From 698e00d925e9ee775e9c902de119b7cda88a1715 Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen@aminda.eu>
Date: Sat, 3 May 2025 12:03:25 +0300
Subject: [PATCH] essentialsoftware.md: add inxi, rpmfusion on Kinoite,
 broadcom wireless

---
 n/essentialsoftware.md | 28 +++++++++++++++++++++-------
 1 file changed, 21 insertions(+), 7 deletions(-)

diff --git a/n/essentialsoftware.md b/n/essentialsoftware.md
index 0d344d1..e80ffc7 100644
--- a/n/essentialsoftware.md
+++ b/n/essentialsoftware.md
@@ -117,6 +117,7 @@ _{{ page.excerpt }}_
   - Debian: `sudo apt install systemd-zram-generator`
   - To check that it works `zramctl`. May take a while after
     `sudo systemctl reload` or a reboot.
+- `inxi` - system information script (and dependencies)
 
 <!--
 - `zram-tools` - small compressed swap in RAM
@@ -155,18 +156,31 @@ Just remember to `pipx upgrade-all` occassionally!
 ## Fedora Atomic
 
 _By which I mean Fedora Kinoite unless otherwise specified._ A system where
-everyone runs the same image, except that as this section shows, I alter it a
+everyone runs the same image, except that as this section shows, I add to it a
 bit...
 
 ```bash
-# Alter base image by adding packages I need on the base system
-sudo rpm-ostree install btop clang darkman duperemove gamescope git-lfs gnome-console htop mosh mpv neovim pipx pre-commit sshguard steam-devices symlinks syncthing terminus-fonts-console tmux tor unbound zsh
-# Delete kernel boot arguments that would display boot splash screen and hide verbose kernel messages
-sudo rpm-ostree kargs --delete=rhgb --delete=quiet
-# Add kernel boot arguments for stricter lockdown mode and CPU vulnerability mitigation
-sudo rpm-ostree kargs --append=lockdown=confidentiality --append=mitigations=auto,nosmt
+# Layer packages I need on top of the base image.
+sudo rpm-ostree install btop clang darkman duperemove gamescope git-lfs gnome-console htop inxi mosh mpv neovim pipx pre-commit sshguard steam-devices symlinks syncthing terminus-fonts-console tmux tor unbound zsh
+# Disable bootscreen, ensure CPU vulnerability mitigation, enable lockdown
+# mode. REMEMBER! lockdown is incompatible with unsigned additional
+# kernel modules
+sudo rpm-ostree kargs --delete=rhgb --delete=quiet --append=mitigations=auto,nosmt --append=lockdown=confidentiality
 ```
 
+Consider also adding
+[RPMFusion through their OSTree instructions](https://rpmfusion.org/Howto/OSTree).
+The _Major releases_ uninstalling and installing is especially important so it
+switches from local package to layered package, which also affects all other
+third party repositories such as `google-chrome-stable` if it was added. While
+there is repository breakage risk stopping system upgrades, at least it will
+upgrade itself as opposed to errorring about being a local not upgraded package
+in the future.
+
+Why RPMFusion? At least `Broadcom BCM43142` wireless NIC requires
+`sudo rpm-ostree install akmod-wl kernel-devel` from `rpmfusion-nonfree` and
+there are likely other such devices/drivers as well.
+
 ### Flatpaks
 
 These also affect non-Fedora-Kinoite for which my first production installation