Initial build setup for x86_64 Stormux.

Remove the pam.d/nodm file because it's now included in the package in the repository.
Fixed bug in disk resize code.
2025-11-19 03:26:25 -05:00 · 2025-08-20 13:59:15 -04:00 · 2025-08-19 17:08:29 -04:00 · 2025-08-19 16:45:51 -04:00 · 2025-08-19 16:22:54 -04:00 · 2025-08-19 16:02:12 -04:00
121 changed files with 2598 additions and 722 deletions
@@ -1,276 +0,0 @@
-#! /bin/bash
-#
-# Copyright 2020, Stormux, <storm_dragon@linux-a11y.org>
-#
-# This is free software; you can redistribute it and/or modify it under the
-# terms of the GNU General Public License as published by the Free
-# Software Foundation; either version 3, or (at your option) any later
-# version.
-#
-# This software is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this package; see the file COPYING.  If not, write to the Free
-# Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
-# 02110-1301, USA.
-#
-
-# keep track of mounted status for exit function
-mounted=1
-
-set -e # Don't want to destroy stuff if this goes majorly wrong.
-trap cleanup EXIT # make sure the script cleans up after itself before closing.
-
-
-cleanup() {
-    if [[ $mounted -eq 0 ]]; then
-        umount -R /mnt
-        partx -d "${loopdev}"
-        losetup --detach "${loopdev}"
-    fi
-    if [[ -n "${imageFileName}" ]]; then
-        rm "${imageFileName}"
-    fi
-    exit 0
-}
-
-help() {
-    echo -e "Usage:\n"
-    echo "With no arguments, build with default parameters."
-    for i in "${!command[@]}" ; do
-        echo "-${i/:/ <parameter>}: ${command[${i}]}"
-    done | sort
-    exit 0
-}
-
-# Array of command line arguments
-declare -A command=(
-    [h]="This help screen."
-    [l:]="Language default is en_US."
-    [n:]="Image name, default is stormux-pi3-<armv7h|aarch64>-<yyyy-mm-dd>.img"
-    [s:]="image size in GB, default is 4."
-    [v:]="Version of the Raspberry Pi for which you are building. (32|64) default is 64."
-)
-
-# Convert the keys of the associative array to a format usable by getopts
-args="${!command[*]}"
-args="${args//[[:space:]]/}"
-while getopts "${args}" i ; do
-    case "$i" in
-        h) help ;;
-        l)
-            imageLanguage="${OPTARG}.UTF-8"
-            ;;
-        n)
-            imageName="${OPTARG}"
-            ;;
-        s)
-            if [[ "${OPTARG}" =~ ^[[:digit:]]+$ ]]; then
-                imageSize="${OPTARG}G"
-            else
-                echo "Image size must be numeric."
-                exit 1
-            fi
-            ;;
-        v)
-            if [[ "${OPTARG}" =~ ^32|64$ ]]; then
-                imageVersion="${OPTARG}"
-            else
-                echo "Image version must be 32 for 32 bit (armv7h), or 64 for 64 bit (aarch64 default)."
-                exit 1
-            fi
-            ;;
-        *)
-            exit 1
-            ;;
-    esac
-done
-
-# make sure variables are set, or use defaults.
-export imageVersion="${imageVersion:-64}"
-export imageSize="${imageSize:-4G}"
-imageName="${imageName:-stormux-pi3-${imageVersion}-$(date '+%Y-%m-%d').img}"
-imageName="${imageName/-64-/-aarch64-}"
-imageName="${imageName/-32-/-armv7h-}"
-export imageName
-export imageLanguage="${imageLanguage:-en_US.UTF-8}"
-
-# Make sure the image file doesn't exist.
-if [[ -e "$imageName" ]]; then
-    echo "${imageName} exists, please remove or move it for this script to continue."
-    exit 1
-fi
-
-# Make sure this script is ran as root.
-if [ "$(whoami)" != "root" ] ; then
-    echo "Error: This script must be run as root."
-    exit 1
-fi
-
-# make sure the needed tools are installed
-if [[ "$(uname -m)" == "x86_64" ]]; then
-    if ! pacman -Q qemu-user-static &> /dev/null ; then
-        echo "Please install qemu-user-static and qemu-user-static-binfmt before continuing."
-        exit 1
-    fi
-    if ! pacman -Q qemu-user-static-binfmt &> /dev/null ; then
-        echo "Please install qemu-user-static and qemu-user-static-binfmt before continuing."
-        exit 1
-    fi
-fi
-for i in arch-install-scripts dosfstools parted wget ; do
-    if ! pacman -Q $i &> /dev/null ; then
-        echo "Please install $i before continuing."
-        exit 1
-    fi
-done
-
-
-# Url for the image to be downloaded.
-url[32]="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-armv7-latest.tar.gz"
-url[64]="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-aarch64-latest.tar.gz"
-
-fallocate -l "$imageSize" "$imageName"
-loopdev="$(losetup --find --show "${imageName}")"
-parted --script "${loopdev}" mklabel msdos mkpart primary fat32 0% 200M mkpart primary ext4 200M 100%
-mkfs.vfat -F32 "${loopdev}p1"
-mkfs.ext4 -F "${loopdev}p2"
-mount "${loopdev}p2" /mnt
-mkdir /mnt/boot
-mount "${loopdev}p1" /mnt/boot
-# Things are mounted now, so set mounted to 0 (bash true)
-mounted=0
-imageFileName=$(mktemp)
-wget "${url[$imageVersion]}" -O "${imageFileName}"
-bsdtar -xpf "${imageFileName}" -C /mnt
-arch-chroot /mnt << EOF
-# set up pacman
-pacman-key --init
-pacman-key --populate archlinuxarm
-pacman -Syy
-# Change kernels for aarch64
-if [[ "$imageVersion" == "64" ]]; then
-pacman -R --noconfirm linux-aarch64 uboot-raspberrypi
-pacman -S --noconfirm linux-rpi
-fi
-
-# Install packages
-pacman -Su --needed --noconfirm \
-    alsa-firmware \
-    alsa-utils \
-    base \
-    base-devel \
-    bash-completion \
-    bluez \
-    bluez-utils \
-    brltty \
-    cloud-utils \
-    cronie \
-    dbus-broker \
-    espeak-ng \
-    fake-hwclock \
-    git \
-    go \
-    magic-wormhole \
-    man \
-    man-pages \
-    networkmanager \
-    ntp \
-    pipewire \
-    pipewire-alsa \
-    pipewire-jack \
-    pipewire-pulse \
-    poppler \
-    python-pyudev \
-    python-daemonize \
-    python-evdev \
-    python-dbus \
-    python-pyte \
-    raspberrypi-firmware \
-    realtime-privileges \
-    rhvoice-voice-bdl \
-    rng-tools \
-    rsync \
-    screen \
-    sox \
-    w3m \
-    wget \
-    wireless-regdb \
-    wireplumber \
-    xdg-user-dirs \
-    xdg-utils
-
-# set the language
-sed -i "s/#$imageLanguage/$imageLanguage/" /etc/locale.gen
-echo "LANG=$imageLanguage" > /etc/locale.conf
-locale-gen
-# Configure and enable Hardware Random Number Generator
-echo 'RNGD_OPTS="-o /dev/random -r /dev/hwrng"' > /etc/conf.d/rngd
-systemctl enable rngd.service
-# Set the distribution name.
-echo 'Stormux \r (\l)' > /etc/issue
-echo >> /etc/issue
-# Change the alarm user to be stormux
-usermod -a -g users -G wheel,realtime,audio,video,network,brlapi -m -d /home/stormux -l stormux alarm
-# Grant sudo privileges to the stormux user for package installation.
-echo 'stormux ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers.d/wheel
-# Set the password for the root user
-echo -e "root\nroot" | passwd "root"
-# Set the password for the stormux user
-echo -e "stormux\nstormux" | passwd "stormux"
-# Change to the stormux user and install some packages
-sudo -iu stormux
-# Create desktop, downloads, music, and other directories.
-xdg-user-dirs-update
-# Build AUR packages
-export aurPackages=(fenrir-git \
-    growpartfs \
-    log2ram \
-    yay)
-export PKGDEST=~/packages
-for p in "\${aurPackages[@]}" ; do
-    git clone https://aur.archlinux.org/\${p}.git
-    cd ~/\${p}
-    makepkg -A
-    cd ~
-    rm -rf \${p}
-done
-exit
-# Install built packages
-for p in /home/stormux/packages/* ; do
-    pacman -U --noconfirm \${p}
-done
-rm -rf /home/stormux/packages/
-# Enable linger so that hopefully sound will start at login.
-mkdir -p /var/lib/systemd/linger
-touch /var/lib/systemd/linger/stormux
-systemctl --global enable dbus-broker.service pipewire.service pipewire-pulse.service
-/usr/share/fenrirscreenreader/tools/configure_pipewire.sh
-sudo -u stormux /usr/share/fenrirscreenreader/tools/configure_pipewire.sh
-# Configure sudo for group wheel, remove nopasswd for the stormux user
-echo '%wheel ALL=(ALL) ALL' > /etc/sudoers.d/wheel
-# Set the hostname
-echo stormux > /etc/hostname
-# Configure services
-systemctl enable brltty.path cronie.service dbus-broker.service fake-hwclock.service fenrirscreenreader.service log2ram.service NetworkManager.service ntpd.service
-systemctl disable dbus.service
-# Cleanup packages
-pacman -Sc --noconfirm
-pacman -R --noconfirm go
-
-# Update fstab for Raspberry Pi 4. Not needed until linux-aarch64 works.
-# [[ $imageVersion -eq 4 ]] && sed -i 's/mmcblk0/mmcblk1/g' /etc/fstab
-EOF
-
-# Copy override files into place.
-cp -rv ../files/boot/* /mnt/boot
-cp -rv ../files/etc/* /mnt/etc
-cp -rv ../files/var/* /mnt/var
-cp -rv ../files/usr/* /mnt/usr
-find ../files/etc/skel/ -mindepth 1 -exec cp -rv "{}" /mnt/home/stormux/ \;
-
-# Exiting calls the cleanup function to unmount.
-exit 0
@@ -1,10 +0,0 @@
-# See /boot/overlays/README for all available options
-
-dtoverlay=vc4-kms-v3d
-initramfs initramfs-linux.img followkernel
-dtparam=audio=on,krnbt=on
-hdmi_drive=2
-
-[pi4]
-# Run as fast as firmware / board allows
-arm_boost=1
@@ -1,20 +0,0 @@
-Section "Monitor"
-        Identifier "dummy_monitor"
-        HorizSync 28.0-80.0
-        VertRefresh 48.0-75.0
-        Modeline "1920x1080" 172.80 1920 2040 2248 2576 1080 1081 1084 1118
-EndSection
-                                                                                                                                                      
-Section "Device"
-        Identifier "dummy_card"
-        VideoRam 256000
-        Driver "dummy"
-EndSection
-                                                                                                                                                      
-Section "Screen"
-        Identifier "dummy_screen"
-        Device "dummy_card"
-        Monitor "dummy_monitor"
-        SubSection "Display"
-        EndSubSection
-EndSection
@@ -1,37 +0,0 @@
-# Configuration file for Log2Ram (https://github.com/azlux/log2ram) under MIT license.
-# This configuration file is read by the log2ram service
-
-# Size for the ram folder, it defines the size the log folder will reserve into the RAM.
-# If it's not enough, log2ram will not be able to use ram. Check you /var/log size folder.
-# The default is 40M and is basically enough for a lot of applications.
-# You will need to increase it if you have a server and a lot of log for example.
-SIZE=128M
-
-# This variable can be set to true if you prefer "rsync" rather than "cp".
-# I use the command cp -u and rsync -X, so I don't copy the all folder every time for optimization.
-# You can choose which one you want. Be sure rsync is installed if you use it.
-USE_RSYNC=true
-
-# If there are some errors with available RAM space, a system mail will be send
-# Change it to false and you will have only a log if there is no place on RAM anymore.
-MAIL=false
-
-# Variable for folders to put in RAM. You need to specify the real folder `/path/folder` , the `/path/hdd.folder` will be automatically created. Multiple path can be separeted by `;`. Do not add the final `/` !
-# example : PATH_DISK="/var/log;/home/test/FolderInRam"
-PATH_DISK="/var/log"
-
-# **************** Zram backing conf  *************************************************
-
-# ZL2R Zram Log 2 Ram enables a zram drive when ZL2R=true ZL2R=false is mem only tmpfs
-ZL2R=false
-# COMP_ALG this is any compression algorithm listed in /proc/crypto
-# lz4 is fastest with lightest load but deflate (zlib) and Zstandard (zstd) give far better compression ratios
-# lzo is very close to lz4 and may with some binaries have better optimisation
-# COMP_ALG=lz4 for speed or Zstd for compression, lzo or zlib if optimisation or availabilty is a problem
-COMP_ALG=lz4
-# LOG_DISK_SIZE is the uncompressed disk size. Note zram uses about 0.1% of the size of the disk when not in use
-# LOG_DISK_SIZE is expected compression ratio of alg chosen multiplied by log SIZE
-# lzo/lz4=2.1:1 compression ratio zlib=2.7:1 zstandard=2.9:1
-# Really a guestimate of a bit bigger than compression ratio whilst minimising 0.1% mem usage of disk size
-LOG_DISK_SIZE=100M
-
@@ -1,6 +0,0 @@
-#%PAM-1.0
-
-auth      include   system-local-login
-account   include   system-local-login
-password  include   system-local-login
-session   include   system-local-login
@@ -1 +0,0 @@
-alias sudo='sudo '
@@ -1,47 +0,0 @@
-#  This file is part of systemd.
-#
-#  systemd is free software; you can redistribute it and/or modify it under the
-#  terms of the GNU Lesser General Public License as published by the Free
-#  Software Foundation; either version 2.1 of the License, or (at your option)
-#  any later version.
-#
-# Entries in this file show the compile time defaults. Local configuration
-# should be created by either modifying this file, or by creating "drop-ins" in
-# the journald.conf.d/ subdirectory. The latter is generally recommended.
-# Defaults can be restored by simply deleting this file and all drop-ins.
-#
-# Use 'systemd-analyze cat-config systemd/journald.conf' to display the full config.
-#
-# See journald.conf(5) for details.
-
-[Journal]
-#Storage=auto
-#Compress=yes
-#Seal=yes
-#SplitMode=uid
-#SyncIntervalSec=5m
-#RateLimitIntervalSec=30s
-#RateLimitBurst=10000
-SystemMaxUse=20M
-#SystemKeepFree=
-#SystemMaxFileSize=
-#SystemMaxFiles=100
-#RuntimeMaxUse=
-#RuntimeKeepFree=
-#RuntimeMaxFileSize=
-#RuntimeMaxFiles=100
-#MaxRetentionSec=
-#MaxFileSec=1month
-#ForwardToSyslog=no
-#ForwardToKMsg=no
-#ForwardToConsole=no
-#ForwardToWall=yes
-#TTYPath=/dev/console
-#MaxLevelStore=debug
-#MaxLevelSyslog=debug
-#MaxLevelKMsg=notice
-#MaxLevelConsole=info
-#MaxLevelWall=emerg
-#LineMax=48K
-#ReadKMsg=yes
-#Audit=yes
@@ -1,14 +0,0 @@
-[Unit]
-Description=Network Time Service
-After=network.target nss-lookup.target
-Conflicts=systemd-timesyncd.service
-
-[Service]
-Type=forking
-PrivateTmp=true
-ExecStartPre=/usr/bin/ntpd -Ggq
-ExecStart=/usr/bin/ntpd -g -u ntp:ntp
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
@@ -1,47 +0,0 @@
-#!/bin/bash
-
-trap 'popd &> /dev/null' EXIT
-
-export SUDO_ASKPASS=/etc/audibleprompt.sh
-if [[ ! -d /opt/configure-stormux ]]; then
-    # Offer to switch fenrir layout.
-    echo "Would you like to switch Fenrir to laptop layout? (y/n)"
-    read -r continue
-    continue="${continue::1}"
-    if [[ "${continue,}" == "y" ]];then
-        sudo -A sed -i 's/=desktop/=laptop/' /etc/fenrirscreenreader/settings/settings.conf
-        sudo -A systemctl restart fenrirscreenreader.service
-        clear
-    fi
-    if ! ping -c1 stormux.org &> /dev/null ; then
-        echo "No internet connection detected. Press enter to open NetworkManager."
-        echo "Note, it is best to put Fenrir into highlight mode while using NetworkManager."
-        echo "In desktop layout this is done by pressing Fenrir+numpad asterisk."
-        echo "That is the key just above numpad 9."
-        echo "In laptop mode, press Fenrir+y."
-        echo "In desktop mode the Fenrir key is numpad insert."
-        echo "In laptop mode the Fenrir key is the Super key, sometimes called the Windows key."
-        echo "Press enter to continue."
-        read -r continue
-        nmtui-connect
-    fi
-# Check for internet connectivity
-if ping -qc1 -W 1 stormux.org &> /dev/null; then
-  echo "Updating the clock to prevent certificate errors..."
-  # Get current date and time
-  date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
-  echo "Current date and time: $date_time"
-  # set date and time
-  sudo -A date -s "$date_time"
-else
-  echo "Please connect to the internet and run ${0##*/} again."
-  exit 1
-fi
-    echo "Installing configure-stormux..."
-    sudo -A git -C /opt clone -q https://git.stormux.org/storm/configure-stormux || exit 1
-fi
-
-pushd /opt/configure-stormux
-./configure-stormux.sh
-
-exit 0
@@ -1,6 +1,6 @@
 #! /bin/bash
 #
-# Copyright 2020, Stormux, <storm_dragon@linux-a11y.org>
+# Copyright 2020, Stormux, <storm_dragon@stormux.org>
 #
 # This is free software; you can redistribute it and/or modify it under the
 # terms of the GNU General Public License as published by the Free
@@ -50,9 +50,8 @@ help() {
 declare -A command=(
    [h]="This help screen."
    [l:]="Language default is en_US."
-    [n:]="Image name, default is stormux-pi<32|64>-<yyyy-mm-dd>.img"
-    [s:]="image size in GB, default is 4."
-    [v:]="Version of the Raspberry Pi for which you are building. (32|64) default is 64."
+    [n:]="Image name, default is stormux-pi4-aarch64-<yyyy-mm-dd>.img"
+    [s:]="image size in GB, default is 6."
 )

 # Convert the keys of the associative array to a format usable by getopts
@@ -75,14 +74,6 @@ while getopts "${args}" i ; do
                exit 1
            fi
            ;;
-        v)
-            if [[ "${OPTARG}" =~ ^32|64$ ]]; then
-                imageVersion="${OPTARG}"
-            else
-                echo "Image version must be 32 for 32 bit (armv7h), or 64 for 64 bit (aarch64 default)."
-                exit 1
-            fi
-            ;;
        *)
            exit 1
            ;;
@@ -90,11 +81,8 @@ while getopts "${args}" i ; do
 done

 # make sure variables are set, or use defaults.
-export imageVersion="${imageVersion:-64}"
-export imageSize="${imageSize:-4G}"
-imageName="${imageName:-stormux-pi4-${imageVersion}-$(date '+%Y-%m-%d').img}"
-imageName="${imageName/-64-/-aarch64-}"
-imageName="${imageName/-32-/-armv7h-}"
+export imageSize="${imageSize:-6G}"
+imageName="${imageName:-stormux-pi4-aarch64-$(date '+%Y-%m-%d').img}"
 export imageName
 export imageLanguage="${imageLanguage:-en_US.UTF-8}"

@@ -129,87 +117,139 @@ for i in arch-install-scripts dosfstools parted wget ; do
 done


-# Url for the image to be downloaded.
-url[32]="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-armv7-latest.tar.gz"
-url[64]="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-aarch64-latest.tar.gz"
+# Url for the aarch64 image to be downloaded.
+imageUrl="http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-aarch64-latest.tar.gz"

 fallocate -l "$imageSize" "$imageName"
 loopdev="$(losetup --find --show "${imageName}")"
 parted --script "${loopdev}" mklabel msdos mkpart primary fat32 0% 200M mkpart primary ext4 200M 100%
-mkfs.vfat -F32 "${loopdev}p1"
-mkfs.ext4 -F "${loopdev}p2"
+mkfs.vfat -F32 -n STRMX_BOOT "${loopdev}p1"
+mkfs.ext4 -F -L STRMX_ROOT "${loopdev}p2"
 mount "${loopdev}p2" /mnt
 mkdir /mnt/boot
 mount "${loopdev}p1" /mnt/boot
 # Things are mounted now, so set mounted to 0 (bash true)
 mounted=0
 imageFileName=$(mktemp)
-wget "${url[$imageVersion]}" -O "${imageFileName}"
-if [[ $imageVersion -eq 32 ]]; then
-    # Workaround for bsdtar errors when extracting 32 bit image.
-    set +e
-fi
+wget "${imageUrl}" -O "${imageFileName}"
 bsdtar -xpf "${imageFileName}" -C /mnt
-# Set -e in case it got unset for 32 bit image
-set -e
-arch-chroot /mnt << EOF
+
+# Copy override files into place before chroot (except skel to avoid conflicts)
+cp -rv ../files/boot/* /mnt/boot
+cp -rv ../files/var/* /mnt/var
+cp -rv ../files/usr/* /mnt/usr
+# Copy etc files but exclude skel directory to avoid package conflicts
+find ../files/etc -mindepth 1 -maxdepth 1 ! -name skel -exec cp -rv {} /mnt/etc/ \;
+
+PS1="(Chroot) [\u@\h \W] \$" arch-chroot /mnt << EOF
+echo "Chroot started."
 # set up pacman
 pacman-key --init
 pacman-key --populate archlinuxarm
-pacman -Syy
-# Change kernels for aarch64
-if [[ "$imageVersion" == "64" ]]; then
-pacman -R --noconfirm linux-aarch64 uboot-raspberrypi
-pacman -S --noconfirm linux-rpi
+
+# Add stormux repository
+echo "Downloading stormux repository key..."
+curl -s https://packages.stormux.org/stormux_repo.pub > /tmp/stormux_repo.pub
+echo "Adding key to pacman keyring..."
+pacman-key --add /tmp/stormux_repo.pub
+echo "Locally signing key..."
+pacman-key --lsign-key 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82
+rm /tmp/stormux_repo.pub
+# Add repository before core in pacman.conf
+sed -i '/^\[core\]/i[stormux]\nSigLevel = Required DatabaseOptional\nServer = https://packages.stormux.org/\$arch\n' /etc/pacman.conf
+
+# Test mirrors and configure based on responsiveness
+echo "Testing mirror responsiveness..."
+mirrors=(
+    "mirror.archlinuxarm.org"
+    "fl.us.mirror.archlinuxarm.org"
+    "il.us.mirror.archlinuxarm.org"
+    "tx.us.mirror.archlinuxarm.org"
+    "nj.us.mirror.archlinuxarm.org"
+)
+
+working_mirrors=()
+for mirror in "\${mirrors[@]}"; do
+    echo "Testing \$mirror..."
+    if curl -m 5 -f -s "http://\$mirror/aarch64/core/core.db" > /dev/null 2>&1; then
+        echo "  \$mirror: OK"
+        working_mirrors+=("\$mirror")
+    else
+        echo "  \$mirror: FAILED"
+    fi
+done
+
+# Create mirrorlist with working mirrors first, then fallback to all mirrors
+> /etc/pacman.d/mirrorlist
+if [[ \${#working_mirrors[@]} -gt 0 ]]; then
+    echo "Using \${#working_mirrors[@]} working mirrors"
+    for mirror in "\${working_mirrors[@]}"; do
+        echo "Server = http://\$mirror/\\\$arch/\\\$repo" >> /etc/pacman.d/mirrorlist
+    done
+else
+    echo "No mirrors responded, using all mirrors as fallback"
+    for mirror in "\${mirrors[@]}"; do
+        echo "Server = http://\$mirror/\\\$arch/\\\$repo" >> /etc/pacman.d/mirrorlist
+    done
 fi

-# Install packages
-pacman -Su --needed --noconfirm \
-    alsa-firmware \
-    alsa-utils \
-    base \
-    base-devel \
-    bash-completion \
-    bluez \
-    bluez-utils \
-    brltty \
-    cloud-utils \
-    cronie \
-    dbus-broker \
-    espeak-ng \
-    fake-hwclock \
-    firmware-raspberrypi \
-    git \
-    go \
-    magic-wormhole \
-    man \
-    man-pages \
-    networkmanager \
-    ntp \
-    pipewire \
-    pipewire-alsa \
-    pipewire-jack \
-    pipewire-pulse \
-    poppler \
-    python-pyudev \
-    python-daemonize \
-    python-evdev \
-    python-dbus \
-    python-pyte \
-    raspberrypi-utils \
-    realtime-privileges \
-    rhvoice-voice-bdl \
-    rng-tools \
-    rsync \
-    screen \
-    sox \
-    w3m \
-    wget \
-    wireless-regdb \
-    wireplumber \
-    xdg-user-dirs \
-    xdg-utils
+pacman -Syy
+# Change to the Pi kernel for aarch64
+pacman -R --noconfirm linux-aarch64 uboot-raspberrypi
+pacman -S --noconfirm linux-rpi

+# Install all packages (stormux repo has priority since it's listed first)
+packages=(
+    alsa-firmware
+    alsa-utils
+    base
+    base-devel
+    bash-completion
+    bluez
+    bluez-utils
+    brltty
+    cronie
+    espeak-ng
+    fake-hwclock
+    fenrir
+    firmware-raspberrypi
+    git
+    magic-wormhole
+    man
+    man-pages
+    networkmanager
+    parted
+    pipewire
+    pipewire-alsa
+    pipewire-jack
+    pipewire-pulse
+    poppler
+    python-dbus
+    python-pyenchant
+    python-pyte
+    python-setuptools-scm
+    python-pyperclip
+    raspberrypi-utils
+    socat
+    realtime-privileges
+    rhvoice-voice-bdl
+    rng-tools
+    rsync
+    screen
+    sox
+    w3m-git
+    wget
+    wireless-regdb
+    wireplumber
+    xdg-user-dirs
+    xdg-utils
+    yay
+)
+
+pacman -Su --needed --noconfirm "\${packages[@]}"
+
+# Restart gpg agents.
+gpgconf --kill all
 # set the language
 sed -i "s/#$imageLanguage/$imageLanguage/" /etc/locale.gen
 echo "LANG=$imageLanguage" > /etc/locale.conf
@@ -228,33 +268,18 @@ echo 'stormux ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers.d/wheel
 echo -e "root\nroot" | passwd "root"
 # Set the password for the stormux user
 echo -e "stormux\nstormux" | passwd "stormux"
-# Change to the stormux user and install some packages
+
+# Change to the stormux user for user configuration
 sudo -iu stormux
+# suppress git spam about default branch name
+git config --global init.defaultBranch master
 # Create desktop, downloads, music, and other directories.
 xdg-user-dirs-update
-# Build AUR packages
-export aurPackages=(fenrir-git \
-    growpartfs \
-    log2ram \
-    yay)
-export PKGDEST=~/packages
-for p in "\${aurPackages[@]}" ; do
-    git clone https://aur.archlinux.org/\${p}.git
-    cd ~/\${p}
-    makepkg -A
-    cd ~
-    rm -rf \${p}
-done
 exit
-# Install built packages
-for p in /home/stormux/packages/* ; do
-    pacman -U --noconfirm \${p}
-done
-rm -rf /home/stormux/packages/
 # Enable linger so that hopefully sound will start at login.
 mkdir -p /var/lib/systemd/linger
 touch /var/lib/systemd/linger/stormux
-systemctl --global enable dbus-broker.service pipewire.service pipewire-pulse.service
+systemctl --global enable pipewire.service pipewire-pulse.service
 /usr/share/fenrirscreenreader/tools/configure_pipewire.sh
 sudo -u stormux /usr/share/fenrirscreenreader/tools/configure_pipewire.sh
 # Configure sudo for group wheel, remove nopasswd for the stormux user
@@ -262,21 +287,33 @@ echo '%wheel ALL=(ALL) ALL' > /etc/sudoers.d/wheel
 # Set the hostname
 echo stormux > /etc/hostname
 # Configure services
-systemctl enable brltty.path cronie.service dbus-broker.service fake-hwclock.service fenrirscreenreader.service log2ram.service NetworkManager.service ntpd.service
-systemctl disable dbus.service
+systemctl disable systemd-networkd.service systemd-networkd.socket
+# Enable services
+services=(
+    brltty.path
+    cronie.service
+    fake-hwclock.service
+    fenrirscreenreader.service
+    log-to-ram-setup.service
+    log-to-ram-sync.timer
+    log-to-ram-shutdown.service
+    NetworkManager.service
+)
+
+for service in "\${services[@]}"; do
+    echo "Enabling \$service..."
+    if systemctl enable "\$service"; then
+        echo "  \$service: OK"
+    else
+        echo "  \$service: FAILED"
+    fi
+done
 # Cleanup packages
 pacman -Sc --noconfirm
-pacman -R --noconfirm go

-# Update fstab for Raspberry Pi 4. Not needed until linux-aarch64 works.
-# [[ $imageVersion -eq 4 ]] && sed -i 's/mmcblk0/mmcblk1/g' /etc/fstab
 EOF

-# Copy override files into place.
-cp -rv ../files/boot/* /mnt/boot
-cp -rv ../files/etc/* /mnt/etc
-cp -rv ../files/var/* /mnt/var
-cp -rv ../files/usr/* /mnt/usr
+# Copy skel files to stormux user home (after user rename in chroot)
 find ../files/etc/skel/ -mindepth 1 -exec cp -rv "{}" /mnt/home/stormux/ \;

 # Exiting calls the cleanup function to unmount.
@@ -0,0 +1 @@
+root=LABEL=STRMX_ROOT rw rootwait console=serial0,115200 console=tty1 fsck.repair=yes
@@ -1,20 +0,0 @@
-Section "Monitor"
-        Identifier "dummy_monitor"
-        HorizSync 28.0-80.0
-        VertRefresh 48.0-75.0
-        Modeline "1920x1080" 172.80 1920 2040 2248 2576 1080 1081 1084 1118
-EndSection
-                                                                                                                                                      
-Section "Device"
-        Identifier "dummy_card"
-        VideoRam 256000
-        Driver "dummy"
-EndSection
-                                                                                                                                                      
-Section "Screen"
-        Identifier "dummy_screen"
-        Device "dummy_card"
-        Monitor "dummy_monitor"
-        SubSection "Display"
-        EndSubSection
-EndSection
@@ -0,0 +1,7 @@
+# Static information about the filesystems.
+# See fstab(5) for details.
+
+# <file system> <dir> <type> <options> <dump> <pass>
+LABEL=STRMX_BOOT  /boot   vfat    defaults        0       1
+LABEL=STRMX_ROOT  /       ext4    defaults,noatime  0       1
+tmpfs             /var/log tmpfs  defaults,noatime,nosuid,nodev,noexec,mode=0755,size=128M 0 0
@@ -1,37 +0,0 @@
-# Configuration file for Log2Ram (https://github.com/azlux/log2ram) under MIT license.
-# This configuration file is read by the log2ram service
-
-# Size for the ram folder, it defines the size the log folder will reserve into the RAM.
-# If it's not enough, log2ram will not be able to use ram. Check you /var/log size folder.
-# The default is 40M and is basically enough for a lot of applications.
-# You will need to increase it if you have a server and a lot of log for example.
-SIZE=128M
-
-# This variable can be set to true if you prefer "rsync" rather than "cp".
-# I use the command cp -u and rsync -X, so I don't copy the all folder every time for optimization.
-# You can choose which one you want. Be sure rsync is installed if you use it.
-USE_RSYNC=true
-
-# If there are some errors with available RAM space, a system mail will be send
-# Change it to false and you will have only a log if there is no place on RAM anymore.
-MAIL=false
-
-# Variable for folders to put in RAM. You need to specify the real folder `/path/folder` , the `/path/hdd.folder` will be automatically created. Multiple path can be separeted by `;`. Do not add the final `/` !
-# example : PATH_DISK="/var/log;/home/test/FolderInRam"
-PATH_DISK="/var/log"
-
-# **************** Zram backing conf  *************************************************
-
-# ZL2R Zram Log 2 Ram enables a zram drive when ZL2R=true ZL2R=false is mem only tmpfs
-ZL2R=false
-# COMP_ALG this is any compression algorithm listed in /proc/crypto
-# lz4 is fastest with lightest load but deflate (zlib) and Zstandard (zstd) give far better compression ratios
-# lzo is very close to lz4 and may with some binaries have better optimisation
-# COMP_ALG=lz4 for speed or Zstd for compression, lzo or zlib if optimisation or availabilty is a problem
-COMP_ALG=lz4
-# LOG_DISK_SIZE is the uncompressed disk size. Note zram uses about 0.1% of the size of the disk when not in use
-# LOG_DISK_SIZE is expected compression ratio of alg chosen multiplied by log SIZE
-# lzo/lz4=2.1:1 compression ratio zlib=2.7:1 zstandard=2.9:1
-# Really a guestimate of a bit bigger than compression ratio whilst minimising 0.1% mem usage of disk size
-LOG_DISK_SIZE=100M
-
@@ -0,0 +1 @@
+options brcmfmac feature_disable=0x82000
@@ -1,6 +0,0 @@
-#%PAM-1.0
-
-auth      include   system-local-login
-account   include   system-local-login
-password  include   system-local-login
-session   include   system-local-login
@@ -1,7 +1,54 @@
 #!/usr/bin/env bash

-if [[ "$(tty)" = "/dev/tty1" ]]; then
-    cat << "EOF"
+if [[ "$(tty)" != "/dev/tty1" ]]; then
+    return
+fi
+
+if [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+    return
+fi
+
+if ! [[ -x /usr/local/bin/configure-stormux ]]; then
+    return
+fi
+
+# Volume calibration FIRST
+echo "Setting up audio volume..."
+volume=50
+wait=0
+
+# Wait for pipewire to become available
+while [[ $wait -lt 30 ]]; do
+    if pgrep pipewire &> /dev/null ; then
+        break
+    else
+        sleep 1
+        ((wait++))
+    fi
+done
+
+# Volume calibration - this should be the VERY FIRST interactive part
+while [[ $volume -le 130 ]]; do
+    clear
+    pactl set-sink-volume @DEFAULT_SINK@ "${volume}%" 2>/dev/null
+    spd-say "If this is loud enough, press enter."
+    if read -t4 ; then
+        echo "Volume set to ${volume}%"
+        break
+    else
+        ((volume+=5))
+    fi
+done
+
+# For audible sudo prompts:
+unset sudoFlags
+if [[ -x /etc/audibleprompt.sh ]]; then
+    export SUDO_ASKPASS=/etc/audibleprompt.sh
+    export sudoFlags=("-A")
+fi
+
+clear
+cat << "EOF"
 Hello, and welcome to Stormux!

 Let's get you set up. After you press enter, you will be prompted for the sudo password.
@@ -12,7 +59,5 @@ Once again, the password is stormux in all lower case letters.

 Please press enter to continue.
 EOF
-    read -r
-    sudo configure-stormux
-    sudo rm -- "/etc/profile.d/stormux_first_boot.sh"
-fi
+read -r
+sudo "${sudoFlags[@]}" configure-stormux
@@ -1,3 +1,4 @@
 # Raspberry Pi Information
 alias pi-temp='/usr/bin/vcgencmd measure_temp'
 alias pi-version='cat /sys/firmware/devicetree/base/model;echo'
+alias pi-ip='ip a | grep -v "127.0.0.1" | grep -E -o "([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}"'
@@ -1,47 +0,0 @@
-#  This file is part of systemd.
-#
-#  systemd is free software; you can redistribute it and/or modify it under the
-#  terms of the GNU Lesser General Public License as published by the Free
-#  Software Foundation; either version 2.1 of the License, or (at your option)
-#  any later version.
-#
-# Entries in this file show the compile time defaults. Local configuration
-# should be created by either modifying this file, or by creating "drop-ins" in
-# the journald.conf.d/ subdirectory. The latter is generally recommended.
-# Defaults can be restored by simply deleting this file and all drop-ins.
-#
-# Use 'systemd-analyze cat-config systemd/journald.conf' to display the full config.
-#
-# See journald.conf(5) for details.
-
-[Journal]
-#Storage=auto
-#Compress=yes
-#Seal=yes
-#SplitMode=uid
-#SyncIntervalSec=5m
-#RateLimitIntervalSec=30s
-#RateLimitBurst=10000
-SystemMaxUse=20M
-#SystemKeepFree=
-#SystemMaxFileSize=
-#SystemMaxFiles=100
-#RuntimeMaxUse=
-#RuntimeKeepFree=
-#RuntimeMaxFileSize=
-#RuntimeMaxFiles=100
-#MaxRetentionSec=
-#MaxFileSec=1month
-#ForwardToSyslog=no
-#ForwardToKMsg=no
-#ForwardToConsole=no
-#ForwardToWall=yes
-#TTYPath=/dev/console
-#MaxLevelStore=debug
-#MaxLevelSyslog=debug
-#MaxLevelKMsg=notice
-#MaxLevelConsole=info
-#MaxLevelWall=emerg
-#LineMax=48K
-#ReadKMsg=yes
-#Audit=yes
@@ -0,0 +1,3 @@
+[Journal]
+Storage=volatile
+SystemMaxUse=20M
@@ -0,0 +1,16 @@
+[Unit]
+Description=Setup RAM logging and restore logs from disk
+DefaultDependencies=false
+After=local-fs.target
+Before=sysinit.target
+RequiresMountsFor=/var
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStartPre=/bin/mkdir -p /var/log.hdd
+ExecStartPre=/bin/sh -c 'if [ -d /var/log.hdd ] && [ "$(ls -A /var/log.hdd 2>/dev/null)" ]; then cp -au /var/log.hdd/* /var/log/ 2>/dev/null || true; fi'
+ExecStart=/bin/true
+
+[Install]
+WantedBy=sysinit.target
@@ -0,0 +1,14 @@
+[Unit]
+Description=Sync logs to disk before shutdown
+DefaultDependencies=false
+Before=shutdown.target reboot.target halt.target
+Conflicts=shutdown.target reboot.target halt.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=true
+ExecStart=/bin/sh -c 'rsync -aXv --delete --exclude="*.hdd" /var/log/ /var/log.hdd/ 2>/dev/null || true'
+TimeoutStopSec=30
+
+[Install]
+WantedBy=shutdown.target reboot.target halt.target
@@ -0,0 +1,8 @@
+[Unit]
+Description=Sync logs from RAM to disk
+After=local-fs.target
+
+[Service]
+Type=oneshot
+ExecStartPre=/bin/mkdir -p /var/log.hdd
+ExecStart=/bin/sh -c 'rsync -aXv --delete --exclude="*.hdd" /var/log/ /var/log.hdd/ 2>/dev/null || true'
@@ -0,0 +1,11 @@
+[Unit]
+Description=Sync logs from RAM to disk every hour
+Requires=log-to-ram-sync.service
+
+[Timer]
+OnBootSec=15min
+OnUnitActiveSec=1h
+Persistent=true
+
+[Install]
+WantedBy=timers.target
@@ -0,0 +1,11 @@
+[Unit]
+Description=Update system time from worldtimeapi.org
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/sync_time.sh
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,3 @@
+# This is the fallback vconsole configuration provided by systemd.
+
+KEYMAP=us_alt
@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+
+# Renames a user
+# Required arguments: old user name, new user name
+
+set -e
+
+question() {
+    echo
+    echo "$@"
+    read -r answer
+    answer="${answer:0:1}"
+    answer="${answer^}"
+}
+
+if [[ $# -ne 2 ]]; then
+    echo "Usage: $0 old-user new-user"
+    exit 1
+fi
+
+oldUser="$1"
+newUser="$2"
+
+# Make sure old user exists
+if ! id "$oldUser" >/dev/null 2>&1; then
+    echo "The user $oldUser does not exist."
+    exit 1
+fi
+
+# Make sure old user is not logged in
+if pgrep -u "$oldUser" >/dev/null; then
+    echo "The user $oldUser is currently logged in or has running processes. Cannot continue."
+    question "Would you like to forcibly log out $oldUser? (Y/N)"
+    if [[ "$answer" != "Y" ]]; then
+        exit 1
+    fi
+    systemctl stop display-manager
+    loginctl terminate-user "$oldUser"
+    sleep 2
+    if pgrep -u "$oldUser" >/dev/null; then
+        echo "The user $oldUser still has running processes after termination. Cannot continue."
+        exit 1
+    fi
+fi
+
+# Make sure new user does not exist
+if id "$newUser" >/dev/null 2>&1; then
+    echo "The user name $newUser is already taken."
+    exit 1
+fi
+
+# Make sure the new name is acceptable
+if ! [[ "$newUser" =~ ^[a-z_][a-z0-9_-]{0,31}$ ]]; then
+    echo "$newUser is not an acceptable user name."
+    exit 1
+fi
+
+# Passed all safety checks, proceed with the rename
+echo "Renaming $oldUser to $newUser..."
+groups=$(id -nG "$oldUser")
+groups="${groups// /,}"
+usermod -G "$groups" -m -d "/home/$newUser" -l "$newUser" "$oldUser"
+
+# Update nodm.conf if it exists
+if [[ -e /etc/nodm.conf ]]; then
+    echo "Updating /etc/nodm.conf..."
+    sed -i -e "s#^NODM_USER=.*#NODM_USER='$newUser'#" -e "s#^NODM_XSESSION=.*#NODM_XSESSION='/home/$newUser/.xinitrc'#" /etc/nodm.conf
+fi
+
+# Copy over crontab if it exists
+if crontab -u "$oldUser" -l >/tmp/${oldUser}_crontab.bak 2>/dev/null; then
+    echo "Copying over crontab..."
+    if crontab -u "$newUser" "/tmp/${oldUser}_crontab.bak"; then
+        rm "/tmp/${oldUser}_crontab.bak"
+    else
+        echo "Warning: failed to restore crontab for $newUser."
+        rm "/tmp/${oldUser}_crontab.bak"
+    fi
+fi
+
+# Update linger
+if [[ -e "/var/lib/systemd/linger/$oldUser" ]]; then
+    echo "Enabling linger..."
+    mv "/var/lib/systemd/linger/$oldUser" "/var/lib/systemd/linger/$newUser"
+fi
+
+# Optionally update files in new home directory
+echo
+echo "Would you like to search for references to $oldUser and update them to $newUser in files located in /home/$newUser?"
+question "This can take a while. (Y/N)"
+if [[ "$answer" == "Y" ]]; then
+    echo "Updating files..."
+    find "/home/$newUser" -type f -exec grep -Iq . "{}" \; -and -exec sed -i "s|$oldUser|$newUser|g" "{}" \;
+fi
+
+echo
+echo "Rename complete. The user, $newUser, is now available."
+question "Would you like to reboot?"
+if [[ "${answer}" == "Y" ]]; then
+    reboot
+fi
+
+exit 0
@@ -1,54 +1,141 @@
-#!/bin/bash
+#!/usr/bin/env bash

-trap 'popd &> /dev/null' EXIT
+# For audible sudo prompts:
+unset sudoFlags
+if [[ -x /etc/audibleprompt.sh ]]; then
+    export SUDO_ASKPASS=/etc/audibleprompt.sh
+    export sudoFlags=("-A")
+fi

-export SUDO_ASKPASS=/etc/audibleprompt.sh
-if [[ ! -d /opt/configure-stormux ]]; then
-    # Offer to switch fenrir layout.
-    echo "Would you like to switch Fenrir to laptop layout? (y/n)"
+trap cleanup EXIT
+cleanup() {
+    popd &> /dev/null
+    if ! [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+        echo "Initial setup is not complete."
+        echo "To continue setup, please run:"
+        echo "sudo configure-stormux"
+    fi
+}
+
+
+if [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+    pushd /opt/configure-stormux
+    ./configure-stormux.sh
+    exit 0
+fi
+
+# Volume calibration is now handled in stormux_first_boot.sh
+
+export DIALOGOPTS='--insecure --no-lines --visit-items'
+
+set_timezone() {
+    # Get the list of timezones
+    mapfile -t regions < <(timedatectl --no-pager list-timezones | cut -d '/' -f1 | sort -u)
+
+    # Use the same text twice here and just hide the tag field.
+        region=$(dialog --backtitle "Please select your Region" \
+                --no-tags \
+                --menu "Use up and down arrows or page-up and page-down to navigate the list, and press 'Enter' to make your selection." 0 0 0 \
+                $(for i in ${regions[@]} ; do echo "$i";echo "$i";done) --stdout)
+
+
+    mapfile -t cities < <(timedatectl --no-pager list-timezones | grep "$region" | cut -d '/' -f2 | sort -u)
+
+    # Use the same text twice here and just hide the tag field.
+        city=$(dialog --backtitle "Please select a city near you" \
+                --no-tags \
+                --menu "Use up and down arrow or page-up and page-down to navigate the list." 0 0 10 \
+                $(for i in ${cities[@]} ; do echo "$i";echo "$i";done) --stdout)
+
+    # Set the timezone
+    if [[ -f /etc/localtime ]]; then
+        rm /etc/localtime
+    fi
+    ln -sf /usr/share/zoneinfo/${region}/${city} /etc/localtime
+    timedatectl set-ntp true
+}
+# Offer to switch fenrir layout.
+echo "Would you like to switch Fenrir to laptop layout?"
+echo "Press y for yes or n for no followed by enter."
+read -r continue
+continue="${continue::1}"
+if [[ "${continue,}" == "y" ]];then
+    sed -i 's/=desktop/=laptop/' /etc/fenrirscreenreader/settings/settings.conf
+    clear
+    systemctl restart fenrirscreenreader.service
+fi
+
+# Check for possible resize
+diskSource="$(df --output='source' / | tail -1)"
+diskSize="$(df -h --output='size' / | tail -1 | tr -cd '[:digit:].')"
+diskSize=${diskSize%.*}
+if [[ $diskSize -le 7 ]]; then
+    echo "$diskSource is only $diskSize gigs, which means it probably needs to be resized. Would you like to do this now?"
+    echo "Press y for yes or n for no followed by enter."
    read -r continue
    continue="${continue::1}"
    if [[ "${continue,}" == "y" ]];then
-        sed -i 's/=desktop/=laptop/' /etc/fenrirscreenreader/settings/settings.conf
-        systemctl restart fenrirscreenreader.service
-        clear
+        # Extract base device name (handles mmcblk0p2, nvme0n1p2, sda2, etc.)
+        if [[ "$diskSource" =~ (.*[0-9]+)p[0-9]+$ ]]; then
+            # Handle mmcblk0p2, nvme0n1p2 style
+            diskDevice="${BASH_REMATCH[1]}"
+        else
+            # Handle sda2, sdb3 style  
+            diskDevice="$(echo "$diskSource" | sed 's/[0-9]*$//')"
+        fi
+        echo "Yes" | sudo "${sudoFlags[@]}" parted ---pretend-input-tty "$diskDevice" resizepart 2 100%
+        sudo "${sudoFlags[@]}" resize2fs -f "$diskSource"
    fi
-    if ! ping -c1 stormux.org &> /dev/null ; then
-        echo "No internet connection detected. Press enter to open NetworkManager."
-        echo "Note, it is best to put Fenrir into highlight mode while using NetworkManager."
-        echo "In desktop layout this is done by pressing Fenrir+numpad asterisk."
-        echo "That is the key just above numpad 9."
-        echo "In laptop mode, press Fenrir+y."
-        echo "In desktop mode the Fenrir key is numpad insert."
-        echo "In laptop mode the Fenrir key is the Super key, sometimes called the Windows key."
-        echo "Press enter to continue."
-        read -r continue
-        nmtui-connect
-    fi
-    # Check for internet connectivity
-    if ping -qc1 -W 1 stormux.org &> /dev/null; then
-        echo "Updating the clock to prevent certificate errors..."
-        # Get current date and time
-        date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
-        echo "Current date and time: $date_time"
-        # set date and time
-        date -s "$date_time"
-    else
-        echo "Please connect to the internet and run ${0##*/} again."
-        exit 1
-    fi
-    echo "Installing configure-stormux..."
-    git -C /opt clone -q https://git.stormux.org/storm/configure-stormux || exit 1
 fi
+ 
+if ! ping -c1 stormux.org &> /dev/null ; then
+    echo "No internet connection detected. Press enter to open NetworkManager."
+    read -r continue
+    echo "setting set focus#highlight=True" | socat - UNIX-CLIENT:/tmp/fenrirscreenreader-deamon.sock
+    nmtui-connect
+    echo "setting set focus#highlight=False" | socat - UNIX-CLIENT:/tmp/fenrirscreenreader-deamon.sock
+fi
+# Check for internet connectivity
+if ping -qc1 -W 1 stormux.org &> /dev/null; then
+    echo "Updating the clock to prevent certificate errors..."
+    # Get current date and time
+    date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
+    echo "Current date and time: $date_time"
+    # set date and time
+    date -s "$date_time"
+    echo "If your Pi does not have a CMOS battery and is powered off regularly, it may take a while for the time to be set correctly after boot."
+    echo "Stormux provides a service to sync the time after internet connection is established."
+    read -rp "Would you like the time to sync as soon as the Pi connects to the internet? " answer
+    answer="${answer:0:1}"
+    if [[ "${answer,,}" == "y" ]]; then
+        systemctl enable time_sync_at_boot.service
+    else
+       echo "Time sync at boot skipped."
+       echo "If you change your mind later, simply type:"
+       echo "sudo systemctl enable time_sync_at_boot.service"
+    fi
+    set_timezone
+else
+    echo "Please connect to the internet and run ${0##*/} again."
+    exit 1
+fi
+echo "Installing configure-stormux..."
+git -C /opt clone -q https://git.stormux.org/storm/configure-stormux || exit 1

 echo
 echo "Initial setup is complete."
 echo
-echo "If you would like more options, run configure-stormux,"
+echo "The default passwords are stormux for the stormux user"
+echo "and root for the root user. It is highly recommended to change them."
+echo "To change the password for stormux, run:"
+echo "passwd"
+echo "To change the password for root, run:"
+echo "sudo passwd"
+echo
+echo "For more configuration options, run configure-stormux,"
 echo "or you may configure your system manually."
 echo
 echo "Thank you for choosing Stormux."


-
 exit 0
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
+date -s "$date_time"
@@ -0,0 +1,15 @@
+# x86_64 ISO build artifacts
+out/
+work/
+logs/
+
+# Build outputs
+*.iso
+*.iso.sig
+*.sha256
+
+# Documentation (not tracked)
+*.md
+
+# User-specific
+.claude/
@@ -0,0 +1,24 @@
+# Fenrir console audio support
+# Prevents bluetooth disconnection when switching TTY
+
+monitor.bluez.properties = {
+  # Disable logind integration to prevent bluetooth device suspension on TTY switch
+  bluez5.enable-sbc-xq = true
+  bluez5.enable-msbc = true
+  bluez5.enable-hw-volume = true
+}
+
+monitor.bluez.rules = [
+  {
+    matches = [
+      {
+        device.name = "~bluez_card.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+]
@@ -0,0 +1,24 @@
+# Fenrir console audio support
+# Adds secondary socket for console applications like Fenrir
+
+pulse.properties = {
+    # the addresses this server listens on
+    server.address = [
+        "unix:native"
+        "unix:/tmp/pulse.sock"              # console access socket
+    ]
+}
+
+# client/stream specific properties
+pulse.rules = [
+    {
+        # speech dispatcher asks for too small latency and then underruns.
+        matches = [ { application.name = "~speech-dispatcher*" } ]
+        actions = {
+            update-props = {
+                pulse.min.req          = 1024/48000     # 21ms
+                pulse.min.quantum      = 1024/48000     # 21ms
+            }
+        }
+    }
+]
@@ -0,0 +1,35 @@
+# Fenrir console audio support
+# Prevents audio device suspension when switching to TTY console
+
+monitor.alsa.rules = [
+  {
+    matches = [
+      {
+        device.name = "~alsa_card.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        api.alsa.use-acp = true
+        api.acp.auto-profile = false
+        api.acp.auto-port = false
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+  {
+    matches = [
+      {
+        node.name = "~alsa_input.*"
+      }
+      {
+        node.name = "~alsa_output.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+]
@@ -0,0 +1,12 @@
+#
+# This file is parsed by pam_env module
+#
+# Syntax: simple "KEY=VAL" pairs on separate lines
+#
+# Accessibility variables
+export ACCESSIBILITY_ENABLED=1
+export GTK_MODULES=gail:atk-bridge
+export GNOME_ACCESSIBILITY=1
+export QT_ACCESSIBILITY=1
+export QT_LINUX_ACCESSIBILITY_ALWAYS_ON=1
+export SAL_USE_VCLPLUGIN=gtk3
@@ -0,0 +1,6 @@
+# Static information about the filesystems.
+# See fstab(5) for details.
+
+# <file system> <dir> <type> <options> <dump> <pass>
+# Live ISO - root filesystem is handled by archiso, only tmpfs mounts needed
+tmpfs             /var/log tmpfs  defaults,noatime,nosuid,nodev,noexec,mode=0755,size=128M 0 0
@@ -0,0 +1,3 @@
+HOOKS=(base udev microcode modconf kms memdisk archiso archiso_loop_mnt archiso_pxe_common archiso_pxe_nbd archiso_pxe_http archiso_pxe_nfs block filesystems keyboard)
+COMPRESSION="xz"
+COMPRESSION_OPTIONS=(-9e)
@@ -0,0 +1,8 @@
+# mkinitcpio preset file for the 'linux' package on archiso
+
+PRESETS=('archiso')
+
+ALL_kver='/boot/vmlinuz-linux'
+archiso_config='/etc/mkinitcpio.conf.d/archiso.conf'
+
+archiso_image="/boot/initramfs-linux.img"
@@ -0,0 +1,104 @@
+#
+# /etc/pacman.conf
+#
+# See the pacman.conf(5) manpage for option and repository directives
+
+#
+# GENERAL OPTIONS
+#
+[options]
+# The following paths are commented out with their default values listed.
+# If you wish to use different paths, uncomment and update the paths.
+#RootDir     = /
+#DBPath      = /var/lib/pacman/
+#CacheDir    = /var/cache/pacman/pkg/
+#LogFile     = /var/log/pacman.log
+#GPGDir      = /etc/pacman.d/gnupg/
+#HookDir     = /etc/pacman.d/hooks/
+HoldPkg     = pacman glibc
+#XferCommand = /usr/bin/curl -L -C - -f -o %o %u
+#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
+#CleanMethod = KeepInstalled
+Architecture = auto
+
+# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
+#IgnorePkg   =
+#IgnoreGroup =
+
+#NoUpgrade   =
+#NoExtract   =
+
+# Misc options
+#UseSyslog
+#Color
+#NoProgressBar
+# We cannot check disk space from within a chroot environment
+#CheckSpace
+#VerbosePkgLists
+ParallelDownloads = 5
+#DownloadUser = alpm
+#DisableSandbox
+
+# By default, pacman accepts packages signed by keys that its local keyring
+# trusts (see pacman-key and its man page), as well as unsigned packages.
+SigLevel    = Required DatabaseOptional
+LocalFileSigLevel = Optional
+#RemoteFileSigLevel = Required
+
+# NOTE: You must run `pacman-key --init` before first using pacman; the local
+# keyring can then be populated with the keys of all official Arch Linux
+# packagers with `pacman-key --populate archlinux`.
+
+#
+# REPOSITORIES
+#   - can be defined here or included from another file
+#   - pacman will search repositories in the order defined here
+#   - local/custom mirrors can be added here or in separate files
+#   - repositories listed first will take precedence when packages
+#     have identical names, regardless of version number
+#   - URLs will have $repo replaced by the name of the current repo
+#   - URLs will have $arch replaced by the name of the architecture
+#
+# Repository entries are of the format:
+#       [repo-name]
+#       Server = ServerName
+#       Include = IncludePath
+#
+# The header [repo-name] is crucial - it must be present and
+# uncommented to enable the repo.
+#
+
+# The testing repositories are disabled by default. To enable, uncomment the
+# repo name header and Include lines. You can add preferred servers immediately
+# after the header, and they will be used before the default mirrors.
+
+#[core-testing]
+#Include = /etc/pacman.d/mirrorlist
+
+[stormux]
+SigLevel = Required DatabaseOptional
+Server = https://packages.stormux.org/$arch
+
+[core]
+Include = /etc/pacman.d/mirrorlist
+
+#[extra-testing]
+#Include = /etc/pacman.d/mirrorlist
+
+[extra]
+Include = /etc/pacman.d/mirrorlist
+
+# If you want to run 32 bit applications on your x86_64 system,
+# enable the multilib repositories as required here.
+
+#[multilib-testing]
+#Include = /etc/pacman.d/mirrorlist
+
+#[multilib]
+#Include = /etc/pacman.d/mirrorlist
+
+# An example of a custom package repository.  See the pacman manpage for
+# tips on creating your own repositories.
+#[custom]
+#SigLevel = Optional TrustAll
+#Server = file:///home/custompkgs
@@ -0,0 +1,10 @@
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Type = Package
+Target = *
+
+[Action]
+Description = Adding Stormux repository key...
+When = PreTransaction
+Exec = /bin/sh -c 'if [ ! -f /etc/pacman.d/.stormux-key-added ]; then pacman-key --add /usr/share/stormux/stormux_repo.pub && pacman-key --lsign-key 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82 && touch /etc/pacman.d/.stormux-key-added; fi'
@@ -0,0 +1,16 @@
+# remove from airootfs!
+# Stormux system setup hook - creates user, configures services
+
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Type = Package
+Target = filesystem
+
+[Action]
+Description = Setting up Stormux user and system configuration...
+When = PostTransaction
+Depends = shadow
+Depends = systemd
+Depends = sudo
+Exec = /usr/local/bin/stormux-setup.sh
@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+
+if [[ "$(tty)" != "/dev/tty1" ]]; then
+    return
+fi
+
+if [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+    return
+fi
+
+if ! [[ -x /usr/local/bin/configure-stormux ]]; then
+    return
+fi
+
+# Volume calibration FIRST
+echo "Setting up audio volume..."
+volume=50
+wait=0
+
+# Wait for pipewire to become available
+while [[ $wait -lt 30 ]]; do
+    if pgrep pipewire &> /dev/null ; then
+        break
+    else
+        sleep 1
+        ((wait++))
+    fi
+done
+
+# Volume calibration - this should be the VERY FIRST interactive part
+while [[ $volume -le 130 ]]; do
+    clear
+    pactl set-sink-volume @DEFAULT_SINK@ "${volume}%" 2>/dev/null
+    spd-say "If this is loud enough, press enter."
+    if read -t4 ; then
+        echo "Volume set to ${volume}%"
+        break
+    else
+        ((volume+=5))
+    fi
+done
+
+# For audible sudo prompts:
+unset sudoFlags
+if [[ -x /etc/audibleprompt.sh ]]; then
+    export SUDO_ASKPASS=/etc/audibleprompt.sh
+    export sudoFlags=("-A")
+fi
+
+clear
+cat << "EOF"
+Hello, and welcome to Stormux!
+
+Let's get you set up. After you press enter, you will be prompted for the sudo password.
+When that happens, type the word stormux and press enter.
+You will not receive any speech feedback for this process.
+That is completely normal, and speech will return after you have typed the password.
+Once again, the password is stormux in all lower case letters.
+
+Please press enter to continue.
+EOF
+read -r
+sudo "${sudoFlags[@]}" configure-stormux
@@ -0,0 +1,4 @@
+# Raspberry Pi Information
+alias pi-temp='/usr/bin/vcgencmd measure_temp'
+alias pi-version='cat /sys/firmware/devicetree/base/model;echo'
+alias pi-ip='ip a | grep -v "127.0.0.1" | grep -E -o "([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}"'
@@ -0,0 +1 @@
+%wheel ALL=(ALL:ALL) ALL
@@ -0,0 +1,3 @@
+[Journal]
+Storage=volatile
+SystemMaxUse=20M
@@ -0,0 +1,5 @@
+[Unit]
+# Ensure audio and speech-dispatcher are available before starting Fenrir
+# Wait for user audio initialization to complete
+After=sound.target stormux-audio-setup.service speech-dispatcherd.service user@1000.service
+Wants=stormux-audio-setup.service speech-dispatcherd.service user@1000.service
@@ -0,0 +1 @@
+/usr/lib/systemd/system/fenrirscreenreader.service
@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty -o '-p -f -- \\u' --noclear --autologin root - $TERM
@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty -o '-p -f -- \\u' --noclear --autologin stormux - $TERM
@@ -0,0 +1,16 @@
+[Unit]
+Description=Setup RAM logging and restore logs from disk
+DefaultDependencies=false
+After=local-fs.target
+Before=sysinit.target
+RequiresMountsFor=/var
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStartPre=/bin/mkdir -p /var/log.hdd
+ExecStartPre=/bin/sh -c 'if [ -d /var/log.hdd ] && [ "$(ls -A /var/log.hdd 2>/dev/null)" ]; then cp -au /var/log.hdd/* /var/log/ 2>/dev/null || true; fi'
+ExecStart=/bin/true
+
+[Install]
+WantedBy=sysinit.target
@@ -0,0 +1,14 @@
+[Unit]
+Description=Sync logs to disk before shutdown
+DefaultDependencies=false
+Before=shutdown.target reboot.target halt.target
+Conflicts=shutdown.target reboot.target halt.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=true
+ExecStart=/bin/sh -c 'rsync -aXv --delete --exclude="*.hdd" /var/log/ /var/log.hdd/ 2>/dev/null || true'
+TimeoutStopSec=30
+
+[Install]
+WantedBy=shutdown.target reboot.target halt.target
@@ -0,0 +1,8 @@
+[Unit]
+Description=Sync logs from RAM to disk
+After=local-fs.target
+
+[Service]
+Type=oneshot
+ExecStartPre=/bin/mkdir -p /var/log.hdd
+ExecStart=/bin/sh -c 'rsync -aXv --delete --exclude="*.hdd" /var/log/ /var/log.hdd/ 2>/dev/null || true'
@@ -0,0 +1,11 @@
+[Unit]
+Description=Sync logs from RAM to disk every hour
+Requires=log-to-ram-sync.service
+
+[Timer]
+OnBootSec=15min
+OnUnitActiveSec=1h
+Persistent=true
+
+[Install]
+WantedBy=timers.target
@@ -0,0 +1 @@
+/usr/lib/systemd/system/NetworkManager.service
@@ -0,0 +1 @@
+/usr/lib/systemd/system/brltty.path
@@ -0,0 +1 @@
+../stormux-repo-init.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=Setup Pipewire for Live Environment
+After=sound.target
+Before=fenrirscreenreader.service speech-dispatcherd.service
+DefaultDependencies=no
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/local/bin/setup-pipewire-live.sh
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1 @@
+../stormux-audio-setup.service
@@ -0,0 +1,17 @@
+[Unit]
+Description=Setup audio for Stormux live environment
+# Wait for audio hardware to be ready
+Wants=systemd-udev-settle.service
+After=systemd-udev-settle.service sound.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# Enable linger so pipewire can run without login
+ExecStartPre=/bin/mkdir -p /var/lib/systemd/linger
+ExecStartPre=/bin/touch /var/lib/systemd/linger/stormux
+# Unmute and set volume
+ExecStart=/usr/local/bin/livecd-sound
+
+[Install]
+WantedBy=sound.target
@@ -0,0 +1,13 @@
+[Unit]
+Description=Initialize Stormux repository key
+After=pacman-init.service
+Requires=pacman-init.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/pacman-key --add /usr/share/stormux/stormux_repo.pub
+ExecStart=/usr/bin/pacman-key --lsign-key 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,16 @@
+[Unit]
+Description=Stormux screen reader and speech service
+After=stormux-audio-setup.service sound.target
+Wants=stormux-audio-setup.service
+Before=getty@tty1.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# Give pipewire a moment to initialize
+ExecStartPre=/bin/sleep 2
+# Start Fenrir screen reader
+ExecStart=/bin/systemctl start fenrirscreenreader.service
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1 @@
+/dev/null
@@ -0,0 +1,11 @@
+[Unit]
+Description=Update system time from worldtimeapi.org
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/sync_time.sh
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,3 @@
+# This is the fallback vconsole configuration provided by systemd.
+
+KEYMAP=us_alt
@@ -0,0 +1,31 @@
+-- Prioritize analog and USB audio devices over HDMI
+-- This ensures real sound cards are selected by default
+
+rule = {
+  matches = {
+    {
+      { "device.form-factor", "equals", "internal" },
+    },
+    {
+      { "device.form-factor", "equals", "speaker" },
+    },
+    {
+      { "device.form-factor", "equals", "headphone" },
+    },
+    {
+      { "device.bus", "equals", "usb" },
+    },
+    {
+      { "node.name", "matches", "alsa_output.pci-*analog*" },
+    },
+    {
+      { "node.name", "matches", "alsa_output.usb-*" },
+    },
+  },
+  apply_properties = {
+    ["priority.driver"] = 1000,
+    ["priority.session"] = 1000,
+  },
+}
+
+table.insert(alsa_monitor.rules, rule)
@@ -0,0 +1,22 @@
+-- Deprioritize HDMI audio devices
+-- This ensures analog/USB audio devices are preferred over HDMI
+
+rule = {
+  matches = {
+    {
+      { "device.name", "matches", "hdmi*" },
+    },
+    {
+      { "device.name", "matches", "HDMI*" },
+    },
+    {
+      { "node.name", "matches", "alsa_output.pci-*hdmi*" },
+    },
+  },
+  apply_properties = {
+    ["priority.driver"] = 100,
+    ["priority.session"] = 100,
+  },
+}
+
+table.insert(alsa_monitor.rules, rule)
@@ -0,0 +1,4 @@
+# Raspberry Pi Information
+alias pi-temp='/usr/bin/vcgencmd measure_temp'
+alias pi-version='cat /sys/firmware/devicetree/base/model;echo'
+alias pi-ip='ip a | grep -v "127.0.0.1" | grep -E -o "([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{1,2}"'
@@ -0,0 +1,21 @@
+memuse() {
+    ps axo rss,comm,pid \
+        | awk '{ proc_list[$2] += $1; } END \
+        { for (proc in proc_list) { printf("%d\t%s\n", proc_list[proc],proc); }}' \
+        | sort -n | tail -n 10 | sort -rn \
+        | awk '{$1/=1024;printf "%.0fMB\t",$1}{print $2}'
+}
+
+
+pdf()
+{
+    if [[ $# -ne 1 ]]; then
+        echo 'Usage: pdf <file>' >&2
+    else
+        local dir=$(mktemp -d -p /tmp pdf_conversion.XXXXXX)
+        local outFile="${1##*/}"
+        local outFile="${outFile%.*}"
+        pdftohtml -noframes -i -s "$1" "${dir}/${outFile}.html"
+        w3m -s "${dir}/${outFile}.html"
+    fi
+}
@@ -0,0 +1,24 @@
+#
+# ~/.bashrc
+#
+
+# If not running interactively, don't do anything
+[[ $- != *i* ]] && return
+
+#Change directories without using cd
+shopt -s autocd
+
+# Keep bash history in screen
+export HISTFILE="${HISTFILE}${WINDOW:+.${WINDOW}}"
+
+# load Aliases and functions
+[[ -f ".bash_aliases" ]] && source .bash_aliases
+[[ -f ".bash_functions" ]] && source .bash_functions
+#Invironment variables
+PS1='[\u@\h \W] \$ '
+export DIALOGOPTS='--no-lines --visit-items'
+GPG_TTY=$(tty)
+export GPG_TTY
+# Don't put commands prefixed with space, or duplicate commands in history
+export HISTCONTROL=ignoreboth
+
@@ -0,0 +1,24 @@
+# Fenrir console audio support
+# Adds secondary socket for console applications like Fenrir
+
+pulse.properties = {
+    # the addresses this server listens on
+    server.address = [
+        "unix:native"
+        "unix:/tmp/pulse.sock"              # console access socket
+    ]
+}
+
+# client/stream specific properties
+pulse.rules = [
+    {
+        # speech dispatcher asks for too small latency and then underruns.
+        matches = [ { application.name = "~speech-dispatcher*" } ]
+        actions = {
+            update-props = {
+                pulse.min.req          = 1024/48000     # 21ms
+                pulse.min.quantum      = 1024/48000     # 21ms
+            }
+        }
+    }
+]
@@ -0,0 +1 @@
+../pipewire-init-sound.service
@@ -0,0 +1,12 @@
+[Unit]
+Description=Initialize Pipewire Audio with Sound Test
+After=pipewire.service pipewire-pulse.service wireplumber.service
+Wants=pipewire.service pipewire-pulse.service wireplumber.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/local/bin/init-pipewire-sound.sh
+
+[Install]
+WantedBy=default.target
@@ -0,0 +1,24 @@
+# Fenrir console audio support
+# Prevents bluetooth disconnection when switching TTY
+
+monitor.bluez.properties = {
+  # Disable logind integration to prevent bluetooth device suspension on TTY switch
+  bluez5.enable-sbc-xq = true
+  bluez5.enable-msbc = true
+  bluez5.enable-hw-volume = true
+}
+
+monitor.bluez.rules = [
+  {
+    matches = [
+      {
+        device.name = "~bluez_card.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+]
@@ -0,0 +1,35 @@
+# Fenrir console audio support
+# Prevents audio device suspension when switching to TTY console
+
+monitor.alsa.rules = [
+  {
+    matches = [
+      {
+        device.name = "~alsa_card.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        api.alsa.use-acp = true
+        api.acp.auto-profile = false
+        api.acp.auto-port = false
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+  {
+    matches = [
+      {
+        node.name = "~alsa_input.*"
+      }
+      {
+        node.name = "~alsa_output.*"
+      }
+    ]
+    actions = {
+      update-props = {
+        session.suspend-timeout-seconds = 0
+      }
+    }
+  }
+]
@@ -0,0 +1,6 @@
+# Reload changes with control+x followed by control+r
+set echo-control-characters off
+
+# History searching with up and down arrows.
+"\e[A": history-search-backward
+"\e[B": history-search-forward
@@ -0,0 +1,18 @@
+vbell off
+bell_msg ""
+hardstatus off
+startup_message off
+defscrollback 4096
+bind ! select 10
+bind @ select 11
+bind \# select 12
+bind $ select 13
+bind % select 14
+bind ^ select 15
+bind & select 16
+bind * select 17
+bind ( select 18
+bind ) select 19
+bind b eval "writebuf" 'exec !!! xclip -selection "clipboard" -i /tmp/screen-exchange'
+#termcapinfo xterm|xterms|xs|rxvt ti@:te@
+termcapinfo xterm* ti@:te@
@@ -0,0 +1,36 @@
+# This file is part of PulseAudio.
+#
+# PulseAudio is free software; you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# PulseAudio is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.
+
+## Configuration file for PulseAudio clients. See pulse-client.conf(5) for
+## more information. Default values are commented out.  Use either ; or # for
+## commenting.
+
+; default-sink =
+; default-source =
+default-server = unix:/tmp/pulse.sock
+; default-dbus-server =
+
+autospawn = no
+; autospawn = yes
+; daemon-binary = /usr/bin/pulseaudio
+; extra-arguments = --log-target=syslog
+
+; cookie-file =
+
+; enable-shm = yes
+; shm-size-bytes = 0 # setting this 0 will use the system-default, usually 64 MiB
+
+; auto-connect-localhost = no
+; auto-connect-display = no
@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+
+# Renames a user
+# Required arguments: old user name, new user name
+
+set -e
+
+question() {
+    echo
+    echo "$@"
+    read -r answer
+    answer="${answer:0:1}"
+    answer="${answer^}"
+}
+
+if [[ $# -ne 2 ]]; then
+    echo "Usage: $0 old-user new-user"
+    exit 1
+fi
+
+oldUser="$1"
+newUser="$2"
+
+# Make sure old user exists
+if ! id "$oldUser" >/dev/null 2>&1; then
+    echo "The user $oldUser does not exist."
+    exit 1
+fi
+
+# Make sure old user is not logged in
+if pgrep -u "$oldUser" >/dev/null; then
+    echo "The user $oldUser is currently logged in or has running processes. Cannot continue."
+    question "Would you like to forcibly log out $oldUser? (Y/N)"
+    if [[ "$answer" != "Y" ]]; then
+        exit 1
+    fi
+    systemctl stop display-manager
+    loginctl terminate-user "$oldUser"
+    sleep 2
+    if pgrep -u "$oldUser" >/dev/null; then
+        echo "The user $oldUser still has running processes after termination. Cannot continue."
+        exit 1
+    fi
+fi
+
+# Make sure new user does not exist
+if id "$newUser" >/dev/null 2>&1; then
+    echo "The user name $newUser is already taken."
+    exit 1
+fi
+
+# Make sure the new name is acceptable
+if ! [[ "$newUser" =~ ^[a-z_][a-z0-9_-]{0,31}$ ]]; then
+    echo "$newUser is not an acceptable user name."
+    exit 1
+fi
+
+# Passed all safety checks, proceed with the rename
+echo "Renaming $oldUser to $newUser..."
+groups=$(id -nG "$oldUser")
+groups="${groups// /,}"
+usermod -G "$groups" -m -d "/home/$newUser" -l "$newUser" "$oldUser"
+
+# Update nodm.conf if it exists
+if [[ -e /etc/nodm.conf ]]; then
+    echo "Updating /etc/nodm.conf..."
+    sed -i -e "s#^NODM_USER=.*#NODM_USER='$newUser'#" -e "s#^NODM_XSESSION=.*#NODM_XSESSION='/home/$newUser/.xinitrc'#" /etc/nodm.conf
+fi
+
+# Copy over crontab if it exists
+if crontab -u "$oldUser" -l >/tmp/${oldUser}_crontab.bak 2>/dev/null; then
+    echo "Copying over crontab..."
+    if crontab -u "$newUser" "/tmp/${oldUser}_crontab.bak"; then
+        rm "/tmp/${oldUser}_crontab.bak"
+    else
+        echo "Warning: failed to restore crontab for $newUser."
+        rm "/tmp/${oldUser}_crontab.bak"
+    fi
+fi
+
+# Update linger
+if [[ -e "/var/lib/systemd/linger/$oldUser" ]]; then
+    echo "Enabling linger..."
+    mv "/var/lib/systemd/linger/$oldUser" "/var/lib/systemd/linger/$newUser"
+fi
+
+# Optionally update files in new home directory
+echo
+echo "Would you like to search for references to $oldUser and update them to $newUser in files located in /home/$newUser?"
+question "This can take a while. (Y/N)"
+if [[ "$answer" == "Y" ]]; then
+    echo "Updating files..."
+    find "/home/$newUser" -type f -exec grep -Iq . "{}" \; -and -exec sed -i "s|$oldUser|$newUser|g" "{}" \;
+fi
+
+echo
+echo "Rename complete. The user, $newUser, is now available."
+question "Would you like to reboot?"
+if [[ "${answer}" == "Y" ]]; then
+    reboot
+fi
+
+exit 0
@@ -0,0 +1 @@
+../../../pi4/files/etc/skel
@@ -0,0 +1,141 @@
+#!/usr/bin/env bash
+
+# For audible sudo prompts:
+unset sudoFlags
+if [[ -x /etc/audibleprompt.sh ]]; then
+    export SUDO_ASKPASS=/etc/audibleprompt.sh
+    export sudoFlags=("-A")
+fi
+
+trap cleanup EXIT
+cleanup() {
+    popd &> /dev/null
+    if ! [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+        echo "Initial setup is not complete."
+        echo "To continue setup, please run:"
+        echo "sudo configure-stormux"
+    fi
+}
+
+
+if [[ -x /opt/configure-stormux/configure-stormux.sh ]]; then
+    pushd /opt/configure-stormux
+    ./configure-stormux.sh
+    exit 0
+fi
+
+# Volume calibration is now handled in stormux_first_boot.sh
+
+export DIALOGOPTS='--insecure --no-lines --visit-items'
+
+set_timezone() {
+    # Get the list of timezones
+    mapfile -t regions < <(timedatectl --no-pager list-timezones | cut -d '/' -f1 | sort -u)
+
+    # Use the same text twice here and just hide the tag field.
+        region=$(dialog --backtitle "Please select your Region" \
+                --no-tags \
+                --menu "Use up and down arrows or page-up and page-down to navigate the list, and press 'Enter' to make your selection." 0 0 0 \
+                $(for i in ${regions[@]} ; do echo "$i";echo "$i";done) --stdout)
+
+
+    mapfile -t cities < <(timedatectl --no-pager list-timezones | grep "$region" | cut -d '/' -f2 | sort -u)
+
+    # Use the same text twice here and just hide the tag field.
+        city=$(dialog --backtitle "Please select a city near you" \
+                --no-tags \
+                --menu "Use up and down arrow or page-up and page-down to navigate the list." 0 0 10 \
+                $(for i in ${cities[@]} ; do echo "$i";echo "$i";done) --stdout)
+
+    # Set the timezone
+    if [[ -f /etc/localtime ]]; then
+        rm /etc/localtime
+    fi
+    ln -sf /usr/share/zoneinfo/${region}/${city} /etc/localtime
+    timedatectl set-ntp true
+}
+# Offer to switch fenrir layout.
+echo "Would you like to switch Fenrir to laptop layout?"
+echo "Press y for yes or n for no followed by enter."
+read -r continue
+continue="${continue::1}"
+if [[ "${continue,}" == "y" ]];then
+    sed -i 's/=desktop/=laptop/' /etc/fenrirscreenreader/settings/settings.conf
+    clear
+    systemctl restart fenrirscreenreader.service
+fi
+
+# Check for possible resize
+diskSource="$(df --output='source' / | tail -1)"
+diskSize="$(df -h --output='size' / | tail -1 | tr -cd '[:digit:].')"
+diskSize=${diskSize%.*}
+if [[ $diskSize -le 7 ]]; then
+    echo "$diskSource is only $diskSize gigs, which means it probably needs to be resized. Would you like to do this now?"
+    echo "Press y for yes or n for no followed by enter."
+    read -r continue
+    continue="${continue::1}"
+    if [[ "${continue,}" == "y" ]];then
+        # Extract base device name (handles mmcblk0p2, nvme0n1p2, sda2, etc.)
+        if [[ "$diskSource" =~ (.*[0-9]+)p[0-9]+$ ]]; then
+            # Handle mmcblk0p2, nvme0n1p2 style
+            diskDevice="${BASH_REMATCH[1]}"
+        else
+            # Handle sda2, sdb3 style  
+            diskDevice="$(echo "$diskSource" | sed 's/[0-9]*$//')"
+        fi
+        echo "Yes" | sudo "${sudoFlags[@]}" parted ---pretend-input-tty "$diskDevice" resizepart 2 100%
+        sudo "${sudoFlags[@]}" resize2fs -f "$diskSource"
+    fi
+fi
+ 
+if ! ping -c1 stormux.org &> /dev/null ; then
+    echo "No internet connection detected. Press enter to open NetworkManager."
+    read -r continue
+    echo "setting set focus#highlight=True" | socat - UNIX-CLIENT:/tmp/fenrirscreenreader-deamon.sock
+    nmtui-connect
+    echo "setting set focus#highlight=False" | socat - UNIX-CLIENT:/tmp/fenrirscreenreader-deamon.sock
+fi
+# Check for internet connectivity
+if ping -qc1 -W 1 stormux.org &> /dev/null; then
+    echo "Updating the clock to prevent certificate errors..."
+    # Get current date and time
+    date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
+    echo "Current date and time: $date_time"
+    # set date and time
+    date -s "$date_time"
+    echo "If your Pi does not have a CMOS battery and is powered off regularly, it may take a while for the time to be set correctly after boot."
+    echo "Stormux provides a service to sync the time after internet connection is established."
+    read -rp "Would you like the time to sync as soon as the Pi connects to the internet? " answer
+    answer="${answer:0:1}"
+    if [[ "${answer,,}" == "y" ]]; then
+        systemctl enable time_sync_at_boot.service
+    else
+       echo "Time sync at boot skipped."
+       echo "If you change your mind later, simply type:"
+       echo "sudo systemctl enable time_sync_at_boot.service"
+    fi
+    set_timezone
+else
+    echo "Please connect to the internet and run ${0##*/} again."
+    exit 1
+fi
+echo "Installing configure-stormux..."
+git -C /opt clone -q https://git.stormux.org/storm/configure-stormux || exit 1
+
+echo
+echo "Initial setup is complete."
+echo
+echo "The default passwords are stormux for the stormux user"
+echo "and root for the root user. It is highly recommended to change them."
+echo "To change the password for stormux, run:"
+echo "passwd"
+echo "To change the password for root, run:"
+echo "sudo passwd"
+echo
+echo "For more configuration options, run configure-stormux,"
+echo "or you may configure your system manually."
+echo
+echo "Thank you for choosing Stormux."
+
+
+exit 0
@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# Initialize pipewire audio by attempting to play sound until it succeeds
+# This ensures pipewire is fully ready before fenrir starts
+
+maxAttempts=30
+attempt=0
+
+while [[ $attempt -lt $maxAttempts ]]; do
+    # Try to play a silent sound using sox
+    if play -qnV0 synth .1 whi norm -100 2>/dev/null; then
+        # Success! Pipewire is working
+        exit 0
+    fi
+
+    # Wait a moment before trying again
+    sleep 1
+    ((attempt++))
+done
+
+# Even if we failed, exit successfully so we don't block boot
+exit 0
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# Configure audio for Stormux live environment
+# Ensures pipewire is running and audio is properly configured
+
+# Start pipewire for the stormux user if not already running
+if id stormux &>/dev/null; then
+    # Enable linger for stormux user
+    loginctl enable-linger stormux 2>/dev/null || true
+
+    # Start pipewire user services
+    stormux_uid="$(id -u stormux)"
+    sudo -u stormux XDG_RUNTIME_DIR="/run/user/${stormux_uid}" systemctl --user enable --now pipewire.service pipewire-pulse.service wireplumber.service 2>/dev/null || true
+
+    # Wait for pipewire to initialize
+    sleep 2
+fi
+
+# Unmute and set reasonable volumes
+amixer -q set Master 70% unmute 2>/dev/null || true
+amixer -q set PCM 70% unmute 2>/dev/null || true
+amixer -q set Speaker 70% unmute 2>/dev/null || true
+amixer -q set Headphone 70% unmute 2>/dev/null || true
+
+exit 0
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+# Setup Pipewire for the live environment
+# This ensures pipewire is running before Fenrir starts
+
+# Note: Do not use set -e - we want this to succeed even if commands fail
+
+# Enable user linger for the stormux user (allows user services to run without login)
+if [ -d /var/lib/systemd/linger ]; then
+    touch /var/lib/systemd/linger/stormux
+fi
+
+# Start pipewire for the stormux user
+if id stormux &>/dev/null; then
+    # Use machinectl to start user services in the user's session
+    machinectl shell stormux@ /usr/bin/systemctl --user enable pipewire.service pipewire-pulse.service wireplumber.service 2>/dev/null || true
+    machinectl shell stormux@ /usr/bin/systemctl --user start pipewire.service pipewire-pulse.service wireplumber.service 2>/dev/null || true
+fi
+
+# Wait a moment for pipewire to initialize
+sleep 2
+
+exit 0
@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+#
+# Customize the airootfs after package installation
+# This script runs in the chroot environment after packages are installed
+
+set -e -u
+
+# Copy custom skel files, overwriting package defaults
+if [ -d /etc/skel.custom ]; then
+    echo "Installing custom skel files..."
+    cp -f /etc/skel.custom/.* /etc/skel/ 2>/dev/null || true
+    rm -rf /etc/skel.custom
+fi
+
+# Set the distribution name
+echo 'Stormux \r (\l)' > /etc/issue
+echo >> /etc/issue
+
+# Create realtime group if it doesn't exist
+if ! getent group realtime > /dev/null 2>&1; then
+    echo "Creating realtime group..."
+    groupadd -r realtime
+fi
+
+# Create stormux user with groups matching Pi build
+echo "Creating stormux user..."
+useradd -m -g users -G wheel,realtime,audio,video,network,brlapi -s /bin/bash stormux
+
+# Set passwords
+echo -e "root\nroot" | passwd "root"
+echo -e "stormux\nstormux" | passwd "stormux"
+
+# Configure git for stormux user
+sudo -iu stormux bash -c 'git config --global init.defaultBranch master'
+
+# Create user directories
+sudo -iu stormux xdg-user-dirs-update
+
+# Enable linger so that sound will start at login
+mkdir -p /var/lib/systemd/linger
+touch /var/lib/systemd/linger/stormux
+
+# Enable pipewire globally
+# Pipewire configuration for fenrir is pre-installed in airootfs
+systemctl --global enable pipewire.service pipewire-pulse.service
+
+# Configure sudo for wheel group
+echo '%wheel ALL=(ALL) ALL' > /etc/sudoers.d/wheel
+
+# Set hostname
+echo stormux > /etc/hostname
+
+# Disable systemd-networkd in favor of NetworkManager
+systemctl disable systemd-networkd.service systemd-networkd.socket 2>/dev/null || true
+
+# Enable services
+services=(
+    brltty.path
+    fenrirscreenreader.service
+    NetworkManager.service
+    stormux-audio-setup.service
+)
+
+for service in "${services[@]}"; do
+    echo "Enabling $service..."
+    if systemctl enable "$service"; then
+        echo "  $service: OK"
+    else
+        echo "  $service: FAILED"
+    fi
+done
+
+echo "Airootfs customization complete"
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+date_time=$(curl -s http://worldtimeapi.org/api/ip | grep -oP '(?<="datetime":")[^"]*')
+date -s "$date_time"
@@ -0,0 +1,29 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQINBGhTtIcBEADTCqY/+das1n52HTTlp3Uf5+ER5r0fNA2HgJq4GzEeFBdqdgSF
+y05P9B94d4JWtWvt0ckjsNfku19O9IquKiYP5x9/sYT8RGeRUrTlN9qlCrytTsdM
+a8ij9esGQOXDeyRJQTs5igbFWQ26MrJpOkmO8xMXGmfD29yOppRLzVS8Jed0mokk
+aEajui3QSWcefDnFMBYNaMF04iuWgVxv/7102adh3u3+V632+fQQhFtu+x92iosU
+GtWlGGe3UkEhWJIb6wf/VCYIYQAjxTQBLul2WByXqwCXmobzc7DJbte3FSEPvPis
+nJiUmT0fsIIC9c1UbTJt5Gqb6o/oI61tEJEeXieBViXFE7HwBI7FUxaIXoozgiYA
+BxaLHQT0Qv9k1SXbBm82xNydjqFHIAolYSp5s1wRIhErlOaG9w3+Tb8zFSekPsbg
+cgS/b3PpWmnigXBJQ94Ee+6KoPMVrwEKIu/IHexRUVAm+66Xs55ccgMY+MUupIjX
+Bdn9jCYB8NwpC3UNWoSv2oQ7F2hVbXZYC/dx7gKmyvzfrw5MLOX7yEoSGlJJp2iK
+fLLP8nw+x7LnDFEnAjPjtmeH7e+JANH1scP/7YMKDszO1THSK3hBAK1aeq0aEFs8
+9AO++xZrNbCrF2MnqcGaXs/753k6kf8zyrW6t7A1opxjPHIz3WrQ8SbXXwARAQAB
+tExTdG9ybXV4IChGb3Igc2lnbmluZyBzdG9ybXV4IHJlcG9zaXRvcnkgcGFja2Fn
+ZXMpIDxzdG9ybV9kcmFnb25Ac3Rvcm11eC5vcmc+iQJOBBMBCgA4FiEEUq2kkADx
+/wRW+K7vtM3hzVbvjoIFAmhTtIcCGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AA
+CgkQtM3hzVbvjoLiLQ/9HJzlwr2JNGdR/LaM1Y6VuhASGDZsUsi5XLJ7qKUKN/eA
+kq0LMO7TzHO++otsEolodMr8fTkthQTPqSnbLZsW9Y3wK9U2vajryblRSEBaY6VB
+1ds0pAg5SXz7O2eI2Ne05dkYB176G72KcjrOiSanKjI9sqh6pdTHcQM3XbRxxEVn
+or7fKbLs/eveFWRPW3EAwuVnWI1aw3Xw9BQ3TE1eEDPvBh2GVKZ6qskbzdwfZtUB
+kxAa30M+ftlNDaV7d6mNfREefEJfZjYFrY2XiqTK3+w1Q1ZaugK0Bbd/YdAoGMdt
+6gbd2h/IZtxduWW/HhvWX2wtKqn4fNxAyYcY3aWm8kuq0pXlyEZ96gZas6a2lu+f
+yLvIh3UtC1IimFMDMQnKCTbWgdhd0HMnG9ULnoOroXVGltnBQwlO0hrHSVD+qmy
+NVPUxkzS3ZhqSmoW2G8hSvXpMjt/w5fhC0FJhFb/uM/7LqJWSl5aAkUHupN3t/nG
+9o7chBQzzXwbpiS6DQuIt6ouyPpwNjeELFPNBjZDf0auVWj6ZZ5+B/bmyHXQ4wFS
+bYKZdO9VeXhBxRUMfGpIKvIw/Lnc+1Toan1RTWoUoRH+HuK2D/LAuvsam36gtLrQ
+XV3//7Mh4oQ0Zg4REG3SEfG9i3rav8wMtRmaJaSbwmMVpC6mT/uiEzCSgQhO/0c=
+=HIM9
+-----END PGP PUBLIC KEY BLOCK-----
@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+#
+# Copyright 2025, Stormux, <storm_dragon@stormux.org>
+#
+# This is free software; you can redistribute it and/or modify it under the
+# terms of the GNU General Public License as published by the Free
+# Software Foundation; either version 3, or (at your option) any later
+# version.
+#
+# This software is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this package; see the file COPYING.  If not, write to the Free
+# Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+# 02110-1301, USA.
+#
+
+set -e
+
+help() {
+    echo "Stormux x86_64 ISO Builder"
+    echo
+    echo "Usage: $0 [options]"
+    echo
+    echo "Options:"
+    echo "  -o <dir>   Output directory (default: ./out)"
+    echo "  -w <dir>   Work directory (default: ./work)"
+    echo "  -h         Show this help"
+    echo
+    echo "This script builds a Stormux x86_64 ISO using archiso."
+    echo "It must be run as root on an Arch Linux system."
+    exit 0
+}
+
+# Parse command line arguments
+output_dir="./out"
+work_dir="./work"
+
+while getopts "o:w:h" opt; do
+    case "$opt" in
+        o) output_dir="$OPTARG" ;;
+        w) work_dir="$OPTARG" ;;
+        h) help ;;
+        *) help ;;
+    esac
+done
+
+# Make sure this script is run as root
+if [ "$(whoami)" != "root" ]; then
+    echo "Error: This script must be run as root."
+    exit 1
+fi
+
+# Check for required tools
+for tool in mkarchiso pacman; do
+    if ! command -v "$tool" &> /dev/null; then
+        echo "Error: $tool is not installed. Please install archiso package."
+        exit 1
+    fi
+done
+
+# Get the directory where this script is located
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+pi4_files_dir="$script_dir/../pi4/files"
+
+echo "Building Stormux x86_64 ISO..."
+echo "Profile directory: $script_dir"
+echo "Output directory: $output_dir"
+echo "Work directory: $work_dir"
+echo
+
+# Clean up work directory from previous builds to ensure clean build environment
+if [ -d "$work_dir" ]; then
+    echo "Cleaning up previous build artifacts..."
+    rm -rf "$work_dir"
+fi
+
+# Note: Shared configuration files from pi4/files should already be in airootfs/
+# The airootfs/ directory is maintained as part of the x86_64 profile
+# and should not be dynamically copied during build to avoid conflicts with packages
+echo "Using existing airootfs configuration files..."
+
+# Add Stormux repository key to build host's keyring
+echo "Setting up Stormux repository key on build host..."
+key_file="$script_dir/stormux_repo.pub"
+if [ ! -f "$key_file" ]; then
+    echo "Error: Stormux repository key not found at $key_file"
+    echo "Please ensure stormux_repo.pub exists in the x86_64 directory"
+    exit 1
+fi
+
+# Check if key is already in keyring
+if ! pacman-key --list-keys 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82 &>/dev/null; then
+    echo "Adding Stormux repository key to build host keyring..."
+    pacman-key --add "$key_file"
+    pacman-key --lsign-key 52ADA49000F1FF0456F8AEEFB4CDE1CD56EF8E82
+    echo "Key added successfully"
+else
+    echo "Stormux repository key already in keyring"
+fi
+
+# Build the ISO
+mkarchiso -v -w "$work_dir" -o "$output_dir" "$script_dir"
+
+echo
+echo "Build complete!"
+echo "ISO file is in: $output_dir"
@@ -0,0 +1,36 @@
+# This file is part of PulseAudio.
+#
+# PulseAudio is free software; you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# PulseAudio is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.
+
+## Configuration file for PulseAudio clients. See pulse-client.conf(5) for
+## more information. Default values are commented out.  Use either ; or # for
+## commenting.
+
+; default-sink =
+; default-source =
+default-server = unix:/tmp/pulse.sock
+; default-dbus-server =
+
+autospawn = no
+; autospawn = yes
+; daemon-binary = /usr/bin/pulseaudio
+; extra-arguments = --log-target=syslog
+
+; cookie-file =
+
+; enable-shm = yes
+; shm-size-bytes = 0 # setting this 0 will use the system-default, usually 64 MiB
+
+; auto-connect-localhost = no
+; auto-connect-display = no
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Storm Dragon	3c5490ea24	Initial build setup for x86_64 Stormux.	2025-11-19 03:26:25 -05:00
Storm Dragon	fffe426d29	Remove the pam.d/nodm file because it's now included in the package in the repository.	2025-08-20 13:59:15 -04:00
Storm Dragon	45b3c230e1	Fixed bug in disk resize code.	2025-08-19 17:08:29 -04:00
Storm Dragon	fa9585a0e1	Removed noisy volume debug statement.	2025-08-19 16:45:51 -04:00
Storm Dragon	5e144e7955	Initial disk resize prompt should be less verbose.	2025-08-19 16:22:54 -04:00
Storm Dragon	e39c1cedec	Finally figure out why volume adjustment wasn't happening first thing, it was in the wrong file. This should finally be resolved once and for all.	2025-08-19 16:02:12 -04:00
Storm Dragon	8a7fb83be3	Lots of reorganization. Added stormux package repository. Removed unneeded packages. Switched to systemd management of logging to ram. Use existing tools to resize the image to fill the device, no more growpartfs. No packages installed from AUR any more.	2025-08-19 15:18:04 -04:00
Storm Dragon	f80ea1e056	Move volume check to run first, before anything else.	2025-07-13 15:49:16 -04:00
Storm Dragon	696ddd9bfb	Right alt key should now work as expected in the console.	2025-05-11 19:31:14 -04:00
Storm Dragon	e0806e51da	Simplify the internect connection dialog.	2025-05-08 04:54:44 -04:00
Storm Dragon	3612787274	More improvements to rename-user.sh	2025-04-26 16:54:35 -04:00
Storm Dragon	41a0592f20	Update linger file. with the rename.	2025-04-26 04:14:26 -04:00
Storm Dragon	3ebb6f36cf	Added convience rename-user script in root's home directory. You still need a temp user if doing this from ssh.	2025-04-26 04:09:03 -04:00
Storm Dragon	c88bd17709	Added volume check to the beginning of configure-stormux stub.	2025-04-25 16:07:11 -04:00
Storm Dragon	c1af07bf18	2 characters over the limit for labels, so fixed it.	2025-04-22 21:36:31 -04:00
Storm Dragon	a88a386ef4	Attempt to make images bootable no matter the source, micro sd, nvme, etc.	2025-04-22 21:27:34 -04:00
Storm Dragon	034c561a53	Moved the journald configuration to a file in it's drop in directory. Also, explicitly set volatile storage to cut down on SD card writes.	2025-02-09 17:36:02 -05:00
Storm Dragon	2108f02719	Removed some packages that can be installed after the build is completed.	2025-01-24 12:21:02 -05:00
Storm Dragon	06282f5ea8	Fixed the removal of packages at the end of image creation.	2025-01-17 01:35:21 -05:00
Storm Dragon	6bb5267b91	Chroot message just because I'm paranoid now.	2025-01-04 20:47:18 -05:00
Storm Dragon	b87647756f	After scary encounter with some problems, clearly indicate when build system is in chroot.	2025-01-04 20:34:49 -05:00
Storm Dragon	505028ab44	Dependencies added for package building and removed at completion.	2025-01-04 19:46:08 -05:00
Storm Dragon	9657719613	In process of moving headless X driver stuff to configure-stormux.	2025-01-04 19:19:44 -05:00
Storm Dragon	3e4c4d18ee	Revert to old working headless driver.	2025-01-04 19:15:52 -05:00
Storm Dragon	9beea608ed	Python accessible_output2 library added.	2025-01-04 15:40:08 -05:00
Storm Dragon	69ca3a957c	Added file to fix wifi for Raspbery Pi 500. It was necessary a while back for the Pi 4 as well, so I don't think it will break anything.	2024-12-16 13:22:29 -05:00
Storm Dragon	7c62016063	added a configureation file for the Raspberry Pi Monitor, moved 10-headless.conf so it is the last thing tried.	2024-12-14 09:20:48 -05:00
Storm Dragon	5d43526e85	Reverted to old dummy driver because new one fails in lots of configurations.	2024-12-13 16:23:01 -05:00
Storm Dragon	749ef52656	Updated installed version of Fenrir to stable, added new dependencies.	2024-12-10 23:30:13 -05:00
Storm Dragon	d0c8b864ae	Another attempt at using video and falling back to headless if nothing is found. Hopefully with better hardware support.	2024-12-01 19:54:04 -05:00
Storm Dragon	1658a53081	Hopefully use connected screen to display video if available, fall back to dummy driver if not found.	2024-12-01 19:38:10 -05:00
Storm Dragon	9cc539a6e4	Updated disk size check to 7G.	2024-11-03 02:18:59 -05:00
Storm Dragon	46faab708b	Updated default image size to 6G because some packages failed to install.	2024-11-03 02:17:03 -05:00
Storm Dragon	e620f80b0e	Minor update for comments.	2024-06-01 22:15:37 -04:00
Storm Dragon	134d25682b	Offer a way to sync time at boot in the first boot version of configure-stormux.	2024-05-24 15:51:40 -04:00
Storm Dragon	88d7d12c69	timedatectl seems to be working now with time sync.	2024-05-21 02:06:30 -04:00
Storm Dragon	83b7867da4	Hopefully final touches on getting time and date sync working.	2024-03-21 14:30:48 -04:00
Storm Dragon	af1642b138	Build install openntpd during image build.	2024-03-21 14:29:20 -04:00
Storm Dragon	51a0fd0883	Try to make sure time and date is syncing with the internet.	2024-03-21 11:25:13 -04:00
Storm Dragon	b22785ab3e	Make sure systemd-networkd and Networkmanager aren't both trying to get control of the network.	2024-03-21 11:21:51 -04:00
Storm Dragon	ef015add0a	Remove dbus-broker from packages b ecause it's now the default.	2024-03-21 02:40:02 -04:00
Storm Dragon	81d60bb1b3	Added message reminding the user to go back to cursor mode after setting up internet connection.	2024-03-12 17:20:11 -04:00
Storm Dragon	50d9099231	Add a message for if inital configure-stormux gets interrupted.	2024-03-12 17:14:32 -04:00
Storm Dragon	aa4ec62c47	Added timezone to configure-stormux stub.	2024-03-12 17:04:11 -04:00
Storm Dragon	7fb1ba5283	Added alias pi-ip.	2024-03-09 04:59:47 -05:00
Storm Dragon	386cb3230e	Code restructure on configure-stormux stub.	2024-03-08 16:35:52 -05:00
Storm Dragon	0b10dc426b	Added partition size here so it runs on first boot.	2024-03-08 16:27:55 -05:00
Storm Dragon	40fd173777	Make sure audible sudo prompts are available throughout configure-stormux and the start up process.	2024-03-08 01:29:45 -05:00
Storm Dragon	1e24598316	Removed unneeded message from configure-stormux stub.	2024-03-07 17:29:16 -05:00
Storm Dragon	901d5cdb7a	Updated first boot script.	2024-03-07 17:28:29 -05:00
Storm Dragon	16ae09c86d	Fixed bug with configure-stormux stub.	2024-03-05 19:18:01 -05:00
Storm Dragon	b593494374	Moved pi3 stuff to its own branch because it's archived now.	2024-03-05 18:22:21 -05:00
				`@@ -0,0 +1 @@`
				`root=LABEL=STRMX_ROOT rw rootwait console=serial0,115200 console=tty1 fsck.repair=yes`
				`@@ -0,0 +1 @@`
				`/usr/lib/systemd/system/fenrirscreenreader.service`
				`@@ -0,0 +1 @@`
				`/usr/lib/systemd/system/NetworkManager.service`