main
main copied to clipboard
ublue-os
OCI base images of Fedora with batteries included
Due to the recent xz incident, it would be good if we frequently generate SBOMs for our images. Consider using [Syft](https://github.com/anchore/syft/tree/main), and possibly later integrating with [Grype](https://github.com/anchore/grype) for vuln scanning....
https://hansdegoede.livejournal.com/27276.html This is now in RPMFusion, we should investigate this.
### Describe the package Udica is a tool to assist users to create SELinux profiles for podman containers. When wanting to have shared files between the host and a container,...
I think [this line](https://github.com/ublue-os/main/blob/410e630ef1c77bf2c0072396da9bb622aa1cb08d/post-install.sh#L10) and the one after it should be removed. These timers are not present in Bluefin and I can't find any recent reference to them. ``` ❯...
### Describe the package I was hoping to get the `python-validity` (https://github.com/uunicorn/python-validity) package out of the box in this image. Thus, fingerprints can be used on most types of laptops....
https://gitlab.com/fedora/ostree/ci-test Let's see if we can help getting these images signed!
Since we are considering splitting out our container files into smaller bash scripts (rather than doing inline bash), I think it would be helpful to have a code analysis tool...
Clevis is another scheme for supporting LUKS decryption via tpm2 and/or a network based decryption scheme. Clevis is already included in our images; however, clevis-dracut is not. We've recently enabled...
When dealing with #553, I noticed we did not have a defined plan for dealing with CVEs. I think it would be valuable to have a runbook on how to...