Commit Graph

1124 Commits

Author SHA1 Message Date
Hadi Chokr
d5fa6df3ba try handeling nested subvols better 2026-05-05 08:19:11 +02:00
Hadi Chokr
974a619d5e try handeling nested subvols better 2026-05-05 08:19:11 +02:00
Hadi Chokr
7ba7e3185f try handeling nested subvols 2026-05-05 08:19:11 +02:00
Hadi Chokr
d13143aaa6 revert 2026-05-05 08:19:11 +02:00
Hadi Chokr
19e987639e Troubleshoot 2026-05-05 08:19:11 +02:00
Hadi Chokr
0c94b2f7a3 Be very late in the build step so doenst tumble over weird sysusers with home dirs. 2026-05-05 08:19:11 +02:00
Hadi Chokr
3da9103a8d F 2026-05-05 08:19:11 +02:00
Hadi Chokr
1eed99dfd5 Revert finalize chnage 2026-05-05 08:19:11 +02:00
Hadi Chokr
58356db6fd Edit 40-core.sh.chroot 2026-05-05 08:19:11 +02:00
Hadi Chokr
e59a35de86 RootFSv3 2026-05-05 08:19:11 +02:00
Hadi Chokr
116f010adb Hotfix: Make mkosi happy again 2026-05-05 08:19:11 +02:00
Hadi Chokr
2a6079463f Hotfix: Make sure it exists. 2026-05-05 08:19:11 +02:00
Hadi Chokr
211941b66c Hotfix: Make output folder owned by root for mkosi 2026-05-05 08:19:11 +02:00
Nate Graham
9bd76e8102 Don't pre-install acpi_call-dkms
This will make us fail shim review.

I only added it in the first place to work around a driver issue on my
wife's laptop, but it was fixed upstream soon afterwards anyway — a
testament to the value of properly reporting issues rather then
empowering people to silently work around them.
2026-05-04 13:22:20 -06:00
Nate Graham
4d52d825f7 Don't pre-install busybox
Nothing depends on it and it isn't particularly useful for us in
comparison to any of the other stuff we include.
2026-05-04 11:26:10 -06:00
Nate Graham
f686e90e25 Properly delete alf_alg kernel modules
Amends 4fa05d179b

`uname -r` doesn't work here because the running kernel isn't the same
as the one in the image! Use a more sledgehammery approach.
2026-05-03 19:42:23 -06:00
Hadi Chokr
fb8ad2c859 Be more dynamic about pre-existing sysext.
Signed-off-by: Hadi Chokr <hadichokr@icloud.com>
2026-05-03 19:04:55 -06:00
Caio Lamego
e11b638253 docs: add VM setup warning and wiki link to README (fixes #604) 2026-05-03 22:55:24 +00:00
Nate Graham
4fa05d179b Disable and remove af_alg kernel module
It's a source of vulnerability, most recently the "Copy Fail"
vulnerability (CVE-2026-31431). That one is already fixed, but according
to Google crypto guy Eric Biggers [1], it's vulnerable by design. The
only significant things it's used for (iwd and non-default cryptsetup
algorithms) aren't supported in KDE Linux, so let's disable and remove
this functionality.

[1] https://news.ycombinator.com/item?id=47956312
2026-05-03 11:57:53 -06:00
Andrei Zhigalkin
5f9ef707dd Pre-configure SSH_AUTH_SOCK globally
Noticed 1e99880831 and thought this might be beneficial for other shells as well.
2026-05-02 12:30:09 -06:00
Nate Graham
c98d3cdcfa Override default arch sysctl config
Ours was 00-; Arch's is 10-; as a result Arch's config is taking
precedence over ours!

This mostly doesn't matter except for `fs.inotify.max_user_instances`,
which is set in both. Because Arch's file wins, the value is currently
stuck at 1024 instead of the 8192 value we intended.
2026-04-29 19:33:32 -06:00
Nate Graham
1e99880831 Pre-configure SSH_AUTH_SOCK to be compatible with the ssh-agent service
If the user uses ssh-agent.service, everything will Just Work™. If they
don't, whatever online guide they're following will have instructed them
to set SSH_AUTH_SOCK in their rc file, and it will override this.

Related to #555
2026-04-29 13:45:16 -06:00
Nate Graham
ea2ee0df31 Also set SSH_ASKPASS_REQUIRE=prefer
Without this, `ssh-add` will continue to ask in a terminal window rather
than going through ksshaskpass, which we pre-install.

Related to #555
2026-04-29 12:43:18 -06:00
Harald Sitter
74b299a3b7 desync: print stats after making index 2026-04-29 19:21:02 +02:00
Harald Sitter
c734df9eec desync: use long options 2026-04-29 19:21:02 +02:00
Harald Sitter
8e07d551f7 increase chunk size substantially
Trying to improve #538 by having larger, and fewer chunks. This may run
at the cost of delta size but we'll have to see.

values are in kb
2026-04-29 19:21:02 +02:00
Nate Graham
4d0ee31b44 Don't pre-install acpi daemon
It's unclear why this was added and what use it has for normal users of
a general-purpose desktop OS. Until that can be re-established, remove
it from the image.
2026-04-29 18:14:51 +02:00
Nate Graham
f69bc2dea4 Relocate and document edk2 packages
-ovmf is for x86 VM support, while -shell is for bare metal.

GIT_SILENT
2026-04-28 21:25:31 -06:00
Nate Graham
8873c0d18f Re-arrange some low-level packages
efibootmgr, mokutil, sbsigntools are tools, not libraries.

GIT_SILENT
2026-04-28 20:10:28 -06:00
Nate Graham
ad69ed7364 drop linux-atm package
This is for ATM networking, which is not relevant to desktop usage and
lost steam in the world in general. We don't need it in KDE Linux.
2026-04-28 20:10:22 -06:00
l10n daemon script
10984e62fa GIT_SILENT made messages (after extraction) 2026-04-28 00:43:12 +00:00
Nate Graham
3c03b8f046 Update README
Be a bit more helpful by linking to specific places.
2026-04-27 16:35:57 -06:00
Nate Graham
97d533f02a Remove unused TimeoutStartSec keys from default config files
These cause journal messages like

```
/usr/lib/systemd/system.conf.d/00-kde-linux-default.conf:6: Unknown key 'TimeoutStartSec' in section [Manager], ignoring.
```

And https://www.man7.org/linux/man-pages/man5/systemd-system.conf.5.html
shows that they are not used.
2026-04-27 10:18:23 -06:00
Hadi Chokr
f2963f9821 Remove libisoburn from the VM Image 2026-04-23 20:01:24 +02:00
l10n daemon script
3f774b8ceb GIT_SILENT Sync po/docbooks with svn 2026-04-23 01:43:59 +00:00
Harald Sitter
a533d8b954 upload: put desync into path
should make it also available for the vacuum helper
2026-04-22 15:12:04 +02:00
Harald Sitter
df8c400a29 upload: build and run vacuum in one command
less verbose this way
2026-04-22 13:18:28 +02:00
Harald Sitter
67a4091262 upload-vacuum-v3: be more gracious with error retrial 2026-04-22 13:18:09 +02:00
Harald Sitter
48688af30a upload-vacuum-v3: do not look for caibx files in the sysupdate/ dir
it's the desync store itself and definitely will not contain any caibx
files.

this should improve timeout scenarios during pruning
2026-04-22 13:17:09 +02:00
Harald Sitter
3cc058c642 use bespoke mirror
gives us better control over what and when to sync
2026-04-22 07:59:58 +02:00
l10n daemon script
236831faab GIT_SILENT Sync po/docbooks with svn 2026-04-22 01:46:27 +00:00
l10n daemon script
e3b9277f24 GIT_SILENT made messages (after extraction) 2026-04-20 00:44:58 +00:00
Aidan Harris
35bf21364b sysctl: Enable IPv6 privacy addressing by default
KDE Linux is a desktop distribution.
The Linux default is aimed at servers and does not make sense.

Reference: https://docs.kernel.org/networking/ip-sysctl.html
2026-04-19 08:27:03 -06:00
l10n daemon script
2c1e94bf4d GIT_SILENT Sync po/docbooks with svn 2026-04-19 01:47:35 +00:00
l10n daemon script
639e8dc345 GIT_SILENT Sync po/docbooks with svn 2026-04-18 01:45:52 +00:00
Yago Raña Gayoso
59d0b0e0bb Correct URLs in AppStream metadata (part 2) 2026-04-17 16:22:02 +02:00
l10n daemon script
946b053311 GIT_SILENT Sync po/docbooks with svn 2026-04-17 01:45:39 +00:00
Nate Graham
0acedb5d5b Correct URLs in AppStream metadata
Some of these will change in the future. But there's no reason to keep
presenting wrong URLs until that time comes.
2026-04-16 13:51:04 -06:00
Aidan Harris
c34d8f533e Fix rsync alias
Fixes the following error:

rsync: This rsync does not support --crtimes (-N)
rsync error: syntax or usage error (code 1) at main.c(1782) [client=3.4.1]
2026-04-16 07:56:46 -06:00
Hadi Chokr
0547eceaa8 Revert "Remove libisoburn from the VM Image"
This reverts commit e810b7b91e
2026-04-16 09:27:39 +02:00