karim
faaba27ed4
- core/display.py: write_positions() persists Arrangement's drag-and-drop
layout into niri's config.kdl (one output { position x= y= } per output),
validated via `niri validate` on a temp copy with a .kdl.bak backup before
writing — same pattern as core/keybindings.py's rebind(). Previously the
page only ever called `niri msg output … position set`, which niri treats
as live-only and drops on the next login/reload.
- gui/pages/display.py: Arrangement's Apply now runs each output's `niri msg
output … position set` synchronously instead of queuing them all on the
single-shot ProcessRunner (which rejects a second run() while the first is
still async) — a 2-monitor apply previously moved only the first output
and silently dropped the rest. _dock_to_nearest keeps the free axis at the
dragged position (so a shorter display can sit vertically centered next to
a taller rotated one) rather than forcing corner alignment.
- core/panel.py, files/__init__.py: incidental fixes alongside the above.
- packaging/: signing-key generation script + build-user systemd setup for
the [tanin] AUR auto-rebuild pipeline; PKGBUILD bumped to pkgrel=5.
- src/taninux/browser/: new module for browser theme sync (Fuji accent).
14 lines
924 B
Plaintext
14 lines
924 B
Plaintext
# Passwordless chroot helpers so the daily AUR rebuild runs unattended.
|
|
# Install: sudo install -m440 tanin-aur-update.sudoers /etc/sudoers.d/tanin-aur-update
|
|
# Validate: sudo visudo -cf /etc/sudoers.d/tanin-aur-update
|
|
#
|
|
# Subject is "tanin-build", a dedicated, locked (no password login) system
|
|
# account created by setup-build-user.sh — NOT the human "karim" account.
|
|
# makechrootpkg/arch-nspawn/mkarchroot are effectively unrestricted root (they
|
|
# bind-mount, chroot, and run arbitrary PKGBUILD-controlled commands as root),
|
|
# so this NOPASSWD grant is root-equivalent. Keeping it on a dedicated build
|
|
# account rather than the personal login means a compromised AUR PKGBUILD (or
|
|
# a bug in this pipeline) can't NOPASSWD-root the maintainer's own account —
|
|
# it's contained to whatever tanin-build can already reach.
|
|
tanin-build ALL=(root) NOPASSWD: /usr/bin/makechrootpkg, /usr/bin/arch-nspawn, /usr/bin/mkarchroot
|