# Arcline Workstation — package set
# Curated KDE Plasma desktop (not the full task-* meta-package) plus a
# complete developer toolchain.

# ── base system ─────────────────────────────────────────────────────────────
systemd
systemd-sysv
dbus
libpam-systemd
ca-certificates
locales
tzdata

# ── boot ────────────────────────────────────────────────────────────────────
# The bootloader is chosen by the BOOT build variable and injected by
# build-rootfs.sh: bios → grub-pc, efi → grub-efi-amd64 + shim-signed.
# (Installing grub-pc and grub-efi-amd64 together makes apt fail with a
# "held broken packages" conflict — exactly one is ever installed.)
os-prober

# ── kernel / firmware ───────────────────────────────────────────────────────
linux-image-amd64
firmware-linux-free
firmware-misc-nonfree        # broadcom/intel wifi + gpu firmware

# ── filesystem ──────────────────────────────────────────────────────────────
btrfs-progs
snapper
zstd
xz-utils

# ── desktop: X + KDE Plasma ─────────────────────────────────────────────────
xserver-xorg
xinit
plasma-desktop
sddm
konsole
dolphin
kate
ark
gwenview
plasma-discover
network-manager
network-manager-gnome
pipewire
pipewire-pulse
wireplumber
pulseaudio-utils

# ── display / audio / input extras ──────────────────────────────────────────
fonts-noto-core
fonts-liberation
firefox-esr

# ── security / hardening ────────────────────────────────────────────────────
openssh-server
nftables
apparmor
apparmor-utils
fail2ban

# ── developer toolchain ─────────────────────────────────────────────────────
build-essential
gcc
g++
clang
clang-format
llvm
lld
gdb
cmake
ninja-build
pkg-config
golang-go
rustc
cargo
python3
python3-pip
python3-venv
nodejs
npm
git
make
curl
wget
jq
vim
nano
htop
tmux
ripgrep
fd-find
bat
docker.io
podman
runc
containernetworking-plugins

# ── Arcline toolchain (built from toolchain/) ───────────────────────────────
# arcline-uptime arcline-check arcline-audit arcline-dns
# arcline-vault arcline-email arcline-migrate arcline-billing
# arcline-portal arcline-website arcline-status