Add bluefin images

This commit is contained in:
qoijjj
2023-12-22 09:21:59 -08:00
parent c36b38d0cd
commit 681f3455f5
47 changed files with 254 additions and 2 deletions

View File

@@ -45,6 +45,8 @@ jobs:
- recipes/desktop/recipe-silverblue-nvidia.yml
- recipes/desktop/recipe-kinoite-main.yml
- recipes/desktop/recipe-kinoite-nvidia.yml
- recipes/desktop/recipe-bluefin-main.yml
- recipes/desktop/recipe-bluefin-nvidia.yml
- recipes/desktop/recipe-lazurite-main.yml
- recipes/desktop/recipe-lazurite-nvidia.yml
- recipes/desktop/recipe-sericea-main.yml
@@ -54,6 +56,8 @@ jobs:
- recipes/laptop/recipe-silverblue-nvidia-laptop.yml
- recipes/laptop/recipe-kinoite-main-laptop.yml
- recipes/laptop/recipe-kinoite-nvidia-laptop.yml
- recipes/laptop/recipe-bluefin-main-laptop.yml
- recipes/laptop/recipe-bluefin-nvidia-laptop.yml
- recipes/laptop/recipe-lazurite-main-laptop.yml
- recipes/laptop/recipe-lazurite-nvidia-laptop.yml
- recipes/laptop/recipe-sericea-main-laptop.yml
@@ -67,6 +71,8 @@ jobs:
- recipes/desktop/recipe-silverblue-nvidia-userns.yml
- recipes/desktop/recipe-kinoite-main-userns.yml
- recipes/desktop/recipe-kinoite-nvidia-userns.yml
- recipes/desktop/recipe-bluefin-main-userns.yml
- recipes/desktop/recipe-bluefin-nvidia-userns.yml
- recipes/desktop/recipe-lazurite-main-userns.yml
- recipes/desktop/recipe-lazurite-nvidia-userns.yml
- recipes/desktop/recipe-sericea-main-userns.yml
@@ -76,6 +82,8 @@ jobs:
- recipes/laptop/recipe-silverblue-nvidia-laptop-userns.yml
- recipes/laptop/recipe-kinoite-main-laptop-userns.yml
- recipes/laptop/recipe-kinoite-nvidia-laptop-userns.yml
- recipes/laptop/recipe-bluefin-main-laptop-userns.yml
- recipes/laptop/recipe-bluefin-nvidia-laptop-userns.yml
- recipes/laptop/recipe-lazurite-main-laptop-userns.yml
- recipes/laptop/recipe-lazurite-nvidia-laptop-userns.yml
- recipes/laptop/recipe-sericea-main-laptop-userns.yml

View File

@@ -60,6 +60,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
##### desktop
- kinoite-main-hardened
- kinoite-nvidia-hardened
- bluefin-main-hardened
- bluefin-nvidia-hardened
- lazurite-main-hardened
- lazurite-nvidia-hardened
- silverblue-main-hardened
@@ -70,6 +72,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
##### laptop
- kinoite-main-laptop-hardened
- kinoite-nvidia-laptop-hardened
- bluefin-main-laptop-hardened
- bluefin-nvidia-laptop-hardened
- lazurite-main-laptop-hardened
- lazurite-nvidia-laptop-hardened
- silverblue-main-laptop-hardened
@@ -86,6 +90,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
##### desktop
- kinoite-main-userns-hardened
- kinoite-nvidia-userns-hardened
- bluefin-main-userns-hardened
- bluefin-nvidia-userns-hardened
- lazurite-main-userns-hardened
- lazurite-nvidia-userns-hardened
- silverblue-main-userns-hardened
@@ -96,6 +102,8 @@ For more info on uBlue, check out the [uBlue homepage](https://universal-blue.or
##### laptop
- kinoite-main-laptop-userns-hardened
- kinoite-nvidia-laptop-userns-hardened
- bluefin-main-laptop-userns-hardened
- bluefin-nvidia-laptop-userns-hardened
- lazurite-main-laptop-userns-hardened
- lazurite-nvidia-laptop-userns-hardened
- silverblue-main-laptop-userns-hardened

View File

@@ -0,0 +1,14 @@
type: rpm-ostree
remove:
- gnome-shell-extension-gsconnect
- nautilus-gsconnect
- samba-common-tools
- samba-dcerpc
- samba-ldb-ldap-modules
- samba-winbind
- samba-winbind-clients
- samba-winbind-modules
- samba
- usbmuxd
- cockpit-bridge
- gvfs-afc

View File

@@ -0,0 +1,3 @@
type: script
scripts:
- disabletailscale.sh

View File

@@ -12,8 +12,6 @@ install:
- bubblejail
remove:
- firefox
- firefox-langpacks
- virtualbox-guest-additions
- open-vm-tools
- open-vm-tools-desktop

View File

@@ -0,0 +1,9 @@
type: rpm-ostree
remove:
- firefox
- firefox-langpacks

View File

@@ -0,0 +1,20 @@
# image will be published to ghcr.io/<user>/<name>
name: bluefin-main-userns-hardened
# description will be included in the image's metadata
description: "Bluefin main with some hardening applied"
# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/ublue-os/bluefin
image-version: 39
# list of modules, executed in order
# you can include multiple instances of the same module
modules:
- from-file: common/common-files.yml
- from-file: common/bluefin-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/bluefin-scripts.yml
- type: yafti

View File

@@ -0,0 +1,22 @@
# image will be published to ghcr.io/<user>/<name>
name: bluefin-main-hardened
# description will be included in the image's metadata
description: "Bluefin main with some hardening applied"
# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/ublue-os/bluefin
image-version: 39
# list of modules, executed in order
# you can include multiple instances of the same module
modules:
- from-file: common/common-files.yml
- from-file: common/bluefin-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/bluefin-scripts.yml
- from-file: common/disableuserns-packages.yml
- from-file: common/disableuserns-scripts.yml
- type: yafti

View File

@@ -0,0 +1,20 @@
# image will be published to ghcr.io/<user>/<name>
name: bluefin-nvidia-userns-hardened
# description will be included in the image's metadata
description: "Bluefin nvidia with some hardening applied"
# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/ublue-os/bluefin-nvidia
image-version: 39
# list of modules, executed in order
# you can include multiple instances of the same module
modules:
- from-file: common/common-files.yml
- from-file: common/bluefin-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/bluefin-scripts.yml
- type: yafti

View File

@@ -0,0 +1,22 @@
# image will be published to ghcr.io/<user>/<name>
name: bluefin-nvidia-hardened
# description will be included in the image's metadata
description: "Bluefin nvidia with some hardening applied"
# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/ublue-os/bluefin-nvidia
image-version: 39
# list of modules, executed in order
# you can include multiple instances of the same module
modules:
- from-file: common/common-files.yml
- from-file: common/bluefin-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/bluefin-scripts.yml
- from-file: common/disableuserns-packages.yml
- from-file: common/disableuserns-scripts.yml
- type: yafti

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/kinoite-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- type: yafti

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/kinoite-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/disableuserns-packages.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/kinoite-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- type: yafti

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/kinoite-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/disableuserns-packages.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/gui-packages.yml
- from-file: common/lazurite-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- type: yafti

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/gui-packages.yml
- from-file: common/lazurite-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/disableuserns-packages.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/gui-packages.yml
- from-file: common/lazurite-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- type: yafti

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/gui-packages.yml
- from-file: common/lazurite-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/disableuserns-packages.yml

View File

@@ -13,6 +13,7 @@ modules:
- from-file: common/common-files.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- type: yafti

View File

@@ -13,6 +13,7 @@ modules:
- from-file: common/common-files.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/disableuserns-packages.yml

View File

@@ -13,6 +13,7 @@ modules:
- from-file: common/common-files.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- type: yafti

View File

@@ -13,6 +13,7 @@ modules:
- from-file: common/common-files.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/disableuserns-packages.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/silverblue-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- type: yafti

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/silverblue-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/disableuserns-packages.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/silverblue-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- type: yafti

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/silverblue-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/disableuserns-packages.yml

View File

@@ -0,0 +1,21 @@
# image will be published to ghcr.io/<user>/<name>
name: bluefin-main-laptop-userns-hardened
# description will be included in the image's metadata
description: "Bluefin main with some hardening applied, for laptops"
# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/ublue-os/bluefin
image-version: 39
# list of modules, executed in order
# you can include multiple instances of the same module
modules:
- from-file: common/common-files.yml
- from-file: common/bluefin-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/bluefin-scripts.yml
- type: yafti

View File

@@ -0,0 +1,23 @@
# image will be published to ghcr.io/<user>/<name>
name: bluefin-main-laptop-hardened
# description will be included in the image's metadata
description: "Bluefin main with some hardening applied, for laptops"
# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/ublue-os/bluefin
image-version: 39
# list of modules, executed in order
# you can include multiple instances of the same module
modules:
- from-file: common/common-files.yml
- from-file: common/bluefin-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/bluefin-scripts.yml
- from-file: common/disableuserns-packages.yml
- from-file: common/disableuserns-scripts.yml
- type: yafti

View File

@@ -0,0 +1,21 @@
# image will be published to ghcr.io/<user>/<name>
name: bluefin-nvidia-laptop-userns-hardened
# description will be included in the image's metadata
description: "Bluefin nvidia with some hardening applied, for laptops"
# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/ublue-os/bluefin-nvidia
image-version: 39
# list of modules, executed in order
# you can include multiple instances of the same module
modules:
- from-file: common/common-files.yml
- from-file: common/bluefin-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/bluefin-scripts.yml
- type: yafti

View File

@@ -0,0 +1,23 @@
# image will be published to ghcr.io/<user>/<name>
name: bluefin-nvidia-laptop-hardened
# description will be included in the image's metadata
description: "Bluefin nvidia with some hardening applied, for laptops"
# the base image to build on top of (FROM) and the version tag to use
base-image: ghcr.io/ublue-os/bluefin-nvidia
image-version: 39
# list of modules, executed in order
# you can include multiple instances of the same module
modules:
- from-file: common/common-files.yml
- from-file: common/bluefin-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml
- from-file: common/bluefin-scripts.yml
- from-file: common/disableuserns-packages.yml
- from-file: common/disableuserns-scripts.yml
- type: yafti

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/kinoite-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/kinoite-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/kinoite-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/kinoite-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/gui-packages.yml
- from-file: common/lazurite-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/gui-packages.yml
- from-file: common/lazurite-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/gui-packages.yml
- from-file: common/lazurite-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/gui-packages.yml
- from-file: common/lazurite-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -13,6 +13,7 @@ modules:
- from-file: common/common-files.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -13,6 +13,7 @@ modules:
- from-file: common/common-files.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -13,6 +13,7 @@ modules:
- from-file: common/common-files.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -13,6 +13,7 @@ modules:
- from-file: common/common-files.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/silverblue-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/silverblue-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/silverblue-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -14,6 +14,7 @@ modules:
- from-file: common/silverblue-packages.yml
- from-file: common/gui-packages.yml
- from-file: common/common-packages.yml
- from-file: common/remove-firefox.yml
- from-file: common/common-bling.yml
- from-file: recipes/laptop/laptop-bling.yml
- from-file: common/common-scripts.yml

View File

@@ -0,0 +1,8 @@
#!/usr/bin/env bash
# Tell build process to exit if there are any errors.
set -oue pipefail
echo "Disabling tailscale"
systemctl disable tailscaled
systemctl mask tailscaled