X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=distro-begin;h=4b591c15f536b921921701d9d18d484c1d1de6f1;hb=ad6ea16ea6f2a8676527257fb6afb659f2cee475;hp=a0e9b0742610dd75c07e8606374e35644e8c664c;hpb=ce4cacd36c5b5babeea85d0f93771017e6169180;p=distro-setup diff --git a/distro-begin b/distro-begin index a0e9b07..4b591c1 100755 --- a/distro-begin +++ b/distro-begin @@ -350,11 +350,28 @@ case $HOSTNAME in esac +lines=( + "/etc/resolved-nsswitch/nsswitch.conf r," + "/etc/basic-nsswitch/nsswitch.conf r," + # Aug 06 23:09:11 kd audit[3995]: AVC apparmor="DENIED" operation="connect" profile="/usr/bin/freshclam" name="/run/systemd/resolve/io.systemd.Resolve" pid=3995 comm="freshclam" requested_mask="wr" denied_mask="wr" fsuid=109 ouid=101 + # I dont know if this is quite the right fix, but I saw other sockets + # in the nameservice files that were rw, so figured it was ok to add this and it worked. + "/run/systemd/resolve/io.systemd.Resolve rw," +) f=/etc/apparmor.d/abstractions/nameservice -if [[ -e $f ]] && ! grep -q /etc/resolved-nsswitch/nsswitch.conf $f; then - sudo sed -i '/\/etc\/nsswitch.conf/a /etc/resolved-nsswitch/nsswitch.conf r,' $f - sudo sed -i '/\/etc\/nsswitch.conf/a /etc/basic-nsswitch/nsswitch.conf r,' $f - if sytemctl is-enabled apparmor; then +apparmor_reload=false +if [[ -e $f ]]; then + for l in "${lines[@]}"; do + if ! grep -qF "$l" $f; then + sudo sed -i "/\/nsswitch.conf/a $l" $f + apparmor_reload=true + if ! grep -qF "$l" $f; then + echo "$0: failed editing $f. investigate" + exit 1 + fi + fi + done + if $apparmor_reload && systemctl is-enabled apparmor; then m ser reload apparmor fi fi @@ -377,7 +394,7 @@ if bitfolk; then sudo sed -ri "/^127\./n;/[[:space:]]$HOSTNAME\$/d" /etc/hosts fi -if isdeb && [[ $(debian-codename) == nabia ]]; then +if isdeb && [[ $(debian-codename) == aramo ]]; then sudo dd of=/etc/apt/preferences.d/aramo-jammy-missing <<'EOF' Package: linux-libc-dev libmysqlclient21 Pin: release n=jammy,o=Ubuntu @@ -466,7 +483,7 @@ pi ${p1[@]} ######## fix evbug bug ###### case $(debian-codename-compat) in - xenial|bionic|focal) + xenial|bionic|focal|jammy) # noticed in flidas. dunno if it affects any others #https://bugs.launchpad.net/ubuntu/+source/module-init-tools/+bug/240553 #https://wiki.debian.org/KernelModuleBlacklisting @@ -688,20 +705,17 @@ if has_monitor; then dir=/etc/X11/xinit/xinitrc.d/ sudo mkdir -p $dir sudo cp /a/bin/distro-setup/desktop-20-autostart.sh $dir - s teeu /etc/systemd/logind.conf <<'EOF' -HandleLidSwitch= -EOF - # this works on - dir=/etc/gdm3 - sudo mkdir -p $dir/PostLogin - sudo cp /a/bin/distro-setup/desktop-20-autostart.sh $dir/PostLogin/Default + ## disabled since i'm not using gdm atm + # dir=/etc/gdm3 + # sudo mkdir -p $dir/PostLogin + # sudo cp /a/bin/distro-setup/desktop-20-autostart.sh $dir/PostLogin/Default sudo mkdir -p /etc/lightdm/lightdm.conf.d # etiona lightdm.log: # [SeatDefaults] is now called [Seat:*], please update this configuration sudo dd of=/etc/lightdm/lightdm.conf.d/12-iank.conf <<'EOF' [Seat:*] -display-setup-script=/a/bin/ds/lightdm-start +# display-setup-script=/a/bin/ds/lightdm-start session-setup-script=/a/bin/distro-setup/desktop-20-autostart.sh EOF @@ -731,8 +745,10 @@ if $emacs; then else if $recompile; then /a/bin/buildscripts/emacs + /a/bin/buildscripts/mu4e else /a/bin/buildscripts/emacs --no-r + /a/bin/buildscripts/mu4e --no-r fi fi # the first pup command can kill off our /etc/ mod, so rerun this