test

Author: AtiusAmy

files/scripts/example.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+echo "Installing secureblue Trivalent selinux policy"
+echo "Install 'selinux-policy-devel' build package & it's dependencies"
+dnf5 -y install selinux-policy-devel
+echo "Downloading secureblue Trivalent selinux policy"
+mkdir -p ./selinux/trivalent
+cd ./selinux/trivalent
+SELINUX_POLICY_URL="https://raw.githubusercontent.com/secureblue/secureblue/refs/heads/live/files/scripts/selinux/trivalent"
+curl -fLs --create-dirs -O "${SELINUX_POLICY_URL}/trivalent.fc" --output-dir "${PWD}"
+curl -fLs --create-dirs -O "${SELINUX_POLICY_URL}/trivalent.if" --output-dir "${PWD}"
+curl -fLs --create-dirs -O "${SELINUX_POLICY_URL}/trivalent.te" --output-dir "${PWD}"
+curl -fLs --create-dirs -O "${SELINUX_POLICY_URL}/trivalent.sh" --output-dir "${PWD}"
+echo "Executing trivalent.sh script"
+bash "${PWD}/trivalent.sh"
+cd ../..
+echo "Cleaning up build package 'selinux-policy-devel' & it's dependencies"
+dnf5 -y remove selinux-policy-devel
+
+echo "Assure that network sandbox is always disabled by default (to ensure that login data remains)"
+echo "https://github.com/fedora-silverblue/issue-tracker/issues/603"
+echo -e '\nCHROMIUM_FLAGS+=" --disable-features=NetworkServiceSandbox"' >> /etc/trivalent/trivalent.conf
+
+echo "Enable middle-click scrolling by default"
+sed -i '/CHROMIUM_FLAGS+=" --enable-features=\$FEATURES"/d' /etc/trivalent/trivalent.conf
+echo -e '\nFEATURES+=",MiddleClickAutoscroll"\nCHROMIUM_FLAGS+=" --enable-features=$FEATURES"' >> /etc/trivalent/trivalent.conf

files/scripts/selinux.sh

@@ -6,8 +6,8 @@ name: otariinae-os
 description: This is my personal OS image.
 
 # the base image to build on top of (FROM) and the version tag to use
-base-image: ghcr.io/ublue-os/silverblue-main
-image-version: 41 # latest is also supported if you want new updates ASAP
+base-image: ghcr.io/ublue-os/aurora-dx-nvidia-open
+image-version: stable-daily # latest is also supported if you want new updates ASAP
 
 # module configuration, executed in order
 # you can include multiple instances of the same module
@@ -17,27 +17,24 @@ modules:
       - source: system
         destination: / # copies files/system/* (* means everything inside it) into your image's root folder /
 
-  - type: rpm-ostree
+  - type: dnf
     repos:
-      - https://copr.fedorainfracloud.org/coprs/atim/starship/repo/fedora-%OS_VERSION%/atim-starship-fedora-%OS_VERSION%.repo
+      cleanup: true
+      files: 
+        - https://repository.mullvad.net/rpm/stable/mullvad.repo
+        - https://repo.secureblue.dev/secureblue.repo
+    optfix:
+      - Mullad VPN
+      - cfxoffice
     install:
-      - micro
-      - starship
-    remove:
-      # example: removing firefox (in favor of the flatpak)
-      # "firefox" is the main package, "firefox-langpacks" is a dependency
-      - firefox
-      - firefox-langpacks # also remove firefox dependency (not required for all packages, this is a special case)
+      packages:
+        - mullvad-vpn
+        - http://crossover.codeweavers.com/redirect/crossover.rpm
+        - trivalent
+  - type: script
+    scripts:
+      - selinux.sh
 
-  - type: default-flatpaks
-    configurations:
-      - notify: true # Send notification after install/uninstall is finished (true/false)
-        scope: system
-        # If no repo information is specified, Flathub will be used by default
-        install: # system flatpaks we want all users to have and not remove
-          - org.mozilla.firefox
-          - org.gnome.Loupe
-      - scope: user # Also add Flathub user repo, but no user packages
 
   - type: signing # this sets up the proper policy & signing files for signed images to work fully