diff options
Diffstat (limited to '')
| -rw-r--r-- | .root/etc/cmdline.d/cpu.conf | 1 | ||||
| -rw-r--r-- | .root/etc/cmdline.d/look.conf | 1 | ||||
| -rw-r--r-- | .root/etc/cmdline.d/root.conf | 1 | ||||
| -rw-r--r-- | .root/etc/cmdline.d/virt.conf | 1 | ||||
| -rwxr-xr-x | .root/etc/initcpio/post/uki-sbsign | 15 | ||||
| -rw-r--r-- | .root/etc/makepkg.conf | 159 | ||||
| -rw-r--r-- | .root/etc/mkinitcpio.conf | 4 | ||||
| -rw-r--r-- | .root/etc/mkinitcpio.d/linux.preset | 16 | ||||
| -rw-r--r-- | .root/etc/pacman.d/hooks/uki.hook | 16 | ||||
| -rw-r--r-- | .root/etc/paru.conf | 39 | ||||
| -rw-r--r-- | aur | 30 | ||||
| -rw-r--r-- | packages | 157 |
12 files changed, 440 insertions, 0 deletions
diff --git a/.root/etc/cmdline.d/cpu.conf b/.root/etc/cmdline.d/cpu.conf new file mode 100644 index 0000000..5e26a2b --- /dev/null +++ b/.root/etc/cmdline.d/cpu.conf @@ -0,0 +1 @@ +amd_pstate=active and_pstate_epp=balance_power diff --git a/.root/etc/cmdline.d/look.conf b/.root/etc/cmdline.d/look.conf new file mode 100644 index 0000000..4c1901f --- /dev/null +++ b/.root/etc/cmdline.d/look.conf @@ -0,0 +1 @@ +loglevel=0 text bgrt_disable diff --git a/.root/etc/cmdline.d/root.conf b/.root/etc/cmdline.d/root.conf new file mode 100644 index 0000000..2b6b838 --- /dev/null +++ b/.root/etc/cmdline.d/root.conf @@ -0,0 +1 @@ +cryptdevice=UUID=3de30a89-17db-437f-825f-c0c1db71f026:cryptroot:discard root=/dev/mapper/cryptroot rw diff --git a/.root/etc/cmdline.d/virt.conf b/.root/etc/cmdline.d/virt.conf new file mode 100644 index 0000000..9b754f7 --- /dev/null +++ b/.root/etc/cmdline.d/virt.conf @@ -0,0 +1 @@ +amd_iommu=on diff --git a/.root/etc/initcpio/post/uki-sbsign b/.root/etc/initcpio/post/uki-sbsign new file mode 100755 index 0000000..eb34cd4 --- /dev/null +++ b/.root/etc/initcpio/post/uki-sbsign @@ -0,0 +1,15 @@ +#!/usr/bin/env bash + +uki="$3" +[[ -n "$uki" ]] || exit 0 + +keypairs=(/usr/share/secureboot/keys/db/db.key /usr/share/secureboot/keys/db/db.pem) + +for (( i=0; i<${#keypairs[@]}; i+=2 )); do + key="${keypairs[$i]}" + cert="${keypairs[(( i + 1))]}" + if ! sbverify --cert "$cert" "$uki" &>/dev/null; then + sbsign --key "$key" --cert "$cert" --output "$uki" "$uki" + fi +done + diff --git a/.root/etc/makepkg.conf b/.root/etc/makepkg.conf new file mode 100644 index 0000000..8a1324e --- /dev/null +++ b/.root/etc/makepkg.conf @@ -0,0 +1,159 @@ +#!/hint/bash +# +# /etc/makepkg.conf +# + +######################################################################### +# SOURCE ACQUISITION +######################################################################### +# +#-- The download utilities that makepkg should use to acquire sources +# Format: 'protocol::agent' +DLAGENTS=('file::/usr/bin/curl -qgC - -o %o %u' + 'ftp::/usr/bin/curl -qgfC - --ftp-pasv --retry 3 --retry-delay 3 -o %o %u' + 'http::/usr/bin/curl -qgb "" -fLC - --retry 3 --retry-delay 3 -o %o %u' + 'https::/usr/bin/curl -qgb "" -fLC - --retry 3 --retry-delay 3 -o %o %u' + 'rsync::/usr/bin/rsync --no-motd -z %u %o' + 'scp::/usr/bin/scp -C %u %o') + +# Other common tools: +# /usr/bin/snarf +# /usr/bin/lftpget -c +# /usr/bin/wget + +#-- The package required by makepkg to download VCS sources +# Format: 'protocol::package' +VCSCLIENTS=('bzr::breezy' + 'fossil::fossil' + 'git::git' + 'hg::mercurial' + 'svn::subversion') + +######################################################################### +# ARCHITECTURE, COMPILE FLAGS +######################################################################### +# +CARCH="x86_64" +CHOST="x86_64-pc-linux-gnu" + +#-- Compiler and Linker Flags +#CPPFLAGS="" +CFLAGS="-march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions \ + -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security \ + -fstack-clash-protection -fcf-protection" +CXXFLAGS="$CFLAGS -Wp,-D_GLIBCXX_ASSERTIONS" +LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now" +LTOFLAGS="-flto=auto" +#RUSTFLAGS="-C opt-level=2" +#-- Make Flags: change this for DistCC/SMP systems +MAKEFLAGS="-j16" +#-- Debugging flags +DEBUG_CFLAGS="-g" +DEBUG_CXXFLAGS="$DEBUG_CFLAGS" +#DEBUG_RUSTFLAGS="-C debuginfo=2" + +######################################################################### +# BUILD ENVIRONMENT +######################################################################### +# +# Makepkg defaults: BUILDENV=(!distcc !color !ccache check !sign) +# A negated environment option will do the opposite of the comments below. +# +#-- distcc: Use the Distributed C/C++/ObjC compiler +#-- color: Colorize output messages +#-- ccache: Use ccache to cache compilation +#-- check: Run the check() function if present in the PKGBUILD +#-- sign: Generate PGP signature file +# +BUILDENV=(!distcc color !ccache check !sign) +# +#-- If using DistCC, your MAKEFLAGS will also need modification. In addition, +#-- specify a space-delimited list of hosts running in the DistCC cluster. +#DISTCC_HOSTS="" +# +#-- Specify a directory for package building. +#BUILDDIR=/tmp/makepkg + +######################################################################### +# GLOBAL PACKAGE OPTIONS +# These are default values for the options=() settings +######################################################################### +# +# Makepkg defaults: OPTIONS=(!strip docs libtool staticlibs emptydirs !zipman !purge !debug !lto) +# A negated option will do the opposite of the comments below. +# +#-- strip: Strip symbols from binaries/libraries +#-- docs: Save doc directories specified by DOC_DIRS +#-- libtool: Leave libtool (.la) files in packages +#-- staticlibs: Leave static library (.a) files in packages +#-- emptydirs: Leave empty directories in packages +#-- zipman: Compress manual (man and info) pages in MAN_DIRS with gzip +#-- purge: Remove files specified by PURGE_TARGETS +#-- debug: Add debugging flags as specified in DEBUG_* variables +#-- lto: Add compile flags for building with link time optimization +# +OPTIONS=(strip docs !libtool !staticlibs emptydirs zipman purge !debug !lto) + +#-- File integrity checks to use. Valid: md5, sha1, sha224, sha256, sha384, sha512, b2 +INTEGRITY_CHECK=(sha256) +#-- Options to be used when stripping binaries. See `man strip' for details. +STRIP_BINARIES="--strip-all" +#-- Options to be used when stripping shared libraries. See `man strip' for details. +STRIP_SHARED="--strip-unneeded" +#-- Options to be used when stripping static libraries. See `man strip' for details. +STRIP_STATIC="--strip-debug" +#-- Manual (man and info) directories to compress (if zipman is specified) +MAN_DIRS=({usr{,/local}{,/share},opt/*}/{man,info}) +#-- Doc directories to remove (if !docs is specified) +DOC_DIRS=(usr/{,local/}{,share/}{doc,gtk-doc} opt/*/{doc,gtk-doc}) +#-- Files to be removed from all packages (if purge is specified) +PURGE_TARGETS=(usr/{,share}/info/dir .packlist *.pod) +#-- Directory to store source code in for debug packages +DBGSRCDIR="/usr/src/debug" + +######################################################################### +# PACKAGE OUTPUT +######################################################################### +# +# Default: put built package and cached source in build directory +# +#-- Destination: specify a fixed directory where all packages will be placed +#PKGDEST=/home/packages +#-- Source cache: specify a fixed directory where source files will be cached +#SRCDEST=/home/sources +#-- Source packages: specify a fixed directory where all src packages will be placed +#SRCPKGDEST=/home/srcpackages +#-- Log files: specify a fixed directory where all log files will be placed +#LOGDEST=/home/makepkglogs +#-- Packager: name/email of the person or organization building packages +#PACKAGER="John Doe <john@doe.com>" +#-- Specify a key to use for package signing +#GPGKEY="" + +######################################################################### +# COMPRESSION DEFAULTS +######################################################################### +# +COMPRESSGZ=(gzip -c -f -n) +COMPRESSBZ2=(bzip2 -c -f) +COMPRESSXZ=(xz -c -z -) +COMPRESSZST=(zstd -c -z -q -) +COMPRESSLRZ=(lrzip -q) +COMPRESSLZO=(lzop -q) +COMPRESSZ=(compress -c -f) +COMPRESSLZ4=(lz4 -q) +COMPRESSLZ=(lzip -c -f) + +######################################################################### +# EXTENSION DEFAULTS +######################################################################### +# +PKGEXT='.pkg.tar.zst' +SRCEXT='.src.tar.gz' + +######################################################################### +# OTHER +######################################################################### +# +#-- Command used to run pacman as root, instead of trying sudo and su +PACMAN_AUTH=(doas) diff --git a/.root/etc/mkinitcpio.conf b/.root/etc/mkinitcpio.conf new file mode 100644 index 0000000..e846fe4 --- /dev/null +++ b/.root/etc/mkinitcpio.conf @@ -0,0 +1,4 @@ +MODULES=(vfio_pci vfio_iommu_type1 vfio) +BINARIES=() +FILES=() +HOOKS=(base udev autodetect microcode modconf kms keyboard keymap block tpm2 encrypt filesystems fsck) diff --git a/.root/etc/mkinitcpio.d/linux.preset b/.root/etc/mkinitcpio.d/linux.preset new file mode 100644 index 0000000..d093779 --- /dev/null +++ b/.root/etc/mkinitcpio.d/linux.preset @@ -0,0 +1,16 @@ +# mkinitcpio preset file for the 'linux' package + +#ALL_config="/etc/mkinitcpio.conf" +ALL_kver="/boot/vmlinuz-linux" + +PRESETS=('default' 'fallback') + +#default_config="/etc/mkinitcpio.conf" +#default_image="/boot/initramfs-linux.img" +default_uki="/boot/efi/EFI/Linux/arch-linux.efi" +#default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp" + +#fallback_config="/etc/mkinitcpio.conf" +#fallback_image="/boot/initramfs-linux-fallback.img" +fallback_uki="/boot/efi/EFI/Linux/arch-linux-fallback.efi" +fallback_options="-S autodetect" diff --git a/.root/etc/pacman.d/hooks/uki.hook b/.root/etc/pacman.d/hooks/uki.hook new file mode 100644 index 0000000..3ca2bf8 --- /dev/null +++ b/.root/etc/pacman.d/hooks/uki.hook @@ -0,0 +1,16 @@ +[Trigger] +Operation=Install +Operation=Upgrade +Operation=Remove +Type=Package +Target=amd-ucode +Target=linux +Target=linux-lts + +[Action] +Description=Update Kernel and Microcode in initramfs +Depends=mkinitcpio +When=PostTransaction +NeedsTargets +Exec=/bin/sh -c 'while read -r trg; do case $trg in linux) exit 0; esac; done; /usr/bin/mkinitcpio -P' + diff --git a/.root/etc/paru.conf b/.root/etc/paru.conf new file mode 100644 index 0000000..42be879 --- /dev/null +++ b/.root/etc/paru.conf @@ -0,0 +1,39 @@ +# +# $PARU_CONF +# /etc/paru.conf +# ~/.config/paru/paru.conf +# +# See the paru.conf(5) manpage for options + +# +# GENERAL OPTIONS +# +[options] +PgpFetch +Devel +Provides +DevelSuffixes = -git -cvs -svn -bzr -darcs -always -hg -fossil +#AurOnly +#BottomUp +#RemoveMake +#SudoLoop +#UseAsk +#SaveChanges +#CombinedUpgrade +#CleanAfter +#UpgradeMenu +#NewsOnUpgrade + +#LocalRepo +#Chroot +#Sign +#SignDb +#KeepRepoCache + +# +# Binary OPTIONS +# +[bin] +#FileManager = vifm +#MFlags = --skippgpcheck +Sudo = doas @@ -0,0 +1,30 @@ +autotiling +bento4 +cider-bin +flashplayer-standalone +gconf +gleam +hyprlock-git +i686-elf-gcc +icecast +librewolf-bin +mkinitcpio-firmware +nwg-displays +pandoc-bin +paru +pfetch-rs +prismlauncher-qt5-bin +python-eyed3 +qt5-styleplugins +qt6gtk2 +rebar3 +ruffle-git +swayfx +swaylock-effects +ttf-twemoji-color +units +unofficial-homestuck-collection-bin +uwuify +vencord-installer-cli-bin +wd719x-firmware +wl-clip-persist-git diff --git a/packages b/packages new file mode 100644 index 0000000..2b4247c --- /dev/null +++ b/packages @@ -0,0 +1,157 @@ +acpi +alsa-tools +alsa-utils +amd-ucode +android-tools +base +base-devel +bcachefs-tools +bind +blueberry +bluez-utils +brightnessctl +caddy +cage +chromium +chrony +clang +cpupower +cups +cups-pdf +discord +docker +docker-compose +easyeffects +efibootmgr +element-desktop +elixir +evtest +figlet +flatpak +fontforge +freealut +gajim +gdb +gdu +gimp +git +gnome-keyring +gnome-themes-extra +gnu-netcat +gradle +grim +grub +gsound +gst-libav +gst-plugins-bad +gst-plugins-ugly +highlight +htop +hypridle +hyprland +hyprpaper +imv +jdk-openjdk +jdk8-openjdk +jq +kitty +less +lib32-gst-plugins-base +lib32-gst-plugins-base-libs +lib32-gst-plugins-good +lib32-vulkan-radeon +libvirt +linux +linux-firmware +linux-headers +lynx +mako +man-db +man-pages +maven +mpv +mtools +nasm +neofetch +neovim +network-manager-applet +networkmanager +networkmanager-openvpn +nmap +nodejs +noto-fonts-cjk +npm +nvme-cli +nwg-look +openal +opendoas +openldap +p7zip +pacman-contrib +parallel +pavucontrol +perl-image-exiftool +pipewire-alsa +pipewire-pulse +polkit-gnome +python-pip +python-pynvim +python-yaml +qbittorrent +qemu-full +qt5-wayland +qt6ct +ranger +ripgrep +rlwrap +rsync +rustup +sassc +sbctl +sbsigntools +shellcheck +sl +slurp +smartmontools +sof-firmware +sshfs +starship +steam +strace +swaybg +swayidle +syncthing +thunderbird +tlp +tpm2-tools +traceroute +tree +ttf-dejavu +ttf-fira-code +ufw +unzip +valgrind +virt-manager +vulkan-radeon +vulkan-tools +vulkan-validation-layers +waybar +weechat +wget +wine-staging +winetricks +wireguard-tools +wl-clipboard +wl-mirror +wofi +xcur2png +xdg-desktop-portal +xdg-desktop-portal-gtk +xdg-desktop-portal-hyprland +xorg-xwayland +yt-dlp +zathura +zathura-pdf-mupdf +zip +zsh +zsh-syntax-highlighting |