Images

The catalog covers the four Project Bluefin image families: Bluefin, Bluefin LTS, Dakota, and Utah.

Bluefin

Recommended for most users who want current Bluefin releases and fast feature delivery.

Rebasing between Bluefin and Bluefin LTS image families is not supported. Choose the family you intend to stay on.

Bluefin

AMDIntel

Package Page·Download ISO·Release Assets·Digest 684a93715f5c·OSTree 51e73cff2c29

Primary Bluefin desktop image for most systems.

Last validated: Sep 12, 2026 · Last published: Sep 9, 2026

Streams

Graphics Drivers

Add Nvidia driver?

STABLE

Use this command to switch to the stable channel for this image. It is the quickest way to stay on that release stream.

GNOME UnknownLinux UnknownNVIDIA 610.43.02

sudo bootc switch ghcr.io/projectbluefin/bluefin:stable --enforce-container-sigpolicy

TESTING

Use this command to switch to the testing channel for this image. It is the quickest way to stay on that release stream.

GNOME UnknownLinux UnknownNVIDIA 610.43.02

sudo bootc switch ghcr.io/projectbluefin/bluefin:testing --enforce-container-sigpolicy

Testing Branches (0)

No active tags.

Signing and SBOM

No published cosign key URL in this catalog.

Verify Signature

Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more.

cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/bluefin/.github/workflows/' ghcr.io/projectbluefin/bluefin:stable

Verify Provenance

Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more.

cosign verify-attestation --type https://slsa.dev/provenance/v1 --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/bluefin/.github/workflows/' ghcr.io/projectbluefin/bluefin:stable

Inspect SBOM

SBOMs are published alongside each image as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.

oras discover ghcr.io/projectbluefin/bluefin:stable

Bluefin LTS

Recommended for longer support windows, conservative upgrades, and production-focused workstations.

Rebasing between Bluefin and Bluefin LTS image families is not supported. Plan migrations as fresh installs or supported upgrade paths.

Bluefin LTS

AMDIntel

Package Page·Download ISO·Release Assets·Digest 734cc9b39e8a·OSTree 87e6307da64d

Long-term support Bluefin stream.

Last validated: Sep 12, 2026 · Last published: Sep 11, 2026

Streams

Graphics Drivers

Add Nvidia driver?

STABLE

Use this command to switch to the stable channel for this image. It is the quickest way to stay on that release stream.

GNOME UnknownLinux Unknown

sudo bootc switch ghcr.io/projectbluefin/bluefin-lts:stable --enforce-container-sigpolicy

TESTING

Use this command to switch to the testing channel for this image. It is the quickest way to stay on that release stream.

GNOME UnknownLinux Unknown

sudo bootc switch ghcr.io/projectbluefin/bluefin-lts:testing --enforce-container-sigpolicy

Testing Branches (0)

No active tags.

Signing and SBOM

Key: https://raw.githubusercontent.com/projectbluefin/bluefin-lts/main/cosign.pub

Verify Signature

Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more.

cosign verify --key https://raw.githubusercontent.com/projectbluefin/bluefin-lts/main/cosign.pub ghcr.io/projectbluefin/bluefin-lts:stable

Verify Provenance

Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more.

cosign verify-attestation --type https://slsa.dev/provenance/v1 --key https://raw.githubusercontent.com/projectbluefin/bluefin-lts/main/cosign.pub ghcr.io/projectbluefin/bluefin-lts:stable

Note: attestations are not yet published for this image. The command is provided for when they are.

Inspect SBOM

SBOMs are published alongside each image as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.

oras discover ghcr.io/projectbluefin/bluefin-lts:stable

Dakota

Recommended for users evaluating the next-generation Dakota track and related experiments.

Dakota is a separate image track. Rebasing between Bluefin and Bluefin LTS families and Dakota is not supported.

Project Bluefin Dakota

AMDIntel

Package Page·Download ISO·Release Assets·Digest 2f6ef4c637e2

Project Bluefin Dakota image stream built with BuildStream.

Last validated: Sep 12, 2026 · Last published: Sep 6, 2026

Streams

Graphics Drivers

Add Nvidia driver?

STABLE

Use this command to switch to the stable channel for this image. It is the quickest way to stay on that release stream.

GNOME 50.2Linux 7.0.7NVIDIA 610.43.02Flatpak 1.16.6Mesa 26.0.6Podman 5.8.2

sudo bootc switch ghcr.io/projectbluefin/dakota:stable --enforce-container-sigpolicy

TESTING

Use this command to switch to the testing channel for this image. It is the quickest way to stay on that release stream.

GNOME 50.2Linux 7.0.7NVIDIA 610.43.02Flatpak 1.16.6Mesa 26.0.6Podman 5.8.2

sudo bootc switch ghcr.io/projectbluefin/dakota:testing --enforce-container-sigpolicy

Testing Branches (0)

No active tags.

Signing and SBOM

No published cosign key URL in this catalog.

Verify Signature

Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more.

cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/dakota/.github/workflows/' ghcr.io/projectbluefin/dakota:stable

Verify Provenance

Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more.

cosign verify-attestation --type https://slsa.dev/provenance/v1 --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/dakota/.github/workflows/' ghcr.io/projectbluefin/dakota:stable

Note: attestations are not yet published for this image. The command is provided for when they are.

Inspect SBOM

SBOMs are published alongside each image as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.

oras discover ghcr.io/projectbluefin/dakota:stable

Utah

Project Bluefin built with Fedora Hummingbird technology.

Project Bluefin Utah

AMDIntel

Package Page·Release Assets·Digest Unavailable

Project Bluefin Utah image stream built with Fedora Hummingbird technology.

Metadata: unavailable

Last validated: Sep 12, 2026 · Last published: Unknown

Streams

TESTING

Awaiting initial release: testing image is not yet published. Switch commands will appear once available.

Testing Branches (0)

No active tags.

Signing and SBOM

No published cosign key URL in this catalog.

Verify Signature

Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more.

Awaiting initial release: verification commands will be available once the image is published.

Verify Provenance

Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more.

Awaiting initial release: attestation verification will be available once the image is published.

Inspect SBOM

SBOMs are published alongside each image as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.

Awaiting initial release: SBOM inspection will be available once the image is published.