summaryrefslogtreecommitdiff
path: root/archsetup
AgeCommit message (Collapse)Author
4 daysfix(archsetup): increase GRUB timeout and switch syncthing to user serviceCraig Jennings
- GRUB_TIMEOUT 0β†’2 seconds for menu access - Syncthing: system service β†’ user service with lingering to prevent lock conflicts - Update airplanemodetoggle for user service - Update validation to check lingering instead of system service
5 daysfix(archsetup): prevent ZFS boot failures and add validation testsCraig Jennings
- Skip udev→systemd hook change on ZFS systems (ZFS hook is busybox-based) - Add nvme to MODULES for NVMe systems (ensures devices ready for ZFS import) - Add random.trust_cpu=off to suppress AMD RDSEED warnings - Add has_nvme_drives() detection function New validation tests: - validate_terminus_font: check package installed via pacman - validate_mkinitcpio_hooks: verify ZFS uses udev not systemd - validate_initramfs_consolefont: check font in initramfs - validate_nvme_module: check nvme in MODULES for NVMe systems
6 daysfix(archsetup): remove unnecessary firewall portsCraig Jennings
Remove ports for services not installed: - 80,443,8080/tcp (no web server) - 9040,9050,9051,9053,9119/tcp (Tor relay - only client installed) - 443/tcp limit (no HTTPS service) Add inline comments documenting each port's purpose.
6 daysfeat(archsetup): skip avahi if already runningCraig Jennings
Detect if avahi-daemon.service is active and skip install/config. Supports archzfs installs that pre-configure avahi for mDNS on first boot.
6 daysfix(archsetup): remove root account lockingCraig Jennings
Locking root prevents console access after reboot, making recovery impossible without reinstalling.
6 daysfix(archsetup): redirect git clone output to logfileCraig Jennings
Move redirect outside subshell so mkdir and git clone output goes to logfile instead of stdout.
6 daysfix(archsetup): fix npm global install and add wireless-regdbCraig Jennings
- Run npm install -g as root (global install requires root perms) - Add wireless-regdb to prerequisites (prevents kernel regulatory warnings)
6 daysfix(archsetup): start systemd-resolved before creating DNS symlinkCraig Jennings
The stub-resolv.conf file only exists when systemd-resolved is running.
6 daysfeat(archsetup): configure Docker to use ZFS storage driver on ZFS systemsCraig Jennings
Creates /etc/docker/daemon.json with storage-driver: zfs when running on a ZFS root filesystem. This provides better performance and enables Docker to leverage ZFS snapshots. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
6 daysfeat(archsetup): add claude-code AI coding assistantCraig Jennings
Installs @anthropic-ai/claude-code via npm after npm is installed. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
6 daysfix(archsetup): use official repo packages for tailscale and torbrowserCraig Jennings
- tailscale-bin no longer exists in AUR; tailscale is now in official repos - torbrowser-launcher (official repo) is more reliable than tor-browser-bin (AUR) which has GPG key verification issues Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
6 daysfix(archsetup): fix ZFS scrub timer and emacs cloneCraig Jennings
- ZFS scrub timer: use template unit with pool name (zfs-scrub-weekly@pool.timer) - Emacs config: handle existing .emacs.d dir with git pull instead of failing
6 daysfix(archsetup): move STARTTIME outside intro() for resume supportCraig Jennings
6 daysfeat(archsetup): add --no-root-lock flag for testingCraig Jennings
6 daysfix(archsetup): add harfbuzz dependency for st terminalCraig Jennings
6 daysfix(archsetup): fix DNS and git safe.directory for curl|bashCraig Jennings
- Bootstrap DNS symlink in create_user() before AUR/git operations - Add git safe.directory config before git restore (root on user repo)
6 daysfix(archsetup): clone repo instead of copying for curl|bash supportCraig Jennings
When run via curl|bash, archsetup_dir resolves to /root with no files. Now clones from git.cjennings.net instead of copying local files.
6 daysfix(archsetup): chown tmpfs mount point instead of parent dirCraig Jennings
- Fixed permission bug where source_dir tmpfs was owned by root - Remove zfssnapshot and zfsrollback (now in archzfs ISO)
8 daysfeat(archsetup): add automatic console login for encrypted systemsCraig Jennings
- Add --autologin and --no-autologin CLI flags - Add is_encrypted_root() to detect LUKS and ZFS encryption - Prompt user on encrypted systems (default yes) - Configure getty@tty1 drop-in for passwordless login after decryption
8 daysfeat(archsetup): add wireguard-tools and tailscaleCraig Jennings
- wireguard-tools from pacman (dotfiles have helper functions ready) - tailscale-bin from AUR (prebuilt, fast install) - Enable tailscaled service (run 'tailscale up' to authenticate)
8 daysdocs(archsetup): note potential Docker DNS issue with systemd-resolvedCraig Jennings
8 daysprivacy(archsetup): add encrypted DNS (DNS over TLS)Craig Jennings
- Configure systemd-resolved with DoT using Cloudflare + Quad9 - Enable DNSSEC validation - Integrate with NetworkManager - Fix conflict: keep systemd-resolved for DNS, avahi for mDNS
8 daysprivacy(archsetup): add WiFi MAC address randomizationCraig Jennings
8 daysfeat(archsetup): add lynis security auditing toolCraig Jennings
8 daysfeat(archsetup): configure journald retention to 500MBCraig Jennings
8 dayssecurity(archsetup): lock root account at end of scriptCraig Jennings
Root is locked last so it remains available for recovery if script fails earlier. Users must use sudo for privileged operations after successful install.
8 daysfeat(archsetup): enable weekly ZFS scrub timerCraig Jennings
8 daysfeat(archsetup): add fail2ban for SSH brute force protectionCraig Jennings
- Install and configure fail2ban with ufw integration - SSH jail: 3 attempts, 1 hour ban - Default jail: 5 attempts, 10 minute ban - Also file security recommendations to assets/
8 daysdocs: add script URL to headerCraig Jennings
8 daysfix(archsetup): add cleanup trap to unmount tmpfs on exitCraig Jennings
8 daysfeat(archsetup): add GPU driver detection and installationCraig Jennings
- Detect Intel, AMD, and NVIDIA GPUs via lspci - Install appropriate drivers and hardware video acceleration - Support multiple GPUs (e.g., hybrid Intel+NVIDIA laptops) - Add --no-gpu-drivers flag to skip (useful for VMs) - Use nvidia-dkms for better kernel compatibility - Add fallback to mesa+vesa for unknown hardware
8 daysfix(archsetup): misc bug fixes and improvementsCraig Jennings
- Add missing error codes to error() calls - Remove useless mkdir pipe to tee - Remove duplicate 5353/udp firewall rule - Replace deprecated exfat-utils with exfatprogs - Quote all variable expansions for safety - Use pipx instead of pip for isolated environments
8 daysfeat(archsetup): add error summary at end of scriptCraig Jennings
8 daysfeat(archsetup): ZFS/sanoid support, gvfs-smb, bug fixesCraig Jennings
- Add ZFS detection with sanoid/syncoid for snapshot management - Add gvfs-smb for Thunar SMB network browsing - Fix shell quoting throughout script - Fix stale $action variables in error handlers - Fix display() return values (was returning 1) - Fix mkinitcpio.conf sed pattern to be flexible - Fix vconsole.conf duplicate entries on re-run - Fix systemd unit overrides using drop-in files - Fix ufw port typo (55353 -> 5353) - Fix GRUB_RECORDFAIL_TIMEOUT undefined variable - Enable NetworkManager service - Move thunar, libvips, isync to pacman (now in official repos) - Clean up reflector config with heredoc - Remove unnecessary sudo when already root - Convert shebang from sh to bash
2026-01-10fix(archsetup): copy archsetup to user directory before stowCraig Jennings
Previously, stow created dotfile symlinks pointing to wherever archsetup was run from (e.g., /root/archsetup or /tmp). If run from a location inaccessible to the user, zsh would fail to read its config on first login and prompt for new user setup. The fix copies archsetup to ~/code/archsetup before running stow, ensuring symlinks always point to a user-accessible location. Also adds a test to verify dotfiles are readable by the user (not just root). Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-01fix(archsetup): remove duplicate multimarkdown and proselint entriesCraig Jennings
These AUR packages were incorrectly duplicated as pacman_install calls, causing false errors during installation. The correct aur_install entries remain in the emacs utilities section. πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-01feat(archsetup): implement state tracking for resume capabilityCraig Jennings
Enables resuming from where the script left off if interrupted: - State stored in /var/lib/archsetup/state/ as marker files - run_step() wrapper tracks completion, skips completed steps - --status flag shows installation progress - --fresh flag clears state for clean restart - --help flag documents all options - 12 major steps tracked (intro through boot_ux) Example: archsetup --status # check progress archsetup # resume from last step archsetup --fresh # start over πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-01feat(archsetup): add pre-flight checks before installationCraig Jennings
Validates system requirements before starting: - Disk space (minimum 20GB free on /) - Network connectivity (ping archlinux.org) - pacman available - Running on Arch Linux (/etc/arch-release) Provides clear error messages with recovery hints if checks fail. πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-01feat(wallpaper): replace nitrogen with fehCraig Jennings
nitrogen was removed from Arch repos. Migrate to feh: - Add feh to archsetup pacman installs - Update .xinitrc, lf, ranger, and monitor script - feh auto-creates ~/.fehbg for wallpaper restore πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-18fix(archsetup): properly disable debug packages system-wideCraig Jennings
Replace invalid --nodebug flags with proper makepkg.conf configuration: 1. Configure makepkg.conf OPTIONS to disable debug packages (line 237-238) - Set OPTIONS=(strip docs !libtool !staticlibs emptydirs zipman purge !debug) - This prevents ALL packages from building debug versions 2. Remove invalid --nodebug flags from yay commands: - Remove from aur_install function (lines 169, 171, 173) - Remove from python-lyricsgenius install (line 957) - --nodebug is not a valid yay/makepkg option in test VM Previous issue: 169 "invalid option 'nodebug'" errors in test logs Expected result: Clean test execution with no debug package warnings πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-18fix(archsetup): remove invalid --nodebug flag and add redshift configurationCraig Jennings
Critical fix: - Remove --nodebug flag from yay makepkg command (archsetup:375) * Flag is not supported in makepkg version on test VM * Was causing yay installation to fail with error code 3 Redshift configuration improvements: - Add redshift package installation (archsetup:645) - Fix redshift.conf dimness issues: * Increase gamma from 0.6 to 1.0 (neutral) * Increase brightness-day from 0.9 to 1.0 (full) * Increase brightness-night from 0.7 to 0.8 (less aggressive) - Add redshift to .xinitrc startup services (line 62) - Expand .xinitrc from minimal to full DWM session configuration Additional cleanup: - Remove obsolete startdwm script (replaced by full .xinitrc) πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-15feat(archsetup): add firmware management and console font configurationCraig Jennings
- Install mkinitcpio-firmware to silence firmware warnings during upgrades - Configure lat0-16 console font for better TTY readability - Add firmware cleanup task to TODO.org (Method 3: System Hygiene) - Remove old archsetup log file Changes: - archsetup:589 - Add mkinitcpio-firmware AUR package installation - archsetup:963-964 - Configure console font in boot_ux function - TODO.org:419-441 - Add task to remove unnecessary firmware (~600MB savings) Technical details: - Framework laptop only needs intel and atheros firmware packages - mkinitcpio-firmware provides enterprise hardware firmware - lat0-16 font chosen for 2256x1504 high-res display - Eliminates firmware and consolefont warnings during mkinitcpio πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-15refactor(archsetup): streamline packages and update configurationsCraig Jennings
Package removals: - Remove MPD/ncmpcpp/Mopidy music players (no longer needed) - Remove obs-studio, obsidian, VS Code - Remove VirtualBox and related packages (use Docker/gnome-boxes instead) - Remove rust package (will use rustup instead) Package additions: - Add difftastic, eza (modern CLI tools) - Add gimp, audacity, vlc (media applications) - Add insync, protonmail-bridge (sync/communication) - Add multimarkdown, proselint (text processing) Package updates: - Update man β†’ man-db (current package name) - Update pandoc β†’ pandoc-cli (current package name) Configuration updates: - Enable topgrade git repo updates for ~/code/ only - Add inbox/ directory to .gitignore - Add TODO for rustup-based Rust installation πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-14fix(archsetup): prevent yay-debug package installation during yay buildCraig Jennings
Add --nodebug flag to makepkg command when building yay from source to prevent creation and installation of yay-debug package. This completes the --nodebug implementation started in the previous commit. πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-13fix(archsetup): implement critical bug fixes and test improvementsCraig Jennings
This commit addresses several high-priority bugs and enhances the testing infrastructure: **Bug Fixes:** 1. Add root permission check at script start to fail fast with clear error message 2. Disable debug package installation by adding --nodebug flag to all yay calls 3. Replace unsafe `git pull --force` with safe rm + fresh clone to prevent data loss 4. Add geoclue package with correct systemd service configuration for geolocation 5. Add completion marker for reliable automated test detection **Testing Infrastructure:** - Add comprehensive VM-based testing framework in scripts/testing/ - Fix test script pgrep infinite loop using grep bracket self-exclusion pattern - Add network diagnostics and pre-flight checks - Support snapshot-based testing for reproducible test runs **Package Management:** - Remove anki (build hangs 98+ minutes) - Remove adwaita-color-schemes (CMake build issues) Test Results: 0 errors, 1,363 packages installed in 40 minutes πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-10fix(archsetup): disable problematic slow packagesCraig Jennings
Temporarily disable anki and tageditor packages that cause excessive build times and failures during testing: - anki: hangs for 98+ minutes, missing .gitconfig during cargo build - tageditor: hangs indefinitely building qt5-webengine dependency These packages need to be fixed or replaced before re-enabling. πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-08fix(archsetup): correct invalid sudo syntax in yay installationCraig Jennings
Fixed critical bug at line 336 that blocked all AUR package installations. Changed invalid 'sudo -u $username -D $build_dir' to proper 'cd $build_dir && sudo -u $username' pattern. Also updated TODO.org: - Marked yay bug task as DONE - Created "Resolved Tasks" section - Moved completed task to archive with resolution notes πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-08feat: add zoxide smart directory navigationCraig Jennings
Add zoxide installation and configuration to archsetup: - Install zoxide via pacman in Developer Workstation section - Create .profile.d/zoxide.sh with zsh initialization - Alias cd to z for smart directory jumping based on usage patterns This enables automatic directory navigation learning across all fresh Arch installs. πŸ€– Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-06-09adding rofi to installCraig Jennings
2025-06-09removing vimix icons and gtk themes (unused)Craig Jennings
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-25 23:13:04 +0000