bazzite
MX

A curated spin of Bazzite — a KDE Plasma, container-first dev & sysadmin workstation, shipped as a signed bootc atomic image you boot into and stop thinking about.

Not an app or a dotfiles dump — it's the build recipe. It layers curated fixes and tools onto upstream Bazzite and publishes signed images on GHCR. You don't clone it to run it; you rebase your machine onto the image it produces.

Rebase your machine — pick the variant for your GPU

sudo bootc switch ghcr.io/matrixdj96/bazzite-mx:stable

Then reboot to boot into the new image.

NVIDIA GPU? Swap the image name: bazzite-mx-nvidia (proprietary driver) or bazzite-mx-nvidia-open (open kernel modules, Turing+).

You just pulled :stable — the everyday image. Want changes earlier? Use :testing instead. Both stay current on their own, refreshing within an hour of any upstream Bazzite update.

Built for one maintainer's machine, in the open so every choice is auditable — rebase at your own risk.

01

Adds, never imposes

Bazzite does the heavy lifting; this layer only smooths the rough edges and fills real gaps — never fonts, themes, or opinions forced on you.

02

Atomic-correct by construction

Everything is baked and verified at build time. Nothing leans on fragile first-boot mutations of a read-only /usr.

03

Built on giants

Bazzite is the foundation — without it this wouldn't exist. The sharpest ideas are borrowed from Aurora, Bazzite-DX, and AmyOS.

what you actually get

Everything Bazzite does — plus a workstation that just works

You keep all of Bazzite — the KDE Plasma desktop, Steam gaming, and atomic updates you can roll back anytime. On top, bazzite-mx quietly fixes the rough edges and adds the tools you reach for the moment you go beyond gaming.

Scroll to explore
01

Containers, both ways

Docker and Podman both work out of the box, sockets enabled — start a container without first fighting groups and permissions.

Docker CE · Podman · sockets on
02

Windows VMs that just boot

A full virtualization stack is live on first boot, with TPM 2.0 so Windows 11 installs without the “doesn't meet requirements” wall — no setup ritual.

libvirt · virt-manager · TPM 2.0
03

A tinker-ready dev kit

VSCode that won't fight the read-only system, password-free git through the keyring, and a deep tracing toolkit for when you want to look under the hood.

VSCode · keyring git · tracing tools
04

Firefox, the native way

Firefox straight from Mozilla instead of a sandboxed Flatpak — system fonts, the keyring, and native messaging all just work.

Mozilla RPM · no Flatpak
05

Disk tools, restored

The graphical partition manager Bazzite removed is back — so you're never stuck dropping to the terminal just to resize a disk.

gparted · GUI partitions
opt-in · one command each

Extras you turn on only if you want them

Nothing here is preloaded — the base image stays lean. Each extra is a single ujust recipe you run when you actually need it.

MSI fan controlflagship

Stock Bazzite can't drive recent MSI EC firmware — this bakes in the current msi-ec + acpi_ec modules; enabling layers the MControlCenter GUI.

ujust setup-msi
1Password

The desktop app and CLI, set up with the official key.

ujust install-1password
Sunshine

Low-latency game streaming, enabled only when asked.

ujust setup-sunshine
always fresh, always yours

Updates that just show up — safely

You never chase releases. When upstream Bazzite updates, a new signed image is ready within the hour — you pull it whenever you like, and roll back anytime if you need to.

01Bazzite updatesupstream ships a new release
02Rebuilt for youwithin the hour, automatically
03Every GPUnon-NVIDIA & NVIDIA images
04Signedverified for trust with cosign
05You upgradepull it with bootc upgrade

Want to check it yourself? Verify any image against the public key

cosign verify --key cosign.pub ghcr.io/matrixdj96/bazzite-mx:latest