镜像

本目录涵盖三个 Bluefin 镜像系列：Bluefin、Bluefin Classic （由 ublue-os 发布）和 Utah。

Bluefin 和 Bluefin Server

Bluefinstable

AMDIntel

The Final Form

The next generation Linux workstation, designed for reliability, performance, and sustainability.

• GNOME51.1 (newest)
• Linux7.3.1 (newest)
• Mesa26.2.5
• systemd262.1 (newest)
• bootc1.17.3 (newest)
• Podman6.1.4 (newest)

Package Page·Download ISO·Release Assets·Digest c10a8b189c34

Project Bluefin Dakota image stream built with BuildStream.

Last validated: Nov 9, 2026 · Last published: Nov 8, 2026

Bluefin is a separate image track. Rebasing between Bluefin and Bluefin Classic is not supported.

Signing and SBOM

No published cosign key URL in this catalog.

Verify Signature

Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more.

cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/dakota/.github/workflows/' ghcr.io/projectbluefin/dakota:stable

Verify Provenance

Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more.

cosign verify-attestation --type https://slsa.dev/provenance/v1 --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/dakota/.github/workflows/' ghcr.io/projectbluefin/dakota:stable

Inspect SBOM

When present, SBOMs are published alongside images as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.

oras discover ghcr.io/projectbluefin/dakota:stable

Bluefin Server

The world's premier FSDK server operating system

Brings the power of Kubernetes to your homelab in an easy to use web interface.

---

其他 Bluefin 镜像

Bluefin 还为不同用途和偏好提供其他镜像，均由 Bluefin 团队提供支持。

Bluefin Classicstable

AMDIntel

Fedora Silverblue for Ubuntu expatriates

First generation Bluefin built on Fedora.

• GNOME50.6
• Linux7.2.11-200.fc44
• Mesa26.2.6 (newest)
• systemd259.10
• bootc1.17.1
• Podman5.8.9

Package Page·Download ISO·Release Assets·Digest 305830a778fd·OSTree 5d72f18168cb

Primary Bluefin desktop image for most systems.

Last validated: Nov 9, 2026 · Last published: Nov 3, 2026

Signing and SBOM

Key: https://raw.githubusercontent.com/ublue-os/bluefin/main/cosign.pub

Verify Signature

Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more.

cosign verify --key https://raw.githubusercontent.com/ublue-os/bluefin/main/cosign.pub ghcr.io/ublue-os/bluefin:stable

Note: key-based signature verification of legacy .sig tags requires cosign v2.x (cosign v3+ defaults to OCI 1.1 referrers). Use the Verify Provenance tab for keyless OIDC verification on cosign v3+.

Verify Provenance

Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more.

cosign verify-attestation --type https://slsa.dev/provenance/v1 --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/ublue-os/bluefin/.github/workflows/' ghcr.io/ublue-os/bluefin:stable

Inspect SBOM

When present, SBOMs are published alongside images as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.

oras discover ghcr.io/ublue-os/bluefin:stable

Utahraptortesting

AMDIntel

Bluefin built on Fedora Hummingbird

Latest generation Bluefin built on Fedora Hummingbird.

• GNOME51.1 (newest)
• Linux7.2.15-200.1.utah1.fc44
• Mesa26.2.1
• systemd261.2
• bootc1.17.1
• Podman6.1.4 (newest)

Package Page·Release Assets·Digest cdac81243439

Project Bluefin Utah image stream built with Fedora Hummingbird technology.

Last validated: Nov 9, 2026 · Last published: Nov 8, 2026

Signing and SBOM

No published cosign key URL in this catalog.

Verify Signature

Signature verification confirms this image was signed by the expected maintainers and helps detect tampering before deployment. Learn more.

cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp '^https://github.com/projectbluefin/utah/.github/workflows/' ghcr.io/projectbluefin/utah:testing

Verify Provenance

Provenance attestation lets you validate how the image was built in CI so you can make trust decisions from evidence. Learn more.

Attestation verification command unavailable.

Inspect SBOM

When present, SBOMs are published alongside images as OCI referrers. Use oras to inspect attached artifacts and pull the SBOM for audits, policy checks, and vulnerability triage. Learn more.

oras discover ghcr.io/projectbluefin/utah:testing