Merge pull request #1 from projectbluefin/copilot/bootstrap-os-template-repo

Bootstrap testfin OS with silverblue-main base and Project Bluefin integrations

Author: castrojo

.github/workflows/clean.yml

@@ -20,7 +20,7 @@ jobs:
           # IMPORTANT: Update this to match your image name from Containerfile (line 9)
           # This should match the "# Name: your-repo-name" comment in your Containerfile
           # Example: If your Containerfile has "# Name: my-custom-os", use "my-custom-os" here
-          packages: finpilot
+          packages: testfin
           older-than: 90 days
           delete-orphaned-images: true
           keep-n-tagged: 7

AGENTS.md

@@ -1,4 +1,4 @@
-# Copilot Instructions for finpilot bootc Image Template
+# Copilot Instructions for testfin bootc Image Template
 
 ## CRITICAL: Pre-Commit Checklist
 
@@ -23,17 +23,17 @@
 
 **When this repository is used as a template, you MUST:**
 
-### 1. Rename ALL instances of `finpilot`
+### 1. Rename ALL instances of template name
 
-**Source of truth**: `Containerfile` line 9: `# Name: finpilot`
+**Source of truth**: `Containerfile` line 4: `# Name: testfin`
 
 **Files to update:**
-- `Containerfile` (line 9)
+- `Containerfile` (line 4)
 - `Justfile` (line 1)
 - `README.md` (line 1)
 - `artifacthub-repo.yml` (line 5)
 - `custom/ujust/README.md` (~line 175)
-- `.github/workflows/ghcr-pruner.yml` (line 22)
+- `.github/workflows/clean.yml` (line 23)
 
 ### 2. Create "What's Different" section in README
 
@@ -953,5 +953,5 @@ Assisted-by: Claude 3.5 Sonnet via GitHub Copilot
 ---
 
 **Last Updated**: 2025-11-14  
-**Template Version**: finpilot (Enhanced with comprehensive Copilot instructions)  
+**Template Version**: testfin (Based on finpilot with silverblue-main + Project Bluefin integrations)  
 **Maintainer**: Universal Blue Community

Containerfile

@@ -1,14 +1,9 @@
-# Allow build scripts to be referenced without being copied into the final image
-FROM scratch AS ctx
-COPY build /build
-COPY custom /custom
-
 ###############################################################################
 # PROJECT NAME CONFIGURATION
 ###############################################################################
-# Name: finpilot
+# Name: testfin
 #
-# IMPORTANT: Change "finpilot" above to your desired project name.
+# IMPORTANT: Change "testfin" above to your desired project name.
 # This name should be used consistently throughout the repository in:
 #   - Justfile: export image_name := env("IMAGE_NAME", "your-name-here")
 #   - README.md: # your-name-here (title)
@@ -20,8 +15,20 @@ COPY custom /custom
 # to maintain consistency.
 ###############################################################################
 
-# Base Image
-FROM ghcr.io/ublue-os/bluefin:stable@sha256:c9411d9909708d57d8e87c160a308a4a8c795764fb4beff344340755412b9178
+# Common and Brew OCI layers from Project Bluefin
+ARG COMMON_IMAGE="ghcr.io/projectbluefin/common:latest"
+ARG BREW_IMAGE="ghcr.io/projectbluefin/brew:latest"
+
+# Build context stage - files needed for build but not in final image
+FROM scratch AS ctx
+COPY build /build
+COPY custom /custom
+# Copy common and brew files from Project Bluefin (distroless pattern)
+COPY --from=ghcr.io/projectbluefin/common:latest /system_files/shared /files
+COPY --from=ghcr.io/projectbluefin/brew:latest /system_files /files
+
+# Base Image - Using silverblue-main as the foundation
+FROM ghcr.io/ublue-os/silverblue-main:stable
 
 ## Other possible base images include:
 # FROM ghcr.io/ublue-os/bazzite:latest

Justfile

@@ -1,4 +1,4 @@
-export image_name := env("IMAGE_NAME", "finpilot")
+export image_name := env("IMAGE_NAME", "testfin")
 export default_tag := env("DEFAULT_TAG", "stable")
 export bib_image := env("BIB_IMAGE", "quay.io/centos-bootc/bootc-image-builder:latest@sha256:903c01d110b8533f8891f07c69c0ba2377f8d4bc7e963311082b7028c04d529d")
 

README.md

@@ -1,9 +1,39 @@
-# finpilot
+# testfin
 
 A template for building custom bootc operating system images based on the lessons from [Universal Blue](https://universal-blue.org/) and [Bluefin](https://projectbluefin.io). It is designed to be used manually, but is optimized to be bootstraped by GitHub Copilot. After set up you'll have your own custom Linux. 
 
 > Be the one who moves, not the one who is moved.
 
+## What Makes testfin Different?
+
+This image is based on [Fedora Silverblue](https://fedoraproject.org/silverblue/) and includes integrations from [Project Bluefin](https://projectbluefin.io):
+
+### Base Image
+- **Base**: `ghcr.io/ublue-os/silverblue-main:stable` - Fedora Silverblue with Universal Blue enhancements
+- **Desktop**: GNOME desktop environment
+- **Package Manager**: Immutable base with layered packages via `dnf5`
+
+### Added from Project Bluefin
+- **Common Layer**: Shared configuration, udev rules, and ujust command completions from `@projectbluefin/common`
+- **Homebrew Integration**: Pre-installed Homebrew package manager from `@projectbluefin/brew` for runtime package management
+- **Curated Brewfiles**: Ready-to-use package collections for development, CLI tools, and fonts
+- **Flatpak Support**: Automatic installation of GUI applications on first boot
+- **ujust Commands**: User-friendly shortcuts for common system tasks
+
+### Runtime Package Management
+- **Homebrew (Brew)**: CLI tools and development environments installed via Brewfiles
+- **Flatpak**: GUI applications from Flathub
+- **Build-time**: System packages via `dnf5` in build scripts
+
+### Production Features
+- **GitHub Actions**: Automated builds on every commit
+- **Renovate**: Automatic dependency updates
+- **Image Signing**: Optional cosign support for image verification (disabled by default)
+- **SBOM Generation**: Optional software bill of materials (disabled by default)
+- **Rechunking**: Optional layer optimization for better distribution (disabled by default)
+
+*Last updated: 2025-12-14*
+
 ## Guided Copilot Mode
 
 Here are the steps to guide copilot to make your own repo, or just use it like a regular image template.
@@ -68,13 +98,14 @@ Click "Use this template" to create a new repository from this template.
 
 ### 2. Rename the Project
 
-Important: Change `finpilot` to your repository name in these 5 files:
+Important: Change `testfin` to your repository name in these 6 files:
 
-1. `Containerfile` (line 9): `# Name: your-repo-name`
+1. `Containerfile` (line 4): `# Name: your-repo-name`
 2. `Justfile` (line 1): `export image_name := "your-repo-name"`
 3. `README.md` (line 1): `# your-repo-name`
 4. `artifacthub-repo.yml` (line 5): `repositoryID: your-repo-name`
 5. `custom/ujust/README.md` (~line 175): `localhost/your-repo-name:stable`
+6. `.github/workflows/clean.yml` (line 23): `packages: your-repo-name`
 
 ### 3. Enable GitHub Actions
 
@@ -87,9 +118,9 @@ Note: Image signing is disabled by default. Your images will build successfully
 
 ### 4. Customize Your Image
 
-Choose your base image in `Containerfile` (line 23):
+Choose your base image in `Containerfile` (line 35):
 ```dockerfile
-FROM ghcr.io/ublue-os/bluefin:stable
+FROM ghcr.io/ublue-os/silverblue-main:stable
 ```
 
 Add your packages in `build/10-build.sh`:

artifacthub-repo.yml

@@ -2,7 +2,7 @@
 # Sign up and add the Repository ID to the right field. Owners fields are optional.
 # Examples: https://artifacthub.io/packages/search?ts_query_web=ublue&sort=relevance&page=1 
 
-repositoryID: finpilot # Fill in with your own credentials 
+repositoryID: testfin # Fill in with your own credentials 
 owners: # (optional, used to claim repository ownership)
   - name: Jane Containerface
     email: jane@blueuniversal.com

build/10-build.sh

@@ -5,14 +5,23 @@ set -eoux pipefail
 ###############################################################################
 # Main Build Script
 ###############################################################################
-# This script follows the @ublue-os/bluefin pattern for build scripts.
+# This script follows the @projectbluefin/distroless pattern for build scripts.
 # It uses set -eoux pipefail for strict error handling and debugging.
 ###############################################################################
 
 # Source helper functions
 # shellcheck source=/dev/null
 source /ctx/build/copr-helpers.sh
 
+echo "::group:: Copy Project Bluefin Common and Brew Files"
+
+# Copy all system files from Project Bluefin common and brew layers
+# This includes ujust completions, udev rules, Homebrew, and other shared configuration
+# Following the distroless pattern: https://github.com/projectbluefin/distroless
+cp -avf /ctx/files/. /
+
+echo "::endgroup::"
+
 echo "::group:: Copy Custom Files"
 
 # Copy Brewfiles to standard location
@@ -43,6 +52,12 @@ echo "::group:: System Configuration"
 
 # Enable/disable systemd services
 systemctl enable podman.socket
+
+# Enable brew services (from Project Bluefin brew layer)
+systemctl enable brew-setup.service
+systemctl enable brew-upgrade.timer
+systemctl enable brew-update.timer
+
 # Example: systemctl mask unwanted-service
 
 echo "::endgroup::"

custom/ujust/README.md

@@ -172,7 +172,7 @@ Universal Blue images include helpers in `/usr/lib/ujust/ujust.sh`:
 Test locally before committing:
 
 1. Build your image: `just build` (see [`Justfile`](../../Justfile))
-2. If on a bootc system: `sudo bootc switch --target localhost/finpilot:stable`
+2. If on a bootc system: `sudo bootc switch --target localhost/testfin:stable`
 3. Reboot and test: `ujust your-command`
 
 Or test the just files directly: