[pull] main from bluefin-main

.devcontainer/devcontainer.json

@@ -0,0 +1,34 @@
+// For format details, see https://aka.ms/devcontainer.json.
+{
+	"name": "Bluefin-devcontainer",
+	"image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+	"customizations": {
+		"vscode": {
+			"extensions": [
+				"eamodio.gitlens",
+				"hangxingliu.vscode-systemd-support",
+				"mads-hartmann.bash-ide-vscode",
+				"ms-azuretools.vscode-docker",
+				"sclu1034.justfile",
+				"timonwong.shellcheck"
+			]
+		}
+	},
+	// Likely need to add "--userns=keep-id, --group-add=keep-groups" for podman support 
+	"runArgs": ["--init"],
+	"remoteEnv": { "LOCAL_WORKSPACE_FOLDER": "${localWorkspaceFolder}" },
+	"securityOpt": [
+		"label=disable"
+	],
+	"features": {
+		"ghcr.io/devcontainers/features/docker-outside-of-docker:1": {},
+		"ghcr.io/guiyomh/features/just:0": {},
+		"ghcr.io/lukewiwa/features/shellcheck:0": {},
+		"ghcr.io/jsburckhardt/devcontainer-features/skopeo:1": {}
+	},
+	"onCreateCommand": {
+		"bash-completions": "sudo apt-get install -y bash-completion; echo 'source /etc/profile.d/bash_completion.sh' | sudo tee -a /etc/bash.bashrc > /dev/null",
+		"just-completions": "just --completions bash | sudo tee -a /etc/bash_completion.d/just > /dev/null",
+		"docker-completions": "docker completion bash | sudo tee -a /etc/bash_completion.d/docker.sh > /dev/null"
+	}
+}

.gitattributes

@@ -0,0 +1,13 @@
+*.yml linguist-detectable=true
+*.yml linguist-language=YAML
+
+*.yaml linguist-detectable=true
+*.yaml linguist-language=YAML
+
+*.just linguist-detectable=true
+*.just linguist-documentation=false
+*.just linguist-language=Just
+
+*.json linguist-detectable=true
+*.json linguist-documentation=false
+*.json linguist-language=JSON

.github/FUNDING.yml

@@ -0,0 +1 @@
+github: [bketelsen, castrojo, nicknamenamenick]

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -29,6 +29,12 @@ body:
       label: Output of `rpm-ostree status`
       description: Please run `rpm-ostree status` and paste the output here.
       render: shell
+  - type: textarea
+    id: groups
+    attributes:
+      label: Output of `groups`
+      description: Please run `groups` and paste the output here.
+      render: shell    
   - type: textarea
     id: extra-context
     attributes:

.github/dependabot.yml

@@ -9,3 +9,7 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+  - package-ecosystem: "devcontainers"
+    directory: "/"
+    schedule:
+      interval: weekly

.github/pull_request_template.md

@@ -0,0 +1,7 @@
+<!--
+
+## Thank you for contributing to the Universal Blue project!
+
+Please [read the Contributor's Guide](https://universal-blue.org/CONTRIBUTING) before submitting a pull request.
+
+-->

.github/renovate.json5

@@ -0,0 +1,21 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:best-practices",
+  ],
+
+  // Do not rebase when the default branch is updated
+  "rebaseWhen": "never",
+
+  "packageRules": [
+    {
+      "automerge": true,
+      "matchUpdateTypes": ["pin", "pinDigest"]
+    },
+    {
+      "automerge": true,
+      "matchManagers": ["dockerfile"],
+      "matchUpdateTypes": ["digest"]
+    }
+  ]
+}

.github/syft.yml

@@ -0,0 +1,11 @@
+# Exclude some files Syft will never get anything useful from
+exclude:
+  - '/sysroot/ostree/repo/objects/**'
+  - '/usr/share/icons/**'
+  - '/usr/share/doc/**'
+
+# There's a known issue with the previous releases where ELF cataloger uses far
+# too much memory, causing crashes.  Current recommendation is to disable this
+# until the Anchore team have investigated and rolled out a fix
+select-catalogers:
+  - '-elf-package'

.github/workflows/build-aurora-latest-iso.yml

@@ -0,0 +1,13 @@
+name: Aurora Latest ISO
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 4 * * sun'  # 04:00 Sunday
+jobs:
+  build-40:
+    name: Aurora Latest ISO
+    uses: ./.github/workflows/reusable-build-iso.yml
+    secrets: inherit
+    with:
+      brand_name: aurora
+      fedora_version: latest

.github/workflows/build-aurora-stable-iso.yml

@@ -0,0 +1,12 @@
+name: Aurora Stable ISO
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Aurora Stable
+    uses: ./.github/workflows/reusable-build-iso.yml
+    secrets: inherit
+    with:
+      brand_name: aurora
+      fedora_version: stable

.github/workflows/build-beta-aurora.yml

@@ -0,0 +1,28 @@
+name: Aurora Beta
+on:
+  # merge_group:
+  # pull_request:
+  #   branches:
+  #     - main
+  #     - testing
+  #   paths-ignore:
+  #     - "**.md"
+  #     - "system_files/silverblue/**"
+  # push:
+  #   branches:
+  #     - main
+  #   paths-ignore:
+  #     - "**.md"
+  #     - "system_files/silverblue/**"
+  # schedule:
+  #   - cron: "40 4 * * *" # 4:40 UTC everyday
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: build
+    uses: ./.github/workflows/reusable-build.yml
+    secrets: inherit
+    with:
+      brand_name: aurora
+      fedora_version: beta

.github/workflows/build-beta-bluefin.yml

@@ -0,0 +1,28 @@
+name: Bluefin Beta
+on:
+  # merge_group:
+  # pull_request:
+  #   branches:
+  #     - main
+  #     - testing
+  #   paths-ignore:
+  #     - "**.md"
+  #     - "system_files/silverblue/**"
+  # push:
+  #   branches:
+  #     - main
+  #   paths-ignore:
+  #     - "**.md"
+  #     - "system_files/silverblue/**"
+  # schedule:
+  #   - cron: "40 4 * * *" # 4:40 UTC everyday
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: build
+    uses: ./.github/workflows/reusable-build.yml
+    secrets: inherit
+    with:
+      brand_name: bluefin
+      fedora_version: beta

.github/workflows/build-bluefin-gts-iso.yml

@@ -0,0 +1,14 @@
+name: Bluefin GTS ISO
+on:
+  workflow_dispatch:
+  # schedule:
+  #   - cron: '0 2 * * sun'  # 02:00 Sunday
+
+jobs:
+  build-gts:
+    name: Bluefin GTS
+    uses: ./.github/workflows/reusable-build-iso.yml
+    secrets: inherit
+    with:
+      brand_name: bluefin
+      fedora_version: gts

.github/workflows/build-bluefin-latest-iso.yml

@@ -0,0 +1,15 @@
+name: Bluefin Latest ISO
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 4 * * sun'  # 04:00 Sunday
+
+
+jobs:
+  build-latest:
+    name: Bluefin Latest
+    uses: ./.github/workflows/reusable-build-iso.yml
+    secrets: inherit
+    with:
+      brand_name: bluefin
+      fedora_version: latest

.github/workflows/build-bluefin-stable-iso.yml

@@ -0,0 +1,15 @@
+name: Bluefin Stable ISO
+on:
+  workflow_dispatch:
+  # schedule:
+  #   - cron: '41 6 * * 2'  # 6:41 UTC every Tuesday
+
+
+jobs:
+  build-latest:
+    name: Bluefin Stable
+    uses: ./.github/workflows/reusable-build-iso.yml
+    secrets: inherit
+    with:
+      brand_name: bluefin
+      fedora_version: stable

.github/workflows/build-coreos-aurora.yml

@@ -0,0 +1,21 @@
+name: Aurora Stable
+on:
+  pull_request:
+    branches:
+      - main
+      - testing
+    paths-ignore:
+      - '**.md'
+      - 'system_files/silverblue/**'
+  schedule:
+    - cron: '41 5 * * 2'  # 5:41 UTC every Tuesday
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: build
+    uses: ./.github/workflows/reusable-build.yml
+    secrets: inherit
+    with:
+      brand_name: aurora
+      fedora_version: stable

.github/workflows/build-coreos-bluefin.yml

@@ -0,0 +1,21 @@
+name: Bluefin Stable
+on:
+  pull_request:
+    branches:
+      - main
+      - testing
+    paths-ignore:
+      - '**.md'
+      - 'system_files/kinoite/**'
+  schedule:
+    - cron: '41 5 * * 2'  # 5:41 UTC every Tuesday
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: build
+    uses: ./.github/workflows/reusable-build.yml
+    secrets: inherit
+    with:
+      brand_name: bluefin
+      fedora_version: stable