Startingleaf

A bootable container desktop built on Fedora Atomic and Secureblue with BlueBuild

For more info, check out the BlueBuild and Secureblue websites.

Feature List

• Apple SuperDrive udev rule (requires sg3_utils package)
  • Rule from this gist by @yookoala
• Nerd fonts
• MoreWaita and Adw-GTK3 for consistent Gnome look
• Tailscale for easy networking
• Mullvad VPN
• Dotfiles with Chezmoi
• Brew for cli apps, with Brewfile in dotifles for semi-declarative management
• Fish as interactive shell (set through terminal emulator settings)
• Gnome configuration
  • Tiling Assistant extension
  • Gnome-Classic session removed
  • Gnome system monitor, Gnome Software, and Gnome Tweaks removed
  • Keyboard shortcuts and system settings defined through gschema overrides
• Trivalent web browser
• ADB, Fastboot, and scrcpy for Android devices
• Better Chinese input with Rime
• Syncthing to .. you know .. sync things
• Landrun
• Yubico Authenticator desktop app

Incomplete or Incoming Features

• Syncthing systemd service (See https://docs.syncthing.net/users/autostart.html#linux)

Features required as a Secureblue downstream image

• Image name starts with silverblue for audit script compatibility
• Provenance verification. See build scripts and /usr/libexec/secureblue/verify-provenance.sh

Installation

Warning

This is my personal image, which I manage for myself. You may copy from this repo or use these images, but I will not provide any support or guarantee of functionality.

1. Install Secureblue
2. run0 podman image trust set -t accept ghcr.io/oakleafknight06
3. Rebase onto the custom image like so:

   rpm-ostree rebase ostree-image-signed:docker://ghcr.io/oakleafknight06/silverblue-startingleaf:latest
   

4. Reboot into the custom image
5. Reset container policy: run0 cp /usr/etc/containers/policy.json /etc/containers/policy.json