From a056bbe2f55b7d2dd39a1ee61e1bb24a5fc3c5cc Mon Sep 17 00:00:00 2001
From: cinnaboot <cinnaboot@protonmail.com>
Date: Wed, 14 Jun 2023 11:53:07 -0400
Subject: [PATCH] cleanup README, add TODO

---
 README             | 52 ++++++++--------------------------------------
 TODO               | 19 +++++++++++++++++
 group_vars/all.yml |  1 +
 3 files changed, 29 insertions(+), 43 deletions(-)
 create mode 100644 TODO

diff --git a/README b/README
index f8d34bb..6b92623 100644
--- a/README
+++ b/README
@@ -5,49 +5,15 @@ automated installation of Archlinux with a gnome/Xfce desktop configuration,
 	along with common packages.
 
 Initially we use archinstall ( https://wiki.archlinux.org/title/archinstall )
-	to provision with NetworkManager, Xfce, and to start sshd. Could also
-	download the ssh pubkey for ansible, and turn off password logins/disable
-	root login
+	to provision with NetworkManager, gnome desktop, git, and ansible
 
 	archinstall steps:
-	- make/save a new gnome profile
-	- copy archinstall configs
-	- reconfigure disk layout
-	- NOTE: must select seatd when installing sway WM
-	- set root/user passwds
 	- Install
-	- (only for qemu) enable sshd in chroot
-	- enable wheel group in /etc/sudoers
-	- enable/start seatd systemd service
-
-	ansible steps:
-	- (only for qemu) ssh setup, pubkey install
-	- dotfile repo, vim plugin install
-	- dev-tools (optional):
-	- 	make, gcc, cmake, binutils
-
-	- gnome: (only usable to me wayland DE until xfce finishes)
-	- 	dconf dump/load to export/import settings
-	- 	dash-to-panel extension mostly enables settings I prefer
-	- 	gnome-tweaks for extra settings
-
-	- desktop applications:
-	- 	firefox (including user.js and addons),
-	- 		https://github.com/arkenfox/user.js
-	- 	mail-client, audacious, xarchiver, okular, mpv
-
-	=== sandboxing: (aka, stop using firejail's setuid) ===
-
-	ideally would be lightweight lxc containers only running Wayland, with
-		no fallback to X11
-		- https://wiki.archlinux.org/title/LXD#Use_Wayland_and_Xorg_applications
-		- https://discuss.linuxcontainers.org/t/overview-gui-inside-containers/8767
-		- https://blog.simos.info/running-x11-software-in-lxd-containers/
-		- for issues mounting the X socket:
-			https://github.com/lxc/lxd/issues/6584#issuecomment-564367714
-
-	for seccomp filtering, maybe try bwrap, or flatpak
-		however: https://hanako.codeberg.page/
-
-	will always leak via the X11 socket unless using Wayland, or xpra
-
+		# archinstall --config files/archinstall/user_configuration.json
+		- reconfigure disk layout
+		- set root/user passwds
+
+	- (optionally) enable the wheel group in /etc/sudoers
+	- reboot
+	- run
+		$ ansible-playbook ./local.yml
diff --git a/TODO b/TODO
new file mode 100644
index 0000000..57d6a0c
--- /dev/null
+++ b/TODO
@@ -0,0 +1,19 @@
+
+=== sandboxing: (aka, stop using firejail's setuid) ===
+
+ideally would be lightweight lxc containers only running Wayland, with
+	no fallback to X11
+	- there is a '--no-x11' flag for 'gnome-shell':
+		- https://old.reddit.com/r/gnome/comments/xa18en/how_to_disable_xwayland_completely/
+	- https://wiki.archlinux.org/title/LXD#Use_Wayland_and_Xorg_applications
+	- https://discuss.linuxcontainers.org/t/overview-gui-inside-containers/8767
+	- https://blog.simos.info/running-x11-software-in-lxd-containers/
+	- for issues mounting the X socket:
+		https://github.com/lxc/lxd/issues/6584#issuecomment-564367714
+
+for seccomp filtering, maybe try bwrap, or flatpak
+	lxc already uses seccomp filtering
+		see: /usr/share/lxc/config/common.seccomp
+
+evolution mail client:
+- copy ~/.config/evolution, and ~/.local/share/evolution to new install
diff --git a/group_vars/all.yml b/group_vars/all.yml
index 92578c9..8471679 100644
--- a/group_vars/all.yml
+++ b/group_vars/all.yml
@@ -17,6 +17,7 @@ packages_shell:
 packages_desktop:
   - audacious
   - firefox
+  - gnome-tweaks
   - mpv
   - okular
   - xarchiver