add customizations, track testing

etc/krb5.conf.d/CC_IN2P3_FR

@@ -0,0 +1,11 @@
+[realms]
+    CC.IN2P3.FR = {
+        default_domain  = idm.cc.in2p3.fr
+        kpasswd_server  = ccidm01.in2p3.fr
+        admin_server    = ccidm01.in2p3.fr
+        kdc             = ccidm01.in2p3.fr:88
+        kdc             = ccidm02.in2p3.fr:88
+        kdc             = ccidm03.in2p3.fr:88
+        kdc             = ccidm04.in2p3.fr:88
+    }
+

etc/polkit-1/rules.d/49-nopasswd_global.rules

@@ -0,0 +1,9 @@
+/* Allow members of the wheel group to execute any actions
+ * without password authentication, similar to "sudo NOPASSWD:"
+ */
+polkit.addRule(function(action, subject) {
+    if (subject.isInGroup("wheel")) {
+        return polkit.Result.YES;
+    }
+});
+

etc/rpm-ostreed.conf

@@ -0,0 +1,9 @@
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# For option meanings, see rpm-ostreed.conf(5).
+
+[Daemon]
+#AutomaticUpdatePolicy=none
+#IdleExitTimeout=60
+#LockLayering=false
+AutomaticUpdatePolicy=stage

etc/ssh/sshd_config.d/40-nopassword.conf

@@ -0,0 +1 @@
+PasswordAuthentication no

etc/systemd/system.conf.d/accounting.conf

@@ -0,0 +1,4 @@
+[Manager]
+DefaultIOAccounting=yes
+DefaultIPAccounting=yes
+

etc/udev/rules.d/keyboard.rules

@@ -0,0 +1,2 @@
+ACTION=="add", SUBSYSTEM=="usb", DRIVERS=="usb", ATTRS{idVendor}=="1a81", ATTRS{idProduct}=="1202", ATTR{power/wakeup}="disabled"
+

etc/udev/rules.d/logitech-unifying.rules

@@ -0,0 +1,2 @@
+ACTION=="add", SUBSYSTEM=="usb", DRIVERS=="usb", ATTRS{idVendor}=="046d", ATTRS{idProduct}=="c52b", ATTR{power/wakeup}="disabled"
+

etc/udev/rules.d/nvme-usb.rules

@@ -0,0 +1 @@
+ACTION=="add|change", ATTRS{idVendor}=="174c", ATTRS{idProduct}=="2362", SUBSYSTEM=="scsi_disk", ATTR{provisioning_mode}="unmap"

etc/udev/rules.d/rtl-sdr.rules

@@ -0,0 +1,146 @@
+#
+# Copyright 2012-2013 Osmocom rtl-sdr project
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+
+# original RTL2832U vid/pid (hama nano, for example)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0bda", ATTRS{idProduct}=="2832", MODE:="0666"
+
+# modified RTL2832U vid/pid .. not known to dvb modules
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1209", ATTRS{idProduct}=="2832", MODE:="0666"
+
+# RTL2832U OEM vid/pid, e.g. ezcap EzTV668 (E4000), Newsky TV28T (E4000/R820T) etc.
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0bda", ATTRS{idProduct}=="2838", MODE:="0666"
+
+# DigitalNow Quad DVB-T PCI-E card (4x FC0012?)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0413", ATTRS{idProduct}=="6680", MODE:="0666"
+
+# Leadtek WinFast DTV Dongle mini D (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0413", ATTRS{idProduct}=="6f0f", MODE:="0666"
+
+# Genius TVGo DVB-T03 USB dongle (Ver. B)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0458", ATTRS{idProduct}=="707f", MODE:="0666"
+
+# Terratec Cinergy T Stick Black (rev 1) (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00a9", MODE:="0666"
+
+# Terratec NOXON rev 1 (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00b3", MODE:="0666"
+
+# Terratec Deutschlandradio DAB Stick (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00b4", MODE:="0666"
+
+# Terratec NOXON DAB Stick - Radio Energy (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00b5", MODE:="0666"
+
+# Terratec Media Broadcast DAB Stick (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00b7", MODE:="0666"
+
+# Terratec BR DAB Stick (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00b8", MODE:="0666"
+
+# Terratec WDR DAB Stick (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00b9", MODE:="0666"
+
+# Terratec MuellerVerlag DAB Stick (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00c0", MODE:="0666"
+
+# Terratec Fraunhofer DAB Stick (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00c6", MODE:="0666"
+
+# Terratec Cinergy T Stick RC (Rev.3) (E4000)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00d3", MODE:="0666"
+
+# Terratec T Stick PLUS (E4000)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00d7", MODE:="0666"
+
+# Terratec NOXON rev 2 (E4000)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="0ccd", ATTRS{idProduct}=="00e0", MODE:="0666"
+
+# PixelView PV-DT235U(RN) (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1554", ATTRS{idProduct}=="5020", MODE:="0666"
+
+# Astrometa DVB-T/DVB-T2 (R828D)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="15f4", ATTRS{idProduct}=="0131", MODE:="0666"
+
+# HanfTek DAB+FM+DVB-T
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="15f4", ATTRS{idProduct}=="0133", MODE:="0666"
+
+# Compro Videomate U620F (E4000)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="185b", ATTRS{idProduct}=="0620", MODE:="0666"
+
+# Compro Videomate U650F (E4000)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="185b", ATTRS{idProduct}=="0650", MODE:="0666"
+
+# Compro Videomate U680F (E4000)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="185b", ATTRS{idProduct}=="0680", MODE:="0666"
+
+# GIGABYTE GT-U7300 (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d393", MODE:="0666"
+
+# DIKOM USB-DVBT HD
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d394", MODE:="0666"
+
+# Peak 102569AGPK (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d395", MODE:="0666"
+
+# KWorld KW-UB450-T USB DVB-T Pico TV (TUA9001)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d397", MODE:="0666"
+
+# Zaapa ZT-MINDVBZP (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d398", MODE:="0666"
+
+# SVEON STV20 DVB-T USB & FM (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d39d", MODE:="0666"
+
+# Twintech UT-40 (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d3a4", MODE:="0666"
+
+# ASUS U3100MINI_PLUS_V2 (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d3a8", MODE:="0666"
+
+# SVEON STV27 DVB-T USB & FM (FC0013)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d3af", MODE:="0666"
+
+# SVEON STV21 DVB-T USB & FM
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b80", ATTRS{idProduct}=="d3b0", MODE:="0666"
+
+# Dexatek DK DVB-T Dongle (Logilink VG0002A) (FC2580)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1d19", ATTRS{idProduct}=="1101", MODE:="0666"
+
+# Dexatek DK DVB-T Dongle (MSI DigiVox mini II V3.0)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1d19", ATTRS{idProduct}=="1102", MODE:="0666"
+
+# Dexatek DK 5217 DVB-T Dongle (FC2580)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1d19", ATTRS{idProduct}=="1103", MODE:="0666"
+
+# MSI DigiVox Micro HD (FC2580)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1d19", ATTRS{idProduct}=="1104", MODE:="0666"
+
+# Sweex DVB-T USB (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1f4d", ATTRS{idProduct}=="a803", MODE:="0666"
+
+# GTek T803 (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1f4d", ATTRS{idProduct}=="b803", MODE:="0666"
+
+# Lifeview LV5TDeluxe (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1f4d", ATTRS{idProduct}=="c803", MODE:="0666"
+
+# MyGica TD312 (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1f4d", ATTRS{idProduct}=="d286", MODE:="0666"
+
+# PROlectrix DV107669 (FC0012)
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="1f4d", ATTRS{idProduct}=="d803", MODE:="0666"
+

etc/udev/rules.d/wd-disk.rules

@@ -0,0 +1 @@
+ACTION=="add|change", ATTRS{idVendor}=="1058", ATTRS{idProduct}=="25e2", SUBSYSTEM=="scsi_disk", ATTR{provisioning_mode}="unmap"

fedora-39-updates-testing.repo

@@ -0,0 +1,6 @@
+[fedora-39-updates-testing]
+name=Fedora 39 $basearch Updates
+mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f39&arch=$basearch
+enabled=1
+gpgcheck=1
+metadata_expire=1d

fedora-common-ostree-pkgs.yaml

@@ -60,7 +60,6 @@ packages:
   - fedora-workstation-repositories
   - file
   - filesystem
-  - firefox
   - firewalld
   - fpaste
   - fros-gnome
@@ -136,7 +135,6 @@ packages:
   - policycoreutils-python-utils
   - procps-ng
   - psmisc
-  - qemu-guest-agent
   - qt5-qtbase
   - qt5-qtbase-gui
   - qt5-qtdeclarative
@@ -152,8 +150,6 @@ packages:
   - setup
   - shadow-utils
   - sos
-  - spice-vdagent
-  - spice-webdavd
   - sssd
   - sssd-common
   - sssd-kcm
@@ -184,15 +180,10 @@ packages:
 packages-x86_64:
   - alsa-sof-firmware
   - amd-ucode-firmware
-  - hyperv-daemons
   - mcelog
   - microcode_ctl
-  - open-vm-tools-desktop
   - thermald
-  - virtualbox-guest-additions
 packages-aarch64:
-  - hyperv-daemons
-  - open-vm-tools-desktop
   - qcom-firmware
 packages-ppc64le:
   - lsvpd

karuboniru-packages.yaml

@@ -0,0 +1,55 @@
+include: fedora-silverblue.yaml
+ref: fedora/39/${basearch}/karuboniru-silverblue
+rojig:
+  name: fedora-silverblue
+  summary: "Fedora Silverblue base image"
+  license: MIT
+
+packages:
+  - fcitx5
+  - fcitx5-autostart
+  - fcitx5-chinese-addons
+  - fcitx5-configtool
+  - fcitx5-gtk
+  - fcitx5-mozc
+  - fcitx5-qt
+  - zsh
+  - htop
+  - wireguard-tools
+  - systemd-container
+
+repos:
+  - fedora-39
+  - fedora-39-updates
+  - fedora-39-updates-testing
+
+postprocess:
+  - |
+    systemctl enable sshd.socket
+    systemctl enable rpm-ostreed-automatic.timer
+
+add-files:
+  [
+    [
+      "./etc/systemd/system.conf.d/accounting.conf",
+      /etc/systemd/system.conf.d/accounting.conf",
+    ],
+    ["./etc/udev/rules.d/keyboard.rules", "/etc/udev/rules.d/keyboard.rules"],
+    [
+      "./etc/udev/rules.d/logitech-unifying.rules",
+      "/etc/udev/rules.d/logitech-unifying.rules",
+    ],
+    ["./etc/udev/rules.d/nvme-usb.rules", "/etc/udev/rules.d/nvme-usb.rules"],
+    ["./etc/udev/rules.d/rtl-sdr.rules", "/etc/udev/rules.d/rtl-sdr.rules"],
+    ["./etc/udev/rules.d/wd-disk.rules", "/etc/udev/rules.d/wd-disk.rules"],
+    [
+      "./etc/polkit-1/rules.d/49-nopasswd_global.rules",
+      /etc/polkit-1/rules.d/49-nopasswd_global.rules,
+    ],
+    ["./etc/krb5.conf.d/CC_IN2P3_FR", "/etc/krb5.conf.d/CC_IN2P3_FR"],
+    [
+      "./etc/ssh/sshd_config.d/40-nopassword.conf",
+      "/etc/ssh/sshd_config.d/40-nopassword.conf",
+    ],
+    ["./etc/rpm-ostreed.conf", "/etc/rpm-ostreed.conf"],
+  ]