My Fedora silverblue configuration
- Turn off selinux
# Set to permissive for this session
setenforce 0
# Set to permissive permanently
sudo sed -i 's/SELINUX=enforcing/SELINUX=permissive/' /etc/selinux/config
# TODO: Fix SELinux for docker and set to enforce permanently
# sudo sed -i 's/SELINUX=permissive/SELINUX=/enforcing' /etc/selinux/config
- Install docker
rpm-ostree install moby-engine docker-compose
- Add user to docker group
echo "$(getent group docker)" >> /etc/group
usermod -aG docker myusername
- Install VSCode
sudo cat <<EOT >> /etc/yum.repos.d
name=Visual Studio Code
baseurl=https://packages.microsoft.com/yumrepos/vscode
enabled=1
gpgcheck=1
gpgkey=https://packages.microsoft.com/keys/microsoft.asc
EOT
rpm-ostree install code
- Install VSCode remote container extension
- Clone this repo into volume
- Authorized your own SSH key to the host machine
- Copy age keys
vi ~/.config/sops/age/keys.txt
chmod 600 ~/.config/sops/age/keys.txt
- Run ansible
ansible-playbook main.yaml
- Overlay openssl
- Install GSConnector
- Add rpm-fusion repository
rpm-ostree install https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm
- Install chromium with non-free extension for video playback
rpm-ostree install chromium-freeworld
This chromium has no google chrome sync without workaround however