local customizations

             @@ -4,24 +4,24 @@     4      4meta-distribution from the systemd project. It's my favorite thing in software     5      5since I discovered IPv6. Concretely, it's a configuration for systemd's     6      6[`mkosi` tool](https://mkosi.systemd.io/) that you use to build your own     7       ParticleOS images. As described in the ParticleOS readme:            7ParticleOS images. As described in the readme:     8      8     9      9> ParticleOS is a fully customizable immutable distribution implementing the    10     10concepts described in [Fitting Everything    11     11Together](https://0pointer.net/blog/fitting-everything-together.html).    12     12    13       It basically gives you a system that, among other things, has the following    14       characteristics:           13Among other things, it has the following characteristics:    15     14    16     15- OS versions are delivered as immutable `/usr` partitions    17     16  - A/B partitions for worry-free upgrades and rollbacks    18     17  - Block-level integrity provided by    19     18    [dm-verity](https://wiki.archlinux.org/title/Dm-verity)    20         - Authenticity provided by a signature on the dm-verity data, provided by           19  - Authenticity provided by a signature on the dm-verity data, done with    21     20    your own keys    22     21- Is easily hacked on, just like traditional mutable OSes    23         - Essentially *is* a traditional OS (one of Arch, Debian, or Fedora)    24         - Hacking on `/usr` is done at image-build-time, rather than during OS           22  - Essentially *is* a traditional OS (one of Arch, Debian, or Fedora), built           23    fully from regular distro packages           24  - Hacking on `/usr` is done at image build-time, rather than during OS    25     25    runtime    26     26- Is signed with your own SecureBoot keys    27     27- LUKS-encrypted root partition with TPM-stored key for automatic unlocking             @@ -36,11 +36,18 @@    36     36- [makefile](makefile)—contains most important commands. `build` and    37     37  `sysupdate` targets are the main ones. is also responsible for downloading    38     38  miscellaneous unpackaged binaries.    39       - [mkosi.local.conf](mkosi.local.conf)—the linchpin that holds my custom           39- [mkosi.local.conf](mkosi.local.conf)—the linchpin that holds the custom    40     40  configuration together.    41       - [mkosi.profiles/custom](mkosi.profiles/custom)—the custom profile where    42         most of my additions live.    43         - [mkosi.conf](mkosi.profiles/custom/mkosi.conf)—primarily contains the           41- [mkosi.profiles/custom](mkosi.profiles/custom)—the custom `mkosi` profile           42  where most of my customizations live.           43  - [mkosi.conf](mkosi.profiles/custom/mkosi.conf)—contains the    44     44    packages I want installed.    45     45  - [mkosi.extra](mkosi.profiles/custom/mkosi.extra)—additional files that    46     46    get included in the built images.           47           48## Other changes           49           50In addition to the above customizations, there are a number of other small           51tweaks I've made, mostly to get Fedora+KDE Plasma working together. Some of them           52should probably be upstreamed to the ParticleOS project. The overall patchset           53can be seen [here on Gitpatch](https://gitpatch.com/jcgl/particleos/patch/5).