Initial build setup for x86_64 Stormux.

pi3/build/build-stormux.sh

@@ -1,276 +0,0 @@
-#! /bin/bash
-#
-# Copyright 2020, Stormux, <storm_dragon@linux-a11y.org>
-#
-# This is free software; you can redistribute it and/or modify it under the
-# terms of the GNU General Public License as published by the Free
-# Software Foundation; either version 3, or (at your option) any later
-# version.
-#
-# This software is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this package; see the file COPYING.  If not, write to the Free
-# Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
-# 02110-1301, USA.
-#
-
-# keep track of mounted status for exit function
-mounted=1
-
-set -e # Don't want to destroy stuff if this goes majorly wrong.
-trap cleanup EXIT # make sure the script cleans up after itself before closing.
-
-
-cleanup() {
-    if [[ $mounted -eq 0 ]]; then
-        umount -R /mnt
-        partx -d "${loopdev}"
-        losetup --detach "${loopdev}"
-    fi
-    if [[ -n "${imageFileName}" ]]; then
-        rm "${imageFileName}"
-    fi
-    exit 0
-}
-
-help() {
-    echo -e "Usage:\n"
-    echo "With no arguments, build with default parameters."
-    for i in "${!command[@]}" ; do
-        echo "-${i/:/ <parameter>}: ${command[${i}]}"
-    done | sort
-    exit 0
-}
-
-# Array of command line arguments
-declare -A command=(
-    [h]="This help screen."
-    [l:]="Language default is en_US."
-    [n:]="Image name, default is stormux-pi3-<armv7h|aarch64>-<yyyy-mm-dd>.img"
-    [s:]="image size in GB, default is 4."
-    [v:]="Version of the Raspberry Pi for which you are building. (32|64) default is 64."
-)
-
-# Convert the keys of the associative array to a format usable by getopts
-args="${!command[*]}"
-args="${args//[[:space:]]/}"
-while getopts "${args}" i ; do
-    case "$i" in
-        h) help ;;
-        l)
-            imageLanguage="${OPTARG}.UTF-8"
-            ;;
-        n)
-            imageName="${OPTARG}"
-            ;;
-        s)
-            if [[ "${OPTARG}" =~ ^[[:digit:]]+$ ]]; then
-                imageSize="${OPTARG}G"
-            else
-                echo "Image size must be numeric."
-                exit 1
-            fi
-            ;;
-        v)
-            if [[ "${OPTARG}" =~ ^32|64$ ]]; then
-                imageVersion="${OPTARG}"
-            else
-                echo "Image version must be 32 for 32 bit (armv7h), or 64 for 64 bit (aarch64 default)."
-                exit 1
-            fi
-            ;;
-        *)
-            exit 1
-            ;;
-    esac
-done
-
-# make sure variables are set, or use defaults.
-export imageVersion="${imageVersion:-64}"
-export imageSize="${imageSize:-4G}"
-imageName="${imageName:-stormux-pi3-${imageVersion}-$(date '+%Y-%m-%d').img}"
-imageName="${imageName/-64-/-aarch64-}"
-imageName="${imageName/-32-/-armv7h-}"
-export imageName
-export imageLanguage="${imageLanguage:-en_US.UTF-8}"
-
-# Make sure the image file doesn't exist.
-if [[ -e "$imageName" ]]; then
-    echo "${imageName} exists, please remove or move it for this script to continue."
-    exit 1
-fi
-
-# Make sure this script is ran as root.
-if [ "$(whoami)" != "root" ] ; then
-    echo "Error: This script must be run as root."
-    exit 1
-fi
-
-# make sure the needed tools are installed
-if [[ "$(uname -m)" == "x86_64" ]]; then
-    if ! pacman -Q qemu-user-static &> /dev/null ; then
-        echo "Please install qemu-user-static and qemu-user-static-binfmt before continuing."
-        exit 1
-    fi
-    if ! pacman -Q qemu-user-static-binfmt &> /dev/null ; then
-        echo "Please install qemu-user-static and qemu-user-static-binfmt before continuing."
-        exit 1
-    fi
-fi
-for i in arch-install-scripts dosfstools parted wget ; do
-    if ! pacman -Q $i &> /dev/null ; then
-        echo "Please install $i before continuing."
-        exit 1
-    fi
-done
-
-
-# Url for the image to be downloaded.
-url[32]="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-armv7-latest.tar.gz"
-url[64]="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-aarch64-latest.tar.gz"
-
-fallocate -l "$imageSize" "$imageName"
-loopdev="$(losetup --find --show "${imageName}")"
-parted --script "${loopdev}" mklabel msdos mkpart primary fat32 0% 200M mkpart primary ext4 200M 100%
-mkfs.vfat -F32 "${loopdev}p1"
-mkfs.ext4 -F "${loopdev}p2"
-mount "${loopdev}p2" /mnt
-mkdir /mnt/boot
-mount "${loopdev}p1" /mnt/boot
-# Things are mounted now, so set mounted to 0 (bash true)
-mounted=0
-imageFileName=$(mktemp)
-wget "${url[$imageVersion]}" -O "${imageFileName}"
-bsdtar -xpf "${imageFileName}" -C /mnt
-arch-chroot /mnt << EOF
-# set up pacman
-pacman-key --init
-pacman-key --populate archlinuxarm
-pacman -Syy
-# Change kernels for aarch64
-if [[ "$imageVersion" == "64" ]]; then
-pacman -R --noconfirm linux-aarch64 uboot-raspberrypi
-pacman -S --noconfirm linux-rpi
-fi
-
-# Install packages
-pacman -Su --needed --noconfirm \
-    alsa-firmware \
-    alsa-utils \
-    base \
-    base-devel \
-    bash-completion \
-    bluez \
-    bluez-utils \
-    brltty \
-    cloud-utils \
-    cronie \
-    dbus-broker \
-    espeak-ng \
-    fake-hwclock \
-    git \
-    go \
-    magic-wormhole \
-    man \
-    man-pages \
-    networkmanager \
-    ntp \
-    pipewire \
-    pipewire-alsa \
-    pipewire-jack \
-    pipewire-pulse \
-    poppler \
-    python-pyudev \
-    python-daemonize \
-    python-evdev \
-    python-dbus \
-    python-pyte \
-    raspberrypi-firmware \
-    realtime-privileges \
-    rhvoice-voice-bdl \
-    rng-tools \
-    rsync \
-    screen \
-    sox \
-    w3m \
-    wget \
-    wireless-regdb \
-    wireplumber \
-    xdg-user-dirs \
-    xdg-utils
-
-# set the language
-sed -i "s/#$imageLanguage/$imageLanguage/" /etc/locale.gen
-echo "LANG=$imageLanguage" > /etc/locale.conf
-locale-gen
-# Configure and enable Hardware Random Number Generator
-echo 'RNGD_OPTS="-o /dev/random -r /dev/hwrng"' > /etc/conf.d/rngd
-systemctl enable rngd.service
-# Set the distribution name.
-echo 'Stormux \r (\l)' > /etc/issue
-echo >> /etc/issue
-# Change the alarm user to be stormux
-usermod -a -g users -G wheel,realtime,audio,video,network,brlapi -m -d /home/stormux -l stormux alarm
-# Grant sudo privileges to the stormux user for package installation.
-echo 'stormux ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers.d/wheel
-# Set the password for the root user
-echo -e "root\nroot" | passwd "root"
-# Set the password for the stormux user
-echo -e "stormux\nstormux" | passwd "stormux"
-# Change to the stormux user and install some packages
-sudo -iu stormux
-# Create desktop, downloads, music, and other directories.
-xdg-user-dirs-update
-# Build AUR packages
-export aurPackages=(fenrir-git \
-    growpartfs \
-    log2ram \
-    yay)
-export PKGDEST=~/packages
-for p in "\${aurPackages[@]}" ; do
-    git clone https://aur.archlinux.org/\${p}.git
-    cd ~/\${p}
-    makepkg -A
-    cd ~
-    rm -rf \${p}
-done
-exit
-# Install built packages
-for p in /home/stormux/packages/* ; do
-    pacman -U --noconfirm \${p}
-done
-rm -rf /home/stormux/packages/
-# Enable linger so that hopefully sound will start at login.
-mkdir -p /var/lib/systemd/linger
-touch /var/lib/systemd/linger/stormux
-systemctl --global enable dbus-broker.service pipewire.service pipewire-pulse.service
-/usr/share/fenrirscreenreader/tools/configure_pipewire.sh
-sudo -u stormux /usr/share/fenrirscreenreader/tools/configure_pipewire.sh
-# Configure sudo for group wheel, remove nopasswd for the stormux user
-echo '%wheel ALL=(ALL) ALL' > /etc/sudoers.d/wheel
-# Set the hostname
-echo stormux > /etc/hostname
-# Configure services
-systemctl enable brltty.path cronie.service dbus-broker.service fake-hwclock.service fenrirscreenreader.service log2ram.service NetworkManager.service ntpd.service
-systemctl disable dbus.service
-# Cleanup packages
-pacman -Sc --noconfirm
-pacman -R --noconfirm go
-
-# Update fstab for Raspberry Pi 4. Not needed until linux-aarch64 works.
-# [[ $imageVersion -eq 4 ]] && sed -i 's/mmcblk0/mmcblk1/g' /etc/fstab
-EOF
-
-# Copy override files into place.
-cp -rv ../files/boot/* /mnt/boot
-cp -rv ../files/etc/* /mnt/etc
-cp -rv ../files/var/* /mnt/var
-cp -rv ../files/usr/* /mnt/usr
-find ../files/etc/skel/ -mindepth 1 -exec cp -rv "{}" /mnt/home/stormux/ \;
-
-# Exiting calls the cleanup function to unmount.
-exit 0

pi3/files/boot/config.txt

@@ -1,10 +0,0 @@
-# See /boot/overlays/README for all available options
-
-dtoverlay=vc4-kms-v3d
-initramfs initramfs-linux.img followkernel
-dtparam=audio=on,krnbt=on
-hdmi_drive=2
-
-[pi4]
-# Run as fast as firmware / board allows
-arm_boost=1

pi3/files/etc/X11/xorg.conf.d/10-headless.conf

@@ -1,20 +0,0 @@
-Section "Monitor"
-        Identifier "dummy_monitor"
-        HorizSync 28.0-80.0
-        VertRefresh 48.0-75.0
-        Modeline "1920x1080" 172.80 1920 2040 2248 2576 1080 1081 1084 1118
-EndSection
-                                                                                                                                                      
-Section "Device"
-        Identifier "dummy_card"
-        VideoRam 256000
-        Driver "dummy"
-EndSection
-                                                                                                                                                      
-Section "Screen"
-        Identifier "dummy_screen"
-        Device "dummy_card"
-        Monitor "dummy_monitor"
-        SubSection "Display"
-        EndSubSection
-EndSection

pi3/files/etc/log2ram.conf

@@ -1,37 +0,0 @@
-# Configuration file for Log2Ram (https://github.com/azlux/log2ram) under MIT license.
-# This configuration file is read by the log2ram service
-
-# Size for the ram folder, it defines the size the log folder will reserve into the RAM.
-# If it's not enough, log2ram will not be able to use ram. Check you /var/log size folder.
-# The default is 40M and is basically enough for a lot of applications.
-# You will need to increase it if you have a server and a lot of log for example.
-SIZE=128M
-
-# This variable can be set to true if you prefer "rsync" rather than "cp".
-# I use the command cp -u and rsync -X, so I don't copy the all folder every time for optimization.
-# You can choose which one you want. Be sure rsync is installed if you use it.
-USE_RSYNC=true
-
-# If there are some errors with available RAM space, a system mail will be send
-# Change it to false and you will have only a log if there is no place on RAM anymore.
-MAIL=false
-
-# Variable for folders to put in RAM. You need to specify the real folder `/path/folder` , the `/path/hdd.folder` will be automatically created. Multiple path can be separeted by `;`. Do not add the final `/` !
-# example : PATH_DISK="/var/log;/home/test/FolderInRam"
-PATH_DISK="/var/log"
-
-# **************** Zram backing conf  *************************************************
-
-# ZL2R Zram Log 2 Ram enables a zram drive when ZL2R=true ZL2R=false is mem only tmpfs
-ZL2R=false
-# COMP_ALG this is any compression algorithm listed in /proc/crypto
-# lz4 is fastest with lightest load but deflate (zlib) and Zstandard (zstd) give far better compression ratios
-# lzo is very close to lz4 and may with some binaries have better optimisation
-# COMP_ALG=lz4 for speed or Zstd for compression, lzo or zlib if optimisation or availabilty is a problem
-COMP_ALG=lz4
-# LOG_DISK_SIZE is the uncompressed disk size. Note zram uses about 0.1% of the size of the disk when not in use
-# LOG_DISK_SIZE is expected compression ratio of alg chosen multiplied by log SIZE
-# lzo/lz4=2.1:1 compression ratio zlib=2.7:1 zstandard=2.9:1
-# Really a guestimate of a bit bigger than compression ratio whilst minimising 0.1% mem usage of disk size
-LOG_DISK_SIZE=100M
-

pi3/files/etc/pam.d/nodm

@@ -1,6 +0,0 @@
-#%PAM-1.0
-
-auth      include   system-local-login
-account   include   system-local-login
-password  include   system-local-login
-session   include   system-local-login

pi3/files/etc/skel/.bash_aliases

@@ -1 +0,0 @@
-alias sudo='sudo '

pi3/files/etc/systemd/journald.conf

@@ -1,47 +0,0 @@
-#  This file is part of systemd.
-#
-#  systemd is free software; you can redistribute it and/or modify it under the
-#  terms of the GNU Lesser General Public License as published by the Free
-#  Software Foundation; either version 2.1 of the License, or (at your option)
-#  any later version.
-#
-# Entries in this file show the compile time defaults. Local configuration
-# should be created by either modifying this file, or by creating "drop-ins" in
-# the journald.conf.d/ subdirectory. The latter is generally recommended.
-# Defaults can be restored by simply deleting this file and all drop-ins.
-#
-# Use 'systemd-analyze cat-config systemd/journald.conf' to display the full config.
-#
-# See journald.conf(5) for details.
-
-[Journal]
-#Storage=auto
-#Compress=yes
-#Seal=yes
-#SplitMode=uid
-#SyncIntervalSec=5m
-#RateLimitIntervalSec=30s
-#RateLimitBurst=10000
-SystemMaxUse=20M
-#SystemKeepFree=
-#SystemMaxFileSize=
-#SystemMaxFiles=100
-#RuntimeMaxUse=
-#RuntimeKeepFree=
-#RuntimeMaxFileSize=
-#RuntimeMaxFiles=100
-#MaxRetentionSec=
-#MaxFileSec=1month
-#ForwardToSyslog=no
-#ForwardToKMsg=no
-#ForwardToConsole=no
-#ForwardToWall=yes
-#TTYPath=/dev/console
-#MaxLevelStore=debug
-#MaxLevelSyslog=debug
-#MaxLevelKMsg=notice
-#MaxLevelConsole=info
-#MaxLevelWall=emerg
-#LineMax=48K
-#ReadKMsg=yes
-#Audit=yes

pi3/files/usr/lib/systemd/system/ntpd.service

@@ -1,14 +0,0 @@
-[Unit]
-Description=Network Time Service
-After=network.target nss-lookup.target
-Conflicts=systemd-timesyncd.service
-
-[Service]
-Type=forking
-PrivateTmp=true
-ExecStartPre=/usr/bin/ntpd -Ggq
-ExecStart=/usr/bin/ntpd -g -u ntp:ntp
-Restart=always
-
-[Install]
-WantedBy=multi-user.target

pi3/files/usr/local/bin/configure-stormux

@@ -1,47 +0,0 @@
-#!/bin/bash
-
-trap 'popd &> /dev/null' EXIT
-
-export SUDO_ASKPASS=/etc/audibleprompt.sh
-if [[ ! -d /opt/configure-stormux ]]; then
-    # Offer to switch fenrir layout.
-    echo "Would you like to switch Fenrir to laptop layout? (y/n)"
-    read -r continue
-    continue="${continue::1}"
-    if [[ "${continue,}" == "y" ]];then
-        sudo -A sed -i 's/=desktop/=laptop/' /etc/fenrirscreenreader/settings/settings.conf
-        sudo -A systemctl restart fenrirscreenreader.service
-        clear
-    fi
-    if ! ping -c1 stormux.org &> /dev/null ; then
-        echo "No internet connection detected. Press enter to open NetworkManager."
-        echo "Note, it is best to put Fenrir into highlight mode while using NetworkManager."
-        echo "In desktop layout this is done by pressing Fenrir+numpad asterisk."
-        echo "That is the key just above numpad 9."
-        echo "In laptop mode, press Fenrir+y."
-        echo "In desktop mode the Fenrir key is numpad insert."
-        echo "In laptop mode the Fenrir key is the Super key, sometimes called the Windows key."
-        echo "Press enter to continue."
-        read -r continue
-        nmtui-connect
-    fi
-# Check for internet connectivity
-if ping -qc1 -W 1 stormux.org &> /dev/null; then
-  echo "Updating the clock to prevent certificate errors..."
-  # Get current date and time
-  date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
-  echo "Current date and time: $date_time"
-  # set date and time
-  sudo -A date -s "$date_time"
-else
-  echo "Please connect to the internet and run ${0##*/} again."
-  exit 1
-fi
-    echo "Installing configure-stormux..."
-    sudo -A git -C /opt clone -q https://git.stormux.org/storm/configure-stormux || exit 1
-fi
-
-pushd /opt/configure-stormux
-./configure-stormux.sh
-
-exit 0

pi4/build/build-stormux.sh

@@ -1,6 +1,6 @@
 #! /bin/bash
 #
-# Copyright 2020, Stormux, <storm_dragon@linux-a11y.org>
+# Copyright 2020, Stormux, <storm_dragon@stormux.org>
 #
 # This is free software; you can redistribute it and/or modify it under the
 # terms of the GNU General Public License as published by the Free
@@ -50,9 +50,8 @@ help() {
 declare -A command=(
     [h]="This help screen."
     [l:]="Language default is en_US."
-    [n:]="Image name, default is stormux-pi<32|64>-<yyyy-mm-dd>.img"
+    [n:]="Image name, default is stormux-pi4-aarch64-<yyyy-mm-dd>.img"
-    [s:]="image size in GB, default is 4."
+    [s:]="image size in GB, default is 6."
-    [v:]="Version of the Raspberry Pi for which you are building. (32|64) default is 64."
 )
 
 # Convert the keys of the associative array to a format usable by getopts
@@ -75,14 +74,6 @@ while getopts "${args}" i ; do
                 exit 1
             fi
             ;;
-        v)
-            if [[ "${OPTARG}" =~ ^32|64$ ]]; then
-                imageVersion="${OPTARG}"
-            else
-                echo "Image version must be 32 for 32 bit (armv7h), or 64 for 64 bit (aarch64 default)."
-                exit 1
-            fi
-            ;;
         *)
             exit 1
             ;;
@@ -90,11 +81,8 @@ while getopts "${args}" i ; do
 done
 
 # make sure variables are set, or use defaults.
-export imageVersion="${imageVersion:-64}"
+export imageSize="${imageSize:-6G}"
-export imageSize="${imageSize:-4G}"
+imageName="${imageName:-stormux-pi4-aarch64-$(date '+%Y-%m-%d').img}"
-imageName="${imageName:-stormux-pi4-${imageVersion}-$(date '+%Y-%m-%d').img}"
-imageName="${imageName/-64-/-aarch64-}"
-imageName="${imageName/-32-/-armv7h-}"
 export imageName
 export imageLanguage="${imageLanguage:-en_US.UTF-8}"
 
@@ -129,87 +117,139 @@ for i in arch-install-scripts dosfstools parted wget ; do
 done
 
 
-# Url for the image to be downloaded.
+# Url for the aarch64 image to be downloaded.
-url[32]="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-armv7-latest.tar.gz"
+imageUrl="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-aarch64-latest.tar.gz"
-url[64]="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-aarch64-latest.tar.gz"
 
 fallocate -l "$imageSize" "$imageName"
 loopdev="$(losetup --find --show "${imageName}")"
 parted --script "${loopdev}" mklabel msdos mkpart primary fat32 0% 200M mkpart primary ext4 200M 100%
-mkfs.vfat -F32 "${loopdev}p1"
+mkfs.vfat -F32 -n STRMX_BOOT "${loopdev}p1"
-mkfs.ext4 -F "${loopdev}p2"
+mkfs.ext4 -F -L STRMX_ROOT "${loopdev}p2"
 mount "${loopdev}p2" /mnt
 mkdir /mnt/boot
 mount "${loopdev}p1" /mnt/boot
 # Things are mounted now, so set mounted to 0 (bash true)
 mounted=0
 imageFileName=$(mktemp)
-wget "${url[$imageVersion]}" -O "${imageFileName}"
+wget "${imageUrl}" -O "${imageFileName}"
-if [[ $imageVersion -eq 32 ]]; then
-    # Workaround for bsdtar errors when extracting 32 bit image.
-    set +e
-fi
 bsdtar -xpf "${imageFileName}" -C /mnt
-# Set -e in case it got unset for 32 bit image
+
-set -e
+# Copy override files into place before chroot (except skel to avoid conflicts)
-arch-chroot /mnt << EOF
+cp -rv ../files/boot/* /mnt/boot
+cp -rv ../files/var/* /mnt/var
+cp -rv ../files/usr/* /mnt/usr
+# Copy etc files but exclude skel directory to avoid package conflicts
+find ../files/etc -mindepth 1 -maxdepth 1 ! -name skel -exec cp -rv {} /mnt/etc/ \;
+
+PS1="(Chroot) [\u@\h \W] \$" arch-chroot /mnt << EOF
+echo "Chroot started."
 # set up pacman
 pacman-key --init
 pacman-key --populate archlinuxarm
-pacman -Syy
+
-# Change kernels for aarch64
+# Add stormux repository
-if [[ "$imageVersion" == "64" ]]; then
+echo "Downloading stormux repository key..."
-pacman -R --noconfirm linux-aarch64 uboot-raspberrypi
+curl -s https://packages.stormux.org/stormux_repo.pub > /tmp/stormux_repo.pub
-pacman -S --noconfirm linux-rpi
+echo "Adding key to pacman keyring..."
+pacman-key --add /tmp/stormux_repo.pub
+echo "Locally signing key..."
+pacman-key --lsign-key 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82
+rm /tmp/stormux_repo.pub
+# Add repository before core in pacman.conf
+sed -i '/^\[core\]/i[stormux]\nSigLevel = Required DatabaseOptional\nServer = https://packages.stormux.org/\$arch\n' /etc/pacman.conf
+
+# Test mirrors and configure based on responsiveness
+echo "Testing mirror responsiveness..."
+mirrors=(
+    "mirror.archlinuxarm.org"
+    "fl.us.mirror.archlinuxarm.org"
+    "il.us.mirror.archlinuxarm.org"
+    "tx.us.mirror.archlinuxarm.org"
+    "nj.us.mirror.archlinuxarm.org"
+)
+
+working_mirrors=()
+for mirror in "\${mirrors[@]}"; do
+    echo "Testing \$mirror..."
+    if curl -m 5 -f -s "http://\$mirror/aarch64/core/core.db" > /dev/null 2>&1; then
+        echo "  \$mirror: OK"
+        working_mirrors+=("\$mirror")
+    else
+        echo "  \$mirror: FAILED"
+    fi
+done
+
+# Create mirrorlist with working mirrors first, then fallback to all mirrors
+> /etc/pacman.d/mirrorlist
+if [[ \${#working_mirrors[@]} -gt 0 ]]; then
+    echo "Using \${#working_mirrors[@]} working mirrors"
+    for mirror in "\${working_mirrors[@]}"; do
+        echo "Server = http://\$mirror/\\\$arch/\\\$repo" >> /etc/pacman.d/mirrorlist
+    done
+else
+    echo "No mirrors responded, using all mirrors as fallback"
+    for mirror in "\${mirrors[@]}"; do
+        echo "Server = http://\$mirror/\\\$arch/\\\$repo" >> /etc/pacman.d/mirrorlist
+    done
 fi
 
-# Install packages
+pacman -Syy
-pacman -Su --needed --noconfirm \
+# Change to the Pi kernel for aarch64
-    alsa-firmware \
+pacman -R --noconfirm linux-aarch64 uboot-raspberrypi
-    alsa-utils \
+pacman -S --noconfirm linux-rpi
-    base \
-    base-devel \
-    bash-completion \
-    bluez \
-    bluez-utils \
-    brltty \
-    cloud-utils \
-    cronie \
-    dbus-broker \
-    espeak-ng \
-    fake-hwclock \
-    firmware-raspberrypi \
-    git \
-    go \
-    magic-wormhole \
-    man \
-    man-pages \
-    networkmanager \
-    ntp \
-    pipewire \
-    pipewire-alsa \
-    pipewire-jack \
-    pipewire-pulse \
-    poppler \
-    python-pyudev \
-    python-daemonize \
-    python-evdev \
-    python-dbus \
-    python-pyte \
-    raspberrypi-utils \
-    realtime-privileges \
-    rhvoice-voice-bdl \
-    rng-tools \
-    rsync \
-    screen \
-    sox \
-    w3m \
-    wget \
-    wireless-regdb \
-    wireplumber \
-    xdg-user-dirs \
-    xdg-utils
 
+# Install all packages (stormux repo has priority since it's listed first)
+packages=(
+    alsa-firmware
+    alsa-utils
+    base
+    base-devel
+    bash-completion
+    bluez
+    bluez-utils
+    brltty
+    cronie
+    espeak-ng
+    fake-hwclock
+    fenrir
+    firmware-raspberrypi
+    git
+    magic-wormhole
+    man
+    man-pages
+    networkmanager
+    parted
+    pipewire
+    pipewire-alsa
+    pipewire-jack
+    pipewire-pulse
+    poppler
+    python-dbus
+    python-pyenchant
+    python-pyte
+    python-setuptools-scm
+    python-pyperclip
+    raspberrypi-utils
+    socat
+    realtime-privileges
+    rhvoice-voice-bdl
+    rng-tools
+    rsync
+    screen
+    sox
+    w3m-git
+    wget
+    wireless-regdb
+    wireplumber
+    xdg-user-dirs
+    xdg-utils
+    yay
+)
+
+pacman -Su --needed --noconfirm "\${packages[@]}"
+
+# Restart gpg agents.
+gpgconf --kill all
 # set the language
 sed -i "s/#$imageLanguage/$imageLanguage/" /etc/locale.gen
 echo "LANG=$imageLanguage" > /etc/locale.conf
@@ -228,33 +268,18 @@ echo 'stormux ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers.d/wheel
 echo -e "root\nroot" | passwd "root"
 # Set the password for the stormux user
 echo -e "stormux\nstormux" | passwd "stormux"
-# Change to the stormux user and install some packages
+
+# Change to the stormux user for user configuration
 sudo -iu stormux
+# suppress git spam about default branch name
+git config --global init.defaultBranch master
 # Create desktop, downloads, music, and other directories.
 xdg-user-dirs-update
-# Build AUR packages
-export aurPackages=(fenrir-git \
-    growpartfs \
-    log2ram \
-    yay)
-export PKGDEST=~/packages
-for p in "\${aurPackages[@]}" ; do
-    git clone https://aur.archlinux.org/\${p}.git
-    cd ~/\${p}
-    makepkg -A
-    cd ~
-    rm -rf \${p}
-done
 exit
-# Install built packages
-for p in /home/stormux/packages/* ; do
-    pacman -U --noconfirm \${p}
-done
-rm -rf /home/stormux/packages/
 # Enable linger so that hopefully sound will start at login.
 mkdir -p /var/lib/systemd/linger
 touch /var/lib/systemd/linger/stormux
-systemctl --global enable dbus-broker.service pipewire.service pipewire-pulse.service
+systemctl --global enable pipewire.service pipewire-pulse.service
 /usr/share/fenrirscreenreader/tools/configure_pipewire.sh
 sudo -u stormux /usr/share/fenrirscreenreader/tools/configure_pipewire.sh
 # Configure sudo for group wheel, remove nopasswd for the stormux user
@@ -262,21 +287,33 @@ echo '%wheel ALL=(ALL) ALL' > /etc/sudoers.d/wheel
 # Set the hostname
 echo stormux > /etc/hostname
 # Configure services
-systemctl enable brltty.path cronie.service dbus-broker.service fake-hwclock.service fenrirscreenreader.service log2ram.service NetworkManager.service ntpd.service
+systemctl disable systemd-networkd.service systemd-networkd.socket
-systemctl disable dbus.service
+# Enable services
+services=(
+    brltty.path
+    cronie.service
+    fake-hwclock.service
+    fenrirscreenreader.service
+    log-to-ram-setup.service
+    log-to-ram-sync.timer
+    log-to-ram-shutdown.service
+    NetworkManager.service
+)
+
+for service in "\${services[@]}"; do
+    echo "Enabling \$service..."
+    if systemctl enable "\$service"; then
+        echo "  \$service: OK"
+    else
+        echo "  \$service: FAILED"
+    fi
+done
 # Cleanup packages
 pacman -Sc --noconfirm
-pacman -R --noconfirm go
 
-# Update fstab for Raspberry Pi 4. Not needed until linux-aarch64 works.
-# [[ $imageVersion -eq 4 ]] && sed -i 's/mmcblk0/mmcblk1/g' /etc/fstab
 EOF
 
-# Copy override files into place.
+# Copy skel files to stormux user home (after user rename in chroot)
-cp -rv ../files/boot/* /mnt/boot
-cp -rv ../files/etc/* /mnt/etc
-cp -rv ../files/var/* /mnt/var
-cp -rv ../files/usr/* /mnt/usr
 find ../files/etc/skel/ -mindepth 1 -exec cp -rv "{}" /mnt/home/stormux/ \;
 
 # Exiting calls the cleanup function to unmount.

pi4/files/boot/cmdline.txt

@@ -0,0 +1 @@
+root=LABEL=STRMX_ROOT rw rootwait console=serial0,115200 console=tty1 fsck.repair=yes

pi4/files/etc/X11/xorg.conf.d/10-headless.conf

@@ -1,20 +0,0 @@
-Section "Monitor"
-        Identifier "dummy_monitor"
-        HorizSync 28.0-80.0
-        VertRefresh 48.0-75.0
-        Modeline "1920x1080" 172.80 1920 2040 2248 2576 1080 1081 1084 1118
-EndSection
-                                                                                                                                                      
-Section "Device"
-        Identifier "dummy_card"
-        VideoRam 256000
-        Driver "dummy"
-EndSection
-                                                                                                                                                      
-Section "Screen"
-        Identifier "dummy_screen"
-        Device "dummy_card"
-        Monitor "dummy_monitor"
-        SubSection "Display"
-        EndSubSection
-EndSection

pi4/files/etc/fstab

@@ -0,0 +1,7 @@
+# Static information about the filesystems.
+# See fstab(5) for details.
+
+# <file system> <dir> <type> <options> <dump> <pass>
+LABEL=STRMX_BOOT  /boot   vfat    defaults        0       1
+LABEL=STRMX_ROOT  /       ext4    defaults,noatime  0       1
+tmpfs             /var/log tmpfs  defaults,noatime,nosuid,nodev,noexec,mode=0755,size=128M 0 0

pi4/files/etc/log2ram.conf

@@ -1,37 +0,0 @@
-# Configuration file for Log2Ram (https://github.com/azlux/log2ram) under MIT license.
-# This configuration file is read by the log2ram service
-
-# Size for the ram folder, it defines the size the log folder will reserve into the RAM.
-# If it's not enough, log2ram will not be able to use ram. Check you /var/log size folder.
-# The default is 40M and is basically enough for a lot of applications.
-# You will need to increase it if you have a server and a lot of log for example.
-SIZE=128M
-
-# This variable can be set to true if you prefer "rsync" rather than "cp".
-# I use the command cp -u and rsync -X, so I don't copy the all folder every time for optimization.
-# You can choose which one you want. Be sure rsync is installed if you use it.
-USE_RSYNC=true
-
-# If there are some errors with available RAM space, a system mail will be send
-# Change it to false and you will have only a log if there is no place on RAM anymore.
-MAIL=false
-
-# Variable for folders to put in RAM. You need to specify the real folder `/path/folder` , the `/path/hdd.folder` will be automatically created. Multiple path can be separeted by `;`. Do not add the final `/` !
-# example : PATH_DISK="/var/log;/home/test/FolderInRam"
-PATH_DISK="/var/log"
-
-# **************** Zram backing conf  *************************************************
-
-# ZL2R Zram Log 2 Ram enables a zram drive when ZL2R=true ZL2R=false is mem only tmpfs
-ZL2R=false
-# COMP_ALG this is any compression algorithm listed in /proc/crypto
-# lz4 is fastest with lightest load but deflate (zlib) and Zstandard (zstd) give far better compression ratios
-# lzo is very close to lz4 and may with some binaries have better optimisation
-# COMP_ALG=lz4 for speed or Zstd for compression, lzo or zlib if optimisation or availabilty is a problem
-COMP_ALG=lz4
-# LOG_DISK_SIZE is the uncompressed disk size. Note zram uses about 0.1% of the size of the disk when not in use
-# LOG_DISK_SIZE is expected compression ratio of alg chosen multiplied by log SIZE
-# lzo/lz4=2.1:1 compression ratio zlib=2.7:1 zstandard=2.9:1
-# Really a guestimate of a bit bigger than compression ratio whilst minimising 0.1% mem usage of disk size
-LOG_DISK_SIZE=100M
-

pi4/files/etc/modprobe.d/brcmfmac.conf

@@ -0,0 +1 @@
+options brcmfmac feature_disable=0x82000

pi4/files/etc/pam.d/nodm

@@ -1,6 +0,0 @@
-#%PAM-1.0
-
-auth      include   system-local-login
-account   include   system-local-login
-password  include   system-local-login
-session   include   system-local-login

pi4/files/etc/profile.d/stormux_first_boot.sh

@@ -1,7 +1,54 @@
 #!/usr/bin/env bash
 
-if [[ "$(tty)" = "/dev/tty1" ]]; then
+if [[ "$(tty)" != "/dev/tty1" ]]; then
-    cat << "EOF"
+    return
+fi
+
+if [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+    return
+fi
+
+if ! [[ -x /usr/local/bin/configure-stormux ]]; then
+    return
+fi
+
+# Volume calibration FIRST
+echo "Setting up audio volume..."
+volume=50
+wait=0
+
+# Wait for pipewire to become available
+while [[ $wait -lt 30 ]]; do
+    if pgrep pipewire &> /dev/null ; then
+        break
+    else
+        sleep 1
+        ((wait++))
+    fi
+done
+
+# Volume calibration - this should be the VERY FIRST interactive part
+while [[ $volume -le 130 ]]; do
+    clear
+    pactl set-sink-volume @DEFAULT_SINK@ "${volume}%" 2>/dev/null
+    spd-say "If this is loud enough, press enter."
+    if read -t4 ; then
+        echo "Volume set to ${volume}%"
+        break
+    else
+        ((volume+=5))
+    fi
+done
+
+# For audible sudo prompts:
+unset sudoFlags
+if [[ -x /etc/audibleprompt.sh ]]; then
+    export SUDO_ASKPASS=/etc/audibleprompt.sh
+    export sudoFlags=("-A")
+fi
+
+clear
+cat << "EOF"
 Hello, and welcome to Stormux!
 
 Let's get you set up. After you press enter, you will be prompted for the sudo password.
@@ -12,7 +59,5 @@ Once again, the password is stormux in all lower case letters.
 
 Please press enter to continue.
 EOF
-    read -r
+read -r
-    sudo configure-stormux
+sudo "${sudoFlags[@]}" configure-stormux
-    sudo rm -- "/etc/profile.d/stormux_first_boot.sh"
-fi

pi4/files/etc/skel/.bash_aliases

@@ -1,3 +1,4 @@
 # Raspberry Pi Information
 alias pi-temp='/usr/bin/vcgencmd measure_temp'
 alias pi-version='cat /sys/firmware/devicetree/base/model;echo'
+alias pi-ip='ip a | grep -v "127.0.0.1" | grep -E -o "([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}"'

pi4/files/etc/systemd/journald.conf

@@ -1,47 +0,0 @@
-#  This file is part of systemd.
-#
-#  systemd is free software; you can redistribute it and/or modify it under the
-#  terms of the GNU Lesser General Public License as published by the Free
-#  Software Foundation; either version 2.1 of the License, or (at your option)
-#  any later version.
-#
-# Entries in this file show the compile time defaults. Local configuration
-# should be created by either modifying this file, or by creating "drop-ins" in
-# the journald.conf.d/ subdirectory. The latter is generally recommended.
-# Defaults can be restored by simply deleting this file and all drop-ins.
-#
-# Use 'systemd-analyze cat-config systemd/journald.conf' to display the full config.
-#
-# See journald.conf(5) for details.
-
-[Journal]
-#Storage=auto
-#Compress=yes
-#Seal=yes
-#SplitMode=uid
-#SyncIntervalSec=5m
-#RateLimitIntervalSec=30s
-#RateLimitBurst=10000
-SystemMaxUse=20M
-#SystemKeepFree=
-#SystemMaxFileSize=
-#SystemMaxFiles=100
-#RuntimeMaxUse=
-#RuntimeKeepFree=
-#RuntimeMaxFileSize=
-#RuntimeMaxFiles=100
-#MaxRetentionSec=
-#MaxFileSec=1month
-#ForwardToSyslog=no
-#ForwardToKMsg=no
-#ForwardToConsole=no
-#ForwardToWall=yes
-#TTYPath=/dev/console
-#MaxLevelStore=debug
-#MaxLevelSyslog=debug
-#MaxLevelKMsg=notice
-#MaxLevelConsole=info
-#MaxLevelWall=emerg
-#LineMax=48K
-#ReadKMsg=yes
-#Audit=yes

pi4/files/etc/systemd/journald.conf.d/99-ramlog.conf

@@ -0,0 +1,3 @@
+[Journal]
+Storage=volatile
+SystemMaxUse=20M

pi4/files/etc/systemd/system/log-to-ram-setup.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=Setup RAM logging and restore logs from disk
+DefaultDependencies=false
+After=local-fs.target
+Before=sysinit.target
+RequiresMountsFor=/var
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStartPre=/bin/mkdir -p /var/log.hdd
+ExecStartPre=/bin/sh -c 'if [ -d /var/log.hdd ] && [ "$(ls -A /var/log.hdd 2>/dev/null)" ]; then cp -au /var/log.hdd/* /var/log/ 2>/dev/null || true; fi'
+ExecStart=/bin/true
+
+[Install]
+WantedBy=sysinit.target

pi4/files/etc/systemd/system/log-to-ram-shutdown.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Sync logs to disk before shutdown
+DefaultDependencies=false
+Before=shutdown.target reboot.target halt.target
+Conflicts=shutdown.target reboot.target halt.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=true
+ExecStart=/bin/sh -c 'rsync -aXv --delete --exclude="*.hdd" /var/log/ /var/log.hdd/ 2>/dev/null || true'
+TimeoutStopSec=30
+
+[Install]
+WantedBy=shutdown.target reboot.target halt.target

pi4/files/etc/systemd/system/log-to-ram-sync.service

@@ -0,0 +1,8 @@
+[Unit]
+Description=Sync logs from RAM to disk
+After=local-fs.target
+
+[Service]
+Type=oneshot
+ExecStartPre=/bin/mkdir -p /var/log.hdd
+ExecStart=/bin/sh -c 'rsync -aXv --delete --exclude="*.hdd" /var/log/ /var/log.hdd/ 2>/dev/null || true'

pi4/files/etc/systemd/system/log-to-ram-sync.timer

@@ -0,0 +1,11 @@
+[Unit]
+Description=Sync logs from RAM to disk every hour
+Requires=log-to-ram-sync.service
+
+[Timer]
+OnBootSec=15min
+OnUnitActiveSec=1h
+Persistent=true
+
+[Install]
+WantedBy=timers.target

pi4/files/etc/systemd/system/time_sync_at_boot.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=Update system time from worldtimeapi.org
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/sync_time.sh
+
+[Install]
+WantedBy=multi-user.target

pi4/files/etc/vconsole.conf

@@ -0,0 +1,3 @@
+# This is the fallback vconsole configuration provided by systemd.
+
+KEYMAP=us_alt

pi4/files/root/rename-user.sh

@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+
+# Renames a user
+# Required arguments: old user name, new user name
+
+set -e
+
+question() {
+    echo
+    echo "$@"
+    read -r answer
+    answer="${answer:0:1}"
+    answer="${answer^}"
+}
+
+if [[ $# -ne 2 ]]; then
+    echo "Usage: $0 old-user new-user"
+    exit 1
+fi
+
+oldUser="$1"
+newUser="$2"
+
+# Make sure old user exists
+if ! id "$oldUser" >/dev/null 2>&1; then
+    echo "The user $oldUser does not exist."
+    exit 1
+fi
+
+# Make sure old user is not logged in
+if pgrep -u "$oldUser" >/dev/null; then
+    echo "The user $oldUser is currently logged in or has running processes. Cannot continue."
+    question "Would you like to forcibly log out $oldUser? (Y/N)"
+    if [[ "$answer" != "Y" ]]; then
+        exit 1
+    fi
+    systemctl stop display-manager
+    loginctl terminate-user "$oldUser"
+    sleep 2
+    if pgrep -u "$oldUser" >/dev/null; then
+        echo "The user $oldUser still has running processes after termination. Cannot continue."
+        exit 1
+    fi
+fi
+
+# Make sure new user does not exist
+if id "$newUser" >/dev/null 2>&1; then
+    echo "The user name $newUser is already taken."
+    exit 1
+fi
+
+# Make sure the new name is acceptable
+if ! [[ "$newUser" =~ ^[a-z_][a-z0-9_-]{0,31}$ ]]; then
+    echo "$newUser is not an acceptable user name."
+    exit 1
+fi
+
+# Passed all safety checks, proceed with the rename
+echo "Renaming $oldUser to $newUser..."
+groups=$(id -nG "$oldUser")
+groups="${groups// /,}"
+usermod -G "$groups" -m -d "/home/$newUser" -l "$newUser" "$oldUser"
+
+# Update nodm.conf if it exists
+if [[ -e /etc/nodm.conf ]]; then
+    echo "Updating /etc/nodm.conf..."
+    sed -i -e "s#^NODM_USER=.*#NODM_USER='$newUser'#" -e "s#^NODM_XSESSION=.*#NODM_XSESSION='/home/$newUser/.xinitrc'#" /etc/nodm.conf
+fi
+
+# Copy over crontab if it exists
+if crontab -u "$oldUser" -l >/tmp/${oldUser}_crontab.bak 2>/dev/null; then
+    echo "Copying over crontab..."
+    if crontab -u "$newUser" "/tmp/${oldUser}_crontab.bak"; then
+        rm "/tmp/${oldUser}_crontab.bak"
+    else
+        echo "Warning: failed to restore crontab for $newUser."
+        rm "/tmp/${oldUser}_crontab.bak"
+    fi
+fi
+
+# Update linger
+if [[ -e "/var/lib/systemd/linger/$oldUser" ]]; then
+    echo "Enabling linger..."
+    mv "/var/lib/systemd/linger/$oldUser" "/var/lib/systemd/linger/$newUser"
+fi
+
+# Optionally update files in new home directory
+echo
+echo "Would you like to search for references to $oldUser and update them to $newUser in files located in /home/$newUser?"
+question "This can take a while. (Y/N)"
+if [[ "$answer" == "Y" ]]; then
+    echo "Updating files..."
+    find "/home/$newUser" -type f -exec grep -Iq . "{}" \; -and -exec sed -i "s|$oldUser|$newUser|g" "{}" \;
+fi
+
+echo
+echo "Rename complete. The user, $newUser, is now available."
+question "Would you like to reboot?"
+if [[ "${answer}" == "Y" ]]; then
+    reboot
+fi
+
+exit 0

pi4/files/usr/local/bin/configure-stormux

@@ -1,54 +1,141 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
-trap 'popd &> /dev/null' EXIT
+# For audible sudo prompts:
+unset sudoFlags
+if [[ -x /etc/audibleprompt.sh ]]; then
+    export SUDO_ASKPASS=/etc/audibleprompt.sh
+    export sudoFlags=("-A")
+fi
 
-export SUDO_ASKPASS=/etc/audibleprompt.sh
+trap cleanup EXIT
-if [[ ! -d /opt/configure-stormux ]]; then
+cleanup() {
-    # Offer to switch fenrir layout.
+    popd &> /dev/null
-    echo "Would you like to switch Fenrir to laptop layout? (y/n)"
+    if ! [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+        echo "Initial setup is not complete."
+        echo "To continue setup, please run:"
+        echo "sudo configure-stormux"
+    fi
+}
+
+
+if [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+    pushd /opt/configure-stormux
+    ./configure-stormux.sh
+    exit 0
+fi
+
+# Volume calibration is now handled in stormux_first_boot.sh
+
+export DIALOGOPTS='--insecure --no-lines --visit-items'
+
+set_timezone() {
+    # Get the list of timezones
+    mapfile -t regions < <(timedatectl --no-pager list-timezones | cut -d '/' -f1 | sort -u)
+
+    # Use the same text twice here and just hide the tag field.
+        region=$(dialog --backtitle "Please select your Region" \
+                --no-tags \
+                --menu "Use up and down arrows or page-up and page-down to navigate the list, and press 'Enter' to make your selection." 0 0 0 \
+                $(for i in ${regions[@]} ; do echo "$i";echo "$i";done) --stdout)
+
+
+    mapfile -t cities < <(timedatectl --no-pager list-timezones | grep "$region" | cut -d '/' -f2 | sort -u)
+
+    # Use the same text twice here and just hide the tag field.
+        city=$(dialog --backtitle "Please select a city near you" \
+                --no-tags \
+                --menu "Use up and down arrow or page-up and page-down to navigate the list." 0 0 10 \
+                $(for i in ${cities[@]} ; do echo "$i";echo "$i";done) --stdout)
+
+    # Set the timezone
+    if [[ -f /etc/localtime ]]; then
+        rm /etc/localtime
+    fi
+    ln -sf /usr/share/zoneinfo/${region}/${city} /etc/localtime
+    timedatectl set-ntp true
+}
+# Offer to switch fenrir layout.
+echo "Would you like to switch Fenrir to laptop layout?"
+echo "Press y for yes or n for no followed by enter."
+read -r continue
+continue="${continue::1}"
+if [[ "${continue,}" == "y" ]];then
+    sed -i 's/=desktop/=laptop/' /etc/fenrirscreenreader/settings/settings.conf
+    clear
+    systemctl restart fenrirscreenreader.service
+fi
+
+# Check for possible resize
+diskSource="$(df --output='source' / | tail -1)"
+diskSize="$(df -h --output='size' / | tail -1 | tr -cd '[:digit:].')"
+diskSize=${diskSize%.*}
+if [[ $diskSize -le 7 ]]; then
+    echo "$diskSource is only $diskSize gigs, which means it probably needs to be resized. Would you like to do this now?"
+    echo "Press y for yes or n for no followed by enter."
     read -r continue
     continue="${continue::1}"
     if [[ "${continue,}" == "y" ]];then
-        sed -i 's/=desktop/=laptop/' /etc/fenrirscreenreader/settings/settings.conf
+        # Extract base device name (handles mmcblk0p2, nvme0n1p2, sda2, etc.)
-        systemctl restart fenrirscreenreader.service
+        if [[ "$diskSource" =~ (.*[0-9]+)p[0-9]+$ ]]; then
-        clear
+            # Handle mmcblk0p2, nvme0n1p2 style
+            diskDevice="${BASH_REMATCH[1]}"
+        else
+            # Handle sda2, sdb3 style  
+            diskDevice="$(echo "$diskSource" | sed 's/[0-9]*$//')"
+        fi
+        echo "Yes" | sudo "${sudoFlags[@]}" parted ---pretend-input-tty "$diskDevice" resizepart 2 100%
+        sudo "${sudoFlags[@]}" resize2fs -f "$diskSource"
     fi
-    if ! ping -c1 stormux.org &> /dev/null ; then
-        echo "No internet connection detected. Press enter to open NetworkManager."
-        echo "Note, it is best to put Fenrir into highlight mode while using NetworkManager."
-        echo "In desktop layout this is done by pressing Fenrir+numpad asterisk."
-        echo "That is the key just above numpad 9."
-        echo "In laptop mode, press Fenrir+y."
-        echo "In desktop mode the Fenrir key is numpad insert."
-        echo "In laptop mode the Fenrir key is the Super key, sometimes called the Windows key."
-        echo "Press enter to continue."
-        read -r continue
-        nmtui-connect
-    fi
-    # Check for internet connectivity
-    if ping -qc1 -W 1 stormux.org &> /dev/null; then
-        echo "Updating the clock to prevent certificate errors..."
-        # Get current date and time
-        date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
-        echo "Current date and time: $date_time"
-        # set date and time
-        date -s "$date_time"
-    else
-        echo "Please connect to the internet and run ${0##*/} again."
-        exit 1
-    fi
-    echo "Installing configure-stormux..."
-    git -C /opt clone -q https://git.stormux.org/storm/configure-stormux || exit 1
 fi
+ 
+if ! ping -c1 stormux.org &> /dev/null ; then
+    echo "No internet connection detected. Press enter to open NetworkManager."
+    read -r continue
+    echo "setting set focus#highlight=True" | socat - UNIX-CLIENT:/tmp/fenrirscreenreader-deamon.sock
+    nmtui-connect
+    echo "setting set focus#highlight=False" | socat - UNIX-CLIENT:/tmp/fenrirscreenreader-deamon.sock
+fi
+# Check for internet connectivity
+if ping -qc1 -W 1 stormux.org &> /dev/null; then
+    echo "Updating the clock to prevent certificate errors..."
+    # Get current date and time
+    date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
+    echo "Current date and time: $date_time"
+    # set date and time
+    date -s "$date_time"
+    echo "If your Pi does not have a CMOS battery and is powered off regularly, it may take a while for the time to be set correctly after boot."
+    echo "Stormux provides a service to sync the time after internet connection is established."
+    read -rp "Would you like the time to sync as soon as the Pi connects to the internet? " answer
+    answer="${answer:0:1}"
+    if [[ "${answer,,}" == "y" ]]; then
+        systemctl enable time_sync_at_boot.service
+    else
+       echo "Time sync at boot skipped."
+       echo "If you change your mind later, simply type:"
+       echo "sudo systemctl enable time_sync_at_boot.service"
+    fi
+    set_timezone
+else
+    echo "Please connect to the internet and run ${0##*/} again."
+    exit 1
+fi
+echo "Installing configure-stormux..."
+git -C /opt clone -q https://git.stormux.org/storm/configure-stormux || exit 1
 
 echo
 echo "Initial setup is complete."
 echo
-echo "If you would like more options, run configure-stormux,"
+echo "The default passwords are stormux for the stormux user"
+echo "and root for the root user. It is highly recommended to change them."
+echo "To change the password for stormux, run:"
+echo "passwd"
+echo "To change the password for root, run:"
+echo "sudo passwd"
+echo
+echo "For more configuration options, run configure-stormux,"
 echo "or you may configure your system manually."
 echo
 echo "Thank you for choosing Stormux."
 
 
-
 exit 0

pi4/files/usr/local/bin/sync_time.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
+date -s "$date_time"

x86_64/.gitignore

@@ -0,0 +1,15 @@
+# x86_64 ISO build artifacts
+out/
+work/
+logs/
+
+# Build outputs
+*.iso
+*.iso.sig
+*.sha256
+
+# Documentation (not tracked)
+*.md
+
+# User-specific
+.claude/

x86_64/50-fenrir-bluez.conf

@@ -0,0 +1,24 @@
+# Fenrir console audio support
+# Prevents bluetooth disconnection when switching TTY
+
+monitor.bluez.properties = {
+  # Disable logind integration to prevent bluetooth device suspension on TTY switch
+  bluez5.enable-sbc-xq = true
+  bluez5.enable-msbc = true
+  bluez5.enable-hw-volume = true
+}
+
+monitor.bluez.rules = [
+  {
+    matches = [
+      {
+        device.name = "~bluez_card.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+]

x86_64/50-fenrir-console.conf

@@ -0,0 +1,24 @@
+# Fenrir console audio support
+# Adds secondary socket for console applications like Fenrir
+
+pulse.properties = {
+    # the addresses this server listens on
+    server.address = [
+        "unix:native"
+        "unix:/tmp/pulse.sock"              # console access socket
+    ]
+}
+
+# client/stream specific properties
+pulse.rules = [
+    {
+        # speech dispatcher asks for too small latency and then underruns.
+        matches = [ { application.name = "~speech-dispatcher*" } ]
+        actions = {
+            update-props = {
+                pulse.min.req          = 1024/48000     # 21ms
+                pulse.min.quantum      = 1024/48000     # 21ms
+            }
+        }
+    }
+]

x86_64/50-fenrir-no-suspend.conf

@@ -0,0 +1,35 @@
+# Fenrir console audio support
+# Prevents audio device suspension when switching to TTY console
+
+monitor.alsa.rules = [
+  {
+    matches = [
+      {
+        device.name = "~alsa_card.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        api.alsa.use-acp = true
+        api.acp.auto-profile = false
+        api.acp.auto-port = false
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+  {
+    matches = [
+      {
+        node.name = "~alsa_input.*"
+      }
+      {
+        node.name = "~alsa_output.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+]

x86_64/airootfs/etc/environment

@@ -0,0 +1,12 @@
+#
+# This file is parsed by pam_env module
+#
+# Syntax: simple "KEY=VAL" pairs on separate lines
+#
+# Accessibility variables
+export ACCESSIBILITY_ENABLED=1
+export GTK_MODULES=gail:atk-bridge
+export GNOME_ACCESSIBILITY=1
+export QT_ACCESSIBILITY=1
+export QT_LINUX_ACCESSIBILITY_ALWAYS_ON=1
+export SAL_USE_VCLPLUGIN=gtk3

x86_64/airootfs/etc/fstab

@@ -0,0 +1,6 @@
+# Static information about the filesystems.
+# See fstab(5) for details.
+
+# <file system> <dir> <type> <options> <dump> <pass>
+# Live ISO - root filesystem is handled by archiso, only tmpfs mounts needed
+tmpfs             /var/log tmpfs  defaults,noatime,nosuid,nodev,noexec,mode=0755,size=128M 0 0

x86_64/airootfs/etc/mkinitcpio.conf.d/archiso.conf

@@ -0,0 +1,3 @@
+HOOKS=(base udev microcode modconf kms memdisk archiso archiso_loop_mnt archiso_pxe_common archiso_pxe_nbd archiso_pxe_http archiso_pxe_nfs block filesystems keyboard)
+COMPRESSION="xz"
+COMPRESSION_OPTIONS=(-9e)

x86_64/airootfs/etc/mkinitcpio.d/linux.preset

@@ -0,0 +1,8 @@
+# mkinitcpio preset file for the 'linux' package on archiso
+
+PRESETS=('archiso')
+
+ALL_kver='/boot/vmlinuz-linux'
+archiso_config='/etc/mkinitcpio.conf.d/archiso.conf'
+
+archiso_image="/boot/initramfs-linux.img"

x86_64/airootfs/etc/pacman.conf

@@ -0,0 +1,104 @@
+#
+# /etc/pacman.conf
+#
+# See the pacman.conf(5) manpage for option and repository directives
+
+#
+# GENERAL OPTIONS
+#
+[options]
+# The following paths are commented out with their default values listed.
+# If you wish to use different paths, uncomment and update the paths.
+#RootDir     = /
+#DBPath      = /var/lib/pacman/
+#CacheDir    = /var/cache/pacman/pkg/
+#LogFile     = /var/log/pacman.log
+#GPGDir      = /etc/pacman.d/gnupg/
+#HookDir     = /etc/pacman.d/hooks/
+HoldPkg     = pacman glibc
+#XferCommand = /usr/bin/curl -L -C - -f -o %o %u
+#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
+#CleanMethod = KeepInstalled
+Architecture = auto
+
+# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
+#IgnorePkg   =
+#IgnoreGroup =
+
+#NoUpgrade   =
+#NoExtract   =
+
+# Misc options
+#UseSyslog
+#Color
+#NoProgressBar
+# We cannot check disk space from within a chroot environment
+#CheckSpace
+#VerbosePkgLists
+ParallelDownloads = 5
+#DownloadUser = alpm
+#DisableSandbox
+
+# By default, pacman accepts packages signed by keys that its local keyring
+# trusts (see pacman-key and its man page), as well as unsigned packages.
+SigLevel    = Required DatabaseOptional
+LocalFileSigLevel = Optional
+#RemoteFileSigLevel = Required
+
+# NOTE: You must run `pacman-key --init` before first using pacman; the local
+# keyring can then be populated with the keys of all official Arch Linux
+# packagers with `pacman-key --populate archlinux`.
+
+#
+# REPOSITORIES
+#   - can be defined here or included from another file
+#   - pacman will search repositories in the order defined here
+#   - local/custom mirrors can be added here or in separate files
+#   - repositories listed first will take precedence when packages
+#     have identical names, regardless of version number
+#   - URLs will have $repo replaced by the name of the current repo
+#   - URLs will have $arch replaced by the name of the architecture
+#
+# Repository entries are of the format:
+#       [repo-name]
+#       Server = ServerName
+#       Include = IncludePath
+#
+# The header [repo-name] is crucial - it must be present and
+# uncommented to enable the repo.
+#
+
+# The testing repositories are disabled by default. To enable, uncomment the
+# repo name header and Include lines. You can add preferred servers immediately
+# after the header, and they will be used before the default mirrors.
+
+#[core-testing]
+#Include = /etc/pacman.d/mirrorlist
+
+[stormux]
+SigLevel = Required DatabaseOptional
+Server = https://packages.stormux.org/$arch
+
+[core]
+Include = /etc/pacman.d/mirrorlist
+
+#[extra-testing]
+#Include = /etc/pacman.d/mirrorlist
+
+[extra]
+Include = /etc/pacman.d/mirrorlist
+
+# If you want to run 32 bit applications on your x86_64 system,
+# enable the multilib repositories as required here.
+
+#[multilib-testing]
+#Include = /etc/pacman.d/mirrorlist
+
+#[multilib]
+#Include = /etc/pacman.d/mirrorlist
+
+# An example of a custom package repository.  See the pacman manpage for
+# tips on creating your own repositories.
+#[custom]
+#SigLevel = Optional TrustAll
+#Server = file:///home/custompkgs

x86_64/airootfs/etc/pacman.d/hooks/00-stormux-repo-key.hook

@@ -0,0 +1,10 @@
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Type = Package
+Target = *
+
+[Action]
+Description = Adding Stormux repository key...
+When = PreTransaction
+Exec = /bin/sh -c 'if [ ! -f /etc/pacman.d/.stormux-key-added ]; then pacman-key --add /usr/share/stormux/stormux_repo.pub && pacman-key --lsign-key 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82 && touch /etc/pacman.d/.stormux-key-added; fi'

x86_64/airootfs/etc/pacman.d/hooks/stormux-setup.hook

@@ -0,0 +1,16 @@
+# remove from airootfs!
+# Stormux system setup hook - creates user, configures services
+
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Type = Package
+Target = filesystem
+
+[Action]
+Description = Setting up Stormux user and system configuration...
+When = PostTransaction
+Depends = shadow
+Depends = systemd
+Depends = sudo
+Exec = /usr/local/bin/stormux-setup.sh

x86_64/airootfs/etc/profile.d/stormux_first_boot.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+
+if [[ "$(tty)" != "/dev/tty1" ]]; then
+    return
+fi
+
+if [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+    return
+fi
+
+if ! [[ -x /usr/local/bin/configure-stormux ]]; then
+    return
+fi
+
+# Volume calibration FIRST
+echo "Setting up audio volume..."
+volume=50
+wait=0
+
+# Wait for pipewire to become available
+while [[ $wait -lt 30 ]]; do
+    if pgrep pipewire &> /dev/null ; then
+        break
+    else
+        sleep 1
+        ((wait++))
+    fi
+done
+
+# Volume calibration - this should be the VERY FIRST interactive part
+while [[ $volume -le 130 ]]; do
+    clear
+    pactl set-sink-volume @DEFAULT_SINK@ "${volume}%" 2>/dev/null
+    spd-say "If this is loud enough, press enter."
+    if read -t4 ; then
+        echo "Volume set to ${volume}%"
+        break
+    else
+        ((volume+=5))
+    fi
+done
+
+# For audible sudo prompts:
+unset sudoFlags
+if [[ -x /etc/audibleprompt.sh ]]; then
+    export SUDO_ASKPASS=/etc/audibleprompt.sh
+    export sudoFlags=("-A")
+fi
+
+clear
+cat << "EOF"
+Hello, and welcome to Stormux!
+
+Let's get you set up. After you press enter, you will be prompted for the sudo password.
+When that happens, type the word stormux and press enter.
+You will not receive any speech feedback for this process.
+That is completely normal, and speech will return after you have typed the password.
+Once again, the password is stormux in all lower case letters.
+
+Please press enter to continue.
+EOF
+read -r
+sudo "${sudoFlags[@]}" configure-stormux

x86_64/airootfs/etc/skel.custom/.bash_aliases

@@ -0,0 +1,4 @@
+# Raspberry Pi Information
+alias pi-temp='/usr/bin/vcgencmd measure_temp'
+alias pi-version='cat /sys/firmware/devicetree/base/model;echo'
+alias pi-ip='ip a | grep -v "127.0.0.1" | grep -E -o "([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}"'

x86_64/airootfs/etc/sudoers.d/wheel

@@ -0,0 +1 @@
+%wheel ALL=(ALL:ALL) ALL

x86_64/airootfs/etc/systemd/journald.conf.d/99-ramlog.conf

@@ -0,0 +1,3 @@
+[Journal]
+Storage=volatile
+SystemMaxUse=20M

x86_64/airootfs/etc/systemd/system/fenrirscreenreader.service.d/wait-for-audio.conf

@@ -0,0 +1,5 @@
+[Unit]
+# Ensure audio and speech-dispatcher are available before starting Fenrir
+# Wait for user audio initialization to complete
+After=sound.target stormux-audio-setup.service speech-dispatcherd.service user@1000.service
+Wants=stormux-audio-setup.service speech-dispatcherd.service user@1000.service

x86_64/airootfs/etc/systemd/system/getty.target.wants/fenrirscreenreader.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/fenrirscreenreader.service

x86_64/airootfs/etc/systemd/system/getty@tty1.service.d/autologin.conf

@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty -o '-p -f -- \\u' --noclear --autologin root - $TERM

x86_64/airootfs/etc/systemd/system/getty@tty2.service.d/autologin.conf

@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty -o '-p -f -- \\u' --noclear --autologin stormux - $TERM

x86_64/airootfs/etc/systemd/system/log-to-ram-setup.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=Setup RAM logging and restore logs from disk
+DefaultDependencies=false
+After=local-fs.target
+Before=sysinit.target
+RequiresMountsFor=/var
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStartPre=/bin/mkdir -p /var/log.hdd
+ExecStartPre=/bin/sh -c 'if [ -d /var/log.hdd ] && [ "$(ls -A /var/log.hdd 2>/dev/null)" ]; then cp -au /var/log.hdd/* /var/log/ 2>/dev/null || true; fi'
+ExecStart=/bin/true
+
+[Install]
+WantedBy=sysinit.target

x86_64/airootfs/etc/systemd/system/log-to-ram-shutdown.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Sync logs to disk before shutdown
+DefaultDependencies=false
+Before=shutdown.target reboot.target halt.target
+Conflicts=shutdown.target reboot.target halt.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=true
+ExecStart=/bin/sh -c 'rsync -aXv --delete --exclude="*.hdd" /var/log/ /var/log.hdd/ 2>/dev/null || true'
+TimeoutStopSec=30
+
+[Install]
+WantedBy=shutdown.target reboot.target halt.target

x86_64/airootfs/etc/systemd/system/log-to-ram-sync.service

@@ -0,0 +1,8 @@
+[Unit]
+Description=Sync logs from RAM to disk
+After=local-fs.target
+
+[Service]
+Type=oneshot
+ExecStartPre=/bin/mkdir -p /var/log.hdd
+ExecStart=/bin/sh -c 'rsync -aXv --delete --exclude="*.hdd" /var/log/ /var/log.hdd/ 2>/dev/null || true'

x86_64/airootfs/etc/systemd/system/log-to-ram-sync.timer

@@ -0,0 +1,11 @@
+[Unit]
+Description=Sync logs from RAM to disk every hour
+Requires=log-to-ram-sync.service
+
+[Timer]
+OnBootSec=15min
+OnUnitActiveSec=1h
+Persistent=true
+
+[Install]
+WantedBy=timers.target

x86_64/airootfs/etc/systemd/system/multi-user.target.wants/NetworkManager.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/NetworkManager.service

x86_64/airootfs/etc/systemd/system/multi-user.target.wants/brltty.path

@@ -0,0 +1 @@
+/usr/lib/systemd/system/brltty.path

x86_64/airootfs/etc/systemd/system/multi-user.target.wants/stormux-repo-init.service

@@ -0,0 +1 @@
+../stormux-repo-init.service

x86_64/airootfs/etc/systemd/system/pipewire-live-setup.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=Setup Pipewire for Live Environment
+After=sound.target
+Before=fenrirscreenreader.service speech-dispatcherd.service
+DefaultDependencies=no
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/local/bin/setup-pipewire-live.sh
+
+[Install]
+WantedBy=multi-user.target

x86_64/airootfs/etc/systemd/system/sound.target.wants/stormux-audio-setup.service

@@ -0,0 +1 @@
+../stormux-audio-setup.service

x86_64/airootfs/etc/systemd/system/stormux-audio-setup.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Setup audio for Stormux live environment
+# Wait for audio hardware to be ready
+Wants=systemd-udev-settle.service
+After=systemd-udev-settle.service sound.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# Enable linger so pipewire can run without login
+ExecStartPre=/bin/mkdir -p /var/lib/systemd/linger
+ExecStartPre=/bin/touch /var/lib/systemd/linger/stormux
+# Unmute and set volume
+ExecStart=/usr/local/bin/livecd-sound
+
+[Install]
+WantedBy=sound.target

x86_64/airootfs/etc/systemd/system/stormux-repo-init.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=Initialize Stormux repository key
+After=pacman-init.service
+Requires=pacman-init.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/pacman-key --add /usr/share/stormux/stormux_repo.pub
+ExecStart=/usr/bin/pacman-key --lsign-key 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82
+
+[Install]
+WantedBy=multi-user.target

x86_64/airootfs/etc/systemd/system/stormux-speech.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=Stormux screen reader and speech service
+After=stormux-audio-setup.service sound.target
+Wants=stormux-audio-setup.service
+Before=getty@tty1.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# Give pipewire a moment to initialize
+ExecStartPre=/bin/sleep 2
+# Start Fenrir screen reader
+ExecStart=/bin/systemctl start fenrirscreenreader.service
+
+[Install]
+WantedBy=multi-user.target

x86_64/airootfs/etc/systemd/system/systemd-firstboot.service

@@ -0,0 +1 @@
+/dev/null

x86_64/airootfs/etc/systemd/system/time_sync_at_boot.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=Update system time from worldtimeapi.org
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/sync_time.sh
+
+[Install]
+WantedBy=multi-user.target

x86_64/airootfs/etc/vconsole.conf

@@ -0,0 +1,3 @@
+# This is the fallback vconsole configuration provided by systemd.
+
+KEYMAP=us_alt

x86_64/airootfs/etc/wireplumber/main.lua.d/50-analog-priority.lua

@@ -0,0 +1,31 @@
+-- Prioritize analog and USB audio devices over HDMI
+-- This ensures real sound cards are selected by default
+
+rule = {
+  matches = {
+    {
+      { "device.form-factor", "equals", "internal" },
+    },
+    {
+      { "device.form-factor", "equals", "speaker" },
+    },
+    {
+      { "device.form-factor", "equals", "headphone" },
+    },
+    {
+      { "device.bus", "equals", "usb" },
+    },
+    {
+      { "node.name", "matches", "alsa_output.pci-*analog*" },
+    },
+    {
+      { "node.name", "matches", "alsa_output.usb-*" },
+    },
+  },
+  apply_properties = {
+    ["priority.driver"] = 1000,
+    ["priority.session"] = 1000,
+  },
+}
+
+table.insert(alsa_monitor.rules, rule)

x86_64/airootfs/etc/wireplumber/main.lua.d/51-hdmi-deprioritize.lua

@@ -0,0 +1,22 @@
+-- Deprioritize HDMI audio devices
+-- This ensures analog/USB audio devices are preferred over HDMI
+
+rule = {
+  matches = {
+    {
+      { "device.name", "matches", "hdmi*" },
+    },
+    {
+      { "device.name", "matches", "HDMI*" },
+    },
+    {
+      { "node.name", "matches", "alsa_output.pci-*hdmi*" },
+    },
+  },
+  apply_properties = {
+    ["priority.driver"] = 100,
+    ["priority.session"] = 100,
+  },
+}
+
+table.insert(alsa_monitor.rules, rule)

x86_64/airootfs/home/stormux/.bash_aliases

@@ -0,0 +1,4 @@
+# Raspberry Pi Information
+alias pi-temp='/usr/bin/vcgencmd measure_temp'
+alias pi-version='cat /sys/firmware/devicetree/base/model;echo'
+alias pi-ip='ip a | grep -v "127.0.0.1" | grep -E -o "([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}"'

x86_64/airootfs/home/stormux/.bash_functions

@@ -0,0 +1,21 @@
+memuse() {
+    ps axo rss,comm,pid \
+        | awk '{ proc_list[$2] += $1; } END \
+        { for (proc in proc_list) { printf("%d\t%s\n", proc_list[proc],proc); }}' \
+        | sort -n | tail -n 10 | sort -rn \
+        | awk '{$1/=1024;printf "%.0fMB\t",$1}{print $2}'
+}
+
+
+pdf()
+{
+    if [[ $# -ne 1 ]]; then
+        echo 'Usage: pdf <file>' >&2
+    else
+        local dir=$(mktemp -d -p /tmp pdf_conversion.XXXXXX)
+        local outFile="${1##*/}"
+        local outFile="${outFile%.*}"
+        pdftohtml -noframes -i -s "$1" "${dir}/${outFile}.html"
+        w3m -s "${dir}/${outFile}.html"
+    fi
+}

x86_64/airootfs/home/stormux/.bashrc

@@ -0,0 +1,24 @@
+#
+# ~/.bashrc
+#
+
+# If not running interactively, don't do anything
+[[ $- != *i* ]] && return
+
+#Change directories without using cd
+shopt -s autocd
+
+# Keep bash history in screen
+export HISTFILE="${HISTFILE}${WINDOW:+.${WINDOW}}"
+
+# load Aliases and functions
+[[ -f ".bash_aliases" ]] && source .bash_aliases
+[[ -f ".bash_functions" ]] && source .bash_functions
+#Invironment variables
+PS1='[\u@\h \W] \$ '
+export DIALOGOPTS='--no-lines --visit-items'
+GPG_TTY=$(tty)
+export GPG_TTY
+# Don't put commands prefixed with space, or duplicate commands in history
+export HISTCONTROL=ignoreboth
+

x86_64/airootfs/home/stormux/.config/pipewire/pipewire-pulse.conf.d/50-fenrir-console.conf

@@ -0,0 +1,24 @@
+# Fenrir console audio support
+# Adds secondary socket for console applications like Fenrir
+
+pulse.properties = {
+    # the addresses this server listens on
+    server.address = [
+        "unix:native"
+        "unix:/tmp/pulse.sock"              # console access socket
+    ]
+}
+
+# client/stream specific properties
+pulse.rules = [
+    {
+        # speech dispatcher asks for too small latency and then underruns.
+        matches = [ { application.name = "~speech-dispatcher*" } ]
+        actions = {
+            update-props = {
+                pulse.min.req          = 1024/48000     # 21ms
+                pulse.min.quantum      = 1024/48000     # 21ms
+            }
+        }
+    }
+]

x86_64/airootfs/home/stormux/.config/systemd/user/default.target.wants/pipewire-init-sound.service

@@ -0,0 +1 @@
+../pipewire-init-sound.service

x86_64/airootfs/home/stormux/.config/systemd/user/pipewire-init-sound.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=Initialize Pipewire Audio with Sound Test
+After=pipewire.service pipewire-pulse.service wireplumber.service
+Wants=pipewire.service pipewire-pulse.service wireplumber.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/local/bin/init-pipewire-sound.sh
+
+[Install]
+WantedBy=default.target

x86_64/airootfs/home/stormux/.config/wireplumber/bluetooth.conf.d/50-fenrir-bluez.conf

@@ -0,0 +1,24 @@
+# Fenrir console audio support
+# Prevents bluetooth disconnection when switching TTY
+
+monitor.bluez.properties = {
+  # Disable logind integration to prevent bluetooth device suspension on TTY switch
+  bluez5.enable-sbc-xq = true
+  bluez5.enable-msbc = true
+  bluez5.enable-hw-volume = true
+}
+
+monitor.bluez.rules = [
+  {
+    matches = [
+      {
+        device.name = "~bluez_card.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+]

x86_64/airootfs/home/stormux/.config/wireplumber/main.conf.d/50-fenrir-no-suspend.conf

@@ -0,0 +1,35 @@
+# Fenrir console audio support
+# Prevents audio device suspension when switching to TTY console
+
+monitor.alsa.rules = [
+  {
+    matches = [
+      {
+        device.name = "~alsa_card.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        api.alsa.use-acp = true
+        api.acp.auto-profile = false
+        api.acp.auto-port = false
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+  {
+    matches = [
+      {
+        node.name = "~alsa_input.*"
+      }
+      {
+        node.name = "~alsa_output.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+]

x86_64/airootfs/home/stormux/.inputrc

@@ -0,0 +1,6 @@
+# Reload changes with control+x followed by control+r
+set echo-control-characters off
+
+# History searching with up and down arrows.
+"\e[A": history-search-backward
+"\e[B": history-search-forward

x86_64/airootfs/home/stormux/.screenrc

@@ -0,0 +1,18 @@
+vbell off
+bell_msg ""
+hardstatus off
+startup_message off
+defscrollback 4096
+bind ! select 10
+bind @ select 11
+bind \# select 12
+bind $ select 13
+bind % select 14
+bind ^ select 15
+bind & select 16
+bind * select 17
+bind ( select 18
+bind ) select 19
+bind b eval "writebuf" 'exec !!! xclip -selection "clipboard" -i /tmp/screen-exchange'
+#termcapinfo xterm|xterms|xs|rxvt ti@:te@
+termcapinfo xterm* ti@:te@

x86_64/airootfs/root/.config/pulse/client.conf

@@ -0,0 +1,36 @@
+# This file is part of PulseAudio.
+#
+# PulseAudio is free software; you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# PulseAudio is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.
+
+## Configuration file for PulseAudio clients. See pulse-client.conf(5) for
+## more information. Default values are commented out.  Use either ; or # for
+## commenting.
+
+; default-sink =
+; default-source =
+default-server = unix:/tmp/pulse.sock
+; default-dbus-server =
+
+autospawn = no
+; autospawn = yes
+; daemon-binary = /usr/bin/pulseaudio
+; extra-arguments = --log-target=syslog
+
+; cookie-file =
+
+; enable-shm = yes
+; shm-size-bytes = 0 # setting this 0 will use the system-default, usually 64 MiB
+
+; auto-connect-localhost = no
+; auto-connect-display = no

x86_64/airootfs/root/rename-user.sh

@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+
+# Renames a user
+# Required arguments: old user name, new user name
+
+set -e
+
+question() {
+    echo
+    echo "$@"
+    read -r answer
+    answer="${answer:0:1}"
+    answer="${answer^}"
+}
+
+if [[ $# -ne 2 ]]; then
+    echo "Usage: $0 old-user new-user"
+    exit 1
+fi
+
+oldUser="$1"
+newUser="$2"
+
+# Make sure old user exists
+if ! id "$oldUser" >/dev/null 2>&1; then
+    echo "The user $oldUser does not exist."
+    exit 1
+fi
+
+# Make sure old user is not logged in
+if pgrep -u "$oldUser" >/dev/null; then
+    echo "The user $oldUser is currently logged in or has running processes. Cannot continue."
+    question "Would you like to forcibly log out $oldUser? (Y/N)"
+    if [[ "$answer" != "Y" ]]; then
+        exit 1
+    fi
+    systemctl stop display-manager
+    loginctl terminate-user "$oldUser"
+    sleep 2
+    if pgrep -u "$oldUser" >/dev/null; then
+        echo "The user $oldUser still has running processes after termination. Cannot continue."
+        exit 1
+    fi
+fi
+
+# Make sure new user does not exist
+if id "$newUser" >/dev/null 2>&1; then
+    echo "The user name $newUser is already taken."
+    exit 1
+fi
+
+# Make sure the new name is acceptable
+if ! [[ "$newUser" =~ ^[a-z_][a-z0-9_-]{0,31}$ ]]; then
+    echo "$newUser is not an acceptable user name."
+    exit 1
+fi
+
+# Passed all safety checks, proceed with the rename
+echo "Renaming $oldUser to $newUser..."
+groups=$(id -nG "$oldUser")
+groups="${groups// /,}"
+usermod -G "$groups" -m -d "/home/$newUser" -l "$newUser" "$oldUser"
+
+# Update nodm.conf if it exists
+if [[ -e /etc/nodm.conf ]]; then
+    echo "Updating /etc/nodm.conf..."
+    sed -i -e "s#^NODM_USER=.*#NODM_USER='$newUser'#" -e "s#^NODM_XSESSION=.*#NODM_XSESSION='/home/$newUser/.xinitrc'#" /etc/nodm.conf
+fi
+
+# Copy over crontab if it exists
+if crontab -u "$oldUser" -l >/tmp/${oldUser}_crontab.bak 2>/dev/null; then
+    echo "Copying over crontab..."
+    if crontab -u "$newUser" "/tmp/${oldUser}_crontab.bak"; then
+        rm "/tmp/${oldUser}_crontab.bak"
+    else
+        echo "Warning: failed to restore crontab for $newUser."
+        rm "/tmp/${oldUser}_crontab.bak"
+    fi
+fi
+
+# Update linger
+if [[ -e "/var/lib/systemd/linger/$oldUser" ]]; then
+    echo "Enabling linger..."
+    mv "/var/lib/systemd/linger/$oldUser" "/var/lib/systemd/linger/$newUser"
+fi
+
+# Optionally update files in new home directory
+echo
+echo "Would you like to search for references to $oldUser and update them to $newUser in files located in /home/$newUser?"
+question "This can take a while. (Y/N)"
+if [[ "$answer" == "Y" ]]; then
+    echo "Updating files..."
+    find "/home/$newUser" -type f -exec grep -Iq . "{}" \; -and -exec sed -i "s|$oldUser|$newUser|g" "{}" \;
+fi
+
+echo
+echo "Rename complete. The user, $newUser, is now available."
+question "Would you like to reboot?"
+if [[ "${answer}" == "Y" ]]; then
+    reboot
+fi
+
+exit 0

x86_64/airootfs/skel

@@ -0,0 +1 @@
+../../../pi4/files/etc/skel

x86_64/airootfs/usr/local/bin/configure-stormux

@@ -0,0 +1,141 @@
+#!/usr/bin/env bash
+
+# For audible sudo prompts:
+unset sudoFlags
+if [[ -x /etc/audibleprompt.sh ]]; then
+    export SUDO_ASKPASS=/etc/audibleprompt.sh
+    export sudoFlags=("-A")
+fi
+
+trap cleanup EXIT
+cleanup() {
+    popd &> /dev/null
+    if ! [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+        echo "Initial setup is not complete."
+        echo "To continue setup, please run:"
+        echo "sudo configure-stormux"
+    fi
+}
+
+
+if [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+    pushd /opt/configure-stormux
+    ./configure-stormux.sh
+    exit 0
+fi
+
+# Volume calibration is now handled in stormux_first_boot.sh
+
+export DIALOGOPTS='--insecure --no-lines --visit-items'
+
+set_timezone() {
+    # Get the list of timezones
+    mapfile -t regions < <(timedatectl --no-pager list-timezones | cut -d '/' -f1 | sort -u)
+
+    # Use the same text twice here and just hide the tag field.
+        region=$(dialog --backtitle "Please select your Region" \
+                --no-tags \
+                --menu "Use up and down arrows or page-up and page-down to navigate the list, and press 'Enter' to make your selection." 0 0 0 \
+                $(for i in ${regions[@]} ; do echo "$i";echo "$i";done) --stdout)
+
+
+    mapfile -t cities < <(timedatectl --no-pager list-timezones | grep "$region" | cut -d '/' -f2 | sort -u)
+
+    # Use the same text twice here and just hide the tag field.
+        city=$(dialog --backtitle "Please select a city near you" \
+                --no-tags \
+                --menu "Use up and down arrow or page-up and page-down to navigate the list." 0 0 10 \
+                $(for i in ${cities[@]} ; do echo "$i";echo "$i";done) --stdout)
+
+    # Set the timezone
+    if [[ -f /etc/localtime ]]; then
+        rm /etc/localtime
+    fi
+    ln -sf /usr/share/zoneinfo/${region}/${city} /etc/localtime
+    timedatectl set-ntp true
+}
+# Offer to switch fenrir layout.
+echo "Would you like to switch Fenrir to laptop layout?"
+echo "Press y for yes or n for no followed by enter."
+read -r continue
+continue="${continue::1}"
+if [[ "${continue,}" == "y" ]];then
+    sed -i 's/=desktop/=laptop/' /etc/fenrirscreenreader/settings/settings.conf
+    clear
+    systemctl restart fenrirscreenreader.service
+fi
+
+# Check for possible resize
+diskSource="$(df --output='source' / | tail -1)"
+diskSize="$(df -h --output='size' / | tail -1 | tr -cd '[:digit:].')"
+diskSize=${diskSize%.*}
+if [[ $diskSize -le 7 ]]; then
+    echo "$diskSource is only $diskSize gigs, which means it probably needs to be resized. Would you like to do this now?"
+    echo "Press y for yes or n for no followed by enter."
+    read -r continue
+    continue="${continue::1}"
+    if [[ "${continue,}" == "y" ]];then
+        # Extract base device name (handles mmcblk0p2, nvme0n1p2, sda2, etc.)
+        if [[ "$diskSource" =~ (.*[0-9]+)p[0-9]+$ ]]; then
+            # Handle mmcblk0p2, nvme0n1p2 style
+            diskDevice="${BASH_REMATCH[1]}"
+        else
+            # Handle sda2, sdb3 style  
+            diskDevice="$(echo "$diskSource" | sed 's/[0-9]*$//')"
+        fi
+        echo "Yes" | sudo "${sudoFlags[@]}" parted ---pretend-input-tty "$diskDevice" resizepart 2 100%
+        sudo "${sudoFlags[@]}" resize2fs -f "$diskSource"
+    fi
+fi
+ 
+if ! ping -c1 stormux.org &> /dev/null ; then
+    echo "No internet connection detected. Press enter to open NetworkManager."
+    read -r continue
+    echo "setting set focus#highlight=True" | socat - UNIX-CLIENT:/tmp/fenrirscreenreader-deamon.sock
+    nmtui-connect
+    echo "setting set focus#highlight=False" | socat - UNIX-CLIENT:/tmp/fenrirscreenreader-deamon.sock
+fi
+# Check for internet connectivity
+if ping -qc1 -W 1 stormux.org &> /dev/null; then
+    echo "Updating the clock to prevent certificate errors..."
+    # Get current date and time
+    date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
+    echo "Current date and time: $date_time"
+    # set date and time
+    date -s "$date_time"
+    echo "If your Pi does not have a CMOS battery and is powered off regularly, it may take a while for the time to be set correctly after boot."
+    echo "Stormux provides a service to sync the time after internet connection is established."
+    read -rp "Would you like the time to sync as soon as the Pi connects to the internet? " answer
+    answer="${answer:0:1}"
+    if [[ "${answer,,}" == "y" ]]; then
+        systemctl enable time_sync_at_boot.service
+    else
+       echo "Time sync at boot skipped."
+       echo "If you change your mind later, simply type:"
+       echo "sudo systemctl enable time_sync_at_boot.service"
+    fi
+    set_timezone
+else
+    echo "Please connect to the internet and run ${0##*/} again."
+    exit 1
+fi
+echo "Installing configure-stormux..."
+git -C /opt clone -q https://git.stormux.org/storm/configure-stormux || exit 1
+
+echo
+echo "Initial setup is complete."
+echo
+echo "The default passwords are stormux for the stormux user"
+echo "and root for the root user. It is highly recommended to change them."
+echo "To change the password for stormux, run:"
+echo "passwd"
+echo "To change the password for root, run:"
+echo "sudo passwd"
+echo
+echo "For more configuration options, run configure-stormux,"
+echo "or you may configure your system manually."
+echo
+echo "Thank you for choosing Stormux."
+
+
+exit 0

x86_64/airootfs/usr/local/bin/init-pipewire-sound.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# Initialize pipewire audio by attempting to play sound until it succeeds
+# This ensures pipewire is fully ready before fenrir starts
+
+maxAttempts=30
+attempt=0
+
+while [[ $attempt -lt $maxAttempts ]]; do
+    # Try to play a silent sound using sox
+    if play -qnV0 synth .1 whi norm -100 2>/dev/null; then
+        # Success! Pipewire is working
+        exit 0
+    fi
+
+    # Wait a moment before trying again
+    sleep 1
+    ((attempt++))
+done
+
+# Even if we failed, exit successfully so we don't block boot
+exit 0

x86_64/airootfs/usr/local/bin/livecd-sound

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# Configure audio for Stormux live environment
+# Ensures pipewire is running and audio is properly configured
+
+# Start pipewire for the stormux user if not already running
+if id stormux &>/dev/null; then
+    # Enable linger for stormux user
+    loginctl enable-linger stormux 2>/dev/null || true
+
+    # Start pipewire user services
+    stormux_uid="$(id -u stormux)"
+    sudo -u stormux XDG_RUNTIME_DIR="/run/user/${stormux_uid}" systemctl --user enable --now pipewire.service pipewire-pulse.service wireplumber.service 2>/dev/null || true
+
+    # Wait for pipewire to initialize
+    sleep 2
+fi
+
+# Unmute and set reasonable volumes
+amixer -q set Master 70% unmute 2>/dev/null || true
+amixer -q set PCM 70% unmute 2>/dev/null || true
+amixer -q set Speaker 70% unmute 2>/dev/null || true
+amixer -q set Headphone 70% unmute 2>/dev/null || true
+
+exit 0

x86_64/airootfs/usr/local/bin/setup-pipewire-live.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+# Setup Pipewire for the live environment
+# This ensures pipewire is running before Fenrir starts
+
+# Note: Do not use set -e - we want this to succeed even if commands fail
+
+# Enable user linger for the stormux user (allows user services to run without login)
+if [ -d /var/lib/systemd/linger ]; then
+    touch /var/lib/systemd/linger/stormux
+fi
+
+# Start pipewire for the stormux user
+if id stormux &>/dev/null; then
+    # Use machinectl to start user services in the user's session
+    machinectl shell stormux@ /usr/bin/systemctl --user enable pipewire.service pipewire-pulse.service wireplumber.service 2>/dev/null || true
+    machinectl shell stormux@ /usr/bin/systemctl --user start pipewire.service pipewire-pulse.service wireplumber.service 2>/dev/null || true
+fi
+
+# Wait a moment for pipewire to initialize
+sleep 2
+
+exit 0

x86_64/airootfs/usr/local/bin/stormux-setup.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+#
+# Customize the airootfs after package installation
+# This script runs in the chroot environment after packages are installed
+
+set -e -u
+
+# Copy custom skel files, overwriting package defaults
+if [ -d /etc/skel.custom ]; then
+    echo "Installing custom skel files..."
+    cp -f /etc/skel.custom/.* /etc/skel/ 2>/dev/null || true
+    rm -rf /etc/skel.custom
+fi
+
+# Set the distribution name
+echo 'Stormux \r (\l)' > /etc/issue
+echo >> /etc/issue
+
+# Create realtime group if it doesn't exist
+if ! getent group realtime > /dev/null 2>&1; then
+    echo "Creating realtime group..."
+    groupadd -r realtime
+fi
+
+# Create stormux user with groups matching Pi build
+echo "Creating stormux user..."
+useradd -m -g users -G wheel,realtime,audio,video,network,brlapi -s /bin/bash stormux
+
+# Set passwords
+echo -e "root\nroot" | passwd "root"
+echo -e "stormux\nstormux" | passwd "stormux"
+
+# Configure git for stormux user
+sudo -iu stormux bash -c 'git config --global init.defaultBranch master'
+
+# Create user directories
+sudo -iu stormux xdg-user-dirs-update
+
+# Enable linger so that sound will start at login
+mkdir -p /var/lib/systemd/linger
+touch /var/lib/systemd/linger/stormux
+
+# Enable pipewire globally
+# Pipewire configuration for fenrir is pre-installed in airootfs
+systemctl --global enable pipewire.service pipewire-pulse.service
+
+# Configure sudo for wheel group
+echo '%wheel ALL=(ALL) ALL' > /etc/sudoers.d/wheel
+
+# Set hostname
+echo stormux > /etc/hostname
+
+# Disable systemd-networkd in favor of NetworkManager
+systemctl disable systemd-networkd.service systemd-networkd.socket 2>/dev/null || true
+
+# Enable services
+services=(
+    brltty.path
+    fenrirscreenreader.service
+    NetworkManager.service
+    stormux-audio-setup.service
+)
+
+for service in "${services[@]}"; do
+    echo "Enabling $service..."
+    if systemctl enable "$service"; then
+        echo "  $service: OK"
+    else
+        echo "  $service: FAILED"
+    fi
+done
+
+echo "Airootfs customization complete"

x86_64/airootfs/usr/local/bin/sync_time.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
+date -s "$date_time"

x86_64/airootfs/usr/share/stormux/stormux_repo.pub

@@ -0,0 +1,29 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQINBGhTtIcBEADTCqY/+das1n52HTTlp3Uf5+ER5r0fNA2HgJq4GzEeFBdqdgSF
+y05P9B94d4JWtWvt0ckjsNfku19O9IquKiYP5x9/sYT8RGeRUrTlN9qlCrytTsdM
+a8ij9esGQOXDeyRJQTs5igbFWQ26MrJpOkmO8xMXGmfD29yOppRLzVS8Jed0mokk
+aEajui3QSWcefDnFMBYNaMF04iuWgVxv/7102adh3u3+V632+fQQhFtu+x92iosU
+GtWlGGe3UkEhWJIb6wf/VCYIYQAjxTQBLul2WByXqwCXmobzc7DJbte3FSEPvPis
+nJiUmT0fsIIC9c1UbTJt5Gqb6o/oI61tEJEeXieBViXFE7HwBI7FUxaIXoozgiYA
+BxaLHQT0Qv9k1SXbBm82xNydjqFHIAolYSp5s1wRIhErlOaG9w3+Tb8zFSekPsbg
+cgS/b3PpWmnigXBJQ94Ee+6KoPMVrwEKIu/IHexRUVAm+66Xs55ccgMY+MUupIjX
+Bdn9jCYB8NwpC3UNWoSv2oQ7F2hVbXZYC/dx7gKmyvzfrw5MLOX7yEoSGlJJp2iK
+fLLP8nw+x7LnDFEnAjPjtmeH7e+JANH1scP/7YMKDszO1THSK3hBAK1aeq0aEFs8
+9AO++xZrNbCrF2MnqcGaXs/753k6kf8zyrW6t7A1opxjPHIz3WrQ8SbXXwARAQAB
+tExTdG9ybXV4IChGb3Igc2lnbmluZyBzdG9ybXV4IHJlcG9zaXRvcnkgcGFja2Fn
+ZXMpIDxzdG9ybV9kcmFnb25Ac3Rvcm11eC5vcmc+iQJOBBMBCgA4FiEEUq2kkADx
+/wRW+K7vtM3hzVbvjoIFAmhTtIcCGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AA
+CgkQtM3hzVbvjoLiLQ/9HJzlwr2JNGdR/LaM1Y6VuhASGDZsUsi5XLJ7qKUKN/eA
+kq0LMO7TzHO++otsEolodMr8fTkthQTPqSnbLZsW9Y3wK9U2vajryblRSEBaY6VB
+1ds0pAg5SXz7O2eI2Ne05dkYB176G72KcjrOiSanKjI9sqh6pdTHcQM3XbRxxEVn
+or7fKbLs/eveFWRPW3EAwuVnWI1aw3Xw9BQ3TE1eEDPvBh2GVKZ6qskbzdwfZtUB
+kxAa30M+ftlNDaV7d6mNfREefEJfZjYFrY2XiqTK3+w1Q1ZaugK0Bbd/YdAoGMdt
+6gbd2h/IZtxduWW/HhvWX2wtKqn4fNxAyYcY3aWm8kuq0pXlyEZ96gZas6a2lu+f
++yLvIh3UtC1IimFMDMQnKCTbWgdhd0HMnG9ULnoOroXVGltnBQwlO0hrHSVD+qmy
+NVPUxkzS3ZhqSmoW2G8hSvXpMjt/w5fhC0FJhFb/uM/7LqJWSl5aAkUHupN3t/nG
+9o7chBQzzXwbpiS6DQuIt6ouyPpwNjeELFPNBjZDf0auVWj6ZZ5+B/bmyHXQ4wFS
+bYKZdO9VeXhBxRUMfGpIKvIw/Lnc+1Toan1RTWoUoRH+HuK2D/LAuvsam36gtLrQ
+XV3//7Mh4oQ0Zg4REG3SEfG9i3rav8wMtRmaJaSbwmMVpC6mT/uiEzCSgQhO/0c=
+=HIM9
+-----END PGP PUBLIC KEY BLOCK-----

x86_64/build.sh

@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+#
+# Copyright 2025, Stormux, <storm_dragon@stormux.org>
+#
+# This is free software; you can redistribute it and/or modify it under the
+# terms of the GNU General Public License as published by the Free
+# Software Foundation; either version 3, or (at your option) any later
+# version.
+#
+# This software is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this package; see the file COPYING.  If not, write to the Free
+# Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+# 02110-1301, USA.
+#
+
+set -e
+
+help() {
+    echo "Stormux x86_64 ISO Builder"
+    echo
+    echo "Usage: $0 [options]"
+    echo
+    echo "Options:"
+    echo "  -o <dir>   Output directory (default: ./out)"
+    echo "  -w <dir>   Work directory (default: ./work)"
+    echo "  -h         Show this help"
+    echo
+    echo "This script builds a Stormux x86_64 ISO using archiso."
+    echo "It must be run as root on an Arch Linux system."
+    exit 0
+}
+
+# Parse command line arguments
+output_dir="./out"
+work_dir="./work"
+
+while getopts "o:w:h" opt; do
+    case "$opt" in
+        o) output_dir="$OPTARG" ;;
+        w) work_dir="$OPTARG" ;;
+        h) help ;;
+        *) help ;;
+    esac
+done
+
+# Make sure this script is run as root
+if [ "$(whoami)" != "root" ]; then
+    echo "Error: This script must be run as root."
+    exit 1
+fi
+
+# Check for required tools
+for tool in mkarchiso pacman; do
+    if ! command -v "$tool" &> /dev/null; then
+        echo "Error: $tool is not installed. Please install archiso package."
+        exit 1
+    fi
+done
+
+# Get the directory where this script is located
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+pi4_files_dir="$script_dir/../pi4/files"
+
+echo "Building Stormux x86_64 ISO..."
+echo "Profile directory: $script_dir"
+echo "Output directory: $output_dir"
+echo "Work directory: $work_dir"
+echo
+
+# Clean up work directory from previous builds to ensure clean build environment
+if [ -d "$work_dir" ]; then
+    echo "Cleaning up previous build artifacts..."
+    rm -rf "$work_dir"
+fi
+
+# Note: Shared configuration files from pi4/files should already be in airootfs/
+# The airootfs/ directory is maintained as part of the x86_64 profile
+# and should not be dynamically copied during build to avoid conflicts with packages
+echo "Using existing airootfs configuration files..."
+
+# Add Stormux repository key to build host's keyring
+echo "Setting up Stormux repository key on build host..."
+key_file="$script_dir/stormux_repo.pub"
+if [ ! -f "$key_file" ]; then
+    echo "Error: Stormux repository key not found at $key_file"
+    echo "Please ensure stormux_repo.pub exists in the x86_64 directory"
+    exit 1
+fi
+
+# Check if key is already in keyring
+if ! pacman-key --list-keys 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82 &>/dev/null; then
+    echo "Adding Stormux repository key to build host keyring..."
+    pacman-key --add "$key_file"
+    pacman-key --lsign-key 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82
+    echo "Key added successfully"
+else
+    echo "Stormux repository key already in keyring"
+fi
+
+# Build the ISO
+mkarchiso -v -w "$work_dir" -o "$output_dir" "$script_dir"
+
+echo
+echo "Build complete!"
+echo "ISO file is in: $output_dir"

x86_64/client.conf

@@ -0,0 +1,36 @@
+# This file is part of PulseAudio.
+#
+# PulseAudio is free software; you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# PulseAudio is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.
+
+## Configuration file for PulseAudio clients. See pulse-client.conf(5) for
+## more information. Default values are commented out.  Use either ; or # for
+## commenting.
+
+; default-sink =
+; default-source =
+default-server = unix:/tmp/pulse.sock
+; default-dbus-server =
+
+autospawn = no
+; autospawn = yes
+; daemon-binary = /usr/bin/pulseaudio
+; extra-arguments = --log-target=syslog
+
+; cookie-file =
+
+; enable-shm = yes
+; shm-size-bytes = 0 # setting this 0 will use the system-default, usually 64 MiB
+
+; auto-connect-localhost = no
+; auto-connect-display = no