Freedesktop SDK Containers

[castrojo]

(inprogress blog, please give feedback then we'll update it and publish, so feel free to ask questions!)

The Bluefin Factory needed some containers, and since it's goal is to be fully offline and self contained we needed some of our own containers.

These are basically built from the Freedesktop SDK but with a bit of the chainguard formula, which is nice and easy to do with buildstream, so these are highly competitive in the space department. Usual cosign/SBOMS etc stuff included.

You'll find a few prototypes in here you might want to play with. The first is a homebrew nspawn container. We think it's worth investigating if having homebrew just come ootb in a system container can work. The systemd folks think this is a good idea and this is a result of beer drinking in Berlin.

The second is the lab runner image. This is what I'm using in the lab as a catch all. It has kubectl and a bunch of other things in one go.

We're not going to make a ton of these, but when you don't need to build things like Webkit, bst builds can build just fine on GHA.

• https://github.com/projectbluefin/fsdk-containers/releases/tag/v25.08.13
• https://github.com/projectbluefin/fsdk-containers

Once I'm done updating docs I'll ensure there are good agent onboarding docs. If you've ever wants your own "perfect distrobox" you could easily have it rolling with the perfect upstream version of everything every day. The tooling and actions will be super easy to copy, AND since these are keyless you should be able to fork and go without messing with keys, etc.