local customizations

             @@ -0,0 +1,3 @@            1[submodule "systemd"]            2	path = systemd            3	url = https://github.com/systemd/systemd

             @@ -4,6 +4,9 @@     4      4concepts described in     5      5[Fitting Everything Together](https://0pointer.net/blog/fitting-everything-together.html).     6      6            7Note that ParticleOS is still in development, and we don't provide any backwards            8compatibility guarantees at all.            9     7     10The crucial difference that makes ParticleOS unique compared to other immutable     8     11distributions is that users build the ParticleOS image themselves and sign it     9     12with their own keys instead of installing vendor signed images. This allows             @@ -12,7 +15,7 @@    12     15image.    13     16    14     17The ParticleOS image is built using [mkosi](https://github.com/systemd/mkosi).    15       You will need to install the current main branch of mkosi to build current            18You will need to install the current main branch of mkosi to build current    16     19ParticleOS images.    17     20    18     21First, configure the variant you'd like to build in `mkosi.local.conf`. For a

             @@ -5,6 +5,7 @@     5      5     6      6[Build]     7      7ToolsTree=default            8ToolsTreeProfiles=misc,runtime,gui     8      9History=yes     9     10CacheDirectory=mkosi.cache    10     11Incremental=yes             @@ -42,7 +43,11 @@    42     43        diffutils    43     44        dmidecode    44     45        dosfstools           46        e2fsprogs           47        efibootmgr    45     48        erofs-utils           49        exfatprogs           50        file    46     51        findutils    47     52        fish    48     53        fwupd             @@ -52,6 +57,7 @@    52     57        gzip    53     58        jq    54     59        kbd           60        kexec-tools    55     61        kmod    56     62        less    57     63        man             @@ -61,6 +67,7 @@    61     67        nvme-cli    62     68        opensc    63     69        openssl           70        patch    64     71        p11-kit    65     72        pciutils    66     73        pkcs11-provider             @@ -80,6 +87,7 @@    80     87        wireguard-tools    81     88        xxd    82     89        yubikey-manager           90        zip    83     91        zstd    84     92    85     93VolatilePackages=

             @@ -5,18 +5,14 @@     5      5[Build]     6      6ToolsTree=default     7      7ToolsTreeDistribution=fedora     8       ToolsTreeRelease=42     9       ExtraSearchPaths=../systemd/build/mkosi.builddir/fedora~42~x86-64/            8ToolsTreeProfiles=misc,runtime,gui            9ExtraSearchPaths=./systemd/build/mkosi.builddir/fedora~42~x86-64/    10     10    11     11[Config]    12     12Profiles=desktop,kde    13     13    14       [Output]    15       Format=disk    16           17     14[Content]    18       VolatilePackageDirectories=../systemd/build/mkosi.builddir/fedora~42~x86-64/    19       Hostname=foobar           15VolatilePackageDirectories=./systemd/build/mkosi.builddir/fedora~42~x86-64/    20     16Packages=    21     17        ansible    22     18        awk             @@ -99,7 +95,6 @@    99     95        ttyplot   100     96        units   101     97        unrar-free   102               libvirt-daemon   103     98        @virtualization   104     99        wget   105    100        whois

             @@ -0,0 +1,1 @@            18a6128b68bf5573bda7499318629ecb2be666848

             @@ -18,6 +18,7 @@    18     18        libfido2    19     19        linux    20     20        man-db           21        man-pages    21     22        openssh    22     23        pacman    23     24        pcsclite             @@ -27,6 +28,7 @@    27     28        psmisc    28     29        python3    29     30        qrencode           31        sbsigntools    30     32        shadow    31     33        systemd-ukify    32     34        tgt             @@ -33,6 +35,8 @@    33     35        tpm2-tools    34     36        tpm2-tss    35     37        vim-minimal           38        wget           39        xz    36     40        zram-generator    37     41    38     42VolatilePackages=

             @@ -9,6 +9,7 @@     9      9    10     10[Content]    11     11Packages=           12        apparmor    12     13        apt    13     14        bpftool    14     15        ca-certificates             @@ -28,7 +29,9 @@    28     29        libqrencode4    29     30        linux-image-generic    30     31        linux-perf           32        linux-sysctl-defaults    31     33        login           34        manpages    32     35        openssh-client    33     36        openssh-server    34     37        passwd             @@ -37,7 +40,10 @@    37     40        polkitd    38     41        procps    39     42        python3    40               systemd-boot           43        sbsigntool           44        systemd-boot           45        systemd-boot-efi           46        systemd-boot-efi-signed    41     47        systemd-container    42     48        systemd-coredump    43     49        systemd-cryptsetup             @@ -49,6 +55,9 @@    49     55        systemd-ukify    50     56        systemd-zram-generator    51     57        tpm2-tools           58        util-linux-extra           59        wget           60        xz-utils    52     61    53     62VolatilePackages=    54     63        libnss-myhostname             @@ -56,12 +65,18 @@    56     65        libnss-systemd    57     66        libpam-systemd    58     67        systemd-boot    59               systemd-container    60               systemd-coredump    61               systemd-cryptsetup    62               systemd-homed    63               systemd-resolved    64               systemd-repart    65               systemd-sysv    66               systemd-timesyncd    67               systemd-ukify           68        systemd-boot-efi           69        systemd-boot-efi-signed           70        systemd-container           71        systemd-coredump           72        systemd-cryptsetup           73        systemd-homed           74        systemd-resolved           75        systemd-repart           76        systemd-sysv           77        systemd-timesyncd           78        systemd-ukify           79           80InitrdVolatilePackages=           81        systemd-container           82        systemd-resolved

             @@ -10,6 +10,7 @@    10     10Packages=    11     11        bash-color-prompt    12     12        bpftool           13        cracklib-dicts    13     14        cryptsetup    14     15        distribution-gpg-keys    15     16        dnf5             @@ -24,6 +25,7 @@    24     25        libcap-ng-utils    25     26        libfido2    26     27        man-db           28        man-pages    27     29        openssh    28     30        openssh-clients    29     31        openssh-server             @@ -36,6 +38,7 @@    36     38        procps-ng    37     39        python3    38     40        rpm           41        sbsigntools    39     42        systemd-boot    40     43        systemd-container    41     44        systemd-networkd             @@ -47,6 +50,8 @@    47     50        tpm2-tss    48     51        veritysetup    49     52        vim-minimal           53        wget2           54        xz    50     55        zram-generator-defaults    51     56    52     57VolatilePackages=

             @@ -7,7 +7,8 @@     7      7Format=esp     8      8# UEFI insists on the .img suffix for disk images to boot from, hence let's combine our usual suffix with UEFI's     9      9OutputExtension=raw.img           10Output=netesp_%a    10     11ImageVersion=    11     12    12     13[Content]    13       Bootable=yes           14Bootable=no

             @@ -2,9 +2,13 @@     2      2     3      3[Content]     4      4Packages=            5        bolt     5      6        desktop-file-utils            7        pax-utils            8        pgpdump     6      9        pipewire     7     10        pipewire-alsa           11        wireless-regdb     8     12        xdg-desktop-portal     9     13    10     14# NetworkManager is used in the desktop profiles

             @@ -1,9 +0,0 @@     1       # SPDX-License-Identifier: LGPL-2.1-or-later     2            3       [systemd]     4       name=systemd packages built from upstream main (Fedora_Rawhide)     5       type=rpm-md     6       baseurl=https://download.opensuse.org/repositories/system:/systemd/Fedora_Rawhide/     7       gpgcheck=1     8       gpgkey=file:///usr/share/pki/rpm-gpg/systemd.gpg     9       enabled=1

             @@ -0,0 +1,9 @@            1# SPDX-License-Identifier: LGPL-2.1-or-later            2            3[systemd]            4name=systemd packages built from upstream main (Fedora_42)            5type=rpm-md            6baseurl=https://download.opensuse.org/repositories/system:/systemd/Fedora_42/            7gpgcheck=1            8gpgkey=file:///usr/share/pki/rpm-gpg/systemd.gpg            9enabled=1

             @@ -0,0 +1,9 @@            1# SPDX-License-Identifier: LGPL-2.1-or-later            2            3[systemd]            4name=systemd packages built from upstream main (Fedora_Rawhide)            5type=rpm-md            6baseurl=https://download.opensuse.org/repositories/system:/systemd/Fedora_Rawhide/            7gpgcheck=1            8gpgkey=file:///usr/share/pki/rpm-gpg/systemd.gpg            9enabled=1

             @@ -8,3 +8,4 @@     8      8[Content]     9      9Packages=    10     10        systemd-boot-efi           11        systemd-boot-efi-signed

             @@ -6,4 +6,4 @@     6      6     7      7[Build]     8      8ToolsTreeSandboxTrees=systemd.gpg:/usr/share/pki/rpm-gpg/systemd.gpg     9                             fedora.repo:/etc/yum.repos.d/systemd.repo            9                      fedora43.repo:/etc/yum.repos.d/systemd.repo

             @@ -2,8 +2,7 @@     2      2     3      3[Match]     4      4Distribution=fedora     5       Release=rawhide     6      5     7      6[Build]     8      7SandboxTrees=systemd.gpg:/usr/share/pki/rpm-gpg/systemd.gpg     9                    fedora.repo:/etc/yum.repos.d/systemd.repo            8             fedora%r.repo:/etc/yum.repos.d/systemd.repo

             @@ -15,6 +15,9 @@    15     15L? /etc/bashrc    16     16L? /etc/bash.bashrc    17     17L? /etc/bash.bash_logout           18# TODO: drop once https://github.com/scop/bash-completion/pull/1399 is merged,           19# needed for shell completion of sd-run/run0           20L? /etc/bash_completion.d    18     21# Canonical location to look for certificates    19     22L? /etc/ca-certificates    20     23L? /etc/crypto-policies             @@ -51,8 +54,15 @@    51     54L /etc/fwupd    52     55# Required by gnome    53     56L? /etc/dconf    54       # Required by a bunch of binary symlinks in fedora           57L? /etc/skel           58# CUPS is pulled in by GNOME, and fails if the configs are not there           59L? /etc/cups           60# On some distributions various binaries in /usr/bin are managed via           61# /etc/alternatives.    55     62L? /etc/alternatives           63# PackageKit does not run without /etc/PackageKit/ and GNOME stalls           64# logout/reboot if it doesn't run.           65L? /etc/PackageKit    56     66# Required by man-db-cache-update.service    57     67L? /etc/sysconfig/man-db    58     68# sddm breaks otherwise, at least with homed?

             @@ -10,6 +10,7 @@    10     10        linux-firmware    11     11        intel-media-driver    12     12        mesa           13        modemmanager    13     14        networkmanager    14     15        noto-fonts    15     16        pipewire-pulse             @@ -18,3 +19,4 @@    18     19        vulkan-intel    19     20        vulkan-nouveau    20     21        vulkan-radeon           22        wpa_supplicant

             @@ -4,7 +4,6 @@     4      4Distribution=debian     5      5     6      6[Content]     7       Splash=/usr/share/pixmaps/debian-logo.png     8      7Packages=     9      8        debconf    10      9        desktop-base             @@ -15,12 +14,22 @@    15     14        fonts-adobe-sourcesans3    16     15        fonts-noto-color-emoji    17     16        fonts-noto-mono           17        gstreamer1.0-libav           18        gstreamer1.0-plugins-ugly    18     19        kbd           20        libsecret-tools           21        libyubikey-udev    19     22        mesa-vulkan-drivers           23        modemmanager    20     24        network-manager    21     25        pipewire-pulse    22     26        plymouth-themes    23               task-desktop           27        steam-devices    24     28        tuned-ppd    25     29        va-driver-all    26     30        vdpau-driver-all           31        wpasupplicant           32           33InitrdVolatilePackages=           34        systemd-container           35        systemd-resolved

             @@ -16,10 +16,13 @@    16     16        linux-firmware    17     17        mesa-dri-drivers    18     18        mesa-vulkan-drivers           19        ModemManager    19     20        nvidia-gpu-firmware    20     21        NetworkManager    21     22        NetworkManager-wifi    22     23        pipewire-pulseaudio           24        steam-devices    23     25        tuned-ppd    24     26        google-noto-fonts-all    25     27        google-noto-color-emoji-fonts           28        wpa_supplicant

             @@ -5,7 +5,11 @@     5      5     6      6[Content]     7      7Packages=     8               gdm3            8        gnome-browser-connector            9        gnome-core           10        # TODO: enable when it integrates with homed           11        # gnome-initial-setup           12        gnome-keyring-pkcs11     9     13        gnome-session-xsession    10     14        gnome-software-plugin-flatpak    11     15        gnome-software-plugin-fwupd

             @@ -0,0 +1,4 @@            1# apt gets pulled in, but with /usr read-only doesn't make sense to run updates            2disable apt-daily.timer            3disable apt-daily-upgrade.timer            4disable apt-listchanges.timer

             @@ -0,0 +1,2 @@            1# TODO: drop after https://salsa.debian.org/printing-team/cups/-/merge_requests/11 is merged            2g lpadmin

             @@ -0,0 +1,2 @@            1# TODO: drop after https://gitlab.freedesktop.org/geoclue/geoclue/-/merge_requests/202 is merged            2u geoclue - - /var/lib/geoclue

             @@ -0,0 +1,3 @@            1# TODO: drop after https://salsa.debian.org/tts-team/speech-dispatcher/-/merge_requests/6 is merged            2u speech-dispatcher - "Speech Dispatcher" /run/speech-dispatcher /bin/false            3m speech-dispatcher audio

             @@ -0,0 +1,2 @@            1# TODO: drop after https://salsa.debian.org/debian/wpa/-/merge_requests/18 is merged            2g netdev

             @@ -8,3 +8,7 @@     8      8     9      9# On Debian/Ubuntu the nftable service fails if this config is not present    10     10L? /etc/nftables.conf           11           12# These can be dropped once https://bugs.debian.org/1108017 is fixed           13L? /etc/adduser.conf           14L? /etc/deluser.conf

             @@ -0,0 +1,8 @@            1[Flatpak Repo]            2Title=Flathub            3Url=https://dl.flathub.org/repo/            4Homepage=https://flathub.org/            5Comment=Central repository of Flatpak applications            6Description=Central repository of Flatpak applications            7Icon=https://dl.flathub.org/repo/logo.svg            8GPGKey=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

             @@ -0,0 +1,3 @@            1# Disabled by default in the package            2disable speech-dispatcherd.service            3

             @@ -1,3 +0,0 @@     1       # TODO: drop once https://bugs.debian.org/1025349 is fixed     2       [Install]     3       Alias=display-manager.service

             @@ -0,0 +1,3 @@            1# TODO: drop once https://bugs.debian.org/1025349 is fixed            2[Install]            3Alias=display-manager.service