Skip to content

Commit

Permalink
Some more details to the rebase instructions
Browse files Browse the repository at this point in the history
  • Loading branch information
samhclark committed Nov 8, 2024
1 parent d81f5ab commit fcd8b32
Showing 1 changed file with 13 additions and 7 deletions.
20 changes: 13 additions & 7 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,14 +4,16 @@ Following Jorge Castro's lead and making my own spin on Silverblue

## Rebasing onto this image

From another Silverblue based image, first, rebase onto the unsigned image.
This bootstrapping process helps get the public keys onto your machine
and makes sure everything is configured right.

From another Silverblue based image, first, rebase onto the _unverified_ image.

```
rpm-ostree rebase ostree-unverified-registry:ghcr.io/samhclark/custom-silverblue:41
```

Optional: Verify that the image you just rebased onto is signed.

Optional: Manually verify that the image you just rebased onto is signed.

```
$ wget -O - https://raw.githubusercontent.com/samhclark/custom-silverblue/refs/heads/main/overlay-root/usr/etc/pki/cosign/cosign.pub \
Expand All @@ -22,10 +24,14 @@ $ wget -O - https://raw.githubusercontent.com/samhclark/custom-silverblue/refs/h
)
```

Reboot.
Then, after that, rebase onto the signed image.
This bootstrapping process helps get the public keys onto your machine
and makes sure everything is configured right.
If the above command fails (returns with a non-zero exit code), then you should abort the rebase

```
rpm-ostree cleanup --pending
```

Assuming it succeeded, then reboot: `systemctl reboot`.
After that, rebase onto the signed image.

```
rpm-ostree rebase ostree-image-signed:docker://ghcr.io/samhclark/custom-silverblue:41
Expand Down

0 comments on commit fcd8b32

Please sign in to comment.