Containers, both ways
Docker and Podman both work out of the box, sockets enabled — start a container without first fighting groups and permissions.
A curated spin of Bazzite — a KDE Plasma, container-first dev & sysadmin workstation, shipped as a signed bootc atomic image you boot into and stop thinking about.
Not an app or a dotfiles dump — it's the build recipe. It layers curated fixes and tools onto upstream Bazzite and publishes signed images on GHCR. You don't clone it to run it; you rebase your machine onto the image it produces.
Rebase your machine — pick the variant for your GPU
sudo bootc switch ghcr.io/matrixdj96/bazzite-mx :stable
Then reboot to boot into the new image.
NVIDIA GPU? Swap the image name: bazzite-mx-nvidia (proprietary driver) or bazzite-mx-nvidia-open (open kernel modules, Turing+).
You just pulled :stable — the everyday image. Want changes earlier? Use :testing instead. Both stay current on their own, refreshing within an hour of any upstream Bazzite update.
Built for one maintainer's machine, in the open so every choice is auditable — rebase at your own risk.
Bazzite does the heavy lifting; this layer only smooths the rough edges and fills real gaps — never fonts, themes, or opinions forced on you.
Everything is baked and verified at build time. Nothing leans on fragile first-boot mutations of a read-only /usr.
Bazzite is the foundation — without it this wouldn't exist. The sharpest ideas are borrowed from Aurora, Bazzite-DX, and AmyOS.
You keep all of Bazzite — the KDE Plasma desktop, Steam gaming, and atomic updates you can roll back anytime. On top, bazzite-mx quietly fixes the rough edges and adds the tools you reach for the moment you go beyond gaming.
Docker and Podman both work out of the box, sockets enabled — start a container without first fighting groups and permissions.
A full virtualization stack is live on first boot, with TPM 2.0 so Windows 11 installs without the “doesn't meet requirements” wall — no setup ritual.
VSCode that won't fight the read-only system, password-free git through the keyring, and a deep tracing toolkit for when you want to look under the hood.
Firefox straight from Mozilla instead of a sandboxed Flatpak — system fonts, the keyring, and native messaging all just work.
The graphical partition manager Bazzite removed is back — so you're never stuck dropping to the terminal just to resize a disk.
Nothing here is preloaded — the base image stays lean. Each extra is a single ujust recipe you run when you actually need it.
Stock Bazzite can't drive recent MSI EC firmware — this bakes in the current msi-ec + acpi_ec modules; enabling layers the MControlCenter GUI.
ujust setup-msi
The desktop app and CLI, set up with the official key.
ujust install-1password
Low-latency game streaming, enabled only when asked.
ujust setup-sunshine
You never chase releases. When upstream Bazzite updates, a new signed image is ready within the hour — you pull it whenever you like, and roll back anytime if you need to.
bootc upgradeWant to check it yourself? Verify any image against the public key
cosign verify --key cosign.pub ghcr.io/matrixdj96/bazzite-mx :latest