | 
			
		||||
# the base image to build on top of (FROM) and the version tag to use
 | 
			
		||||
base-image: ghcr.io/ublue-os/bluefin
 | 
			
		||||
image-version: 39
 | 
			
		||||
 | 
			
		||||
# list of modules, executed in order
 | 
			
		||||
# you can include multiple instances of the same module
 | 
			
		||||
modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/bluefin-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/bluefin-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
							
								
								
									
										23
									
								
								config/recipes/laptop/recipe-bluefin-main-laptop.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										23
									
								
								config/recipes/laptop/recipe-bluefin-main-laptop.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,23 @@
 | 
			
		||||
# image will be published to ghcr.io/<user>/<name>
 | 
			
		||||
name: bluefin-main-laptop-hardened
 | 
			
		||||
# description will be included in the image's metadata
 | 
			
		||||
description: "Bluefin main with some hardening applied, for laptops"
 | 
			
		||||
 | 
			
		||||
# the base image to build on top of (FROM) and the version tag to use
 | 
			
		||||
base-image: ghcr.io/ublue-os/bluefin
 | 
			
		||||
image-version: 39
 | 
			
		||||
 | 
			
		||||
# list of modules, executed in order
 | 
			
		||||
# you can include multiple instances of the same module
 | 
			
		||||
modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/bluefin-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/bluefin-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
  - from-file: common/disableuserns-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -0,0 +1,21 @@
 | 
			
		||||
# image will be published to ghcr.io/<user>/<name>
 | 
			
		||||
name: bluefin-nvidia-laptop-userns-hardened
 | 
			
		||||
# description will be included in the image's metadata
 | 
			
		||||
description: "Bluefin nvidia with some hardening applied, for laptops"
 | 
			
		||||
 | 
			
		||||
# the base image to build on top of (FROM) and the version tag to use
 | 
			
		||||
base-image: ghcr.io/ublue-os/bluefin-nvidia
 | 
			
		||||
image-version: 39
 | 
			
		||||
 | 
			
		||||
# list of modules, executed in order
 | 
			
		||||
# you can include multiple instances of the same module
 | 
			
		||||
modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/bluefin-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/bluefin-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
							
								
								
									
										23
									
								
								config/recipes/laptop/recipe-bluefin-nvidia-laptop.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										23
									
								
								config/recipes/laptop/recipe-bluefin-nvidia-laptop.yml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,23 @@
 | 
			
		||||
# image will be published to ghcr.io/<user>/<name>
 | 
			
		||||
name: bluefin-nvidia-laptop-hardened
 | 
			
		||||
# description will be included in the image's metadata
 | 
			
		||||
description: "Bluefin nvidia with some hardening applied, for laptops"
 | 
			
		||||
 | 
			
		||||
# the base image to build on top of (FROM) and the version tag to use
 | 
			
		||||
base-image: ghcr.io/ublue-os/bluefin-nvidia
 | 
			
		||||
image-version: 39
 | 
			
		||||
 | 
			
		||||
# list of modules, executed in order
 | 
			
		||||
# you can include multiple instances of the same module
 | 
			
		||||
modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/bluefin-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
  - from-file: common/bluefin-scripts.yml
 | 
			
		||||
  - from-file: common/disableuserns-packages.yml
 | 
			
		||||
  - from-file: common/disableuserns-scripts.yml
 | 
			
		||||
  - type: yafti 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/kinoite-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/kinoite-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/kinoite-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/kinoite-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/lazurite-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/lazurite-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/lazurite-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/lazurite-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -13,6 +13,7 @@ modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -13,6 +13,7 @@ modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -13,6 +13,7 @@ modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -13,6 +13,7 @@ modules:
 | 
			
		||||
  - from-file: common/common-files.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/silverblue-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/silverblue-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/silverblue-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
@@ -14,6 +14,7 @@ modules:
 | 
			
		||||
  - from-file: common/silverblue-packages.yml
 | 
			
		||||
  - from-file: common/gui-packages.yml
 | 
			
		||||
  - from-file: common/common-packages.yml
 | 
			
		||||
  - from-file: common/remove-firefox.yml
 | 
			
		||||
  - from-file: common/common-bling.yml
 | 
			
		||||
  - from-file: recipes/laptop/laptop-bling.yml
 | 
			
		||||
  - from-file: common/common-scripts.yml
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										8
									
								
								config/scripts/disabletailscale.sh
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										8
									
								
								config/scripts/disabletailscale.sh
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,8 @@
 | 
			
		||||
#!/usr/bin/env bash
 | 
			
		||||
 | 
			
		||||
# Tell build process to exit if there are any errors.
 | 
			
		||||
set -oue pipefail
 | 
			
		||||
 | 
			
		||||
echo "Disabling tailscale"
 | 
			
		||||
systemctl disable tailscaled
 | 
			
		||||
systemctl mask tailscaled
 | 
			
		||||
		Reference in New Issue
	
	Block a user