Commit graph

432 commits

Author SHA1 Message Date
Pig Monkey
f1b742c6e7 move bluetooth masking to bluetooth role 2017-01-14 17:47:34 -08:00
Pig Monkey
944128e07a Merge branch 'master' into pulse 2017-01-11 21:23:09 -08:00
Pig Monkey
7e2265aaaf install AUR fonts
Ok, I give in. AUR all the things.
2017-01-11 21:21:15 -08:00
Pig Monkey
7022ad8036 install fonts and force substitutions
local.conf from
https://gist.github.com/cryzed/4f64bb79e80d619866ee0b18ba2d32fc

I'm avoiding installing the various AUR fonts for the time being.
2017-01-11 21:04:02 -08:00
Pig Monkey
406d0e6ae7 remove font role dependency
Depending on base is not actually all that useful, and just slows down
running this specific role via a tag.
2017-01-11 20:59:56 -08:00
Pig Monkey
e9f270df66 specify full path to links 2017-01-11 20:27:57 -08:00
Pig Monkey
41692255db enable lcd filter, subpixel rendering, and hinting 2017-01-11 20:10:06 -08:00
Pig Monkey
e4acf724ca install basic font packages 2017-01-11 20:06:27 -08:00
Pig Monkey
74a2578f07 remove infinality
Infinality is broken and no longer needed. Existing users will need to
remove it[1]. Short version:

1) Remove the infinality repo from /etc/pacman.conf
2) Install the proper core packages, answering yes when prompted if you
want to remove the old infinality packages.
    # pacman -Syy freetype2 cairo fontconfig
3) Remove the 4 dead symlinks in /etc/fonts/conf.d

[1] https://gist.github.com/cryzed/e002e7057435f02cc7894b9e748c5671
2017-01-11 20:03:37 -08:00
Pig Monkey
4a8597e4de install screen
sometimes you just gotta connect to a serial console or three
2017-01-03 15:02:29 -08:00
Pig Monkey
6ac5c0a40d install pulseaudio-ctl 2016-12-31 13:20:07 -08:00
Pig Monkey
e4f4159245 remove old alsa files 2016-12-30 17:54:48 -08:00
Pig Monkey
50749e427e remove volwheel
Existing users can uninstall this if they want. Or not.

    # pacman --remove --nosave --recursive volwheel
2016-12-30 17:34:22 -08:00
Pig Monkey
3e456a6b3b install pulse gui 2016-12-30 17:33:23 -08:00
Pig Monkey
bee218efb9 install pulseaudio
Existing users will want to remove the old udev rule for device
switching, and the /etc/asound.conf file it generated.

    # rm /etc/udev/rules.d/00-local.rules
    # rm /etc/asound.conf

A new /etc/asound.conf is provided by the pulseaudio-alsa package. If
our old file is not removed prior to installation, the new file will be
installed at /etc/asound.conf.pacnew. This will need to be moved to the
proper location.
2016-12-30 17:20:55 -08:00
Pig Monkey
f37266f7f0 explicitly include magic-wormhole AUR deps
closes #39
2016-12-29 19:09:18 -08:00
Pig Monkey
5dfabf7716 add base-devel to base packages
closes #40
2016-12-29 19:04:37 -08:00
Pig Monkey
b7e60f6d4a unjail mutt
Firejail won't run jails inside of other firejails, which means that if
I jail Mutt I can't use firewarden in my mailcap to open attachments.
Mutt doesn't do a whole lot itself, and even when it is jailed, my mail
is synced outside of the Mutt jail via the systemd timer. So I think I'd
rather be able to use firewaden in my mailcap.
2016-12-29 18:56:15 -08:00
Pig Monkey
2a0e752bef verify mimeapps.list exists
closes #38
2016-12-27 20:12:58 -08:00
Pig Monkey
f0077eed7d support udisks configuration
By default we still disable automounting and mount to /media

closes #33
2016-12-26 16:14:03 -08:00
Pig Monkey
be2c841a82 reference mozilla wiki
closes #30
2016-12-26 16:01:37 -08:00
Pig Monkey
a6ffb394d1 update local blocking hosts 2016-12-26 16:00:47 -08:00
Pig Monkey
ff26e3568c replace slim with lightdm
This will be a breaking change for existing users.

After running the new tasks to install and enable LightDM, disable Slim:

    # systemctl disable slim.service

LightDM uses `~/.xprofile` instead of `~/.xinitrc`. Move all of the
contents from `~/.xinitrc` to `~/.xprofile`, except for the `exec` line.
In your `~/.xinitrc` you can source your new `~/.xprofile` so that it is
still functional in case you find yourself using it again.

https://wiki.archlinux.org/index.php/Xprofile
3a75c5d454

On the next reboot you'll be greeted by LightDM. Slim can then be
uninstalled.

    # pacman --remove slim
2016-12-23 16:07:20 -08:00
Pig Monkey
90e968f4d2 install zplug 2016-12-23 13:22:22 -08:00
Pig Monkey
2d3b0055e6 allow sshd tcp forwarding
Disabling it doesn't gain us anything, as mentioned in #30.
2016-12-23 12:59:51 -08:00
Pig Monkey
32a38015be update sshd algorithms
https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29
2016-12-23 12:59:00 -08:00
Pig Monkey
f38809a206 ...and correct the var name 2016-12-17 19:21:00 -08:00
Pig Monkey
283ec1471a correct journal config filename
oops
2016-12-17 19:19:28 -08:00
Pig Monkey
8da136c5db set max size for systemd journal
My /var/log/journal was 2.9GB. I'm not sure what a good limit is, but it
certainly is less than that...
2016-12-17 19:15:25 -08:00
Pig Monkey
f2ae6451e8 fix mpd unit target
The multi-user target does not exist for user services.
2016-12-17 18:49:02 -08:00
Pig Monkey
f06e42b088 install magic-wormhole 2016-12-17 18:48:55 -08:00
Pig Monkey
c3b44f0b1e install gimp-plugin-gmic 2016-12-11 21:53:55 -08:00
Pig Monkey
938e8d27ff provide mpd user service
The Arch package used to provide this. Now it doesn't.

To use this, you'd just enable and start it as your user.

    $ systemctl --user enable mpd.service
    $ systemctl --user start mpd.service

Existing users can remove the override we used to install, since that is
now redundant.

    # rm -r /etc/systemd/user/mpd.service.d
2016-12-11 21:48:52 -08:00
Pig Monkey
74de6fb893 install gtk3-print-backends
This is now needed for printers to appear in GTK3 dialogs.
2016-12-09 13:05:34 -08:00
Pig Monkey
da7f2877f5 allow tor access to /dev
Without this, Tor has started complaining about not being able to access
/dev/zero (despite Firejail making it available). Somebody should write
a real profile for this at some point...
2016-12-07 15:58:38 -08:00
Pig Monkey
a09ac3b4f8 start tor jail as root, then drop
An update at some point in the past week or two caused tor to break when
it was launched within Firejail as the tor user. Instead we launch the
jail as root and then have Tor drop privileges. I'm not sure why this is
necessary.
2016-12-07 15:54:18 -08:00
Pig Monkey
f341430642 update cryptshot 2016-12-07 15:54:08 -08:00
Pig Monkey
b097dcba29 replace old backup drives 2016-11-28 21:01:08 -08:00
Pig Monkey
de2c2df416 pass verbose flag to rsync 2016-11-24 15:19:34 -08:00
Pig Monkey
7e8bcc206e update cryptshot 2016-11-24 13:41:44 -08:00
Pig Monkey
3e9e43b9eb use a single script/service/timer 2016-11-24 13:39:42 -08:00
Pig Monkey
fc8496e145 only run cryptshot tasks when configured 2016-11-24 12:37:33 -08:00
Pig Monkey
53e59cac5a create cryptshot services and timers 2016-11-24 12:36:24 -08:00
Pig Monkey
3ce490a5c6 create script to execute cryptshot intervals 2016-11-24 12:16:38 -08:00
Pig Monkey
bddf12d0b8 generate cryptshot configs 2016-11-24 12:01:03 -08:00
Pig Monkey
58b13b6432 update playbook role 2016-11-24 11:00:29 -08:00
Pig Monkey
195faef569 rename backup role 2016-11-24 10:58:54 -08:00
Pig Monkey
c91617cca0 move borg tasks to own role 2016-11-24 10:58:00 -08:00
Pig Monkey
ec0580b535 remove redundant tags 2016-11-22 17:10:15 -08:00
Pig Monkey
652257afc7 update firewarden 2016-11-22 17:09:17 -08:00