<feed xmlns='http://www.w3.org/2005/Atom'>
<title>dotfiles/dot_local/share/snx-rs/bin/executable_xdg-open, branch master</title>
<subtitle>My linux config and rc files</subtitle>
<id>https://git.sommerfeld.dev/dotfiles/atom/dot_local/share/snx-rs/bin/executable_xdg-open?h=master</id>
<link rel='self' href='https://git.sommerfeld.dev/dotfiles/atom/dot_local/share/snx-rs/bin/executable_xdg-open?h=master'/>
<link rel='alternate' type='text/html' href='https://git.sommerfeld.dev/dotfiles/'/>
<updated>2026-05-19T14:16:09Z</updated>
<entry>
<title>revert: drop snxctl-chromium wrapper, snx-rs works with default browser now</title>
<updated>2026-05-19T14:16:09Z</updated>
<author>
<name>sommerfeld</name>
<email>sommerfeld@sommerfeld.dev</email>
</author>
<published>2026-05-19T14:16:09Z</published>
<link rel='alternate' type='text/html' href='https://git.sommerfeld.dev/dotfiles/commit/?id=027fa12fc3fbc138dc8bbbb50b066735943d8b27'/>
<id>urn:sha1:027fa12fc3fbc138dc8bbbb50b066735943d8b27</id>
<content type='text'>
User confirms snx-rs's SAML loopback no longer needs chromium routing.
Remove:

- dot_local/bin/snxctl-chromium             (PATH-override wrapper)
- dot_local/share/snx-rs/bin/xdg-open       (chromium shim)
- snx-rs LibreWolf SAML note in user-overrides.js

The waybar snx-vpn toggle now just runs `snxctl connect` detached,
no wrapper indirection.
</content>
</entry>
<entry>
<title>refactor(snxctl-chromium): drop daemon drop-in, override snxctl's PATH</title>
<updated>2026-05-14T09:58:38Z</updated>
<author>
<name>sommerfeld</name>
<email>sommerfeld@sommerfeld.dev</email>
</author>
<published>2026-05-14T09:58:38Z</published>
<link rel='alternate' type='text/html' href='https://git.sommerfeld.dev/dotfiles/commit/?id=0b506ac67c33939732bdd91d39a8a632bcbe0841'/>
<id>urn:sha1:0b506ac67c33939732bdd91d39a8a632bcbe0841</id>
<content type='text'>
snx-rs.service is a system unit, not --user, so the prior approach of
overriding the daemon's PATH via a systemd drop-in could never apply.
And it wasn't needed anyway: snxctl itself runs opener::open(url)
in-process, so prepending the shim dir to snxctl's PATH is enough.

- Drop dot_config/systemd/user/snx-rs.service.d/10-chromium-saml.conf.
- snxctl-chromium now just sets PATH and exec's snxctl connect.
- xdg-open shim no longer forces --new-window so chromium can reuse a
  warm window (faster SAML round-trip).
</content>
</entry>
<entry>
<title>feat: teams autostart, llama-cpp-vulkan ignore, snxctl-chromium wrapper</title>
<updated>2026-05-14T09:58:37Z</updated>
<author>
<name>sommerfeld</name>
<email>sommerfeld@sommerfeld.dev</email>
</author>
<published>2026-05-14T09:58:37Z</published>
<link rel='alternate' type='text/html' href='https://git.sommerfeld.dev/dotfiles/commit/?id=3fc4705b6c711871a920290feef138694e72d29a'/>
<id>urn:sha1:3fc4705b6c711871a920290feef138694e72d29a</id>
<content type='text'>
systemd/user/teams-{sii,xsight}.service: autostart both Teams flatpak
profiles on sway-session.target login. KillMode=mixed so SIGTERM hits
only the wrapper process — both instances share the same flatpak app
id, so killing by app id would take down the sibling instance. A 15s
SIGKILL fallback covers the case where Electron tray-hides instead of
quitting. Both units listed in systemd-units/user.txt.

etc/pacman.conf: IgnorePkg = llama-cpp-vulkan. The AUR package rebuilds
on every llama.cpp commit (multi-hour build). Update manually with
`paru -S llama-cpp-vulkan` when intended.

snxctl-chromium wrapper:
- dot_local/share/snx-rs/bin/xdg-open: shim that flatpak-runs
  ungoogled-chromium, used only by snx-rs.
- dot_config/systemd/user/snx-rs.service.d/10-chromium-saml.conf:
  drop-in prepending that dir to the daemon's PATH so snx-rs's
  opener-crate call to xdg-open lands in chromium, without affecting
  xdg-open for any other process.
- dot_local/bin/snxctl-chromium: convenience wrapper that
  daemon-reloads and restarts snx-rs.service if the drop-in isn't yet
  applied, then execs `snxctl connect`.

firefox/user-overrides.js: revert the dom.security.https_only_mode.
upgrade_local and network.lna.local-network-to-localhost.skip-checks
prefs — they didn't actually fix the SAML flow. Replaced with a
comment pointing to the wrapper instead.
</content>
</entry>
</feed>
