A BlueBuild image based on wayblue's Hyprland images, and customized based on how I set up my development laptop.

• set up a healthchecks.io alert for backups
• add /tmp as tmpfs in /etc/fstab
• set up kwallet to unlock GPG key on login and kwallet-pam rules inserted into /etc/pam.d/login
  • or use pam-gnupg
• set up systemd service to auto-run rpm-ostree upgrade

• set hostname
• auth into 1Password
• enable 1Password SSH agent
• Run chezmoi init --apply after first 1Password auth
• pass setup/sync for secrets that live on disk rather than 1Password
• setup Firefox profile/Mozilla sync
• auth to Tailscale
• set up git-annex repos
• sync important personal files from other laptops (maybe using personal git-annex repo)
  • Downloads
  • Code
  • Pictures
  • ~/.local/share/mail
  • ~/.local/share/atuin

Most of these will be installed in Distrobox or toolbx containers (or some other, similar containerization solution), unless they need access to the host kernel to do their job.

• mopidy+gstreamer
• noti
• mimeo
• xdg-utils-mimeo
• jless
• lazygit
• traceroute
• calc
• difftastic
• gh
• glances
• yq
• htop
• jq
• vault
• wget
• whois
• zeal-git
• neovim-remote
• git-annex
• rclone
• autorestic
• restic
• yt-dlp
• aerc
• gmailctl
• lynx
• msmtp
• mutt-wizard
• neomutt
• notmuch
• task
• taskopen
• timew
• bugwarrior
• nnn
• pass

• use nwg-panel

To rebase an existing atomic Fedora installation to the latest build:

• First rebase to the unsigned image, to get the proper signing keys and policies installed:

  rpm-ostree rebase ostree-unverified-registry:ghcr.io/joshmock/joshmock-hyprland:latest
  

• Reboot to complete the rebase:

  systemctl reboot
  

• Then rebase to the signed image, like so:

  rpm-ostree rebase ostree-image-signed:docker://ghcr.io/joshmock/joshmock-hyprland:latest
  

• Reboot again to complete the installation

  systemctl reboot
  

The latest tag will automatically point to the latest build. That build will still always use the Fedora version specified in recipe.yml, so you won't get accidentally updated to the next major version.

If built on Fedora Atomic, you can generate an offline ISO with the instructions available here. These ISOs cannot unfortunately be distributed on GitHub for free due to large sizes, so for public projects something else has to be used for hosting.

These images are signed with Sigstore's cosign. You can verify the signature by downloading the cosign.pub file from this repo and running the following command:

cosign verify --key cosign.pub ghcr.io/joshmock/joshmock-hyprland:latest