I

immutable-os

The cairn reference image: from-scratch Fedora bootc compose with source-built, signed ZFS and NVIDIA kernel modules. Variants: base, base-zfs, base-zfs-nvidia.

The cairn estate CI/CD catalog: build, sign, seal, gate, and promote components for bootc images. Carried forward from dunn.dev/immutable/pipeline.

Runner VM golden images: the estate's CI executors run the estate's own OS, built to qcow2 from cairn/base.

Vignette: plain instance. No disk encryption, boot assurance only.

Vignette: supply-chain evidence. Image signature verification via policy.json, SLSA provenance, and SBOM.

Vignette: unattended edge box. State-bound disk encryption with TPM policy, a recovery key, and first-boot rebind.

Vignette: attended workstation. Passphrase-only disk encryption posture.