No description
  • Makefile 37.3%
  • Shell 37.2%
  • Dockerfile 25.5%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Christoph Görn 0bc8484806
ci: 🚀 drop registry.redhat.io dep from get-git-tag task
The step only runs git config/fetch/tag, so it does not need Red Hat's
pipelines-git-init image. Switch to the repo's own base image, which
already ships bash and git 2.55.

registry.redhat.io is authenticated-only, so Renovate (which has no
credentials for it) could never resolve digest updates and reported
"Could not determine new digest" on the Dependency Dashboard. The image
was also pinned digest-only with no tag, so Renovate fell back to
looking up "latest", which this Red Hat repo does not publish -- meaning
credentials alone would not have fixed it either.

quay.io is anonymously pullable and already tracked by Renovate via the
Containerfile, so this adds no new dependency surface and removes the
cluster's pull-secret requirement for this task.

Pinned to the multi-arch index digest, not the amd64 manifest, to keep
the task runnable on every arch the base image publishes.

Refs: Systems-8ql
2026-07-28 13:09:44 +02:00
.tekton ci: 🚀 drop registry.redhat.io dep from get-git-tag task 2026-07-28 13:09:44 +02:00
tests feat: publish releases to the Forgejo registry as well as Codeberg 2026-07-28 12:06:43 +02:00
.gitignore chore: some more stuff to ignore 2026-04-04 11:59:30 +02:00
.releaserc fix: 🐛 unblock PaC pipeline for release tags 2026-05-18 20:20:10 +02:00
.renovaterc feat: add Fedora 42 based toolbox-handy 2025-04-23 09:37:04 +02:00
AGENTS.md feat: publish releases to the Forgejo registry as well as Codeberg 2026-07-28 12:06:43 +02:00
CHANGELOG.md chore(release): 1.5.0 2026-07-21 09:13:03 +00:00
Containerfile feat: publish releases to the Forgejo registry as well as Codeberg 2026-07-28 12:06:43 +02:00
gpg-pqc feat: add experimental post-quantum GnuPG (ML-KEM) toolbox stage 2026-07-15 18:08:15 +02:00
LICENSE chore: remove Makefile, tiny tweaks 2024-11-24 11:22:23 +01:00
Makefile chore: minoRRR 2026-07-21 11:09:30 +02:00
README.md feat: publish releases to the Forgejo registry as well as Codeberg 2026-07-28 12:06:43 +02:00

fedora-toolbox

A Fedora Toolbx container image based on Fedora 45, rebranded as a #B4mad toolbox with a few opinionated extras baked in.

Usage

toolbox create -i forgejo.b4mad.net/toolbxs/fedora-toolbox:latest

Published tags:

Tag Meaning
:latest newest release
:vX.Y.Z release tag (e.g. :v1.2.3)
:vX.Y.Z-<sha> release pinned to the exact commit that built it — use this for reproducible downstream FROM pins

What's added on top of quay.io/fedora/fedora-toolbox:45

  • eza, zsh, chezmoi, podman
  • eza is built from source in a separate cargo builder stage, so the Rust toolchain never ships in the final image
  • /etc/os-release rebranded via VARIANT="#B4mad Toolbox Container Image"; VARIANT_ID is kept as upstream container for tooling compatibility
  • OCI image labels (org.opencontainers.image.*) wired to build-time args (BUILD_DATE, VCS_REF, VERSION) for traceability

Building locally

make help               # list all targets
make build-containers   # podman build → :v1.2.3-<sha>
make tag-containers     # also apply :v1.2.3 and :latest
make push-containers    # push all three tags to $REGISTRY
make show-container-vars

Override the registry with REGISTRY=<host> make … (default: codeberg.org).

CI/CD & releases

  • Tekton Pipelines-as-Code pipelines live in .tekton/: on-push-to-main.yaml, on-tag.yaml, repository.yaml, and tasks/
  • Release versioning and CHANGELOG.md are automated via semantic-release (.releaserc)
  • Dependency updates are proposed by Renovate (.renovaterc)

License

See LICENSE.