local customizations

             @@ -1,23 +1,46 @@     1      1# ParticleOS     2      2     3       ParticleOS is a fully customizable immutable distribution implementing the     4       concepts described in     5       [Fitting Everything Together](https://0pointer.net/blog/fitting-everything-together.html).     6            7       This is my own version/soft fork of ParticleOS. Most important commands are     8       contained in the [`makefile`](makefile). Most imporant are `make build` and     9       `make sysupdate`.            3[ParticleOS](https://github.com/systemd/particleos) is an extremely cool            4meta-distribution from the systemd project. It's my favorite thing in software            5since I discovered IPv6. Concretely, it's a configuration for systemd's            6[`mkosi` tool](https://mkosi.systemd.io/) that you use to build your own            7ParticleOS images. As described in the ParticleOS readme:            8            9> ParticleOS is a fully customizable immutable distribution implementing the           10concepts described in [Fitting Everything           11Together](https://0pointer.net/blog/fitting-everything-together.html).           12           13It basically gives you a system that, among other things, has the following           14characteristics:           15           16- OS versions are delivered as immutable `/usr` partitions           17  - A/B partitions for worry-free upgrades and rollbacks           18  - Block-level integrity provided by           19    [dm-verity](https://wiki.archlinux.org/title/Dm-verity)           20  - Authenticity provided by a signature on the dm-verity data, provided by           21    your own keys           22- Is easily hacked on, just like traditional mutable OSes           23  - Essentially *is* a traditional OS (one of Arch, Debian, or Fedora)           24  - Hacking on `/usr` is done at image-build-time, rather than during OS           25    runtime           26- Is signed with your own SecureBoot keys           27- LUKS-encrypted root partition with TPM-stored key for automatic unlocking           28- LUKS-encrypted home directory managed by           29  [`systemd-homed`](https://systemd.io/HOME_DIRECTORY/)           30           31This here is my own customized version/soft fork of ParticleOS. It's the Fedora           32variant.    10     33    11     34## Notable files/directories    12     35    13       - [makefile](makefile) -- contains most imporant commands. `build` and           36- [makefile](makefile)—contains most important commands. `build` and    14     37  `sysupdate` targets are the main ones. is also responsible for downloading    15     38  miscellaneous unpackaged binaries.    16       - [mkosi.local.conf](mkosi.local.conf) -- the linchpin that holds my custom           39- [mkosi.local.conf](mkosi.local.conf)—the linchpin that holds my custom    17     40  configuration together.    18       - [mkosi.profiles/custom](mkosi.profiles/custom) -- the custom profile where           41- [mkosi.profiles/custom](mkosi.profiles/custom)—the custom profile where    19     42  most of my additions live.    20         - [mkosi.conf](mkosi.profiles/custom/mkosi.conf) -- primarily contains the           43  - [mkosi.conf](mkosi.profiles/custom/mkosi.conf)—primarily contains the    21     44    packages I want installed.    22         - [mkosi.extra](mkosi.profiles/custom/mkosi.extra) -- additional files that           45  - [mkosi.extra](mkosi.profiles/custom/mkosi.extra)—additional files that    23     46    get included in the built images.

             @@ -1,4 +0,0 @@     1       #!/usr/bin/sh     2            3       chmod 755 /usr/bin/dumpcap     4       setcap -r /usr/bin/dumpcap