Utah
Upstream README · Artwork source · Artwork license · QA verification run
LUKS ISO test passed for commit c840e304dbbe. CI run; screenshots and provenance.
Bluefin built on Fedora Hummingbird. The more ... civilized murder machine.
Your day keeps getting worse. Why are there more.
Experimental pre-alpha — the image builds, boots, and installs end to end in local QEMU validation: the live ISO's bootc-installer creates a LUKS2-encrypted disk from the ISO's embedded container store with no network, and the installed system boots on its own to GDM and a GNOME session (verified record: docs/verification). Testing container images and live ISOs are available for hardware testing, but nothing here is ready to run on a machine you care about yet. Filing issues is the whole point.
What it is
Bluefin built on Fedora Hummingbird — a minimal, hardened bootable container base that ships without a desktop. Utah adds the Bluefin experience and a GNOME 51 desktop compiled from upstream source.
Utah is built across two repositories:
| Repository | What it does |
|---|---|
projectbluefin/utah | Assembles the bootable OS image and live ISO. |
projectbluefin/utah-packages | Compiles GNOME 51 and desktop packages from source into an OCI repository. |
Download and image streams
- Testing ISO (AMD / Intel):
utah-live-latest.iso(SHA-256 checksum) - Live versions & downloads: docs.projectbluefin.io/utah
The testing ISO is hosted on projectbluefin.dev, not published by this
repository's workflows (CI here only uploads utah-live.iso as a short-lived
workflow artifact). Verify the download against its checksum before use.
Like Bluefin, Utah builds four hardware flavors (utah, utah-nvidia,
utah-gaming, utah-nvidia-gaming) from config/flavors.json:
| Tag | Stream | Status |
|---|---|---|
:testing | Testing | Published at ghcr.io/projectbluefin/utah:testing after end-to-end ISO validation passes. |
:stable | Stable | Planned; promoted from :testing once ready. |
Package parity with Bluefin
packages/bluefin.toml is a byte-for-byte copy of Bluefin's base.toml, checked in CI on every run so the package list never drifts silently.
| count | |
|---|---|
| Bluefin contract installed | 61 |
| Utah additions (GNOME 51, base-image parity, device firmware, desktop services) | 141 |
| Genuinely unavailable | 7 |
Known gaps
Why this is still pre-alpha:
- Disable Secure Boot. The live ISO (
systemd-boot-unsigned), custom OGC kernel, NVIDIA driver, andv4l2loopbackmodule are not signed yet. Boot via UEFI with Secure Boot off, and flash the ISO directly with Fedora Media Writer ordd(Ventoy and legacy BIOS are unsupported). The live session runs SELinux permissive; installed systems run Enforcing. - Switching from another
bootcimage. Ostree's 3-way/etcmerge can carry overbootc-fetch-apply-updates.timerfrom another image. Utah masksbootc-fetch-apply-updatesso background updates go throughuupdinstead of silently undoing abootc rollback. After switching, checksystemctl is-enabled bootc-fetch-apply-updates.timer. - Bootloader updates. Systems on
systemd-bootupdate their EFI partition viabootctl(systemd-boot-update.service), sobootupctl statusintentionally shows no components. Checkbootctl statusinstead. - Hardware, codecs, and drivers need real-world testing. Intel/Linux Wi-Fi firmware and Intel media drivers are included, and the OGC kernel (
sched_ext,binderfs) and open NVIDIA module compile, but hardware video decoding, Wi-Fi, and gaming flavors still need testing on physical machines (#383). - CUDA is excluded to save 7.68 GB in the base image. Use the included NVIDIA Container Toolkit to run CUDA inside containers.
See the open issues to track progress or report bugs.
Contributing
See docs/building.md to build locally, docs/skills/ for architecture docs, and AGENTS.md for agent rules.
Downloads & Image Versions
UTAH Testing ISO
RecommendedCurrent automated testing build for verification and hardware testing.
Usage
Systems active per day.
Bluefin Utah :stable: accumulating dataBluefin Utah :testing: accumulating dataBluefin Utah :unknown: accumulating data
No raptors reporting in, life finds a way
Release Assets & Attestations
No published GitHub releases found for this product.
