Dimitris Karakasilis

We are testing the fedora based osbuilder image here: https://github.com/kairos-io/kairos/issues/2231

We went back to using opensuse. Closing this.

We can use [mozillla sops](https://fluxcd.io/flux/guides/mozilla-sops/#gitops-workflow) to encrypt sensitive files (and possible have a `.sample` file unencrypted next to them). This way we can make our repo public.

> @jimmykarily can you use the FOSDEM talk for this? I guess it's a good opportunity to do so

Depends on this: https://github.com/kairos-io/kairos/issues/2171 (the intermediate artifact is needed). The upgrade process also needs documentation. I'm keeping this issue open until both are done.

This is done but we need documentation + we need to try upgrading through Kubernetes (using a `Plan`).

Before we test it with Kubernetes, let's wait until #2226 is done, because the upgrade process will change.

#2226 is supposed to handle the "rotation" of the various images/confs so that they change roles. This one, we kept open just for the "upgrade through Kubernetes" part.

To clarify, this should work: https://kairos.io/docs/upgrade/kubernetes/

Currently blocked by: https://github.com/kairos-io/kairos/issues/2275 (no Kubernetes, no upgrades through Kubernetes)