惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

T
Threatpost
aimingoo的专栏
aimingoo的专栏
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
T
Tailwind CSS Blog
J
Java Code Geeks
博客园_首页
Google Online Security Blog
Google Online Security Blog
Hugging Face - Blog
Hugging Face - Blog
C
CXSECURITY Database RSS Feed - CXSecurity.com
I
Intezer
P
Palo Alto Networks Blog
V
Vulnerabilities – Threatpost
雷峰网
雷峰网
O
OpenAI News
SecWiki News
SecWiki News
小众软件
小众软件
酷 壳 – CoolShell
酷 壳 – CoolShell
美团技术团队
N
News | PayPal Newsroom
Project Zero
Project Zero
Forbes - Security
Forbes - Security
IT之家
IT之家
A
Arctic Wolf
WordPress大学
WordPress大学
Jina AI
Jina AI
T
Tor Project blog
博客园 - 三生石上(FineUI控件)
S
Secure Thoughts
Google DeepMind News
Google DeepMind News
Attack and Defense Labs
Attack and Defense Labs
博客园 - 聂微东
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
P
Privacy International News Feed
Cloudbric
Cloudbric
G
GRAHAM CLULEY
博客园 - 叶小钗
H
Hacker News: Front Page
腾讯CDC
量子位
Help Net Security
Help Net Security
人人都是产品经理
人人都是产品经理
C
Cyber Attacks, Cyber Crime and Cyber Security
月光博客
月光博客
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
宝玉的分享
宝玉的分享
爱范儿
爱范儿
L
Lohrmann on Cybersecurity
Hacker News - Newest:
Hacker News - Newest: "LLM"
Recorded Future
Recorded Future
C
CERT Recently Published Vulnerability Notes

kkocdko's blog

极限压缩文档扫描件 - kkocdko's blog Bypass the Blank Chars Detection crknob - Chrome portable patch 我如何将博客首页体积降至 3 KB - kkocdko's blog 如何极限优化压缩文件体积 - kkocdko's blog EmEditor 精简版 - kkocdko's blog Backup Data from VSCode Web 优雅地游玩 Minecraft - kkocdko's blog 让程序以管理员权限运行的 PE 清单 - kkocdko's blog 注销 ZEIT 账号之后遇到的坑 - kkocdko's blog 本博客的协议已更改为 CC0 - kkocdko's blog mobp - 使 MSOffice 后台常驻 在安装 VS 生成工具时规避 .NET 安装错误 各种格式的占位空文件 - kkocdko's blog 优雅地游玩 Flash 游戏 - kkocdko's blog WPS 2016 极限精简版 - kkocdko's blog Convert Const to Let by Terser 规避 Visual Studio 许可证过期的 Bug 方便地使用 iPod - kkocdko's blog 用 UserJS 注入 UserCSS - kkocdko's blog 注册表修改文件关联(默认程序) - kkocdko's blog 周期精准的太阳系模型 - kkocdko's blog 关闭屏幕的 WinAPI - kkocdko's blog 重置 Windows 图标缓存 - kkocdko's blog AIDA64 极限精简单文件版 - kkocdko's blog 几何画板单文件精简版 - kkocdko's blog 世界之窗浏览器单文件版 - kkocdko's blog 在 MBR + Legacy 下用 Bootmgr 引导 Ubuntu 简洁的 Markdown 预览工具 - kkocdko's blog 修复 MSOffice 墨迹不可用问题 - kkocdko's blog 使用 VBA 批量转换 Office 文档格式 不便携的有道词典便携版 - kkocdko's blog 关于清华同方还原卡的一个坑 - kkocdko's blog 也许是最简洁的搜狗输入法皮肤 - kkocdko's blog 用批处理弄个 U 盘复制器 - kkocdko's blog 美化版 TRIXX - kkocdko's blog Windows 默认蓝色代码 - kkocdko's blog A4 大小的普通英文稿纸 - kkocdko's blog 在批处理中延时(等待) - kkocdko's blog 让批处理隐藏窗口运行 - kkocdko's blog 让批处理以管理员权限运行 - kkocdko's blog 批量修改 PPT 字体样式 - kkocdko's blog New Post - kkocdko's blog Block Android dex2oat on demand Disable “insecure download blocked” warning on Chrome and Edge Reduce memory usage of FreeCAD and OrcaSlicer 用 GDB + Python 获取 Linux 端微信本地数据库密钥 Android bug prevents exfat readonly USB drive Cons of IronRDP today, compare to FreeRDP Multi call binary for existing projects WPS Android modified and stripped Disadvantages of APE - kkocdko's blog Change Linux UKI cmdline without regeneration Disk duplicator is considered deprecated 请弃用网易邮箱 - kkocdko's blog Summary of window state restore on desktop Draft of Mono Client Project Right path to use new glibc on old Linux Linux 笔电的所谓省电技巧 - kkocdko's blog Android 腾讯 TIM 迁移 QQ 指北 消费级 Android on Windows 是没有前途的 请停止滥用新 Web 标准特性 - kkocdko's blog Rescuing data from offline sites Differences in AMD P-State modes after kernel 6.3 Fix Docker 'input device is not a TTY' elegantly 在 2023 年评测前端静态资源公共 CDN - kkocdko's blog Recording + streaming on Wayland kk 对耳机主动降噪功能的体验与评价 - kkocdko's blog Node.js native addon without node-gyp Standalone and portable MSVC - kkocdko's blog 腾讯云安装 Fedora - kkocdko's blog 优化 Git 仓库的额外提示 - kkocdko's blog Using hwmoncat, a tiny alternative to lm_sensors 简陋的 Win on Linux 兼容方案 Tradition and Modernity in Async Rust Change ZSTD Level in QCOW2 无损转换 PDF 到 Word 是不可能的 Dump PDF from HEP Website Fedora for Termux - kkocdko's blog Using VSCode Web Server Variant Tricks for C++ Simple App Development Tweak CPU Power Elegantly on Windows Fix Windows Power Options Ineffective 优雅地使用联想电脑管家 - kkocdko's blog Restone Image's Alpha Channel - kkocdko's blog 成立 hal-drv 组织,维护一些 Rust embedded-hal 外设驱动 PotPlayer 图标包:爱奇艺播放器 - kkocdko's blog 爱奇艺万能播放器调教指南 - kkocdko's blog Draft - kkocdko's blog
Build Fedora ISO in 3 Commands
2026-04-11 · via kkocdko's blog

Why? In a word, you may be not satisfied by official build.

  • Many packages in the official build were outdated, even suffered by CVEs. Run dnf update in a newly installed environment will need to download a lot.

  • Remove rarely used packages to reduce iso size. Add packages, change theme, tweak some settings.

  • Enable more optimization to speed up livecd booting and install progress.

And there's a prebuilt custom fedora 37 x86_64 iso.

About this prebuilt ISO (Click to show)
  • Remove rarely used packages like gnome-weather to reduce size.

  • Use ZSTD compression instead of XZ.

  • Use adw-gtk3 theme to improve the style of gtk3 apps.

How

As the title, we only needs 3 commands:

# sudo setenforce 0 # if you get any errors like memory permission

# Clone repo
git clone --depth=1 https://github.com/kkocdko/utils4fedora

# Change dir
cd utils4fedora/mkimg

# chmod +x mkimg
./mkimg # needs docker and sudo inner

Then, see what's produced, ls -lh ./result/*. It takes 4 minutes on my machine with local mirror (make download time zero) and 15 minutes on GitHub Actions.

Using docker, easy to build and avoid most of troubles caused by environment.

Details

Like other distros, Fedora Linux is built on top of many prebuilt packages. You can still mount a raw img file and copy files into it manually, but Fedora usually uses lorax to build the image.

Lorax builds image / tarball from kickstart file, and Fedora's offical build (including spins) uses the kickstart files in https://pagure.io/fedora-kickstarts .

In this project (my utils4fedora), I include these in docker image. So now you only need to write a kickstart file.

# comments

%include fedora-live-workstation.ks # based on offical workstation edition

part / --size=8192 # set image root size
%packages # modify packages
-firefox # exclude a package
htop # include a package
%end # end this session

%post # run in the image's chroot
systemctl disable dnf-makecache
%end

If you want an origin workstation edition, remove all lines expect of %include fedora-live-workstation.ks. And kickstart file has a reference here.

After that, let's see the command line switches:

# we only want iso file
--make-iso --iso-only
# use zstd compression and tweak args, result in smaller size and faster decompression
--compression zstd --compress-arg=-b --compress-arg=1M --compress-arg=-Xcompression-level --compress-arg=22

Every time building the image will take about 1.7 GiB of data traffic, so running a local mirror may be a good idea if you want to build multi times. I recommend a HTTP proxy caching instead of a traditional mirror which used huge disk space. Try squid or my server program. See how fast it is:

2023-01-10 07:33:55,507: Starting package installation process
2023-01-10 07:33:56,507: Downloading packages
2023-01-10 07:33:58,508: Downloading 1132 RPMs, 52.95 MiB / 1001.38 MiB (5%) done.
2023-01-10 07:34:00,509: Downloading 1132 RPMs, 959.15 MiB / 1001.38 MiB (95%) done.
2023-01-10 07:34:01,511: Preparing transaction from installation source

Troubles

If you search "build fedora install iso" with Google, the first result is this one in Fedora wiki, but it's outdated now (20230110). As a result, I wasted a lot of time.

Then I found the osbuild, a "modern" way, but has many limitations. It may be suitable for some company's IT managers.

Finally, I found the right path. Ultramarine-Linux/build-scripts, a distro based on Fedora. Their repo shows the right way to build a custom Fedora image.

To be continue...