/projects/quarry/

Quarry

Quarry bootc images on oci.thepeoples.io: gaming desktop, default desktop end-state, server lines.

Screenshots

Multi-image product gallery (not a single hero). Shots below are live weekly captures for each supported desktop environment.

KDE Plasma (gold)

Quarry is a family of bootc images published on oci.thepeoples.io (cosign-signed). Product lines:

• desktop/quarry-gaming — gaming product: desktop form-factor today; handheld / HTPC / NVIDIA profiles planned on the same line. Publishes only here (git-* + stable)
• desktop/quarry — default non-gaming desktop (planned until :stable ships). Not a gaming alias
• Server lines — Fedora (and later Debian / openSUSE) headless images when promoted

Day-0 install via the minimal-installer spike; day-2 upgrades with bootc switch / bootc upgrade after cosign verify. Install only on a throwaway VM until you accept the risk.

Features

• Quarry-owned images — tags, digests, and support live under oci.thepeoples.io; Quarry decides the cut
• KDE gold — Plasma default DE; Discover for Flatpak (not Bazaar)
• Terminals — Konsole default, Ghostty secondary
• CLI — Mise (never Homebrew on the base)
• Containers — Podman; no Docker Engine on the base
• Fonts — Adwaita Sans / Adwaita Mono
• Publish path — bootc / OCI on oci.thepeoples.io, cosign-signed
• Installer path — minimal-installer spike (install-quarry.sh + burnable ISO notes)
• Non-Fedora bases — real distro bootc (FROM Debian/openSUSE/etc.), never Fedora with foreign packages bolted on

Lineage: gaming builds started from a Fedora bootc cut related to the Bazzite stack; Quarry owns the image, tags, and support.

Install

Throwaway / VM only. Do not bootc switch a daily driver, builder, or steamvm until you have verified the signature and accept the risk.

Verify then switch

Public images are only on oci.thepeoples.io and are cosign-signed. Pubkey: https://thepeoples.io/keys/oci.thepeoples.io.pub.

cosign verify --key https://thepeoples.io/keys/oci.thepeoples.io.pub \
  --insecure-ignore-tlog \
  oci.thepeoples.io/desktop/quarry-gaming:stable

sudo bootc switch oci.thepeoples.io/desktop/quarry-gaming:stable
sudo systemctl reboot

Prefer desktop/quarry-gaming:stable for the canonical gaming product. desktop/quarry is reserved for the default non-gaming desktop (planned).

Or with the installer helper (known catalog, KDE default):

sudo ./scripts/iso/install-quarry.sh --mode switch --yes \
  --variant desktop/quarry-gaming:stable

Installer / ISO notes

Day-0 install without importing a raw disk is the Option B minimal-installer spike:

• Strategy: iso-strategy.md
• Spike plan + scripts: iso-spike.md / scripts/iso/install-quarry.sh
• Proven consume-gate: consume-gate.md

Burnable installer ISO media exists as a builder spike; it is not published as :stable. Prefer a throwaway disk/VM.

Public tags (supported product)

We do not publish *-testing builds as products.

Variants

Supported (public product)

Planned

Security & transparency

Quarry aims for the same visibility model as the Flatpak catalog: cosign-signed OCI images, Shape A changelog + SBOM on release pages, and (forthcoming) input/image scan summaries on /projects/quarry/ — without inventing CVE counts.

• Releases — /projects/quarry/releases/ (changelog + SBOM when published)
• Verify — OCI cosign pubkey
• Plan — security-visibility.md (12h rebuild-check, 24h Shape A cooldown, day-2 bootc upgrade)

Scan chips and history tables will appear on release pages once promote CI wires scan-release.sh the way Flatpak wires Trivy into catalog pages. Until then this section is intentional pointers only.

Links

• Releases (apex)
• Releases (src)
• Source
• Verify / cosign pubkey
• OCI tags (gaming)
• OCI tags (default desktop)
• Consume docs
• Variant model
• Flavors matrix
• ISO strategy

Design notes

• Consume public OCI images
• Variant model
• Flavors matrix
• ISO strategy
• Security & visibility
• Screenshot gallery (weekly cadence)