Images
The catalog covers three Bluefin image families: Bluefin, Bluefin Classic
(published by ublue-os), and Utah.
Bluefin and Bluefin Server
Bluefinstable
AMD
IntelThe Final Form
The next generation Linux workstation, designed for reliability, performance, and sustainability.
- GNOME51.0 (newest)
- Linux7.2.9 (newest)
- Mesa26.2.2
- systemd261.3 (newest)
- bootc1.16.14 (newest)
- Podman6.1.0 (newest)
Project Bluefin Dakota image stream built with BuildStream.
Last validated: Oct 19, 2026 · Last published: Oct 19, 2026
Signing and SBOM
No published cosign key URL in this catalog.
- Verify Signature
- Verify Provenance
- Inspect SBOM
Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more.
cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/dakota/.github/workflows/' ghcr.io/projectbluefin/dakota:stable
Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more.
cosign verify-attestation --type https://slsa.dev/provenance/v1 --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/dakota/.github/workflows/' ghcr.io/projectbluefin/dakota:stable
When present, SBOMs are published alongside images as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.
oras discover ghcr.io/projectbluefin/dakota:stable
Bluefin Server
The world's premier FSDK server operating system
Brings the power of Kubernetes to your homelab in an easy to use web interface.
Other Bluefin Images
Bluefin offers other images for different use cases and preferences. All are supported by the Bluefin team.
Bluefin Classicstable
AMDIntelFedora Silverblue for Ubuntu expatriates
First generation Bluefin built on Fedora.
- GNOME50.5
- Linux7.2.5-200.fc44
- Mesa26.2.3 (newest)
- systemd259.9
- bootc1.16.13
- Podman5.8.7
Primary Bluefin desktop image for most systems.
Last validated: Oct 19, 2026 · Last published: Oct 13, 2026 Key: Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more. Note: key-based signature verification of legacy Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more. When present, SBOMs are published alongside images as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.Signing and SBOM
https://raw.githubusercontent.com/ublue-os/bluefin/main/cosign.pub.sig tags requires cosign v2.x (cosign v3+ defaults to OCI 1.1 referrers). Use the Verify Provenance tab for keyless OIDC verification on cosign v3+.
Utahraptor
AMDIntelBluefin built on Fedora Hummingbird
Latest generation Bluefin built on Fedora Hummingbird.
Project Bluefin Utah image stream built with Fedora Hummingbird technology.
Last validated: Oct 19, 2026 · Last published: Oct 19, 2026 No published cosign key URL in this catalog. Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more. Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more. Attestation verification command unavailable. When present, SBOMs are published alongside images as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.Signing and SBOM