feat: add codecs from negativo

also removes additions from here that are already in the base image like
bootc, wl-clipboard

Author: renner0e

build_files/base/04-packages.sh

@@ -5,6 +5,35 @@ echo "::group:: ===$(basename "$0")==="
 set -ouex pipefail
 
 # All DNF-related operations should be done here whenever possible
+#
+# use negativo17 for 3rd party packages with higher priority than default
+if ! grep -q fedora-multimedia <(dnf5 repolist); then
+    # Enable or Install Repofile
+    dnf5 config-manager setopt fedora-multimedia.enabled=1 ||
+        dnf5 config-manager addrepo --from-repofile="https://negativo17.org/repos/fedora-multimedia.repo"
+fi
+# Set higher priority
+dnf5 config-manager setopt fedora-multimedia.priority=90
+
+# use override to replace mesa and others with less crippled versions
+OVERRIDES=(
+    "intel-gmmlib"
+    "intel-mediasdk"
+    "intel-vpl-gpu-rt"
+    "libheif"
+    "libva"
+    "libva-intel-media-driver"
+    "mesa-dri-drivers"
+    "mesa-filesystem"
+    "mesa-libEGL"
+    "mesa-libGL"
+    "mesa-libgbm"
+    "mesa-va-drivers"
+    "mesa-vulkan-drivers"
+)
+
+dnf5 distro-sync --skip-unavailable -y --repo='fedora-multimedia' "${OVERRIDES[@]}"
+dnf5 versionlock add "${OVERRIDES[@]}"
 
 # shellcheck source=build_files/shared/copr-helpers.sh
 source /ctx/build_files/shared/copr-helpers.sh
@@ -14,15 +43,14 @@ source /ctx/build_files/shared/copr-helpers.sh
 # malicious COPRs from injecting fake versions of Fedora packages.
 # Fedora packages are installed first in bulk (safe).
 # COPR packages are installed individually with isolated enablement.
-
 # Base packages from Fedora repos - common to all versions
 FEDORA_PACKAGES=(
     adcli
     adw-gtk3-theme
     adwaita-fonts-all
-    bash-color-prompt
+    alsa-firmware
+    alsa-tools-firmware
     bcache-tools
-    bootc
     borgbackup
     containerd
     cryfs
@@ -32,40 +60,55 @@ FEDORA_PACKAGES=(
     fastfetch
     firewall-config
     fish
+    flatpak-spawn
     foo2zjs
     fuse-encfs
     gcc
     git-credential-libsecret
     glow
     gnome-tweaks
+    google-noto-sans-cjk-fonts
+    grub2-tools-extra
     gum
-    hplip
+    gvfs-nfs
+    htop
     ibus-mozc
+    ibus-unikey
     ifuse
     igt-gpu-tools
     input-remapper
+    intel-vaapi-driver
     iwd
     jetbrains-mono-fonts-all
     just
     krb5-workstation
+    libcamera-gstreamer
+    libcamera-tools
     libgda
     libgda-sqlite
-    libimobiledevice
+    libimobiledevice-utils
     libratbag-ratbagd
     libsss_autofs
+    libva-utils
     libxcrypt-compat
     lm_sensors
+    lshw
     make
-    mesa-libGLU
     mozc
+    mtools
     nautilus-gsconnect
+    net-tools
+    ocl-icd
     oddjob-mkhomedir
     opendyslexic-fonts
+    openrgb-udev-rules
     openssh-askpass
+    pam-u2f
+    pam_yubico
+    pamu2fcfg
+    pipewire-libs-extra
     powerstat
     powertop
-    printer-driver-brlaser
-    pulseaudio-utils
     python3-pip
     python3-pygit2
     rclone
@@ -76,56 +119,22 @@ FEDORA_PACKAGES=(
     samba-winbind-clients
     samba-winbind-modules
     setools-console
-    sssd-ad
-    sssd-krb5
-    sssd-nfs-idmap
-    switcheroo-control
-    tmux
-    usbip
-    usbmuxd
-    waypipe
-    wireguard-tools
-    wl-clipboard
-    xdg-terminal-exec
-    xprop
-    zenity
-    zsh
-    adw-gtk3-theme
-    gvfs-nfs
-    ibus-unikey
-    ibus-mozc
-
-    alsa-firmware
-    alsa-tools-firmware
-    flatpak-spawn
-    pipewire-libs-extra
-    oversteer-udev
-    google-noto-sans-cjk-fonts 
-    grub2-tools-extra
-    htop
-    intel-vaapi-driver
-    libcamera-gstreamer
-    libcamera-tools
-    libimobiledevice-utils
-    libva-utils
-    lshw
-    mtools
-    net-tools
-    ocl-icd
-    openrgb-udev-rules
-    oversteer-udev
-    pam-u2f
-    pam_yubico
-    pamu2fcfg
-    pipewire-libs-extra
     smartmontools
     solaar-udev
     squashfs-tools
+    sssd-ad
+    sssd-krb5
     symlinks
     tcpdump
+    tmux
     traceroute
+    usbip
     vim
+    waypipe
+    xdg-terminal-exec
     yubikey-manager 
+    zenity
+    zsh
 )
 
 if [[ "${IMAGE_NAME}" =~ nvidia ]]; then
@@ -156,8 +165,6 @@ dnf config-manager addrepo --from-repofile=https://pkgs.tailscale.com/stable/fed
 dnf config-manager setopt tailscale-stable.enabled=0
 dnf -y install --enablerepo='tailscale-stable' tailscale
 
-dnf config-manager addrepo --from-repofile=https://negativo17.org/repos/fedora-multimedia.repo
-dnf config-manager setopt fedora-multimedia.enabled=0
 dnf -y install --enablerepo=fedora-multimedia \
     -x PackageKit* \
     ffmpeg libavcodec @multimedia gstreamer1-plugins-{bad-free,bad-free-libs,good,base} lame{,-libs} libjxl ffmpegthumbnailer
@@ -166,7 +173,9 @@ dnf -y install --enablerepo=fedora-multimedia \
 copr_install_isolated "che/nerd-fonts" "nerd-fonts"
 
 # From ublue-os/packages
-copr_install_isolated "ublue-os/packages" "uupd"
+copr_install_isolated "ublue-os/packages" \
+    "uupd" \
+    "oversteer-udev"
 
 # Version-specific COPR packages
 # case "$FEDORA_MAJOR_VERSION" in
@@ -182,21 +191,22 @@ copr_install_isolated "ublue-os/packages" "uupd"
 
 # Packages to exclude - common to all versions
 EXCLUDED_PACKAGES=(
+    default-fonts-cjk-sans
     fedora-bookmarks
     fedora-chromium-config
     fedora-chromium-config-gnome
+    fedora-third-party
     firefox
     firefox-langpacks
     gnome-extensions-app
     gnome-shell-extension-background-logo
+    gnome-software
     gnome-software-rpm-ostree
     gnome-terminal-nautilus
+    google-noto-sans-cjk-vf-fonts
     podman-docker
-    yelp
     totem-video-thumbnailer
-    gnome-software
-    google-noto-sans-cjk-vf-fonts
-    default-fonts-cjk-sans
+    yelp
 )
 
 # Version-specific package exclusions

build_files/base/20-tests.sh

@@ -57,7 +57,9 @@ done
 # these packages are supposed to be removed
 # and are considered footguns
 UNWANTED_PACKAGES=(
+    fedora-flathub-remote
     fedora-logos
+    fedora-third-party
     firefox
     gnome-software
     gnome-software-rpm-ostree