Bunch of fixes

This commit is contained in:
Aleksey Samoilov 2025-06-21 00:23:30 +04:00
parent 8622a82185
commit ab3b379487
20 changed files with 488 additions and 99 deletions

View file

@ -1,11 +1,2 @@
---
mountOptions:
default: defaults,noatime
btrfs: defaults,noatime
ssdExtraMountOptions:
ext4: discard
jfs: discard
xfs: discard
swap: discard
btrfs: discard,compress=lzo
crypttabOptions: luks,discard,keyscript=/bin/cat
crypttabOptions: luks,keyscript=/bin/cat
efiMountOptions: umask=0077

View file

@ -5,7 +5,7 @@ systemd: true
dbus: true
# Whether /var/lib/dbus/machine-id should be a symlink to /etc/machine-id
# (ignored if dbus is false, or if there is no /etc/machine-id to point to).
symlink: true
dbus-symlink: true
# Whether to copy entropy from the host
entropy-copy: true
# Which files to write (paths in the target)

View file

@ -38,7 +38,21 @@ extraMounts:
fs: efivarfs
mountPoint: /sys/firmware/efi/efivars
efi: true
- device: /dev/pts
mountPoint: /dev/pts
- device: /run/systemd/resolve
mountPoint: /run/systemd/resolve
options: [ bind ]
# /dev/pts is required by apt for storing the logs
mountOptions:
- filesystem: default
options: [ defaults ]
- filesystem: btrfs
options: [ defaults, noatime, autodefrag ]
ssdOptions: [ discard, compress=lzo ]
- filesystem: ext4
ssdOptions: [ discard ]
- filesystem: jfs
ssdOptions: [ discard ]
- filesystem: xfs
ssdOptions: [ discard ]
- filesystem: swap
ssdOptions: [ discard ]

6
debian/control vendored
View file

@ -78,8 +78,14 @@ Depends: calamares,
rsync,
cryptsetup,
libglib2.0-bin,
kdialog,
keyutils,
lvm2,
pkexec,
python3-distro,
python3-toml,
qml6-module-qtquick-window,
qml6-module-qtquick,
qml-module-qtquick-window2,
qml-module-qtquick2,
${misc:Depends}

1
debian/rules vendored
View file

@ -15,6 +15,7 @@ override_dh_missing:
mkdir -pv debian/calamares-settings-tileos-common/etc/calamares/modules
mkdir -pv debian/calamares-settings-tileos-common/usr/sbin
cp -vr common/modules/*.conf debian/calamares-settings-tileos-common/etc/calamares/modules
cp -vr common/modules/*.yaml debian/calamares-settings-tileos-common/etc/calamares/modules
mkdir -pv debian/calamares-settings-tileos-common/usr/share/calamares/helpers
cp -vr helpers/* debian/calamares-settings-tileos-common/usr/share/calamares/helpers
chmod -R 755 debian/calamares-settings-tileos-common/usr/lib/

View file

@ -24,6 +24,6 @@ slideshow: "show.qml"
style:
SidebarBackground: "#1e2030"
SidebarText: "#cad3f5"
SidebarTextSelect: "#24273a"
SidebarTextCurrent: "#24273a"
slideshowAPI: 2

View file

@ -1,6 +1,21 @@
efiSystemPartition: "/boot/efi"
enableLuksAutomatedPartitioning: true
luksGeneration: luks2
userSwapChoices:
- none
- file
initialSwapChoice: none
drawNestedPartitions: true
defaultFileSystemType: "ext4"
availableFileSystemTypes: ["ext4","btrfs","xfs"]
partitionLayout:
- name: "tileos_boot"
filesystem: ext4
noEncrypt: true
onlyPresentWithEncryption: true
mountPoint: "/boot"
size: 4G
- name: "tileos_rootfs"
filesystem: unknown
mountPoint: "/"
size: 100%

View file

@ -1,17 +1,78 @@
---
userGroup: users
defaultGroups:
- cdrom
- floppy
- sudo
- audio
- dip
- video
- plugdev
- netdev
- lpadmin
- scanner
- bluetooth
autologinGroup: autologin
sudoersGroup: sudo
doAutologin: false
setRootPassword: false
sudoersGroup: sudo
defaultGroups:
- adm
- cdrom
- dip
- lpadmin
- plugdev
- name: sambashare
must_exist: false
system: true
- sudo
- video
passwordRequirements:
minLength: 8
maxLength: -1
libpwquality:
- minlen=8
- maxrepeat=3
- maxsequence=3
- usersubstr=4
- badwords=linux
allowWeakPasswords: false
allowWeakPasswordsDefault: false
# Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here.
user:
shell: /bin/bash
forbidden_names:
- root
- nginx
- www-data
- daemon
- bin
- sys
- sync
- games
- man
- lp
- mail
- news
- uucp
- proxy
- www-data
- backup
- list
- irc
- apt
- nobody
- systemd-network
- systemd-timesync
- dhcpcd
- messagebus
- syslog
- systemd-resolve
- usbmux
- tss
- uuidd
- whoopsie
- dnsmasq
- avahi
- nm-openvpn
- tcpdump
- speech-dispatcher
- cups-pk-helper
- fwupd-refresh
- sddm
- saned
- cups-browsed
- hplip
- polkitd
- rtkit
- colord
- geoclue
- installer
allowActiveDirectory: true

View file

@ -22,9 +22,8 @@ images:
slideshow: "show.qml"
style:
sidebarBackground: "#1e2030"
sidebarText: "#cad3f5"
sidebarTextSelect: "#24273a"
sidebarTextSelect: "#24273a"
SidebarBackground: "#1e2030"
SidebarText: "#cad3f5"
SidebarTextCurrent: "#24273a"
slideshowAPI: 2

View file

@ -1,6 +1,21 @@
efiSystemPartition: "/boot/efi"
enableLuksAutomatedPartitioning: true
luksGeneration: luks2
userSwapChoices:
- none
- file
initialSwapChoice: none
drawNestedPartitions: true
defaultFileSystemType: "ext4"
availableFileSystemTypes: ["ext4","btrfs","xfs"]
partitionLayout:
- name: "tileos_boot"
filesystem: ext4
noEncrypt: true
onlyPresentWithEncryption: true
mountPoint: "/boot"
size: 4G
- name: "tileos_rootfs"
filesystem: unknown
mountPoint: "/"
size: 100%

View file

@ -1,17 +1,78 @@
---
userGroup: users
defaultGroups:
- cdrom
- floppy
- sudo
- audio
- dip
- video
- plugdev
- netdev
- lpadmin
- scanner
- bluetooth
autologinGroup: autologin
sudoersGroup: sudo
doAutologin: false
setRootPassword: false
sudoersGroup: sudo
defaultGroups:
- adm
- cdrom
- dip
- lpadmin
- plugdev
- name: sambashare
must_exist: false
system: true
- sudo
- video
passwordRequirements:
minLength: 8
maxLength: -1
libpwquality:
- minlen=8
- maxrepeat=3
- maxsequence=3
- usersubstr=4
- badwords=linux
allowWeakPasswords: false
allowWeakPasswordsDefault: false
# Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here.
user:
shell: /bin/bash
forbidden_names:
- root
- nginx
- www-data
- daemon
- bin
- sys
- sync
- games
- man
- lp
- mail
- news
- uucp
- proxy
- www-data
- backup
- list
- irc
- apt
- nobody
- systemd-network
- systemd-timesync
- dhcpcd
- messagebus
- syslog
- systemd-resolve
- usbmux
- tss
- uuidd
- whoopsie
- dnsmasq
- avahi
- nm-openvpn
- tcpdump
- speech-dispatcher
- cups-pk-helper
- fwupd-refresh
- sddm
- saned
- cups-browsed
- hplip
- polkitd
- rtkit
- colord
- geoclue
- installer
allowActiveDirectory: true

View file

@ -24,6 +24,6 @@ slideshow: "show.qml"
style:
SidebarBackground: "#1e2030"
SidebarText: "#cad3f5"
SidebarTextSelect: "#24273a"
SidebarTextCurrent: "#24273a"
slideshowAPI: 2

View file

@ -1,8 +1,21 @@
efiSystemPartition: "/boot/efi"
enableLuksAutomatedPartitioning: true
luksGeneration: luks2
userSwapChoices:
- none
- file
initialSwapChoice: file
initialSwapChoice: none
drawNestedPartitions: true
defaultFileSystemType: "ext4"
availableFileSystemTypes: ["ext4","btrfs","xfs"]
partitionLayout:
- name: "tileos_boot"
filesystem: ext4
noEncrypt: true
onlyPresentWithEncryption: true
mountPoint: "/boot"
size: 4G
- name: "tileos_rootfs"
filesystem: unknown
mountPoint: "/"
size: 100%

View file

@ -1,17 +1,78 @@
---
userGroup: users
defaultGroups:
- cdrom
- floppy
- sudo
- audio
- dip
- video
- plugdev
- netdev
- lpadmin
- scanner
- bluetooth
autologinGroup: autologin
sudoersGroup: sudo
doAutologin: false
setRootPassword: false
sudoersGroup: sudo
defaultGroups:
- adm
- cdrom
- dip
- lpadmin
- plugdev
- name: sambashare
must_exist: false
system: true
- sudo
- video
passwordRequirements:
minLength: 8
maxLength: -1
libpwquality:
- minlen=8
- maxrepeat=3
- maxsequence=3
- usersubstr=4
- badwords=linux
allowWeakPasswords: false
allowWeakPasswordsDefault: false
# Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here.
user:
shell: /bin/bash
forbidden_names:
- root
- nginx
- www-data
- daemon
- bin
- sys
- sync
- games
- man
- lp
- mail
- news
- uucp
- proxy
- www-data
- backup
- list
- irc
- apt
- nobody
- systemd-network
- systemd-timesync
- dhcpcd
- messagebus
- syslog
- systemd-resolve
- usbmux
- tss
- uuidd
- whoopsie
- dnsmasq
- avahi
- nm-openvpn
- tcpdump
- speech-dispatcher
- cups-pk-helper
- fwupd-refresh
- sddm
- saned
- cups-browsed
- hplip
- polkitd
- rtkit
- colord
- geoclue
- installer
allowActiveDirectory: true

View file

@ -24,6 +24,6 @@ slideshow: "show.qml"
style:
SidebarBackground: "#1e2030"
SidebarText: "#cad3f5"
SidebarTextSelect: "#24273a"
SidebarTextCurrent: "#24273a"
slideshowAPI: 2

View file

@ -1,6 +1,21 @@
efiSystemPartition: "/boot/efi"
enableLuksAutomatedPartitioning: true
luksGeneration: luks2
userSwapChoices:
- none
- file
initialSwapChoice: none
drawNestedPartitions: true
defaultFileSystemType: "ext4"
availableFileSystemTypes: ["ext4","btrfs","xfs"]
partitionLayout:
- name: "tileos_boot"
filesystem: ext4
noEncrypt: true
onlyPresentWithEncryption: true
mountPoint: "/boot"
size: 4G
- name: "tileos_rootfs"
filesystem: unknown
mountPoint: "/"
size: 100%

View file

@ -1,17 +1,78 @@
---
userGroup: users
defaultGroups:
- cdrom
- floppy
- sudo
- audio
- dip
- video
- plugdev
- netdev
- lpadmin
- scanner
- bluetooth
autologinGroup: autologin
sudoersGroup: sudo
doAutologin: false
setRootPassword: false
sudoersGroup: sudo
defaultGroups:
- adm
- cdrom
- dip
- lpadmin
- plugdev
- name: sambashare
must_exist: false
system: true
- sudo
- video
passwordRequirements:
minLength: 8
maxLength: -1
libpwquality:
- minlen=8
- maxrepeat=3
- maxsequence=3
- usersubstr=4
- badwords=linux
allowWeakPasswords: false
allowWeakPasswordsDefault: false
# Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here.
user:
shell: /bin/bash
forbidden_names:
- root
- nginx
- www-data
- daemon
- bin
- sys
- sync
- games
- man
- lp
- mail
- news
- uucp
- proxy
- www-data
- backup
- list
- irc
- apt
- nobody
- systemd-network
- systemd-timesync
- dhcpcd
- messagebus
- syslog
- systemd-resolve
- usbmux
- tss
- uuidd
- whoopsie
- dnsmasq
- avahi
- nm-openvpn
- tcpdump
- speech-dispatcher
- cups-pk-helper
- fwupd-refresh
- sddm
- saned
- cups-browsed
- hplip
- polkitd
- rtkit
- colord
- geoclue
- installer
allowActiveDirectory: true

View file

@ -24,6 +24,6 @@ slideshow: "show.qml"
style:
SidebarBackground: "#1e2030"
SidebarText: "#cad3f5"
SidebarTextSelect: "#24273a"
SidebarTextCurrent: "#24273a"
slideshowAPI: 2

View file

@ -1,6 +1,21 @@
efiSystemPartition: "/boot/efi"
enableLuksAutomatedPartitioning: true
luksGeneration: luks2
userSwapChoices:
- none
- file
initialSwapChoice: none
drawNestedPartitions: true
defaultFileSystemType: "ext4"
availableFileSystemTypes: ["ext4","btrfs","xfs"]
partitionLayout:
- name: "tileos_boot"
filesystem: ext4
noEncrypt: true
onlyPresentWithEncryption: true
mountPoint: "/boot"
size: 4G
- name: "tileos_rootfs"
filesystem: unknown
mountPoint: "/"
size: 100%

View file

@ -1,17 +1,78 @@
---
userGroup: users
defaultGroups:
- cdrom
- floppy
- sudo
- audio
- dip
- video
- plugdev
- netdev
- lpadmin
- scanner
- bluetooth
autologinGroup: autologin
sudoersGroup: sudo
doAutologin: false
setRootPassword: false
sudoersGroup: sudo
defaultGroups:
- adm
- cdrom
- dip
- lpadmin
- plugdev
- name: sambashare
must_exist: false
system: true
- sudo
- video
passwordRequirements:
minLength: 8
maxLength: -1
libpwquality:
- minlen=8
- maxrepeat=3
- maxsequence=3
- usersubstr=4
- badwords=linux
allowWeakPasswords: false
allowWeakPasswordsDefault: false
# Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here.
user:
shell: /bin/bash
forbidden_names:
- root
- nginx
- www-data
- daemon
- bin
- sys
- sync
- games
- man
- lp
- mail
- news
- uucp
- proxy
- www-data
- backup
- list
- irc
- apt
- nobody
- systemd-network
- systemd-timesync
- dhcpcd
- messagebus
- syslog
- systemd-resolve
- usbmux
- tss
- uuidd
- whoopsie
- dnsmasq
- avahi
- nm-openvpn
- tcpdump
- speech-dispatcher
- cups-pk-helper
- fwupd-refresh
- sddm
- saned
- cups-browsed
- hplip
- polkitd
- rtkit
- colord
- geoclue
- installer
allowActiveDirectory: true