Pretty sure you’re supposed to rebase to the signed image: rpm-ostree rebase ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-gnome:stable as documented here. That padlock indicates you’re on unsigned, once you’re on the signed image the padlock will calm down.
1 Like