Shrink the ISOs: no GPU drivers in the live initrd, server without GPU and sound firmware

- build-iso.sh patches the container's mklive copy: dracut omits amdgpu,
  radeon, nouveau, i915 and xe (and so their firmware) from the live initrd,
  mksquashfs uses 1 MB blocks with the x86 BCJ filter. initrd 245 -> 89 MB.
- das-server 0.2.0 ships /etc/xbps.d/das-server.conf that ignores
  linux-firmware-nvidia, sof-firmware and alsa-firmware; the server ISO
  passes the same list to mklive -g.
- das-install-common 0.2.0: postinstall drops mklive-ignore.conf.

Desktop ISO 1.96 -> 1.72 GB, server ISO 1.57 -> 1.14 GB.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

srcpkgs/das-install-common/files/postinstall

@@ -23,6 +23,9 @@ if ! grep -q '^[^#]*[[:space:]]/tmp[[:space:]]' /etc/fstab; then
 	echo "tmpfs /tmp tmpfs defaults,nosuid,nodev 0 0" >>/etc/fstab
 fi
 
+# mklive's list of packages left out of the image; das-server keeps its own
+rm -f /etc/xbps.d/mklive-ignore.conf
+
 # Guest tools only help inside their own hypervisor (VirtualBox's ones even
 # complain at every login elsewhere).
 machine=$(cat /sys/class/dmi/id/sys_vendor /sys/class/dmi/id/product_name 2>/dev/null || true)

srcpkgs/das-install-common/template

@@ -1,6 +1,6 @@
 # Template file for 'das-install-common'
 pkgname=das-install-common
-version=0.1.0
+version=0.2.0
 revision=1
 depends="das-snapshots dracut rsync"
 short_desc="Das OS installer steps shared by the desktop and server installers"

srcpkgs/das-server/files/xbps-ignore.conf

@@ -0,0 +1,5 @@
+# Firmware a server does not need, otherwise pulled in by linux-base:
+# NVIDIA GPUs and sound cards. Remove a line to get the package back.
+ignorepkg=linux-firmware-nvidia
+ignorepkg=sof-firmware
+ignorepkg=alsa-firmware

srcpkgs/das-server/template

@@ -1,6 +1,6 @@
 # Template file for 'das-server'
 pkgname=das-server
-version=0.1.0
+version=0.2.0
 revision=1
 depends="openssh chrony dhcpcd NetworkManager docker docker-compose nftables
  fail2ban socklog-void python3 curl lazydocker lazygit mc tmux htop
@@ -13,12 +13,14 @@ conf_files="
  /etc/nftables.conf
  /etc/fail2ban/jail.d/das.conf
  /etc/ssh/sshd_config.d/50-das.conf
- /etc/docker/daemon.json"
+ /etc/docker/daemon.json
+ /etc/xbps.d/das-server.conf"
 
 do_install() {
 	vinstall ${FILESDIR}/nftables.conf 644 etc
 	vinstall ${FILESDIR}/fail2ban-das.conf 644 etc/fail2ban/jail.d das.conf
 	vinstall ${FILESDIR}/sshd-das.conf 644 etc/ssh/sshd_config.d 50-das.conf
 	vinstall ${FILESDIR}/docker-daemon.json 644 etc/docker daemon.json
+	vinstall ${FILESDIR}/xbps-ignore.conf 644 etc/xbps.d das-server.conf
 	vlicense ${FILESDIR}/LICENSE
 }