local customizations

             @@ -9,3 +9,7 @@     9      9mkosi.crt    10     10mkosi.version    11     11.mkosi-private           12mkosi.packages/           13keys/           14mkosi.profiles/custom/mkosi.extra/usr/local/bin/           15versions/

             @@ -0,0 +1,3 @@            1[submodule "systemd"]            2	path = systemd            3	url = https://github.com/systemd/systemd

             @@ -0,0 +1,1 @@            1systemd/**

             @@ -0,0 +1,77 @@            1BIN_DIR := mkosi.profiles/custom/mkosi.extra/usr/local/bin            2PACKAGES_DIR := mkosi.profiles/custom/mkosi.packages            3btdu := $(BIN_DIR)/btdu            4jj := $(BIN_DIR)/jj            5opensnitch := $(PACKAGES_DIR)/opensnitch.rpm            6opensnitch_ui := $(PACKAGES_DIR)/opensnitch_ui.rpm            7ALL := $(btdu) $(jj) $(opensnitch) $(opensnitch_ui)            8LATEST_VERSION = $(shell mkosi summary --json | jq -r '.Images[] | select(.Image == "main") | .ImageVersion')            9INSTALLED_VERSION = $(shell grep IMAGE_VERSION /etc/os-release | cut -d= -f2 | tr -d \")           10           11.PHONY: deps           12deps: $(PACKAGES_DIR) $(BIN_DIR) $(ALL)           13           14.PHONY: clean           15clean:           16	rm -fv $(ALL)           17           18$(BIN_DIR) $(PACKAGES_DIR):           19	mkdir -p $@           20           21$(jj): $(MAKE_TMPDIR)/jj.tar.gz           22	echo 9967a240e3294a0bce4444c55d40a35b70af44c69b558689aced95e4e497cef2 $(MAKE_TMPDIR)/jj.tar.gz | sha256sum --check           23	tar -xzf $(MAKE_TMPDIR)/jj.tar.gz -C $(MAKE_TMPDIR)           24	cp $(MAKE_TMPDIR)/jj $@           25           26$(MAKE_TMPDIR)/jj.tar.gz:           27	wget https://github.com/jj-vcs/jj/releases/download/v0.35.0/jj-v0.35.0-x86_64-unknown-linux-musl.tar.gz -O $(MAKE_TMPDIR)/jj.tar.gz           28           29$(btdu): $(MAKE_TMPDIR)/btdu           30	echo 35b9bb752e6aa902b8281e92a5411b2f1cfb9fa251089adf909dc95efc011c48 $(MAKE_TMPDIR)/btdu | sha256sum --check           31	cp $(MAKE_TMPDIR)/btdu $@           32	chmod +x $@           33           34$(MAKE_TMPDIR)/btdu:           35	wget https://github.com/CyberShadow/btdu/releases/download/v0.6.0/btdu-static-x86_64 -O $(MAKE_TMPDIR)/btdu           36           37$(opensnitch): $(MAKE_TMPDIR)/opensnitch.rpm           38	echo 2caf4e13ffd1b7af48306a2e9e979042f526823720b42bee4c00194f140d64dd $(MAKE_TMPDIR)/opensnitch.rpm | sha256sum --check           39	cp $(MAKE_TMPDIR)/opensnitch.rpm $@           40           41$(MAKE_TMPDIR)/opensnitch.rpm:           42		wget https://github.com/evilsocket/opensnitch/releases/download/v1.7.2/opensnitch-1.7.2-1.x86_64.rpm -O $(MAKE_TMPDIR)/opensnitch.rpm           43           44$(opensnitch_ui): $(MAKE_TMPDIR)/opensnitch_ui.rpm           45	echo b26029cbc83880ebc92170035d50237c13b17ffc0b3cf52b89fa1348edfdfb43 $(MAKE_TMPDIR)/opensnitch_ui.rpm | sha256sum --check           46	cp $(MAKE_TMPDIR)/opensnitch_ui.rpm $@           47           48$(MAKE_TMPDIR)/opensnitch_ui.rpm:           49	wget https://github.com/evilsocket/opensnitch/releases/download/v1.7.2/opensnitch-ui-1.7.2-1.noarch.rpm -O $(MAKE_TMPDIR)/opensnitch_ui.rpm           50           51mkosi.crt:           52	ln -s ~/Vaults/particleos_keys/sbctl/var/keys/db/db.pem mkosi.crt           53           54mkosi.key:           55	ln -s ~/Vaults/particleos_keys/sbctl/var/keys/db/db.key mkosi.key           56           57.PHONY: build           58build:           59	mkosi build --auto-bump           60           61.PHONY: systemd           62systemd:           63	sh -c 'cd systemd && mkosi -t none -f --distribution=fedora --release=43'           64           65.PHONY: sysupdate           66sysupdate:           67	mkosi sysupdate -- update           68	mkdir -p versions           69	cat mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.changelog | gzip > versions/$(LATEST_VERSION).changelog.gz           70           71.PHONY: diff_changelog           72diff_changelog:           73	sh -c 'diff --color=always -u <(gzip --decompress --to-stdout versions/$(INSTALLED_VERSION).changelog.gz) mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.changelog; test $$? -le 1'           74           75.PHONY: diff_manifest           76diff_manifest:           77	sh -c 'diff --color=always -u /etc/os-manifest mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.manifest; test $$? -le 1'

             @@ -0,0 +1,161 @@            1[Distribution]            2Distribution=fedora            3Release=43            4            5[Build]            6ToolsTree=default            7ToolsTreeDistribution=fedora            8ToolsTreeProfiles=misc,runtime,gui            9ExtraSearchPaths=./systemd/build/mkosi.builddir/fedora~43~x86-64/           10           11[Config]           12Profiles=desktop,kde,custom           13           14[Output]           15ManifestFormat=changelog           16           17[Content]           18VolatilePackageDirectories=./systemd/build/mkosi.builddir/fedora~43~x86-64/           19Packages=           20        # keyrings for building other distro images           21        archlinux-keyring           22        debian-keyring           23        ansible           24        ansible-collection-ansible-posix           25        ansible-collection-community-postgresql           26        ansible-collection-community-general           27        ansible-collection-community-crypto           28        awk           29        bash           30        bash-completion           31        binutils           32        bind-utils           33        bat           34        clatd           35        clang-devel           36        cowsay           37        cmatrix           38        curl           39        dictd           40        diffoscope           41        du-dust           42        duf           43        d2           44        emacs           45        entr           46        exfatprogs           47        exiftool           48        fastfetch           49        fcitx5-mozc           50        fcitx5-configtool           51        fcitx5-gtk           52        fcitx5-qt           53        firejail           54        fontawesome-fonts-all           55        kcm-fcitx5           56        fd-find           57        file           58        fish           59        flatpak           60        fprintd-pam           61        fortune           62        # needed for appimage           63        fuse-libs           64        fzf           65        gcc           66        git           67        git-absorb           68        git-delta           69        git-lfs           70        glances           71        # needed for geoclue?           72        glib-networking           73        guestfs-tools           74        golang           75        graphviz           76        htop           77        iio-sensor-proxy           78        ImageMagick           79        iperf3           80        java-latest-openjdk           81        katago-opencl           82        intel-opencl           83        OpenCL-ICD-Loader           84        @kde-desktop           85        kde-connect           86        kde-partitionmanager           87        kitty           88        kitty-shell-integration           89        kitty-terminfo           90        krfb           91        libfprint-tod           92        libfprint-2-tod1-broadcom           93        libfprint-tod-selinux           94        litecli           95        lm_sensors           96        lolcat           97        lshw           98        lsof           99        man          100        # include mkosi just for shell completion and man pages          101        mkosi          102        mokutil          103        mpv          104        ncdu          105        neovim          106        ninja          107        okular          108        opentofu          109        osc          110        # needed for bell fish function          111        oxygen-sounds          112        pre-commit          113        python3-neovim          114        nmap          115        nmap-ncat          116        # for coc.nvim          117        npm          118        # needed for clatd on F43 apparently          119        perl-IPC-Cmd          120        perl-JSON          121        pipewire-utils          122        plasma-disks          123        plasma-vault          124        pnpm          125        powertop          126        progress          127        proxychains-ng          128        pv          129        python3-netaddr          130        ripgrep          131        rubygem-asciidoctor          132        rustup          133        rsync          134        sbctl          135        setroubleshoot          136        sbsigntools          137        sqlite          138        stgit          139        tcpdump          140        # not yet available for fedora 43          141        terraform-ls          142        tmux          143        toolbox          144        tor          145        translate-shell          146        trash-cli          147        ttyplot          148        units          149        unrar-free          150        @virtualization          151        wget          152        whois          153        wl-clipboard          154        wireshark          155        yubikey-manager          156        kernel          157        # repository directory comes from mkosi.packages          158        repository/opensnitch_ui.rpm          159        repository/opensnitch.rpm          160        python3-grpcio+protobuf          161        python3-slugify

             @@ -0,0 +1,1 @@            1presets are only applied at firstboot, right? so how are packages installed *after* firstboot supposed to be enabled?

             @@ -0,0 +1,1 @@            1c6c43d677abe66c404a2fb4aa66707bcabff4dff

             @@ -9,6 +9,7 @@     9      9        bluedevil    10     10        breeze-gtk    11     11        gwenview           12        qt6-qtimageformats    12     13        kde-gtk-config    13     14        kdeplasma-addons    14     15        kgamma

             @@ -0,0 +1,4 @@            1#!/usr/bin/sh            2            3chmod 755 /usr/bin/dumpcap            4setcap -r /usr/bin/dumpcap

             @@ -0,0 +1,10 @@            1[copr:copr.fedorainfracloud.org:chenxiaolong:sbctl]            2name=Copr repo for sbctl owned by chenxiaolong            3baseurl=https://download.copr.fedorainfracloud.org/results/chenxiaolong/sbctl/fedora-$releasever-$basearch/            4type=rpm-md            5skip_if_unavailable=True            6gpgcheck=1            7gpgkey=https://download.copr.fedorainfracloud.org/results/chenxiaolong/sbctl/pubkey.gpg            8repo_gpgcheck=0            9enabled=1           10enabled_metadata=1

             @@ -0,0 +1,10 @@            1[copr:copr.fedorainfracloud.org:grahamwhiteuk:libfprint-tod]            2name=Copr repo for libfprint-tod owned by grahamwhiteuk            3baseurl=https://download.copr.fedorainfracloud.org/results/grahamwhiteuk/libfprint-tod/fedora-$releasever-$basearch/            4type=rpm-md            5skip_if_unavailable=True            6gpgcheck=1            7gpgkey=https://download.copr.fedorainfracloud.org/results/grahamwhiteuk/libfprint-tod/pubkey.gpg            8repo_gpgcheck=0            9enabled=1           10enabled_metadata=1

             @@ -0,0 +1,13 @@            1[hashicorp]            2name=Hashicorp Stable - $basearch            3baseurl=https://rpm.releases.hashicorp.com/fedora/$releasever/$basearch/stable            4enabled=1            5gpgcheck=1            6gpgkey=https://rpm.releases.hashicorp.com/gpg            7            8[hashicorp-test]            9name=Hashicorp Test - $basearch           10baseurl=https://rpm.releases.hashicorp.com/fedora/$releasever/$basearch/test           11enabled=0           12gpgcheck=1           13gpgkey=https://rpm.releases.hashicorp.com/gpg

             @@ -80,8 +80,8 @@    80     80    81     81#firewalld    82     82# this stuff from the `setup` package in Fedora is just kinda funny...           83C+ /etc/firewalld    83     84L? /etc/protocols    84       L? /etc/firewalld    85     85L? /etc/logrotate.d/firewalld    86     86L? /etc/modprobe.d/firewalld-sysctls.conf    87     87L? /etc/sysconfig/firewalld             @@ -101,3 +101,13 @@   101    101   102    102# abrtd   103    103L? /etc/libreport          104          105# guestfs-tools (virt-builder)          106C+ /etc/virt-builder          107          108# libvirt needs all          109C+ /etc/libvirt          110          111# miscellaneous legacy file          112L? /etc/shells          113L? /etc/hosts

             @@ -0,0 +1,2 @@            1enable opensnitch.service            2enable fprintd.service

             @@ -0,0 +1,6 @@            1<?xml version="1.0" encoding="utf-8"?>            2<service>            3  <short>Hugo</short>            4  <description>Used for running Hugo's development server</description>            5  <port protocol="tcp" port="1313"/>            6</service>