led0nk / images is an OCI-native Fedora Silverblue build that bakes my daily-driver tooling straight into the operating system, giving me a reproducible, fully-immutable workstation I can rebase onto any machine in minutes.
- Immutable base – starts from
quay.io/fedora/fedora-silverblueand produces an OSTree commit. - Container transport – published to
ghcr.io/led0nk/images, consumable withrpm-ostree rebase. - Declarative package set – extra RPMs are layered in at build time with
dnf(previouslyrpm-ostree install). - Signed supply-chain – each build is signed with cosign; verify before you boot.
- CI/CD – GitHub Actions builds, pushes and signs every tag.
| Category | Notable packages¹ |
|---|---|
| CLI / Dev | ripgrep, fzf, bat, fd-find, tmux, helm, python3-pip, nmap, ShellCheck, restic |
| Desktop (GNOME) | gnome-terminal, nextcloud-client, keepassxc |
| Wayland / Sway | sway, swaybg, swaylock, swayidle, waybar, wlogout, rofi, blueman, pavucontrol, grim, swappy, dunst, imv |
| Networking | tailscale, podman-docker, podman-compose, NetworkManager-tui |
| Security | pam_yubico, yubikey-personalization-gui, age |
¹ See the full list in
Containerfile. :contentReference[oaicite:0]{index=0}
On an existing Fedora Silverblue/Kinoite system:
sudo rpm-ostree rebase --experimental \
ostree-unverified-registry:ghcr.io/led0nk/images:latestreboot and enjoy
cosign verify --key cosign.pub ghcr.io/led0nk/images:latest