Custom Fedora Silverblue image that is propably not ready for production.
-
Install Fedora Silverblue
-
Verify image before rebasing (you can find cosign.pub in the root of this repo)
cosign verify --key cosign.pub ghcr.io/tbshfr/skyblue
- Rebase to the unsigned image, to get the proper signing keys:
rpm-ostree rebase ostree-unverified-registry:ghcr.io/tbshfr/skyblue
systemctl reboot
- Rebase to a signed image to finish the installation
rpm-ostree rebase ostree-image-signed:docker://ghcr.io/tbshfr/skyblue
systemctl reboot
This project was heavily inspired by: