veilor-os/scripts/firstboot.sh

19 lines
625 B
Bash
Executable file

#!/usr/bin/env bash
# veilor-os — first user-login touch-ups (runs once via XDG autostart)
# Currently a placeholder for per-user setup that can't be done at install time.
set -uo pipefail
DONE=$HOME/.config/veilor-firstboot.done
[[ -f $DONE ]] && exit 0
# ── Generate USBGuard allowlist for currently connected devices ──
# Requires sudo; admin runs this manually:
# sudo usbguard generate-policy > /etc/usbguard/rules.conf
# sudo systemctl restart usbguard
# ── Refresh font cache for user ──
fc-cache -f "$HOME/.local/share/fonts" 2>/dev/null || true
mkdir -p "$(dirname "$DONE")"
touch "$DONE"