os4 (main-sealed)

Published 2026-11-10 08:10:13 +01:00 by sebastian in sebastian/os4

Pull the image from the command line:

docker pull git.sebz.me/sebastian/os4:main-sealed

Digest

sha256:59677787cb38944a4e6e8b4c16241cb9f83156389e0c7c81c8ad656d6e500bc2

For more information on the Container registry, see the documentation.

# debian.sh --arch 'amd64' out/ 'trixie' '@1793827419'

ARG DEBIAN_FRONTEND

COPY dir:156e0ce1edb6fb0cfd3589a5f6130deac9b56217476c958ca3e40e9581927eb1 in /

COPY dir:c67d42aa158107e7c193a6e872db58c23c69ea0fbb1529680d34832c94c90f3b in /usr/

COPY dir:53a1e6b30fde9ede8c106bada4fb7c5f1359355964d313122a386b5c3744db89 in /tmp/build/

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/apt-sources.sh && /tmp/build/ostree-forky.sh && apt-get upgrade -y

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/dracut-config.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt-get install -y dracut ostree systemd-boot systemd-boot-efi systemd-boot-efi-amd64-signed shim-signed systemd-resolved systemd-timesyncd libnss-myhostname libnss-resolve firmware-linux-free firmware-linux firmware-iwlwifi firmware-atheros firmware-realtek firmware-brcm80211 firmware-sof-signed firmware-intel-sound firmware-cirrus btrfs-progs cryptsetup tpm2-tools dosfstools e2fsprogs fdisk lvm2 xfsprogs ca-certificates && { apt-get install -y linux-image-amd64 || apt-get install -y linux-image-generic; }

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt-get install -y kde-standard sddm plasma-nm network-manager network-manager-openvpn pipewire pipewire-pulse pipewire-audio wireplumber xdg-desktop-portal xdg-desktop-portal-gtk xdg-desktop-portal-kde xdg-user-dirs fonts-dejavu fonts-liberation2 fonts-noto fonts-noto-color-emoji cups cups-filters print-manager printer-driver-all speech-dispatcher firefox-esr iputils-ping bind9-dnsutils traceroute

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt-get install -y ffmpeg gstreamer1.0-plugins-good gstreamer1.0-plugins-bad gstreamer1.0-libav libgl1-mesa-dri mesa-vulkan-drivers vulkan-tools obs-studio mangohud

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c dpkg --add-architecture i386 && apt-get update && apt-get install -y steam-installer steam-devices

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt-get install -y torbrowser-launcher

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt-get install -y libvirt-daemon-system libvirt-clients qemu-system-x86 qemu-utils virt-manager bridge-utils dnsmasq-base ovmf swtpm swtpm-tools

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt-get install -y bash-completion btop curl direnv git gnupg jq less man-db neovim nodejs npm podman distrobox python3 rsync skopeo uidmap unzip wget zip acct openssh-server pkexec power-profiles-daemon gh glab libreoffice texlive-full bat parallel golang-docker-credential-helpers python3.13-venv

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/pandoc.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/udsclient.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/claude-desktop.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/google-chrome.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/discord.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/tailscale.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c --mount=type=secret,id=sb_leaf_key,target=/run/secrets/sb_leaf_key /tmp/build/v4l2loopback.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/initramfs.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/enable-units.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/apparmor-home.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/strip-identity.sh

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c /tmp/build/bootc-rootfs.sh && rm -rf /tmp/build

|1 DEBIAN_FRONTEND=noninteractive /bin/sh -c bootc container lint --no-truncate

LABEL containers.bootc="1" ostree.bootable="1"

STOPSIGNAL SIGRTMIN+3

CMD ["/sbin/init"]

/bin/sh -c mkdir /kernel && bootc container split-kernel-and-rootfs --rootfs / --output /kernel

COPY dir:e6a8fa5b3d1e755c8ac1ab1027ab27990595c047a0ea9e353e80a95500656b9e in /boot/

LABEL "org.opencontainers.image.source"="https://git.sebz.me/sebastian/os4" "org.opencontainers.image.revision"="78a87b956c1f7bd96338c265bbabae5f311e26bb"

Key	Value
containers.bootc	1
io.buildah.version	1.33.7
org.opencontainers.image.revision	78a87b956c1f7bd96338c265bbabae5f311e26bb
org.opencontainers.image.source	https://git.sebz.me/sebastian/os4
ostree.bootable	1

Details

Container

sebastian/os4

2026-11-10 08:10:13 +01:00

OCI / Docker

linux/amd64

Repository website

11 GiB

Versions (2) View all

main-sealed

2026-11-10

main

2026-11-10

Issues

os4 (main-sealed)

Installation

Image layers

Labels