“Workstation” is their name for “Fedora regular GNOME”. You misunderstood this:
Desktop:
- workstation, spins, labs
- all using dnf, a mutable system and having flatpak ready but not used
Workstation is the same as “Spins” just with GNOME and being their main variant.
do you need to restart the machine everytime an update happens or is that just how its convenient to you to alias it?
yes on the atomic variants you plan what packages you want to install, then install them in one rpm-ostree install a b c d
and they are added to an image. That image is created from your current OS + the downloaded differences (from the fedora repo) + your changes (added or removed packages, changed kargs, …)
On ublue especially updates go in the background, which means when you power off once a day you never need to worry about updates. And those are done without touching your live system at all. You can opt-in into automatic updates on the official Fedora atomic variants too.
But my priority is neither development nor bug reports I’m sorry to say.
This makes little sense. You dont create bug reports because its fun, but because you have bugs. If I have a bug I want to know its an issue with Fedora and not some random accumulation of things I did to my 10 years old system.
Its about entropy, you use your system, add packages, remove packages, upgrade, change configs, remove files, add files, over years. The only way to go back to 0 is by reinstalling your system.
On Atomic I use rpm-ostree
status to see my changes to the system:
State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: last run 7h ago
Deployments:
ostree-image-signed:docker://ghcr.io/secureblue/kinoite-main-laptop-userns-hardened:39
Digest: sha256:cfd0c9abfa064bc4f4928fa721eebde41a5300a08ae5c4d2f899d27f1cb1e8fd
Version: 39.20240224.0 (2024-02-26T01:30:34Z)
Diff: 2 removed
RemovedBasePackages: kwrite 23.08.5-1.fc39
LayeredPackages: bat bubblejail eza fish glow helix igt-gpu-tools ncdu qemu qemu-kvm ripgrep rustup torbrowser-launcher virt-manager waydroid
LocalPackages: 'mullvad-vpn-2024.1~beta1-1.x86_64'
● ostree-image-signed:docker://ghcr.io/secureblue/kinoite-main-laptop-userns-hardened:39
Digest: sha256:473c5775fb9a15f81b5e9cdbfdd4972ff70757cfa727e794baab88d417c29223
Version: 39.20240224.0 (2024-02-25T17:28:08Z)
RemovedBasePackages: kwrite 23.08.5-1.fc39
LayeredPackages: bat eza firefox firefox-langpacks fish glow helix igt-gpu-tools ncdu qemu qemu-kvm ripgrep rustup torbrowser-launcher virt-manager waydroid
LocalPackages: 'mullvad-vpn-2024.1~beta1-1.x86_64'
Note here:
- My system updated in the background (the “●” is my currently used system), if I reboot I get the update
- My changes to the system: remove kwrite, add some RPMs from repos, add a local RPM
I can now create a command like this:
rpm-ostree reset &&\
rpm-ostree override remove kwrite &&\
rpm-ostree install bat bubblejail eza fish glow helix igt-gpu-tools ncdu qemu qemu-kvm ripgrep rustup torbrowser-launcher virt-manager waydroid mullvad-vpn &&\
reboot
Using this command I will always get a system with my exact changes, but I can be sure it has nothing else. If a bug persists, I can pin my current system: sudo ostree admin pin 0
, do an rpm-ostree reset && reboot
and see if it is still there. If yes, it is a Fedora (or in this case more complex secureblue > ublue > fedora) bug and I can hope it gets fixed soon.
@jakfrost yeah that was below my explanation of atomic variants, I wrote above that all traditional variants (“Workstation”, Spins and Labs, as well as Server) use DNF.
What this “nearly no options” means, is that only on the GNOME variants (“Workstation” and Silverblue) the Anaconda installer has way less options, as everything is done in the GNOME setup. The result is the same. All other Desktops dont have this and it is done in Anaconda.
There is an everything ISO
still there, DNF groups are still a thing. Just trying to figure out how to get wifi drivers.
The “Challenge” for me on Silverblue is apps not communicating with each other. I do development work, but I also have re-introduced Creative applications into my digital life. I lose that on Silverblue.
You lose that with Flatpaks, Atomic is just a different way to handle RPMs. You can just install all those apps with rpm-ostree and use automatic updates or the alias I mentioned to make the updates (that then will take longer) work better.
we need more support for the BIG creator/creatives applications like Blender/Inkscape/GIMP/Krita/Shotcut, to properly handle xdg-desktop-Portals
100%. See my list of modern secure Flatpak apps, those are nearly all smaller projects. Inkscape is very far, GIMP struggles a lot (as does Libreoffice I guess), I imagine Blender being in a better shape.
OBS has very good Pipewire (i.e. portal) support, but no filepicker portals, so you need to set the download directory of the app and then restrict its permissions to that directory, if you want to isolate it.
There are some apps like Cryptomator that actively oppose using Flatpak directories for settings, which really sucks. Those could easily change (and it seems there is a way to trick apps into automatically using the internal flatpak storage, while not changing a line of code), but if developers refuse…