diff --git a/elements/gnomeos-deps/bootc.bst b/elements/gnomeos-deps/bootc.bst
new file mode 100644
index 0000000000000000000000000000000000000000..021f31633f858388ee3323388ff2a867d6a8af32
--- /dev/null
+++ b/elements/gnomeos-deps/bootc.bst
@@ -0,0 +1,1378 @@
+kind: make
+
+sources:
+- kind: git_repo
+  url: github:bootc-dev/bootc.git
+  track: v*
+  ref: v1.10.0-0-g8eae370b0310be63be106b72304c6bd1ce9a2cc4
+- kind: cargo2
+  ref:
+  - kind: registry
+    name: addr2line
+    version: 0.24.2
+    sha: dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1
+  - kind: registry
+    name: adler2
+    version: 2.0.1
+    sha: 320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa
+  - kind: registry
+    name: aho-corasick
+    version: 1.1.3
+    sha: 8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916
+  - kind: registry
+    name: ambient-authority
+    version: 0.0.2
+    sha: e9d4ee0d472d1cd2e28c97dfa124b3d8d992e10eb0a035f33f5d12e3a177ba3b
+  - kind: registry
+    name: android-tzdata
+    version: 0.1.1
+    sha: e999941b234f3131b00bc13c22d06e8c5ff726d1b6318ac7eb276997bbb4fef0
+  - kind: registry
+    name: android_system_properties
+    version: 0.1.5
+    sha: 819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311
+  - kind: registry
+    name: anstream
+    version: 0.6.20
+    sha: 3ae563653d1938f79b1ab1b5e668c87c76a9930414574a6583a7b7e11a8e6192
+  - kind: registry
+    name: anstyle
+    version: 1.0.11
+    sha: 862ed96ca487e809f1c8e5a8447f6ee2cf102f846893800b20cebdf541fc6bbd
+  - kind: registry
+    name: anstyle-parse
+    version: 0.2.7
+    sha: 4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2
+  - kind: registry
+    name: anstyle-query
+    version: 1.1.4
+    sha: 9e231f6134f61b71076a3eab506c379d4f36122f2af15a9ff04415ea4c3339e2
+  - kind: registry
+    name: anstyle-wincon
+    version: 3.0.10
+    sha: 3e0633414522a32ffaac8ac6cc8f748e090c5717661fddeea04219e2344f5f2a
+  - kind: registry
+    name: anyhow
+    version: 1.0.99
+    sha: b0674a1ddeecb70197781e945de4b3b8ffb61fa939a5597bcf48503737663100
+  - kind: registry
+    name: async-compression
+    version: 0.4.27
+    sha: ddb939d66e4ae03cee6091612804ba446b12878410cfa17f785f4dd67d4014e8
+  - kind: registry
+    name: autocfg
+    version: 1.5.0
+    sha: c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8
+  - kind: registry
+    name: backtrace
+    version: 0.3.75
+    sha: 6806a6321ec58106fea15becdad98371e28d92ccbc7c8f1b3b6dd724fe8f1002
+  - kind: registry
+    name: base64
+    version: 0.20.0
+    sha: 0ea22880d78093b0cbe17c89f64a7d457941e65759157ec6cb31a31d652b05e5
+  - kind: registry
+    name: base64
+    version: 0.21.7
+    sha: 9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567
+  - kind: registry
+    name: bitflags
+    version: 1.3.2
+    sha: bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a
+  - kind: registry
+    name: bitflags
+    version: 2.9.1
+    sha: 1b8e56985ec62d17e9c1001dc89c88ecd7dc08e47eba5ec7c29c7b5eeecde967
+  - kind: registry
+    name: block-buffer
+    version: 0.10.4
+    sha: 3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71
+  - kind: registry
+    name: bstr
+    version: 1.12.0
+    sha: 234113d19d0d7d613b40e86fb654acf958910802bcceab913a4f9e7cda03b1a4
+  - kind: registry
+    name: bumpalo
+    version: 3.19.0
+    sha: 46c5e41b57b8bba42a04676d81cb89e9ee8e859a1a66f80a5a72e1cb76b34d43
+  - kind: registry
+    name: byteorder
+    version: 1.5.0
+    sha: 1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b
+  - kind: registry
+    name: bytes
+    version: 1.10.1
+    sha: d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a
+  - kind: registry
+    name: camino
+    version: 1.1.12
+    sha: dd0b03af37dad7a14518b7691d81acb0f8222604ad3d1b02f6b4bed5188c0cd5
+  - kind: registry
+    name: canon-json
+    version: 0.2.1
+    sha: b5ae9f90437d2e2efba2a6c75b8279aa6b8f2f4017e0a4aeb64a76cd9d3a2bab
+  - kind: registry
+    name: cap-primitives
+    version: 3.4.4
+    sha: 0a1e394ed14f39f8bc26f59d4c0c010dbe7f0a1b9bafff451b1f98b67c8af62a
+  - kind: registry
+    name: cap-std
+    version: 3.4.4
+    sha: 07c0355ca583dd58f176c3c12489d684163861ede3c9efa6fd8bba314c984189
+  - kind: registry
+    name: cap-std-ext
+    version: 4.0.6
+    sha: 7770022cf9ca0e804cdc7725fa6be84a3721e5733ba889b3300689dcdb407fa1
+  - kind: registry
+    name: cap-tempfile
+    version: 3.4.4
+    sha: 9bdc50d18ee6c3551b30eb7ad5c4628d7c73ed9e1696b63c432a55602d634d7d
+  - kind: registry
+    name: cc
+    version: 1.2.32
+    sha: 2352e5597e9c544d5e6d9c95190d5d27738ade584fa8db0a16e130e5c2b5296e
+  - kind: registry
+    name: cfg-expr
+    version: 0.20.2
+    sha: c8d458d63f0f0f482c8da9b7c8b76c21bd885a02056cc94c6404d861ca2b8206
+  - kind: registry
+    name: cfg-if
+    version: 1.0.3
+    sha: 2fd1289c04a9ea8cb22300a459a72a385d7c73d3259e2ed7dcb2af674838cfa9
+  - kind: registry
+    name: cfg_aliases
+    version: 0.2.1
+    sha: 613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724
+  - kind: registry
+    name: chrono
+    version: 0.4.41
+    sha: c469d952047f47f91b68d1cba3f10d63c11d73e4636f24f08daf0278abf01c4d
+  - kind: registry
+    name: clap
+    version: 4.5.46
+    sha: 2c5e4fcf9c21d2e544ca1ee9d8552de13019a42aa7dbf32747fa7aaf1df76e57
+  - kind: registry
+    name: clap_builder
+    version: 4.5.46
+    sha: fecb53a0e6fcfb055f686001bc2e2592fa527efaf38dbe81a6a9563562e57d41
+  - kind: registry
+    name: clap_derive
+    version: 4.5.45
+    sha: 14cb31bb0a7d536caef2639baa7fad459e15c3144efefa6dbd1c84562c4739f6
+  - kind: registry
+    name: clap_lex
+    version: 0.7.5
+    sha: b94f61472cee1439c0b966b47e3aca9ae07e45d070759512cd390ea2bebc6675
+  - kind: registry
+    name: clap_mangen
+    version: 0.2.29
+    sha: 27b4c3c54b30f0d9adcb47f25f61fcce35c4dd8916638c6b82fbd5f4fb4179e2
+  - kind: registry
+    name: colorchoice
+    version: 1.0.4
+    sha: b05b61dc5112cbb17e4b6cd61790d9845d13888356391624cbe7e41efeac1e75
+  - kind: registry
+    name: comfy-table
+    version: 7.1.4
+    sha: 4a65ebfec4fb190b6f90e944a817d60499ee0744e582530e2c9900a22e591d9a
+  - kind: registry
+    name: comma
+    version: 1.0.0
+    sha: 55b672471b4e9f9e95499ea597ff64941a309b2cdbffcc46f2cc5e2d971fd335
+  - kind: git
+    commit: 82e211ee3e5c8e2b7b3bc00b40b828133633c41b
+    repo: github:containers/composefs-rs
+    query:
+      rev: 82e211ee3e5c8e2b7b3bc00b40b828133633c41b
+    name: composefs
+    version: 0.3.0
+  - kind: git
+    commit: 82e211ee3e5c8e2b7b3bc00b40b828133633c41b
+    repo: github:containers/composefs-rs
+    query:
+      rev: 82e211ee3e5c8e2b7b3bc00b40b828133633c41b
+    name: composefs-boot
+    version: 0.3.0
+  - kind: git
+    commit: 82e211ee3e5c8e2b7b3bc00b40b828133633c41b
+    repo: github:containers/composefs-rs
+    query:
+      rev: 82e211ee3e5c8e2b7b3bc00b40b828133633c41b
+    name: composefs-oci
+    version: 0.3.0
+  - kind: registry
+    name: console
+    version: 0.15.11
+    sha: 054ccb5b10f9f2cbf51eb355ca1d05c2d279ce1804688d0db74b4733a5aeafd8
+  - kind: registry
+    name: console
+    version: 0.16.0
+    sha: 2e09ced7ebbccb63b4c65413d821f2e00ce54c5ca4514ddc6b3c892fdbcbc69d
+  - kind: registry
+    name: const_format
+    version: 0.2.34
+    sha: 126f97965c8ad46d6d9163268ff28432e8f6a1196a55578867832e3049df63dd
+  - kind: registry
+    name: const_format_proc_macros
+    version: 0.2.34
+    sha: 1d57c2eccfb16dbac1f4e61e206105db5820c9d26c3c472bc17c774259ef7744
+  - kind: registry
+    name: containers-image-proxy
+    version: 0.9.0
+    sha: 08ca6531917f9b250bf6a1af43603b2e083c192565774451411f9bf4f8bf8f2b
+  - kind: registry
+    name: convert_case
+    version: 0.7.1
+    sha: bb402b8d4c85569410425650ce3eddc7d698ed96d39a73f941b08fb63082f1e7
+  - kind: registry
+    name: core-foundation-sys
+    version: 0.8.7
+    sha: 773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b
+  - kind: registry
+    name: cpufeatures
+    version: 0.2.17
+    sha: 59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280
+  - kind: registry
+    name: crc32fast
+    version: 1.5.0
+    sha: 9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511
+  - kind: registry
+    name: crossterm
+    version: 0.28.1
+    sha: 829d955a0bb380ef178a640b91779e3987da38c9aea133b20614cfed8cdea9c6
+  - kind: registry
+    name: crossterm
+    version: 0.29.0
+    sha: d8b9f2e4c67f833b660cdb0a3523065869fb35570177239812ed4c905aeff87b
+  - kind: registry
+    name: crossterm_winapi
+    version: 0.9.1
+    sha: acdd7c62a3665c7f6830a51635d9ac9b23ed385797f70a83bb8bafe9c572ab2b
+  - kind: registry
+    name: crypto-common
+    version: 0.1.6
+    sha: 1bfb12502f3fc46cca1bb51ac28df9d618d813cdc3d2f25b9fe775a34af26bb3
+  - kind: registry
+    name: darling
+    version: 0.20.11
+    sha: fc7f46116c46ff9ab3eb1597a45688b6715c6e628b5c133e288e709a29bcb4ee
+  - kind: registry
+    name: darling_core
+    version: 0.20.11
+    sha: 0d00b9596d185e565c2207a0b01f8bd1a135483d02d9b7b0a54b11da8d53412e
+  - kind: registry
+    name: darling_macro
+    version: 0.20.11
+    sha: fc34b93ccb385b40dc71c6fceac4b2ad23662c7eeb248cf10d529b7e055b6ead
+  - kind: registry
+    name: derive_builder
+    version: 0.20.2
+    sha: 507dfb09ea8b7fa618fcf76e953f4f5e192547945816d5358edffe39f6f94947
+  - kind: registry
+    name: derive_builder_core
+    version: 0.20.2
+    sha: 2d5bcf7b024d6835cfb3d473887cd966994907effbe9227e8c8219824d06c4e8
+  - kind: registry
+    name: derive_builder_macro
+    version: 0.20.2
+    sha: ab63b0e2bf4d5928aff72e83a7dace85d7bba5fe12dcc3c5a572d78caffd3f3c
+  - kind: registry
+    name: derive_more
+    version: 2.0.1
+    sha: 093242cf7570c207c83073cf82f79706fe7b8317e98620a47d5be7c3d8497678
+  - kind: registry
+    name: derive_more-impl
+    version: 2.0.1
+    sha: bda628edc44c4bb645fbe0f758797143e4e07926f7ebf4e9bdfbd3d2ce621df3
+  - kind: registry
+    name: deunicode
+    version: 1.6.2
+    sha: abd57806937c9cc163efc8ea3910e00a62e2aeb0b8119f1793a978088f8f6b04
+  - kind: registry
+    name: dialoguer
+    version: 0.12.0
+    sha: 25f104b501bf2364e78d0d3974cbc774f738f5865306ed128e1e0d7499c0ad96
+  - kind: registry
+    name: digest
+    version: 0.10.7
+    sha: 9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292
+  - kind: registry
+    name: document-features
+    version: 0.2.11
+    sha: 95249b50c6c185bee49034bcb378a49dc2b5dff0be90ff6616d31d64febab05d
+  - kind: registry
+    name: dyn-clone
+    version: 1.0.20
+    sha: d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555
+  - kind: registry
+    name: either
+    version: 1.15.0
+    sha: 48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719
+  - kind: registry
+    name: encode_unicode
+    version: 1.0.0
+    sha: 34aa73646ffb006b8f5147f3dc182bd4bcb190227ce861fc4a4844bf8e3cb2c0
+  - kind: registry
+    name: env_home
+    version: 0.1.0
+    sha: c7f84e12ccf0a7ddc17a6c41c93326024c42920d7ee630d04950e6926645c0fe
+  - kind: registry
+    name: env_logger
+    version: 0.8.4
+    sha: a19187fea3ac7e84da7dacf48de0c45d63c6a76f9490dae389aead16c243fce3
+  - kind: registry
+    name: equivalent
+    version: 1.0.2
+    sha: 877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f
+  - kind: registry
+    name: errno
+    version: 0.3.13
+    sha: 778e2ac28f6c47af28e4907f13ffd1e1ddbd400980a9abd7c8df189bf578a5ad
+  - kind: registry
+    name: escape8259
+    version: 0.5.3
+    sha: 5692dd7b5a1978a5aeb0ce83b7655c58ca8efdcb79d21036ea249da95afec2c6
+  - kind: registry
+    name: fastrand
+    version: 2.3.0
+    sha: 37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be
+  - kind: registry
+    name: filetime
+    version: 0.2.25
+    sha: 35c0522e981e68cbfa8c3f978441a5f34b30b96e146b33cd3359176b50fe8586
+  - kind: registry
+    name: flate2
+    version: 1.1.2
+    sha: 4a3d7db9596fecd151c5f638c0ee5d5bd487b6e0ea232e5dc96d5250f6f94b1d
+  - kind: registry
+    name: fn-error-context
+    version: 0.2.1
+    sha: 2cd66269887534af4b0c3e3337404591daa8dc8b9b2b3db71f9523beb4bafb41
+  - kind: registry
+    name: fnv
+    version: 1.0.7
+    sha: 3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1
+  - kind: registry
+    name: foreign-types
+    version: 0.3.2
+    sha: f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1
+  - kind: registry
+    name: foreign-types-shared
+    version: 0.1.1
+    sha: 00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b
+  - kind: registry
+    name: fs-set-times
+    version: 0.20.3
+    sha: 94e7099f6313ecacbe1256e8ff9d617b75d1bcb16a6fddef94866d225a01a14a
+  - kind: registry
+    name: futures-channel
+    version: 0.3.31
+    sha: 2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10
+  - kind: registry
+    name: futures-core
+    version: 0.3.31
+    sha: 05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e
+  - kind: registry
+    name: futures-executor
+    version: 0.3.31
+    sha: 1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f
+  - kind: registry
+    name: futures-io
+    version: 0.3.31
+    sha: 9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6
+  - kind: registry
+    name: futures-macro
+    version: 0.3.31
+    sha: 162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650
+  - kind: registry
+    name: futures-sink
+    version: 0.3.31
+    sha: e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7
+  - kind: registry
+    name: futures-task
+    version: 0.3.31
+    sha: f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988
+  - kind: registry
+    name: futures-util
+    version: 0.3.31
+    sha: 9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81
+  - kind: registry
+    name: generic-array
+    version: 0.14.7
+    sha: 85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a
+  - kind: registry
+    name: getopts
+    version: 0.2.23
+    sha: cba6ae63eb948698e300f645f87c70f76630d505f23b8907cf1e193ee85048c1
+  - kind: registry
+    name: getrandom
+    version: 0.2.16
+    sha: 335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592
+  - kind: registry
+    name: getrandom
+    version: 0.3.3
+    sha: 26145e563e54f2cadc477553f1ec5ee650b00862f0a58bcd12cbdc5f0ea2d2f4
+  - kind: registry
+    name: getset
+    version: 0.1.6
+    sha: 9cf0fc11e47561d47397154977bc219f4cf809b2974facc3ccb3b89e2436f912
+  - kind: registry
+    name: gimli
+    version: 0.31.1
+    sha: 07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f
+  - kind: registry
+    name: gio
+    version: 0.20.12
+    sha: 8e27e276e7b6b8d50f6376ee7769a71133e80d093bdc363bd0af71664228b831
+  - kind: registry
+    name: gio-sys
+    version: 0.20.10
+    sha: 521e93a7e56fc89e84aea9a52cfc9436816a4b363b030260b699950ff1336c83
+  - kind: registry
+    name: glib
+    version: 0.20.12
+    sha: ffc4b6e352d4716d84d7dde562dd9aee2a7d48beb872dd9ece7f2d1515b2d683
+  - kind: registry
+    name: glib-macros
+    version: 0.20.12
+    sha: e8084af62f09475a3f529b1629c10c429d7600ee1398ae12dd3bf175d74e7145
+  - kind: registry
+    name: glib-sys
+    version: 0.20.10
+    sha: 8ab79e1ed126803a8fb827e3de0e2ff95191912b8db65cee467edb56fc4cc215
+  - kind: registry
+    name: gobject-sys
+    version: 0.20.10
+    sha: ec9aca94bb73989e3cfdbf8f2e0f1f6da04db4d291c431f444838925c4c63eda
+  - kind: registry
+    name: gvariant
+    version: 0.5.1
+    sha: 748b888e9db06c42fef01ec5958d0955fd8813b3d6b5d3bb8b21713806abca04
+  - kind: registry
+    name: gvariant-macro
+    version: 0.5.1
+    sha: 88bee3fdb16eb087e08c38ea50f796c75085659c8a70b6928a8c9f3c7449beb5
+  - kind: registry
+    name: hashbrown
+    version: 0.15.5
+    sha: 9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1
+  - kind: registry
+    name: heck
+    version: 0.5.0
+    sha: 2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea
+  - kind: registry
+    name: hex
+    version: 0.4.3
+    sha: 7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70
+  - kind: registry
+    name: hmac
+    version: 0.12.1
+    sha: 6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e
+  - kind: registry
+    name: iana-time-zone
+    version: 0.1.63
+    sha: b0c919e5debc312ad217002b8048a17b7d83f80703865bbfcfebb0458b0b27d8
+  - kind: registry
+    name: iana-time-zone-haiku
+    version: 0.1.2
+    sha: f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f
+  - kind: registry
+    name: ident_case
+    version: 1.0.1
+    sha: b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39
+  - kind: registry
+    name: indexmap
+    version: 2.10.0
+    sha: fe4cd85333e22411419a0bcae1297d25e58c9443848b11dc6a86fefe8c78a661
+  - kind: registry
+    name: indicatif
+    version: 0.17.11
+    sha: 183b3088984b400f4cfac3620d5e076c84da5364016b4f49473de574b2586235
+  - kind: registry
+    name: indicatif
+    version: 0.18.0
+    sha: 70a646d946d06bedbbc4cac4c218acf4bbf2d87757a784857025f4d447e4e1cd
+  - kind: registry
+    name: indoc
+    version: 2.0.6
+    sha: f4c7245a08504955605670dbf141fceab975f15ca21570696aebe9d2e71576bd
+  - kind: registry
+    name: io-extras
+    version: 0.18.4
+    sha: 2285ddfe3054097ef4b2fe909ef8c3bcd1ea52a8f0d274416caebeef39f04a65
+  - kind: registry
+    name: io-lifetimes
+    version: 2.0.4
+    sha: 06432fb54d3be7964ecd3649233cddf80db2832f47fec34c01f65b3d9d774983
+  - kind: registry
+    name: io-lifetimes
+    version: 3.0.1
+    sha: 2f0fb0570afe1fed943c5c3d4102d5358592d8625fda6a0007fdbe65a92fba96
+  - kind: registry
+    name: io-uring
+    version: 0.7.9
+    sha: d93587f37623a1a17d94ef2bc9ada592f5465fe7732084ab7beefabe5c77c0c4
+  - kind: registry
+    name: ipnet
+    version: 2.11.0
+    sha: 469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130
+  - kind: registry
+    name: is_terminal_polyfill
+    version: 1.70.1
+    sha: 7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf
+  - kind: registry
+    name: itertools
+    version: 0.14.0
+    sha: 2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285
+  - kind: registry
+    name: itoa
+    version: 1.0.15
+    sha: 4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c
+  - kind: registry
+    name: jobserver
+    version: 0.1.33
+    sha: 38f262f097c174adebe41eb73d66ae9c06b2844fb0da69969647bbddd9b0538a
+  - kind: registry
+    name: js-sys
+    version: 0.3.77
+    sha: 1cfaf33c695fc6e08064efbc1f72ec937429614f25eef83af942d0e227c3a28f
+  - kind: registry
+    name: lazy_static
+    version: 1.5.0
+    sha: bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe
+  - kind: registry
+    name: libc
+    version: 0.2.175
+    sha: 6a82ae493e598baaea5209805c49bbf2ea7de956d50d7da0da1164f9c6d28543
+  - kind: registry
+    name: liboverdrop
+    version: 0.1.0
+    sha: 08e5373d7512834e2fbbe4100111483a99c28ca3818639f67ab2337672301f8e
+  - kind: registry
+    name: libredox
+    version: 0.1.9
+    sha: 391290121bad3d37fbddad76d8f5d1c1c314cfc646d143d7e07a3086ddff0ce3
+  - kind: registry
+    name: libsystemd
+    version: 0.7.2
+    sha: 19c97a761fc86953c5b885422b22c891dbf5bcb9dcc99d0110d6ce4c052759f0
+  - kind: registry
+    name: libtest-mimic
+    version: 0.8.1
+    sha: 5297962ef19edda4ce33aaa484386e0a5b3d7f2f4e037cbeee00503ef6b29d33
+  - kind: registry
+    name: libz-sys
+    version: 1.1.22
+    sha: 8b70e7a7df205e92a1a4cd9aaae7898dac0aa555503cc0a649494d0d60e7651d
+  - kind: registry
+    name: linkme
+    version: 0.3.33
+    sha: a1b1703c00b2a6a70738920544aa51652532cacddfec2e162d2e29eae01e665c
+  - kind: registry
+    name: linkme-impl
+    version: 0.3.33
+    sha: 04d55ca5d5a14363da83bf3c33874b8feaa34653e760d5216d7ef9829c88001a
+  - kind: registry
+    name: linux-raw-sys
+    version: 0.4.15
+    sha: d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab
+  - kind: registry
+    name: linux-raw-sys
+    version: 0.9.4
+    sha: cd945864f07fe9f5371a27ad7b52a172b4b499999f1d97574c9fa68373937e12
+  - kind: registry
+    name: litrs
+    version: 0.4.2
+    sha: f5e54036fe321fd421e10d732f155734c4e4afd610dd556d9a82833ab3ee0bed
+  - kind: registry
+    name: lock_api
+    version: 0.4.13
+    sha: 96936507f153605bddfcda068dd804796c84324ed2510809e5b2a624c81da765
+  - kind: registry
+    name: log
+    version: 0.4.27
+    sha: 13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94
+  - kind: registry
+    name: mandown
+    version: 1.1.0
+    sha: 9edef1e8731732e8977534921abcef085c2308096092e7294b1bb2629589908f
+  - kind: registry
+    name: matchers
+    version: 0.2.0
+    sha: d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9
+  - kind: registry
+    name: maybe-owned
+    version: 0.3.4
+    sha: 4facc753ae494aeb6e3c22f839b158aebd4f9270f55cd3c79906c45476c47ab4
+  - kind: registry
+    name: md-5
+    version: 0.10.6
+    sha: d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf
+  - kind: registry
+    name: memchr
+    version: 2.7.5
+    sha: 32a282da65faaf38286cf3be983213fcf1d2e2a58700e808f83f4ea9a4804bc0
+  - kind: registry
+    name: memoffset
+    version: 0.9.1
+    sha: 488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a
+  - kind: registry
+    name: miniz_oxide
+    version: 0.8.9
+    sha: 1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316
+  - kind: registry
+    name: mio
+    version: 1.0.4
+    sha: 78bed444cc8a2160f01cbcf811ef18cac863ad68ae8ca62092e8db51d51c761c
+  - kind: registry
+    name: nix
+    version: 0.29.0
+    sha: 71e2746dc3a24dd78b3cfcb7be93368c6de9963d30f43a6a73998a9cf4b17b46
+  - kind: registry
+    name: nix
+    version: 0.30.1
+    sha: 74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6
+  - kind: registry
+    name: nom
+    version: 8.0.0
+    sha: df9761775871bdef83bee530e60050f7e54b1105350d6884eb0fb4f46c2f9405
+  - kind: registry
+    name: nu-ansi-term
+    version: 0.50.1
+    sha: d4a28e057d01f97e61255210fcff094d74ed0466038633e95017f5beb68e4399
+  - kind: registry
+    name: num-traits
+    version: 0.2.19
+    sha: 071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841
+  - kind: registry
+    name: number_prefix
+    version: 0.4.0
+    sha: 830b246a0e5f20af87141b25c173cd1b609bd7779a4617d6ec582abaf90870f3
+  - kind: registry
+    name: object
+    version: 0.36.7
+    sha: 62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87
+  - kind: registry
+    name: oci-spec
+    version: 0.8.2
+    sha: 2078e2f6be932a4de9aca90a375a45590809dfb5a08d93ab1ee217107aceeb67
+  - kind: registry
+    name: ocidir
+    version: 0.6.0
+    sha: 92e746e3e6a7bb57a72ea4f0b8085f84aedaab1d537a5dc5488fd3cd5af0cd67
+  - kind: registry
+    name: once_cell
+    version: 1.21.3
+    sha: 42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d
+  - kind: registry
+    name: once_cell_polyfill
+    version: 1.70.1
+    sha: a4895175b425cb1f87721b59f0f286c2092bd4af812243672510e1ac53e2e0ad
+  - kind: registry
+    name: openssh-keys
+    version: 0.6.4
+    sha: abb830a82898b2ac17c9620ddce839ac3b34b9cb8a1a037cbdbfb9841c756c3e
+  - kind: registry
+    name: openssl
+    version: 0.10.73
+    sha: 8505734d46c8ab1e19a1dce3aef597ad87dcb4c37e7188231769bd6bd51cebf8
+  - kind: registry
+    name: openssl-macros
+    version: 0.1.1
+    sha: a948666b637a0f465e8564c73e89d4dde00d72d4d473cc972f390fc3dcee7d9c
+  - kind: registry
+    name: openssl-sys
+    version: 0.9.109
+    sha: 90096e2e47630d78b7d1c20952dc621f957103f8bc2c8359ec81290d75238571
+  - kind: registry
+    name: ostree
+    version: 0.20.5
+    sha: fc7b42858b9c42999daefaf06f2a60a0dfbb6995a7b87deb0a873f2fb447c269
+  - kind: registry
+    name: ostree-sys
+    version: 0.15.3
+    sha: 7aaaff741a79d31706e713a3971cfc670dfd969321e758b758b3fe79e3cdad49
+  - kind: registry
+    name: owo-colors
+    version: 4.2.2
+    sha: 48dd4f4a2c8405440fd0462561f0e5806bd0f77e86f51c761481bdd4018b545e
+  - kind: registry
+    name: parking_lot
+    version: 0.12.4
+    sha: 70d58bf43669b5795d1576d0641cfb6fbb2057bf629506267a92807158584a13
+  - kind: registry
+    name: parking_lot_core
+    version: 0.9.11
+    sha: bc838d2a56b5b1a6c25f55575dfc605fabb63bb2365f6c2353ef9159aa69e4a5
+  - kind: registry
+    name: pin-project
+    version: 1.1.10
+    sha: 677f1add503faace112b9f1373e43e9e054bfdd22ff1a63c1bc485eaec6a6a8a
+  - kind: registry
+    name: pin-project-internal
+    version: 1.1.10
+    sha: 6e918e4ff8c4549eb882f14b3a4bc8c8bc93de829416eacf579f1207a8fbf861
+  - kind: registry
+    name: pin-project-lite
+    version: 0.2.16
+    sha: 3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b
+  - kind: registry
+    name: pin-utils
+    version: 0.1.0
+    sha: 8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184
+  - kind: registry
+    name: pkg-config
+    version: 0.3.32
+    sha: 7edddbd0b52d732b21ad9a5fab5c704c14cd949e5e9a1ec5929a24fded1b904c
+  - kind: registry
+    name: portable-atomic
+    version: 1.11.1
+    sha: f84267b20a16ea918e43c6a88433c2d54fa145c92a811b5b047ccbe153674483
+  - kind: registry
+    name: ppv-lite86
+    version: 0.2.21
+    sha: 85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9
+  - kind: registry
+    name: proc-macro-crate
+    version: 3.3.0
+    sha: edce586971a4dfaa28950c6f18ed55e0406c1ab88bbce2c6f6293a7aaba73d35
+  - kind: registry
+    name: proc-macro-error-attr2
+    version: 2.0.0
+    sha: 96de42df36bb9bba5542fe9f1a054b8cc87e172759a1868aa05c1f3acc89dfc5
+  - kind: registry
+    name: proc-macro-error2
+    version: 2.0.1
+    sha: 11ec05c52be0a07b08061f7dd003e7d7092e0472bc731b4af7bb1ef876109802
+  - kind: registry
+    name: proc-macro2
+    version: 1.0.95
+    sha: 02b3e5e68a3a1a02aad3ec490a98007cbc13c37cbe84a3cd7b8e406d76e7f778
+  - kind: registry
+    name: pulldown-cmark
+    version: 0.13.0
+    sha: 1e8bbe1a966bd2f362681a44f6edce3c2310ac21e4d5067a6e7ec396297a6ea0
+  - kind: registry
+    name: pulldown-cmark-escape
+    version: 0.11.0
+    sha: 007d8adb5ddab6f8e3f491ac63566a7d5002cc7ed73901f72057943fa71ae1ae
+  - kind: registry
+    name: quickcheck
+    version: 1.0.3
+    sha: 588f6378e4dd99458b60ec275b4477add41ce4fa9f64dcba6f15adccb19b50d6
+  - kind: registry
+    name: quote
+    version: 1.0.40
+    sha: 1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d
+  - kind: registry
+    name: r-efi
+    version: 5.3.0
+    sha: 69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f
+  - kind: registry
+    name: rand
+    version: 0.8.5
+    sha: 34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404
+  - kind: registry
+    name: rand
+    version: 0.9.2
+    sha: 6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1
+  - kind: registry
+    name: rand_chacha
+    version: 0.3.1
+    sha: e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88
+  - kind: registry
+    name: rand_chacha
+    version: 0.9.0
+    sha: d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb
+  - kind: registry
+    name: rand_core
+    version: 0.6.4
+    sha: ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c
+  - kind: registry
+    name: rand_core
+    version: 0.9.3
+    sha: 99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38
+  - kind: registry
+    name: redox_syscall
+    version: 0.5.17
+    sha: 5407465600fb0548f1442edf71dd20683c6ed326200ace4b1ef0763521bb3b77
+  - kind: registry
+    name: ref-cast
+    version: 1.0.24
+    sha: 4a0ae411dbe946a674d89546582cea4ba2bb8defac896622d6496f14c23ba5cf
+  - kind: registry
+    name: ref-cast-impl
+    version: 1.0.24
+    sha: 1165225c21bff1f3bbce98f5a1f889949bc902d3575308cc7b0de30b4f6d27c7
+  - kind: registry
+    name: regex
+    version: 1.11.2
+    sha: 23d7fd106d8c02486a8d64e778353d1cffe08ce79ac2e82f540c86d0facf6912
+  - kind: registry
+    name: regex-automata
+    version: 0.4.9
+    sha: 809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908
+  - kind: registry
+    name: regex-syntax
+    version: 0.8.5
+    sha: 2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c
+  - kind: registry
+    name: rexpect
+    version: 0.6.2
+    sha: 2c1bcd4ac488e9d2d726d147031cceff5cff6425011ff1914049739770fa4726
+  - kind: registry
+    name: roff
+    version: 0.2.2
+    sha: 88f8660c1ff60292143c98d08fc6e2f654d722db50410e3f3797d40baaf9d8f3
+  - kind: registry
+    name: rustc-demangle
+    version: 0.1.26
+    sha: 56f7d92ca342cea22a06f2121d944b4fd82af56988c270852495420f961d4ace
+  - kind: registry
+    name: rustix
+    version: 0.38.44
+    sha: fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154
+  - kind: registry
+    name: rustix
+    version: 1.0.8
+    sha: 11181fbabf243db407ef8df94a6ce0b2f9a733bd8be4ad02b4eda9602296cac8
+  - kind: registry
+    name: rustix-linux-procfs
+    version: 0.1.1
+    sha: 2fc84bf7e9aa16c4f2c758f27412dc9841341e16aa682d9c7ac308fe3ee12056
+  - kind: registry
+    name: rustversion
+    version: 1.0.21
+    sha: 8a0d197bd2c9dc6e53b84da9556a69ba4cdfab8619eb41a8bd1cc2027a0f6b1d
+  - kind: registry
+    name: ryu
+    version: 1.0.20
+    sha: 28d3b2b1366ec20994f1fd18c3c594f05c5dd4bc44d8bb0c1c632c8d6829481f
+  - kind: registry
+    name: schemars
+    version: 1.0.4
+    sha: 82d20c4491bc164fa2f6c5d44565947a52ad80b9505d8e36f8d54c27c739fcd0
+  - kind: registry
+    name: schemars_derive
+    version: 1.0.4
+    sha: 33d020396d1d138dc19f1165df7545479dcd58d93810dc5d646a16e55abefa80
+  - kind: registry
+    name: scopeguard
+    version: 1.2.0
+    sha: 94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49
+  - kind: registry
+    name: semver
+    version: 1.0.26
+    sha: 56e6fa9c48d24d85fb3de5ad847117517440f6beceb7798af16b4a87d616b8d0
+  - kind: registry
+    name: serde
+    version: 1.0.219
+    sha: 5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6
+  - kind: registry
+    name: serde_derive
+    version: 1.0.219
+    sha: 5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00
+  - kind: registry
+    name: serde_derive_internals
+    version: 0.29.1
+    sha: 18d26a20a969b9e3fdf2fc2d9f21eda6c40e2de84c9408bb5d3b05d499aae711
+  - kind: registry
+    name: serde_ignored
+    version: 0.1.12
+    sha: b516445dac1e3535b6d658a7b528d771153dfb272ed4180ca4617a20550365ff
+  - kind: registry
+    name: serde_json
+    version: 1.0.143
+    sha: d401abef1d108fbd9cbaebc3e46611f4b1021f714a0597a71f41ee463f5f4a5a
+  - kind: registry
+    name: serde_spanned
+    version: 0.6.9
+    sha: bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3
+  - kind: registry
+    name: serde_spanned
+    version: 1.0.0
+    sha: 40734c41988f7306bb04f0ecf60ec0f3f1caa34290e4e8ea471dcd3346483b83
+  - kind: registry
+    name: serde_yaml
+    version: 0.9.34+deprecated
+    sha: 6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47
+  - kind: registry
+    name: sha2
+    version: 0.10.9
+    sha: a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283
+  - kind: registry
+    name: sharded-slab
+    version: 0.1.7
+    sha: f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6
+  - kind: registry
+    name: shell-words
+    version: 1.1.0
+    sha: 24188a676b6ae68c3b2cb3a01be17fbf7240ce009799bb56d5b1409051e78fde
+  - kind: registry
+    name: shlex
+    version: 1.3.0
+    sha: 0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64
+  - kind: registry
+    name: signal-hook
+    version: 0.3.18
+    sha: d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2
+  - kind: registry
+    name: signal-hook-mio
+    version: 0.2.4
+    sha: 34db1a06d485c9142248b7a054f034b349b212551f3dfd19c94d45a754a217cd
+  - kind: registry
+    name: signal-hook-registry
+    version: 1.4.6
+    sha: b2a4719bff48cee6b39d12c020eeb490953ad2443b7055bd0b21fca26bd8c28b
+  - kind: registry
+    name: similar
+    version: 2.7.0
+    sha: bbbb5d9659141646ae647b42fe094daf6c6192d1620870b449d9557f748b2daa
+  - kind: registry
+    name: similar-asserts
+    version: 1.7.0
+    sha: b5b441962c817e33508847a22bd82f03a30cff43642dc2fae8b050566121eb9a
+  - kind: registry
+    name: slab
+    version: 0.4.11
+    sha: 7a2ae44ef20feb57a68b23d846850f861394c2e02dc425a50098ae8c90267589
+  - kind: registry
+    name: smallvec
+    version: 1.15.1
+    sha: 67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03
+  - kind: registry
+    name: socket2
+    version: 0.6.0
+    sha: 233504af464074f9d066d7b5416c5f9b894a5862a6506e306f7b816cdd6f1807
+  - kind: registry
+    name: static_assertions
+    version: 1.1.0
+    sha: a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f
+  - kind: registry
+    name: strsim
+    version: 0.11.1
+    sha: 7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f
+  - kind: registry
+    name: strum
+    version: 0.27.2
+    sha: af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf
+  - kind: registry
+    name: strum_macros
+    version: 0.27.2
+    sha: 7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7
+  - kind: registry
+    name: subtle
+    version: 2.6.1
+    sha: 13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292
+  - kind: registry
+    name: syn
+    version: 1.0.109
+    sha: 72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237
+  - kind: registry
+    name: syn
+    version: 2.0.104
+    sha: 17b6f705963418cdb9927482fa304bc562ece2fdd4f616084c50b7023b435a40
+  - kind: registry
+    name: system-deps
+    version: 7.0.5
+    sha: e4be53aa0cba896d2dc615bd42bbc130acdcffa239e0a2d965ea5b3b2a86ffdb
+  - kind: registry
+    name: tar
+    version: 0.4.44
+    sha: 1d863878d212c87a19c1a610eb53bb01fe12951c0501cf5a0d65f724914a667a
+  - kind: registry
+    name: target-lexicon
+    version: 0.13.2
+    sha: e502f78cdbb8ba4718f566c418c52bc729126ffd16baee5baa718cf25dd5a69a
+  - kind: registry
+    name: tempfile
+    version: 3.20.0
+    sha: e8a64e3985349f2441a1a9ef0b853f869006c3855f2cda6862a94d26ebb9d6a1
+  - kind: registry
+    name: thiserror
+    version: 1.0.69
+    sha: b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52
+  - kind: registry
+    name: thiserror
+    version: 2.0.16
+    sha: 3467d614147380f2e4e374161426ff399c91084acd2363eaf549172b3d5e60c0
+  - kind: registry
+    name: thiserror-impl
+    version: 1.0.69
+    sha: 4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1
+  - kind: registry
+    name: thiserror-impl
+    version: 2.0.16
+    sha: 6c5e1be1c48b9172ee610da68fd9cd2770e7a4056cb3fc98710ee6906f0c7960
+  - kind: registry
+    name: thread_local
+    version: 1.1.9
+    sha: f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185
+  - kind: registry
+    name: tini
+    version: 1.3.0
+    sha: e004df4c5f0805eb5f55883204a514cfa43a6d924741be29e871753a53d5565a
+  - kind: registry
+    name: tokio
+    version: 1.47.1
+    sha: 89e49afdadebb872d3145a5638b59eb0691ea23e46ca484037cfab3b76b95038
+  - kind: registry
+    name: tokio-macros
+    version: 2.5.0
+    sha: 6e06d43f1345a3bcd39f6a56dbb7dcab2ba47e68e8ac134855e7e2bdbaf8cab8
+  - kind: registry
+    name: tokio-stream
+    version: 0.1.17
+    sha: eca58d7bba4a75707817a2c44174253f9236b2d5fbd055602e9d5c07c139a047
+  - kind: registry
+    name: tokio-util
+    version: 0.7.16
+    sha: 14307c986784f72ef81c89db7d9e28d6ac26d16213b109ea501696195e6e3ce5
+  - kind: registry
+    name: toml
+    version: 0.8.23
+    sha: dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362
+  - kind: registry
+    name: toml
+    version: 0.9.5
+    sha: 75129e1dc5000bfbaa9fee9d1b21f974f9fbad9daec557a521ee6e080825f6e8
+  - kind: registry
+    name: toml_datetime
+    version: 0.6.11
+    sha: 22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c
+  - kind: registry
+    name: toml_datetime
+    version: 0.7.0
+    sha: bade1c3e902f58d73d3f294cd7f20391c1cb2fbcb643b73566bc773971df91e3
+  - kind: registry
+    name: toml_edit
+    version: 0.22.27
+    sha: 41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a
+  - kind: registry
+    name: toml_parser
+    version: 1.0.2
+    sha: b551886f449aa90d4fe2bdaa9f4a2577ad2dde302c61ecf262d80b116db95c10
+  - kind: registry
+    name: toml_writer
+    version: 1.0.2
+    sha: fcc842091f2def52017664b53082ecbbeb5c7731092bad69d2c63050401dfd64
+  - kind: registry
+    name: tracing
+    version: 0.1.41
+    sha: 784e0ac535deb450455cbfa28a6f0df145ea1bb7ae51b821cf5e7927fdcfbdd0
+  - kind: registry
+    name: tracing-attributes
+    version: 0.1.30
+    sha: 81383ab64e72a7a8b8e13130c49e3dab29def6d0c7d76a03087b3cf71c5c6903
+  - kind: registry
+    name: tracing-core
+    version: 0.1.34
+    sha: b9d12581f227e93f094d3af2ae690a574abb8a2b9b7a96e7cfe9647b2b617678
+  - kind: registry
+    name: tracing-journald
+    version: 0.3.1
+    sha: fc0b4143302cf1022dac868d521e36e8b27691f72c84b3311750d5188ebba657
+  - kind: registry
+    name: tracing-log
+    version: 0.2.0
+    sha: ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3
+  - kind: registry
+    name: tracing-subscriber
+    version: 0.3.20
+    sha: 2054a14f5307d601f88daf0553e1cbf472acc4f2c51afab632431cdcd72124d5
+  - kind: registry
+    name: typenum
+    version: 1.18.0
+    sha: 1dccffe3ce07af9386bfd29e80c0ab1a8205a2fc34e4bcd40364df902cfa8f3f
+  - kind: registry
+    name: uapi-version
+    version: 0.4.0
+    sha: 849f6b1fe8a0fb07170737d7f3acf72cac5462fb3f4e86614474a49f7fac3b65
+  - kind: registry
+    name: unicase
+    version: 2.8.1
+    sha: 75b844d17643ee918803943289730bec8aac480150456169e647ed0b576ba539
+  - kind: registry
+    name: unicode-ident
+    version: 1.0.18
+    sha: 5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512
+  - kind: registry
+    name: unicode-segmentation
+    version: 1.12.0
+    sha: f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493
+  - kind: registry
+    name: unicode-width
+    version: 0.2.1
+    sha: 4a1a07cc7db3810833284e8d372ccdc6da29741639ecc70c9ec107df0fa6154c
+  - kind: registry
+    name: unicode-xid
+    version: 0.2.6
+    sha: ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853
+  - kind: registry
+    name: unit-prefix
+    version: 0.5.1
+    sha: 323402cff2dd658f39ca17c789b502021b3f18707c91cdf22e3838e1b4023817
+  - kind: registry
+    name: unsafe-libyaml
+    version: 0.2.11
+    sha: 673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861
+  - kind: registry
+    name: utf8parse
+    version: 0.2.2
+    sha: 06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821
+  - kind: registry
+    name: uuid
+    version: 1.17.0
+    sha: 3cf4199d1e5d15ddd86a694e4d0dffa9c323ce759fea589f00fef9d81cc1931d
+  - kind: registry
+    name: uzers
+    version: 0.12.1
+    sha: 4df81ff504e7d82ad53e95ed1ad5b72103c11253f39238bcc0235b90768a97dd
+  - kind: registry
+    name: valuable
+    version: 0.1.1
+    sha: ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65
+  - kind: registry
+    name: vcpkg
+    version: 0.2.15
+    sha: accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426
+  - kind: registry
+    name: version-compare
+    version: 0.2.0
+    sha: 852e951cb7832cb45cb1169900d19760cfa39b82bc0ea9c0e5a14ae88411c98b
+  - kind: registry
+    name: version_check
+    version: 0.9.5
+    sha: 0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a
+  - kind: registry
+    name: wasi
+    version: 0.11.1+wasi-snapshot-preview1
+    sha: ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b
+  - kind: registry
+    name: wasi
+    version: 0.14.2+wasi-0.2.4
+    sha: 9683f9a5a998d873c0d21fcbe3c083009670149a8fab228644b8bd36b2c48cb3
+  - kind: registry
+    name: wasm-bindgen
+    version: 0.2.100
+    sha: 1edc8929d7499fc4e8f0be2262a241556cfc54a0bea223790e71446f2aab1ef5
+  - kind: registry
+    name: wasm-bindgen-backend
+    version: 0.2.100
+    sha: 2f0a0651a5c2bc21487bde11ee802ccaf4c51935d0d3d42a6101f98161700bc6
+  - kind: registry
+    name: wasm-bindgen-macro
+    version: 0.2.100
+    sha: 7fe63fc6d09ed3792bd0897b314f53de8e16568c2b3f7982f468c0bf9bd0b407
+  - kind: registry
+    name: wasm-bindgen-macro-support
+    version: 0.2.100
+    sha: 8ae87ea40c9f689fc23f209965b6fb8a99ad69aeeb0231408be24920604395de
+  - kind: registry
+    name: wasm-bindgen-shared
+    version: 0.2.100
+    sha: 1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d
+  - kind: registry
+    name: web-time
+    version: 1.1.0
+    sha: 5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb
+  - kind: registry
+    name: which
+    version: 8.0.0
+    sha: d3fabb953106c3c8eea8306e4393700d7657561cb43122571b172bbfb7c7ba1d
+  - kind: registry
+    name: winapi
+    version: 0.3.9
+    sha: 5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419
+  - kind: registry
+    name: winapi-i686-pc-windows-gnu
+    version: 0.4.0
+    sha: ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6
+  - kind: registry
+    name: winapi-x86_64-pc-windows-gnu
+    version: 0.4.0
+    sha: 712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f
+  - kind: registry
+    name: windows-core
+    version: 0.61.2
+    sha: c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3
+  - kind: registry
+    name: windows-implement
+    version: 0.60.0
+    sha: a47fddd13af08290e67f4acabf4b459f647552718f683a7b415d290ac744a836
+  - kind: registry
+    name: windows-interface
+    version: 0.59.1
+    sha: bd9211b69f8dcdfa817bfd14bf1c97c9188afa36f4750130fcdf3f400eca9fa8
+  - kind: registry
+    name: windows-link
+    version: 0.1.3
+    sha: 5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a
+  - kind: registry
+    name: windows-result
+    version: 0.3.4
+    sha: 56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6
+  - kind: registry
+    name: windows-strings
+    version: 0.4.2
+    sha: 56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57
+  - kind: registry
+    name: windows-sys
+    version: 0.52.0
+    sha: 282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d
+  - kind: registry
+    name: windows-sys
+    version: 0.59.0
+    sha: 1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b
+  - kind: registry
+    name: windows-sys
+    version: 0.60.2
+    sha: f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb
+  - kind: registry
+    name: windows-targets
+    version: 0.52.6
+    sha: 9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973
+  - kind: registry
+    name: windows-targets
+    version: 0.53.3
+    sha: d5fe6031c4041849d7c496a8ded650796e7b6ecc19df1a431c1a363342e5dc91
+  - kind: registry
+    name: windows_aarch64_gnullvm
+    version: 0.52.6
+    sha: 32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3
+  - kind: registry
+    name: windows_aarch64_gnullvm
+    version: 0.53.0
+    sha: 86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764
+  - kind: registry
+    name: windows_aarch64_msvc
+    version: 0.52.6
+    sha: 09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469
+  - kind: registry
+    name: windows_aarch64_msvc
+    version: 0.53.0
+    sha: c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c
+  - kind: registry
+    name: windows_i686_gnu
+    version: 0.52.6
+    sha: 8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b
+  - kind: registry
+    name: windows_i686_gnu
+    version: 0.53.0
+    sha: c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3
+  - kind: registry
+    name: windows_i686_gnullvm
+    version: 0.52.6
+    sha: 0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66
+  - kind: registry
+    name: windows_i686_gnullvm
+    version: 0.53.0
+    sha: 9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11
+  - kind: registry
+    name: windows_i686_msvc
+    version: 0.52.6
+    sha: 240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66
+  - kind: registry
+    name: windows_i686_msvc
+    version: 0.53.0
+    sha: 581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d
+  - kind: registry
+    name: windows_x86_64_gnu
+    version: 0.52.6
+    sha: 147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78
+  - kind: registry
+    name: windows_x86_64_gnu
+    version: 0.53.0
+    sha: 2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba
+  - kind: registry
+    name: windows_x86_64_gnullvm
+    version: 0.52.6
+    sha: 24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d
+  - kind: registry
+    name: windows_x86_64_gnullvm
+    version: 0.53.0
+    sha: 0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57
+  - kind: registry
+    name: windows_x86_64_msvc
+    version: 0.52.6
+    sha: 589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec
+  - kind: registry
+    name: windows_x86_64_msvc
+    version: 0.53.0
+    sha: 271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486
+  - kind: registry
+    name: winnow
+    version: 0.7.12
+    sha: f3edebf492c8125044983378ecb5766203ad3b4c2f7a922bd7dd207f6d443e95
+  - kind: registry
+    name: winsafe
+    version: 0.0.19
+    sha: d135d17ab770252ad95e9a872d365cf3090e3be864a34ab46f48555993efc904
+  - kind: registry
+    name: winx
+    version: 0.36.4
+    sha: 3f3fd376f71958b862e7afb20cfe5a22830e1963462f3a17f49d82a6c1d1f42d
+  - kind: registry
+    name: wit-bindgen-rt
+    version: 0.39.0
+    sha: 6f42320e61fe2cfd34354ecb597f86f413484a798ba44a8ca1165c58d42da6c1
+  - kind: registry
+    name: xattr
+    version: 1.5.1
+    sha: af3a19837351dc82ba89f8a125e22a3c475f05aba604acc023d62b2739ae2909
+  - kind: registry
+    name: xshell
+    version: 0.2.7
+    sha: 9e7290c623014758632efe00737145b6867b66292c42167f2ec381eb566a373d
+  - kind: registry
+    name: xshell-macros
+    version: 0.2.7
+    sha: 32ac00cd3f8ec9c1d33fb3e7958a82df6989c42d747bd326c822b1d625283547
+  - kind: registry
+    name: xxhash-rust
+    version: 0.8.15
+    sha: fdd20c5420375476fbd4394763288da7eb0cc0b8c11deed431a91562af7335d3
+  - kind: registry
+    name: zerocopy
+    version: 0.8.26
+    sha: 1039dd0d3c310cf05de012d8a39ff557cb0d23087fd44cad61df08fc31907a2f
+  - kind: registry
+    name: zerocopy-derive
+    version: 0.8.26
+    sha: 9ecf5b4cc5364572d7f4c329661bcc82724222973f2cab6f050a4e5c22f75181
+  - kind: registry
+    name: zeroize
+    version: 1.8.1
+    sha: ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde
+  - kind: registry
+    name: zstd
+    version: 0.13.3
+    sha: e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a
+  - kind: registry
+    name: zstd-safe
+    version: 7.2.4
+    sha: 8f49c4d5f0abb602a93fb8736af2a4f4dd9512e36f7f570d66e65ff867ed3b9d
+  - kind: registry
+    name: zstd-sys
+    version: 2.0.15+zstd.1.5.7
+    sha: eb81183ddd97d0c74cedf1d50d85c8d08c1b8b68ee863bdee9e706eedba1a237
+build-depends:
+- freedesktop-sdk.bst:components/go-md2man.bst
+- freedesktop-sdk.bst:components/openssl.bst
+- freedesktop-sdk.bst:components/pkg-config.bst
+- freedesktop-sdk.bst:components/rust.bst
+- freedesktop-sdk.bst:components/systemd.bst
+- freedesktop-sdk.bst:components/zstd.bst
+- freedesktop-sdk.bst:public-stacks/buildsystem-make.bst
+
+depends:
+- freedesktop-sdk.bst:components/composefs.bst
+- freedesktop-sdk.bst:components/ostree.bst
+- freedesktop-sdk.bst:components/podman.bst
+- freedesktop-sdk.bst:components/skopeo.bst
+- freedesktop-sdk.bst:components/util-linux.bst
+- freedesktop-sdk.bst:public-stacks/runtime-minimal.bst
+
+variables:
+  make-install-args: >-
+    PREFIX="%{prefix}" LIBDIR="%{lib}" DESTDIR="%{install-root}" install-all install-initramfs-dracut
diff --git a/elements/gnomeos-deps/deps.bst b/elements/gnomeos-deps/deps.bst
index 14dc707cd90bd27b93949a5454580d8f80fc0e1e..4af04070393115acba16eb487a92b2d429623d6f 100644
--- a/elements/gnomeos-deps/deps.bst
+++ b/elements/gnomeos-deps/deps.bst
@@ -68,7 +68,6 @@ depends:
 - freedesktop-sdk.bst:components/wireplumber.bst
 
 - freedesktop-sdk.bst:vm/config/sudo.bst
-- freedesktop-sdk.bst:vm/config/useradd-default.bst
 - freedesktop-sdk.bst:vm/mesa-default.bst
 - freedesktop-sdk.bst:components/bash-completion.bst
 - freedesktop-sdk.bst:components/bash-config.bst
diff --git a/elements/gnomeos/deps.bst b/elements/gnomeos/deps.bst
index eeb7ac9edfc417f634f931c10ff3155936b3f73d..f3f5aa169211ccf3a90d9f5eba21e295610a0add 100644
--- a/elements/gnomeos/deps.bst
+++ b/elements/gnomeos/deps.bst
@@ -15,6 +15,7 @@ depends:
 - gnomeos/systemd-pcrlock-workaround.bst
 - gnomeos/public-keys.bst
 - gnomeos/signed-boot-common.bst
+- freedesktop-sdk.bst:vm/config/useradd-default.bst
 
 (?):
 - arch in ["x86_64"]:
diff --git a/elements/oci/README.md b/elements/oci/README.md
index 82f651f95ba1a25c9294bf31b44ee3633225c436..2492c2ff7bdc239b7aa1cd0f436142a7f2e4402d 100644
--- a/elements/oci/README.md
+++ b/elements/oci/README.md
@@ -30,11 +30,13 @@ They are built and pushed to the (container registry [quay.io)](https://quay.io/
 - GNOME OS: Mirror of the OS /usr tree
     - Includes Locales
     - Toolbox compatible
+    - Bootc compatible
 - GNOME OS Devel: The Development System Extension on top of the OS image
     - Includes Locales
     - Includes Docs
     - Includes Debug Symbols (Until we have debuginfod)
     - Toolbox compatible
+    - Bootc compatible
 
 ## Build OCI images locally:
 
@@ -73,3 +75,21 @@ You can use the container images with toolbox or distrobox as an easy way to cre
 ## Caveats
 
 Toolbox containers are updated using an update mechanism inside the container that will directly modify the container filesystem. GNOME OS does not have such mechanism. When used in combination with Toolbox you will need to re-create the container if you want to update it and the toolchain it includes.
+
+
+## Bootc
+
+While some of the OCI images are compatible with `bootc` its not a supported distribution channel. This is only for testing reasons and there are be no plans of supporting a GNOME OS `bootc` image.
+
+We think [Discoverable Disk Image](https://uapi-group.org/specifications/specs/discoverable_disk_image/) and systemd is a better fit for our usecase and requirements.
+
+The only supported channel is and will remain the DDI images found in `elements/gnomeos`.
+
+More details on the subject can be found in this [Thread](https://discourse.gnome.org/t/why-did-gnome-os-choose-systemd-sysupdate-over-bootc/24642/2).
+
+To generate and test a bootc image you will need the following:
+
+```bash
+./utils/generate-bootc-image.sh gnomeos /tmp
+./utils/run-secure-vm.sh --image /tmp/bootable.img
+```
diff --git a/elements/oci/gnomeos-devel.bst b/elements/oci/gnomeos-devel.bst
index 09c5c4180ad6847844693725100fb63804208b67..dc4d0048cf393dd7186174462c2f799e019045ad 100644
--- a/elements/oci/gnomeos-devel.bst
+++ b/elements/oci/gnomeos-devel.bst
@@ -1,7 +1,9 @@
 kind: script
 
 build-depends:
-- freedesktop-sdk.bst:oci/oci-builder.bst
+- freedesktop-sdk.bst:components/fakecap.bst
+- freedesktop-sdk.bst:components/oci-builder.bst
+- freedesktop-sdk.bst:vm/prepare-image.bst
 - oci/layers/gnomeos-devel-init-scripts.bst
 - filename: oci/gnomeos.bst
   config:
@@ -14,15 +16,21 @@ environment:
   LD_PRELOAD: /usr/libexec/fakecap/fakecap.so
   FAKECAP_DB: /fakecap
 
+variables:
+  sysroot-seed: b57666f6-0fe5-4310-adff-f256936d164d
+
 config:
   commands:
   - mkdir /fakecap
   - |
-    if [ -d /initial_scripts ]; then
-      for i in /initial_scripts/*; do
-        "${i}" /layer
-      done
-    fi
+    prepare-image.sh \
+       --sysroot /layer \
+       --initscripts /initial_scripts \
+       --seed "%{sysroot-seed}" \
+       --noroot --noboot >/dev/null
+
+  - |
+    systemd-sysusers --root /layer
 
   - |
     cd "%{install-root}"
@@ -41,6 +49,7 @@ config:
           'com.github.containers.toolbox': 'true'
           'org.opencontainers.image.source': 'https://gitlab.gnome.org/GNOME/gnome-build-meta/'
           'org.opencontainers.image.url': 'https://gitlab.gnome.org/GNOME/gnome-build-meta/'
+          'containers.bootc': '1'
       index-annotations:
         'org.opencontainers.image.ref.name': 'quay.io/gnome_infrastructure/gnome-build-meta:gnomeos-devel-%{branch}'
     EOF
diff --git a/elements/oci/gnomeos.bst b/elements/oci/gnomeos.bst
index 32b739884575fbfcb0c5ce3d6827e56800011c09..598afff7a3ad95a10baa09146fcb1470dcf91dfe 100644
--- a/elements/oci/gnomeos.bst
+++ b/elements/oci/gnomeos.bst
@@ -1,7 +1,9 @@
 kind: script
 
 build-depends:
-- freedesktop-sdk.bst:oci/oci-builder.bst
+- freedesktop-sdk.bst:components/fakecap.bst
+- freedesktop-sdk.bst:components/oci-builder.bst
+- freedesktop-sdk.bst:vm/prepare-image.bst
 - oci/layers/gnomeos-init-scripts.bst
 - filename: oci/platform.bst
   config:
@@ -14,15 +16,21 @@ environment:
   LD_PRELOAD: /usr/libexec/fakecap/fakecap.so
   FAKECAP_DB: /fakecap
 
+variables:
+  sysroot-seed: b57666f6-0fe5-4310-adff-f256936d164d
+
 config:
   commands:
   - mkdir /fakecap
   - |
-    if [ -d /initial_scripts ]; then
-      for i in /initial_scripts/*; do
-        "${i}" /layer
-      done
-    fi
+    prepare-image.sh \
+       --sysroot /layer \
+       --initscripts /initial_scripts \
+       --seed "%{sysroot-seed}" \
+       --noroot --noboot >/dev/null
+
+  - |
+    systemd-sysusers --root /layer
 
   - |
     cd "%{install-root}"
@@ -41,6 +49,7 @@ config:
           'com.github.containers.toolbox': 'true'
           'org.opencontainers.image.source': 'https://gitlab.gnome.org/GNOME/gnome-build-meta/'
           'org.opencontainers.image.url': 'https://gitlab.gnome.org/GNOME/gnome-build-meta/'
+          'containers.bootc': '1'
       index-annotations:
         'org.opencontainers.image.ref.name': 'quay.io/gnome_infrastructure/gnome-build-meta:gnomeos-%{branch}'
     EOF
diff --git a/elements/oci/initramfs.bst b/elements/oci/initramfs.bst
new file mode 100644
index 0000000000000000000000000000000000000000..dab10ab152ed890b63be65cf76cc757803baaebf
--- /dev/null
+++ b/elements/oci/initramfs.bst
@@ -0,0 +1,73 @@
+kind: script
+
+build-depends:
+- gnomeos/generate-initramfs.bst
+- oci/initramfs/deps.bst
+- oci/initramfs/initial-scripts.bst
+- freedesktop-sdk.bst:components/fakecap.bst
+- freedesktop-sdk.bst:vm/prepare-image.bst
+
+variables:
+  sysroot-seed: 9473a621-1617-4679-87e5-031afef28359
+
+environment:
+  LD_PRELOAD: /usr/libexec/fakecap/fakecap.so
+  FAKECAP_DB: /fakecap
+  ZSTDFLAGS: -T%{max-jobs}
+  DLOPEN_NOTE_IGNORE: archive:fido2:qrencode:ip4tc
+  INITRD_MODE: oci
+
+environment-nocache:
+- ZSTDFLAGS
+
+config:
+  commands:
+  - mkdir -p /tmp /efi /var/tmp /fakecap
+  - |
+    prepare-image.sh \
+       --seed "%{sysroot-seed}" \
+       --noroot --noboot >/dev/null
+
+  - dbus-uuidgen >/etc/machine-id
+  - SYSTEMD_ESP_PATH=/efi bootctl --no-variables install
+  - rm /etc/machine-id
+
+  - mkdir -p "%{install-root}/efi/EFI/Linux"
+
+  - |
+    version="$(ls -1 /lib/modules | head -n1)"
+    generate-initramfs /initramfs-root "${version}" "%{libdir}" "%{libdir}/systemd"
+
+  - |
+    (
+      cd /initramfs-root
+      find . -print0 | sort -z | cpio --reproducible --null -H newc -o --quiet | zstd ${ZSTDFLAGS} >/initramfs.img
+    )
+
+  - |
+    case '%{arch}' in
+      x86_64)
+        mkdir -p /microcode/kernel/x86/microcode
+        cat /usr/lib/firmware/amd-ucode/microcode_amd*.bin >/microcode/kernel/x86/microcode/AuthenticAMD.bin
+        cp /usr/lib/firmware/intel-ucode/GenuineIntel.bin /microcode/kernel/x86/microcode/GenuineIntel.bin
+        (
+          cd /microcode
+          find . -print0 | sort -z | cpio --reproducible --null -H newc -o --quiet >/microcode.img
+        )
+      ;;
+    esac
+
+  - |
+    version="$(ls -1 /lib/modules | head -n1)"
+    mkdir -p "%{install-root}/usr/lib/modules/${version}"
+    initrds=()
+    case '%{arch}' in
+      x86_64)
+        initrds+=(/microcode.img)
+        ;;
+    esac
+    initrds+=(/initramfs.img)
+    cat "${initrds[@]}" >"%{install-root}/usr/lib/modules/${version}/initramfs.img"
+
+  - mkdir -p "%{install-root}/efi/EFI"
+  - cp -rT /efi/EFI "%{install-root}/efi/EFI"
diff --git a/elements/oci/initramfs/deps.bst b/elements/oci/initramfs/deps.bst
new file mode 100644
index 0000000000000000000000000000000000000000..ffbd9dca77104e9211b89293c41a8ee7af4b5f56
--- /dev/null
+++ b/elements/oci/initramfs/deps.bst
@@ -0,0 +1,32 @@
+kind: stack
+
+depends:
+- freedesktop-sdk.bst:public-stacks/runtime-minimal.bst
+- freedesktop-sdk.bst:components/btrfs-progs.bst
+- freedesktop-sdk.bst:components/cpio.bst
+- freedesktop-sdk.bst:components/dbus.bst
+- freedesktop-sdk.bst:components/fuse3.bst
+- freedesktop-sdk.bst:components/linux-firmware.bst
+- freedesktop-sdk.bst:components/pkg-config.bst
+- freedesktop-sdk.bst:components/shadow.bst
+- freedesktop-sdk.bst:components/systemd.bst
+- freedesktop-sdk.bst:components/tpm2-tss.bst
+- freedesktop-sdk.bst:components/tpm2-tools.bst
+- freedesktop-sdk.bst:components/tzdata.bst
+- freedesktop-sdk.bst:components/util-linux.bst
+- gnomeos-deps/plymouth-gnome-theme.bst
+- gnomeos-deps/udev-hide-usr.bst
+- gnomeos-deps/zram-generator.bst
+- gnomeos/initramfs/signed-modules.bst
+- gnomeos-deps/efitools-maybe.bst
+- gnomeos-deps/shim-maybe.bst
+- gnomeos/reload-sysext.bst
+- gnomeos/os-release-user.bst
+- gnomeos/replace-signed-systemd-boot.bst
+- gnomeos-deps/bootc.bst
+
+(?):
+- arch in ["x86_64"]:
+    depends:
+      (>):
+      - gnomeos-deps/intel-ucode.bst
diff --git a/elements/oci/initramfs/initial-scripts.bst b/elements/oci/initramfs/initial-scripts.bst
new file mode 100644
index 0000000000000000000000000000000000000000..bd0522b5f2516263011b508152f2c3edf5d29ecb
--- /dev/null
+++ b/elements/oci/initramfs/initial-scripts.bst
@@ -0,0 +1,7 @@
+kind: collect_initial_scripts
+
+build-depends:
+- oci/initramfs/deps.bst
+
+config:
+  path: /etc/fdsdk/initial_scripts
diff --git a/elements/oci/integration/bootc-config.bst b/elements/oci/integration/bootc-config.bst
new file mode 100644
index 0000000000000000000000000000000000000000..bc869a482a4952dcd8a0c8ecec72f95cff11c266
--- /dev/null
+++ b/elements/oci/integration/bootc-config.bst
@@ -0,0 +1,17 @@
+kind: manual
+
+sources:
+- kind: local
+  path: files/oci
+
+depends:
+- freedesktop-sdk.bst:public-stacks/runtime-minimal.bst
+
+variables:
+  strip-binaries: ''
+
+config:
+  install-commands:
+  - install -Dm644 -t "%{install-root}%{indep-libdir}/ostree/" prepare-root.conf
+  - install -Dm644 -t "%{install-root}%{indep-libdir}/tmpfiles.d" 10-bootc.conf
+  - "%{install-extra}"
diff --git a/elements/oci/layers/gnomeos-stack.bst b/elements/oci/layers/gnomeos-stack.bst
index 6b91f4cd2d87643e6c9c105e74e0f103be528794..e6e67b6da7acf55e5125551cdb28579dc243e215 100644
--- a/elements/oci/layers/gnomeos-stack.bst
+++ b/elements/oci/layers/gnomeos-stack.bst
@@ -1,15 +1,44 @@
 kind: stack
 
 depends:
-- gnomeos-deps/deps.bst
-- oci/integration/extrafs.bst
 - oci/os-release.bst
+- gnomeos-deps/deps.bst
+
+# OS-related config
+- gnomeos/fwupd-efi-signed-maybe.bst
+- gnomeos/import-deployment-pub-key.bst
+- gnomeos/public-keys.bst
+- gnomeos/reload-sysext.bst
+- gnomeos/replace-signed-systemd-boot.bst
+- gnomeos/systemd-pcrlock-workaround.bst
+
+# Add the kernel
+- freedesktop-sdk.bst:components/linux-firmware.bst
+- gnomeos/initramfs/signed-modules.bst
+- oci/initramfs.bst
+
+# Currently only in -devel
+- gnomeos-deps/bootc.bst
+
+- oci/integration/bootc-config.bst
+- freedesktop-sdk.bst:vm/config/useradd-ostree.bst
 - freedesktop-sdk.bst:vm/config/sudo-nopasswd.bst
 
 public:
   bst:
     integration-commands:
-    - mkdir -p /media
-    - mkdir -p /home
+    # Required for bootc to create the image
+    - mkdir /boot
+    - mkdir /sysroot
+    - mkdir /sysroot/ostree
+    # This needs to be a relative symlink
+    # for some reason
+    - ln -s sysroot/ostree ostree
+
+    - rm --verbose --recursive --force /root
+    # It doesn't exist but it will get created
+    # by the 10-booc.conf tmpfiles
+    - ln -s /var/home /home
+    - ln -s /var/roothome /root
+
     - touch /etc/machine-id
-    - groupadd -r wheel
diff --git a/files/gnomeos/generate-initramfs/modules/30-systemd/module.sh b/files/gnomeos/generate-initramfs/modules/30-systemd/module.sh
index d89b1a4712e2db98ed57a38716e05a9875b3775a..0e016ab3494b5bc82051d1421d1fb5f1d50aa117 100644
--- a/files/gnomeos/generate-initramfs/modules/30-systemd/module.sh
+++ b/files/gnomeos/generate-initramfs/modules/30-systemd/module.sh
@@ -113,7 +113,6 @@ UNITS+=(
     initrd.target.wants/systemd-pcrphase-initrd.service
     systemd-poweroff.service
     systemd-repart.service
-    systemd-repart.service.d/live.conf
     initrd-root-fs.target.wants/systemd-repart.service
     sysinit.target.wants/systemd-repart.service
     systemd-reboot.service
@@ -141,7 +140,6 @@ UNITS+=(
     systemd-vconsole-setup.service
     systemd-volatile-root.service
     systemd-tpm2-setup-early.service
-    systemd-tpm2-setup-early.service.d/live.conf
     sysinit.target.wants/systemd-tpm2-setup-early.service
 )
 
diff --git a/files/gnomeos/generate-initramfs/modules/50-bootc/module.sh b/files/gnomeos/generate-initramfs/modules/50-bootc/module.sh
new file mode 100644
index 0000000000000000000000000000000000000000..1cac1cfdf519fc3b431867087b20e3829496b922
--- /dev/null
+++ b/files/gnomeos/generate-initramfs/modules/50-bootc/module.sh
@@ -0,0 +1,12 @@
+install() {
+    if [ "${INITRD_MODE-sysupdate}" != oci ]; then
+        exit 0
+    fi
+
+    install_files \
+        /usr/lib/bootc/initramfs-setup \
+        /usr/lib/systemd/system/bootc-root-setup.service
+
+    mkdir -p "${root}/usr/lib/systemd/system/initrd-root-fs.target.wants"
+    ln -s ../bootc-root-setup.service "${root}/usr/lib/systemd/system/initrd-root-fs.target.wants/bootc-root-setup.service"
+}
diff --git a/files/gnomeos/generate-initramfs/modules/50-cdrom/module.sh b/files/gnomeos/generate-initramfs/modules/50-cdrom/module.sh
index 826a6114b3b99159ca462150f2c75b3e7fd58ab8..c3af78390bf5959cd0d0859e39c04f707a4f375c 100644
--- a/files/gnomeos/generate-initramfs/modules/50-cdrom/module.sh
+++ b/files/gnomeos/generate-initramfs/modules/50-cdrom/module.sh
@@ -1,4 +1,8 @@
 install() {
+    if [ "${INITRD_MODE-sysupdate}" != sysupdate ]; then
+        exit 0
+    fi
+
     install_file_at_path "${moddir}/sr-loop@.service" "/usr/lib/systemd/system/sr-loop@.service"
     install_file_at_path "${moddir}/sr-loop-partscan@.service" "/usr/lib/systemd/system/sr-loop-partscan@.service"
     install_file_at_path "${moddir}/80-sr-loop.rules" "/usr/lib/udev/rules.d/80-sr-loop.rules"
diff --git a/files/gnomeos/generate-initramfs/modules/50-live/module.sh b/files/gnomeos/generate-initramfs/modules/50-live/module.sh
index 87916bf67544bf00bccae8e3a0126bbfe0466ff9..fa8da29165756b384c6c609abc6bb7fe87245015 100644
--- a/files/gnomeos/generate-initramfs/modules/50-live/module.sh
+++ b/files/gnomeos/generate-initramfs/modules/50-live/module.sh
@@ -1,11 +1,17 @@
 install() {
+    if [ "${INITRD_MODE-sysupdate}" != sysupdate ]; then
+        exit 0
+    fi
+
     install_files \
         /usr/bin/systemd-detect-virt \
         /usr/lib/systemd/systemd-makefs \
         /usr/lib/systemd/system-generators/gnomeos-live \
         /usr/lib/udev/rules.d/90-ramfs-root.rules \
         /usr/lib/systemd/system-generators/zram-generator \
-        /usr/lib/systemd/system/systemd-zram-setup@.service
+        /usr/lib/systemd/system/systemd-zram-setup@.service \
+        /usr/lib/systemd/system/systemd-repart.service.d/live.conf \
+        /usr/lib/systemd/system/systemd-tpm2-setup-early.service.d/live.conf
 
     for path in $(modinfo -k "${kernelver}" -b /usr -n zram); do
         case "${path}" in
diff --git a/files/gnomeos/generate-initramfs/modules/50-repart/module.sh b/files/gnomeos/generate-initramfs/modules/50-repart/module.sh
index 61c5a634261bc02a13d2be61d322a8ecaad9d324..dfd977b72e38093532a5e60b514e69c009ed0ace 100644
--- a/files/gnomeos/generate-initramfs/modules/50-repart/module.sh
+++ b/files/gnomeos/generate-initramfs/modules/50-repart/module.sh
@@ -1,4 +1,8 @@
 install() {
+    if [ "${INITRD_MODE-sysupdate}" != sysupdate ]; then
+        exit 0
+    fi
+
     install_file_at_path "${moddir}/gen-recovery-key.sh" "/usr/bin/gen-recovery-key"
     install_file_at_path "${moddir}/gnomeos.conf" "/usr/lib/systemd/system/systemd-repart.service.d/gnomeos.conf"
 
diff --git a/files/oci/10-bootc.conf b/files/oci/10-bootc.conf
new file mode 100644
index 0000000000000000000000000000000000000000..e9182f258df61884238d604500c53de36dbd21ae
--- /dev/null
+++ b/files/oci/10-bootc.conf
@@ -0,0 +1,11 @@
+# Traditionally, /usr/local has been a link to /var/usrlocal and /opt to /var/opt.
+# A new model now is to allow OSTree commit content in those directories. But
+# this dropin implements the old model.
+d /var/opt 0755 root root -
+d /var/usrlocal 0755 root root -
+
+d /var/home 0755 root root -
+d /var/srv 0755 root root -
+d /var/roothome 0700 root root -
+d /var/mnt 0755 root root -
+d /run/media 0755 root root -
diff --git a/files/oci/prepare-root.conf b/files/oci/prepare-root.conf
new file mode 100644
index 0000000000000000000000000000000000000000..2a1ed6bcbbf92bf2d5831fa9c14d7b172f9396e0
--- /dev/null
+++ b/files/oci/prepare-root.conf
@@ -0,0 +1,5 @@
+[composefs]
+enabled = yes
+
+[sysroot]
+readonly = true
diff --git a/utils/generate-bootc-image.sh b/utils/generate-bootc-image.sh
new file mode 100755
index 0000000000000000000000000000000000000000..4aa1bb1451a3e84ea394af5fb91c64d44969b2ab
--- /dev/null
+++ b/utils/generate-bootc-image.sh
@@ -0,0 +1,54 @@
+#! /bin/bash
+
+
+arg="$1"
+tag="unknown"
+base_dir="$2"
+
+if [[ "$arg" == "gnomeos" ]]; then
+    tag="gnomeos"
+elif [[ "$arg" == "devel" ]]; then
+    tag="gnomeos-devel"
+fi
+
+if [[ -z "$base_dir" || $tag == "unknown" ]]; then
+  echo "Usage: generate-bootc-image.sh <gnomeos or devel> <base-dir>"
+  exit 1
+fi
+
+set -eux
+
+img="oci/$tag.bst"
+bst --strict build $img
+bst artifact checkout --tar - $img | run0 podman load
+
+# Needs an intermediate image for now
+# https://github.com/bootc-dev/bootc/issues/1703
+cat <<EOF >>/tmp/Containerfile
+FROM quay.io/gnome_infrastructure/gnome-build-meta:$tag-master
+RUN bootc container lint || true
+EOF
+run0 podman build --squash-all -t "test-image:latest" -f /tmp/Containerfile .
+rm /tmp/Containerfile
+
+if [ ! -e "${base_dir}/bootable.img" ] ; then
+    fallocate -l 25G "${base_dir}/bootable.img"
+fi
+
+run0 podman run \
+    --rm --privileged --pid=host \
+    -it \
+    -v "/var/lib/containers:/var/lib/containers" \
+    -v "/dev:/dev" \
+    -v "/tmp:/data" \
+    --security-opt label=type:unconfined_t \
+    "test-image:latest" \
+    bootc \
+    install to-disk --composefs-backend \
+    --via-loopback /data/bootable.img \
+    --filesystem "btrfs" \
+    --wipe \
+    --bootloader systemd \
+    --karg systemd.firstboot=no \
+    --karg splash \
+    --karg quiet