Commit graph

354 commits

Author SHA1 Message Date
renner
2cd738b481
feat: migrate fcitx5 to flatpak and preinstall it in the future (#295)
Themes migration used from [1].

Part of [2].

[1] https://github.com/ublue-os/bazzite/pull/6122
[2] https://github.com/ublue-os/aurora/issues/3038

no preinstall files

probably the better way to handle this with a notification instead of
preinstalling everything, also makes it easier because we would need to
wait for preinstall to have finished, which we can't easily do from the
systemd user service
2026-10-31 18:20:22 +00:00
inffy
b8f5639b18
chore: remove gaming-udev rules (#298) 2026-10-27 12:23:48 +00:00
renner
6f07ce26b5
chore: remove some tech debt (#297)
* chore: remove ublue-flatpak-manager

Got superseded by [1] and [2]. This doesn't even run or is referenced
anywhere.

[1] aaff9dc83e/system_files/shared/usr/share/ublue-os/privileged-setup.hooks.d/99-flatpaks.sh
[2] https://github.com/get-aurora-dev/common/blob/main/system_files/shared/usr/share/ublue-os/user-setup.hooks.d/40-flatpak.sh

* chore: remove unneeded workarounds

devpod is dead upstream, we do not ship it anymore, flatpak is marked
EOL

QT issue doesn't look like it is relevant anymore
2026-10-25 05:33:13 +00:00
renner
aaff9dc83e
feat: preinstall flatpak runtime extensions (#291)
See: https://github.com/get-aurora-dev/common/issues/290
2026-10-24 15:10:24 +00:00
renner
cca403ae4a
feat: remove kontact (#294)
this takes up 400MiB on disk, if people want to have it they can just
download it. We also already include thunderbird which has a lot of
overlap with this.
2026-10-24 04:59:00 +00:00
renovate[bot]
9f03bdda82
chore(deps): update docker/login-action action to v4.7.0 (#293)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-23 20:42:02 +00:00
renovate[bot]
350b5026a8
chore(deps): update dependency sigstore/cosign to v3.1.4 (#292)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-21 04:32:56 +00:00
inffy
9f5140f257
chore(brew): update brewfiles and casks (#288)
* move to upstream Zed

* use opencode from upstream

* fix antigravity-ide cask name

* remove zed@preview

* kpt is now on core

* tremor is removed from tap and core
2026-10-18 14:13:40 +00:00
renner
f813004dd1
docs: mention dual-sign (#285) 2026-10-12 08:07:47 +03:00
renner
c0b5fa8519
feat: fall wallpaper (#286) 2026-10-11 20:17:37 +02:00
renovate[bot]
ad6a2c6d07
chore(deps): update actions/setup-node digest to 949feb2 (#284)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 05:14:31 +00:00
inffy
d86910a96f
feat: enable xdg-native-messaging-proxy support (#283)
* enable setting for native-messaging-proxy

* ff flatpak config for override

* ff override

* bump the script version

* Apply suggestion from @renner0e

---------

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
2026-10-05 14:32:12 +00:00
inffy
703ee7f74c
Remove aurora-wallpapers from Brewfile
Removed 'aurora-wallpapers' from Brewfile.
2026-09-27 08:46:04 +03:00
inffy
af7e480148
chore: update iwd recipe (#276) 2026-09-23 18:33:26 +00:00
renner
1432d9b3e8
chore: disable uupd timer in preset (#280)
we are doing this on the image, no need for this to be here.
2026-09-19 03:11:05 +00:00
inffy
44bbf2c96e
fix workflow job name 2026-09-16 15:55:28 +03:00
inffy
ba6f78b1af
feat: autoclose issues without needed info (#278) 2026-09-16 12:48:08 +00:00
inffy
3ba42be43c
chore: cleanup motd tips (#279) 2026-09-16 14:33:56 +02:00
renner
9ab01e2d38
fix: actually set middle mouse paste false in firefox (#277) 2026-09-15 11:01:07 +00:00
inffy
579d7bbc0c
docs: remove deprecated aurorafin-shared repo (#274)
Removed a reference to the aurorafin-shared repository from the README.
2026-09-12 18:09:44 +02:00
inffy
3e090e91af
chore: spring cleaning of aitools brewfile
remove deprecated things and add llmman
2026-09-12 11:06:17 +03:00
renner
8e1b1fe7bd
fix(just): redirect errors to stdout in update (#273)
cleaner version of 15117ef2b6.

This will print it for the user to see and will not mess up the output
so jq will be able to parse it
2026-09-03 17:26:06 +00:00
inffy
15117ef2b6
chore(just): fix ujust update recipe on fresh boot after installs (#271)
* fix(just): ujust update broken after install

* comment about the workaround

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>

---------

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
2026-09-03 16:09:56 +00:00
Guilherme Cardoso
1a1d640689
feat(security): bind TPM2 auto-unlock to PCRs 0+7 (#269)
* feat(security): bind TPM2 auto-unlock to PCRs 0+7

* feat(security): add PCR 14 to TPM2 auto-unlock policy

* Update system_files/shared/usr/bin/luks-tpm2-autounlock

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>

---------

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
2026-08-31 20:31:05 +00:00
renner
792c80f8ee
chore: remove gtk.css (#268)
Added in [1] and [2]. Supposedly this fixed [3]. This no longer
relevant, without these everyting looks readable and correct. I tested
this with Flatpak Chrome and changing between dark and light mode with
CSD and SSD.

1: https://github.com/ublue-os/bluefin/pull/1709
2: https://github.com/ublue-os/bluefin/pull/1095/
3: https://github.com/flathub/org.gtk.Gtk3theme.Breeze/issues/94
2026-08-30 16:14:41 +00:00
renner
5aded33916
chore: remove qtlogging.ini's (#267)
This got added in [1]. We should not override this for all software, we
should fix our stuff. Also I'm not sure if this is even relevant
anymore.

1: 065b90bdd7
2026-08-30 15:18:37 +00:00
renner
0775a6f35c
chore: remove flatpak override for vscode (#266)
We do not support flatpak vscode, either use brew or DX image. Doesn't
affect exisitng users anyway.
2026-08-30 14:56:15 +00:00
renner
8b52a6350a
chore: use /usr/share/factory for flatpak bazaar (#265)
I don't know why I didn't get it to work back then [1], there is no reason
to use our own /usr/share/ublue-os weirdness.

1: https://github.com/ublue-os/aurora/pull/1076/changes#r2433975337
2026-08-30 14:55:41 +00:00
renner
ecf890df0d
chore: delete bazaar service (#264)
We have disabled [1] this for a couple months already because of issues
no one could consistently reproduce so far [2] and this would likely
need some more changes to work now that bazaar uses a daemon [3].

[1] https://github.com/ublue-os/aurora/pull/1749
[2] https://github.com/get-aurora-dev/common/pull/113
[3] https://github.com/bazaar-org/bazaar/pull/1732
2026-08-25 11:24:23 +00:00
renner
79eeaf81ee
chore: tips fixes (#263) 2026-08-25 13:34:52 +03:00
renner
5a444b831d
docs: how to test via sysexts (#257) 2026-08-22 10:07:35 +03:00
renner
910227a1a2
feat(just): use bootc upgrade when possible (#256)
* feat(just): use bootc upgrade when possible

The reason why we are not using uupd, which would completely handle the
bootc rpm-ostree compatibility dance is because the output is not super
useful from a troubleshooting perspective and people like their bling.

What we want is to use bootc for upgrades when it is possible to use it.
We currently don't do this as we just check for the `LockLayering` value
in `rpm-ostreed.conf`. Users don't change this so this will always call
to `rpm-ostree`. We have this because it used to be a shared recipe with
bluefin-lts which sets `LockLayering=True` because it doesn't support
package layering.

Bootc upgrade is slightly faster than rpm-ostree and more importantly
does not mess with any RPMs or calls to any repos, which are all steps
that might fail. There have also been bugs in recent times in
`rpm-ostree` that broke image updates [1]. Bootc is simpler and the
likelihood seems to be lower for `upgrade` to straight up be broken.

The disadvantage compared to always using rpm-ostree for everything is
that bootc doesn't have polkit rules to allow members of the wheel group
to execute it without authentication, even if rpm-ostree ends up being
used which does exactly that.

More complex and probably more buggy alternative to
https://github.com/get-aurora-dev/common/pull/252

[1] https://github.com/coreos/rpm-ostree/issues/5567

* handle container case

* why it needs root password
2026-08-14 06:55:53 +00:00
inffy
c37b4bc63d
feat(brew): use bbrew from core + add zed to ide brewfile (#260)
* feat(brew): use bbrew from core + add zed to ide brewfile

* add pipefail
2026-08-14 06:45:16 +00:00
renovate[bot]
ba37f45c27
chore(deps): update dependency sigstore/cosign to v3.1.3 (#254)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-12 05:31:08 +00:00
renner
d49c0ce6be
feat: drop distrobox mention from system-update (#255)
Co-authored-by: JumpyVi <62212220+jumpyvi@users.noreply.github.com>
2026-08-07 08:35:29 +03:00
renner
13c91863b4
feat: rework misc motd tips (#253) 2026-08-06 07:54:46 +03:00
renner
28529d0da0
fix: welcome crash (#249)
https://bugs.kde.org/show_bug.cgi?id=523540

resolves: https://github.com/ublue-os/aurora/issues/2624

The set URL isn't being opened
https://bugs.kde.org/show_bug.cgi?id=523776
2026-08-02 18:23:40 +00:00
renner
8768e81041
feat: set newest aurora logo in fastfetch (#250)
Happens to work around the broken fedora package of fastfetch.

See https://src.fedoraproject.org/rpms/fastfetch/pull-request/10

and implements https://github.com/fastfetch-cli/fastfetch/issues/2151
due to lack of activity upstream.

We can get rid of some complexity from this script, we don't do fancy
logo rotation that was done in bluefin.

This will look bad on a white theme. Someone will come to fix it.
2026-08-02 14:42:23 +00:00
renner
d3dfd2223e
fix: ujust shell completions (#248)
Final solution for the new just completion engine ended up being; For
`bash` we have to change the script to set `JUST_JUSTFILE` while having
an autocomplete script where `just` is substituted to `ujust`. This was
based on feedback from Casey in
https://github.com/casey/just/discussions/3683#discussioncomment-17804984

For `fish` the only method i found to get the completions working
properly was to alias `ujust` to `just --justfile
"/usr/share/ublue-os/justfile"`

now for zsh i had to write a custom compdef that hardcodes in
`--justfile "/usr/share/ublue-os/justfile"` and passes it to the
completion definitions for `just`, i do not want to go into how long i
spent on this stupid compdef...

Hikari's words, he figured everything out here. Thanks. It's an exact
clone of https://github.com/ublue-os/packages/pull/1319.

resolves: https://github.com/get-aurora-dev/common/issues/220

Co-authored-by: HikariKnight <2557889+HikariKnight@users.noreply.github.com>
2026-08-01 03:44:56 +00:00
renovate[bot]
d7ec86de86
chore(deps): update docker/login-action action to v4.6.0 (#247)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-31 05:23:08 +00:00
renovate[bot]
174651bde3
chore(deps): update docker/login-action action to v4.5.2 (#242)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-28 22:14:57 +00:00
renner
bca87ec08b
chore: dual sign (#244)
* feat(ci): dual-sign image with OIDC and static key

container-libs doesn't support our new keyless signatures here, let's
support both

* chore: pin cosign

this is a ticking time bomb, renovate should pick this up automatically
2026-07-28 20:01:57 +00:00
renner
4f94a2dee2
chore(ci): switch over to zstd again (#243)
zstd:chunked is not supported by ghcr is anyway, it only takes more time
to push
2026-07-28 19:36:00 +00:00
renner
7b5c072ad0
chore: bring in aurorafin-shared (#241)
* chore: add all the things from aurorafin-shared

Bluefin is not interested in the lack of AI in the development process
of it, let's put everything here.

It still makes sense to have this repo to avoid fetching the
wallpapers/udev rules in an image build every single time.

* fix: correct path for binary

* remainings

* chore: remove ai stuff we don't use

* redo brew validation

* use bbrew from main homebrew

* remove tiup

this is broken, is it gone from some tap?

* remove kcl from brewfiles

something is broken here as well
2026-07-28 18:20:57 +00:00
renner
0ad800bb4a
chore: always disable with toggle-iwd (#240)
Upstream is dead, still leave the option for users to switch back to
wpa_supplicant if they enabled it. Migrating people away from IWD
automatically would be bad because it would break internet connections
for users.

Let's leave this in for a couple months.
2026-07-26 17:33:15 +00:00
renovate[bot]
7c0599c5e3
chore(deps): update docker/login-action action to v4.5.1 (#239)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-24 17:00:31 +00:00
renovate[bot]
61a8a34481
chore(deps): update docker/login-action action to v4.5.0 (#238)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-23 22:50:09 +00:00
renner
ec6ad36c41
feat: also disable middle click paste in firefox (#237)
I don't know why the desktop doesn't dictate this to applications. We
ship firefox by default so we have to change it there as well. This
leaves chromium with the bad stock behavior, but we can't really ship
configurations for the entirety of flathub.

It will only affect new installations.

Follow up of https://github.com/get-aurora-dev/common/pull/224
2026-07-23 05:26:55 +00:00
renner
6af619e0d0
feat(just): redo dx-group recipe (#236)
xref: https://github.com/ublue-os/aurora/issues/2584
2026-07-22 06:04:51 +00:00
renovate[bot]
df8a15801b
chore(deps): update actions/checkout action to v7.0.1 (#234)
* chore(deps): update actions/checkout action to v7.0.1

* update version number

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
2026-07-21 15:55:40 +00:00