{ "packages": [ "ModemManager", "NetworkManager", "NetworkManager-adsl", "NetworkManager-bluetooth", "NetworkManager-config-connectivity-fedora", "NetworkManager-openconnect-gnome", "NetworkManager-openvpn-gnome", "NetworkManager-ppp", "NetworkManager-ssh-gnome", "NetworkManager-vpnc-gnome", "NetworkManager-wifi", "NetworkManager-wwan", "acl", "adobe-source-code-pro-fonts", "alsa-sof-firmware", "alsa-ucm", "alsa-utils", "amd-gpu-firmware", "amd-ucode-firmware", "at-spi2-atk", "at-spi2-core", "atheros-firmware", "attr", "audit", "avahi", "b43-fwcutter", "b43-openfwwf", "bash", "bash-color-prompt", "bash-completion", "bc", "bind-utils", "bluez-cups", "bootupd", "brcmfmac-firmware", "brltty", "btrfs-progs", "buildah", "bzip2", "c2esp", "chrony", "cifs-utils", "cirrus-audio-firmware", "colord", "compsize", "coreutils", "cpio", "cryptsetup", "cups", "cups-browsed", "cups-filters", "curl", "cyrus-sasl-plain", "dconf", "default-editor", "default-fonts-cjk-mono", "default-fonts-cjk-sans", "default-fonts-cjk-serif", "default-fonts-core-emoji", "default-fonts-core-math", "default-fonts-core-mono", "default-fonts-core-sans", "default-fonts-core-serif", "default-fonts-other-mono", "default-fonts-other-sans", "default-fonts-other-serif", "desktop-backgrounds-gnome", "dnf5", "dnf5-plugins", "dnsmasq", "dosfstools", "dymo-cups-drivers", "e2fsprogs", "efibootmgr", "ethtool", "exfatprogs", "fedora-bookmarks", "fedora-chromium-config", "fedora-flathub-remote", "fedora-release-silverblue", "fedora-repos-archive", "fedora-workstation-backgrounds", "fedora-workstation-repositories", "file", "filesystem", "firefox", "firewalld", "flatpak", "fpaste", "fprintd-pam", "fuse-overlayfs", "fwupd", "gamemode", "gdm", "git-core", "git-core-doc", "glib-networking", "glibc", "glibc-all-langpacks", "glycin-thumbnailer", "gnome-backgrounds", "gnome-bluetooth", "gnome-browser-connector", "gnome-classic-session", "gnome-color-manager", "gnome-control-center", "gnome-disk-utility", "gnome-epub-thumbnailer", "gnome-initial-setup", "gnome-remote-desktop", "gnome-session-wayland-session", "gnome-settings-daemon", "gnome-shell", "gnome-shell-extension-background-logo", "gnome-software", "gnome-software-rpm-ostree", "gnome-system-monitor", "gnome-user-docs", "gnome-user-share", "gnupg2", "gnupg2-scdaemon", "grub2-efi-ia32", "grub2-efi-x64", "grub2-pc", "gst-thumbnailers", "gstreamer1-plugin-dav1d", "gstreamer1-plugin-libav", "gstreamer1-plugins-bad-free", "gstreamer1-plugins-good", "gstreamer1-plugins-ugly-free", "gutenprint", "gutenprint-cups", "gvfs-afc", "gvfs-afp", "gvfs-archive", "gvfs-fuse", "gvfs-goa", "gvfs-gphoto2", "gvfs-mtp", "gvfs-smb", "hfsplus-tools", "hostname", "hplip", "hunspell", "hyperv-daemons", "ibus-anthy", "ibus-chewing", "ibus-gtk3", "ibus-gtk4", "ibus-hangul", "ibus-libpinyin", "ibus-m17n", "ibus-typing-booster", "intel-audio-firmware", "intel-gpu-firmware", "intel-lpmd", "intel-vsc-firmware", "iproute", "iptables-nft", "iptstate", "iputils", "iwlegacy-firmware", "iwlwifi-dvm-firmware", "iwlwifi-mvm-firmware", "kbd", "kernel", "kernel-modules", "kernel-modules-extra", "langpacks-en", "less", "libertas-firmware", "libglvnd-gles", "librsvg2", "libsane-hpaio", "libva-intel-media-driver", "linux-firmware", "localsearch", "logrotate", "lrzsz", "lsof", "lvm2", "man-db", "man-pages", "mcelog", "mdadm", "mesa-dri-drivers", "mesa-libEGL", "mesa-vulkan-drivers", "microcode_ctl", "mpage", "mt7xxx-firmware", "mtr", "nautilus", "ncurses", "nfs-utils", "nss-altfiles", "nss-mdns", "ntfs-3g", "ntfsprogs", "nvidia-gpu-firmware", "nvme-cli", "nxpwireless-firmware", "open-vm-tools-desktop", "opensc", "openssh-clients", "openssh-server", "openssl", "orca", "pam_afs_session", "papers-nautilus", "papers-previewer", "papers-thumbnailer", "paps", "passwdqc", "pciutils", "pinentry-gnome3", "pinfo", "pipewire-alsa", "pipewire-config-raop", "pipewire-gstreamer", "pipewire-pulseaudio", "pipewire-utils", "plymouth", "plymouth-system-theme", "podman", "policycoreutils", "policycoreutils-python-utils", "polkit", "prefixdevname", "printer-driver-brlaser", "procps-ng", "psmisc", "ptouch-driver", "ptyxis", "qadwaitadecorations-qt5", "qcom-wwan-firmware", "qemu-guest-agent", "qemu-user-static-aarch64", "qt5-qtbase", "qt5-qtbase-gui", "qt5-qtdeclarative", "qt5-qtxmlpatterns", "qt6-qtbase", "qt6-qtbase-gui", "qt6-qtdeclarative", "qt6-qtwayland-adwaita-decoration", "quota", "realmd", "realtek-firmware", "rootfiles", "rpm", "rpm-ostree", "rsync", "rygel", "samba-client", "selinux-policy-targeted", "setup", "shadow-utils", "shim-ia32", "shim-x64", "skopeo", "slirp4netns", "sos", "speech-dispatcher", "spice-vdagent", "spice-webdavd", "splix", "sssd-common", "sssd-kcm", "sudo", "system-config-printer-udev", "systemd", "systemd-container", "systemd-oomd-defaults", "systemd-resolved", "systemd-udev", "tar", "thermald", "time", "tinysparql", "tiwilink-firmware", "toolbox", "totem-video-thumbnailer", "tree", "unzip", "uresourced", "usb_modeswitch", "usbutils", "util-linux", "vim-minimal", "virtualbox-guest-additions", "vte-profile", "wget2-wget", "which", "whois", "wireguard-tools", "wireplumber", "words", "wpa_supplicant", "xdg-desktop-portal", "xdg-desktop-portal-gnome", "xdg-desktop-portal-gtk", "xdg-user-dirs-gtk", "xfsprogs", "yelp", "zip", "zram-generator-defaults" ], "edition": "2024", "ref": "fedora/44/x86_64/silverblue", "metadata": { "license": "MIT", "summary": "Fedora Silverblue" }, "basearch": "x86_64", "repos": [ "fedora-44", "fedora-44-updates" ], "selinux": true, "exclude-packages": [ "qemu-user-static-alpha", "qemu-user-static-arm", "qemu-user-static-cris", "qemu-user-static-hexagon", "qemu-user-static-hppa", "qemu-user-static-loongarch64", "qemu-user-static-m68k", "qemu-user-static-microblaze", "qemu-user-static-mips", "qemu-user-static-or1k", "qemu-user-static-ppc", "qemu-user-static-riscv", "qemu-user-static-s390x", "qemu-user-static-sh4", "qemu-user-static-sparc", "qemu-user-static-x86", "qemu-user-static-xtensa", "perl-interpreter", "perl-libs", "PackageKit", "gstreamer1-plugin-openh264", "mozilla-openh264", "openh264", "dnf", "dnf-plugins-core", "grubby", "sdubby", "tk", "qemu-kvm", "qemu-kvm-core", "qemu-device-display-virtio-gpu", "qemu-device-display-virtio-vga", "hplip-gui", "gnome-software-fedora-langpacks", "wcurl", "polkit-pkla-compat", "fuse", "fuse-libs" ], "documentation": true, "boot-location": "modules", "tmp-is-dir": true, "default-target": "graphical.target", "releasever": 44, "automatic-version-prefix": "44.", "mutate-os-release": "44", "etc-group-members": [ "wheel" ], "check-passwd": { "type": "file", "filename": "passwd" }, "check-groups": { "type": "file", "filename": "group" }, "ignore-removed-users": [ "root" ], "ignore-removed-groups": [ "root" ], "postprocess": [ "#!/bin/bash\nset -xeuo pipefail\n\nsed -i -e '/google-chrome/,+2d' /usr/lib/fedora-third-party/conf.d/fedora-workstation.conf\n", "#!/bin/bash\nset -xeuo pipefail\n\ncat > /usr/lib/tmpfiles.d/90-atomic-desktops-ownership-fixes.conf << 'EOF'\nZ /var/lib/passim - passim passim\nZ /var/log/passim - passim passim\nZ /etc/colord/ - colord colord\nEOF\n", "#!/usr/bin/env bash\nset -xeuo pipefail\n\ncat >> /usr/lib/ostree/prepare-root.conf << 'EOF'\n[composefs]\nenabled = yes\nEOF\n", "#!/usr/bin/env bash\nset -xeuo pipefail\nsource /usr/lib/os-release\n# Check if the ID is Fedora and VERSION_ID is 42 or higher\nif [[ \"$ID\" == \"fedora\" && \"$VERSION_ID\" -ge 42 ]]; then\n echo -e \"# kernel-install will not try to run dracut and allow rpm-ostree to\\n\\\n# take over. Rpm-ostree will use this to know that it is responsible\\n\\\n# to run dracut and ensure that there is only one kernel in the image\\n\\\nlayout=ostree\" | tee /usr/lib/kernel/install.conf > /dev/null\nfi\n# By default dnf keeps multiple versions of the kernel, with this\n# configuration we tell dnf to treat the kernel as everything else.\n# https://dnf.readthedocs.io/en/latest/conf_ref.html#main-options\n# Let's add the config to a distribution configuration file if dnf5\n# is used, we append to /etc/dnf/dnf.conf if not.\nif [ -d \"/usr/share/dnf5/libdnf.conf.d/\" ]; then\n echo -e \"[main]\\ninstallonlypkgs=''\" >> /usr/share/dnf5/libdnf.conf.d/20-ostree-installonlypkgs.conf\nelse\n echo \"installonlypkgs=''\" >> /etc/dnf/dnf.conf\nfi\n", "#!/usr/bin/env bash\nset -xeuo pipefail\n\ninstall -dm 0755 -o 0 -g 0 /usr/lib/ostree\ncat >> /usr/lib/ostree/prepare-root.conf << 'EOF'\n[sysroot]\nreadonly = true\nEOF\n", "#!/usr/bin/env bash\nset -xeuo pipefail\n\ninstall -dm 0755 -o 0 -g 0 /usr/lib/dracut/dracut.conf.d\n", "#!/usr/bin/env bash\nset -xeuo pipefail\n\ncat > /usr/lib/dracut/dracut.conf.d/20-atomic-nohostonly.conf << 'EOF'\n# Default model is server-side generated initramfs\nhostonly=no\nEOF\n", "#!/usr/bin/env bash\nset -xeuo pipefail\n\ncat > /usr/lib/dracut/dracut.conf.d/20-atomic-nostrip.conf << 'EOF'\n# We don't ship `strip` or `eu-strip` today, and even if we did, it doesn't\n# save much space. So let's disable it to avoid the error-looking message.\ndo_strip=no\nEOF\n", "#!/usr/bin/env bash\nset -xeuo pipefail\n\ncat > /usr/lib/dracut/dracut.conf.d/20-atomic-tpm-luks.conf << 'EOF'\n# Add support for systemd-cryptsetup and tpm2-tss LUKS locking\nadd_dracutmodules+=\" tpm2-tss systemd-pcrphase \"\nEOF\n", "#!/bin/bash\nset -xeuo pipefail\n\n# Transforms /usr/lib/ostree-boot into a bootupd-compatible update payload\n/usr/bin/bootupctl backend generate-update-metadata\n\n# Enable migration to a static GRUB config\ninstall -dm0755 /usr/lib/systemd/system/bootloader-update.service.d\ncat > /usr/lib/systemd/system/bootloader-update.service.d/migrate-static-grub-config.conf << 'EOF'\n[Service]\nExecStart=/usr/bin/bootupctl migrate-static-grub-config\nEOF\n\n# Turn permissive mode on for bootupd until all SELinux issues are fixed\nsemanage permissive --noreload --add bootupd_t\n", "#!/usr/bin/env bash\nset -xeuo pipefail\n\n# Work around https://bugzilla.redhat.com/show_bug.cgi?id=1265295\n# From https://github.com/coreos/fedora-coreos-config/blob/testing-devel/overlay.d/05core/usr/lib/systemd/journald.conf.d/10-coreos-persistent.conf\ninstall -dm0755 /usr/lib/systemd/journald.conf.d/\necho -e \"[Journal]\\nStorage=persistent\" > /usr/lib/systemd/journald.conf.d/10-persistent.conf\n\n# See: https://src.fedoraproject.org/rpms/glibc/pull-request/4\n# Basically that program handles deleting old shared library directories\n# mid-transaction, which never applies to rpm-ostree. This is structured as a\n# loop/glob to avoid hardcoding (or trying to match) the architecture.\nfor x in /usr/sbin/glibc_post_upgrade.*; do\n if test -f ${x}; then\n ln -srf /usr/bin/true ${x}\n fi\ndone\n\n# Remove loader directory causing issues in Anaconda in unified core mode\n# Will be obsolete once we start using bootupd\nrm -rf /usr/lib/ostree-boot/loader\n\n# Undo RPM scripts enabling units; we want the presets to be canonical\n# https://github.com/projectatomic/rpm-ostree/issues/1803\nrm -rf /etc/systemd/system/*\nsystemctl preset-all\nrm -rf /etc/systemd/user/*\nsystemctl --user --global preset-all\n\n# Fix triggerin for samba-client in cups package (not supported by rpm-ostree yet)\n# https://github.com/fedora-silverblue/issue-tracker/issues/532\nln -snf /usr/libexec/samba/cups_backend_smb /usr/lib/cups/backend/smb\n\n# Workaround broken appstream cache update\n# See: https://gitlab.com/fedora/ostree/sig/-/work_items/103\ncat > /usr/lib/systemd/system/fedora-atomic-desktop-appstream-cache-refresh.service << 'EOF'\n[Unit]\nDescription=Workaround for Atomic Destkops to refresh the appstream cache\nDocumentation=https://gitlab.com/fedora/ostree/sig/-/work_items/103\nConditionPathIsReadWrite=/var\nConditionPathExists=/run/ostree-booted\nAfter=local-fs.target\n\n[Service]\nType=oneshot\nRemainAfterExit=yes\nExecStart=appstreamcli refresh --force\nNice=19\nIOWeight=10\n\n[Install]\nWantedBy=multi-user.target\nEOF\n\ncat >> /usr/lib/systemd/system-preset/81-atomic-desktop.preset << 'EOF'\n\n# See: https://gitlab.com/fedora/ostree/sig/-/work_items/103\nenable fedora-atomic-desktop-appstream-cache-refresh.service\nEOF\n\nsystemctl preset fedora-atomic-desktop-appstream-cache-refresh.service\n\n# Workaround broken mandb cache update\n# See: https://gitlab.com/fedora/ostree/sig/-/work_items/62\ncat > /usr/lib/systemd/system/fedora-atomic-desktop-mandb-update.service << 'EOF'\n[Unit]\nDescription=Workaround for Atomic Destkops to update mandb cache\nDocumentation=https://gitlab.com/fedora/ostree/sig/-/work_items/62\nConditionPathIsReadWrite=/var\nConditionPathExists=/run/ostree-booted\nAfter=local-fs.target\n\n[Service]\nType=oneshot\nRemainAfterExit=yes\nEnvironment=MAN_NO_LOCALE_WARNING=1\nExecStart=mandb -q\nNice=19\nIOWeight=10\n\n[Install]\nWantedBy=multi-user.target\nEOF\n\ncat >> /usr/lib/systemd/system-preset/81-atomic-desktop.preset << 'EOF'\n\n# See: https://gitlab.com/fedora/ostree/sig/-/work_items/62\nenable fedora-atomic-desktop-mandb-update.service\nEOF\n\nsystemctl preset fedora-atomic-desktop-mandb-update.service\n", "#!/bin/bash\nset -xeuo pipefail\n\ncat > /usr/share/gnome-initial-setup/vendor.conf << 'EOF'\n[pages]\n# Do not show the Third Party Software page\nskip=software\nEOF\n", "#!/bin/bash\nset -xeuo pipefail\n\ncat > /usr/lib/tmpfiles.d/90-silverblue-ownership-fixes.conf << 'EOF'\nZ /var/lib/gnome-remote-desktop/ - gnome-remote-desktop gnome-remote-desktop\nZ /etc/gnome-remote-desktop/ - gnome-remote-desktop gnome-remote-desktop\nEOF\n" ], "container-cmd": [ "/usr/bin/bash" ] }