B

bootc

Runner VM golden images: the estate's CI executors run the estate's own OS, built to qcow2 from cairn/base.

Vignette: supply-chain evidence. Image signature verification via policy.json, SLSA provenance, and SBOM.

Vignette: unattended edge box. State-bound disk encryption with TPM policy, a recovery key, and first-boot rebind.

Vignette: attended workstation. Passphrase-only disk encryption posture.

Vignette: plain instance. No disk encryption, boot assurance only.

The cairn estate CI/CD catalog: build, sign, seal, gate, and promote components for bootc images. Carried forward from dunn.dev/immutable/pipeline.

The cairn reference image: from-scratch Fedora bootc compose with source-built, signed ZFS and NVIDIA kernel modules. Variants: base, base-zfs, base-zfs-nvidia.

CI/CD Catalog components for FROM-scratch bootc images

Landing page for dunn.dev/immutable — homelab bootc estate

FROM-scratch Fedora bootc base images with source-built ZFS and NVIDIA kmods

A Bazzite-inspired Fedora bootc image made for DIY Steam Machines and HTPCs

Manage a powerdns-recursor and authortative (dns) instance with a cloud native workflow - aka GitOps thanks to bootc - aka Image Mode.

Forkable reference instance on basef for dunn.dev/immutable

Manage a pihole instance with a cloud native workflow - aka GitOps thanks to bootc - aka Image Mode.

This repo is used to build and publish my Fedora bootc parent image. All my other bootc based images will be a derivative off this one.

A collection of markdown files about image mode Linux (bootc / bootable containers)

A collection of example bootable containers (bootc)