local customizations

             @@ -9,3 +9,7 @@     9      9mkosi.crt    10     10mkosi.version    11     11.mkosi-private           12mkosi.packages/           13keys/           14mkosi.profiles/custom/mkosi.extra/usr/local/bin/           15versions/

             @@ -0,0 +1,3 @@            1[submodule "systemd"]            2	path = systemd            3	url = https://github.com/systemd/systemd

             @@ -0,0 +1,1 @@            1systemd/**

             @@ -0,0 +1,77 @@            1BIN_DIR := mkosi.profiles/custom/mkosi.extra/usr/local/bin            2PACKAGES_DIR := mkosi.profiles/custom/mkosi.packages            3btdu := $(BIN_DIR)/btdu            4jj := $(BIN_DIR)/jj            5opensnitch := $(PACKAGES_DIR)/opensnitch.rpm            6opensnitch_ui := $(PACKAGES_DIR)/opensnitch_ui.rpm            7ALL := $(btdu) $(jj) $(opensnitch) $(opensnitch_ui)            8LATEST_VERSION = $(shell mkosi summary --json | jq -r '.Images[] | select(.Image == "main") | .ImageVersion')            9INSTALLED_VERSION = $(shell grep IMAGE_VERSION /etc/os-release | cut -d= -f2 | tr -d \")           10           11.PHONY: deps           12deps: $(PACKAGES_DIR) $(BIN_DIR) $(ALL)           13           14.PHONY: clean           15clean:           16	rm -fv $(ALL)           17           18$(BIN_DIR) $(PACKAGES_DIR):           19	mkdir -p $@           20           21$(jj): $(MAKE_TMPDIR)/jj.tar.gz           22	echo 9967a240e3294a0bce4444c55d40a35b70af44c69b558689aced95e4e497cef2 $(MAKE_TMPDIR)/jj.tar.gz | sha256sum --check           23	tar -xzf $(MAKE_TMPDIR)/jj.tar.gz -C $(MAKE_TMPDIR)           24	cp $(MAKE_TMPDIR)/jj $@           25           26$(MAKE_TMPDIR)/jj.tar.gz:           27	wget https://github.com/jj-vcs/jj/releases/download/v0.35.0/jj-v0.35.0-x86_64-unknown-linux-musl.tar.gz -O $(MAKE_TMPDIR)/jj.tar.gz           28           29$(btdu): $(MAKE_TMPDIR)/btdu           30	echo 35b9bb752e6aa902b8281e92a5411b2f1cfb9fa251089adf909dc95efc011c48 $(MAKE_TMPDIR)/btdu | sha256sum --check           31	cp $(MAKE_TMPDIR)/btdu $@           32           33$(MAKE_TMPDIR)/btdu:           34	wget https://github.com/CyberShadow/btdu/releases/download/v0.6.0/btdu-static-x86_64 -O $(MAKE_TMPDIR)/btdu           35           36$(opensnitch): $(MAKE_TMPDIR)/opensnitch.rpm           37	echo 2caf4e13ffd1b7af48306a2e9e979042f526823720b42bee4c00194f140d64dd $(MAKE_TMPDIR)/opensnitch.rpm | sha256sum --check           38	cp $(MAKE_TMPDIR)/opensnitch.rpm $@           39           40$(MAKE_TMPDIR)/opensnitch.rpm:           41		wget https://github.com/evilsocket/opensnitch/releases/download/v1.7.2/opensnitch-1.7.2-1.x86_64.rpm -O $(MAKE_TMPDIR)/opensnitch.rpm           42           43$(opensnitch_ui): $(MAKE_TMPDIR)/opensnitch_ui.rpm           44	echo b26029cbc83880ebc92170035d50237c13b17ffc0b3cf52b89fa1348edfdfb43 $(MAKE_TMPDIR)/opensnitch_ui.rpm | sha256sum --check           45	cp $(MAKE_TMPDIR)/opensnitch_ui.rpm $@           46           47$(MAKE_TMPDIR)/opensnitch_ui.rpm:           48	wget https://github.com/evilsocket/opensnitch/releases/download/v1.7.2/opensnitch-ui-1.7.2-1.noarch.rpm -O $(MAKE_TMPDIR)/opensnitch_ui.rpm           49           50mkosi.crt:           51	ln -s ~/Vaults/particleos_keys/sbctl/var/keys/db/db.pem mkosi.crt           52           53mkosi.key:           54	ln -s ~/Vaults/particleos_keys/sbctl/var/keys/db/db.key mkosi.key           55           56.PHONY: build           57build:           58	mkosi build --auto-bump           59           60.PHONY: systemd           61systemd:           62	sh -c 'cd systemd && mkosi -t none -f --distribution=fedora --release=43'           63           64.PHONY: sysupdate           65sysupdate:           66	mkosi sysupdate -- update           67	mkdir -p versions           68	cat mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.manifest | gzip > versions/$(LATEST_VERSION).manifest.gz           69	cat mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.changelog | gzip > versions/$(LATEST_VERSION).changelog.gz           70           71.PHONY: diff_changelog           72diff_changelog:           73	diff --color=always -u <(gzip --decompress --to-stdout versions/$(INSTALLED_VERSION).changelog.gz) mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.changelog           74           75.PHONY: diff_manifest           76diff_manifest:           77	diff --color=always -u <(gzip --decompress --to-stdout versions/$(INSTALLED_VERSION).manifest.gz) mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.manifest

             @@ -0,0 +1,156 @@            1[Distribution]            2Distribution=fedora            3Release=43            4            5[Build]            6ToolsTree=default            7ToolsTreeDistribution=fedora            8ToolsTreeProfiles=misc,runtime,gui            9ExtraSearchPaths=./systemd/build/mkosi.builddir/fedora~43~x86-64/           10           11[Config]           12Profiles=desktop,kde,custom           13           14[Output]           15ManifestFormat=changelog           16           17[Content]           18VolatilePackageDirectories=./systemd/build/mkosi.builddir/fedora~43~x86-64/           19Packages=           20        # keyrings for building other distro images           21        archlinux-keyring           22        debian-keyring           23        ansible           24        awk           25        bash           26        bash-completion           27        binutils           28        bind-utils           29        bat           30        clatd           31        clang-devel           32        cowsay           33        cmatrix           34        curl           35        dictd           36        diffoscope           37        du-dust           38        duf           39        d2           40        emacs           41        entr           42        exfatprogs           43        exiftool           44        fastfetch           45        fcitx5-mozc           46        fcitx5-configtool           47        fcitx5-gtk           48        fcitx5-qt           49        firejail           50        fontawesome-fonts-all           51        kcm-fcitx5           52        fd-find           53        file           54        fish           55        flatpak           56        fprintd-pam           57        fortune           58        # needed for appimage           59        fuse-libs           60        fzf           61        gcc           62        git           63        git-absorb           64        git-delta           65        git-lfs           66        glances           67        # needed for geoclue?           68        glib-networking           69        guestfs-tools           70        golang           71        graphviz           72        htop           73        iio-sensor-proxy           74        ImageMagick           75        iperf3           76        java-latest-openjdk           77        katago-opencl           78        intel-opencl           79        OpenCL-ICD-Loader           80        @kde-desktop           81        kde-connect           82        kde-partitionmanager           83        kitty           84        kitty-shell-integration           85        kitty-terminfo           86        krfb           87        libfprint-tod           88        libfprint-2-tod1-broadcom           89        libfprint-tod-selinux           90        litecli           91        lm_sensors           92        lolcat           93        lshw           94        lsof           95        man           96        # include mkosi just for shell completion and man pages           97        mkosi           98        mokutil           99        mpv          100        ncdu          101        neovim          102        ninja          103        okular          104        osc          105        # needed for bell fish function          106        oxygen-sounds          107        pre-commit          108        python3-neovim          109        nmap          110        nmap-ncat          111        # for coc.nvim          112        npm          113        # needed for clatd on F43 apparently          114        perl-IPC-Cmd          115        perl-JSON          116        pipewire-utils          117        plasma-disks          118        plasma-vault          119        pnpm          120        powertop          121        progress          122        proxychains-ng          123        pv          124        python3-netaddr          125        ripgrep          126        rubygem-asciidoctor          127        rustup          128        rsync          129        sbctl          130        setroubleshoot          131        sbsigntools          132        sqlite          133        stgit          134        tcpdump          135        # not yet available for fedora 43          136        terraform-ls          137        tmux          138        toolbox          139        tor          140        translate-shell          141        trash-cli          142        ttyplot          143        units          144        unrar-free          145        @virtualization          146        wget          147        whois          148        wl-clipboard          149        wireshark          150        yubikey-manager          151        kernel          152        # repository directory comes from mkosi.packages          153        repository/opensnitch_ui.rpm          154        repository/opensnitch.rpm          155        python3-grpcio+protobuf          156        python3-slugify

             @@ -0,0 +1,1 @@            1presets are only applied at firstboot, right? so how are packages installed *after* firstboot supposed to be enabled?

             @@ -0,0 +1,1 @@            153405835a2aa6e360863660f1e0e4d9a9688085f

             @@ -9,6 +9,7 @@     9      9        bluedevil    10     10        breeze-gtk    11     11        gwenview           12        qt6-qtimageformats    12     13        kde-gtk-config    13     14        kdeplasma-addons    14     15        kgamma

             @@ -0,0 +1,4 @@            1#!/usr/bin/sh            2            3chmod 755 /usr/bin/dumpcap            4setcap -r /usr/bin/dumpcap

             @@ -0,0 +1,10 @@            1[copr:copr.fedorainfracloud.org:chenxiaolong:sbctl]            2name=Copr repo for sbctl owned by chenxiaolong            3baseurl=https://download.copr.fedorainfracloud.org/results/chenxiaolong/sbctl/fedora-$releasever-$basearch/            4type=rpm-md            5skip_if_unavailable=True            6gpgcheck=1            7gpgkey=https://download.copr.fedorainfracloud.org/results/chenxiaolong/sbctl/pubkey.gpg            8repo_gpgcheck=0            9enabled=1           10enabled_metadata=1

             @@ -0,0 +1,10 @@            1[copr:copr.fedorainfracloud.org:grahamwhiteuk:libfprint-tod]            2name=Copr repo for libfprint-tod owned by grahamwhiteuk            3baseurl=https://download.copr.fedorainfracloud.org/results/grahamwhiteuk/libfprint-tod/fedora-$releasever-$basearch/            4type=rpm-md            5skip_if_unavailable=True            6gpgcheck=1            7gpgkey=https://download.copr.fedorainfracloud.org/results/grahamwhiteuk/libfprint-tod/pubkey.gpg            8repo_gpgcheck=0            9enabled=1           10enabled_metadata=1

             @@ -0,0 +1,13 @@            1[hashicorp]            2name=Hashicorp Stable - $basearch            3baseurl=https://rpm.releases.hashicorp.com/fedora/$releasever/$basearch/stable            4enabled=1            5gpgcheck=1            6gpgkey=https://rpm.releases.hashicorp.com/gpg            7            8[hashicorp-test]            9name=Hashicorp Test - $basearch           10baseurl=https://rpm.releases.hashicorp.com/fedora/$releasever/$basearch/test           11enabled=0           12gpgcheck=1           13gpgkey=https://rpm.releases.hashicorp.com/gpg

             @@ -80,8 +80,8 @@    80     80    81     81#firewalld    82     82# this stuff from the `setup` package in Fedora is just kinda funny...           83C+ /etc/firewalld    83     84L? /etc/protocols    84       L? /etc/firewalld    85     85L? /etc/logrotate.d/firewalld    86     86L? /etc/modprobe.d/firewalld-sysctls.conf    87     87L? /etc/sysconfig/firewalld             @@ -101,3 +101,13 @@   101    101   102    102# abrtd   103    103L? /etc/libreport          104          105# guestfs-tools (virt-builder)          106C+ /etc/virt-builder          107          108# libvirt needs all          109C+ /etc/libvirt          110          111# miscellaneous legacy file          112L? /etc/shells          113L? /etc/hosts

             @@ -0,0 +1,2 @@            1enable opensnitch.service            2enable fprintd.service

             @@ -0,0 +1,6 @@            1<?xml version="1.0" encoding="utf-8"?>            2<service>            3  <short>Hugo</short>            4  <description>Used for running Hugo's development server</description>            5  <port protocol="tcp" port="1313"/>            6</service>