Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 10 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ This is a highly experimental Fedora Atomic Desktop image featuring the Trinity

Use `ternion-linux` for non-NVIDIA systems and `ternion-linux-nvidia` for systems with NVIDIA graphics.

The image is technically usable, but it is not polished at all, and I recommend pinning your existing deployment before rebasing.
This image is technically usable, but it is not polished at all, and I recommend pinning your existing deployment before rebasing.

## Installation

Expand All @@ -15,7 +15,7 @@ The image is technically usable, but it is not polished at all, and I recommend

To rebase an existing atomic Fedora installation to the latest build:

- First rebase to the unsigned image, to get the proper signing keys and policies installed:
- First, rebase to the unsigned image, to get the proper signing keys and policies installed:
```
rpm-ostree rebase ostree-unverified-registry:ghcr.io/luciascarlet/ternion-linux:latest
```
Expand All @@ -27,20 +27,24 @@ To rebase an existing atomic Fedora installation to the latest build:
```
rpm-ostree rebase ostree-image-signed:docker://ghcr.io/luciascarlet/ternion-linux:latest
```
- Reboot again to complete the installation
- Reboot again to complete the installation:
```
systemctl reboot
```

The `latest` tag will automatically point to the latest build. That build will still always use the Fedora version specified in `recipe.yml`, so you won't get accidentally updated to the next major version.
The `latest` tag will automatically point to the latest build. That build will still always use the Fedora version specified in `recipe.yml`, so you won't accidentally get updated to the next major version.

## ISO

If build on Fedora Atomic, you can generate an offline ISO with the instructions available [here](https://blue-build.org/learn/universal-blue/#fresh-install-from-an-iso). These ISOs cannot unfortunately be distributed on GitHub for free due to large sizes, so for public projects something else has to be used for hosting.
If you're using Fedora Atomic, you can generate an offline ISO image with the instructions available [here](https://blue-build.org/learn/universal-blue/#fresh-install-from-an-iso).

Unfortunately, these ISOs can't be distributed on GitHub for free (due to their large sizes). As such, for public projects, something else must be used for hosting.

## Verification

These images are signed with [Sigstore](https://www.sigstore.dev/)'s [cosign](https://github.com/sigstore/cosign). You can verify the signature by downloading the `cosign.pub` file from this repo and running the following command:
These images are signed with [Sigstore](https://www.sigstore.dev/)'s [cosign](https://github.com/sigstore/cosign).

You can verify the signature by downloading the `cosign.pub` file from this repo and running the following command:

```bash
cosign verify --key cosign.pub ghcr.io/luciascarlet/ternion-linux
Expand Down