Gabriel Brown
f33da41cc6
A machine's role is now the interview's first question and the one answer Panama records. Servers get the same shell minus the screen: core packages, nvm, Bun, Claude Code and Codex (desktops get Codex too), linger, rootless ports from 80, firewalld, the nginx-bridge network, and a nightly image updater that replaced watchtower for cause. server/containers/ carries junior's 23 compose services -- secrets moved to per-machine .env files that never enter this public repo, every transformed compose proven to render byte-identical to what is live. 'panama server' enables, disables and relinks them; nothing here restarts a running service. 'boot --server' walks a fresh VPS from its root login to a normal install. Five new contracts pin the secrets rule, the catalog's shape, panama-server's behavior, the role plumbing, and the dotfile classification. Claude-Session: https://claude.ai/code/session_01NU5JGiN3JfzqrLQB6wmJ1E
16 lines
433 B
Plaintext
16 lines
433 B
Plaintext
# Desktop machines only. What every machine gets -- the shell environment
|
|
# both roles share -- moved to core-packages; this is the remainder that only
|
|
# makes sense with a screen, a session, or a person developing at it.
|
|
cargo
|
|
# install-packages installs flatpaks with it; Fedora Workstation ships it,
|
|
# but a minimal install does not.
|
|
flatpak
|
|
fwupd
|
|
kitty
|
|
ksshaskpass
|
|
libselinux-utils
|
|
pciutils
|
|
python3-neovim
|
|
rustup
|
|
wireguard-tools
|