Nate Graham
474b3b35be
Replace ntfs-3g with ntfsprogs
...
We don't need the userspace FUSE-based ntfs-3g driver because the kernel
includes one for reading and writing to NTFS. However we do need the
command-line NTFS tools for Partition Manager. So just keep those.
Because ntfs-3g was the last thing depending on fuse2, manually add it
back, because we don't want to break a bunch of old AppImages. Put that
as well as some other app-enablement-related packages to a new group in
Core.
2026-05-05 07:50:42 -06:00
Nate Graham
03048b3a7a
Don't pre-intall vpl-gpu-rt
...
vpl-gpu-rt is only needef tro specialized workloads using Intel's OneVPL
library, which almost nothing is.
This package requires intel-media-driver, which is what we actually
want, so specifically ask for that instead.
2026-05-04 22:25:34 -06:00
Nate Graham
9bd76e8102
Don't pre-install acpi_call-dkms
...
This will make us fail shim review.
I only added it in the first place to work around a driver issue on my
wife's laptop, but it was fixed upstream soon afterwards anyway — a
testament to the value of properly reporting issues rather then
empowering people to silently work around them.
2026-05-04 13:22:20 -06:00
Nate Graham
4d52d825f7
Don't pre-install busybox
...
Nothing depends on it and it isn't particularly useful for us in
comparison to any of the other stuff we include.
2026-05-04 11:26:10 -06:00
Nate Graham
f686e90e25
Properly delete alf_alg kernel modules
...
Amends 4fa05d179b
`uname -r` doesn't work here because the running kernel isn't the same
as the one in the image! Use a more sledgehammery approach.
2026-05-03 19:42:23 -06:00
Hadi Chokr
fb8ad2c859
Be more dynamic about pre-existing sysext.
...
Signed-off-by: Hadi Chokr <hadichokr@icloud.com >
2026-05-03 19:04:55 -06:00
Caio Lamego
e11b638253
docs: add VM setup warning and wiki link to README ( fixes #604 )
2026-05-03 22:55:24 +00:00
Nate Graham
4fa05d179b
Disable and remove af_alg kernel module
...
It's a source of vulnerability, most recently the "Copy Fail"
vulnerability (CVE-2026-31431). That one is already fixed, but according
to Google crypto guy Eric Biggers [1], it's vulnerable by design. The
only significant things it's used for (iwd and non-default cryptsetup
algorithms) aren't supported in KDE Linux, so let's disable and remove
this functionality.
[1] https://news.ycombinator.com/item?id=47956312
2026-05-03 11:57:53 -06:00
Andrei Zhigalkin
5f9ef707dd
Pre-configure SSH_AUTH_SOCK globally
...
Noticed 1e99880831 and thought this might be beneficial for other shells as well.
2026-05-02 12:30:09 -06:00
Nate Graham
c98d3cdcfa
Override default arch sysctl config
...
Ours was 00-; Arch's is 10-; as a result Arch's config is taking
precedence over ours!
This mostly doesn't matter except for `fs.inotify.max_user_instances`,
which is set in both. Because Arch's file wins, the value is currently
stuck at 1024 instead of the 8192 value we intended.
2026-04-29 19:33:32 -06:00
Nate Graham
1e99880831
Pre-configure SSH_AUTH_SOCK to be compatible with the ssh-agent service
...
If the user uses ssh-agent.service, everything will Just Work™. If they
don't, whatever online guide they're following will have instructed them
to set SSH_AUTH_SOCK in their rc file, and it will override this.
Related to #555
2026-04-29 13:45:16 -06:00
Nate Graham
ea2ee0df31
Also set SSH_ASKPASS_REQUIRE=prefer
...
Without this, `ssh-add` will continue to ask in a terminal window rather
than going through ksshaskpass, which we pre-install.
Related to #555
2026-04-29 12:43:18 -06:00
Harald Sitter
74b299a3b7
desync: print stats after making index
2026-04-29 19:21:02 +02:00
Harald Sitter
c734df9eec
desync: use long options
2026-04-29 19:21:02 +02:00
Harald Sitter
8e07d551f7
increase chunk size substantially
...
Trying to improve #538 by having larger, and fewer chunks. This may run
at the cost of delta size but we'll have to see.
values are in kb
2026-04-29 19:21:02 +02:00
Nate Graham
4d0ee31b44
Don't pre-install acpi daemon
...
It's unclear why this was added and what use it has for normal users of
a general-purpose desktop OS. Until that can be re-established, remove
it from the image.
2026-04-29 18:14:51 +02:00
Nate Graham
f69bc2dea4
Relocate and document edk2 packages
...
-ovmf is for x86 VM support, while -shell is for bare metal.
GIT_SILENT
2026-04-28 21:25:31 -06:00
Nate Graham
8873c0d18f
Re-arrange some low-level packages
...
efibootmgr, mokutil, sbsigntools are tools, not libraries.
GIT_SILENT
2026-04-28 20:10:28 -06:00
Nate Graham
ad69ed7364
drop linux-atm package
...
This is for ATM networking, which is not relevant to desktop usage and
lost steam in the world in general. We don't need it in KDE Linux.
2026-04-28 20:10:22 -06:00
l10n daemon script
10984e62fa
GIT_SILENT made messages (after extraction)
2026-04-28 00:43:12 +00:00
Nate Graham
3c03b8f046
Update README
...
Be a bit more helpful by linking to specific places.
2026-04-27 16:35:57 -06:00
Nate Graham
97d533f02a
Remove unused TimeoutStartSec keys from default config files
...
These cause journal messages like
```
/usr/lib/systemd/system.conf.d/00-kde-linux-default.conf:6: Unknown key 'TimeoutStartSec' in section [Manager], ignoring.
```
And https://www.man7.org/linux/man-pages/man5/systemd-system.conf.5.html
shows that they are not used.
2026-04-27 10:18:23 -06:00
Hadi Chokr
f2963f9821
Remove libisoburn from the VM Image
2026-04-23 20:01:24 +02:00
l10n daemon script
3f774b8ceb
GIT_SILENT Sync po/docbooks with svn
2026-04-23 01:43:59 +00:00
Harald Sitter
a533d8b954
upload: put desync into path
...
should make it also available for the vacuum helper
2026-04-22 15:12:04 +02:00
Harald Sitter
df8c400a29
upload: build and run vacuum in one command
...
less verbose this way
2026-04-22 13:18:28 +02:00
Harald Sitter
67a4091262
upload-vacuum-v3: be more gracious with error retrial
2026-04-22 13:18:09 +02:00
Harald Sitter
48688af30a
upload-vacuum-v3: do not look for caibx files in the sysupdate/ dir
...
it's the desync store itself and definitely will not contain any caibx
files.
this should improve timeout scenarios during pruning
2026-04-22 13:17:09 +02:00
Harald Sitter
3cc058c642
use bespoke mirror
...
gives us better control over what and when to sync
2026-04-22 07:59:58 +02:00
l10n daemon script
236831faab
GIT_SILENT Sync po/docbooks with svn
2026-04-22 01:46:27 +00:00
l10n daemon script
e3b9277f24
GIT_SILENT made messages (after extraction)
2026-04-20 00:44:58 +00:00
Aidan Harris
35bf21364b
sysctl: Enable IPv6 privacy addressing by default
...
KDE Linux is a desktop distribution.
The Linux default is aimed at servers and does not make sense.
Reference: https://docs.kernel.org/networking/ip-sysctl.html
2026-04-19 08:27:03 -06:00
l10n daemon script
2c1e94bf4d
GIT_SILENT Sync po/docbooks with svn
2026-04-19 01:47:35 +00:00
l10n daemon script
639e8dc345
GIT_SILENT Sync po/docbooks with svn
2026-04-18 01:45:52 +00:00
Yago Raña Gayoso
59d0b0e0bb
Correct URLs in AppStream metadata (part 2)
2026-04-17 16:22:02 +02:00
l10n daemon script
946b053311
GIT_SILENT Sync po/docbooks with svn
2026-04-17 01:45:39 +00:00
Nate Graham
0acedb5d5b
Correct URLs in AppStream metadata
...
Some of these will change in the future. But there's no reason to keep
presenting wrong URLs until that time comes.
2026-04-16 13:51:04 -06:00
Aidan Harris
c34d8f533e
Fix rsync alias
...
Fixes the following error:
rsync: This rsync does not support --crtimes (-N)
rsync error: syntax or usage error (code 1) at main.c(1782) [client=3.4.1]
2026-04-16 07:56:46 -06:00
Hadi Chokr
0547eceaa8
Revert "Remove libisoburn from the VM Image"
...
This reverts commit e810b7b91e
2026-04-16 09:27:39 +02:00
Harald Sitter
08948c85e9
upload: prime vacuuming
...
everything seems to be in order now. let's clean up!
2026-04-15 21:42:01 +02:00
Harald Sitter
6089d4da22
vacuum-v3: also send sessionToken
...
and add unify the code copy with uploader again
2026-04-15 19:23:52 +02:00
Hadi Chokr
e810b7b91e
Remove libisoburn from the VM Image
...
The iso9660 Standard is incredibly weak and unusable for our Usecases.
2026-04-15 15:40:03 +02:00
Harald Sitter
23ef25928d
upload: make sure we have an updated token before vacuuming
...
more ideally we should refresh the token on-demand but that is a larger
refactor
2026-04-15 14:51:40 +02:00
Harald Sitter
3da022e969
core: install more efi utils
2026-04-15 14:51:07 +02:00
Harald Sitter
adece9b4d7
style++
2026-04-15 14:51:07 +02:00
Harald Sitter
ef363735c4
add upload-vacuum-v3
...
cleans up the s3 and prepares for the repo v3 (which accounts for
editions in the repo path)
Closes #590
2026-04-15 14:04:27 +02:00
Hadi Chokr
261e5653fb
Hotfix CI.
...
Somewhere after mkosi v26, our pipeline breaks.
2026-04-12 15:01:45 +02:00
Ben Cooksley
31a33db305
Ensure old history cannot be easily re-pushed
2026-04-12 21:38:30 +12:00
Hadi Chokr
84fca25b0e
Hotfix: Remove deleted package
2026-04-11 21:02:34 +02:00
l10n daemon script
103f177c46
GIT_SILENT made messages (after extraction)
2026-04-11 00:43:04 +00:00