Enable vulkan for sway on linux.

This is to hopefully avoid running garbage collection while I am actively interacting with emacs, which should theoretically result in a smoother experience.

ansible/environments/home/host_vars/homeserver

@@ -13,11 +13,8 @@ rc_conf: "homeserver_rc.conf"
 loader_conf: "homeserver_loader.conf"
 netgraph_config: "setup_netgraph_homeserver"
 cputype: "intel"
-cpu_opt: broadwell
 hwpstate: false
-build_user:
+devfs_rules: "homeserver_devfs.rules"
-  name: talexander
-  group: talexander
 jail_zfs_dataset: zmass/encrypted/jails
 jail_zfs_dataset_mountpoint: /jail/main
 jail_canmount: "on"

ansible/environments/laptop/group_vars/all

@@ -1,3 +1,28 @@
 timezone: "America/New_York"
 install_bluetooth: true
 emacs_flavor: "full"
+ssh_hosts:
+  - name: poudriere
+    proxy_jump: talexander@mrmanager
+    host_name: 10.215.1.203
+  - name: controller0
+    proxy_jump: talexander@mrmanager
+    host_name: 10.215.1.204
+  - name: controller1
+    proxy_jump: talexander@mrmanager
+    host_name: 10.215.1.205
+  - name: controller2
+    proxy_jump: talexander@mrmanager
+    host_name: 10.215.1.206
+  - name: worker0
+    proxy_jump: talexander@mrmanager
+    host_name: 10.215.1.207
+  - name: worker1
+    proxy_jump: talexander@mrmanager
+    host_name: 10.215.1.208
+  - name: worker2
+    proxy_jump: talexander@mrmanager
+    host_name: 10.215.1.209
+  - name: brianai
+    proxy_jump: talexander@mrmanager
+    host_name: 10.215.1.215

ansible/environments/laptop/host_vars/odofreebsd

@@ -1,25 +1,21 @@
 os_flavor: "freebsd"
-custom_repo: 13amd64-default-framework
+custom_repo: current-default-framework
 zfs_snapshot_datasets:
-  - path: zroot/freebsd/release/be/default
+  - path: zroot/freebsd/current/be/default
 sshd_enabled: true
 sshd_conf: "sshd_config"
-pf_config: "odofreebsd_pf.conf"
+#pf_config: "odofreebsd_pf.conf"
-pflog_conf:
+#pflog_conf:
-  - name: 0
+#  - name: 0
-    dev: pflog0
+#    dev: pflog0
 network_rc: "odofreebsd_network.conf"
 rc_conf: "odofreebsd_rc.conf"
 loader_conf: "odofreebsd_loader.conf"
 install_graphics: true
-graphics_driver: "intel"
+graphics_driver: "amd"
-cputype: "intel"
+cputype: "amd"
-cpu_opt: tigerlake
 hwpstate: true
-cores: 8
+cores: 16
-build_user:
-  name: talexander
-  group: talexander
 users:
   talexander:
     initialize: true
@@ -31,6 +27,7 @@ users:
       - name: u2f
       - name: operator # To be able to shutdown without root
       - name: webcamd
+        gid: 145
     authorized_keys:
       - yubikey
       - main_fido
@@ -38,14 +35,14 @@ users:
       - homeassistant
     gitconfig: "gitconfig_home"
 devfs_rules: "odo_devfs.rules"
-jail_zfs_dataset: zroot/freebsd/release/jails
+jail_zfs_dataset: zroot/freebsd/current/jails
 jail_zfs_dataset_mountpoint: /jail/main
 jail_list:
   - name: nat_dhcp
     enabled: true
     conf:
       src: nat_dhcp
-bhyve_dataset: zroot/freebsd/release/vm
+bhyve_dataset: zroot/freebsd/current/vm
 bhyve_list: []
 efi_dev: /dev/gpt/EFI
 sway_conf_files:

ansible/environments/laptop/host_vars/odolinux

@@ -21,7 +21,7 @@ zfs_snapshot_datasets:
   - path: zroot/linux/archmain/be
   - path: zroot/data/bridge/family_disks
 install_graphics: true
-graphics_driver: "intel"
+graphics_driver: "amd"
 build_user:
   name: talexander
   group: talexander
@@ -30,10 +30,9 @@ enabled_wireguard:
   - wgh
   - drmario
   - colo
-cputype: "intel"
+cputype: "amd"
 hwpstate: true
-cores: 8
+cores: 16
 sway_conf_files:
   - rofimoji
 docker_storage_driver: overlay2 # alternatively zfs
-docker_zfs_dataset: zroot/linux/archmain/docker

ansible/environments/laptop/host_vars/odowork

@@ -0,0 +1,36 @@
+os_flavor: "linux"
+hostname: odowork
+etc_hosts: {}
+users:
+  talexander:
+    initialize: true
+    uid: 11235
+    gid: 1000
+    groups:
+      - name: wheel
+      - name: users
+      - name: docker
+      - name: libvirt
+      - name: uucp
+    authorized_keys:
+      - yubikey
+      - main_fido
+      - backup_fido
+    gitconfig: "gitconfig_work"
+zfs_snapshot_datasets:
+  - path: zroot/linux/archwork/be
+install_graphics: true
+graphics_driver: "amd"
+pgp_key: "gpg_work.asc"
+build_user:
+  name: talexander
+  group: talexander
+# wireguard_directory: odowork
+# enabled_wireguard: []
+cputype: "amd"
+hwpstate: true
+cores: 16
+sway_conf_files:
+  - rofimoji
+docker_storage_driver: overlay2 # alternatively zfs
+closed_source_vscode: true

ansible/environments/laptop/hosts

@@ -1,3 +1,4 @@
 [gui]
 odolinux ansible_connection=local ansible_host=127.0.0.1
 odofreebsd ansible_connection=local ansible_host=127.0.0.1
+odowork ansible_connection=local ansible_host=127.0.0.1

ansible/environments/vm/host_vars/freebsdupdatemrmanager

@@ -1,5 +0,0 @@
-os_flavor: "freebsd"
-cpu_opt: tigerlake
-build_user:
-  name: root
-  group: wheel

ansible/environments/vm/host_vars/poudrieremrmanager

@@ -1,13 +1,15 @@
 os_flavor: "freebsd"
+pkgbase_url: "file:///usr/local/poudriere/data/images/currentznver4-repo/FreeBSD:15:amd64/latest"
 poudriere_builds:
-  - jail: 13amd64
+  # - jail: 13amd64
-    ports: default
-    set: framework
-    version: 13.2-RELEASE
-  # - jail: current
   #   ports: default
   #   set: framework
-  #   version: CURRENT
+  #   version: 13.2-RELEASE
-  #   revision: af01b4722577903f91acc44f01bdcb8cdb2d65ad
+  - jail: currentznver4
-  #   kernel: CUSTOM
+    ports: default
-  #   branch: main
+    set: framework
+    version: CURRENT
+    # revision: 66d37dbedfbf2dc94ccf49e6983c3652d5909b91
+    kernel: GENERIC-NODEBUG
+    branch: main
+    srcconf: currentznver4_src.conf

ansible/environments/vm/hosts

@@ -1,13 +1,8 @@
 [vm]
 poudriereodo ansible_user=builder ansible_host=10.213.177.12
 poudrieremrmanager ansible_user=root ansible_host=poudriere
-freebsdupdatemrmanager ansible_user=root ansible_host=freebsdupdate
 #
 # Put in ~/.ssh/config
 #    Host poudriere
 #       ProxyJump talexander@mrmanager
 #       HostName 10.215.1.203
-#
-#    Host freebsdupdate
-#       ProxyJump talexander@mrmanager
-#       HostName 10.215.1.213

ansible/playbook.yaml

@@ -42,9 +42,9 @@
     - ansible
     - wireguard
     - portshaker
-    - poudriere
     - android
     - latex
+    - python
     - pyenv
     - webcam
     - docker
@@ -52,6 +52,8 @@
     - javascript
     - launch_keyboard
     - lvfs
+    - restaurant_health_rating
+    - wasm
 
 - hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp
   vars:
@@ -65,10 +67,10 @@
   roles:
     - sudo # for poudboot script
     - fstab
+    - package_manager
     - portshaker
     - poudriere
     - poudrierenginx
-    - freebsd_update_server
 
 - hosts: mrmanager
   vars:
@@ -114,24 +116,20 @@
     - users
     - public_dns
 
-- hosts: odolinux:odofreebsd
+- hosts: odolinux:odofreebsd:odowork
   vars:
     ansible_become: True
   roles:
     - framework_laptop
 
-- hosts: odofreebsd
+- hosts: homeserver
   vars:
     ansible_become: True
   roles:
-    - freebsd_update_server
+    - homeserver
 
-- hosts: freebsdupdatemrmanager
+- hosts: odowork
   vars:
     ansible_become: True
   roles:
-    - sudo # for poudboot script
+    - odowork
-    - doas
-    - fstab
-    - build
-    - freebsd_update_server

ansible/roles/alacritty/files/alacritty.toml

@@ -0,0 +1,44 @@
+[colors]
+draw_bold_text_with_bright_colors = true
+indexed_colors = []
+
+[colors.bright]
+black = "0x666666"
+blue = "0x7aa6da"
+cyan = "0x54ced6"
+green = "0x9ec400"
+magenta = "0xb77ee0"
+red = "0xff3334"
+white = "0xffffff"
+yellow = "0xe7c547"
+
+[colors.normal]
+black = "0x000000"
+blue = "0x7aa6da"
+cyan = "0x70c0ba"
+green = "0xb9ca4a"
+magenta = "0xc397d8"
+red = "0xd54e53"
+white = "0xeaeaea"
+yellow = "0xe6c547"
+
+[colors.primary]
+background = "0x000000"
+foreground = "0xeaeaea"
+
+[font]
+size = 11.0
+
+[[hints.enabled]]
+command = "xdg-open"
+post_processing = true
+regex = "(ipfs:|ipns:|magnet:|mailto:|gemini:|gopher:|https:|http:|news:|file:|git:|ssh:|ftp:)[^\u0000-\u001F\u007F-Ÿ<>\"\\s{-}\\^⟨⟩`]+"
+
+[hints.enabled.mouse]
+enabled = false
+mods = "None"
+
+[scrolling]
+history = 10000
+# Lines moved per scroll.
+multiplier = 3

ansible/roles/alacritty/files/alacritty.yml

@@ -1,103 +0,0 @@
-# If `true`, bold text is drawn using the bright color variants.
-draw_bold_text_with_bright_colors: true
-
-colors:
-  # Default colors
-  primary:
-    background: "0x000000"
-    foreground: "0xeaeaea"
-
-    # Bright and dim foreground colors
-    #
-    # The dimmed foreground color is calculated automatically if it is not present.
-    # If the bright foreground color is not set, or `draw_bold_text_with_bright_colors`
-    # is `false`, the normal foreground color will be used.
-    #dim_foreground: '0x9a9a9a'
-    #bright_foreground: '0xffffff'
-
-  # Cursor colors
-  #
-  # Colors which should be used to draw the terminal cursor. If these are unset,
-  # the cursor color will be the inverse of the cell color.
-  #cursor:
-  #  text: '0x000000'
-  #  cursor: '0xffffff'
-
-  # Selection colors
-  #
-  # Colors which should be used to draw the selection area. If selection
-  # background is unset, selection color will be the inverse of the cell colors.
-  # If only text is unset the cell text color will remain the same.
-  #selection:
-  #  text: '0xeaeaea'
-  #  background: '0x404040'
-
-  # Normal colors
-  normal:
-    black: "0x000000"
-    red: "0xd54e53"
-    green: "0xb9ca4a"
-    yellow: "0xe6c547"
-    blue: "0x7aa6da"
-    magenta: "0xc397d8"
-    cyan: "0x70c0ba"
-    white: "0xeaeaea"
-
-  # Bright colors
-  bright:
-    black: "0x666666"
-    red: "0xff3334"
-    green: "0x9ec400"
-    yellow: "0xe7c547"
-    blue: "0x7aa6da"
-    magenta: "0xb77ee0"
-    cyan: "0x54ced6"
-    white: "0xffffff"
-
-  # Dim colors
-  #
-  # If the dim colors are not set, they will be calculated automatically based
-  # on the `normal` colors.
-  #dim:
-  #  black:   '0x000000'
-  #  red:     '0x8c3336'
-  #  green:   '0x7a8530'
-  #  yellow:  '0x97822e'
-  #  blue:    '0x506d8f'
-  #  magenta: '0x80638e'
-  #  cyan:    '0x497e7a'
-  #  white:   '0x9a9a9a'
-
-  # Indexed Colors
-  #
-  # The indexed colors include all colors from 16 to 256.
-  # When these are not set, they're filled with sensible defaults.
-  #
-  # Example:
-  #   `- { index: 16, color: '0xff00ff' }`
-  #
-  indexed_colors: []
-
-scrolling:
-  # Maximum number of lines in the scrollback buffer.
-  # Specifying '0' will disable scrolling.
-  history: 10000
-
-  # Number of lines the viewport will move for every line scrolled when
-  # scrollback is enabled (history > 0).
-  multiplier: 3
-
-font:
-  size: 11.0
-
-hints:
-  enabled:
-    # Disable opening links when clicked
-    - regex:
-        "(ipfs:|ipns:|magnet:|mailto:|gemini:|gopher:|https:|http:|news:|file:|git:|ssh:|ftp:)\
-        [^\u0000-\u001F\u007F-\u009F<>\"\\s{-}\\^⟨⟩`]+"
-      command: xdg-open
-      post_processing: true
-      mouse:
-        enabled: false
-        mods: None

ansible/roles/alacritty/tasks/peruser.yaml

@@ -19,8 +19,8 @@
     owner: "{{ account_name.stdout }}"
     group: "{{ group_name.stdout }}"
   loop:
-    - src: alacritty.yml
+    - src: alacritty.toml
-      dest: .config/alacritty/alacritty.yml
+      dest: .config/alacritty/alacritty.toml
 
 - import_tasks: tasks/peruser_freebsd.yaml
   when: 'os_flavor == "freebsd"'

ansible/roles/android/tasks/linux.yaml

@@ -19,4 +19,6 @@
     name:
       - gvfs
       - gvfs-mtp
+      - android-udev # Access android over USB without root.
+      - android-tools # For fastboot to flash phones.
     state: present

ansible/roles/autofs/files/auto_master

@@ -1,4 +1,3 @@
-# $FreeBSD$
 #
 # Automounter master map, see auto_master(5) for details.
 #

ansible/roles/base/files/gitconfig_home

@@ -18,3 +18,18 @@
 	date = local
 [init]
 	defaultBranch = main
+
+# Use meld for `git difftool` and `git mergetool`
+[diff]
+	tool = meld
+[difftool]
+	prompt = false
+[difftool "meld"]
+	cmd = meld "$LOCAL" "$REMOTE"
+[merge]
+	tool = meld
+[mergetool "meld"]
+        # Make the middle pane start with partially-merged contents:
+	cmd = meld "$LOCAL" "$MERGED" "$REMOTE" --output "$MERGED"
+        # Make the middle pane start without any merge progress:
+	# cmd = meld "$LOCAL" "$BASE" "$REMOTE" --output "$MERGED"

ansible/roles/base/files/gitconfig_work

@@ -0,0 +1,37 @@
+[user]
+	email = ThomasA.Alexander@hmhn.org
+	name = Tom Alexander
+	signingkey = D3A179C9A53C0EDE
+[push]
+	default = simple
+[alias]
+	lg = log --color --graph --pretty=format:'%Cred%h%Creset -%C(yellow)%d%Creset %s %Cgreen(%cr) %C(bold blue)<%an>%Creset' --abbrev-commit
+	bh = log --oneline --branches=* --remotes=* --graph --decorate
+	amend = commit --amend --no-edit
+[core]
+	excludesfile = ~/.gitignore_global
+[commit]
+	gpgsign = true
+[pull]
+	rebase = true
+[log]
+	date = local
+[init]
+	defaultBranch = main
+
+# Use meld for `git difftool` and `git mergetool`
+[diff]
+	tool = meld
+[difftool]
+	prompt = false
+[difftool "meld"]
+	cmd = meld "$LOCAL" "$REMOTE"
+[merge]
+	tool = meld
+[mergetool "meld"]
+        # Make the middle pane start with partially-merged contents:
+	cmd = meld "$LOCAL" "$MERGED" "$REMOTE" --output "$MERGED"
+        # Make the middle pane start without any merge progress:
+	# cmd = meld "$LOCAL" "$BASE" "$REMOTE" --output "$MERGED"
+[includeIf "gitdir:/bridge/git/machine_setup/"]
+	path = /bridge/git/machine_setup/ansible/roles/base/files/gitconfig_home

ansible/roles/base/files/login.conf

@@ -7,7 +7,6 @@
 # This file controls resource limits, accounting limits and
 # default user environment settings.
 #
-# $FreeBSD$
 #
 
 # Default settings effectively disable resource limits, see the

ansible/roles/base/files/odofreebsd_rc.conf

@@ -2,7 +2,12 @@ clear_tmp_enable="YES"
 syslogd_flags="-ss"
 sendmail_enable="NONE"
 hostname="odo"
+wlans_iwlwifi0="wlan0"
+ifconfig_wlan0="WPA DHCP"
+ifconfig_wlan0_ipv6="inet6 accept_rtadv"
 sshd_enable="YES"
+ntpd_enable="YES"
+powerd_enable="YES"
 # Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
 dumpdev="NO"
 zfs_enable="YES"

ansible/roles/base/tasks/common.yaml

@@ -17,6 +17,7 @@
       - colordiff
       - ipcalc
       - kdiff3
+      - meld
       - tcpdump
       - moreutils # for ts [%Y-%m-%d %H:%M:%.S]
       - ddrescue

ansible/roles/base/tasks/linux.yaml

@@ -8,6 +8,7 @@
       - man-db
       - uutils-coreutils
       - usbutils # for lsusb
+      - bolt
     state: present
 
 - name: Start pkgfile update service

ansible/roles/bhyve/files/bhyve_netgraph_bridge.bash

@@ -74,13 +74,6 @@ function main {
     fi
 }
 
-function die {
-    local status_code="$1"
-    shift
-    (>&2 echo "${@}")
-    exit "$status_code"
-}
-
 function create_disk {
     local zfs_path="$1"
     local mount_path="$2"

ansible/roles/build/defaults/main.yaml

@@ -1,2 +0,0 @@
-# freebsd_version: "releng/13.2"
-freebsd_version: "9c80d66ec1b4c5b9ac7aaf5b0fdbb1628d49c181"

ansible/roles/build/files/CUSTOM

@@ -1,6 +0,0 @@
-include GENERIC-NODEBUG
-
-# Disable Intel SD/MMC controller for reading eMMC
-nodevice sdhci
-
-ident   CUSTOM

ansible/roles/build/files/aurutils-nuke

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+#
+# If something is very wrong in pacman, this removes the keyring and the entire custom repo, then sets up pacman's keyring again. Running the ansible playbook is necessary to get the custom repo added.
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+doas rm -rf /var/cache/pacman/custom/ /etc/pacman.d/conf.d/aurutils.conf
+doas rm -rf /etc/pacman.d/gnupg
+doas pacman-key --init
+doas pacman-key --populate archlinux
+doas pacman -S archlinux-keyring

ansible/roles/build/files/find_packages_that_installed_kernel_modules.bash

@@ -1,26 +0,0 @@
-#!/usr/bin/env bash
-#
-# List installed packages that install a kernel module.
-set -euo pipefail
-IFS=$'\n\t'
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-
-: ${PORTSDIR:="/usr/ports"}
-
-function main {
-    if [ "$#" -ne 0 ]; then
-        (>&2 echo "This script takes no positional parameters.")
-        exit 1
-    fi
-    local module
-    doas find / -type f -name '*.ko' | sort | while read module; do
-        local provides=$(pkg provides "$module")
-        if [ -n "$provides" ]; then
-            package_name=$(grep 'Name    : ' <<<"$provides" | sed 's/Name    : //g')
-            # module_file=$(grep 'Filename: ' <<<"$provides" | sed 's/Filename: //g')
-            echo "$package_name"
-        fi
-    done
-}
-
-main "${@}"

ansible/roles/build/files/find_popular_ports_options.bash

@@ -1,36 +0,0 @@
-#!/usr/bin/env bash
-#
-# Find which port options appear the most in ports.
-set -euo pipefail
-IFS=$'\n\t'
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-
-: ${PORTSDIR:="/usr/ports"}
-
-function main {
-    if [ "$#" -ne 0 ]; then
-        (>&2 echo "This script takes no positional parameters.")
-        exit 1
-    fi
-    local folder
-    find_port_folders | while read folder; do
-        set +e
-        dump_port_options "$folder"
-        set -e
-    done | sort | uniq -c | sort -nr
-}
-
-function find_port_folders {
-    local mf
-    find "$PORTSDIR" -type f -name Makefile -mindepth 3 -maxdepth 3 | sort | while read mf; do
-        dirname "$mf"
-    done
-}
-
-function dump_port_options {
-    local folder="$1"
-    local portopts=$(make -C "$folder" -V OPTIONS_DEFINE)
-    echo "$portopts" | grep -oE --line-buffered '[^ ]*'
-}
-
-main "${@}"

ansible/roles/build/files/find_ports_containing_option.bash

@@ -1,41 +0,0 @@
-#!/usr/bin/env bash
-#
-# List ports containing an option matching the first parameter to the script.
-set -euo pipefail
-IFS=$'\n\t'
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-
-: ${PORTSDIR:="/usr/ports"}
-
-function main {
-    if [ "$#" -ne 1 ]; then
-        (>&2 echo "Pass exactly 1 option name to this script.")
-        exit 1
-    fi
-    local find_option_name=$1
-    local folder
-    find_port_folders | while read folder; do
-        set +e
-        dump_port_options "$folder" | grep -qE "^${find_option_name}$"
-        has_opt=$?;
-        set -e
-        if [ $has_opt -eq 0 ]; then
-            echo "$folder"
-        fi
-    done
-}
-
-function find_port_folders {
-    local mf
-    find "$PORTSDIR" -type f -name Makefile -mindepth 3 -maxdepth 3 | sort | while read mf; do
-        dirname "$mf"
-    done
-}
-
-function dump_port_options {
-    local folder="$1"
-    local portopts=$(make -C "$folder" -V OPTIONS_DEFINE)
-    echo "$portopts" | grep -oE --line-buffered '[^ ]*'
-}
-
-main "${@}"

ansible/roles/build/files/freebsd_update_step1

@@ -1,20 +0,0 @@
-#!/usr/bin/env bash
-#
-# Build and installs whatever is in /usr/src. Run step 1, reboot, then step 2.
-set -euo pipefail
-IFS=$'\n\t'
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-cores=$(sysctl -n hw.ncpu)
-
-if sudo etcupdate status | grep -qE '^  C '; then
-    >&2 echo 'Conflicts remain in etcupdate. Run `etcupdate resolve` to fix them first.'
-    exit 1
-fi
-
-cd /usr/src
-
-make -j "$cores" clean
-make -j "$cores" buildworld buildkernel
-sudo make installkernel
-
-echo "FreeBSD update step 1 done. Please reboot."

ansible/roles/build/files/freebsd_update_step2

@@ -1,19 +0,0 @@
-#!/usr/bin/env bash
-#
-# Build and installs whatever is in /usr/src. Run step 1, reboot, then step 2.
-set -euo pipefail
-IFS=$'\n\t'
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-
-sudo etcupdate -p
-
-cd /usr/src
-sudo make installworld
-sudo etcupdate -B
-
-if sudo etcupdate status | grep -qE '^  C '; then
-    >&2 echo 'Conflicts in etcupdate. Run `etcupdate resolve` to fix them first.'
-    exit 1
-fi
-
-echo "FreeBSD update step 2 done. Please reboot."

ansible/roles/build/files/gpg.asc

@@ -1,34 +1,27 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
 mDMEXZwWGhYJKwYBBAHaRw8BAQdAfv7qozKkmf4D+5PDzADsMm4aAKDGLha7+Cu0
-0H+RsWG0HVRvbSBBbGV4YW5kZXIgPHRvbUBmaXp6LmJ1eno+iJAEExYIADgWIQS4
+0H+RsWG0HlRvbSBBbGV4YW5kZXIgPHdvcmtAZml6ei5idXp6PoiQBBMWCAA4FiEE
-SBWTY8KHeReVS+En3kDZuEVcGwUCXZwWGgIbAwULCQgHAgYVCAkKCwIEFgIDAQIe
+uEgVk2PCh3kXlUvhJ95A2bhFXBsFAl+w+R0CGwMFCwkIBwIGFQoJCAsCBBYCAwEC
-AQIXgAAKCRAn3kDZuEVcG9glAQDX3Bzaz9sQpycc40LeLxSKQsWplfJigfr8wWOg
+HgECF4AACgkQJ95A2bhFXBt6fgD+NOYnw9gz5K/q3H5LE/JvqzCSHezJmeGgif0C
-C15TywEAqkTtCrTNsltdZERLMre7qnv/6RSo54OW0C4pdN7UUAa0HlRvbSBBbGV4
+uU4m1/MA+gPDKME7syEtJsTpELEMrxWWpDW0tD/W1iJE7roGYPQPtB1Ub20gQWxl
-YW5kZXIgPHdvcmtAZml6ei5idXp6PoiQBBMWCAA4FiEEuEgVk2PCh3kXlUvhJ95A
+eGFuZGVyIDx0b21AZml6ei5idXp6PoiQBBMWCAA4FiEEuEgVk2PCh3kXlUvhJ95A
-2bhFXBsFAl+w+R0CGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQJ95A2bhF
+2bhFXBsFAl2cFhoCGwMFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQJ95A2bhF
-XBt6fgD+NOYnw9gz5K/q3H5LE/JvqzCSHezJmeGgif0CuU4m1/MA+gPDKME7syEt
+XBvYJQEA19wc2s/bEKcnHONC3i8UikLFqZXyYoH6/MFjoAteU8sBAKpE7Qq0zbJb
-JsTpELEMrxWWpDW0tD/W1iJE7roGYPQPtB9Ub20gQWxleGFuZGVyIDx0b21AaGFy
+XWRESzK3u6p7/+kUqOeDltAuKXTe1FAGuDMEXZwWyhYJKwYBBAHaRw8BAQdAPyIL
-bW9uaWMuYWk+iJAEExYIADgWIQS4SBWTY8KHeReVS+En3kDZuEVcGwUCX7D5RAIb
+4EGg4T5JO9q2kpVDy2WjMiXz3nZXwYW4GLoTYkiI9QQYFggAJgIbAhYhBLhIFZNj
-AwULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRAn3kDZuEVcGzjDAP9pM1ScstOk
+wod5F5VL4SfeQNm4RVwbBQJlC4ZhBQkLMdaXAIF2IAQZFggAHRYhBIHmRDmWdVAu
-ti+oRAsNSk8qsjIsCT9O5voDS0Q7plWlcwD/btKVFO9tPLsXhyvdB+NSwueVs7TA
+sSUWutOhecmlPA7eBQJdnBbKAAoJENOhecmlPA7ejJ4A/iq7N2mMhx+ovOXm1REo
-kRVjlW3hktpefg24OARdnBYaEgorBgEEAZdVAQUBAQdArbTYQgDBMG7EBFTKA6+f
+ASPF3l4YAAjOHsXqcPtFHKGJAQCiuA71d6CQ+qNZLuka/KVB/etkkJvDzvaTtiQQ
-4CWgwl26Lf2b6cyCGfUw2j4DAQgHiHgEGBYIACAWIQS4SBWTY8KHeReVS+En3kDZ
+QG+gAwkQJ95A2bhFXBtRDgEAqymMavroD5c/4+M/EZ3/d8wxfA9E3Fb/1mt4c2Zr
-uEVcGwUCXZwWGgIbDAAKCRAn3kDZuEVcG03MAQCrkjrE+MhtvbfGaHGHlwz9QnF0
+NnkBAKYOM+pz/pncFnV+kF7h7TQEEYuGw1JhJVT/duA4lwsLuDMEXZwXARYJKwYB
-Z519YzK8Xr8m0O+09QEA9BFCfkAzBM4D4JKeWJh/tmN9U6UexzLrRdY+W9cugAm4
+BAHaRw8BAQdAa76TmWuKuiR1bnNV1FUE6oQ4C8A+UiQb8x0k1z2DmTKIfgQYFggA
-MwRdnBbKFgkrBgEEAdpHDwEBB0A/IgvgQaDhPkk72raSlUPLZaMyJfPedlfBhbgY
+JgIbIBYhBLhIFZNjwod5F5VL4SfeQNm4RVwbBQJlC4ZwBQkLMdZgAAoJECfeQNm4
-uhNiSIj1BBgWCAAmAhsCFiEEuEgVk2PCh3kXlUvhJ95A2bhFXBsFAl+w+hYFCQe4
+RVwb8TkA/RkBu9Ev8iDE5nvn8YF8FRiY56Z5d+SBPG4VvrCzXrmlAP46wUjIRpkM
-fcwAgXYgBBkWCAAdFiEEgeZEOZZ1UC6xJRa606F5yaU8Dt4FAl2cFsoACgkQ06F5
+rTbb1GMbvYnkeOrBs/qiWjEtHHc3ZLMWD7g4BF2cFygSCisGAQQBl1UBBQEBB0AO
-yaU8Dt6MngD+Krs3aYyHH6i85ebVESgBI8XeXhgACM4exepw+0UcoYkBAKK4DvV3
+0t3BUxLuokTqKVcheFAZd4UKxAGznPQlvsVyhWWIEgMBCAeIfgQYFggAJgIbDBYh
-oJD6o1ku6Rr8pUH962SQm8PO9pO2JBBAb6ADCRAn3kDZuEVcG9uAAP43vUsbe24/
+BLhIFZNjwod5F5VL4SfeQNm4RVwbBQJlC4ZwBQkLMdY5AAoJECfeQNm4RVwbXscA
-6tjEezAW0a4L2E1u4HNU8t53lolngs1kswEAy1HBdYEMR9TovX/kMeBHLcz1J2pM
+/A8zRRTCwQKxJ8iz5jmTcVFAhl2vD781Dtv8NvcWd5t8APwIwcuFVZZA3yayhIxi
-VRSV0JnJhj5eZwa4MwRdnBcBFgkrBgEEAdpHDwEBB0BrvpOZa4q6JHVuc1XUVQTq
+3aqYpMRxpn2t6Nswax1MIM8DBQ==
-hDgLwD5SJBvzHSTXPYOZMoh+BBgWCAAmAhsgFiEEuEgVk2PCh3kXlUvhJ95A2bhF
+=dzEV
-XBsFAl+w+hYFCQe4fZUACgkQJ95A2bhFXBs3NgEA3SFYTgRVstidfoEpEZV4DdSL
-kXaOwN3Eyba4UniClyMA/2CCxQt24vu19TyvUtOXWCp9Zi8SyIqoeiXQ4ZmhhnQO
-uDgEXZwXKBIKKwYBBAGXVQEFAQEHQA7S3cFTEu6iROopVyF4UBl3hQrEAbOc9CW+
-xXKFZYgSAwEIB4h+BBgWCAAmAhsMFiEEuEgVk2PCh3kXlUvhJ95A2bhFXBsFAl+w
-+hcFCQe4fW4ACgkQJ95A2bhFXBtUXAEAyEJCUNVSJ7qvQv5IXuwbYTX2Mh7JU3+F
-GJHO7AWBXCQA/2aLAi9kYmz9ba770XYwTeBZIv9Y6UIwIwVmFdYHC/EM
-=a/z4
 -----END PGP PUBLIC KEY BLOCK-----

ansible/roles/build/files/gpg_work.asc

@@ -0,0 +1,27 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=0HtE
+-----END PGP PUBLIC KEY BLOCK-----

ansible/roles/build/tasks/freebsd.yaml

@@ -1,100 +0,0 @@
-- name: Install packages
-  package:
-    name:
-      - git
-    state: present
-
-- name: Create directories
-  file:
-    name: "{{ item }}"
-    state: directory
-    mode: 0755
-    owner: "{{ build_user.name }}"
-    group: "{{ build_user.group }}"
-  loop:
-    - "/usr/src"
-    # - "/usr/ports"
-    - "/usr/obj"
-
-- name: chown the FreeBSD source
-  file:
-    name: "{{ item }}"
-    state: directory
-    owner: "{{ build_user.name }}"
-    group: "{{ build_user.group }}"
-    recurse: true
-  loop:
-    - "/usr/src"
-
-- name: Clone FreeBSD Source
-  git:
-    repo: "https://git.FreeBSD.org/src.git"
-    dest: /usr/src
-    version: "{{ freebsd_version }}"
-    force: true
-  become: true
-  become_user: "{{ build_user.name }}"
-  diff: false
-
-# - name: Clone Ports Tree
-#   git:
-#     repo: "https://git.FreeBSD.org/ports.git"
-#     dest: /usr/ports
-#     version: "main"
-#     force: true
-#     update: false
-#   become: true
-#   become_user: "{{ build_user.name }}"
-#   diff: false
-
-- name: Install Configuration
-  copy:
-    src: "files/{{ item.src }}"
-    dest: "{{ item.dest }}"
-    mode: 0644
-    owner: root
-    group: wheel
-  loop:
-    - src: make.conf
-      dest: /etc/make.conf
-
-- name: Install Configuration
-  copy:
-    src: "files/{{ item.src }}"
-    dest: "{{ item.dest }}"
-    mode: 0644
-    owner: "{{ build_user.name }}"
-    group: "{{ build_user.group }}"
-  loop:
-    - src: CUSTOM
-      dest: /usr/src/sys/amd64/conf/CUSTOM
-
-- name: Install Configuration
-  template:
-    src: "templates/{{ item.src }}.j2"
-    dest: "{{ item.dest }}"
-    mode: 0644
-    owner: root
-    group: wheel
-  loop:
-    - src: src.conf
-      dest: /etc/src.conf
-
-- name: Install scripts
-  copy:
-    src: "files/{{ item.src }}"
-    dest: "{{ item.dest }}"
-    mode: 0700
-    owner: "{{ build_user.name }}"
-    group: "{{ build_user.group }}"
-  loop:
-    - src: freebsd_update_step1
-      dest: /usr/local/bin/freebsd_update_step1
-    - src: freebsd_update_step2
-      dest: /usr/local/bin/freebsd_update_step2
-    - src: find_popular_ports_options.bash
-      dest: /usr/local/bin/find_popular_ports_options
-    - src: find_ports_containing_option.bash
-      dest: /usr/local/bin/find_ports_containing_option
-    - src: find_packages_that_installed_kernel_modules.bash
-      dest: /usr/local/bin/find_packages_that_installed_kernel_modules

ansible/roles/build/tasks/linux.yaml

@@ -39,7 +39,7 @@
 - name: Trust my signing key
   command: pacman-key -a -
   args:
-    stdin: "{{ lookup('file', 'gpg.asc') }}"
+    stdin: "{{ lookup('file', pgp_key|default('gpg.asc')) }}"
   when: '"B848159363C2877917954BE127DE40D9B8455C1B" not in pacmankeys.stdout'
   register: my_key_imported
 
@@ -89,13 +89,21 @@
   loop:
     - src: aurutils.conf
       dest: /etc/pacman.d/conf.d/
-    - src: pacman-custom.conf
+    - src: pacman-x86_64.conf
       dest: /etc/aurutils/
     - src: makepkg.conf # TODO: Is this needed or can I use the default from devtools?
       dest: /etc/aurutils/
 
+- name: chown the custom package db
+  file:
+    path: "{{ item }}"
+    owner: "{{ build_user.name }}"
+    recurse: true
+  loop:
+    - /var/cache/pacman/custom/
+
 - name: Create custom repo db
-  command: repo-add --sign /var/cache/pacman/custom/custom.db.tar
+  command: repo-add --new --sign /var/cache/pacman/custom/custom.db.tar "/home/{{ build_user.name }}/.config/ansible_deploy/aurutils/aurutils-*-any.pkg.tar.*"
   become: true
   become_user: "{{ build_user.name }}"
   args:
@@ -111,6 +119,8 @@
   loop:
     - src: aurutils-purge
       dest: /usr/local/bin/aurutils-purge
+    - src: aurutils-nuke
+      dest: /usr/local/bin/aurutils-nuke
     - src: aurutils-sync
       dest: /usr/local/bin/aurutils-sync
     - src: aurutils-update-devel-packages

ansible/roles/cpu/files/cpu_set_perf_perc_linux_amd

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+#
+# Tell hardware p-states whether to maximize CPU performance (100) or
+# energy efficiency (0).
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+perc=$1
+
+if [ "$perc" -gt 80 ]; then
+    echo performance | tee /sys/firmware/acpi/platform_profile
+elif [ "$perc" -ge 20 ]; then
+    echo balanced | tee /sys/firmware/acpi/platform_profile
+else
+    echo low-power | tee /sys/firmware/acpi/platform_profile
+fi
+
+if [ "$perc" -ge 80 ]; then
+    echo "performance" | tee /sys/devices/system/cpu/cpufreq/policy*/energy_performance_preference
+elif [ "$perc" -ge 60 ]; then
+    echo "balance_performance" | tee /sys/devices/system/cpu/cpufreq/policy*/energy_performance_preference
+elif [ "$perc" -ge 40 ]; then
+    echo "default" | tee /sys/devices/system/cpu/cpufreq/policy*/energy_performance_preference
+elif [ "$perc" -ge 20 ]; then
+    echo "balance_power" | tee /sys/devices/system/cpu/cpufreq/policy*/energy_performance_preference
+else
+    echo "power" | tee /sys/devices/system/cpu/cpufreq/policy*/energy_performance_preference
+fi

ansible/roles/cpu/files/platform_profile_tmpfiles.conf

@@ -0,0 +1,2 @@
+# Favor energy efficiency for platform profile (EC / system, not CPU)
+w- /sys/firmware/acpi/platform_profile - - - - low-power

ansible/roles/cpu/tasks/linux_amd.yaml

@@ -0,0 +1,40 @@
+- name: Install packages
+  package:
+    name:
+      - powertop
+    state: present
+
+- name: Favor energy efficiency for hardware p-states
+  when: hwpstate is defined and hwpstate and cores is defined
+  template:
+    src: "templates/{{ item.src }}.j2"
+    dest: "{{ item.dest }}"
+    mode: 0644
+    owner: root
+    group: wheel
+  loop:
+    - src: energy_performance_preference.conf
+      dest: /etc/tmpfiles.d/energy_performance_preference.conf
+
+- name: Install tmpfiles.d configuration
+  when: hwpstate is defined and hwpstate and cores is defined
+  copy:
+    src: "files/{{ item }}_tmpfiles.conf"
+    dest: "/etc/tmpfiles.d/{{ item }}.conf"
+    mode: 0644
+    owner: root
+    group: wheel
+  loop:
+    - platform_profile
+
+- name: Install scripts
+  when: hwpstate is defined and hwpstate
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0755
+    owner: root
+    group: wheel
+  loop:
+    - src: cpu_set_perf_perc_linux_amd
+      dest: /usr/local/bin/cpu_set_perf_perc

ansible/roles/cpu/tasks/linux_intel.yaml

@@ -19,7 +19,7 @@
   template:
     src: "templates/{{ item.src }}.j2"
     dest: "{{ item.dest }}"
-    mode: 0755
+    mode: 0644
     owner: root
     group: wheel
   loop:
@@ -35,5 +35,5 @@
     owner: root
     group: wheel
   loop:
-    - src: cpu_set_perf_perc_linux
+    - src: cpu_set_perf_perc_linux_intel
       dest: /usr/local/bin/cpu_set_perf_perc

ansible/roles/cpu/templates/energy_performance_preference.conf.j2

@@ -1,4 +1,4 @@
-# Favor energy efficiency for Speed Shift
+# Favor energy efficiency for hardware p-states
 {% for core in range(0, cores, 1) %}
 w- /sys/devices/system/cpu/cpufreq/policy{{core}}/energy_performance_preference - - - - power
 {% endfor %}

ansible/roles/devfs/files/homeserver_devfs.rules

@@ -0,0 +1,19 @@
+# [localrules=10]
+# add path 'input/*' mode 0660 group video
+# add path 'usb/*' mode 0660 group usb
+
+[tajailwg=13]
+add include $devfsrules_hide_all
+add include $devfsrules_unhide_basic
+add include $devfsrules_unhide_login
+add path 'bpf*' unhide
+add path pf unhide
+add path pflog unhide
+add path pfsynv unhide
+add path 'tun*' unhide
+
+[tajaildhcp=14]
+add include $devfsrules_hide_all
+add include $devfsrules_unhide_basic
+add include $devfsrules_unhide_login
+add path 'bpf*' unhide

ansible/roles/emacs/files/early-init.el

@@ -1,6 +1,6 @@
-(setq gc-cons-threshold 100000000) ;; Increase garbage collection threshold for performance (default 800000)
+(setq gc-cons-threshold (* 128 1024 1024)) ;; Increase garbage collection threshold for performance (default 800000)
 ;; Increase amount of data read from processes, default 4k
-(when (>= emacs-major-version 27)
+(when (version<= "27.0" emacs-version)
   (setq read-process-output-max (* 1024 1024)) ;; 1mb
   )
 

ansible/roles/emacs/files/elisp/base.el

@@ -36,6 +36,8 @@
  ;; Don't pop up a small window at the bottom of emacs at launch.
  inhibit-startup-screen t
  inhibit-startup-message t
+ ;; Don't show the list of buffers when opening many files.
+ inhibit-startup-buffer-menu t
  ;; Give the scratch buffer a clean slate.
  initial-major-mode 'fundamental-mode
  initial-scratch-message nil
@@ -75,4 +77,18 @@
 ;; Delete trailing whitespace before save
 (add-hook 'before-save-hook 'delete-trailing-whitespace)
 
+;; If the underlying file changes, reload it automatically. This is useful for moving around in git without confusing language servers.
+(setopt auto-revert-avoid-polling t)
+(setopt auto-revert-interval 5)
+(setopt auto-revert-check-vc-info t)
+(global-auto-revert-mode)
+
+;;;;; Performance
+;; Run garbage collect when emacs is idle
+(run-with-idle-timer 5 t (lambda () (garbage-collect)))
+(add-function :after after-focus-change-function
+              (lambda ()
+                (unless (frame-focus-state)
+                  (garbage-collect))))
+
 (provide 'base)

ansible/roles/emacs/files/elisp/common-lsp.el

@@ -38,6 +38,7 @@
   :hook (eglot-managed-mode . company-mode)
   :config
   (setq company-backends '((company-capf)))
+  (setq company-idle-delay 0) ;; Default 0.2
   )
 
 ;; (use-package company-box

ansible/roles/emacs/files/elisp/lang-javascript.el

@@ -23,6 +23,52 @@
   (run-command-on-buffer "jq" "--monochrome-output" ".")
   )
 
+(defun configure-typescript-language-server ()
+  "Configures the typescript language server."
+  (when-linux
+    ;; Either initializationOptions or workspace/didChangeConfiguration works.
+    (setq eglot-workspace-configuration
+          (list (cons ':typescript '(:inlayHints (:includeInlayParameterNameHints
+                                                  "all"
+                                                  :includeInlayParameterNameHintsWhenArgumentMatchesName
+                                                  t
+                                                  :includeInlayFunctionParameterTypeHints
+                                                  t
+                                                  :includeInlayVariableTypeHints
+                                                  t
+                                                  :includeInlayVariableTypeHintsWhenTypeMatchesName
+                                                  t
+                                                  :includeInlayPRopertyDeclarationTypeHints
+                                                  t
+                                                  :includeInlayFunctionLikeReturnTypeHints
+                                                  t
+                                                  :includeInlayEnumMemberValueHints
+                                                  t)))))
+    (eglot-ensure)
+    ;; (defclass my/eglot-typescript (eglot-lsp-server) ()
+    ;;   :documentation
+    ;;   "Own eglot server class.")
+
+    ;; (add-to-list 'eglot-server-programs
+    ;;              '((js-mode js-ts-mode tsx-ts-mode typescript-ts-mode typescript-mode) . (my/eglot-typescript "typescript-language-server" "--stdio" :initializationOptions (:preferences (:includeInlayParameterNameHints
+    ;;                                                                                                                                                                                        "all"
+    ;;                                                                                                                                                                                        :includeInlayParameterNameHintsWhenArgumentMatchesName
+    ;;                                                                                                                                                                                        t
+    ;;                                                                                                                                                                                        :includeInlayFunctionParameterTypeHints
+    ;;                                                                                                                                                                                        t
+    ;;                                                                                                                                                                                        :includeInlayVariableTypeHints
+    ;;                                                                                                                                                                                        t
+    ;;                                                                                                                                                                                        :includeInlayVariableTypeHintsWhenTypeMatchesName
+    ;;                                                                                                                                                                                        t
+    ;;                                                                                                                                                                                        :includeInlayPRopertyDeclarationTypeHints
+    ;;                                                                                                                                                                                        t
+    ;;                                                                                                                                                                                        :includeInlayFunctionLikeReturnTypeHints
+    ;;                                                                                                                                                                                        t
+    ;;                                                                                                                                                                                        :includeInlayEnumMemberValueHints
+    ;;                                                                                                                                                                                        t)))))
+    )
+  )
+
 (use-package tsx-ts-mode
   :ensure nil
   :pin manual
@@ -33,7 +79,7 @@
   :hook (
          (tsx-ts-mode . (lambda ()
                           (when-linux
-                            (eglot-ensure)
+                            (configure-typescript-language-server)
                             )
                           ))
          )
@@ -52,9 +98,7 @@
   :commands (typescript-ts-mode)
   :hook (
          (typescript-ts-mode . (lambda ()
-                                 (when-linux
+                                 (configure-typescript-language-server)
-                                   (eglot-ensure)
-                                   )
                                  ))
          )
   :init
@@ -81,6 +125,12 @@
   (unless (treesit-ready-p 'javascript) (treesit-install-language-grammar 'javascript))
   )
 
+(defun prettier-fmt ()
+  "Run prettier."
+  (run-command-on-buffer "prettier" "--stdin-filepath" buffer-file-name)
+  )
+
+
 (use-package css-ts-mode
   :ensure nil
   :pin manual
@@ -88,9 +138,23 @@
          ("\\.css\\'" . css-ts-mode)
          )
   :commands (css-ts-mode)
+  :custom (css-indent-offset 2)
   :init
   (add-to-list 'treesit-language-source-alist '(css "https://github.com/tree-sitter/tree-sitter-css"))
   (unless (treesit-ready-p 'css) (treesit-install-language-grammar 'css))
+  :hook (
+         (css-ts-mode . (lambda ()
+                             (eglot-ensure)
+                             (defclass my/eglot-css (eglot-lsp-server) ()
+                               :documentation
+                               "Own eglot server class.")
+
+                             (add-to-list 'eglot-server-programs
+                                          '(css-ts-mode . (my/eglot-css "vscode-css-language-server" "--stdio")))
+                             ;; (add-hook 'before-save-hook 'eglot-format-buffer nil 'local)
+                             (add-hook 'before-save-hook 'prettier-fmt nil 'local)
+                             ))
+         )
   )
 
 

ansible/roles/emacs/files/elisp/util-vertico.el

@@ -21,7 +21,7 @@
   (vertico-count 20)
   )
 
-;; Create an ivy-like experience when selecting files.
+;; Create an ido/ivy-like experience when selecting files.
 (use-package vertico-directory
   :after vertico
   :ensure nil

ansible/roles/emacs/meta/main.yaml

@@ -3,3 +3,5 @@ dependencies:
   - fonts
   - role: rust
     when: 'emacs_flavor == "full"'
+  - role: python
+    when: 'emacs_flavor == "full"'

ansible/roles/emacs/tasks/common.yaml

@@ -3,6 +3,7 @@
   package:
     name:
       - aspell
+      - graphviz # used for exporting graphviz dot charts from org-mode
     state: present
 
 - name: Install scripts

ansible/roles/emacs/tasks/freebsd.yaml

@@ -18,7 +18,6 @@
       - py39-black
       - zip # for odt export from org-mode
       - gnuplot # used for exporting graphs from org-mode
-      - graphviz # used for exporting graphviz dot charts from org-mode
       # - pyright
       - sqlite3 # for sqlite code blocks in org-mode
       # - terraform-ls # Terraform language server

ansible/roles/emacs/tasks/linux.yaml

@@ -14,6 +14,7 @@
       - gopls
       - typescript-language-server
       - shellcheck
+      - vscode-css-languageserver
     state: present
 
 - name: Create directories

ansible/roles/firefox/defaults/main.yaml

@@ -11,3 +11,4 @@ firefox_config:
   browser.newtabpage.activity-stream.showSponsoredTopSites: false
   browser.newtabpage.activity-stream.feeds.section.topstories: false
   browser.newtabpage.pinned: "[]"
+  browser.newtabpage.activity-stream.section.highlights.includePocket: false

ansible/roles/firewall/files/odofreebsd_pf.conf

@@ -5,7 +5,7 @@ not_jail_nat_v4 = "{ any, !10.215.1.0/24 }"
 dns_redirect = "{ 10.193.223.1 10.213.177.1 10.215.1.1 }"
 
 dhcp = "{ bootpc, bootps }"
-allow = "{ wgf wgh drmario colo }"
+#allow = "{ wgf wgh drmario colo }"
 
 tcp_pass_in = "{ 22 }"
 udp_pass_in = "{ 53 51820 }"
@@ -16,8 +16,8 @@ udp_pass_in = "{ 53 51820 }"
 set skip on lo
 
 # redirections
-nat pass on $ext_if inet from $jail_nat_v4 to $not_jail_nat_v4 -> (wlan0)
+#nat pass on $ext_if inet from $jail_nat_v4 to $not_jail_nat_v4 -> (wlan0)
-rdr pass on $not_ext_if proto {tcp, udp} from any to 10.215.1.1 port 53 -> 1.1.1.1 port 53
+#rdr pass on $not_ext_if proto {tcp, udp} from any to 10.215.1.1 port 53 -> 1.1.1.1 port 53
 
 # Redirect jaeger ports to virtual machine.
 # nat pass on lo inet from 127.0.0.0/24 to 127.0.0.0/24 port {6831 6832 16686 14268} -> (jail_nat)
@@ -27,19 +27,19 @@ rdr pass on $not_ext_if proto {tcp, udp} from any to 10.215.1.1 port 53 -> 1.1.1
 block log all
 pass out on $ext_if
 
-pass in on jail_nat
+#pass in on jail_nat
 # Allow traffic from my machine to the jails/virtual machines
-pass out on jail_nat from $jail_nat_v4
+#pass out on jail_nat from $jail_nat_v4
 
 # We pass on the interfaces listed in allow rather than skipping on
 # them because changes to pass rules will update when running a
 # `service pf reload` but interfaces that we `skip` will not update (I
 # forget if its from adding, removing, or both. TODO: test to figure
 # it out). Also skipped interfaces are not subject to nat/rdr rules.
-pass quick on $allow
+#pass quick on $allow
 
 pass on $ext_if proto icmp all
 pass on $ext_if proto icmp6 all
 
-pass in on $ext_if proto tcp to any port $tcp_pass_in
+#pass in on $ext_if proto tcp to any port $tcp_pass_in
-pass in on $ext_if proto udp to any port $udp_pass_in
+#pass in on $ext_if proto udp to any port $udp_pass_in

ansible/roles/fonts/tasks/freebsd.yaml

@@ -1,7 +1,7 @@
 - name: Install packages
   package:
     name:
-      - sourcecodepro-ttf
+      - source-code-pro-ttf
       - source-sans-ttf
       - cascadia-code
       - noto

ansible/roles/framework_laptop/files/screen_brightness_tmpfiles.conf

@@ -0,0 +1,2 @@
+# Set screen brightness. Ever since enabling adaptive brightness management, my brightness ends up sinking lower on re-boots (I suspect it is saving the actual brightness rather than the set brightness). This forces the brightness back to the level I prefer.
+w- /sys/class/backlight/amdgpu_bl0/brightness - - - - 85

ansible/roles/framework_laptop/tasks/linux.yaml

@@ -7,3 +7,14 @@
     daemon_reload: yes
   loop:
     - systemd-udev-settle.service
+
+- name: Install tmpfiles.d configuration
+  when: hwpstate is defined and hwpstate and cores is defined
+  copy:
+    src: "files/{{ item }}_tmpfiles.conf"
+    dest: "/etc/tmpfiles.d/{{ item }}.conf"
+    mode: 0644
+    owner: root
+    group: wheel
+  loop:
+    - screen_brightness

ansible/roles/freebsd_update_server/files/build_release.bash

@@ -1,130 +0,0 @@
-#!/usr/bin/env bash
-#
-set -euo pipefail
-IFS=$'\n\t'
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-
-: ${DATA_DIRECTORY:="/usr/local/share/freebsdupdate"}
-: ${STAGE_FILE:="${DATA_DIRECTORY}/stage"}
-: ${RELEASE_DIRECTORY:="${DATA_DIRECTORY}/release"}
-: ${LOG_DIRECTORY:="${DATA_DIRECTORY}/logs"}
-: ${PORTS_TREE:="/usr/ports"}
-: ${PORTS_REPO:="https://git.FreeBSD.org/ports.git"}
-
-############## Setup #########################
-
-function die {
-    local status_code="$1"
-    shift
-    (>&2 echo "${@}")
-    exit "$status_code"
-}
-
-function log {
-    (>&2 echo "${@}")
-}
-
-############## Program #########################
-
-function main {
-    assert_directories
-
-    local stage=""
-    if [ -e "$STAGE_FILE" ]; then
-        local stage=$(cat "$STAGE_FILE")
-    fi
-    if [ "$stage" = "selfbuild" ]; then
-        log_cmd stage_selfbuild
-    elif [ "$stage" = "selfinstallworld" ]; then
-        log_cmd stage_selfinstallworld
-    elif [ "$stage" = "selfconflictcheck" ]; then
-        log_cmd stage_selfconflictcheck
-    elif [ "$stage" = "releasebuild" ]; then
-        log_cmd stage_releasebuild
-    elif [ "$stage" = "done" ]; then
-        log_cmd stage_done
-    else
-        die 1 "Unhandled stage: \"$stage\"."
-    fi
-}
-
-function log_cmd {
-    "${@}" |& tee "$LOG_DIRECTORY/$(date +%Y%m%d-%s).log"
-}
-
-function self_conflict_check {
-    if etcupdate status | grep -qE '^  C '; then
-        die 1 'Conflicts remain in etcupdate. Run `etcupdate resolve` to fix them first.'
-    fi
-}
-
-function assert_directories {
-    for d in "$DATA_DIRECTORY" "$RELEASE_DIRECTORY" "$LOG_DIRECTORY"; do
-        if [ ! -e "$d" ]; then
-            mkdir -p "$d"
-        fi
-    done
-}
-
-function update_ports_tree {
-    if [ ! -e "$PORTS_TREE" ]; then
-        mkdir -p $PORTS_TREE
-        git -C $PORTS_TREE init --initial-branch=main
-        git -C $PORTS_TREE remote add origin $PORTS_REPO
-    fi
-    git -C $PORTS_TREE fetch origin main # 'refs/heads/main'
-    git -C $PORTS_TREE checkout FETCH_HEAD
-}
-
-function set_stage {
-    echo "${@}" > "$STAGE_FILE"
-}
-
-function stage_selfbuild {
-    self_conflict_check
-    assert_directories
-    update_ports_tree
-
-    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src clean
-    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src buildworld buildkernel
-    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src installkernel
-
-    set_stage "selfinstallworld"
-    /sbin/shutdown -r now
-}
-
-function stage_selfinstallworld {
-    etcupdate -p
-    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src installworld
-    etcupdate -B
-
-    set_stage "selfconflictcheck"
-    stage_selfconflictcheck
-}
-
-function stage_selfconflictcheck {
-    self_conflict_check
-    set_stage "releasebuild"
-    /sbin/shutdown -r now
-}
-
-function stage_releasebuild {
-    local today=$(date +%Y%m%d)
-    local target_directory="${RELEASE_DIRECTORY}/${today}"
-    if [ -e "$target_directory" ]; then
-        die 1 "The release directory $target_directory already exists. Exiting."
-    fi
-    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src clean
-    make -C /usr/src buildworld buildkernel
-    make -C /usr/src/release obj
-    make -C /usr/src/release release
-    mkdir -p "$target_directory"
-    make -C /usr/src/release install DESTDIR="$target_directory"
-    set_stage "done"
-}
-
-function stage_done {
-    log "Everything is done."
-}
-
-main "${@}"

ansible/roles/freebsd_update_server/files/release.conf

@@ -1,120 +0,0 @@
-#!/bin/sh
-#
-
-## Redefine environment variables here to override prototypes
-## defined in release.sh.
-#load_chroot_env() { }
-#load_target_env() { }
-#buildenv_setup() { }
-
-## Set the directory within which the release will be built.
-CHROOTDIR="/scratch"
-
-## Do not explicitly require the devel/git port to be installed.
-#NOGIT=1
-## Set the version control system host.
-GITROOT="https://git.freebsd.org/"
-GITSRC="src.git"
-GITPORTS="ports.git"
-
-## Set the src/, ports/, and doc/ branches or tags.
-#SRCBRANCH="stable/13"
-SRCBRANCH="main"
-PORTBRANCH="main"
-
-## Sample configuration for using git from ports.
-#GITCMD="/usr/local/bin/git clone -q --branch main"
-
-## Set to override the default target architecture.
-#TARGET="amd64"
-#TARGET_ARCH="amd64"
-#KERNEL="GENERIC"
-KERNEL="GENERIC-NODEBUG"
-## Multiple kernels may be set.
-#KERNEL="GENERIC XENHVM"
-
-## Set to specify a custom make.conf and/or src.conf
-#MAKE_CONF="/etc/local/make.conf"
-MAKE_CONF="/etc/make.conf"
-#SRC_CONF="/etc/local/src.conf"
-SRC_CONF="/etc/src.conf"
-
-## Set to use make(1) flags.
-#MAKE_FLAGS="-s"
-
-## Set to use world- and kernel-specific make(1) flags.
-#WORLD_FLAGS="-j $(sysctl -n hw.ncpu)"
-#KERNEL_FLAGS="-j $(( $(( $(sysctl -n hw.ncpu) + 1 )) / 2 ))"
-
-## Set miscellaneous 'make release' settings.
-#NOPORTS=
-#NOSRC=
-#WITH_DVD=
-#WITH_COMPRESSED_IMAGES=
-
-## Set to '1' to disable multi-threaded xz(1) compression.
-#XZ_THREADS=0
-
-## Set when building embedded images.
-#EMBEDDEDBUILD=
-
-## Set to a list of ports required to build embedded system-on-chip
-## images, such as sysutils/u-boot-rpi.
-#EMBEDDEDPORTS=
-
-## Set to the hardware platform of the target userland.  This value
-## is passed to make(1) to set the TARGET (value of uname -m) to cross
-## build.
-#EMBEDDED_TARGET=
-
-## Set to the machine processor architecture of the target userland.
-## This value is passed to make(1) to set the TARGET_ARCH (value of uname -p)
-## to cross build.
-#EMBEDDED_TARGET_ARCH=
-
-## Set to skip the chroot environment buildworld/installworld/distribution
-## step if it is expected the build environment will exist via alternate
-## means.
-#CHROOTBUILD_SKIP=
-
-## Set to a non-empty value skip checkout or update of /usr/src in
-## the chroot.  This is intended for use when /usr/src already exists.
-#SRC_UPDATE_SKIP=
-
-## Set to a non-empty value skip checkout or update of /usr/ports in
-## the chroot.  This is intended for use when /usr/ports already exists.
-#PORTS_UPDATE_SKIP=
-
-## Set to pass additional flags to make(1) for the build chroot setup, such
-## as TARGET/TARGET_ARCH.
-#CHROOT_MAKEENV=
-
-## Set to a non-empty value to build virtual machine images as part of the
-## release build.
-#WITH_VMIMAGES=
-
-## Set to a non-empty value to compress virtual machine images with xz(1)
-## as part of the release build.
-#WITH_COMPRESSED_VMIMAGES=
-
-## If WITH_VMIMAGES is set to a non-empty value, this is the name of the
-## file to use for the installed userland/kernel.
-#VMBASE="vm"
-
-## If WITH_VMIMAGES is set to a non-empty value, this is the size of the
-## virtual machine disk filesystem.  Valid size values are described in
-## the makefs(8) manual page.
-#VMSIZE="20g"
-
-## If WITH_VMIMAGES is set to a non-empty value, this is a list of disk
-## image formats to create.  Valid values are listed in the mkimg(1)
-## manual page, as well as 'mkimg --formats' output.
-#VMFORMATS="vhdf vmdk qcow2 raw"
-
-## Set to a non-empty value to build virtual machine images for various
-## cloud providers as part of the release build.
-#WITH_CLOUDWARE=
-
-## If WITH_CLOUDWARE is set to a non-empty value, this is a list of providers
-## to create disk images.
-#CLOUDWARE="EC2 GCE VAGRANT-VIRTUALBOX VAGRANT-VMWARE"

ansible/roles/freebsd_update_server/tasks/common.yaml

@@ -1,5 +0,0 @@
-- import_tasks: tasks/freebsd.yaml
-  when: 'os_flavor == "freebsd" and build_user is defined'
-
-- import_tasks: tasks/linux.yaml
-  when: 'os_flavor == "linux"'

ansible/roles/freebsd_update_server/tasks/freebsd.yaml

@@ -1,50 +0,0 @@
-- name: Install packages
-  package:
-    name:
-      - git
-      - tmux # For convenience
-      - htop # For convenience
-      - bash
-    state: present
-
-- name: Create directories
-  file:
-    name: "{{ item }}"
-    state: directory
-    mode: 0755
-    owner: "{{ build_user.name }}"
-    group: "{{ build_user.group }}"
-  loop:
-    - /opt/freebsd_update_server
-
-- name: Clone freebsd-update-build
-  git:
-    repo: "https://github.com/freebsd/freebsd-update-build.git"
-    dest: /opt/freebsd_update_server/freebsd-update-build
-    version: "28bb3ae7de9c1332fe8a366fb154a5b9faf37f49"
-    force: true
-  become: true
-  become_user: "{{ build_user.name }}"
-  diff: false
-
-- name: Install Configuration
-  copy:
-    src: "files/{{ item.src }}"
-    dest: "{{ item.dest }}"
-    mode: 0600
-    owner: "{{ build_user.name }}"
-    group: "{{ build_user.group }}"
-  loop:
-    - src: release.conf
-      dest: /opt/freebsd_update_server/release.conf
-
-- name: Install scripts
-  copy:
-    src: "files/{{ item.src }}"
-    dest: "{{ item.dest }}"
-    mode: 0755
-    owner: root
-    group: wheel
-  loop:
-    - src: build_release.bash
-      dest: /usr/local/bin/build_release

ansible/roles/gpg/files/gpg_work.asc

@@ -0,0 +1,27 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=0HtE
+-----END PGP PUBLIC KEY BLOCK-----

ansible/roles/gpg/tasks/peruser.yaml

@@ -43,7 +43,7 @@
   command: gpg --import
   when: '"cv25519/B0B50C7FDDE009E5" not in gpgkeys.stdout'
   args:
-    stdin: "{{ lookup('file', 'gpg.asc') }}"
+    stdin: "{{ lookup('file', pgp_key|default('gpg.asc')) }}"
 
 - import_tasks: tasks/peruser_freebsd.yaml
   when: 'os_flavor == "freebsd"'

ansible/roles/graphics/files/amd_kld_rc.conf

@@ -0,0 +1 @@
+kld_list="/boot/modules/amdgpu.ko"

ansible/roles/graphics/tasks/freebsd_amd.yaml

@@ -0,0 +1,42 @@
+- name: Install packages
+  package:
+    name:
+      - drm-kmod
+#      - libva-intel-media-driver # va-api support for broadwell (2014) and newer.
+#      - libva-intel-driver # va-api support until after coffeelake (2017).
+      - vulkan-loader
+      - libva-utils # for vainfo
+      - vdpauinfo # for vdpauinfo
+      - libvdpau-va-gl # vdpau support
+#      - igt-gpu-tools # for intel_gpu_top
+      - vulkan-tools # For vulkaninfo
+    state: present
+
+# - name: Configure vdpau to use va-api driver
+#   copy:
+#     src: vdpau.sh
+#     dest: /etc/profile.d/vdpau.sh
+#     mode: 0644
+#     owner: root
+#     group: root
+
+#- name: Install loader.conf
+#  copy:
+#    src: "files/{{ item }}_loader.conf"
+#    dest: "/boot/loader.conf.d/{{ item }}.conf"
+#    mode: 0644
+#    owner: root
+#    group: wheel
+#  loop:
+#    - intel_power
+#    - intel_hw_accel_video
+
+- name: Install service configuration
+  copy:
+    src: "files/amd_{{ item }}_rc.conf"
+    dest: "/etc/rc.conf.d/{{ item }}"
+    mode: 0644
+    owner: root
+    group: wheel
+  loop:
+    - kld

ansible/roles/graphics/tasks/linux_amd.yaml

@@ -0,0 +1,20 @@
+# TODO: Should I enable APM?
+- name: Install packages
+  package:
+    name:
+      - linux-firmware # Arch wiki claims this is needed to boot
+      - mesa
+      - lib32-mesa
+      - vulkan-radeon
+      - lib32-vulkan-radeon
+      - libva-mesa-driver # Accelerated video decoding
+      - lib32-libva-mesa-driver # Accelerated video decoding
+      - mesa-vdpau # Accelerated video decoding
+      - lib32-mesa-vdpau # Accelerated video decoding
+      - vulkan-icd-loader
+      - lib32-vulkan-icd-loader
+      - libva-utils # for vainfo
+      - vdpauinfo # for vdpauinfo
+      - vulkan-tools # For vulkaninfo
+      - radeontop
+    state: present

ansible/roles/homeserver/files/decrypt_disks.bash

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+#
+# Decrypt and mount the disks after a fresh reboot.
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+zfs load-key -r zmass/encrypted
+zfs mount -a
+service bemount start

ansible/roles/homeserver/tasks/common.yaml

@@ -0,0 +1,55 @@
+# - name: Create directories
+#   file:
+#     name: "{{ item }}"
+#     state: directory
+#     mode: 0755
+#     owner: root
+#     group: wheel
+#   loop:
+#     - /foo/bar
+
+# - name: Install scripts
+#   copy:
+#     src: "files/{{ item.src }}"
+#     dest: "{{ item.dest }}"
+#     mode: 0755
+#     owner: root
+#     group: wheel
+#   loop:
+#     - src: foo.bash
+#       dest: /usr/local/bin/foo
+
+# - name: Install Configuration
+#   copy:
+#     src: "files/{{ item.src }}"
+#     dest: "{{ item.dest }}"
+#     mode: 0600
+#     owner: root
+#     group: wheel
+#   loop:
+#     - src: foo.conf
+#       dest: /usr/local/etc/foo.conf
+
+# - name: Clone Source
+#   git:
+#     repo: "https://foo.bar/baz.git"
+#     dest: /foo/bar
+#     version: "v1.0.2"
+#     force: true
+#   diff: false
+
+- import_tasks: tasks/freebsd.yaml
+  when: 'os_flavor == "freebsd"'
+
+- import_tasks: tasks/linux.yaml
+  when: 'os_flavor == "linux"'
+
+- include_tasks:
+    file: tasks/peruser.yaml
+    apply:
+      become: yes
+      become_user: "{{ initialize_user }}"
+  when: users is defined
+  loop: "{{ users | dict2items | community.general.json_query('[?value.initialize==`true`].key') }}"
+  loop_control:
+    loop_var: initialize_user

ansible/roles/homeserver/tasks/freebsd.yaml

@@ -0,0 +1,10 @@
+- name: Install scripts
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0755
+    owner: root
+    group: wheel
+  loop:
+    - src: decrypt_disks.bash
+      dest: /usr/local/bin/decrypt_disks

ansible/roles/hosts/tasks/common.yaml

@@ -1,10 +1,19 @@
 - name: Set the /etc/hosts
+  when: hostname is undefined or item.key != hostname
   ansible.builtin.lineinfile:
     path: /etc/hosts
     regexp: '^{{ item.key | regex_escape() }}\s+'
     line: "{{ item.key }}		{{ item.value | join(' ') }}"
   loop: "{{ etc_hosts | dict2items }}"
 
+# Without an entry for the local hostname, firefox takes multiple minutes to launch.
+- name: Set the /etc/hosts
+  when: hostname is defined
+  ansible.builtin.lineinfile:
+    path: /etc/hosts
+    regexp: '\s+{{ hostname | regex_escape() }}\s*$'
+    line: "127.0.0.1		{{ hostname }}"
+
 - import_tasks: tasks/freebsd.yaml
   when: 'os_flavor == "freebsd"'
 

ansible/roles/jail_nat_dhcp/files/kea-dhcp4.conf

@@ -78,11 +78,6 @@
                         // brianai
                         "hw-address": "06:a6:dc:59:78:12",
                         "ip-address": "10.215.1.215"
-                    },
-                    {
-                        // freebsdupdate
-                        "hw-address": "06:14:5c:92:3d:5b",
-                        "ip-address": "10.215.1.213"
                     }
                 ]
             }

ansible/roles/kubernetes/files/k8s_delete_pipeline_runs

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+#
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+kubectl get pipelinerun --all-namespaces -o go-template='{{range .items}}{{.metadata.namespace}}/{{.metadata.name}}{{"\n"}}{{end}}' | while read p; do namespace=$(cut -d '/' -f 1 <<<"$p"); name=$(cut -d '/' -f 2 <<<"$p"); kubectl delete pipelinerun -n "$namespace" "$name"; done

ansible/roles/kubernetes/tasks/common.yaml

@@ -37,6 +37,8 @@
       dest: /usr/local/bin/kx
     - src: decrypt_k8s_secret
       dest: /usr/local/bin/decrypt_k8s_secret
+    - src: k8s_delete_pipeline_runs
+      dest: /usr/local/bin/
 
 - import_tasks: tasks/freebsd.yaml
   when: 'os_flavor == "freebsd"'

ansible/roles/kubernetes/tasks/linux.yaml

@@ -1,27 +1,8 @@
-- name: Build aur packages
-  register: buildaur
-  become_user: "{{ build_user.name }}"
-  command: "aurutils-sync --no-view {{ item }}"
-  args:
-    creates: "/var/cache/pacman/custom/{{ item }}-*.pkg.tar.*"
-  loop:
-    - kubeswitch
-    - flux-scm
-    - kubectl-minio
-
-- name: Update cache
-  when: buildaur.changed
-  pacman:
-    name: []
-    state: present
-    update_cache: true
-
 - name: Install packages
   package:
     name:
       - yamllint
       - stern
-      - kubeswitch
+      # - kubeswitch
-      - flux-scm
+      - fluxcd
-      - kubectl-minio
     state: present

ansible/roles/launch_keyboard/files/launch_keyboard_layout.json

@@ -0,0 +1,642 @@
+{
+  "model": "system76/launch_2",
+  "version": 1,
+  "map": {
+    "K00": [
+      "ESC",
+      "RESET",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K01": [
+      "F1",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K02": [
+      "F2",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K03": [
+      "F3",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K04": [
+      "F4",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K05": [
+      "F5",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K06": [
+      "F6",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K07": [
+      "F7",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K08": [
+      "F8",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K09": [
+      "F9",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K0A": [
+      "F10",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K0B": [
+      "F11",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K0C": [
+      "F12",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K0D": [
+      "DEL",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K0E": [
+      "HOME",
+      "PLAY_PAUSE",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K10": [
+      "TICK",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K11": [
+      "1",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K12": [
+      "2",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K13": [
+      "3",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K14": [
+      "4",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K15": [
+      "5",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K16": [
+      "6",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K17": [
+      "7",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K18": [
+      "8",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K19": [
+      "9",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K1A": [
+      "0",
+      "KBD_TOGGLE",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K1B": [
+      "MINUS",
+      "KBD_DOWN",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K1C": [
+      "EQUALS",
+      "KBD_UP",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K1D": [
+      "BKSP",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K1E": [
+      "PGUP",
+      "VOLUME_UP",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K20": [
+      "TAB",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K21": [
+      "Q",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K22": [
+      "W",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K23": [
+      "E",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K24": [
+      "R",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K25": [
+      "T",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K26": [
+      "Y",
+      "HOME",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K27": [
+      "U",
+      "PGDN",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K28": [
+      "I",
+      "PGUP",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K29": [
+      "O",
+      "END",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K2A": [
+      "P",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K2B": [
+      "BRACE_OPEN",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K2C": [
+      "BRACE_CLOSE",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K2D": [
+      "BACKSLASH",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K2E": [
+      "PGDN",
+      "VOLUME_DOWN",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K30": [
+      "CAPS",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K31": [
+      "A",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K32": [
+      "S",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K33": [
+      "D",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K34": [
+      "F",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K35": [
+      "G",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K36": [
+      "H",
+      "LEFT",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K37": [
+      "J",
+      "DOWN",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K38": [
+      "K",
+      "UP",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K39": [
+      "L",
+      "RIGHT",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K3A": [
+      "SEMICOLON",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K3B": [
+      "QUOTE",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K3C": [
+      "ENTER",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K3D": [
+      "END",
+      "MUTE",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K40": [
+      "LEFT_SHIFT",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K41": [
+      "Z",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K42": [
+      "X",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K43": [
+      "C",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K44": [
+      "V",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K45": [
+      "B",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K46": [
+      "N",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K47": [
+      "M",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K48": [
+      "COMMA",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K49": [
+      "PERIOD",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K4A": [
+      "SLASH",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K4B": [
+      "RIGHT_SHIFT",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K4C": [
+      "UP",
+      "PGUP",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K50": [
+      "LEFT_CTRL",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K51": [
+      "LEFT_SUPER",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K52": [
+      "LEFT_ALT",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K53": [
+      "FN",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K54": [
+      "SPACE",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K55": [
+      "SPACE",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K56": [
+      "RIGHT_CTRL",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K57": [
+      "RIGHT_ALT",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K58": [
+      "PRINT_SCREEN",
+      "ROLL_OVER",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K59": [
+      "LEFT",
+      "HOME",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K5A": [
+      "DOWN",
+      "PGDN",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ],
+    "K5B": [
+      "RIGHT",
+      "END",
+      "ROLL_OVER",
+      "ROLL_OVER"
+    ]
+  },
+  "key_leds": {
+    "K00": null,
+    "K01": null,
+    "K02": null,
+    "K03": null,
+    "K04": null,
+    "K05": null,
+    "K06": null,
+    "K07": null,
+    "K08": null,
+    "K09": null,
+    "K0A": null,
+    "K0B": null,
+    "K0C": null,
+    "K0D": null,
+    "K0E": null,
+    "K10": null,
+    "K11": null,
+    "K12": null,
+    "K13": null,
+    "K14": null,
+    "K15": null,
+    "K16": null,
+    "K17": null,
+    "K18": null,
+    "K19": null,
+    "K1A": null,
+    "K1B": null,
+    "K1C": null,
+    "K1D": null,
+    "K1E": null,
+    "K20": null,
+    "K21": null,
+    "K22": null,
+    "K23": null,
+    "K24": null,
+    "K25": null,
+    "K26": null,
+    "K27": null,
+    "K28": null,
+    "K29": null,
+    "K2A": null,
+    "K2B": null,
+    "K2C": null,
+    "K2D": null,
+    "K2E": null,
+    "K30": null,
+    "K31": null,
+    "K32": null,
+    "K33": null,
+    "K34": null,
+    "K35": null,
+    "K36": null,
+    "K37": null,
+    "K38": null,
+    "K39": null,
+    "K3A": null,
+    "K3B": null,
+    "K3C": null,
+    "K3D": null,
+    "K40": null,
+    "K41": null,
+    "K42": null,
+    "K43": null,
+    "K44": null,
+    "K45": null,
+    "K46": null,
+    "K47": null,
+    "K48": null,
+    "K49": null,
+    "K4A": null,
+    "K4B": null,
+    "K4C": null,
+    "K50": null,
+    "K51": null,
+    "K52": null,
+    "K53": null,
+    "K54": null,
+    "K55": null,
+    "K56": null,
+    "K57": null,
+    "K58": null,
+    "K59": null,
+    "K5A": null,
+    "K5B": null
+  },
+  "layers": [
+    {
+      "mode": [
+        7,
+        127
+      ],
+      "brightness": 135,
+      "color": [
+        142,
+        255
+      ]
+    },
+    {
+      "mode": [
+        13,
+        127
+      ],
+      "brightness": 135,
+      "color": [
+        142,
+        255
+      ]
+    },
+    {
+      "mode": [
+        13,
+        127
+      ],
+      "brightness": 135,
+      "color": [
+        142,
+        255
+      ]
+    },
+    {
+      "mode": [
+        13,
+        127
+      ],
+      "brightness": 135,
+      "color": [
+        142,
+        255
+      ]
+    }
+  ]
+}

ansible/roles/media/tasks/amd.yaml

@@ -0,0 +1,10 @@
+- name: Install scripts
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0755
+    owner: root
+    group: wheel
+  loop:
+    - src: cast_file_vaapi
+      dest: /usr/local/bin/cast_file

ansible/roles/media/tasks/intel.yaml

@@ -6,5 +6,5 @@
     owner: root
     group: wheel
   loop:
-    - src: cast_file_intel
+    - src: cast_file_vaapi
       dest: /usr/local/bin/cast_file

ansible/roles/network/files/main.conf

@@ -7,5 +7,5 @@ NameResolvingService=systemd
 EnableNetworkConfiguration=True
 # route_priority_offset=300
 
-[Scan]
+# [Scan]
-DisablePeriodicScan=true
+# DisablePeriodicScan=true

ansible/roles/network/tasks/linux.yaml

@@ -36,5 +36,5 @@
     daemon_reload: yes
   loop:
     - iwd.service
-    - systemd-networkd.service
+    # - systemd-networkd.service
     - systemd-resolved.service

ansible/roles/odowork/tasks/common.yaml

@@ -0,0 +1,55 @@
+# - name: Create directories
+#   file:
+#     name: "{{ item }}"
+#     state: directory
+#     mode: 0755
+#     owner: root
+#     group: wheel
+#   loop:
+#     - /foo/bar
+
+# - name: Install scripts
+#   copy:
+#     src: "files/{{ item.src }}"
+#     dest: "{{ item.dest }}"
+#     mode: 0755
+#     owner: root
+#     group: wheel
+#   loop:
+#     - src: foo.bash
+#       dest: /usr/local/bin/foo
+
+# - name: Install Configuration
+#   copy:
+#     src: "files/{{ item.src }}"
+#     dest: "{{ item.dest }}"
+#     mode: 0600
+#     owner: root
+#     group: wheel
+#   loop:
+#     - src: foo.conf
+#       dest: /usr/local/etc/foo.conf
+
+# - name: Clone Source
+#   git:
+#     repo: "https://foo.bar/baz.git"
+#     dest: /foo/bar
+#     version: "v1.0.2"
+#     force: true
+#   diff: false
+
+- import_tasks: tasks/freebsd.yaml
+  when: 'os_flavor == "freebsd"'
+
+- import_tasks: tasks/linux.yaml
+  when: 'os_flavor == "linux"'
+
+- include_tasks:
+    file: tasks/peruser.yaml
+    apply:
+      become: yes
+      become_user: "{{ initialize_user }}"
+  when: users is defined
+  loop: "{{ users | dict2items | community.general.json_query('[?value.initialize==`true`].key') }}"
+  loop_control:
+    loop_var: initialize_user

ansible/roles/odowork/tasks/freebsd.yaml

@@ -0,0 +1,5 @@
+# - name: Install packages
+#   package:
+#     name:
+#       - foo
+#     state: present

ansible/roles/odowork/tasks/linux.yaml

@@ -0,0 +1,5 @@
+- name: Install packages
+  package:
+    name:
+      - python-numpy # Increases the speed of iap tunnels
+    state: present

ansible/roles/odowork/tasks/main.yaml

@@ -0,0 +1,2 @@
+- import_tasks: tasks/common.yaml
+  # when: foo is defined

ansible/roles/odowork/tasks/peruser.yaml

@@ -0,0 +1,29 @@
+- include_role:
+    name: per_user
+
+# - name: Create directories
+#   file:
+#     name: "{{ account_homedir.stdout }}/{{ item }}"
+#     state: directory
+#     mode: 0700
+#     owner: "{{ account_name.stdout }}"
+#     group: "{{ group_name.stdout }}"
+#   loop:
+#     - ".config/foo"
+
+# - name: Copy files
+#   copy:
+#     src: "files/{{ item.src }}"
+#     dest: "{{ account_homedir.stdout }}/{{ item.dest }}"
+#     mode: 0600
+#     owner: "{{ account_name.stdout }}"
+#     group: "{{ group_name.stdout }}"
+#   loop:
+#     - src: foo.conf
+#       dest: .config/foo/foo.conf
+
+- import_tasks: tasks/peruser_freebsd.yaml
+  when: 'os_flavor == "freebsd"'
+
+- import_tasks: tasks/peruser_linux.yaml
+  when: 'os_flavor == "linux"'

ansible/roles/package_manager/files/freeze_kernel.conf

@@ -0,0 +1,2 @@
+[options]
+IgnorePkg   = linux linux-headers

ansible/roles/package_manager/files/mirrorlist

@@ -1,17 +1,15 @@
+# Server list generated by rankmirrors on 2024-01-30
 ##
 ## Arch Linux repository mirrorlist
 ## Generated on 2023-02-26
 ##
-
 ## Worldwide
 #Server = https://geo.mirror.pkgbuild.com/$repo/os/$arch
 #Server = http://mirror.rackspace.com/archlinux/$repo/os/$arch
 #Server = https://mirror.rackspace.com/archlinux/$repo/os/$arch
-
 ## Argentina
 #Server = http://mirrors.eze.sysarmy.com/archlinux/$repo/os/$arch
 #Server = https://mirrors.eze.sysarmy.com/archlinux/$repo/os/$arch
-
 ## Australia
 #Server = https://mirror.aarnet.edu.au/pub/archlinux/$repo/os/$arch
 #Server = http://archlinux.mirror.digitalpacific.com.au/$repo/os/$arch
@@ -28,7 +26,6 @@
 #Server = http://ftp.swin.edu.au/archlinux/$repo/os/$arch
 #Server = http://mirrors.wale.id.au/archlinux/$repo/os/$arch
 #Server = https://mirrors.wale.id.au/archlinux/$repo/os/$arch
-
 ## Austria
 #Server = http://mirror.alwyzon.net/archlinux/$repo/os/$arch
 #Server = https://mirror.alwyzon.net/archlinux/$repo/os/$arch
@@ -37,26 +34,20 @@
 #Server = https://at.arch.mirror.kescher.at/$repo/os/$arch
 #Server = http://mirror.reisenbauer.ee/archlinux/$repo/os/$arch
 #Server = https://mirror.reisenbauer.ee/archlinux/$repo/os/$arch
-
 ## Azerbaijan
 #Server = http://mirror.yer.az/archlinux/$repo/os/$arch
 #Server = https://mirror.yer.az/archlinux/$repo/os/$arch
-
 ## Bangladesh
 #Server = http://mirror.xeonbd.com/archlinux/$repo/os/$arch
-
 ## Belarus
 #Server = http://ftp.byfly.by/pub/archlinux/$repo/os/$arch
 #Server = http://mirror.datacenter.by/pub/archlinux/$repo/os/$arch
-
 ## Belgium
 #Server = http://archlinux.cu.be/$repo/os/$arch
 #Server = http://archlinux.mirror.kangaroot.net/$repo/os/$arch
 #Server = http://mirror.tiguinet.net/arch/$repo/os/$arch
-
 ## Bosnia and Herzegovina
 #Server = http://archlinux.mirror.ba/$repo/os/$arch
-
 ## Brazil
 #Server = http://br.mirror.archlinux-br.org/$repo/os/$arch
 #Server = http://archlinux.c3sl.ufpr.br/$repo/os/$arch
@@ -67,7 +58,6 @@
 #Server = http://mirror.ufam.edu.br/archlinux/$repo/os/$arch
 #Server = http://mirror.ufscar.br/archlinux/$repo/os/$arch
 #Server = https://mirror.ufscar.br/archlinux/$repo/os/$arch
-
 ## Bulgaria
 #Server = https://mirror.archlinux.bg/$repo/os/$arch
 #Server = https://mirror.darklinux.uk/archlinux/$repo/os/$arch
@@ -77,11 +67,9 @@
 #Server = https://mirror.telepoint.bg/archlinux/$repo/os/$arch
 #Server = http://mirrors.uni-plovdiv.net/archlinux/$repo/os/$arch
 #Server = https://mirrors.uni-plovdiv.net/archlinux/$repo/os/$arch
-
 ## Cambodia
 #Server = http://mirror.sabay.com.kh/archlinux/$repo/os/$arch
 #Server = https://mirror.sabay.com.kh/archlinux/$repo/os/$arch
-
 ## Canada
 #Server = http://mirror.0xem.ma/arch/$repo/os/$arch
 #Server = https://mirror.0xem.ma/arch/$repo/os/$arch
@@ -102,14 +90,12 @@
 #Server = https://mirror.scd31.com/arch/$repo/os/$arch
 #Server = http://mirror.xenyth.net/archlinux/$repo/os/$arch
 #Server = https://mirror.xenyth.net/archlinux/$repo/os/$arch
-
 ## Chile
 #Server = http://mirror.anquan.cl/archlinux/$repo/os/$arch
 #Server = https://mirror.anquan.cl/archlinux/$repo/os/$arch
 #Server = http://mirror.archlinux.cl/$repo/os/$arch
 #Server = http://mirror.ufro.cl/archlinux/$repo/os/$arch
 #Server = https://mirror.ufro.cl/archlinux/$repo/os/$arch
-
 ## China
 #Server = http://mirrors.163.com/archlinux/$repo/os/$arch
 #Server = http://mirrors.aliyun.com/archlinux/$repo/os/$arch
@@ -139,15 +125,12 @@
 #Server = https://mirrors.wsyu.edu.cn/archlinux/$repo/os/$arch
 #Server = https://mirrors.xjtu.edu.cn/archlinux/$repo/os/$arch
 #Server = http://mirrors.zju.edu.cn/archlinux/$repo/os/$arch
-
 ## Colombia
 #Server = http://edgeuno-bog2.mm.fcix.net/archlinux/$repo/os/$arch
 #Server = https://edgeuno-bog2.mm.fcix.net/archlinux/$repo/os/$arch
 #Server = http://mirrors.udenar.edu.co/archlinux/$repo/os/$arch
-
 ## Croatia
 #Server = http://archlinux.iskon.hr/$repo/os/$arch
-
 ## Czechia
 #Server = http://mirror.dkm.cz/archlinux/$repo/os/$arch
 #Server = https://mirror.dkm.cz/archlinux/$repo/os/$arch
@@ -163,25 +146,21 @@
 #Server = http://ftp.sh.cvut.cz/arch/$repo/os/$arch
 #Server = https://ftp.sh.cvut.cz/arch/$repo/os/$arch
 #Server = http://mirror.vpsfree.cz/archlinux/$repo/os/$arch
-
 ## Denmark
 #Server = http://mirrors.dotsrc.org/archlinux/$repo/os/$arch
 #Server = https://mirrors.dotsrc.org/archlinux/$repo/os/$arch
 #Server = http://mirror.one.com/archlinux/$repo/os/$arch
 #Server = https://mirror.one.com/archlinux/$repo/os/$arch
 #Server = https://mirror.safe-con.dk/archlinux/$repo/os/$arch
-
 ## Ecuador
 #Server = http://mirror.cedia.org.ec/archlinux/$repo/os/$arch
 #Server = http://mirror.espoch.edu.ec/archlinux/$repo/os/$arch
 #Server = http://mirror.uta.edu.ec/archlinux/$repo/os/$arch
-
 ## Estonia
 #Server = http://mirror.cspacehostings.com/archlinux/$repo/os/$arch
 #Server = https://mirror.cspacehostings.com/archlinux/$repo/os/$arch
 #Server = http://mirrors.xtom.ee/archlinux/$repo/os/$arch
 #Server = https://mirrors.xtom.ee/archlinux/$repo/os/$arch
-
 ## Finland
 #Server = https://arch.mcstrugs.org/$repo/os/$arch
 #Server = http://mirror.arctic.lol/ArchMirror/$repo/os/$arch
@@ -195,7 +174,6 @@
 #Server = https://mirror.wuki.li/archlinux/$repo/os/$arch
 #Server = http://arch.yhtez.xyz/$repo/os/$arch
 #Server = https://arch.yhtez.xyz/$repo/os/$arch
-
 ## France
 #Server = http://archlinux.de-labrusse.fr/$repo/os/$arch
 #Server = http://mirror.archlinux.ikoula.com/archlinux/$repo/os/$arch
@@ -239,11 +217,9 @@
 #Server = https://mirroir.wptheme.fr/archlinux/$repo/os/$arch
 #Server = http://arch.yourlabs.org/$repo/os/$arch
 #Server = https://arch.yourlabs.org/$repo/os/$arch
-
 ## Georgia
 #Server = http://archlinux.grena.ge/$repo/os/$arch
 #Server = https://archlinux.grena.ge/$repo/os/$arch
-
 ## Germany
 #Server = http://mirror.23m.com/archlinux/$repo/os/$arch
 #Server = https://mirror.23m.com/archlinux/$repo/os/$arch
@@ -346,14 +322,12 @@
 #Server = https://mirrors.xtom.de/archlinux/$repo/os/$arch
 #Server = http://arch.mirror.zachlge.org/$repo/os/$arch
 #Server = https://arch.mirror.zachlge.org/$repo/os/$arch
-
 ## Greece
 #Server = http://ftp.cc.uoc.gr/mirrors/linux/archlinux/$repo/os/$arch
 #Server = https://repo.greeklug.gr/data/pub/linux/archlinux/$repo/os/$arch
 #Server = http://mirrors.myaegean.gr/linux/archlinux/$repo/os/$arch
 #Server = http://ftp.ntua.gr/pub/linux/archlinux/$repo/os/$arch
 #Server = http://ftp.otenet.gr/linux/archlinux/$repo/os/$arch
-
 ## Hong Kong
 #Server = https://asia.mirror.pkgbuild.com/$repo/os/$arch
 #Server = http://mirror-hk.koddos.net/archlinux/$repo/os/$arch
@@ -363,7 +337,6 @@
 #Server = https://arch-mirror.wtako.net/$repo/os/$arch
 #Server = http://mirror.xtom.com.hk/archlinux/$repo/os/$arch
 #Server = https://mirror.xtom.com.hk/archlinux/$repo/os/$arch
-
 ## Hungary
 #Server = https://ftp.ek-cer.hu/pub/mirrors/ftp.archlinux.org/$repo/os/$arch
 #Server = http://archmirror.hbit.sztaki.hu/archlinux/$repo/os/$arch
@@ -373,11 +346,9 @@
 #Server = https://nova.quantum-mirror.hu/mirrors/pub/archlinux/$repo/os/$arch
 #Server = https://quantum-mirror.hu/mirrors/pub/archlinux/$repo/os/$arch
 #Server = https://super.quantum-mirror.hu/mirrors/pub/archlinux/$repo/os/$arch
-
 ## Iceland
 #Server = http://mirror.system.is/arch/$repo/os/$arch
 #Server = https://mirror.system.is/arch/$repo/os/$arch
-
 ## India
 #Server = https://mirrors.abhy.me/archlinux/$repo/os/$arch
 #Server = https://mirror.albony.xyz/archlinux/$repo/os/$arch
@@ -392,7 +363,6 @@
 #Server = https://mirrors.piconets.webwerks.in/archlinux-mirror/$repo/os/$arch
 #Server = http://mirror.sahil.world/archlinux/$repo/os/$arch
 #Server = https://mirror.sahil.world/archlinux/$repo/os/$arch
-
 ## Indonesia
 #Server = http://mirror.cloudweeb.com/archlinux/$repo/os/$arch
 #Server = http://mirror.faizuladib.com/archlinux/$repo/os/$arch
@@ -412,7 +382,6 @@
 #Server = http://suro.ubaya.ac.id/archlinux/$repo/os/$arch
 #Server = http://mirror.telkomuniversity.ac.id/archlinux/$repo/os/$arch
 #Server = https://mirror.telkomuniversity.ac.id/archlinux/$repo/os/$arch
-
 ## Iran
 #Server = http://mirror.arvancloud.com/archlinux/$repo/os/$arch
 #Server = https://mirror.arvancloud.com/archlinux/$repo/os/$arch
@@ -424,18 +393,15 @@
 #Server = http://mirror.nak-mci.ir/arch/$repo/os/$arch
 #Server = http://mirror.rasanegar.com/archlinux/$repo/os/$arch
 #Server = https://mirror.rasanegar.com/archlinux/$repo/os/$arch
-
 ## Ireland
 #Server = http://ftp.heanet.ie/mirrors/ftp.archlinux.org/$repo/os/$arch
 #Server = https://ftp.heanet.ie/mirrors/ftp.archlinux.org/$repo/os/$arch
-
 ## Israel
 #Server = http://archlinux.interhost.co.il/$repo/os/$arch
 #Server = https://archlinux.interhost.co.il/$repo/os/$arch
 #Server = http://mirror.isoc.org.il/pub/archlinux/$repo/os/$arch
 #Server = https://mirror.isoc.org.il/pub/archlinux/$repo/os/$arch
 #Server = https://archlinux.mivzakim.net/$repo/os/$arch
-
 ## Italy
 #Server = https://archmirror.it/repos/$repo/os/$arch
 #Server = http://archlinux.mirror.garr.it/archlinux/$repo/os/$arch
@@ -444,7 +410,6 @@
 #Server = https://archlinux.mirror.server24.net/$repo/os/$arch
 #Server = http://mirror.spazioincloud.it/archlinux/$repo/os/$arch
 #Server = https://mirror.spazioincloud.it/archlinux/$repo/os/$arch
-
 ## Japan
 #Server = http://mirrors.cat.net/archlinux/$repo/os/$arch
 #Server = https://mirrors.cat.net/archlinux/$repo/os/$arch
@@ -452,35 +417,28 @@
 #Server = http://ftp.jaist.ac.jp/pub/Linux/ArchLinux/$repo/os/$arch
 #Server = https://ftp.jaist.ac.jp/pub/Linux/ArchLinux/$repo/os/$arch
 #Server = https://mirror.saebasol.org/archlinux/$repo/os/$arch
-
 ## Kazakhstan
 #Server = http://mirror.hoster.kz/archlinux/$repo/os/$arch
 #Server = https://mirror.hoster.kz/archlinux/$repo/os/$arch
 #Server = http://mirror.ps.kz/archlinux/$repo/os/$arch
 #Server = https://mirror.ps.kz/archlinux/$repo/os/$arch
-
 ## Kenya
 #Server = http://archlinux.mirror.liquidtelecom.com/$repo/os/$arch
 #Server = https://archlinux.mirror.liquidtelecom.com/$repo/os/$arch
-
 ## Latvia
 #Server = http://archlinux.koyanet.lv/archlinux/$repo/os/$arch
 #Server = https://archlinux.koyanet.lv/archlinux/$repo/os/$arch
-
 ## Lithuania
 #Server = http://mirrors.atviras.lt/archlinux/$repo/os/$arch
 #Server = https://mirrors.atviras.lt/archlinux/$repo/os/$arch
 #Server = http://mirrors.ims.nksc.lt/archlinux/$repo/os/$arch
 #Server = https://mirrors.ims.nksc.lt/archlinux/$repo/os/$arch
-
 ## Luxembourg
 #Server = http://archmirror.xyz/archlinux/$repo/os/$arch
 #Server = https://archmirror.xyz/archlinux/$repo/os/$arch
 #Server = http://archlinux.mirror.root.lu/$repo/os/$arch
-
 ## Mexico
 #Server = https://arch.jsc.mx/$repo/os/$arch
-
 ## Moldova
 #Server = http://md.mirrors.hacktegic.com/archlinux/$repo/os/$arch
 #Server = https://md.mirrors.hacktegic.com/archlinux/$repo/os/$arch
@@ -488,11 +446,9 @@
 #Server = https://mirror.ihost.md/archlinux/$repo/os/$arch
 #Server = http://mirror.mangohost.net/archlinux/$repo/os/$arch
 #Server = https://mirror.mangohost.net/archlinux/$repo/os/$arch
-
 ## Monaco
 #Server = http://archlinux.qontinuum.space/archlinux/$repo/os/$arch
 #Server = https://archlinux.qontinuum.space/archlinux/$repo/os/$arch
-
 ## Netherlands
 #Server = http://mirror.cj2.nl/archlinux/$repo/os/$arch
 #Server = https://mirror.cj2.nl/archlinux/$repo/os/$arch
@@ -531,12 +487,10 @@
 #Server = https://mirror-archlinux.webruimtehosting.nl/$repo/os/$arch
 #Server = http://mirrors.xtom.nl/archlinux/$repo/os/$arch
 #Server = https://mirrors.xtom.nl/archlinux/$repo/os/$arch
-
 ## New Caledonia
 #Server = http://mirror.lagoon.nc/pub/archlinux/$repo/os/$arch
 #Server = http://archlinux.nautile.nc/archlinux/$repo/os/$arch
 #Server = https://archlinux.nautile.nc/archlinux/$repo/os/$arch
-
 ## New Zealand
 #Server = http://mirror.2degrees.nz/archlinux/$repo/os/$arch
 #Server = https://mirror.2degrees.nz/archlinux/$repo/os/$arch
@@ -545,13 +499,11 @@
 #Server = https://archlinux.ourhome.kiwi/$repo/os/$arch
 #Server = http://mirror.smith.geek.nz/archlinux/$repo/os/$arch
 #Server = https://mirror.smith.geek.nz/archlinux/$repo/os/$arch
-
 ## North Macedonia
 #Server = http://arch.softver.org.mk/archlinux/$repo/os/$arch
 #Server = http://mirror.onevip.mk/archlinux/$repo/os/$arch
 #Server = http://mirror.t-home.mk/archlinux/$repo/os/$arch
 #Server = https://mirror.t-home.mk/archlinux/$repo/os/$arch
-
 ## Norway
 #Server = http://mirror.archlinux.no/$repo/os/$arch
 #Server = https://mirror.archlinux.no/$repo/os/$arch
@@ -561,10 +513,8 @@
 #Server = http://mirror.neuf.no/archlinux/$repo/os/$arch
 #Server = https://mirror.neuf.no/archlinux/$repo/os/$arch
 #Server = http://mirror.terrahost.no/linux/archlinux/$repo/os/$arch
-
 ## Paraguay
 #Server = http://archlinux.mirror.py/archlinux/$repo/os/$arch
-
 ## Poland
 #Server = https://mirror.eloteam.tk/archlinux/$repo/os/$arch
 #Server = http://ftp.icm.edu.pl/pub/Linux/dist/archlinux/$repo/os/$arch
@@ -582,7 +532,6 @@
 #Server = http://repo.skni.umcs.pl/archlinux/$repo/os/$arch
 #Server = https://repo.skni.umcs.pl/archlinux/$repo/os/$arch
 #Server = http://ftp.vectranet.pl/archlinux/$repo/os/$arch
-
 ## Portugal
 #Server = http://glua.ua.pt/pub/archlinux/$repo/os/$arch
 #Server = https://glua.ua.pt/pub/archlinux/$repo/os/$arch
@@ -590,7 +539,6 @@
 #Server = https://ftp.rnl.tecnico.ulisboa.pt/pub/archlinux/$repo/os/$arch
 #Server = http://mirrors.up.pt/pub/archlinux/$repo/os/$arch
 #Server = https://mirrors.up.pt/pub/archlinux/$repo/os/$arch
-
 ## Romania
 #Server = http://mirrors.chroot.ro/archlinux/$repo/os/$arch
 #Server = https://mirrors.chroot.ro/archlinux/$repo/os/$arch
@@ -609,7 +557,6 @@
 #Server = https://mirrors.nxthost.com/archlinux/$repo/os/$arch
 #Server = http://mirrors.pidginhost.com/arch/$repo/os/$arch
 #Server = https://mirrors.pidginhost.com/arch/$repo/os/$arch
-
 ## Russia
 #Server = http://mirror.kamtv.ru/archlinux/$repo/os/$arch
 #Server = https://mirror.kamtv.ru/archlinux/$repo/os/$arch
@@ -628,14 +575,11 @@
 #Server = http://mirror.yandex.ru/archlinux/$repo/os/$arch
 #Server = https://mirror.yandex.ru/archlinux/$repo/os/$arch
 #Server = http://archlinux.zepto.cloud/$repo/os/$arch
-
 ## Réunion
 #Server = http://arch.mithril.re/$repo/os/$arch
-
 ## Serbia
 #Server = http://arch.petarmaric.com/$repo/os/$arch
 #Server = http://mirror.pmf.kg.ac.rs/archlinux/$repo/os/$arch
-
 ## Singapore
 #Server = http://mirror.0x.sg/archlinux/$repo/os/$arch
 #Server = https://mirror.0x.sg/archlinux/$repo/os/$arch
@@ -649,18 +593,15 @@
 #Server = http://ossmirror.mycloud.services/os/linux/archlinux/$repo/os/$arch
 #Server = http://mirror.sg.gs/archlinux/$repo/os/$arch
 #Server = https://mirror.sg.gs/archlinux/$repo/os/$arch
-
 ## Slovakia
 #Server = http://mirror.lnx.sk/pub/linux/archlinux/$repo/os/$arch
 #Server = https://mirror.lnx.sk/pub/linux/archlinux/$repo/os/$arch
 #Server = http://tux.rainside.sk/archlinux/$repo/os/$arch
-
 ## Slovenia
 #Server = http://archimonde.ts.si/archlinux/$repo/os/$arch
 #Server = https://archimonde.ts.si/archlinux/$repo/os/$arch
 #Server = http://mirror.tux.si/arch/$repo/os/$arch
 #Server = https://mirror.tux.si/arch/$repo/os/$arch
-
 ## South Africa
 #Server = http://archlinux.za.mirror.allworldit.com/archlinux/$repo/os/$arch
 #Server = https://archlinux.za.mirror.allworldit.com/archlinux/$repo/os/$arch
@@ -668,7 +609,6 @@
 #Server = http://mirror.is.co.za/mirror/archlinux.org/$repo/os/$arch
 #Server = http://mirrors.urbanwave.co.za/archlinux/$repo/os/$arch
 #Server = https://mirrors.urbanwave.co.za/archlinux/$repo/os/$arch
-
 ## South Korea
 #Server = http://mirror.anigil.com/archlinux/$repo/os/$arch
 #Server = https://mirror.anigil.com/archlinux/$repo/os/$arch
@@ -683,13 +623,11 @@
 #Server = https://mirror.misakamikoto.network/archlinux/$repo/os/$arch
 #Server = http://mirror.premi.st/archlinux/$repo/os/$arch
 #Server = https://mirror.premi.st/archlinux/$repo/os/$arch
-
 ## Spain
 #Server = https://mirror.cloroformo.org/archlinux/$repo/os/$arch
 #Server = http://mirror.librelabucm.org/archlinux/$repo/os/$arch
 #Server = https://mirror.librelabucm.org/archlinux/$repo/os/$arch
 #Server = http://ftp.rediris.es/mirror/archlinux/$repo/os/$arch
-
 ## Sweden
 #Server = http://ftp.acc.umu.se/mirror/archlinux/$repo/os/$arch
 #Server = https://ftp.acc.umu.se/mirror/archlinux/$repo/os/$arch
@@ -700,7 +638,6 @@
 #Server = http://ftp.myrveln.se/pub/linux/archlinux/$repo/os/$arch
 #Server = https://ftp.myrveln.se/pub/linux/archlinux/$repo/os/$arch
 #Server = https://mirror.osbeck.com/archlinux/$repo/os/$arch
-
 ## Switzerland
 #Server = http://pkg.adfinis.com/archlinux/$repo/os/$arch
 #Server = https://pkg.adfinis.com/archlinux/$repo/os/$arch
@@ -713,7 +650,6 @@
 #Server = https://theswissbay.ch/archlinux/$repo/os/$arch
 #Server = https://mirror.ungleich.ch/mirror/packages/archlinux/$repo/os/$arch
 #Server = https://mirror.worldhotspot.org/archlinux/$repo/os/$arch
-
 ## Taiwan
 #Server = http://mirror.archlinux.tw/ArchLinux/$repo/os/$arch
 #Server = https://mirror.archlinux.tw/ArchLinux/$repo/os/$arch
@@ -725,19 +661,16 @@
 #Server = http://ftp.tku.edu.tw/Linux/ArchLinux/$repo/os/$arch
 #Server = http://ftp.yzu.edu.tw/Linux/archlinux/$repo/os/$arch
 #Server = https://ftp.yzu.edu.tw/Linux/archlinux/$repo/os/$arch
-
 ## Thailand
 #Server = https://mirror.cyberbits.asia/archlinux/$repo/os/$arch
 #Server = http://mirror.kku.ac.th/archlinux/$repo/os/$arch
 #Server = https://mirror.kku.ac.th/archlinux/$repo/os/$arch
 #Server = http://mirror2.totbb.net/archlinux/$repo/os/$arch
-
 ## Turkey
 #Server = http://ftp.linux.org.tr/archlinux/$repo/os/$arch
 #Server = http://depo.turkiye.linux.web.tr/archlinux/$repo/os/$arch
 #Server = https://depo.turkiye.linux.web.tr/archlinux/$repo/os/$arch
 #Server = http://mirror.veriteknik.net.tr/archlinux/$repo/os/$arch
-
 ## Ukraine
 #Server = http://archlinux.astra.in.ua/$repo/os/$arch
 #Server = https://archlinux.astra.in.ua/$repo/os/$arch
@@ -751,7 +684,6 @@
 #Server = https://mirror.mirohost.net/archlinux/$repo/os/$arch
 #Server = http://mirrors.nix.org.ua/linux/archlinux/$repo/os/$arch
 #Server = https://mirrors.nix.org.ua/linux/archlinux/$repo/os/$arch
-
 ## United Kingdom
 #Server = http://archlinux.uk.mirror.allworldit.com/archlinux/$repo/os/$arch
 #Server = https://archlinux.uk.mirror.allworldit.com/archlinux/$repo/os/$arch
@@ -776,152 +708,18 @@
 #Server = https://mirrors.ukfast.co.uk/sites/archlinux.org/$repo/os/$arch
 #Server = http://mirror.cov.ukservers.com/archlinux/$repo/os/$arch
 #Server = https://mirror.cov.ukservers.com/archlinux/$repo/os/$arch
-
 ## United States
 #Server = http://mirrors.acm.wpi.edu/archlinux/$repo/os/$arch
-Server = http://mirrors.advancedhosters.com/archlinux/$repo/os/$arch
-Server = http://mirrors.aggregate.org/archlinux/$repo/os/$arch
-Server = http://il.us.mirror.archlinux-br.org/$repo/os/$arch
-Server = http://mirror.arizona.edu/archlinux/$repo/os/$arch
-Server = https://mirror.arizona.edu/archlinux/$repo/os/$arch
-Server = http://arlm.tyzoid.com/$repo/os/$arch
-Server = https://arlm.tyzoid.com/$repo/os/$arch
-Server = https://mirror.ava.dev/archlinux/$repo/os/$arch
-Server = http://mirrors.bloomu.edu/archlinux/$repo/os/$arch
-Server = https://mirrors.bloomu.edu/archlinux/$repo/os/$arch
-Server = http://ca.us.mirror.archlinux-br.org/$repo/os/$arch
-Server = http://mirrors.cat.pdx.edu/archlinux/$repo/os/$arch
-Server = http://mirror.cc.columbia.edu/pub/linux/archlinux/$repo/os/$arch
-Server = http://mirror.clarkson.edu/archlinux/$repo/os/$arch
-Server = https://mirror.clarkson.edu/archlinux/$repo/os/$arch
-Server = http://arch.mirror.constant.com/$repo/os/$arch
-Server = https://arch.mirror.constant.com/$repo/os/$arch
-Server = http://mirror.cs.pitt.edu/archlinux/$repo/os/$arch
-Server = http://mirror.cs.vt.edu/pub/ArchLinux/$repo/os/$arch
-Server = http://mirror.cybersecurity.nmt.edu/archlinux/$repo/os/$arch
-Server = https://mirror.cybersecurity.nmt.edu/archlinux/$repo/os/$arch
-Server = http://distro.ibiblio.org/archlinux/$repo/os/$arch
-Server = http://mirror.es.its.nyu.edu/archlinux/$repo/os/$arch
-Server = http://mirror.ette.biz/archlinux/$repo/os/$arch
-Server = https://mirror.ette.biz/archlinux/$repo/os/$arch
-Server = http://codingflyboy.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://coresite.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://forksystems.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://irltoolkit.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://mirror.fcix.net/archlinux/$repo/os/$arch
-Server = http://mnvoip.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://nnenix.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://ridgewireless.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://southfront.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://uvermont.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://ziply.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://codingflyboy.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://coresite.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://forksystems.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://irltoolkit.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://mirror.fcix.net/archlinux/$repo/os/$arch
-Server = https://mnvoip.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://nnenix.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://ridgewireless.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://southfront.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://uvermont.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://ziply.mm.fcix.net/archlinux/$repo/os/$arch
-Server = http://mirror.fossable.org/archlinux/$repo/os/$arch
-Server = https://america.mirror.pkgbuild.com/$repo/os/$arch
-Server = http://mirrors.gigenet.com/archlinux/$repo/os/$arch
-Server = http://www.gtlib.gatech.edu/pub/archlinux/$repo/os/$arch
-Server = http://mirror.hackingand.coffee/arch/$repo/os/$arch
-Server = https://mirror.hackingand.coffee/arch/$repo/os/$arch
-Server = https://mirror.hodgepodge.dev/archlinux/$repo/os/$arch
-Server = http://mirror.hostup.org/archlinux/$repo/os/$arch
-Server = https://mirror.hostup.org/archlinux/$repo/os/$arch
-Server = http://arch.hu.fo/archlinux/$repo/os/$arch
-Server = https://arch.hu.fo/archlinux/$repo/os/$arch
-Server = http://repo.ialab.dsu.edu/archlinux/$repo/os/$arch
-Server = https://repo.ialab.dsu.edu/archlinux/$repo/os/$arch
-Server = https://arch.mirror.ivo.st/$repo/os/$arch
-Server = http://mirrors.kernel.org/archlinux/$repo/os/$arch
-Server = https://mirrors.kernel.org/archlinux/$repo/os/$arch
-Server = http://mirror.dal10.us.leaseweb.net/archlinux/$repo/os/$arch
-Server = http://mirror.mia11.us.leaseweb.net/archlinux/$repo/os/$arch
-Server = http://mirror.sfo12.us.leaseweb.net/archlinux/$repo/os/$arch
-Server = http://mirror.wdc1.us.leaseweb.net/archlinux/$repo/os/$arch
-Server = https://mirror.dal10.us.leaseweb.net/archlinux/$repo/os/$arch
-Server = https://mirror.mia11.us.leaseweb.net/archlinux/$repo/os/$arch
-Server = https://mirror.sfo12.us.leaseweb.net/archlinux/$repo/os/$arch
-Server = https://mirror.wdc1.us.leaseweb.net/archlinux/$repo/os/$arch
-Server = http://mirrors.liquidweb.com/archlinux/$repo/os/$arch
-Server = http://mirror.lty.me/archlinux/$repo/os/$arch
-Server = https://mirror.lty.me/archlinux/$repo/os/$arch
-Server = http://mirrors.lug.mtu.edu/archlinux/$repo/os/$arch
-Server = https://mirrors.lug.mtu.edu/archlinux/$repo/os/$arch
-Server = https://m.lqy.me/arch/$repo/os/$arch
-Server = http://mirror.math.princeton.edu/pub/archlinux/$repo/os/$arch
-Server = http://mirror.metrocast.net/archlinux/$repo/os/$arch
-Server = http://mirror.kaminski.io/archlinux/$repo/os/$arch
-Server = https://mirror.kaminski.io/archlinux/$repo/os/$arch
-Server = http://iad.mirrors.misaka.one/archlinux/$repo/os/$arch
-Server = https://iad.mirrors.misaka.one/archlinux/$repo/os/$arch
-Server = http://repo.miserver.it.umich.edu/archlinux/$repo/os/$arch
-Server = http://mirrors.mit.edu/archlinux/$repo/os/$arch
-Server = https://mirrors.mit.edu/archlinux/$repo/os/$arch
-Server = http://mirrors.ocf.berkeley.edu/archlinux/$repo/os/$arch
-Server = https://mirrors.ocf.berkeley.edu/archlinux/$repo/os/$arch
-Server = http://archmirror1.octyl.net/$repo/os/$arch
-Server = https://archmirror1.octyl.net/$repo/os/$arch
-Server = http://ftp.osuosl.org/pub/archlinux/$repo/os/$arch
-Server = https://ftp.osuosl.org/pub/archlinux/$repo/os/$arch
-Server = http://arch.mirrors.pair.com/$repo/os/$arch
-Server = http://dfw.mirror.rackspace.com/archlinux/$repo/os/$arch
-Server = http://iad.mirror.rackspace.com/archlinux/$repo/os/$arch
-Server = http://ord.mirror.rackspace.com/archlinux/$repo/os/$arch
-Server = https://dfw.mirror.rackspace.com/archlinux/$repo/os/$arch
-Server = https://iad.mirror.rackspace.com/archlinux/$repo/os/$arch
-Server = https://ord.mirror.rackspace.com/archlinux/$repo/os/$arch
-Server = http://mirrors.radwebhosting.com/archlinux/$repo/os/$arch
-Server = https://mirrors.radwebhosting.com/archlinux/$repo/os/$arch
-Server = http://plug-mirror.rcac.purdue.edu/archlinux/$repo/os/$arch
-Server = https://plug-mirror.rcac.purdue.edu/archlinux/$repo/os/$arch
-Server = http://mirrors.rit.edu/archlinux/$repo/os/$arch
-Server = https://mirrors.rit.edu/archlinux/$repo/os/$arch
-Server = http://mirrors.rutgers.edu/archlinux/$repo/os/$arch
-Server = https://mirrors.rutgers.edu/archlinux/$repo/os/$arch
-Server = https://mirror2.sandyriver.net/pub/archlinux/$repo/os/$arch
-Server = http://mirror.siena.edu/archlinux/$repo/os/$arch
-Server = http://mirrors.sonic.net/archlinux/$repo/os/$arch
-Server = https://mirrors.sonic.net/archlinux/$repo/os/$arch
-Server = http://mirror.phx1.us.spryservers.net/archlinux/$repo/os/$arch
-Server = https://mirror.phx1.us.spryservers.net/archlinux/$repo/os/$arch
-Server = http://arch.mirror.square-r00t.net/$repo/os/$arch
-Server = https://arch.mirror.square-r00t.net/$repo/os/$arch
-Server = http://mirror.stephen304.com/archlinux/$repo/os/$arch
-Server = https://mirror.stephen304.com/archlinux/$repo/os/$arch
-Server = http://mirror.stjschools.org/arch/$repo/os/$arch
-Server = https://mirror.stjschools.org/arch/$repo/os/$arch
-Server = http://ftp.sudhip.com/archlinux/$repo/os/$arch
-Server = https://ftp.sudhip.com/archlinux/$repo/os/$arch
-Server = http://mirror.pit.teraswitch.com/archlinux/$repo/os/$arch
-Server = https://mirror.pit.teraswitch.com/archlinux/$repo/os/$arch
-Server = https://mirror.the-repo.org/ArchMirror/$repo/os/$arch
-Server = https://mirror.theash.xyz/arch/$repo/os/$arch
-Server = https://mirror.tmmworkshop.com/archlinux/$repo/os/$arch
-Server = http://mirror.umd.edu/archlinux/$repo/os/$arch
-Server = https://mirror.umd.edu/archlinux/$repo/os/$arch
-Server = http://mirrors.vectair.net/archlinux/$repo/os/$arch
-Server = https://mirrors.vectair.net/archlinux/$repo/os/$arch
-Server = http://mirror.vtti.vt.edu/archlinux/$repo/os/$arch
-Server = http://wcbmedia.io:8000/$repo/os/$arch
-Server = http://mirrors.xmission.com/archlinux/$repo/os/$arch
-Server = http://mirrors.xtom.com/archlinux/$repo/os/$arch
-Server = https://mirrors.xtom.com/archlinux/$repo/os/$arch
-Server = https://mirror.zackmyers.io/archlinux/$repo/os/$arch
-Server = https://zxcvfdsa.com/arch/$repo/os/$arch
-
 ## Uzbekistan
 #Server = http://mirror.dc.uz/arch/$repo/os/$arch
 #Server = https://mirror.dc.uz/arch/$repo/os/$arch
-
 ## Vietnam
 #Server = https://mirrors.42tm.tech/archlinux/$repo/os/$arch
 #Server = http://f.archlinuxvn.org/archlinux/$repo/os/$arch
 #Server = http://mirror.bizflycloud.vn/archlinux/$repo/os/$arch
+#Server = https://arch.mirror.constant.com/$repo/os/$arch
+Server = https://iad.mirrors.misaka.one/archlinux/$repo/os/$arch
+Server = https://forksystems.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://mirrors.mit.edu/archlinux/$repo/os/$arch
+Server = https://coresite.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://uvermont.mm.fcix.net/archlinux/$repo/os/$arch

ansible/roles/package_manager/tasks/common.yaml

@@ -3,12 +3,3 @@
 
 - import_tasks: tasks/linux.yaml
   when: 'os_flavor == "linux"'
-
-- include_tasks:
-    file: tasks/peruser.yaml
-    apply:
-      become: yes
-      become_user: "{{ initialize_user }}"
-  loop: "{{ users | dict2items | community.general.json_query('[?value.initialize==`true`].key') }}"
-  loop_control:
-    loop_var: initialize_user

ansible/roles/package_manager/tasks/freebsd.yaml

@@ -65,6 +65,16 @@
   loop:
     - { src: custom.conf.j2, dest: /usr/local/etc/pkg/repos/custom.conf }
 
+- name: Install Configuration
+  when: pkgbase_url is defined
+  template:
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    owner: root
+    group: wheel
+    mode: 0644
+  loop:
+    - { src: pkgbase.conf.j2, dest: /usr/local/etc/pkg/repos/pkgbase.conf }
 # - name: Replace all packages with packages from new repo
 #   command: pkg upgrade -f -y
 #   when: changed_config.changed

ansible/roles/package_manager/tasks/linux.yaml

@@ -39,7 +39,7 @@
     mode: 0644
   loop:
     - /etc/pacman.d/conf.d/blank.conf
-  when: "{{ file_exists | community.general.json_query(sub_query) | first | default(False) }} == False"
+  when: "file_exists | community.general.json_query(sub_query) | first | default(False) == False"
   vars:
     sub_query: "results[?stat.path=='{{ item }}'].stat.exists"
 
@@ -52,6 +52,7 @@
     group: root
   loop:
     - freeze_firefox.conf
+    - freeze_kernel.conf
 
 - name: Install packages
   package:

ansible/roles/package_manager/templates/pkgbase.conf.j2

@@ -0,0 +1,17 @@
+base: {
+    # url: "file:///usr/local/poudriere/data/images/currentznver4-repo/FreeBSD:15:amd64/latest"
+    # url: "file:///update"
+    # url: "https://freebsdpkg.fizz.buzz/pkgbase/currentznver4-repo/FreeBSD:15:amd64/latest",
+    url: "{{ pkgbase_url }}",
+    mirror_type: "none",
+    enabled: yes,
+    # signature_type: "pubkey",
+    # pubkey: "/usr/local/etc/pkg/poudriere.pub",
+    priority: 100
+}
+# poudriere jail -c -j current -v main -a amd64 -m git -D -U https://git.FreeBSD.org/src.git -K GENERIC-NODEBUG -B -b
+# env ABI=FreeBSD:15:amd64 pkg update -f -r base
+# env ABI=FreeBSD:15:amd64 pkg install -r base  -g 'FreeBSD-*'
+
+# for f in /etc/master.passwd /etc/group /etc/sysctl.conf /etc/ssh/sshd_config; do cp -v "$f.pkgsave" "$f"; done
+# pwd_mkdb -p /etc/master.passwd

ansible/roles/poudriere/files/currentznver4_src.conf

@@ -1,13 +1,7 @@
-{% if cpu_opt is defined and cpu_opt %}
+CPUTYPE?=znver4
-CPUTYPE?={{ cpu_opt }}
-{% endif %}
-KERNCONF=CUSTOM
 WITH_MALLOC_PRODUCTION=YES
 WITHOUT_LLVM_ASSERTIONS=YES
 WITH_REPRODUCIBLE_BUILD=YES
-PORTS_MODULES+=graphics/drm-kmod
-PORTS_MODULES+=graphics/gpu-firmware-intel-kmod
-PORTS_MODULES+=net/wireguard-kmod
 
 # Would be fun to experiment with:
 # WITHOUT_SOURCELESS=YES
@@ -31,5 +25,6 @@ WITHOUT_HTML=YES
 WITHOUT_IPFW=YES
 WITHOUT_IPFILTER=YES
 WITHOUT_LLVM_TARGET_ALL=YES
+
 # Commented out because maybe I want email alerts for failing disks
 # WITHOUT_MAIL=YES

ansible/roles/poudriere/files/poudboot

@@ -13,12 +13,12 @@ desc="Poudriere Loop"
 
 load_rc_config $name
 
-: ${poudboot_enable:=YES}
+: ${poudboot_enable:=NO}
 
 command=/usr/sbin/daemon
 pidfile=/var/run/${name}.pid
 
-command_args="-p $pidfile -u root -f -S -T $name poudboot start"
+command_args="-p $pidfile -u root -f -S -T $name nice -n 10 poudboot start"
 
 export PATH="${PATH}:/usr/local/bin"
 run_rc_command "$1"

ansible/roles/poudriere/files/poudboot.bash

@@ -8,6 +8,7 @@ DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 : ${LOCKFILE:="/var/run/poudboot.lock"}
 : ${INFO_DIR:="/opt/poudriere/run_info"}
 : ${PORT_UPDATE_SECONDS:="86400"}
+: ${CLEAN_SECONDS:="1209600"}
 : ${BUILD_SECONDS:="7200"}
 : ${LOG_RETENTION_DAYS:="30"}
 
@@ -67,7 +68,7 @@ function abort_if_jobs_running {
 }
 
 function build {
-    poudriere pkgclean -y "$@"
+    poudriere pkgclean -v -y "$@"
     poudriere bulk -J "${POUDRIERE_JOBS:-1}" "$@"
 }
 
@@ -88,6 +89,7 @@ function cmd_start {
                 mkdir -p "$RUN_DIR"
                 local PORTUPDATE=0
                 local LASTBUILD=0
+                local LASTCLEAN=0
                 if [ -e "$TIMES_FILE" ]; then
                     source "$TIMES_FILE"
                 fi
@@ -97,19 +99,25 @@ function cmd_start {
                     portshaker -U
                     portshaker -M
                     PORTUPDATE=$(date +%s)
-                    # Cleanup old unused dist files
-                    poudriere distclean -y -p "$PORTS" -f /usr/local/etc/poudriere.d/$JAIL-$PORTS-$SET-pkglist
-                    poudriere logclean -y "$LOG_RETENTION_DAYS"
                 fi
                 if [ $((now - LASTBUILD)) -gt "$BUILD_SECONDS" ]; then
                     log "Building ports for $JAIL-$PORTS-$SET"
                     build -j "$JAIL" -p "$PORTS" -z "$SET" -f /usr/local/etc/poudriere.d/$JAIL-$PORTS-$SET-pkglist
                     LASTBUILD=$(date +%s)
                 fi
+                if [ $((now - LASTCLEAN)) -gt "$CLEAN_SECONDS" ]; then
+                    log "Cleaning for $JAIL-$PORTS-$SET"
+                    # Cleanup old unused dist files
+                    poudriere distclean -v -y -p "$PORTS" -f /usr/local/etc/poudriere.d/$JAIL-$PORTS-$SET-pkglist
+                    poudriere logclean -v -y "$LOG_RETENTION_DAYS"
+                    # TODO: Should clean be a global ?
+                    LASTCLEAN=$(date +%s)
+                fi
 
                 cat > "$TIMES_FILE" <<EOF
 PORTUPDATE=$PORTUPDATE
 LASTBUILD=$LASTBUILD
+LASTCLEAN=$LASTCLEAN
 EOF
             )
         done