Commit graph

348 commits

Author SHA1 Message Date
inffy
c442b7fb01
feat: Add Intel VAAPI flatpak to Brewfile
This seems to be needed for hw decode to work on intel with flatpaks
https://github.com/ublue-os/aurora/discussions/3062
2026-10-20 12:12:08 +03:00
inffy
9f5140f257
chore(brew): update brewfiles and casks (#288)
* move to upstream Zed

* use opencode from upstream

* fix antigravity-ide cask name

* remove zed@preview

* kpt is now on core

* tremor is removed from tap and core
2026-10-18 14:13:40 +00:00
renner
f813004dd1
docs: mention dual-sign (#285) 2026-10-12 08:07:47 +03:00
renner
c0b5fa8519
feat: fall wallpaper (#286) 2026-10-11 20:17:37 +02:00
renovate[bot]
ad6a2c6d07
chore(deps): update actions/setup-node digest to 949feb2 (#284)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 05:14:31 +00:00
inffy
d86910a96f
feat: enable xdg-native-messaging-proxy support (#283)
* enable setting for native-messaging-proxy

* ff flatpak config for override

* ff override

* bump the script version

* Apply suggestion from @renner0e

---------

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
2026-10-05 14:32:12 +00:00
inffy
703ee7f74c
Remove aurora-wallpapers from Brewfile
Removed 'aurora-wallpapers' from Brewfile.
2026-09-27 08:46:04 +03:00
inffy
af7e480148
chore: update iwd recipe (#276) 2026-09-23 18:33:26 +00:00
renner
1432d9b3e8
chore: disable uupd timer in preset (#280)
we are doing this on the image, no need for this to be here.
2026-09-19 03:11:05 +00:00
inffy
44bbf2c96e
fix workflow job name 2026-09-16 15:55:28 +03:00
inffy
ba6f78b1af
feat: autoclose issues without needed info (#278) 2026-09-16 12:48:08 +00:00
inffy
3ba42be43c
chore: cleanup motd tips (#279) 2026-09-16 14:33:56 +02:00
renner
9ab01e2d38
fix: actually set middle mouse paste false in firefox (#277) 2026-09-15 11:01:07 +00:00
inffy
579d7bbc0c
docs: remove deprecated aurorafin-shared repo (#274)
Removed a reference to the aurorafin-shared repository from the README.
2026-09-12 18:09:44 +02:00
inffy
3e090e91af
chore: spring cleaning of aitools brewfile
remove deprecated things and add llmman
2026-09-12 11:06:17 +03:00
renner
8e1b1fe7bd
fix(just): redirect errors to stdout in update (#273)
cleaner version of 15117ef2b6.

This will print it for the user to see and will not mess up the output
so jq will be able to parse it
2026-09-03 17:26:06 +00:00
inffy
15117ef2b6
chore(just): fix ujust update recipe on fresh boot after installs (#271)
* fix(just): ujust update broken after install

* comment about the workaround

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>

---------

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
2026-09-03 16:09:56 +00:00
Guilherme Cardoso
1a1d640689
feat(security): bind TPM2 auto-unlock to PCRs 0+7 (#269)
* feat(security): bind TPM2 auto-unlock to PCRs 0+7

* feat(security): add PCR 14 to TPM2 auto-unlock policy

* Update system_files/shared/usr/bin/luks-tpm2-autounlock

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>

---------

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
2026-08-31 20:31:05 +00:00
renner
792c80f8ee
chore: remove gtk.css (#268)
Added in [1] and [2]. Supposedly this fixed [3]. This no longer
relevant, without these everyting looks readable and correct. I tested
this with Flatpak Chrome and changing between dark and light mode with
CSD and SSD.

1: https://github.com/ublue-os/bluefin/pull/1709
2: https://github.com/ublue-os/bluefin/pull/1095/
3: https://github.com/flathub/org.gtk.Gtk3theme.Breeze/issues/94
2026-08-30 16:14:41 +00:00
renner
5aded33916
chore: remove qtlogging.ini's (#267)
This got added in [1]. We should not override this for all software, we
should fix our stuff. Also I'm not sure if this is even relevant
anymore.

1: 065b90bdd7
2026-08-30 15:18:37 +00:00
renner
0775a6f35c
chore: remove flatpak override for vscode (#266)
We do not support flatpak vscode, either use brew or DX image. Doesn't
affect exisitng users anyway.
2026-08-30 14:56:15 +00:00
renner
8b52a6350a
chore: use /usr/share/factory for flatpak bazaar (#265)
I don't know why I didn't get it to work back then [1], there is no reason
to use our own /usr/share/ublue-os weirdness.

1: https://github.com/ublue-os/aurora/pull/1076/changes#r2433975337
2026-08-30 14:55:41 +00:00
renner
ecf890df0d
chore: delete bazaar service (#264)
We have disabled [1] this for a couple months already because of issues
no one could consistently reproduce so far [2] and this would likely
need some more changes to work now that bazaar uses a daemon [3].

[1] https://github.com/ublue-os/aurora/pull/1749
[2] https://github.com/get-aurora-dev/common/pull/113
[3] https://github.com/bazaar-org/bazaar/pull/1732
2026-08-25 11:24:23 +00:00
renner
79eeaf81ee
chore: tips fixes (#263) 2026-08-25 13:34:52 +03:00
renner
5a444b831d
docs: how to test via sysexts (#257) 2026-08-22 10:07:35 +03:00
renner
910227a1a2
feat(just): use bootc upgrade when possible (#256)
* feat(just): use bootc upgrade when possible

The reason why we are not using uupd, which would completely handle the
bootc rpm-ostree compatibility dance is because the output is not super
useful from a troubleshooting perspective and people like their bling.

What we want is to use bootc for upgrades when it is possible to use it.
We currently don't do this as we just check for the `LockLayering` value
in `rpm-ostreed.conf`. Users don't change this so this will always call
to `rpm-ostree`. We have this because it used to be a shared recipe with
bluefin-lts which sets `LockLayering=True` because it doesn't support
package layering.

Bootc upgrade is slightly faster than rpm-ostree and more importantly
does not mess with any RPMs or calls to any repos, which are all steps
that might fail. There have also been bugs in recent times in
`rpm-ostree` that broke image updates [1]. Bootc is simpler and the
likelihood seems to be lower for `upgrade` to straight up be broken.

The disadvantage compared to always using rpm-ostree for everything is
that bootc doesn't have polkit rules to allow members of the wheel group
to execute it without authentication, even if rpm-ostree ends up being
used which does exactly that.

More complex and probably more buggy alternative to
https://github.com/get-aurora-dev/common/pull/252

[1] https://github.com/coreos/rpm-ostree/issues/5567

* handle container case

* why it needs root password
2026-08-14 06:55:53 +00:00
inffy
c37b4bc63d
feat(brew): use bbrew from core + add zed to ide brewfile (#260)
* feat(brew): use bbrew from core + add zed to ide brewfile

* add pipefail
2026-08-14 06:45:16 +00:00
renovate[bot]
ba37f45c27
chore(deps): update dependency sigstore/cosign to v3.1.3 (#254)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-12 05:31:08 +00:00
renner
d49c0ce6be
feat: drop distrobox mention from system-update (#255)
Co-authored-by: JumpyVi <62212220+jumpyvi@users.noreply.github.com>
2026-08-07 08:35:29 +03:00
renner
13c91863b4
feat: rework misc motd tips (#253) 2026-08-06 07:54:46 +03:00
renner
28529d0da0
fix: welcome crash (#249)
https://bugs.kde.org/show_bug.cgi?id=523540

resolves: https://github.com/ublue-os/aurora/issues/2624

The set URL isn't being opened
https://bugs.kde.org/show_bug.cgi?id=523776
2026-08-02 18:23:40 +00:00
renner
8768e81041
feat: set newest aurora logo in fastfetch (#250)
Happens to work around the broken fedora package of fastfetch.

See https://src.fedoraproject.org/rpms/fastfetch/pull-request/10

and implements https://github.com/fastfetch-cli/fastfetch/issues/2151
due to lack of activity upstream.

We can get rid of some complexity from this script, we don't do fancy
logo rotation that was done in bluefin.

This will look bad on a white theme. Someone will come to fix it.
2026-08-02 14:42:23 +00:00
renner
d3dfd2223e
fix: ujust shell completions (#248)
Final solution for the new just completion engine ended up being; For
`bash` we have to change the script to set `JUST_JUSTFILE` while having
an autocomplete script where `just` is substituted to `ujust`. This was
based on feedback from Casey in
https://github.com/casey/just/discussions/3683#discussioncomment-17804984

For `fish` the only method i found to get the completions working
properly was to alias `ujust` to `just --justfile
"/usr/share/ublue-os/justfile"`

now for zsh i had to write a custom compdef that hardcodes in
`--justfile "/usr/share/ublue-os/justfile"` and passes it to the
completion definitions for `just`, i do not want to go into how long i
spent on this stupid compdef...

Hikari's words, he figured everything out here. Thanks. It's an exact
clone of https://github.com/ublue-os/packages/pull/1319.

resolves: https://github.com/get-aurora-dev/common/issues/220

Co-authored-by: HikariKnight <2557889+HikariKnight@users.noreply.github.com>
2026-08-01 03:44:56 +00:00
renovate[bot]
d7ec86de86
chore(deps): update docker/login-action action to v4.6.0 (#247)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-31 05:23:08 +00:00
renovate[bot]
174651bde3
chore(deps): update docker/login-action action to v4.5.2 (#242)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-28 22:14:57 +00:00
renner
bca87ec08b
chore: dual sign (#244)
* feat(ci): dual-sign image with OIDC and static key

container-libs doesn't support our new keyless signatures here, let's
support both

* chore: pin cosign

this is a ticking time bomb, renovate should pick this up automatically
2026-07-28 20:01:57 +00:00
renner
4f94a2dee2
chore(ci): switch over to zstd again (#243)
zstd:chunked is not supported by ghcr is anyway, it only takes more time
to push
2026-07-28 19:36:00 +00:00
renner
7b5c072ad0
chore: bring in aurorafin-shared (#241)
* chore: add all the things from aurorafin-shared

Bluefin is not interested in the lack of AI in the development process
of it, let's put everything here.

It still makes sense to have this repo to avoid fetching the
wallpapers/udev rules in an image build every single time.

* fix: correct path for binary

* remainings

* chore: remove ai stuff we don't use

* redo brew validation

* use bbrew from main homebrew

* remove tiup

this is broken, is it gone from some tap?

* remove kcl from brewfiles

something is broken here as well
2026-07-28 18:20:57 +00:00
renner
0ad800bb4a
chore: always disable with toggle-iwd (#240)
Upstream is dead, still leave the option for users to switch back to
wpa_supplicant if they enabled it. Migrating people away from IWD
automatically would be bad because it would break internet connections
for users.

Let's leave this in for a couple months.
2026-07-26 17:33:15 +00:00
renovate[bot]
7c0599c5e3
chore(deps): update docker/login-action action to v4.5.1 (#239)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-24 17:00:31 +00:00
renovate[bot]
61a8a34481
chore(deps): update docker/login-action action to v4.5.0 (#238)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-23 22:50:09 +00:00
renner
ec6ad36c41
feat: also disable middle click paste in firefox (#237)
I don't know why the desktop doesn't dictate this to applications. We
ship firefox by default so we have to change it there as well. This
leaves chromium with the bad stock behavior, but we can't really ship
configurations for the entirety of flathub.

It will only affect new installations.

Follow up of https://github.com/get-aurora-dev/common/pull/224
2026-07-23 05:26:55 +00:00
renner
6af619e0d0
feat(just): redo dx-group recipe (#236)
xref: https://github.com/ublue-os/aurora/issues/2584
2026-07-22 06:04:51 +00:00
renovate[bot]
df8a15801b
chore(deps): update actions/checkout action to v7.0.1 (#234)
* chore(deps): update actions/checkout action to v7.0.1

* update version number

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
2026-07-21 15:55:40 +00:00
renner
5fd8f15367
chore: remove dx groups related things (#235)
* chore: remove aurora-incus

this is not referenced anymore

* chore: remove aurora-dx-groups.service

This is super old tech debt, we must have used this in the past to add
users to the dx groups when we still made ISOs for them, instead of the
current post-install rebase

xref: https://github.com/ublue-os/aurora/issues/2584
2026-07-21 13:00:04 +00:00
renovate[bot]
570f59395b
chore(deps): update actions/setup-node action to v7 (#232)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-15 05:51:45 +00:00
renovate[bot]
24a921c860
chore(deps): update actions/setup-node digest to 2499707 (#231)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-15 05:47:31 +00:00
renner
b819d5d699
chore: set new summer wallpaper (#230) 2026-07-06 18:28:07 +00:00
renner
b4d809b1c1
feat: add qrca as system flatpak (#229)
I reinstalled Aurora on my laptop and afterwards I wanted to connect to
another WiFi Network other than the one I specified in Plasma Setup and
in the network applet you have the option to scan a QR-Code with the
camera and connect to the wifi that way, if we preinstall qrca[1] then
this is just gonna work out of the box.

For desktops it wouldn't be useful for this purpose, but at least you
could still scan QR-Codes from images.

It's a small KDE app so I think it's fine to include by default.

[1]: https://github.com/flathub/org.kde.qrca
2026-07-06 17:51:53 +00:00
renovate[bot]
15ccd216a7
chore(deps): update docker/login-action action to v4.4.0 (#228)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-03 19:16:38 +00:00