s8n
3cbffaf714
sec: AppArmor profile skeletons + audit shipping draft + veilor-firstboot SELinux module ( #3 )
...
Co-authored-by: veilor-org <admin@veilor.org>
2026-05-02 04:39:39 +01:00
s8n
2d6f6b07f6
ci: quote $@ in tuned profile scripts (SC2068) ( #10 )
...
Pre-existing shellcheck failure blocking all PR merges. Standard
"double-quote array expansions" fix. No behavior change.
Co-authored-by: veilor-org <admin@veilor.org>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-02 04:17:22 +01:00
veilor-org
3328ffb460
v0.5.0-alpha: TTY1 installer (omarchy/archinstall-style)
...
Adds:
- overlay/usr/local/sbin/veilor-installer — bash+whiptail TUI
- overlay/etc/systemd/system/getty@tty1.service.d/veilor-installer.conf
→ replaces tty1 login with installer
- ks: newt + parted + cryptsetup + lvm2 + btrfs-progs packages
- ks: systemctl set-default multi-user.target (TTY1 lands first; user
picks "Try live — desktop" from menu to isolate graphical.target)
- ks: chmod +x veilor-installer in chroot %post
Flow:
1. Boot ISO → TTY1 → ASCII banner + menu:
1) Install to disk 2) Try live — desktop 3) Try live — shell
4) Reboot 5) Power off
2. Install path: collects disk/hostname/LUKS/admin pw/locale via whiptail,
generates /run/install/veilor-generated.ks, execs anaconda --kickstart=
3. Reboots into hardened install with full init_on_alloc/free cmdline
Known limitations (v0.5.0-alpha):
- Generated ks doesn't yet copy overlay/scripts into target (anaconda
installs base Fedora, missing veilor branding/hardening). Fix in v0.5.1.
- whiptail = ugly. v0.5.1 swaps to gum (Go TUI) for omarchy-tier UX.
- No mid-install progress bar; anaconda runs unattended in same tty.
2026-05-02 03:20:42 +01:00
veilor-org
22928b0a83
v0.2.6: drop '(Fedora 43 base)' from PRETTY_NAME; chown -R 0:0 overlay (cp -a preserved CI uid 1001 → sudo refused sudoers.d)
2026-05-02 01:08:03 +01:00
veilor-org
86b3a6fa7a
ci: switch refs from veilor → veilor-org (GH org slug); domain veilor.org
2026-04-30 13:59:20 +01:00
veilor
d44e9bbdd9
ci: github actions workflow (build-iso + lint), CONTRIBUTING, CODEOWNERS, PR template
...
CI builds in fresh Fedora 43 container — matched pcre2/libselinux/selinux-policy
versions, no fix-repo hack needed. Container starts every run from clean
state, no zombie collisions. Fastest path to first green ISO.
2026-04-30 13:56:03 +01:00
veilor
1822005df1
veilor-os v0.1 scaffold — kickstart + hardening + 3-mode power + DuckSans-ready KDE black theme
2026-04-30 03:43:33 +01:00
