FAQ
Repo Information
Where is the file server?
https://repos.fyralabs.com/terra37/ (opens in a new tab)
Replace 37 with your Fedora release version.
What packages does Terra have?
A lot! We have Pantheon packaged (apart from elementary-tasks)
and also games, some apps, fonts, and more!
You can search packages via dnf search or Repology (opens in a new tab).
Why YET another repository?
-
Terra has much more publicity
- You can see build logs via Github Actions (opens in a new tab)
- NOTE: due to Github limitations (opens in a new tab), logs are kept for 90 days only
- The Andaman (opens in a new tab) build system and Subatomic (opens in a new tab) are fully open sourced
- You can see build logs via Github Actions (opens in a new tab)
-
You can add and manage packages much more easily (See Contribute)
Pantheon
How can I install Pantheon?
sudo dnf groupinstall pantheon-desktop
Why no elementary-tasks?
You can install it via flatpak.
The issue is a bit similar to #1.
evolution-data-server requires both libsoup3-devel and libsoup-devel.
elementary-tasks will fail to compile as the compiler sees both libs.
Conflict arises when it is compiled with both libsoup versions.
Technical details
What is your Build Infrastructure?
Andaman (opens in a new tab). Packages are built from Github Actions (opens in a new tab) and pushed to the repo.
Why Andaman (opens in a new tab)?
Written in rust, it provides an easy and efficient way to manage packages. Ultramarine Linux (opens in a new tab) did use Koji, but the complexity makes it harder for us to maintain packages, which is why we decided to create anda.
What is Subatomic (opens in a new tab)?
It manages, uploads, and signs packages.
Where does the package signing key live, and how is it protected?
Subatomic (opens in a new tab) runs on JWT tokens, and only Cappy (one of the maintainers) and the pipeline have them. The secret changes once in a while (and no one has it). The GPG signing key lives on a separate Podman volume from the actual repositories.
The repo server is only accessible via HTTP at https://repos.fyralabs.com/ (opens in a new tab), and SSH is locked to only public keys.
Most of the server infrastructure are locked behind NAT, and only accessible through a Tailscale tailnet. We only expose services when needed using cloudflared.