Block a user
nuc_config (latest)
Published 2026-11-06 15:09:04 +01:00 by mathayay
Installation
docker pull gitea.couraud.xyz/mathayay/nuc_config:latestsha256:be94b738165fdefafde26b38b0c0988926680b9328206c34c8c9f67fb9d6fc4dImage Layers
| ostree export of commit 441ba7832a29cb2841ba5d62b6fbb2584c4965743875ce4702735d1ebb77f298 |
| python3-botocore-1.43.122-1.fc44.noarch |
| nvidia-gpu-firmware-20261019-1.fc44.noarch |
| kernel-modules-7.2.15-200.fc44.x86_64 |
| kernel-modules-core-7.2.15-200.fc44.x86_64 |
| podman-5:5.8.9-1.fc44.x86_64 |
| atheros-firmware-20261019-1.fc44.noarch |
| python3-libs-3.14.10-1.fc44.x86_64 |
| libicu-77.1-3.fc44.x86_64 |
| linux-firmware-20261019-1.fc44.noarch |
| rpm-6.0.2-1.fc44.x86_64 |
| mt7xxx-firmware-20261019-1.fc44.noarch |
| qemu-user-static-mips-2:10.2.2-1.fc44.x86_64 |
| kernel-core-7.2.15-200.fc44.x86_64 |
| amd-gpu-firmware-20261019-1.fc44.noarch |
| skopeo-1:1.22.3-1.fc44.x86_64 |
| bootc-1.17.1-1.fc44.x86_64 |
| glib2-2.88.4-1.fc44.x86_64 |
| qemu-user-static-ppc-2:10.2.2-1.fc44.x86_64 |
| qemu-user-static-aarch64-2:10.2.2-1.fc44.x86_64 |
| microcode_ctl-2:2.1-74.fc44.x86_64 |
| qemu-user-static-xtensa-2:10.2.2-1.fc44.x86_64 |
| rpm-ostree-2026.3-2.fc44.x86_64 |
| systemd-udev-259.10-1.fc44.x86_64 |
| qemu-user-static-sparc-2:10.2.2-1.fc44.x86_64 |
| systemd-259.10-1.fc44.x86_64 |
| intel-gpu-firmware-20261019-1.fc44.noarch |
| toolbox-0.3-4.fc44.x86_64 |
| file-libs-5.46-10.fc44.x86_64 |
| fwupd-2.1.9-1.fc44.x86_64 |
| samba-client-libs-2:4.24.7-1.fc44.x86_64 |
| qemu-user-static-riscv-2:10.2.2-1.fc44.x86_64 |
| qemu-user-static-arm-2:10.2.2-1.fc44.x86_64 |
| coreutils-common-9.10-5.fc44.x86_64 |
| python3-libdnf5-5.4.6.0-1.fc44.x86_64 |
| NetworkManager-libnm-1:1.56.1-2.fc44.x86_64 |
| hwdata-0.412-1.fc44.noarch |
| 183 components |
| systemd-pam-259.10-1.fc44.x86_64 and systemd-resolved-259.10-1.fc44.x86_64 |
| vim-minimal-2:9.2.1202-1.fc44.x86_64 and systemd-shared-259.10-1.fc44.x86_64 and systemd-libs-259.10-1.fc44.x86_64 and python3-boto3-1.43.122-1.fc44.noarch |
| 12 components |
| glibc-2.43-9.fc44.x86_64 |
| 12 components |
| 12 components |
| 10 components |
| 12 components |
| 12 components |
| 10 components |
| 9 components |
| 12 components |
| 12 components |
| 12 components |
| 12 components |
| 12 components |
| 12 components |
| 12 components |
| 12 components |
| 6 components |
| 24 components |
| 24 components |
| 15 components |
| 24 components |
| 24 components |
| initramfs (kernel 7.2.15-200.fc44.x86_64) and rpmostree-unpackaged-content |
| Reserved for new packages |
| RUN /bin/sh -c dnf install -y git greenboot sudo && dnf clean all && systemctl enable podman-auto-update.timer bootc-fetch-apply-updates.timer podman.socket greenboot-healthcheck.service sshd && ln -sf /usr/share/zoneinfo/Europe/Paris /etc/localtime # buildkit |
| RUN /bin/sh -c mkdir -p /usr/ssh && echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICLWw6WiFpj6yutHWuP/TSEW+Xx/JLYV9ibmJIacHwde mathias@couraud.net' > /usr/ssh/root.keys && cp /usr/ssh/root.keys /usr/ssh/mathayay.keys && echo 'AuthorizedKeysFile /usr/ssh/%u.keys .ssh/authorized_keys' > /etc/ssh/sshd_config.d/30-auth-system.conf # buildkit |
| COPY sysusers.d/ /usr/lib/sysusers.d/ # buildkit |
| RUN /bin/sh -c echo 'mathayay ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/mathayay && chmod 440 /etc/sudoers.d/mathayay # buildkit |
| RUN /bin/sh -c printf '%s\n' 'PasswordAuthentication no' 'KbdInteractiveAuthentication no' 'PubkeyAuthentication yes' 'PermitRootLogin prohibit-password' > /etc/ssh/sshd_config.d/20-hardening.conf # buildkit |
| RUN /bin/sh -c printf '%s\n' '[connection]' 'id=lan' 'type=ethernet' 'autoconnect=true' '' '[ipv4]' 'method=manual' 'address1=192.168.1.50/24,192.168.1.1' 'dns=192.168.1.1;' '' '[ipv6]' 'method=auto' > /etc/NetworkManager/system-connections/lan.nmconnection && chmod 600 /etc/NetworkManager/system-connections/lan.nmconnection # buildkit |
| RUN /bin/sh -c printf '%s\n' 'LABEL=data /var/mnt/media btrfs defaults,nofail,x-systemd.mkdir,x-systemd.device-timeout=10,subvol=@media,context=system_u:object_r:container_file_t:s0 0 0' 'LABEL=data /var/mnt/backups btrfs defaults,nofail,x-systemd.mkdir,x-systemd.device-timeout=10,subvol=@backups,context=system_u:object_r:container_file_t:s0 0 0' 'LABEL=data /var/mnt/apps btrfs defaults,nofail,x-systemd.mkdir,x-systemd.device-timeout=10,subvol=@apps,context=system_u:object_r:container_file_t:s0 0 0' 'LABEL=immich /var/lib/immich/data btrfs defaults,nofail,x-systemd.mkdir,x-systemd.device-timeout=10,subvol=@immich 0 0' 'LABEL=immich /var/lib/vaultwarden btrfs defaults,nofail,x-systemd.mkdir,x-systemd.device-timeout=10,subvol=@vaultwarden 0 0' > /etc/fstab # buildkit |
| COPY systemd/bootc-fetch-apply-updates.timer.d/ /etc/systemd/system/bootc-fetch-apply-updates.timer.d/ # buildkit |
| COPY --chmod=0755 greenboot/required.d/ /etc/greenboot/check/required.d/ # buildkit |
| COPY bootc/install/ /usr/lib/bootc/install/ # buildkit |
| COPY quadlets/ /usr/share/containers/systemd/ # buildkit |
| COPY tmpfiles.d/ /usr/lib/tmpfiles.d/ # buildkit |
| RUN /bin/sh -c bootc container lint # buildkit |
Labels
| Key | Value |
|---|---|
| containers.bootc | 1 |
| org.opencontainers.image.version | 44.20261105.0 |
| ostree.bootable | true |
| ostree.commit | 441ba7832a29cb2841ba5d62b6fbb2584c4965743875ce4702735d1ebb77f298 |
| ostree.final-diffid | sha256:12787d84fa137cd5649a9005efe98ec9d05ea46245fdc50aecb7dd007f2035b1 |
| ostree.linux | 7.2.15-200.fc44.x86_64 |
| rpmostree.inputhash | 7f85895b88f5a49abee29a9cc4331d217d23dc8de83fb47c21c3f5f275b44b05 |