About

This is a custom Linux build designed around Fedora's Atomic Desktops, as a community-driven adaptation of the Universal Blue project. These systems are immutable by nature, which means users are actually gated from directly modifying the system, providing an incredibly secure form of interacting with the Linux platform.

This is the OS I use daily on a Framework 13 laptop. It features the COSMIC desktop environment, Homebrew for package management, and anything you could want for containerized development.

Installation

You can download an ISO from the latest Github Action Build Artifact. GitHub requires you be logged in to download.

Alternatively, and preferably for most users, you can rebase from any Fedora Atomic image by running the following:

rpm-ostree rebase ostree-unverified-registry:ghcr.io/givensuman/dune-os:stable

Post-Install

You can layer whatever core packages you like on top of this build. I recommend installing your favorite shell:

rpm-ostree install --apply-live fish
sudo usermod -s $(which fish) $USER

This is also a good time to set up rootless Docker, if you're into that sort of thing:

sudo groupadd docker
sudo usermod -aG docker $USER

And then get the rest of your software through the included app store or with brew:

brew install \
nvim \
bat \
eza \
zoxide

Secure Boot

Secure Boot is enabled by default on Universal Blue builds, adding an extra layer of security. During the initial installation, you will be prompted to enroll the secure boot key in the BIOS. To do so, enter the password universalblue when asked.

If this step is skipped during setup, you can manually enroll the key by running the following command in the terminal:

ujust enroll-secure-boot-key

Secure Boot works with Universal Blue's custom key, which can be found in the root of the akmods repository here. To enroll the key before installation or rebase, download the key and run:

sudo mokutil --timeout -1
sudo mokutil --import public_key.der

Issues

For issues with the images, feel free to submit an issue in this repository. For COSMIC related issues, please see cosmic-epoch/issues.

Acknowledgments

The idea for this atomic COSMIC-based system was inspired by the Stellarite project. This repository is also a fork of the Isengard desktop. Artwork is by Jean "Moebius" Giraud.