No description
  • Shell 38.2%
  • Python 36.3%
  • Just 14.6%
  • Dockerfile 10.9%
Find a file
Joseph Marrero Corchado 17e44957df minimal: Move CA trust regeneration down from standard
The stale trust store after an update is a property of the ostree /etc
merge, not of the standard content set. minimal already ships
ca-certificates (a hard dependency of openssl-libs), update-ca-trust and
systemd-update-done.service, so it has the same problem and everything
the unit needs. Moving the unit to minimal makes minimal-plus, standard,
ELN and IoT inherit it, and gives the image-based variants built on
minimal-plus (CoreOS, Atomic Desktops) a path to a shared fix.

The unit is unchanged. Its conditions already skip containers, images
without update-ca-trust, boots where /etc is current, and images that
carry coreos-update-ca-trust.service.

The rootfs check now runs in every tier instead of only in standard.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Vcy8XfBfUtxbEWMu62CiF6
2026-10-31 16:44:10 -04:00
.tekton Merge branch 'renovate/fedora-rawhide/fedora-rawhide-repos-image' into 'main' 2026-10-31 17:15:40 +00:00
ci ci: Add basic shellcheck, whitespace & format checks 2025-06-26 13:56:56 +02:00
eln eln: Ship 20-rhel.toml for RHEL-aligned bootc install defaults 2026-07-28 10:41:32 -04:00
fedora-includes Add fedora-eln manifest for centos-eln 2026-07-24 14:23:05 -04:00
finalize.d Install bootc-base-imagectl in Pungi path 2025-06-09 13:51:00 -04:00
iot whitespace changes to appease downstream CI 2025-05-09 12:52:16 -04:00
minimal minimal: Move CA trust regeneration down from standard 2026-10-31 16:44:10 -04:00
minimal-plus Rename tier-x → minimal-plus 2025-03-18 10:12:38 -04:00
standard minimal: Move CA trust regeneration down from standard 2026-10-31 16:44:10 -04:00
tests minimal: Move CA trust regeneration down from standard 2026-10-31 16:44:10 -04:00
.gitlab-ci.yml .gitlab-ci.yml: bump Just version pin 2026-04-08 16:20:48 -04:00
.mdl_style.rb Update .mdl_style.rb 2023-11-09 16:14:45 +02:00
.mdlrc Update .mdlrc 2023-11-09 16:18:33 +02:00
.pre-commit-config.yaml chore(deps): update all dependencies 2026-01-09 15:08:46 +00:00
bootc-base-imagectl bootc-base-imagectl: error when --add-dir dir is missing 2026-06-22 13:37:09 -04:00
bootc-base-imagectl.md bootc-base-imagectl/rechunk: add --chunkah mode 2026-04-02 13:21:24 -04:00
Containerfile Containerfile: add chunked build target 2026-04-02 13:22:44 -04:00
CONTRIBUTING.md Containerfile: add chunked build target 2026-04-02 13:22:44 -04:00
COPYING Enable pre-commit 2023-10-30 22:27:12 +02:00
eln.yaml made it a symlink instead of a hard link 2026-07-24 14:23:06 -04:00
fedora-41.yaml Remove releasever from manifests; add pungi treefile stubs 2024-10-23 15:27:50 -04:00
fedora-43.yaml chore: update fedora-43 repo url to final 2025-10-29 08:44:31 -04:00
fedora-44.yaml chore: add fedora-45.yaml for branching and update fedora-44.yaml 2026-08-18 16:30:51 -04:00
fedora-45.yaml chore: add fedora-45.yaml for branching and update fedora-44.yaml 2026-08-18 16:30:51 -04:00
fedora-bootc-config.json Only rawhide 2024-05-28 19:53:56 +03:00
fedora-bootc.yaml Swap symlink state for fedora-bootc -> fedora-standard 2025-02-25 08:27:20 -05:00
fedora-eln.yaml removed whitespace 2026-07-24 14:23:06 -04:00
fedora-iot.yaml Drop fedora- prefix from canonical manifests 2025-06-17 15:32:25 -04:00
fedora-minimal-plus.yaml bootc-base-imagectl: support hidden manifests, hide minimal-plus 2025-06-17 15:46:08 -04:00
fedora-minimal.yaml Drop fedora- prefix from canonical manifests 2025-06-17 15:32:25 -04:00
fedora-rawhide.yaml Remove releasever from manifests; add pungi treefile stubs 2024-10-23 15:27:50 -04:00
fedora-standard.yaml Drop fedora- prefix from canonical manifests 2025-06-17 15:32:25 -04:00
fedora.repo fedora.repo: Drop trailing whitespace 2024-04-18 16:33:36 -04:00
install-manifests install-manifests: Handle ELN as rawhide-only variant 2026-07-24 14:23:06 -04:00
iot.yaml Drop fedora- prefix from canonical manifests 2025-06-17 15:32:25 -04:00
Justfile standard: Focus boot-time regeneration on CA trust 2026-10-31 16:44:10 -04:00
LICENSE Initial split from Fedora CoreOS 2022-12-09 15:32:25 -05:00
minimal-plus.hidden.yaml bootc-base-imagectl: support hidden manifests, hide minimal-plus 2025-06-17 15:46:08 -04:00
minimal.yaml Drop fedora- prefix from canonical manifests 2025-06-17 15:32:25 -04:00
README.md Switch ELN from minimal-plus to standard tier 2026-07-24 14:23:06 -04:00
RELEASE.md docs: update RELEASE.md steps for new Fedora version 2026-08-25 12:18:08 -04:00
renovate.json renovate: add Fedora 45 package rules 2026-08-24 19:50:12 -04:00
standard.yaml standard: move chunkah to fedora-only manifest 2026-04-20 15:37:22 -04:00

Fedora bootc base images

Create and maintain base bootable container images from Fedora packages.

Motivation

The original Docker container model of using "layers" to model applications has been extremely successful. This project aims to apply the same technique for bootable host systems - using standard OCI/Docker containers as a transport and delivery format for base operating system updates.

Building images

The current default user experience is to build layered images on top of the official binary base images produced and tested by this project. See the documentation5 for more info.

If you want total control over the image, you don't need to fork this repository. Instead, you can use the existing container as a "builder" to make new images. For more information, see the documentation6.

Contributing

See CONTRIBUTING.md for the full development workflow.

Fedora versions

By default, the base images are built for Fedora rawhide. To build against a different Fedora version:

FEDORA_VERSION=43 just build

Content sets/tiers

Documentation above referenced the scratch6 flow, but there is also a minimal-plus that is not exposed as a stable interface, but may be used by other images in Fedora.

  • standard: This image is the default, what is published as https://quay.io/repository/fedora/fedora-bootc
  • minimal: This content set is more of a convenient centralization point for CI and curation around a package set that is intended as a starting point for a container base image.
  • minimal-plus: This content set is intended to be the shared base used by all image-based Fedora variants (IoT, Atomic Desktops, and CoreOS).

standard inherits from minimal-plus and minimal-plus in turn inherit from minimal.

  • eln (manifest fedora-eln): Standard base image for Enterprise Linux Next (ELN). Uses distro fedora and inherits from standard; built with ELN repos. The image produced by this manifest is published as fedora-eln.

All non-trivial changes to minimal and minimal-plus should be ACKed by at least one stakeholder of each Fedora variant WGs.

Available Tiers + Versions

NOTE: The location and naming of these images is subject to change.

Version standard minimal minimal-plus
Rawhide quay.io/bootc-devel/fedora-bootc-rawhide-standard quay.io/bootc-devel/fedora-bootc-rawhide-minimal quay.io/bootc-devel/fedora-bootc-rawhide-minimal-plus
Fedora 43 quay.io/bootc-devel/fedora-bootc-43-standard quay.io/bootc-devel/fedora-bootc-43-minimal quay.io/bootc-devel/fedora-bootc-43-minimal-plus

More information

Documentation: https://docs.fedoraproject.org/en-US/bootc/

Badges

Badge Description Service
Renovate Dependencies Renovate
Pre-commit Static quality gates pre-commit