-
Say so when a USB device is refused
-
Arm USB device authorization by default, and make that survivable
-
Ship no flatpak remote, and say so when the first install has nowhere to go
-
Ship the USB keyboard gate, so deny-unknown has a release valve
-
Ship the firewall: firewalld, a zone per profile, tailscale exempt
-
Take the console and shop out of the image, and layer them at first boot
-
Carry the RPMs in the image, which removes the copy step and the wedge both
-
Continue the install over ssh from a minted medium
-
Add the alloy bluetooth verb: five state fields, said out loud
-
Enable the encrypted install, and answer the audit's open absences
-
Swap the browser to Helium and delete the Firefox estate
-
mdns: resolve a .local name, not just publish one
-
preset: keep sshd on, and say so
-
image: ship the tools that make ECC and SMART readable
-
greeter: put the console palette on Akari before tuigreet draws
-
swayosd: enable the backend the caps-lock bind needs, drop the preset line that named nothing
-
install: make an install from the ISO get as far as the account
-
build: an installer ISO that boots into alloy install
-
image: drop initial-setup now the installer creates the account
-
base: move to Fedora 43, add initial-setup for first-boot accounts
-
Drop first-boot Flatpak provisioning; Rnote was the last tenant and is shelved
-
Browser: swap Floorp for upstream Firefox + optional ungoogled-chromium
-
Containerfile: multi-stage cargo builds; first-boot Flatpak; boot fixes
-
Land v0 stack: docs, config tree, Containerfile, sr.ht CI