---

• Emacs configuration is based from rexim (tsoding) dotfiles.
• Many files just be here as personal backup , such as nftables

Prerequisites

• Debian 13, emacs >= 29.0
• Internet connection
• Linux homebrew
• GNU Awk (gawk) if run admin script (manually, require root privilege)

$ awk --version
GNU Awk 5.2.1...

Deployment

• Clone the repo, run deploy.sh as non-root user.

Security script

• audit_cap.sh to audit processes capabilities: ambient/effective cap.
• nftables.conf for general firewall filter
• nvidia.sh as simple nvidia driver install/uninstall script.
• inspect_fd2.py as simple fd inspect script for process.

Docker deployment

• Intent for development only.
• Build the image.

$ docker build --network host -f Dockerfile -t test:trixie .

• Either run as rootless container or rootful container as below.

# rootful container for ease
# Note that I does not use $USER var, as with rootful container, 
# I can perform installation as any docker admin user.

$ xhost +local:docker
$ MYUSER=rose docker run -it --rm \
    --network=host \
    -e DISPLAY=$DISPLAY \
    -e DUID=$(id -u $MYUSER) \
    -e DUSER=$MYUSER \
    -v /tmp/.X11-unix:/tmp/.X11-unix \
    -v /home/$MYUSER:/home/$MYUSER \
    test:trixie