summaryrefslogtreecommitdiffstatshomepage
path: root/etc
Commit message (Expand)AuthorAgeFilesLines
* Bind TPM pcrlock policy to GPT measurementssommerfeld2026-09-301-1/+2
* Require signed PCR 11 policy for TPM root unlocksommerfeld2026-09-301-0/+6
* Enable signed initrd and NvPCR measurementssommerfeld2026-09-3012-12/+26
* Mask unused NvPCR measurements on the Arch hostsommerfeld2026-09-307-0/+9
* Keep the bond DHCP identity stable across failoversommerfeld2026-09-181-1/+3
* Preserve member MAC addresses in the network bondsommerfeld2026-09-181-0/+1
* Configure LXD and AppArmor on the Arch hostsommerfeld2026-09-173-2/+10
* Maintain the approved PCR 7 unlock policysommerfeld2026-09-171-0/+9
* Prefer the dock camera and use the camera portalsommerfeld2026-09-172-0/+14
* Use kernel console keymapsommerfeld2026-08-141-3/+1
* Remove unused libvirt configurationsommerfeld2026-08-142-29/+0
* Remove former work environment configurationsommerfeld2026-08-142-21/+0
* Update locale definitionssommerfeld2026-08-141-0/+1
* Add network document scanningsommerfeld2026-08-141-0/+1
* Prune stale dotfiles commentarysommerfeld2026-07-025-41/+6
* Remove SNX Waybar integrationsommerfeld2026-07-021-32/+0
* Reduce Arch package surfacesommerfeld2026-06-185-2/+14
* Reduce AUR package surfacesommerfeld2026-06-153-19/+30
* Move more host tooling to Nixsommerfeld2026-06-052-1/+54
* feat(kernel): swap stock linux for linux-lts as fallback kernelsommerfeld2026-05-293-26/+37
* feat(etc/resolved): forward single-label queries upstreamsommerfeld2026-05-291-0/+8
* refactor(eer): install external-editor-revived via nix on the hostsommerfeld2026-05-291-6/+0
* refactor(flatpak): route mpv and thunderbird via flatpak; drop system pkgssommerfeld2026-05-291-0/+6
* refactor(suspend): gate suspend on AC, drop bespoke zellij inhibitsommerfeld2026-05-291-0/+14
* feat(suspend): re-enable suspend on s2idle, drop diagnostic scaffoldingsommerfeld2026-05-294-23/+8
* fix(suspend): switch hardened to s2idle, keep console alive, archive pstoresommerfeld2026-05-291-1/+1
* fix(suspend): load intel_lpss_pci from initramfs (Arch wiki touchpad fix)sommerfeld2026-05-293-6/+5
* feat(suspend): hardened-only init_on_free=0 + hang-detection cmdlinesommerfeld2026-05-292-2/+7
* feat(suspend): disable system suspend until hardened kernel resume issue is f...sommerfeld2026-05-291-0/+17
* fix(iwd): revert MAC randomization — broke DHCPsommerfeld2026-05-291-23/+0
* feat(suspend): bounce snx-rs around system sleepsommerfeld2026-05-291-0/+45
* fix(hardened): restore podman compatibility on linux-hardenedsommerfeld2026-05-291-0/+4
* Revert "refactor(boot): drop linux-hardened-fallback UKI"sommerfeld2026-05-291-1/+4
* refactor(boot): drop linux-hardened-fallback UKIsommerfeld2026-05-291-4/+1
* feat(boot): add linux-hardened as parallel UKIsommerfeld2026-05-291-0/+19
* feat(iwd): per-SSID MAC randomisationsommerfeld2026-05-291-0/+23
* feat(polkit): restrict systemd + udisks system actions to active local sessionssommerfeld2026-05-292-0/+26
* feat(sysctl): kernel info-disclosure + ICMP/IPv6 RA hardeningsommerfeld2026-05-291-1/+39
* fix(nftables): waydroid DHCP/DNS ingress, drop manual NAT tablesommerfeld2026-05-221-19/+9
* fix(nftables): add MASQUERADE for waydroid0sommerfeld2026-05-221-3/+19
* Revert "fix(sysctl): enable net.ipv4.ip_forward for NAT bridges"sommerfeld2026-05-221-5/+0
* fix(sysctl): enable net.ipv4.ip_forward for NAT bridgessommerfeld2026-05-221-0/+5
* fix(net): positive-match physical NICs into bond0sommerfeld2026-05-221-14/+9
* fix(net): keep waydroid0 out of bond0, allow it through nftablessommerfeld2026-05-222-2/+10
* fix(pacman): correct llama.cpp-vulkan IgnorePkg name (was llama-cpp-vulkan)sommerfeld2026-05-191-3/+3
* feat: teams autostart, llama-cpp-vulkan ignore, snxctl-chromium wrappersommerfeld2026-05-141-1/+3
* fix(nftables): use iifname/oifname for virbr0 so rules load before libvirtdsommerfeld2026-05-131-4/+6
* fix(nftables): allow DHCP/DNS and forwarding for libvirt virbr0sommerfeld2026-05-131-0/+16
* fix(networkd): exclude virtual taps/bridges from bond0 enslavementsommerfeld2026-05-131-0/+10
* feat: add libvirt/qemu/swtpm stack for Sii Intune VMsommerfeld2026-05-131-0/+13
generated by cgit v1.3.1 (git 2.54.0) at 2026-10-14 21:30:51 +0000