My customized ParticleOS configuration

             @@ -1,6 +1,4 @@     1      1# SPDX-License-Identifier: LGPL-2.1-or-later     2       mkosi.local/     3       mkosi.local.conf     4      2mkosi.output/     5      3mkosi.cache/     6      4mkosi.tools/             @@ -9,3 +7,6 @@     9      7mkosi.crt    10      8mkosi.version    11      9.mkosi-private           10mkosi.packages/           11mkosi.profiles/custom/mkosi.extra/usr/local/bin/           12versions/

             @@ -0,0 +1,3 @@            1[submodule "systemd"]            2	path = systemd            3	url = https://github.com/systemd/systemd

             @@ -0,0 +1,1 @@            1/systemd/**

             @@ -0,0 +1,77 @@            1BIN_DIR := mkosi.profiles/custom/mkosi.extra/usr/local/bin            2PACKAGES_DIR := mkosi.profiles/custom/mkosi.packages            3btdu := $(BIN_DIR)/btdu            4jj := $(BIN_DIR)/jj            5opensnitch := $(PACKAGES_DIR)/opensnitch.rpm            6opensnitch_ui := $(PACKAGES_DIR)/opensnitch_ui.rpm            7ALL := $(btdu) $(jj) $(opensnitch) $(opensnitch_ui)            8LATEST_VERSION = $(shell mkosi summary --json | jq -r '.Images[] | select(.Image == "main") | .ImageVersion')            9INSTALLED_VERSION = $(shell grep IMAGE_VERSION /etc/os-release | cut -d= -f2 | tr -d \")           10           11.PHONY: deps           12deps: $(PACKAGES_DIR) $(BIN_DIR) $(ALL)           13           14.PHONY: clean           15clean:           16	rm -fv $(ALL)           17           18$(BIN_DIR) $(PACKAGES_DIR):           19	mkdir -p $@           20           21$(jj): $(MAKE_TMPDIR)/jj.tar.gz           22	echo 9967a240e3294a0bce4444c55d40a35b70af44c69b558689aced95e4e497cef2 $(MAKE_TMPDIR)/jj.tar.gz | sha256sum --check           23	tar -xzf $(MAKE_TMPDIR)/jj.tar.gz -C $(MAKE_TMPDIR) --one-top-level=jj_out --overwrite           24	cp $(MAKE_TMPDIR)/jj_out/jj $@           25           26$(MAKE_TMPDIR)/jj.tar.gz:           27	wget https://github.com/jj-vcs/jj/releases/download/v0.35.0/jj-v0.35.0-x86_64-unknown-linux-musl.tar.gz -O $(MAKE_TMPDIR)/jj.tar.gz           28           29$(btdu): $(MAKE_TMPDIR)/btdu           30	echo 35b9bb752e6aa902b8281e92a5411b2f1cfb9fa251089adf909dc95efc011c48 $(MAKE_TMPDIR)/btdu | sha256sum --check           31	cp $(MAKE_TMPDIR)/btdu $@           32	chmod +x $@           33           34$(MAKE_TMPDIR)/btdu:           35	wget https://github.com/CyberShadow/btdu/releases/download/v0.6.0/btdu-static-x86_64 -O $(MAKE_TMPDIR)/btdu           36           37$(opensnitch): $(MAKE_TMPDIR)/opensnitch.rpm           38	echo 2caf4e13ffd1b7af48306a2e9e979042f526823720b42bee4c00194f140d64dd $(MAKE_TMPDIR)/opensnitch.rpm | sha256sum --check           39	cp $(MAKE_TMPDIR)/opensnitch.rpm $@           40           41$(MAKE_TMPDIR)/opensnitch.rpm:           42		wget https://github.com/evilsocket/opensnitch/releases/download/v1.7.2/opensnitch-1.7.2-1.x86_64.rpm -O $(MAKE_TMPDIR)/opensnitch.rpm           43           44$(opensnitch_ui): $(MAKE_TMPDIR)/opensnitch_ui.rpm           45	echo b26029cbc83880ebc92170035d50237c13b17ffc0b3cf52b89fa1348edfdfb43 $(MAKE_TMPDIR)/opensnitch_ui.rpm | sha256sum --check           46	cp $(MAKE_TMPDIR)/opensnitch_ui.rpm $@           47           48$(MAKE_TMPDIR)/opensnitch_ui.rpm:           49	wget https://github.com/evilsocket/opensnitch/releases/download/v1.7.2/opensnitch-ui-1.7.2-1.noarch.rpm -O $(MAKE_TMPDIR)/opensnitch_ui.rpm           50           51mkosi.crt:           52	ln -s ~/Vaults/particleos_keys/sbctl/var/keys/db/db.pem mkosi.crt           53           54mkosi.key:           55	ln -s ~/Vaults/particleos_keys/sbctl/var/keys/db/db.key mkosi.key           56           57.PHONY: build           58build: deps           59	mkosi build --auto-bump --cache-only never           60           61.PHONY: systemd           62systemd:           63	sh -c 'cd systemd && mkosi -t none -f --distribution=fedora --release=43'           64           65.PHONY: sysupdate           66sysupdate:           67	mkosi sysupdate -- update           68	mkdir -p versions           69	cat mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.changelog | gzip > versions/$(LATEST_VERSION).changelog.gz           70           71.PHONY: diff_changelog           72diff_changelog:           73	sh -c 'diff --color=always -u <(gzip --decompress --to-stdout versions/$(INSTALLED_VERSION).changelog.gz) mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.changelog; test $$? -le 1'           74           75.PHONY: diff_manifest           76diff_manifest:           77	sh -c 'diff --color=always -u /etc/mkosi-manifest mkosi.output/ParticleOS_$(LATEST_VERSION)_x86-64.manifest; test $$? -le 1'

             @@ -0,0 +1,15 @@            1[Distribution]            2Distribution=fedora            3Release=43            4            5[Build]            6ExtraSearchPaths=./systemd/build/mkosi.builddir/fedora~43~x86-64/            7            8[Config]            9Profiles=desktop,kde,custom           10           11[Output]           12ManifestFormat=changelog           13           14[Content]           15VolatilePackageDirectories=./systemd/build/mkosi.builddir/fedora~43~x86-64/

             @@ -0,0 +1,1 @@            1presets are only applied at firstboot, right? so how are packages installed *after* firstboot supposed to be enabled?

             @@ -0,0 +1,1 @@            12e5f717545e2664ce2ed6b2dd84744b3789156b1

             @@ -0,0 +1,149 @@            1[Content]            2Hostname=            3Packages=            4        # keyrings for building other distro images            5        archlinux-keyring            6        debian-keyring            7        ansible            8        ansible-collection-ansible-posix            9        ansible-collection-community-postgresql           10        ansible-collection-community-general           11        ansible-collection-community-crypto           12        python3-ansible-lint           13        asciiquarium           14        awk           15        bash           16        bash-completion           17        bat           18        binutils           19        bind-utils           20        bridge-utils           21        clatd           22        clang-devel           23        cowsay           24        cmatrix           25        curl           26        dictd           27        diffoscope           28        du-dust           29        duf           30        d2           31        emacs           32        entr           33        exfatprogs           34        exiftool           35        fastfetch           36        fcitx5-mozc           37        fcitx5-configtool           38        fcitx5-gtk           39        fcitx5-qt           40        firejail           41        kcm-fcitx5           42        fd-find           43        file           44        fish           45        flatpak           46        fprintd-pam           47        fortune           48        # needed for appimage           49        fuse-libs           50        fzf           51        gcc           52        git           53        git-absorb           54        git-delta           55        git-lfs           56        glances           57        # needed for geoclue?           58        glib-networking           59        guestfs-tools           60        golang           61        graphviz           62        htop           63        iio-sensor-proxy           64        ImageMagick           65        iperf3           66        java-latest-openjdk           67        katago-opencl           68        intel-opencl           69        OpenCL-ICD-Loader           70        @kde-desktop           71        kde-connect           72        kde-partitionmanager           73        kitty           74        kitty-shell-integration           75        kitty-terminfo           76        krfb           77        libfprint-tod           78        libfprint-2-tod1-broadcom           79        libfprint-tod-selinux           80        litecli           81        lm_sensors           82        lolcat           83        lshw           84        lsof           85        man           86        # include mkosi just for shell completion and man pages           87        mkosi           88        mokutil           89        mpv           90        ncdu           91        neovim           92        ninja           93        okular           94        opentofu           95        osc           96        # needed for bell fish function           97        ocean-sound-theme           98        oxygen-sounds           99        pre-commit          100        python3-neovim          101        nmap          102        nmap-ncat          103        # for coc.nvim          104        npm          105        # needed for clatd on F43 apparently          106        perl-IPC-Cmd          107        perl-JSON          108        pipewire-utils          109        plasma-disks          110        plasma-vault          111        pnpm          112        powertop          113        progress          114        proxychains-ng          115        pv          116        python3-netaddr          117        restic          118        autorestic          119        ripgrep          120        rubygem-asciidoctor          121        rustup          122        rsync          123        sbctl          124        setroubleshoot          125        sbsigntools          126        sqlite          127        stgit          128        tcpdump          129        terraform-ls          130        tmux          131        toolbox          132        tor          133        translate-shell          134        trash-cli          135        ttyplot          136        units          137        unrar-free          138        @virtualization          139        wget          140        whois          141        wl-clipboard          142        wireshark          143        yubikey-manager          144        gnupg2-scdaemon          145        # repository directory comes from mkosi.packages          146        repository/opensnitch_ui.rpm          147        repository/opensnitch.rpm          148        python3-grpcio+protobuf          149        python3-slugify

             @@ -9,6 +9,7 @@     9      9        bluedevil    10     10        breeze-gtk    11     11        gwenview           12        qt6-qtimageformats    12     13        kde-gtk-config    13     14        kdeplasma-addons    14     15        kgamma

             @@ -84,8 +84,8 @@    84     84    85     85#firewalld    86     86# this stuff from the `setup` package in Fedora is just kinda funny...           87C+ /etc/firewalld    87     88L? /etc/protocols    88       L? /etc/firewalld    89     89L? /etc/logrotate.d/firewalld    90     90L? /etc/modprobe.d/firewalld-sysctls.conf    91     91L? /etc/sysconfig/firewalld             @@ -105,3 +105,13 @@   105    105   106    106# abrtd   107    107L? /etc/libreport          108          109# guestfs-tools (virt-builder)          110C+ /etc/virt-builder          111          112# libvirt needs all          113C+ /etc/libvirt          114          115# miscellaneous legacy file          116L? /etc/shells          117L? /etc/hosts

             @@ -0,0 +1,10 @@            1[copr:copr.fedorainfracloud.org:chenxiaolong:sbctl]            2name=Copr repo for sbctl owned by chenxiaolong            3baseurl=https://download.copr.fedorainfracloud.org/results/chenxiaolong/sbctl/fedora-$releasever-$basearch/            4type=rpm-md            5skip_if_unavailable=True            6gpgcheck=1            7gpgkey=https://download.copr.fedorainfracloud.org/results/chenxiaolong/sbctl/pubkey.gpg            8repo_gpgcheck=0            9enabled=1           10enabled_metadata=1

             @@ -0,0 +1,10 @@            1[copr:copr.fedorainfracloud.org:grahamwhiteuk:libfprint-tod]            2name=Copr repo for libfprint-tod owned by grahamwhiteuk            3baseurl=https://download.copr.fedorainfracloud.org/results/grahamwhiteuk/libfprint-tod/fedora-$releasever-$basearch/            4type=rpm-md            5skip_if_unavailable=True            6gpgcheck=1            7gpgkey=https://download.copr.fedorainfracloud.org/results/grahamwhiteuk/libfprint-tod/pubkey.gpg            8repo_gpgcheck=0            9enabled=1           10enabled_metadata=1

             @@ -0,0 +1,13 @@            1[hashicorp]            2name=Hashicorp Stable - $basearch            3baseurl=https://rpm.releases.hashicorp.com/fedora/$releasever/$basearch/stable            4enabled=1            5gpgcheck=1            6gpgkey=https://rpm.releases.hashicorp.com/gpg            7            8[hashicorp-test]            9name=Hashicorp Test - $basearch           10baseurl=https://rpm.releases.hashicorp.com/fedora/$releasever/$basearch/test           11enabled=0           12gpgcheck=1           13gpgkey=https://rpm.releases.hashicorp.com/gpg

             @@ -0,0 +1,6 @@            1<?xml version="1.0" encoding="utf-8"?>            2<service>            3  <short>Hugo</short>            4  <description>Used for running Hugo's development server</description>            5  <port protocol="tcp" port="1313"/>            6</service>

             @@ -0,0 +1,3 @@            1enable opensnitch.service            2enable fprintd.service            3enable units_cur.timer

             @@ -0,0 +1,8 @@            1[Unit]            2Description=Update GNU Units currencies            3After=network-online.target            4Requires=network-online.target            5            6[Service]            7StateDirectory=units            8ExecStart=/usr/bin/units_cur

             @@ -0,0 +1,9 @@            1[Unit]            2Description=Update GNU Units currencies            3            4[Timer]            5OnCalendar=weekly            6Persistent=yes            7            8[Install]            9WantedBy=timers.target

             @@ -0,0 +1,7 @@            1[Unit]            2Description=Autorestic Backups Service            3            4[Service]            5ExecStart=/usr/bin/autorestic --ci cron            6ExecStartPost=/usr/bin/autorestic --ci forget            7Type=oneshot

             @@ -0,0 +1,9 @@            1[Unit]            2Description=Autorestic Backups Timer            3            4[Timer]            5OnCalendar=daily            6Persistent=yes            7            8[Install]            9WantedBy=timers.target

             @@ -0,0 +1,2 @@            1[Service]            2StateDirectory=logrotate