Add etc/ source tree for package-shipped /etc files
This tree is the source for omarchy-settings to install into /etc (for paths Omarchy fully owns) or stage at /usr/share/omarchy/etc-overrides (for paths upstream packages own, which the post_install copies into place). Package-owned drop-ins (no upstream conflict): - etc/docker/daemon.json - etc/systemd/system/docker.service.d/no-block-boot.conf - etc/systemd/resolved.conf.d/20-docker-dns.conf - etc/systemd/resolved.conf.d/10-disable-multicast.conf - etc/systemd/system.conf.d/10-faster-shutdown.conf - etc/systemd/system/user@.service.d/10-faster-shutdown.conf (renamed from .../faster-shutdown.conf for consistency) - etc/systemd/logind.conf.d/10-ignore-power-button.conf (replaces the previous in-place sed-edit of logind.conf) - etc/gnupg/dirmngr.conf - etc/sysctl.d/99-omarchy-sysctl.conf (renamed from the 99-sysctl.conf appendage; a migration cleans up the old path on existing installs) - etc/sysctl.d/90-omarchy-file-watchers.conf - etc/modprobe.d/omarchy-usb-autosuspend.conf (renamed from disable-usb-autosuspend.conf) - etc/sudoers.d/omarchy-asdcontrol (renamed from asdcontrol; $USER -> %wheel for packaging) - etc/sudoers.d/omarchy-tzupdate - etc/sudoers.d/omarchy-passwd-tries (renamed from passwd-tries for namespacing) Etc-overrides (upstream-owned paths; staged by the PKGBUILD at /usr/share/omarchy/etc-overrides/ and cp'd in by post_install): - etc/security/faillock.conf (owned by pam) - etc/nsswitch.conf (owned by filesystem) - etc/cups/cups-browsed.conf (owned by cups-browsed) - etc/plymouth/plymouthd.conf (owned by plymouth) All sudoers files validate with visudo -cf. The install scripts that previously wrote these files are updated or removed in follow-up commits.
This commit is contained in:
Ryan Hughes
@@ -0,0 +1,4 @@
|
||||
# Omarchy override of cups-browsed's shipped config. The only behavioural
|
||||
# change vs the upstream default (all-commented) is enabling auto-registration
|
||||
# of remote IPP printers discovered via Avahi/mDNS.
|
||||
CreateRemotePrinters Yes
|
||||
@@ -0,0 +1,6 @@
|
||||
{
|
||||
"log-driver": "json-file",
|
||||
"log-opts": { "max-size": "10m", "max-file": "5" },
|
||||
"dns": ["172.17.0.1"],
|
||||
"bip": "172.17.0.1/16"
|
||||
}
|
||||
@@ -0,0 +1,7 @@
|
||||
keyserver hkps://keyserver.ubuntu.com
|
||||
keyserver hkps://pgp.surfnet.nl
|
||||
keyserver hkps://keys.mailvelope.com
|
||||
keyserver hkps://keyring.debian.org
|
||||
keyserver hkps://pgp.mit.edu
|
||||
|
||||
connect-quick-timeout 4
|
||||
@@ -0,0 +1 @@
|
||||
options usbcore autosuspend=-1
|
||||
@@ -0,0 +1,19 @@
|
||||
# Name Service Switch configuration file.
|
||||
# See nsswitch.conf(5) for details.
|
||||
|
||||
passwd: files systemd
|
||||
group: files [SUCCESS=merge] systemd
|
||||
shadow: files systemd
|
||||
gshadow: files systemd
|
||||
|
||||
publickey: files
|
||||
|
||||
hosts: mymachines mdns_minimal [NOTFOUND=return] resolve files myhostname dns
|
||||
networks: files
|
||||
|
||||
protocols: files
|
||||
services: files
|
||||
ethers: files
|
||||
rpc: files
|
||||
|
||||
netgroup: files
|
||||
@@ -0,0 +1,2 @@
|
||||
[Daemon]
|
||||
Theme=omarchy
|
||||
@@ -0,0 +1,7 @@
|
||||
# Omarchy override of /etc/security/faillock.conf (upstream owned by `pam`).
|
||||
# The only behavioural change vs upstream defaults is raising `deny` from 3 to
|
||||
# 10 so users get more attempts before lockout.
|
||||
#
|
||||
# All other settings remain at upstream defaults (commented out). See
|
||||
# faillock.conf(5) for the full option list.
|
||||
deny = 10
|
||||
@@ -0,0 +1 @@
|
||||
%wheel ALL=(ALL) NOPASSWD: /usr/bin/asdcontrol
|
||||
@@ -0,0 +1 @@
|
||||
Defaults passwd_tries=10
|
||||
@@ -0,0 +1 @@
|
||||
%wheel ALL=(root) NOPASSWD: /usr/bin/tzupdate, /usr/bin/timedatectl
|
||||
@@ -0,0 +1,3 @@
|
||||
# Raise inotify limits so VS Code, webpack, and similar dev tools don't hit the
|
||||
# default 8192 ceiling.
|
||||
fs.inotify.max_user_watches=524288
|
||||
@@ -0,0 +1,2 @@
|
||||
# Solve common flakiness with SSH (MTU discovery on flaky links).
|
||||
net.ipv4.tcp_mtu_probing=1
|
||||
@@ -0,0 +1,2 @@
|
||||
[Login]
|
||||
HandlePowerKey=ignore
|
||||
@@ -0,0 +1,2 @@
|
||||
[Resolve]
|
||||
MulticastDNS=no
|
||||
@@ -0,0 +1,2 @@
|
||||
[Resolve]
|
||||
DNSStubListenerExtra=172.17.0.1
|
||||
@@ -0,0 +1,2 @@
|
||||
[Manager]
|
||||
DefaultTimeoutStopSec=5s
|
||||
@@ -0,0 +1,2 @@
|
||||
[Unit]
|
||||
DefaultDependencies=no
|
||||
@@ -0,0 +1,2 @@
|
||||
[Service]
|
||||
TimeoutStopSec=5s
|
||||
Reference in New Issue
Block a user