upstream base

             @@ -4,6 +4,9 @@     4      4concepts described in     5      5[Fitting Everything Together](https://0pointer.net/blog/fitting-everything-together.html).     6      6            7Note that ParticleOS is still in development, and we don't provide any backwards            8compatibility guarantees at all.            9     7     10The crucial difference that makes ParticleOS unique compared to other immutable     8     11distributions is that users build the ParticleOS image themselves and sign it     9     12with their own keys instead of installing vendor signed images. This allows

             @@ -42,7 +42,11 @@    42     42        diffutils    43     43        dmidecode    44     44        dosfstools           45        e2fsprogs           46        efibootmgr    45     47        erofs-utils           48        exfatprogs           49        file    46     50        findutils    47     51        fish    48     52        fwupd             @@ -52,6 +56,7 @@    52     56        gzip    53     57        jq    54     58        kbd           59        kexec-tools    55     60        kmod    56     61        less    57     62        man             @@ -61,6 +66,7 @@    61     66        nvme-cli    62     67        opensc    63     68        openssl           69        patch    64     70        p11-kit    65     71        pciutils    66     72        pkcs11-provider             @@ -80,6 +86,7 @@    80     86        wireguard-tools    81     87        xxd    82     88        yubikey-manager           89        zip    83     90        zstd    84     91    85     92VolatilePackages=

             @@ -18,6 +18,7 @@    18     18        libfido2    19     19        linux    20     20        man-db           21        man-pages    21     22        openssh    22     23        pacman    23     24        pcsclite             @@ -27,6 +28,7 @@    27     28        psmisc    28     29        python3    29     30        qrencode           31        sbsigntools    30     32        shadow    31     33        systemd-ukify    32     34        tgt             @@ -33,6 +35,8 @@    33     35        tpm2-tools    34     36        tpm2-tss    35     37        vim-minimal           38        wget           39        xz    36     40        zram-generator    37     41    38     42VolatilePackages=

             @@ -9,6 +9,7 @@     9      9    10     10[Content]    11     11Packages=           12        apparmor    12     13        apt    13     14        bpftool    14     15        ca-certificates             @@ -28,7 +29,9 @@    28     29        libqrencode4    29     30        linux-image-generic    30     31        linux-perf           32        linux-sysctl-defaults    31     33        login           34        manpages    32     35        openssh-client    33     36        openssh-server    34     37        passwd             @@ -37,7 +40,10 @@    37     40        polkitd    38     41        procps    39     42        python3    40               systemd-boot           43        sbsigntool           44        systemd-boot           45        systemd-boot-efi           46        systemd-boot-efi-signed    41     47        systemd-container    42     48        systemd-coredump    43     49        systemd-cryptsetup             @@ -49,6 +55,9 @@    49     55        systemd-ukify    50     56        systemd-zram-generator    51     57        tpm2-tools           58        util-linux-extra           59        wget           60        xz-utils    52     61    53     62VolatilePackages=    54     63        libnss-myhostname             @@ -56,12 +65,18 @@    56     65        libnss-systemd    57     66        libpam-systemd    58     67        systemd-boot    59               systemd-container    60               systemd-coredump    61               systemd-cryptsetup    62               systemd-homed    63               systemd-resolved    64               systemd-repart    65               systemd-sysv    66               systemd-timesyncd    67               systemd-ukify           68        systemd-boot-efi           69        systemd-boot-efi-signed           70        systemd-container           71        systemd-coredump           72        systemd-cryptsetup           73        systemd-homed           74        systemd-resolved           75        systemd-repart           76        systemd-sysv           77        systemd-timesyncd           78        systemd-ukify           79           80InitrdVolatilePackages=           81        systemd-container           82        systemd-resolved

             @@ -23,6 +23,7 @@    23     23        libcap-ng-utils    24     24        libfido2    25     25        man-db           26        man-pages    26     27        openssh    27     28        openssh-clients    28     29        openssh-server             @@ -35,6 +36,7 @@    35     36        procps-ng    36     37        python3    37     38        rpm           39        sbsigntools    38     40        systemd-boot    39     41        systemd-container    40     42        systemd-networkd             @@ -46,6 +48,8 @@    46     48        tpm2-tss    47     49        veritysetup    48     50        vim-minimal           51        wget2           52        xz    49     53        zram-generator-defaults    50     54    51     55VolatilePackages=

             @@ -7,7 +7,8 @@     7      7Format=esp     8      8# UEFI insists on the .img suffix for disk images to boot from, hence let's combine our usual suffix with UEFI's     9      9OutputExtension=raw.img           10Output=netesp_%a    10     11ImageVersion=    11     12    12     13[Content]    13       Bootable=yes           14Bootable=no

             @@ -2,9 +2,13 @@     2      2     3      3[Content]     4      4Packages=            5        bolt     5      6        desktop-file-utils            7        pax-utils            8        pgpdump     6      9        pipewire     7     10        pipewire-alsa           11        wireless-regdb     8     12        xdg-desktop-portal     9     13    10     14# NetworkManager is used in the desktop profiles

             @@ -8,3 +8,4 @@     8      8[Content]     9      9Packages=    10     10        systemd-boot-efi           11        systemd-boot-efi-signed

             @@ -10,6 +10,7 @@    10     10        linux-firmware    11     11        intel-media-driver    12     12        mesa           13        modemmanager    13     14        networkmanager    14     15        noto-fonts    15     16        pipewire-pulse             @@ -18,3 +19,4 @@    18     19        vulkan-intel    19     20        vulkan-nouveau    20     21        vulkan-radeon           22        wpa_supplicant

             @@ -4,7 +4,6 @@     4      4Distribution=debian     5      5     6      6[Content]     7       Splash=/usr/share/pixmaps/debian-logo.png     8      7Packages=     9      8        debconf    10      9        desktop-base             @@ -15,12 +14,22 @@    15     14        fonts-adobe-sourcesans3    16     15        fonts-noto-color-emoji    17     16        fonts-noto-mono           17        gstreamer1.0-libav           18        gstreamer1.0-plugins-ugly    18     19        kbd           20        libsecret-tools           21        libyubikey-udev    19     22        mesa-vulkan-drivers           23        modemmanager    20     24        network-manager    21     25        pipewire-pulse    22     26        plymouth-themes    23               task-desktop           27        steam-devices    24     28        tuned-ppd    25     29        va-driver-all    26     30        vdpau-driver-all           31        wpasupplicant           32           33InitrdVolatilePackages=           34        systemd-container           35        systemd-resolved

             @@ -16,9 +16,12 @@    16     16        linux-firmware    17     17        mesa-dri-drivers    18     18        mesa-vulkan-drivers           19        ModemManager    19     20        nvidia-gpu-firmware    20     21        NetworkManager    21     22        pipewire-pulseaudio           23        steam-devices    22     24        tuned-ppd    23     25        google-noto-fonts-all    24     26        google-noto-color-emoji-fonts           27        wpa_supplicant

             @@ -5,7 +5,11 @@     5      5     6      6[Content]     7      7Packages=     8               gdm3            8        gnome-browser-connector            9        gnome-core           10        # TODO: enable when it integrates with homed           11        # gnome-initial-setup           12        gnome-keyring-pkcs11     9     13        gnome-session-xsession    10     14        gnome-software-plugin-flatpak    11     15        gnome-software-plugin-fwupd

             @@ -0,0 +1,4 @@            1# apt gets pulled in, but with /usr read-only doesn't make sense to run updates            2disable apt-daily.timer            3disable apt-daily-upgrade.timer            4disable apt-listchanges.timer

             @@ -0,0 +1,2 @@            1# TODO: drop after https://salsa.debian.org/printing-team/cups/-/merge_requests/11 is merged            2g lpadmin

             @@ -0,0 +1,2 @@            1# TODO: drop after https://gitlab.freedesktop.org/geoclue/geoclue/-/merge_requests/202 is merged            2u geoclue - - /var/lib/geoclue

             @@ -0,0 +1,3 @@            1# TODO: drop after https://salsa.debian.org/tts-team/speech-dispatcher/-/merge_requests/6 is merged            2u speech-dispatcher - "Speech Dispatcher" /run/speech-dispatcher /bin/false            3m speech-dispatcher audio

             @@ -0,0 +1,2 @@            1# TODO: drop after https://salsa.debian.org/debian/wpa/-/merge_requests/18 is merged            2g netdev

             @@ -8,3 +8,21 @@     8      8     9      9# On Debian/Ubuntu the nftable service fails if this config is not present    10     10L? /etc/nftables.conf           11           12# Very basic stuff like awk and which is managed through alternatives           13L? /etc/alternatives           14           15# CUPS is pulled in by GNOME, and fails if the configs are not there           16L? /etc/cups           17           18# Needed to create users by GNOME's GUI           19L? /etc/skel           20# These can be dropped once https://bugs.debian.org/1108017 is fixed           21L? /etc/adduser.conf           22L? /etc/deluser.conf           23           24# PackageKit does not run without /etc/PackageKit/ and GNOME stalls logout/reboot if it doesn't run           25L? /etc/PackageKit           26           27# TODO: drop once https://github.com/scop/bash-completion/pull/1399 is merged, needed for shell completion of sd-run/run0           28L? /etc/bash_completion.d

             @@ -0,0 +1,8 @@            1[Flatpak Repo]            2Title=Flathub            3Url=https://dl.flathub.org/repo/            4Homepage=https://flathub.org/            5Comment=Central repository of Flatpak applications            6Description=Central repository of Flatpak applications            7Icon=https://dl.flathub.org/repo/logo.svg            8GPGKey=mQINBFlD2sABEADsiUZUOYBg1UdDaWkEdJYkTSZD68214m8Q1fbrP5AptaUfCl8KYKFMNoAJRBXn9FbE6q6VBzghHXj/rSnA8WPnkbaEWR7xltOqzB1yHpCQ1l8xSfH5N02DMUBSRtD/rOYsBKbaJcOgW0K21sX+BecMY/AI2yADvCJEjhVKrjR9yfRX+NQEhDcbXUFRGt9ZT+TI5yT4xcwbvvTu7aFUR/dH7+wjrQ7lzoGlZGFFrQXSs2WI0WaYHWDeCwymtohXryF8lcWQkhH8UhfNJVBJFgCY8Q6UHkZG0FxMu8xnIDBMjBmSZKwKQn0nwzwM2afskZEnmNPYDI8nuNsSZBZSAw+ThhkdCZHZZRwzmjzyRuLLVFpOj3XryXwZcSefNMPDkZAuWWzPYjxS80cm2hG1WfqrG0Gl8+iX69cbQchb7gbEb0RtqNskTo9DDmO0bNKNnMbzmIJ3/rTbSahKSwtewklqSP/01o0WKZiy+n/RAkUKOFBprjJtWOZkc8SPXV/rnoS2dWsJWQZhuPPtv3tefdDiEyp7ePrfgfKxuHpZES0IZRiFI4J/nAUP5bix+srcIxOVqAam68CbAlPvWTivRUMRVbKjJiGXIOJ78wAMjqPg3QIC0GQ0EPAWwAOzzpdgbnG7TCQetaVV8rSYCuirlPYN+bJIwBtkOC9SWLoPMVZTwQARAQABtC5GbGF0aHViIFJlcG8gU2lnbmluZyBLZXkgPGZsYXRodWJAZmxhdGh1Yi5vcmc+iQJUBBMBCAA+FiEEblwF2XnHba+TwIE1QYTdTZB6fK4FAllD2sACGwMFCRLMAwAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQQYTdTZB6fK5RJQ/+Ptd4sWxaiAW91FFk7+wmYOkEe1NY2UDNJjEEz34PNP/1RoxveHDt43kYJQ23OWaPJuZAbu+fWtjRYcMBzOsMCaFcRSHFiDIC9aTp4ux/mo+IEeyarYt/oyKb5t5lta6xaAqg7rwt65jW5/aQjnS4h7eFZ+dAKta7Y/fljNrOznUp81/SMcx4QA5G2Pw0hs4Xrxg59oONOTFGBgA6FF8WQghrpR7SnEe0FSEOVsAjwQ13Cfkfa7b70omXSWp7GWfUzgBKyoWxKTqzMN3RQHjjhPJcsQnrqH5enUu4Pcb2LcMFpzimHnUgb9ft72DP5wxfzHGAWOUiUXHbAekfq5iFks8cha/RST6wkxG3Rf44Zn09aOxh1btMcGL+5xb1G0BuCQnA0fP/kDYIPwh9z22EqwRQOspIcvGeLVkFeIfubxpcMdOfQqQnZtHMCabV5Q/Rk9K1ZGc8M2hlg8gHbXMFch2xJ0Wu72eXbA/UY5MskEeBgawTQnQOK/vNm7t0AJMpWK26Qg6178UmRghmeZDj9uNRc3EI1nSbgvmGlpDmCxaAGqaGL1zW4KPW5yN25/qeqXcgCvUjZLI9PNq3Kvizp1lUrbx7heRiSoazCucvHQ1VHUzcPVLUKKTkoTP8okThnRRRsBcZ1+jI4yMWIDLOCT7IW3FePr+3xyuy5eEo9a25Ag0EWUPa7AEQALT/CmSyZ8LWlRYQZKYw417p7Z2hxqd6TjwkwM3IQ1irumkWcTZBZIbBgrSOg6CcXD2oWydCQHWi9qaxhuhEl2bJL5LskmBcMxVdQeD0LLHd8QUnbnnIby8ocvWN1alPfvJFjCUTrmD22U1ycOzRw2lIe4kiQONbOZtdWrVImQQSndjFlisitbmlWHvHm2lOOYy8+GJB7YffVV193hmnBSJffCy4bvkuLxsI+n1DhOzc7MPV3z6HGk4HiEcF0yyt9tCYhpsxHFdBoq2h771HfAcS0s98EVAqYMFnf9em+4cnYpdI6mhIfS1FQiKl6DBAYA8tT3ggla00DurPo0JwX/zN+PaO5h/6O9aCZwV7G6rbkgMuqMergXaf8oP38gr0z+MqWnkfM63Bodq68GP4l4hd02BoFBbDf38TMuGQB14+twJMdfbAxo2MbgluvQgfwHfZ2ca6gyEY+9s/YD1gugLjV+S6CB51WkFNe1z4tAPgJZNxUcKCbeaHNbthl8Hks/pY9RCEseX/EdfzF18epbSjJMPh4DPQXbUoFwmyuYcoBOPmvZHNl9hK7B/1RP8w1ZrXk8qdupC0SNbafX7270B7lMMVImzZetGsM9ypXJ6llhp3FwW09iseNyGJGPsr/dvTMGDXqOPfU/9SAS1LSTY4K9PbRtdrBE318YX8mIk5ABEBAAGJBHIEGAEIACYWIQRuXAXZecdtr5PAgTVBhN1NkHp8rgUCWUPa7AIbAgUJEswDAAJACRBBhN1NkHp8rsF0IAQZAQgAHRYhBFSmzd2JGfsgQgDYrFYnAunj7X7oBQJZQ9rsAAoJEFYnAunj7X7oR6AP/0KYmiAFeqx14Z43/6s2gt3VhxlSd8bmcVV7oJFbMhdHBIeWBp2BvsUf00I0Zl14ZkwCKfLwbbORC2eIxvzJ+QWjGfPhDmS4XUSmhlXxWnYEveSek5Tde+fmu6lqKM8CHg5BNx4GWIX/vdLi1wWJZyhrUwwICAxkuhKxuP2Z1An48930eslTD2GGcjByc27+9cIZjHKa07I/aLffo04V+oMT9/tgzoquzgpVV4jwekADo2MJjhkkPveSNI420bgT+Q7Fi1l0X1aFUniBvQMsaBa27PngWm6xE2ZYvh7nWCdd5g0c0eLIHxWwzV1lZ4Ryx4ITO/VL25ItECcjhTRdYa64sA62MYSaB0x3eR+SihpgP3wSNPFu3MJo6FKTFdi4CBAEmpWHFW7FcRmd+cQXeFrHLN3iNVWryy0HK/CUEJmiZEmpNiXecl4vPIIuyF0zgSCztQtKoMr+injpmQGC/rF/ELBVZTUSLNB350S0Ztvw0FKWDAJSxFmoxt3xycqvvt47rxTrhi78nkk6jATKGyvP55sO+K7Q7Wh0DXA69hvPrYW2eu8jGCdVGxi6HX7L1qcfEd0378S71dZ3g9o6KKl1OsDWWQ6MJ6FGBZedl/ibRfs8p5+sbCX3lQSjEFy3rx6n0rUrXx8U2qb+RCLzJlmC5MNBOTDJwHPcX6gKsUcXZrEQALmRHoo3SrewO41RCr+5nUlqiqV3AohBMhnQbGzyHf2+drutIaoh7Rj80XRh2bkkuPLwlNPf+bTXwNVGse4bej7B3oV6Ae1N7lTNVF4Qh+1OowtGjmfJPWo0z1s6HFJVxoIof9z58Msvgao0zrKGqaMWaNQ6LUeC9g9Aj/9Uqjbo8X54aLiYs8Z1WNc06jKP+gv8AWLtv6CR+l2kLez1YMDucjm7v6iuCMVAmZdmxhg5I/X2+OM3vBsqPDdQpr2TPDLX3rCrSBiS0gOQ6DwN5N5QeTkxmY/7QO8bgLo/Wzu1iilH4vMKW6LBKCaRx5UEJxKpL4wkgITsYKneIt3NTHo5EOuaYk+y2+Dvt6EQFiuMsdbfUjs3seIHsghX/cbPJa4YUqZAL8C4OtVHaijwGo0ymt9MWvS9yNKMyT0JhN2/BdeOVWrHk7wXXJn/ZjpXilicXKPx4udCF76meE+6N2u/T+RYZ7fP1QMEtNZNmYDOfA6sViuPDfQSHLNbauJBo/n1sRYAsL5mcG22UDchJrlKvmK3EOADCQg+myrm8006LltubNB4wWNzHDJ0Ls2JGzQZCd/xGyVmUiidCBUrD537WdknOYE4FD7P0cHaM9brKJ/M8LkEH0zUlo73bY4XagbnCqve6PvQb5G2Z55qhWphd6f4B6DGed86zJEa/RhS

             @@ -0,0 +1,3 @@            1# Disabled by default in the package            2disable speech-dispatcherd.service            3

             @@ -1,3 +0,0 @@     1       # TODO: drop once https://bugs.debian.org/1025349 is fixed     2       [Install]     3       Alias=display-manager.service

             @@ -0,0 +1,3 @@            1# TODO: drop once https://bugs.debian.org/1025349 is fixed            2[Install]            3Alias=display-manager.service