Nargothrond OS is an immutable atomic image based on Universal Blue's version of Fedora Silverblue and built using a BlueBuild template. Made for laptops with undervolting support and NVIDIA GPUs, all provided images are intended solely for personal use and playground purposes only.
- NVIDIA propietary drivers from negativo17.
- Electronic signtures support with Autofirma.
- The
rpm-ostreed-automatic.serviceservice is disabled in favour ofbootc-fetch-apply-updates.service. An override has been set for the latter to avoid automatic reboots. - Undervolt support with throttled
- A selection of useful extensions have been included along with a few modifications to GNOME's defaults.
- Some default pre-installed rpm packages and flatpaks have been removed or added.
Warning
This is an experimental feature, try at your own discretion.
To rebase an existing atomic Fedora installation to the latest build:
- First choose one of the image
$FLAVOUR:$FALVOUR = main, nvidia or nvidia-open - Then rebase to the unsigned image, to get the proper signing keys and policies installed:
rpm-ostree rebase ostree-unverified-registry:ghcr.io/grondalf/nargothrond-$FLAVOUR:latest - Reboot to complete the rebase:
systemctl reboot - Then rebase to the signed image, like so:
rpm-ostree rebase ostree-image-signed:docker://ghcr.io/grondalf/nargothrond-$FLAVOUR:latest - Reboot again to complete the installation
systemctl reboot
The latest tag will automatically point to the latest build. That build will still always use the Fedora version specified in recipe-$FLAVOUR.yml, so you won't get accidentally updated to the next major version.
If build on Fedora Atomic, you can generate an offline ISO with the instructions available here. These ISOs cannot unfortunately be distributed on GitHub for free due to large sizes, so for public projects something else has to be used for hosting.
These images are signed with Sigstore's cosign. You can verify the signature by downloading the cosign.pub file from this repo and running the following command:
cosign verify --key cosign.pub ghcr.io/grondalf/nargothrond