Desktop

This repository defines the configuration used by my desktop machines. Changes to this repository are not automatically applied but basically linted on every push to the master branch.

Bootstrap

After following the steps of the installation below you got to copy SSH and GnuPG keys from the private secrets stick on the machine with the following snippets and finally execute the bootstrap script to clone this repository. Generally the stick should be mounted automatically.

Install

Select Language

Keyboard Layout

Language Support

Select Location

Select Disk

Encryption Setup

Select Network

Enable Root

User Details

Create User

Install Summary

Reboot System

After the installation have been finished you should always pin the version to have a proper point to rollback. Just execute sudo ostree admin pin 0 to pin the current installed version.

SSH

mkdir -p ${HOME}/.ssh/
cp /media/$(whoami)/secrets/ssh/id_* ${HOME}/.ssh/
chown -R $(id -u):$(id -g) ${HOME}/.ssh
chmod u=rw,g=,o= ${HOME}/.ssh/id_*

Gnupg

for FILE in /media/$(whoami)/secrets/gpg/*.asc; do
    gpg --import ${FILE}
done

Finish

export MACHINE=example
export VAULTPWD=p455w0rd

wget -O- https://raw.githubusercontent.com/tboerger/desktop/master/bin/bootstrap | sudo bash -s -- $MACHINE
echo $VAULTPWD > /home/$(whoami)/.desktop/.vaultpasswd && chown $(id -u):$(id -g) /home/$(whoami)/.desktop/.vaultpasswd

Usage

Anubis

anubis-selfupdate

anubis-layers -D
reboot

anubis-playbook -D
anubis-distrobox -D
anubis-dotfiles -D

Chnum

chnum-selfupdate

chnum-layers -D
reboot

chnum-playbook -D
chnum-distrobox -D
chnum-dotfiles -D

Horus

horus-selfupdate

horus-layers -D
reboot

horus-playbook -D
horus-distrobox -D
horus-dotfiles -D

Imhotep

imhotep-selfupdate

imhotep-layers -D
reboot

imhotep-playbook -D
imhotep-distrobox -D
imhotep-dotfiles -D

Osiris

osiris-selfupdate

osiris-layers -D
reboot

osiris-playbook -D
osiris-distrobox -D
osiris-dotfiles -D

Security

If you find a security issue please contact thomas@webhippie.de first.

Contributing

Fork -> Patch -> Push -> Pull Request

Authors

• Thomas Boerger

License

Apache-2.0

Copyright

Copyright (c) 2023 Thomas Boerger <thomas@webhippie.de>