- das-helpers replaces the dsv package and adds shared functions in
/usr/lib/das/helpers.sh (bilingual messages, sudo re-exec, prompts).
- dsv new creates a runit service (command, user, directory, environment,
svlogd log) and checks it stays up; dsv rm deletes one not from a package.
- duser: list, add (installer groups, --admin, key, password), del, passwd,
lock/unlock (key logins too), key add|list|rm, groups +/-.
- dfw: allow/deny/status/reload for the tcp_ports and udp_ports sets of the
inet das table, kept in /etc/nftables.d/dfw.nft and checked with nft -c.
- dsys: info, hostname, timezone, locale, keymap.
- xtools-minimal on both images.
- nftables.conf no longer suggests restarting the nftables service: its
finish script flushes the whole ruleset, fail2ban's and Docker's included.
- das-server-install 0.2.0 mentions the helpers when it finishes.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- build-iso.sh patches the container's mklive copy: dracut omits amdgpu,
radeon, nouveau, i915 and xe (and so their firmware) from the live initrd,
mksquashfs uses 1 MB blocks with the x86 BCJ filter. initrd 245 -> 89 MB.
- das-server 0.2.0 ships /etc/xbps.d/das-server.conf that ignores
linux-firmware-nvidia, sof-firmware and alsa-firmware; the server ISO
passes the same list to mklive -g.
- das-install-common 0.2.0: postinstall drops mklive-ignore.conf.
Desktop ISO 1.96 -> 1.72 GB, server ISO 1.57 -> 1.14 GB.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- server/ profile and build-iso.sh [desktop|server]; make iso-server,
make qemu-server, run-qemu.sh --serial; login on tty and ttyS0
- das-server: SSH, chrony, NetworkManager/dhcpcd, Docker with Compose,
nftables (closed except SSH, own table), fail2ban reading socklog,
sshd without root passwords, Docker log rotation, tools
- das-server-install: dialog installer in Ukrainian and English, or
unattended with --config; GPT + Btrfs subvolumes, GRUB for UEFI and BIOS,
serial console, SSH key with optional keys-only logins
- das-install-common: mount-source and postinstall shared with Calamares
- dsv: runit service manager (list, enable, disable, start, stop,
restart, status, logs) with bash completion, also on the desktop
- das-update split into a subpackage without GTK; the window and tray
icon move to /usr/libexec/das/das-update-gui
- das-snapper-setup enables dbus, which snapper needs
- TODO: ISO size review with measured numbers and options
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
dasandClaude Opus 5.5