Skip to content

Fix/openvox - #288

Closed
freiheit wants to merge 388 commits into
ublue-os:mainfrom
freiheit:fix/openvox
Closed

freiheit wants to merge 388 commits into
ublue-os:mainfrom
freiheit:fix/openvox

Conversation

@freiheit

Copy link
Copy Markdown

No description provided.

freiheit and others added 30 commits July 13, 2026 23:20
Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](oras-project/setup-oras@38de303...1d808f7)

---
updated-dependencies:
- dependency-name: oras-project/setup-oras
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [osbuild/bootc-image-builder-action](https://github.com/osbuild/bootc-image-builder-action) from 8661cd3832544ad68c12dcde8681b13ab0f56a8d to 30960621b85c9e76c653082f9ef4cab5a10210d5.
- [Release notes](https://github.com/osbuild/bootc-image-builder-action/releases)
- [Commits](osbuild/bootc-image-builder-action@8661cd3...3096062)

---
updated-dependencies:
- dependency-name: osbuild/bootc-image-builder-action
  dependency-version: 30960621b85c9e76c653082f9ef4cab5a10210d5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Commits](softprops/action-gh-release@v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
terra's is missing themes
Records the ublue-os:main sync from pull[bot] PR #33 as merged.

Resolved 'ours': this fork uses a substantially different, self-consistent
build pipeline (multi-variant buildah-build + compute_tags.py + wretry push)
and does not adopt upstream's just-based rewrite (ublue-os#218) or its
image-template.env config. The dependency bumps in this PR (actions/checkout
v7, docker/login-action v4.4.0) are already present in this fork
independently, so no tree changes are taken from upstream.
* chore(deps): update docker/metadata-action action to v6.1.0 (ublue-os#224)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>

* chore(deps): update actions/checkout digest to df4cb1c (ublue-os#226)

* chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 (ublue-os#225)

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): update docker/login-action action to v4.2.0 (ublue-os#223)

* refactor: rewrite in just, saner defaults (ublue-os#218)

* refactor: rewrite in just, saner defaults

I think it makes sense to do this as it is longterm easier to maintain,
locally iterate and extend.

Documents how to rebase to a local image, it pains me greatly when
people iterate on github and wait forever for things to build and then
to download the image for trivial things they could also quickly do
locally.

Rpm-ostree rechunker by default instead of opt-in legacy-rechunker,
chunkah is also available if people want to use it already, if we deem
it ready then we can enable it later on. They can all be opted-out of.

Have a way to copy files to /{usr,etc} by default.

We should sign the digest of the image instead of the tag.

Co-Authored-by: a lot of sugar and bad music

* docs: bump fedora-bootc version

Co-authored-by: Jill Fiore <contact@lumaeris.com>

* fix: formatting inconsistency

Co-authored-by: Jill Fiore <contact@lumaeris.com>

* docs: remove variable mentions from workflows

These are now defined in the image-template.env file

* fix: small nits in labels

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>

---------

Co-authored-by: Jill Fiore <contact@lumaeris.com>
Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>

* chore(deps): update actions/checkout action to v7 (ublue-os#228)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>

* chore(deps): pin dependencies (ublue-os#230)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>

* chore(deps): bump docker/login-action from 4.2.0 to 4.4.0 (ublue-os#235)

Bumps [docker/login-action](https://github.com/docker/login-action) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@650006c...af1e73f)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
Co-authored-by: Jill Fiore <contact@lumaeris.com>
Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>
Reset the tree to exactly match upstream ublue-os/image-template@f9a9e4f
(the post-"rewrite in just" template). Fork customizations are re-applied
on top in the following commits, so each re-application is an honest,
reviewable diff against upstream.

This intermediate commit intentionally does not pass fork CI.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Re-apply the fork's image content on the upstream just-based template:

- Containerfile: BASE_IMAGE/BASE_TAG/BUILD_VARIANT build-args and
  parameterized FROM so one repo builds multiple variants; re-enable the
  immutable-/opt line (upstream ships it commented out).
- Justfile: pass the three build-args from the environment in the build
  recipe. Defaults come from image-template.env via dotenv; CI overrides
  per matrix entry (env beats dotenv). Everything else is upstream.
- image-template.env: freizzite values; primary variant
  (freizzite-dx-nvidia) is the local-dev default.
- build_files: restore build.sh (variant dispatch, terra gpgcheck
  workaround for osbuild/bootc-image-builder#1188, system_files copy),
  build-common.sh, build-desktop.sh, build-deck.sh, lib-verify.sh.
  compute_tags.py is intentionally not restored: tagging now uses
  upstream's just generate-build-tags.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Adapt upstream's single-image build.yml to the fork's needs while keeping
its just-based step skeleton (build, ostree-rechunk, generate-build-tags,
tag-images, digest push, cosign-sign-digest) untouched:

- matrix over freizzite-dx-nvidia and freizzite-deck; job env overrides
  IMAGE_NAME/BASE_IMAGE/BUILD_VARIANT per variant (env beats dotenv, so
  upstream's just image_name step works unchanged)
- restore fork triggers: pre-commit workflow_run gate on main (with
  success guard) and the three custom cron schedules, replacing
  upstream's raw push trigger and daily cron
- retry transient GHCR push failures (3 attempts, 30s apart), replacing
  the old wretry.action wrapper; digestfile -> cosign flow preserved

Rechunking via rpm-ostree is now enabled (was disabled in the old
pipeline) and tagging follows upstream generate-build-tags.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- build.sh: default BUILD_VARIANT to bazzite-dx-nvidia, matching the
  Containerfile and image-template.env defaults (was a stale
  bazzite-nvidia-open left over from an earlier variant lineup)
- Justfile/image-template.env: label URLs (readme-url, documentation,
  source, url) now use REPO_NAME (freizzite) instead of the per-variant
  image name, which pointed at nonexistent GitHub repos like
  freiheit/freizzite-dx-nvidia

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Rebuild the fork's disk-image features on upstream's build-disk.yml:

- variant matrix (freizzite-dx-nvidia, freizzite-deck) with per-variant
  ISO configs; IMAGE_NAME set from the matrix
- disk_config/iso.toml recreated for the primary dx-nvidia variant --
  this also supplies the file upstream's Justfile ISO recipes and README
  reference but never shipped; iso-deck.toml restored (minimal
  unattended module set); template iso-gnome/iso-kde examples removed
- dispatch-only triggers (disk builds consume published :latest);
  upstream's platform and upload-to-s3 inputs kept verbatim
- fork's working steps restored: pre-pull timing workaround,
  --rootfs btrfs, per-variant ISO/manifest rename, sha256/shasum/md5
  checksums; qcow2 leg stays disabled (runner disk space)
- per-variant artifact names, fixing the latent collision where both
  matrix jobs uploaded to the same default artifact name

Vestigial pieces from the old fork workflow are gone: the unused
upload-to-webdav input, the undefined upload-to-s3 reference, and the
release-upload step that could never fire on a dispatch-only workflow.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Restore the fork README and add a local-development section covering the
just-based flow: per-variant local builds via env overrides, test-boot
via containers-storage bootc switch, local ISO builds, and the new
generate-build-tags tag set.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Bring back the fork's repo tooling on top of the upstream tree:
pre-commit workflow and config (gitlint conventional commits,
markdownlint, shellcheck, shfmt, yamllint, ruff), .markdownlint.jsonc,
cosign.pub (matches the existing SIGNING_SECRET), artifacthub-repo.yml
(real repository ID), and fork .gitignore additions.

Also folds in the hygiene fixes pre-commit applied to upstream files
(trailing whitespace in Containerfile, missing EOF newline in
build.yml). The whole tree now passes pre-commit run --all-files.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
feat: re-fork onto upstream image-template just-based pipeline
Add an ostree-rechunk-seeded recipe (fork-only, additive) that pulls the
previously published chunked image and places it at the rechunker output
ref before running build-chunked-oci. The chunker then reuses the prior
chunk layout, so unchanged content keeps identical layer digests across
builds and bootc upgrade only downloads what actually changed. Falls
back to plain-rechunk behavior when no previous image can be pulled.

build.yml's rechunk step now calls the seeded recipe; upstream's
ostree-rechunk recipe is untouched to keep future merges clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Bumps [osbuild/bootc-image-builder-action](https://github.com/osbuild/bootc-image-builder-action) from 8661cd3832544ad68c12dcde8681b13ab0f56a8d to 30960621b85c9e76c653082f9ef4cab5a10210d5.
- [Release notes](https://github.com/osbuild/bootc-image-builder-action/releases)
- [Commits](osbuild/bootc-image-builder-action@8661cd3...3096062)

---
updated-dependencies:
- dependency-name: osbuild/bootc-image-builder-action
  dependency-version: 30960621b85c9e76c653082f9ef4cab5a10210d5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
claude and others added 28 commits October 29, 2026 19:43
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjG5PL6bE7UN8mu57XwfDY
ci(build): add upstream unstable stream and freizzite-nvidia variant
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjG5PPeJ3iGgvzy3afAQFU
fix(ci): run disk builds on ubuntu-24.04
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjG5PMJmEofUU4GAZZ7D9W
feat: add claude-desktop-unofficial repo and package
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
ci(build): cap chunkah rechunk at 30m, dump resources on failure
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjG5PMT4Zfid8TTM2Phmaz
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore: sync upstream image-template 2026-11-05
…ow 1000

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjG5PPCYVszqMmb9dFhLxb
…mit-0.x

chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.17.4
fix(build): move 1Password GIDs to 1500-1502, app rejects helpers below 1000
chore: sync upstream image-template 2026-11-07
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjG5PKzsw3DpbpXZLCscMg
feat: add Discover KNS backend and daily add-on update timer
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjG5PMErato14SUvme965S
feat: add python3-websockets to desktop images
It exists now, but doesn't have what we need yet.
@freiheit freiheit closed this Nov 12, 2026
@freiheit
freiheit deleted the fix/openvox branch November 12, 2026 02:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants