BlueBuild recipe: minimal Kinoite for Framework 13 AMD (1Password, Tailscale, Nix)

1password-custom_allowed_browsers

/var/lib/flatpak/exports/bin/org.mozilla.firefox

1password.sh

#!/bin/bash
set -euo pipefail
rpm --import https://downloads.1password.com/linux/keys/1password.asc
cat > /etc/yum.repos.d/1password.repo << 'REPO'
[1password]
name=1Password Stable Channel
baseurl=https://downloads.1password.com/linux/rpm/stable/x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://downloads.1password.com/linux/keys/1password.asc
REPO
dnf install -y 1password 1password-cli

flatpak-override-org.mozilla.firefox

[Context]
filesystems=xdg-run/1password:ro

nix.sh

#!/bin/bash
set -euo pipefail
curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | \
  sh -s -- install ostree --no-confirm --persistence=/var/lib/nix

recipe.yml

name: my-kinoite
description: Minimal Kinoite — Framework 13 AMD, 1Password, Tailscale, Nix

base-image: quay.io/fedora-ostree-desktops/kinoite
image-version: 44

modules:
  - type: rpm-ostree
    repos:
      - https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-44.noarch.rpm
      - https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-44.noarch.rpm
    install:
      - ffmpeg
      - ffmpeg-libs
      - gstreamer1-plugin-libav
      - gstreamer1-plugins-ugly
    remove:
      - firefox
      - firefox-langpacks
      - plasma-discover
      - kmahjongg
      - kpat
      - kmines
      - akregator
      - dragon
      - juk

  - type: script
    scripts:
      - 1password.sh
      - tailscale.sh
      - nix.sh

  - type: kargs
    kargs:
      - amd_pstate=active

  - type: default-flatpaks
    system:
      install:
        - org.mozilla.firefox

  - type: files
    files:
      - source: system_files/
        destination: /

tailscale.sh

#!/bin/bash
set -euo pipefail
dnf config-manager --add-repo https://pkgs.tailscale.com/stable/fedora/tailscale.repo
dnf install -y tailscale
systemctl enable tailscaled