You've already forked fedora-bootc
119 lines
4.3 KiB
Bash
Executable File
119 lines
4.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -ouex pipefail
|
|
|
|
# Copy System Files onto root
|
|
rsync -rvK /ctx/sys_files/ /
|
|
|
|
# Copy cosign.pub key into the right location
|
|
mkdir -p /etc/pki/containers
|
|
cp /ctx/cosign.pub /etc/pki/containers/davejansen.pub
|
|
|
|
### Install packages
|
|
|
|
# Packages can be installed from any enabled yum repo on the image.
|
|
# RPMfusion repos are available by default in ublue main images
|
|
# List of rpmfusion packages can be found here:
|
|
# https://mirrors.rpmfusion.org/mirrorlist?path=free/fedora/updates/39/x86_64/repoview/index.html&protocol=https&redirect=1
|
|
|
|
# Install RPMFusion and enable fedora-multimedia with a higher priority than default
|
|
if ! grep -q fedora-multimedia <(dnf5 repolist); then
|
|
# Enable or Install Repofile
|
|
#dnf5 install \
|
|
# https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm \
|
|
# https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm
|
|
|
|
# Enable fedora-multimedia
|
|
dnf5 config-manager setopt fedora-multimedia.enabled=1 ||
|
|
dnf5 config-manager addrepo --from-repofile="https://negativo17.org/repos/fedora-multimedia.repo"
|
|
fi
|
|
|
|
# Set higher priority
|
|
dnf5 config-manager setopt fedora-multimedia.priority=90
|
|
|
|
# Remove Fedora's package that enforces their own (filtered) version of the
|
|
# flathub repo is present, as-well as the system-installed Firefox as I prefer to use the Flatpak version
|
|
dnf5 remove -y fedora-flathub-remote
|
|
|
|
# Add Flathub to the image for eventual application
|
|
mkdir -p /etc/flatpak/remotes.d/
|
|
curl --retry 3 -Lo /etc/flatpak/remotes.d/flathub.flatpakrepo https://dl.flathub.org/repo/flathub.flatpakrepo
|
|
|
|
# use override to replace mesa and others with less crippled versions
|
|
OVERRIDES=(
|
|
"intel-gmmlib"
|
|
"intel-mediasdk"
|
|
"intel-vpl-gpu-rt"
|
|
"libheif"
|
|
"libva"
|
|
"libva-intel-media-driver"
|
|
"mesa-dri-drivers"
|
|
"mesa-filesystem"
|
|
"mesa-libEGL"
|
|
"mesa-libGL"
|
|
"mesa-libgbm"
|
|
"mesa-va-drivers"
|
|
"mesa-vulkan-drivers"
|
|
)
|
|
|
|
dnf5 distro-sync --skip-unavailable -y --repo='fedora-multimedia' "${OVERRIDES[@]}"
|
|
dnf5 versionlock add "${OVERRIDES[@]}"
|
|
|
|
# Remove additional repositories Fedora comes with out of the box
|
|
# And don't raise an error if any of these files does not exist when attempting
|
|
# to delete them.
|
|
rm \
|
|
/etc/yum.repos.d/fedora-cisco-openh264.repo \
|
|
/etc/yum.repos.d/google-chrome.repo \
|
|
/etc/yum.repos.d/rpmfusion-nonfree-nvidia-driver.repo \
|
|
/etc/yum.repos.d/rpmfusion-nonfree-steam.repo \
|
|
/etc/yum.repos.d/_copr:copr.fedorainfracloud.org:phracek:PyCharm.repo \
|
|
2>&1
|
|
|
|
# Add country query to all repo metalinks
|
|
# shellcheck disable=SC2016
|
|
sed -i -e '/^metalink\=/s/\$releasever\&arch\=\$basearch$/\$releasever\&arch\=\$basearch\&country\=KR,JP,TW/g' /etc/yum.repos.d/*.repo
|
|
|
|
# Add 1Password repo
|
|
#rpmkeys --import https://downloads.1password.com/linux/keys/1password.asc
|
|
cp /ctx/rpm-keys/1password.asc /etc/pki/rpm-gpg/1password.asc
|
|
sh -c 'echo -e "[1password]\nname=1Password Stable Channel\nbaseurl=https://downloads.1password.com/linux/rpm/stable/\$basearch\nenabled=1\ngpgcheck=1\nrepo_gpgcheck=1\ngpgkey=\"file:///etc/pki/rpm-gpg/1password.asc\"" > /etc/yum.repos.d/1password.repo'
|
|
|
|
# Add Tailscale repo
|
|
#rpmkeys --import https://pkgs.tailscale.com/stable/fedora/repo.gpg
|
|
#dnf5 config-manager addrepo --from-repofile=https://pkgs.tailscale.com/stable/fedora/tailscale.repo
|
|
cp /ctx/rpm-keys/tailscale.gpg /etc/pki/rpm-gpg/tailscale.gpg
|
|
sh -c 'echo -e "[tailscale-stable]\nname=Tailscale stable\nbaseurl=https://pkgs.tailscale.com/stable/fedora/\$basearch\nenabled=1\ngpgcheck=1\nrepo_gpgcheck=1\ngpgkey=\"file:///etc/pki/rpm-gpg/tailscale.gpg\"" > /etc/yum.repos.d/tailscale.repo'
|
|
|
|
# Update all existing packages
|
|
# dnf5 update -y
|
|
|
|
# Install Niri, the scrollable-tiling window compositor
|
|
# https://yalter.github.io/niri/
|
|
dnf5 -y copr enable avengemedia/dms
|
|
|
|
# Install my own layered packages
|
|
dnf5 install -y \
|
|
git \
|
|
fish \
|
|
gvfs-nfs \
|
|
openssl \
|
|
wl-clipboard \
|
|
ffmpeg ffmpeg-libs ffmpegthumbnailer \
|
|
heif-pixbuf-loader intel-vaapi-driver libavcodec libheif \
|
|
libcamera libcamera-gstreamer libcamera-ipa libcamera-tools pipewire-plugin-libcamera \
|
|
gnome-shell-extension-appindicator \
|
|
1password 1password-cli \
|
|
tailscale \
|
|
waypipe \
|
|
htop \
|
|
alacritty \
|
|
niri dms
|
|
|
|
dnf5 -y copr disable avengemedia/dms
|
|
|
|
# Enable Tailscale service
|
|
systemctl enable tailscaled
|
|
|
|
echo "Done."
|