lil' refactor here 'n there

.github/workflows/static.yml

@@ -30,12 +30,13 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-      - name: Build static files
-        run: ./build-website
+      - name: Build the site in the jekyll/builder container
+        run: |
+          docker run -v ${{ github.workspace }}:/srv/jekyll -v ${{ github.workspace }}/_site:/srv/jekyll/_site jekyll/builder:latest /bin/bash -c "chmod -R 777 /srv/jekyll && jekyll build --future"
       - name: Upload artifact
         uses: actions/upload-pages-artifact@v3
         with:
-          path: 'website/'
+          path: 'website/_site/'
       - name: Deploy to GitHub Pages
         id: deployment
         uses: actions/deploy-pages@v4

_config.yaml

@@ -0,0 +1,3 @@
+domain: esselownitro.github.io
+url: https://esselownitro.github.io
+baseurl: /esselownitro.github.io/website

markdown/CODE_OF_CONDUCT.md → website/CODE_OF_CONDUCT.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "Code of Conduct | secureblue"
+permalink: /code-of-conduct
+---
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge

markdown/CONTRIBUTING.md → website/CONTRIBUTING.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "Contributing | secureblue"
+permalink: /contributing
+---
 # Welcome to secureblue
 
 Thanks for taking the time to look into helping out!

markdown/DONATE.md → website/DONATE.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "Donate to secureblue"
+permalink: /donate
+---
 There are multiple options available for donation:
 
 ## Github Sponsors

markdown/FAQ.md → website/FAQ.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "FAQ | secureblue"
+permalink: /faq
+---
 # FAQ
 
 #### Why is flatpak included? Should I use flatpak?

markdown/IMAGES.md → website/IMAGES.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "Images | secureblue"
+permalink: /images
+---
 # Images
 
 > [!NOTE]

markdown/README.md → website/INDEX.md

@@ -1,3 +1,8 @@
+---
+layout: main-page
+title: "secureblue: Hardened Fedora Atomic and Fedora CoreOS images"
+permalink: /
+---
 <p align="center">
   <a href="https://github.com/secureblue/secureblue">
     <img src="https://github.com/secureblue/secureblue/assets/129108030/292e0ecc-50b8-4de5-a11a-bfe292489f6c" href="https://github.com/secureblue/secureblue" width=180 />

markdown/KARGS.md → website/KARGS.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "kargs | secureblue"
+permalink: /kargs
+---
 ## Included in set-kargs-hardening
 
 **Zero newly allocated pages and heaps, mitigating use-after-free vulnerabilities**

markdown/POSTINSTALL-README.md → website/POSTINSTALL-README.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "Post-install instructions | secureblue"
+permalink: /post-install
+---
 # secureblue
 
 After rebasing to secureblue, follow the following steps in order.

markdown/PREINSTALL-README.md → website/PREINSTALL-README.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "Pre-install instructions | secureblue"
+permalink: /pre-install
+---
 # secureblue
 
 The recommended method to install secureblue is to rebase from an upstream silverblue/kinoite installation. Before rebasing and during the installation, the following checks are recommended.

markdown/RECOMMENDED.md → website/RECOMMENDED.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "Recommended DEs | secureblue"
+permalink: /recommended
+---
 > [!NOTE]
 > This is a relative recommendation between the desktop environments available on secureblue. GNOME has some extra security niceties like the ones listed below. It however does not solve any of the fundamental issues with desktop linux security.
 

markdown/SECURITY.md → website/SECURITY.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "Security policy | secureblue"
+permalink: /security
+---
 # Security Policy
 
 ## Reporting a Vulnerability

markdown/SUPPORT.md → website/SUPPORT.md

@@ -1 +1,6 @@
+---
+layout: common-page
+title: "Support | secureblue"
+permalink: /support
+---
 Submit support requests via Github Issues or Discord: https://discord.gg/gNr3Kbks34

markdown/USERNS.md → website/USERNS.md

@@ -1,3 +1,8 @@
+---
+layout: common-page
+title: "userns advice | secureblue"
+permalink: /userns
+---
 # User namespaces
 
 [User namespaces](https://en.wikipedia.org/wiki/Linux_namespaces#User_ID_(user)) are a kernel feature introduced in kernel version 3.8. When an unprivileged user asks the kernel to create a namespace, the kernel needs to permit that user to do so. Whether this is permitted by the kernel is controlled via a sysctl flag.

website/_includes/header.html

@@ -0,0 +1,20 @@
+<header>
+    <nav id="site-menu">
+        <ul>
+            <li {% if include.content == "/" %}aria-current="page"{% endif %}><a href="/"><img src="/assets/secureblue.svg" alt=""/>secureblue</a></li>
+            <li>{{ include.content }}</li>
+            <li {% if include.content == "code-of-conduct" %}aria-current="page"{% endif %}><a href="/code-of-conduct"></a>Code of conduct</li>
+            <li {% if include.content == "contributing" %}aria-current="page"{% endif %}><a href="/contributing"></a>Contributing</li>
+            <li {% if include.content == "donate" %}aria-current="page"{% endif %}><a href="/donate"></a>Donate</li>
+            <li {% if include.content == "faq" %}aria-current="page"{% endif %}><a href="/faq"></a>FAQ</li>
+            <li {% if include.content == "images" %}aria-current="page"{% endif %}><a href="/images"></a>Images</li>
+            <li {% if include.content == "kargs" %}aria-current="page"{% endif %}><a href="/kargs"></a>kargs</li>
+            <li {% if include.content == "postinstall-readme" %}aria-current="page"{% endif %}><a href="/postinstall-readme">Postinstall Readme</a></li>
+            <li {% if include.content == "preinstall-readme" %}aria-current="page"{% endif %}><a href="/preinstall-readme">Preinstall Readme</a></li>
+            <li {% if include.content == "recommended" %}aria-current="page"{% endif %}><a href="/recommended">Recommended</a></li>
+            <li {% if include.content == "security" %}aria-current="page"{% endif %}><a href="/security">Security</a></li>
+            <li {% if include.content == "support" %}aria-current="page"{% endif %}><a href="/support">Support</a></li>
+            <li {% if include.content == "userns" %}aria-current="page"{% endif %}><a href="/userns">userns</a></li>
+        </ul>
+    </nav>
+</header>

website/_layout/common-page.html

@@ -0,0 +1,41 @@
+<!DOCTYPE html>
+<html lang="en" prefix="og: https://ogp.me/ns#">
+    <head>
+        <meta charset="utf-8"/>
+        <title>common page title</title>
+
+        <meta name="description" content="smth"/>
+        <meta property="og:title" content="smth"/>
+        <meta property="og:description" content="smth"/>
+        <meta property="og:url" content="https://secureblue.io/smth"/>
+        <link rel="canonical" href="https://secureblue.io/smth"/>
+        <link rel="stylesheet" href="/assets/main.css"/>
+
+        <meta name="theme-color" content="#00293d"/>
+        <meta name="theme-color" media="(prefers-color-scheme: light)" content="#00293d"/>
+        <meta name="theme-color" media="(prefers-color-scheme: dark)" content="#00293d"/>
+        <meta name="color-scheme" content="dark light"/>
+        <meta name="msapplication-TileColor" content="#00abff"/>
+        <meta name="viewport" content="width=device-width, initial-scale=1"/>
+        <meta property="og:type" content="website"/>
+        <meta property="og:image" content="https://secureblue.io/opengraph.png"/>
+        <meta property="og:image:width" content="512"/>
+        <meta property="og:image:height" content="512"/>
+        <meta property="og:image:alt" content="secureblue logo"/>
+        <meta property="og:site_name" content="secureblue"/>
+        <link rel="icon" href="/favicon.ico"/>
+        <link rel="icon" sizes="any" type="image/svg+xml" href="/assets/favicon.svg"/>
+        <link rel="mask-icon" href="/assets/secureblue.svg" color="#1a1a1a"/>
+        <link rel="apple-touch-icon" href="/assets/apple-touch-icon.png"/>
+        <!-- link rel="manifest" href="/manifest.webmanifest"/ -->
+        <!-- link rel="license" href="/LICENSE.txt"/ -->
+    </head>
+    <body>
+        {% include "header.html" content=page.name %}
+        <main class="normalize" id="smth">
+            <div class="content">
+                {{ content }}
+            </div>
+        </main>
+    </body>
+</html>

website/_layout/main-page.html

@@ -0,0 +1,56 @@
+<!DOCTYPE html>
+<html lang="en" prefix="og: https://ogp.me/ns#">
+    <head>
+        <meta charset="utf-8"/>
+        <title>secureblue: Hardened Fedora Atomic and Fedora CoreOS images</title>
+
+        <meta name="description" content="secureblue offers hardened Fedora Atomic and Fedora CoreOS operating system images."/>
+        <meta property="og:title" content="secureblue: Hardened Fedora Atomic and Fedora CoreOS images"/>
+        <meta property="og:description" content="secureblue offers hardened Fedora Atomic and Fedora CoreOS operating system images."/>
+        <meta property="og:url" content="https://secureblue.io/"/>
+        <link rel="canonical" href="https://secureblue.io/"/>
+        <link rel="stylesheet" href="/assets/main.css"/>
+
+        <meta name="theme-color" content="#00293d"/>
+        <meta name="theme-color" media="(prefers-color-scheme: light)" content="#00293d"/>
+        <meta name="theme-color" media="(prefers-color-scheme: dark)" content="#00293d"/>
+        <meta name="color-scheme" content="dark light"/>
+        <meta name="msapplication-TileColor" content="#00abff"/>
+        <meta name="viewport" content="width=device-width, initial-scale=1"/>
+        <meta property="og:type" content="website"/>
+        <meta property="og:image" content="https://secureblue.io/opengraph.png"/>
+        <meta property="og:image:width" content="512"/>
+        <meta property="og:image:height" content="512"/>
+        <meta property="og:image:alt" content="secureblue logo"/>
+        <meta property="og:site_name" content="secureblue"/>
+        <link rel="icon" href="/favicon.ico"/>
+        <link rel="icon" sizes="any" type="image/svg+xml" href="/assets/favicon.svg"/>
+        <link rel="mask-icon" href="/assets/secureblue.svg" color="#1a1a1a"/>
+        <link rel="apple-touch-icon" href="/assets/apple-touch-icon.png"/>
+        <!-- link rel="manifest" href="/manifest.webmanifest"/ -->
+        <!-- link rel="license" href="/LICENSE.txt"/ -->
+    </head>
+    <body>
+        {% include "header.html" content="/" %}
+        <main class="normalize" id="secureblue">
+            <div class="content hero">
+
+                <div>
+                    <h1><a href="#secureblue">secureblue</a></h1>
+                    <p>[something goes here. idk.]</p>
+                    <a class="button" href="/images">Image list</a>
+                </div>
+
+                <figure class="device-img">
+                    <img class="laptop-img" width="288" height="171" src="/assets/some-random-laptop.svg" alt=""/>
+                    <img class="laptop-logo-img" width="120" height="120" src="/assets/secureblue.svg" alt=""/>
+                </figure>
+
+            </div>
+
+            <div class="content">
+                {{ content }}
+            </div>
+        </main>
+    </body>
+</html>