Commit Graph

1113 Commits

Author SHA1 Message Date
Nate Graham
474b3b35be Replace ntfs-3g with ntfsprogs
We don't need the userspace FUSE-based ntfs-3g driver because the kernel
includes one for reading and writing to NTFS. However we do need the
command-line NTFS tools for Partition Manager. So just keep those.

Because ntfs-3g was the last thing depending on fuse2, manually add it
back, because we don't want to break a bunch of old AppImages. Put that
as well as some other app-enablement-related packages to a new group in
Core.
2026-05-05 07:50:42 -06:00
Nate Graham
03048b3a7a Don't pre-intall vpl-gpu-rt
vpl-gpu-rt is only needef tro specialized workloads using Intel's OneVPL
library, which almost nothing is.

This package requires intel-media-driver, which is what we actually
want, so specifically ask for that instead.
2026-05-04 22:25:34 -06:00
Nate Graham
9bd76e8102 Don't pre-install acpi_call-dkms
This will make us fail shim review.

I only added it in the first place to work around a driver issue on my
wife's laptop, but it was fixed upstream soon afterwards anyway — a
testament to the value of properly reporting issues rather then
empowering people to silently work around them.
2026-05-04 13:22:20 -06:00
Nate Graham
4d52d825f7 Don't pre-install busybox
Nothing depends on it and it isn't particularly useful for us in
comparison to any of the other stuff we include.
2026-05-04 11:26:10 -06:00
Nate Graham
f686e90e25 Properly delete alf_alg kernel modules
Amends 4fa05d179b

`uname -r` doesn't work here because the running kernel isn't the same
as the one in the image! Use a more sledgehammery approach.
2026-05-03 19:42:23 -06:00
Hadi Chokr
fb8ad2c859 Be more dynamic about pre-existing sysext.
Signed-off-by: Hadi Chokr <hadichokr@icloud.com>
2026-05-03 19:04:55 -06:00
Caio Lamego
e11b638253 docs: add VM setup warning and wiki link to README (fixes #604) 2026-05-03 22:55:24 +00:00
Nate Graham
4fa05d179b Disable and remove af_alg kernel module
It's a source of vulnerability, most recently the "Copy Fail"
vulnerability (CVE-2026-31431). That one is already fixed, but according
to Google crypto guy Eric Biggers [1], it's vulnerable by design. The
only significant things it's used for (iwd and non-default cryptsetup
algorithms) aren't supported in KDE Linux, so let's disable and remove
this functionality.

[1] https://news.ycombinator.com/item?id=47956312
2026-05-03 11:57:53 -06:00
Andrei Zhigalkin
5f9ef707dd Pre-configure SSH_AUTH_SOCK globally
Noticed 1e99880831 and thought this might be beneficial for other shells as well.
2026-05-02 12:30:09 -06:00
Nate Graham
c98d3cdcfa Override default arch sysctl config
Ours was 00-; Arch's is 10-; as a result Arch's config is taking
precedence over ours!

This mostly doesn't matter except for `fs.inotify.max_user_instances`,
which is set in both. Because Arch's file wins, the value is currently
stuck at 1024 instead of the 8192 value we intended.
2026-04-29 19:33:32 -06:00
Nate Graham
1e99880831 Pre-configure SSH_AUTH_SOCK to be compatible with the ssh-agent service
If the user uses ssh-agent.service, everything will Just Work™. If they
don't, whatever online guide they're following will have instructed them
to set SSH_AUTH_SOCK in their rc file, and it will override this.

Related to #555
2026-04-29 13:45:16 -06:00
Nate Graham
ea2ee0df31 Also set SSH_ASKPASS_REQUIRE=prefer
Without this, `ssh-add` will continue to ask in a terminal window rather
than going through ksshaskpass, which we pre-install.

Related to #555
2026-04-29 12:43:18 -06:00
Harald Sitter
74b299a3b7 desync: print stats after making index 2026-04-29 19:21:02 +02:00
Harald Sitter
c734df9eec desync: use long options 2026-04-29 19:21:02 +02:00
Harald Sitter
8e07d551f7 increase chunk size substantially
Trying to improve #538 by having larger, and fewer chunks. This may run
at the cost of delta size but we'll have to see.

values are in kb
2026-04-29 19:21:02 +02:00
Nate Graham
4d0ee31b44 Don't pre-install acpi daemon
It's unclear why this was added and what use it has for normal users of
a general-purpose desktop OS. Until that can be re-established, remove
it from the image.
2026-04-29 18:14:51 +02:00
Nate Graham
f69bc2dea4 Relocate and document edk2 packages
-ovmf is for x86 VM support, while -shell is for bare metal.

GIT_SILENT
2026-04-28 21:25:31 -06:00
Nate Graham
8873c0d18f Re-arrange some low-level packages
efibootmgr, mokutil, sbsigntools are tools, not libraries.

GIT_SILENT
2026-04-28 20:10:28 -06:00
Nate Graham
ad69ed7364 drop linux-atm package
This is for ATM networking, which is not relevant to desktop usage and
lost steam in the world in general. We don't need it in KDE Linux.
2026-04-28 20:10:22 -06:00
l10n daemon script
10984e62fa GIT_SILENT made messages (after extraction) 2026-04-28 00:43:12 +00:00
Nate Graham
3c03b8f046 Update README
Be a bit more helpful by linking to specific places.
2026-04-27 16:35:57 -06:00
Nate Graham
97d533f02a Remove unused TimeoutStartSec keys from default config files
These cause journal messages like

```
/usr/lib/systemd/system.conf.d/00-kde-linux-default.conf:6: Unknown key 'TimeoutStartSec' in section [Manager], ignoring.
```

And https://www.man7.org/linux/man-pages/man5/systemd-system.conf.5.html
shows that they are not used.
2026-04-27 10:18:23 -06:00
Hadi Chokr
f2963f9821 Remove libisoburn from the VM Image 2026-04-23 20:01:24 +02:00
l10n daemon script
3f774b8ceb GIT_SILENT Sync po/docbooks with svn 2026-04-23 01:43:59 +00:00
Harald Sitter
a533d8b954 upload: put desync into path
should make it also available for the vacuum helper
2026-04-22 15:12:04 +02:00
Harald Sitter
df8c400a29 upload: build and run vacuum in one command
less verbose this way
2026-04-22 13:18:28 +02:00
Harald Sitter
67a4091262 upload-vacuum-v3: be more gracious with error retrial 2026-04-22 13:18:09 +02:00
Harald Sitter
48688af30a upload-vacuum-v3: do not look for caibx files in the sysupdate/ dir
it's the desync store itself and definitely will not contain any caibx
files.

this should improve timeout scenarios during pruning
2026-04-22 13:17:09 +02:00
Harald Sitter
3cc058c642 use bespoke mirror
gives us better control over what and when to sync
2026-04-22 07:59:58 +02:00
l10n daemon script
236831faab GIT_SILENT Sync po/docbooks with svn 2026-04-22 01:46:27 +00:00
l10n daemon script
e3b9277f24 GIT_SILENT made messages (after extraction) 2026-04-20 00:44:58 +00:00
Aidan Harris
35bf21364b sysctl: Enable IPv6 privacy addressing by default
KDE Linux is a desktop distribution.
The Linux default is aimed at servers and does not make sense.

Reference: https://docs.kernel.org/networking/ip-sysctl.html
2026-04-19 08:27:03 -06:00
l10n daemon script
2c1e94bf4d GIT_SILENT Sync po/docbooks with svn 2026-04-19 01:47:35 +00:00
l10n daemon script
639e8dc345 GIT_SILENT Sync po/docbooks with svn 2026-04-18 01:45:52 +00:00
Yago Raña Gayoso
59d0b0e0bb Correct URLs in AppStream metadata (part 2) 2026-04-17 16:22:02 +02:00
l10n daemon script
946b053311 GIT_SILENT Sync po/docbooks with svn 2026-04-17 01:45:39 +00:00
Nate Graham
0acedb5d5b Correct URLs in AppStream metadata
Some of these will change in the future. But there's no reason to keep
presenting wrong URLs until that time comes.
2026-04-16 13:51:04 -06:00
Aidan Harris
c34d8f533e Fix rsync alias
Fixes the following error:

rsync: This rsync does not support --crtimes (-N)
rsync error: syntax or usage error (code 1) at main.c(1782) [client=3.4.1]
2026-04-16 07:56:46 -06:00
Hadi Chokr
0547eceaa8 Revert "Remove libisoburn from the VM Image"
This reverts commit e810b7b91e
2026-04-16 09:27:39 +02:00
Harald Sitter
08948c85e9 upload: prime vacuuming
everything seems to be in order now. let's clean up!
2026-04-15 21:42:01 +02:00
Harald Sitter
6089d4da22 vacuum-v3: also send sessionToken
and add unify the code copy with uploader again
2026-04-15 19:23:52 +02:00
Hadi Chokr
e810b7b91e Remove libisoburn from the VM Image
The iso9660 Standard is incredibly weak and unusable for our Usecases.
2026-04-15 15:40:03 +02:00
Harald Sitter
23ef25928d upload: make sure we have an updated token before vacuuming
more ideally we should refresh the token on-demand but that is a larger
refactor
2026-04-15 14:51:40 +02:00
Harald Sitter
3da022e969 core: install more efi utils 2026-04-15 14:51:07 +02:00
Harald Sitter
adece9b4d7 style++ 2026-04-15 14:51:07 +02:00
Harald Sitter
ef363735c4 add upload-vacuum-v3
cleans up the s3 and prepares for the repo v3 (which accounts for
editions in the repo path)

Closes #590
2026-04-15 14:04:27 +02:00
Hadi Chokr
261e5653fb Hotfix CI.
Somewhere after mkosi v26, our pipeline breaks.
2026-04-12 15:01:45 +02:00
Ben Cooksley
31a33db305 Ensure old history cannot be easily re-pushed 2026-04-12 21:38:30 +12:00
Hadi Chokr
84fca25b0e Hotfix: Remove deleted package 2026-04-11 21:02:34 +02:00
l10n daemon script
103f177c46 GIT_SILENT made messages (after extraction) 2026-04-11 00:43:04 +00:00