mirror of
https://github.com/optim-enterprises-bv/secureblue.git
synced 2025-11-03 11:58:26 +00:00
Add bluefin images
This commit is contained in:
8
.github/workflows/build.yml
vendored
8
.github/workflows/build.yml
vendored
@@ -45,6 +45,8 @@ jobs:
|
|||||||
- recipes/desktop/recipe-silverblue-nvidia.yml
|
- recipes/desktop/recipe-silverblue-nvidia.yml
|
||||||
- recipes/desktop/recipe-kinoite-main.yml
|
- recipes/desktop/recipe-kinoite-main.yml
|
||||||
- recipes/desktop/recipe-kinoite-nvidia.yml
|
- recipes/desktop/recipe-kinoite-nvidia.yml
|
||||||
|
- recipes/desktop/recipe-bluefin-main.yml
|
||||||
|
- recipes/desktop/recipe-bluefin-nvidia.yml
|
||||||
- recipes/desktop/recipe-lazurite-main.yml
|
- recipes/desktop/recipe-lazurite-main.yml
|
||||||
- recipes/desktop/recipe-lazurite-nvidia.yml
|
- recipes/desktop/recipe-lazurite-nvidia.yml
|
||||||
- recipes/desktop/recipe-sericea-main.yml
|
- recipes/desktop/recipe-sericea-main.yml
|
||||||
@@ -54,6 +56,8 @@ jobs:
|
|||||||
- recipes/laptop/recipe-silverblue-nvidia-laptop.yml
|
- recipes/laptop/recipe-silverblue-nvidia-laptop.yml
|
||||||
- recipes/laptop/recipe-kinoite-main-laptop.yml
|
- recipes/laptop/recipe-kinoite-main-laptop.yml
|
||||||
- recipes/laptop/recipe-kinoite-nvidia-laptop.yml
|
- recipes/laptop/recipe-kinoite-nvidia-laptop.yml
|
||||||
|
- recipes/laptop/recipe-bluefin-main-laptop.yml
|
||||||
|
- recipes/laptop/recipe-bluefin-nvidia-laptop.yml
|
||||||
- recipes/laptop/recipe-lazurite-main-laptop.yml
|
- recipes/laptop/recipe-lazurite-main-laptop.yml
|
||||||
- recipes/laptop/recipe-lazurite-nvidia-laptop.yml
|
- recipes/laptop/recipe-lazurite-nvidia-laptop.yml
|
||||||
- recipes/laptop/recipe-sericea-main-laptop.yml
|
- recipes/laptop/recipe-sericea-main-laptop.yml
|
||||||
@@ -67,6 +71,8 @@ jobs:
|
|||||||
- recipes/desktop/recipe-silverblue-nvidia-userns.yml
|
- recipes/desktop/recipe-silverblue-nvidia-userns.yml
|
||||||
- recipes/desktop/recipe-kinoite-main-userns.yml
|
- recipes/desktop/recipe-kinoite-main-userns.yml
|
||||||
- recipes/desktop/recipe-kinoite-nvidia-userns.yml
|
- recipes/desktop/recipe-kinoite-nvidia-userns.yml
|
||||||
|
- recipes/desktop/recipe-bluefin-main-userns.yml
|
||||||
|
- recipes/desktop/recipe-bluefin-nvidia-userns.yml
|
||||||
- recipes/desktop/recipe-lazurite-main-userns.yml
|
- recipes/desktop/recipe-lazurite-main-userns.yml
|
||||||
- recipes/desktop/recipe-lazurite-nvidia-userns.yml
|
- recipes/desktop/recipe-lazurite-nvidia-userns.yml
|
||||||
- recipes/desktop/recipe-sericea-main-userns.yml
|
- recipes/desktop/recipe-sericea-main-userns.yml
|
||||||
@@ -76,6 +82,8 @@ jobs:
|
|||||||
- recipes/laptop/recipe-silverblue-nvidia-laptop-userns.yml
|
- recipes/laptop/recipe-silverblue-nvidia-laptop-userns.yml
|
||||||
- recipes/laptop/recipe-kinoite-main-laptop-userns.yml
|
- recipes/laptop/recipe-kinoite-main-laptop-userns.yml
|
||||||
- recipes/laptop/recipe-kinoite-nvidia-laptop-userns.yml
|
- recipes/laptop/recipe-kinoite-nvidia-laptop-userns.yml
|
||||||
|
- recipes/laptop/recipe-bluefin-main-laptop-userns.yml
|
||||||
|
- recipes/laptop/recipe-bluefin-nvidia-laptop-userns.yml
|
||||||
- recipes/laptop/recipe-lazurite-main-laptop-userns.yml
|
- recipes/laptop/recipe-lazurite-main-laptop-userns.yml
|
||||||
- recipes/laptop/recipe-lazurite-nvidia-laptop-userns.yml
|
- recipes/laptop/recipe-lazurite-nvidia-laptop-userns.yml
|
||||||
- recipes/laptop/recipe-sericea-main-laptop-userns.yml
|
- recipes/laptop/recipe-sericea-main-laptop-userns.yml
|
||||||
|
|||||||
@@ -60,6 +60,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
|
|||||||
##### desktop
|
##### desktop
|
||||||
- kinoite-main-hardened
|
- kinoite-main-hardened
|
||||||
- kinoite-nvidia-hardened
|
- kinoite-nvidia-hardened
|
||||||
|
- bluefin-main-hardened
|
||||||
|
- bluefin-nvidia-hardened
|
||||||
- lazurite-main-hardened
|
- lazurite-main-hardened
|
||||||
- lazurite-nvidia-hardened
|
- lazurite-nvidia-hardened
|
||||||
- silverblue-main-hardened
|
- silverblue-main-hardened
|
||||||
@@ -70,6 +72,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
|
|||||||
##### laptop
|
##### laptop
|
||||||
- kinoite-main-laptop-hardened
|
- kinoite-main-laptop-hardened
|
||||||
- kinoite-nvidia-laptop-hardened
|
- kinoite-nvidia-laptop-hardened
|
||||||
|
- bluefin-main-laptop-hardened
|
||||||
|
- bluefin-nvidia-laptop-hardened
|
||||||
- lazurite-main-laptop-hardened
|
- lazurite-main-laptop-hardened
|
||||||
- lazurite-nvidia-laptop-hardened
|
- lazurite-nvidia-laptop-hardened
|
||||||
- silverblue-main-laptop-hardened
|
- silverblue-main-laptop-hardened
|
||||||
@@ -86,6 +90,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
|
|||||||
##### desktop
|
##### desktop
|
||||||
- kinoite-main-userns-hardened
|
- kinoite-main-userns-hardened
|
||||||
- kinoite-nvidia-userns-hardened
|
- kinoite-nvidia-userns-hardened
|
||||||
|
- bluefin-main-userns-hardened
|
||||||
|
- bluefin-nvidia-userns-hardened
|
||||||
- lazurite-main-userns-hardened
|
- lazurite-main-userns-hardened
|
||||||
- lazurite-nvidia-userns-hardened
|
- lazurite-nvidia-userns-hardened
|
||||||
- silverblue-main-userns-hardened
|
- silverblue-main-userns-hardened
|
||||||
@@ -96,6 +102,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
|
|||||||
##### laptop
|
##### laptop
|
||||||
- kinoite-main-laptop-userns-hardened
|
- kinoite-main-laptop-userns-hardened
|
||||||
- kinoite-nvidia-laptop-userns-hardened
|
- kinoite-nvidia-laptop-userns-hardened
|
||||||
|
- bluefin-main-laptop-userns-hardened
|
||||||
|
- bluefin-nvidia-laptop-userns-hardened
|
||||||
- lazurite-main-laptop-userns-hardened
|
- lazurite-main-laptop-userns-hardened
|
||||||
- lazurite-nvidia-laptop-userns-hardened
|
- lazurite-nvidia-laptop-userns-hardened
|
||||||
- silverblue-main-laptop-userns-hardened
|
- silverblue-main-laptop-userns-hardened
|
||||||
|
|||||||
14
config/common/bluefin-packages.yml
Normal file
14
config/common/bluefin-packages.yml
Normal file
@@ -0,0 +1,14 @@
|
|||||||
|
type: rpm-ostree
|
||||||
|
remove:
|
||||||
|
- gnome-shell-extension-gsconnect
|
||||||
|
- nautilus-gsconnect
|
||||||
|
- samba-common-tools
|
||||||
|
- samba-dcerpc
|
||||||
|
- samba-ldb-ldap-modules
|
||||||
|
- samba-winbind
|
||||||
|
- samba-winbind-clients
|
||||||
|
- samba-winbind-modules
|
||||||
|
- samba
|
||||||
|
- usbmuxd
|
||||||
|
- cockpit-bridge
|
||||||
|
- gvfs-afc
|
||||||
3
config/common/bluefin-scripts.yml
Normal file
3
config/common/bluefin-scripts.yml
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
type: script
|
||||||
|
scripts:
|
||||||
|
- disabletailscale.sh
|
||||||
@@ -12,8 +12,6 @@ install:
|
|||||||
- bubblejail
|
- bubblejail
|
||||||
|
|
||||||
remove:
|
remove:
|
||||||
- firefox
|
|
||||||
- firefox-langpacks
|
|
||||||
- virtualbox-guest-additions
|
- virtualbox-guest-additions
|
||||||
- open-vm-tools
|
- open-vm-tools
|
||||||
- open-vm-tools-desktop
|
- open-vm-tools-desktop
|
||||||
|
|||||||
9
config/common/remove-firefox.yml
Normal file
9
config/common/remove-firefox.yml
Normal file
@@ -0,0 +1,9 @@
|
|||||||
|
type: rpm-ostree
|
||||||
|
remove:
|
||||||
|
- firefox
|
||||||
|
- firefox-langpacks
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
20
config/recipes/desktop/recipe-bluefin-main-userns.yml
Normal file
20
config/recipes/desktop/recipe-bluefin-main-userns.yml
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
# image will be published to ghcr.io/<user>/<name>
|
||||||
|
name: bluefin-main-userns-hardened
|
||||||
|
# description will be included in the image's metadata
|
||||||
|
description: "Bluefin main with some hardening applied"
|
||||||
|
|
||||||
|
# the base image to build on top of (FROM) and the version tag to use
|
||||||
|
base-image: ghcr.io/ublue-os/bluefin
|
||||||
|
image-version: 39
|
||||||
|
|
||||||
|
# list of modules, executed in order
|
||||||
|
# you can include multiple instances of the same module
|
||||||
|
modules:
|
||||||
|
- from-file: common/common-files.yml
|
||||||
|
- from-file: common/bluefin-packages.yml
|
||||||
|
- from-file: common/gui-packages.yml
|
||||||
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/common-bling.yml
|
||||||
|
- from-file: common/common-scripts.yml
|
||||||
|
- from-file: common/bluefin-scripts.yml
|
||||||
|
- type: yafti
|
||||||
22
config/recipes/desktop/recipe-bluefin-main.yml
Normal file
22
config/recipes/desktop/recipe-bluefin-main.yml
Normal file
@@ -0,0 +1,22 @@
|
|||||||
|
# image will be published to ghcr.io/<user>/<name>
|
||||||
|
name: bluefin-main-hardened
|
||||||
|
# description will be included in the image's metadata
|
||||||
|
description: "Bluefin main with some hardening applied"
|
||||||
|
|
||||||
|
# the base image to build on top of (FROM) and the version tag to use
|
||||||
|
base-image: ghcr.io/ublue-os/bluefin
|
||||||
|
image-version: 39
|
||||||
|
|
||||||
|
# list of modules, executed in order
|
||||||
|
# you can include multiple instances of the same module
|
||||||
|
modules:
|
||||||
|
- from-file: common/common-files.yml
|
||||||
|
- from-file: common/bluefin-packages.yml
|
||||||
|
- from-file: common/gui-packages.yml
|
||||||
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/common-bling.yml
|
||||||
|
- from-file: common/common-scripts.yml
|
||||||
|
- from-file: common/bluefin-scripts.yml
|
||||||
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
- from-file: common/disableuserns-scripts.yml
|
||||||
|
- type: yafti
|
||||||
20
config/recipes/desktop/recipe-bluefin-nvidia-userns.yml
Normal file
20
config/recipes/desktop/recipe-bluefin-nvidia-userns.yml
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
# image will be published to ghcr.io/<user>/<name>
|
||||||
|
name: bluefin-nvidia-userns-hardened
|
||||||
|
# description will be included in the image's metadata
|
||||||
|
description: "Bluefin nvidia with some hardening applied"
|
||||||
|
|
||||||
|
# the base image to build on top of (FROM) and the version tag to use
|
||||||
|
base-image: ghcr.io/ublue-os/bluefin-nvidia
|
||||||
|
image-version: 39
|
||||||
|
|
||||||
|
# list of modules, executed in order
|
||||||
|
# you can include multiple instances of the same module
|
||||||
|
modules:
|
||||||
|
- from-file: common/common-files.yml
|
||||||
|
- from-file: common/bluefin-packages.yml
|
||||||
|
- from-file: common/gui-packages.yml
|
||||||
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/common-bling.yml
|
||||||
|
- from-file: common/common-scripts.yml
|
||||||
|
- from-file: common/bluefin-scripts.yml
|
||||||
|
- type: yafti
|
||||||
22
config/recipes/desktop/recipe-bluefin-nvidia.yml
Normal file
22
config/recipes/desktop/recipe-bluefin-nvidia.yml
Normal file
@@ -0,0 +1,22 @@
|
|||||||
|
# image will be published to ghcr.io/<user>/<name>
|
||||||
|
name: bluefin-nvidia-hardened
|
||||||
|
# description will be included in the image's metadata
|
||||||
|
description: "Bluefin nvidia with some hardening applied"
|
||||||
|
|
||||||
|
# the base image to build on top of (FROM) and the version tag to use
|
||||||
|
base-image: ghcr.io/ublue-os/bluefin-nvidia
|
||||||
|
image-version: 39
|
||||||
|
|
||||||
|
# list of modules, executed in order
|
||||||
|
# you can include multiple instances of the same module
|
||||||
|
modules:
|
||||||
|
- from-file: common/common-files.yml
|
||||||
|
- from-file: common/bluefin-packages.yml
|
||||||
|
- from-file: common/gui-packages.yml
|
||||||
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/common-bling.yml
|
||||||
|
- from-file: common/common-scripts.yml
|
||||||
|
- from-file: common/bluefin-scripts.yml
|
||||||
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
- from-file: common/disableuserns-scripts.yml
|
||||||
|
- type: yafti
|
||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/kinoite-packages.yml
|
- from-file: common/kinoite-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- type: yafti
|
- type: yafti
|
||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/kinoite-packages.yml
|
- from-file: common/kinoite-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- from-file: common/disableuserns-packages.yml
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/kinoite-packages.yml
|
- from-file: common/kinoite-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- type: yafti
|
- type: yafti
|
||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/kinoite-packages.yml
|
- from-file: common/kinoite-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- from-file: common/disableuserns-packages.yml
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/lazurite-packages.yml
|
- from-file: common/lazurite-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- type: yafti
|
- type: yafti
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/lazurite-packages.yml
|
- from-file: common/lazurite-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- from-file: common/disableuserns-packages.yml
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/lazurite-packages.yml
|
- from-file: common/lazurite-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- type: yafti
|
- type: yafti
|
||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/lazurite-packages.yml
|
- from-file: common/lazurite-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- from-file: common/disableuserns-packages.yml
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
|||||||
@@ -13,6 +13,7 @@ modules:
|
|||||||
- from-file: common/common-files.yml
|
- from-file: common/common-files.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- type: yafti
|
- type: yafti
|
||||||
@@ -13,6 +13,7 @@ modules:
|
|||||||
- from-file: common/common-files.yml
|
- from-file: common/common-files.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- from-file: common/disableuserns-packages.yml
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
|||||||
@@ -13,6 +13,7 @@ modules:
|
|||||||
- from-file: common/common-files.yml
|
- from-file: common/common-files.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- type: yafti
|
- type: yafti
|
||||||
@@ -13,6 +13,7 @@ modules:
|
|||||||
- from-file: common/common-files.yml
|
- from-file: common/common-files.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- from-file: common/disableuserns-packages.yml
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/silverblue-packages.yml
|
- from-file: common/silverblue-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- type: yafti
|
- type: yafti
|
||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/silverblue-packages.yml
|
- from-file: common/silverblue-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- from-file: common/disableuserns-packages.yml
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/silverblue-packages.yml
|
- from-file: common/silverblue-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- type: yafti
|
- type: yafti
|
||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/silverblue-packages.yml
|
- from-file: common/silverblue-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
- from-file: common/disableuserns-packages.yml
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
|||||||
21
config/recipes/laptop/recipe-bluefin-main-laptop-userns.yml
Normal file
21
config/recipes/laptop/recipe-bluefin-main-laptop-userns.yml
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
# image will be published to ghcr.io/<user>/<name>
|
||||||
|
name: bluefin-main-laptop-userns-hardened
|
||||||
|
# description will be included in the image's metadata
|
||||||
|
description: "Bluefin main with some hardening applied, for laptops"
|
||||||
|
|
||||||
|
# the base image to build on top of (FROM) and the version tag to use
|
||||||
|
base-image: ghcr.io/ublue-os/bluefin
|
||||||
|
image-version: 39
|
||||||
|
|
||||||
|
# list of modules, executed in order
|
||||||
|
# you can include multiple instances of the same module
|
||||||
|
modules:
|
||||||
|
- from-file: common/common-files.yml
|
||||||
|
- from-file: common/bluefin-packages.yml
|
||||||
|
- from-file: common/gui-packages.yml
|
||||||
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/common-bling.yml
|
||||||
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
|
- from-file: common/common-scripts.yml
|
||||||
|
- from-file: common/bluefin-scripts.yml
|
||||||
|
- type: yafti
|
||||||
23
config/recipes/laptop/recipe-bluefin-main-laptop.yml
Normal file
23
config/recipes/laptop/recipe-bluefin-main-laptop.yml
Normal file
@@ -0,0 +1,23 @@
|
|||||||
|
# image will be published to ghcr.io/<user>/<name>
|
||||||
|
name: bluefin-main-laptop-hardened
|
||||||
|
# description will be included in the image's metadata
|
||||||
|
description: "Bluefin main with some hardening applied, for laptops"
|
||||||
|
|
||||||
|
# the base image to build on top of (FROM) and the version tag to use
|
||||||
|
base-image: ghcr.io/ublue-os/bluefin
|
||||||
|
image-version: 39
|
||||||
|
|
||||||
|
# list of modules, executed in order
|
||||||
|
# you can include multiple instances of the same module
|
||||||
|
modules:
|
||||||
|
- from-file: common/common-files.yml
|
||||||
|
- from-file: common/bluefin-packages.yml
|
||||||
|
- from-file: common/gui-packages.yml
|
||||||
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/common-bling.yml
|
||||||
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
|
- from-file: common/common-scripts.yml
|
||||||
|
- from-file: common/bluefin-scripts.yml
|
||||||
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
- from-file: common/disableuserns-scripts.yml
|
||||||
|
- type: yafti
|
||||||
@@ -0,0 +1,21 @@
|
|||||||
|
# image will be published to ghcr.io/<user>/<name>
|
||||||
|
name: bluefin-nvidia-laptop-userns-hardened
|
||||||
|
# description will be included in the image's metadata
|
||||||
|
description: "Bluefin nvidia with some hardening applied, for laptops"
|
||||||
|
|
||||||
|
# the base image to build on top of (FROM) and the version tag to use
|
||||||
|
base-image: ghcr.io/ublue-os/bluefin-nvidia
|
||||||
|
image-version: 39
|
||||||
|
|
||||||
|
# list of modules, executed in order
|
||||||
|
# you can include multiple instances of the same module
|
||||||
|
modules:
|
||||||
|
- from-file: common/common-files.yml
|
||||||
|
- from-file: common/bluefin-packages.yml
|
||||||
|
- from-file: common/gui-packages.yml
|
||||||
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/common-bling.yml
|
||||||
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
|
- from-file: common/common-scripts.yml
|
||||||
|
- from-file: common/bluefin-scripts.yml
|
||||||
|
- type: yafti
|
||||||
23
config/recipes/laptop/recipe-bluefin-nvidia-laptop.yml
Normal file
23
config/recipes/laptop/recipe-bluefin-nvidia-laptop.yml
Normal file
@@ -0,0 +1,23 @@
|
|||||||
|
# image will be published to ghcr.io/<user>/<name>
|
||||||
|
name: bluefin-nvidia-laptop-hardened
|
||||||
|
# description will be included in the image's metadata
|
||||||
|
description: "Bluefin nvidia with some hardening applied, for laptops"
|
||||||
|
|
||||||
|
# the base image to build on top of (FROM) and the version tag to use
|
||||||
|
base-image: ghcr.io/ublue-os/bluefin-nvidia
|
||||||
|
image-version: 39
|
||||||
|
|
||||||
|
# list of modules, executed in order
|
||||||
|
# you can include multiple instances of the same module
|
||||||
|
modules:
|
||||||
|
- from-file: common/common-files.yml
|
||||||
|
- from-file: common/bluefin-packages.yml
|
||||||
|
- from-file: common/gui-packages.yml
|
||||||
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/common-bling.yml
|
||||||
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
|
- from-file: common/common-scripts.yml
|
||||||
|
- from-file: common/bluefin-scripts.yml
|
||||||
|
- from-file: common/disableuserns-packages.yml
|
||||||
|
- from-file: common/disableuserns-scripts.yml
|
||||||
|
- type: yafti
|
||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/kinoite-packages.yml
|
- from-file: common/kinoite-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/kinoite-packages.yml
|
- from-file: common/kinoite-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/kinoite-packages.yml
|
- from-file: common/kinoite-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/kinoite-packages.yml
|
- from-file: common/kinoite-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/lazurite-packages.yml
|
- from-file: common/lazurite-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/lazurite-packages.yml
|
- from-file: common/lazurite-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/lazurite-packages.yml
|
- from-file: common/lazurite-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/lazurite-packages.yml
|
- from-file: common/lazurite-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -13,6 +13,7 @@ modules:
|
|||||||
- from-file: common/common-files.yml
|
- from-file: common/common-files.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -13,6 +13,7 @@ modules:
|
|||||||
- from-file: common/common-files.yml
|
- from-file: common/common-files.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -13,6 +13,7 @@ modules:
|
|||||||
- from-file: common/common-files.yml
|
- from-file: common/common-files.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -13,6 +13,7 @@ modules:
|
|||||||
- from-file: common/common-files.yml
|
- from-file: common/common-files.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/silverblue-packages.yml
|
- from-file: common/silverblue-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/silverblue-packages.yml
|
- from-file: common/silverblue-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/silverblue-packages.yml
|
- from-file: common/silverblue-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ modules:
|
|||||||
- from-file: common/silverblue-packages.yml
|
- from-file: common/silverblue-packages.yml
|
||||||
- from-file: common/gui-packages.yml
|
- from-file: common/gui-packages.yml
|
||||||
- from-file: common/common-packages.yml
|
- from-file: common/common-packages.yml
|
||||||
|
- from-file: common/remove-firefox.yml
|
||||||
- from-file: common/common-bling.yml
|
- from-file: common/common-bling.yml
|
||||||
- from-file: recipes/laptop/laptop-bling.yml
|
- from-file: recipes/laptop/laptop-bling.yml
|
||||||
- from-file: common/common-scripts.yml
|
- from-file: common/common-scripts.yml
|
||||||
|
|||||||
8
config/scripts/disabletailscale.sh
Normal file
8
config/scripts/disabletailscale.sh
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
# Tell build process to exit if there are any errors.
|
||||||
|
set -oue pipefail
|
||||||
|
|
||||||
|
echo "Disabling tailscale"
|
||||||
|
systemctl disable tailscaled
|
||||||
|
systemctl mask tailscaled
|
||||||
Reference in New Issue
Block a user