Universal Blue
Topics: Fedora Silverblue
Rebasing a Fedora Atomic Bluefin system to a signed Universal Blue image requires enrolling its Secure Boot key before switching from the unverified image.
Subtopics
Rebasing on signed Universal Blue images
First, install an unsigned image:
rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bluefin:39
Enroll the secure boot key:
ujust enroll-secure-boot-key
Reboot and install the MOK key.
Now you should be able to rebase to the signed image using
rpm-ostree rebase ostree-image-signed:docker://ghcr.io/ublue-os/bluefin:39