diff options
Diffstat (limited to 'os')
| -rw-r--r-- | os/.envrc | 1 | ||||
| -rw-r--r-- | os/README.md | 17 | ||||
| -rw-r--r-- | os/manifest | 48 |
3 files changed, 49 insertions, 17 deletions
diff --git a/os/.envrc b/os/.envrc new file mode 100644 index 0000000..4cfd171 --- /dev/null +++ b/os/.envrc @@ -0,0 +1 @@ +export SOPS_PGP_FP=17AE9645C9848DA159D6643B8E8F20D25FF33529 diff --git a/os/README.md b/os/README.md index 8ca3356..80db948 100644 --- a/os/README.md +++ b/os/README.md @@ -1,8 +1,15 @@ -# os configuration +# OS configuration -TODO script that does: +use `os-conf` to save and `os-conf -r /` to restore configuration +the script reads a manifest file inside `$OS_DIR`, which defaults to `$HOME/os` -* parse manifest -* backup listed files from rootfs -* patch/add files in rootfs +## manifest syntax +lines prefixed with `#` or `$` are ignored, the magic comment `#secret`, when +appended to a line, marks the entry as containing data that shouldn't be checked +into a public repository. Instead we use [sops](https://github.com/mozilla/sops) to encrypt and store it under +`$OS_DIR/tmp/os-secret-*`. These encrypted archives are transparently handled +by the restore code. + +Encryption requires the `SOPS_PGP_FP` environment variable (or whatever is required +by any of the other supported encryption schemes). diff --git a/os/manifest b/os/manifest index debfc00..1e6047f 100644 --- a/os/manifest +++ b/os/manifest @@ -1,20 +1,44 @@ -# portage config +# portage /var/lib/portage/world -/etc/portage/* +/etc/portage +/etc/eixrc +/etc/eix-sync.conf +/etc/genup/updaters.d/10-tip.sh +/etc/genup/updaters.d/23-eclean-packages.sh -# openrc config -/etc/conf.d/* -/etc/runlevels/* - -/etc/buildkernel.conf -/etc/doas.conf +# core /etc/fstab -/etc/bluetooth/audio.conf -/etc/profile.d/toolbox.sh /etc/hosts +/etc/resolvconf.conf +/etc/resolv.conf +/etc/doas* +/etc/profile.d/toolbox.sh +/etc/profile.d/xdg-cache-home.sh +/etc/bluetooth +# kernel stuff +/etc/buildkernel.conf +/etc/genkernel.conf /usr/src/linux/.config -/usr/src/linux-5.10.76-gentoo-r1/.config -/usr/src/linux-5.15.16-gentoo/.config +/usr/src/linux-5.10*/.config +/usr/src/linux-5.15*/.config /var/spool/cron/crontabs/robert + +# wifi +/etc/iwd +/var/lib/iwd #secret +/etc/netplug.d + +# services +/etc/conf.d +/etc/runlevels + +/etc/buildkit +/etc/cgroup +/etc/default +/etc/env.d/99bemenu.in +/etc/env.d/99bemenu.out + +#/etc/greetd +#/etc/plymouth |