[pacman]: consolidate notes, elaborate on special repos, system sanity in pacman.conf

3 files changed, 208 insertions, 44 deletions

diff --git a/libre/pacman/pacman.conf.armv7h b/libre/pacman/pacman.conf.armv7h
index 85d24e3e5..7e07d64e2 100644
--- a/libre/pacman/pacman.conf.armv7h
+++ b/libre/pacman/pacman.conf.armv7h
@@ -61,16 +61,57 @@ LocalFileSigLevel = Optional
 #       Include = IncludePath
 #
 # The header [repo-name] is crucial - it must be present and
-# uncommented to enable the repo.
+# un-commented to enable the repo.
 #
+# An example of a custom package repository is given below
+# in the "User-defined repos" section
+#
+# Some repositories are disabled by default. To enable them, un-comment the
+# repo name header (e.g. '[nonprism]') and the following 'Include' line.
+# You can add preferred servers for each repo between the header and "Include" line,
+# according to the format in /etc/pacman.d/mirrorlist,
+# and those will be preferred over the standard mirrors for that repo.
+#
+# The order in which these entries appear in this file is critical.
+# Much of the Parabola magic that supports advanced features such as
+# multiple init-systems and multiple layers of freedom and privacy,
+# depends on the order in which these repos are defined.
+# Moving or adding repos out of the expected order can make your system insane.
 
-# The testing repositories are disabled by default. To enable, uncomment the
-# repo name header and Include lines. You can add preferred servers immediately
-# after the header, and they will be used before the default mirrors.
+# Notes on special repositories:
+#
+# Non-prism is a repository for enhanced privacy, beyond the FSDG requirements.
+# It contains specially patched versions of certain software from the standard repos,
+# that are known to include privacy-sensative features that some people may want to use,
+# but that others may consider to be undesirable anti-features.
+# For more info see: https://wiki.parabola.nu/Nonprism
+#
+# The non-systemd repository contains packages that are important and relevant only to
+# Parabola systems using an init-system other than systemd.
+# Parabola systems using systemd SHOULD NOT have this enabled;.
+# while Parabola systems using any other init-system SHOULD have this enabled.
+#
+# The kernels repository contains additional special kernels for particular use-cases,
+# such as maximal security hardening and real-time systems.
+#
+# The PCR (Parabola Community Repository) contains additional packages,
+# most often requested by Parabola users, that are not considered to be
+# part of the standard Parabola/Arch system, but are nonetheless useful or fun.
+#
+# Multi-lib repositories allow 32-bit applications to run on x86_64 systems.
+#
+# The Parabola system also supports custom, user-defined, repositories;
+# but be aware that the Parabola team can not recommend nor support their use.
+# The Parabola team can only support the use of software that is published by Parabola.
+# The use of third-party software is discouraged with a "use at your own risk" warning.
+# These may be community-maintained or maintained privately by the local user or sysadmin.
+# They may be hosted on the internet, on the local network, or only on the local computer.
+# See the pacman manpage for details on creating your own repositories.
 
-# NOTE: Nonprism is a particular repository that aims to provide software built
-# and patched without services under global data surveillance programs like PRISM,
-# XKeyscore and Tempora. For more info see: https://wiki.parabola.nu/Nonprism
+
+###########################
+# Parabola standard repos #
+###########################
 
 #[nonprism-testing]
 #Include = /etc/pacman.d/mirrorlist
@@ -84,6 +125,11 @@ LocalFileSigLevel = Optional
 [libre]
 Include = /etc/pacman.d/mirrorlist
 
+
+#######################
+# Arch standard repos #
+#######################
+
 #[testing]
 #Include = /etc/pacman.d/mirrorlist
 
@@ -99,9 +145,10 @@ Include = /etc/pacman.d/mirrorlist
 [community]
 Include = /etc/pacman.d/mirrorlist
 
-# The PCR (Parabola Community Repository) contains packages maintained by trusted
-# members of the Parabola community. It also contains packages maintained by
-# Parabola developers, but that the developer decided didn't belong in core/libre.
+
+######################
+# Supplemental repos #
+######################
 
 #[pcr-testing]
 #Include = /etc/pacman.d/mirrorlist
@@ -109,13 +156,18 @@ Include = /etc/pacman.d/mirrorlist
 [pcr]
 Include = /etc/pacman.d/mirrorlist
 
-# Parabola also supports another community projects and personal repositories, to
-# find them check out this wiki page: https://wiki.parabola.nu/Repositories
 
-# An example of a custom package repository.  See the pacman manpage for
-# tips on creating your own repositories.
+######################
+# User-defined repos #
+######################
+
 #[custom]
 #SigLevel = Optional TrustAll
 #Server = file:///home/custompkgs
 
+
+##############
+# Over-rides #
+##############
+
 Include = /etc/pacman.d/*.conf
diff --git a/libre/pacman/pacman.conf.i686 b/libre/pacman/pacman.conf.i686
index 2bdd4a3a9..c52c43e6a 100644
--- a/libre/pacman/pacman.conf.i686
+++ b/libre/pacman/pacman.conf.i686
@@ -61,16 +61,57 @@ LocalFileSigLevel = Optional
 #       Include = IncludePath
 #
 # The header [repo-name] is crucial - it must be present and
-# uncommented to enable the repo.
+# un-commented to enable the repo.
 #
+# An example of a custom package repository is given below
+# in the "User-defined repos" section
+#
+# Some repositories are disabled by default. To enable them, un-comment the
+# repo name header (e.g. '[nonprism]') and the following 'Include' line.
+# You can add preferred servers for each repo between the header and "Include" line,
+# according to the format in /etc/pacman.d/mirrorlist,
+# and those will be preferred over the standard mirrors for that repo.
+#
+# The order in which these entries appear in this file is critical.
+# Much of the Parabola magic that supports advanced features such as
+# multiple init-systems and multiple layers of freedom and privacy,
+# depends on the order in which these repos are defined.
+# Moving or adding repos out of the expected order can make your system insane.
 
-# The testing repositories are disabled by default. To enable, uncomment the
-# repo name header and Include lines. You can add preferred servers immediately
-# after the header, and they will be used before the default mirrors.
+# Notes on special repositories:
+#
+# Non-prism is a repository for enhanced privacy, beyond the FSDG requirements.
+# It contains specially patched versions of certain software from the standard repos,
+# that are known to include privacy-sensative features that some people may want to use,
+# but that others may consider to be undesirable anti-features.
+# For more info see: https://wiki.parabola.nu/Nonprism
+#
+# The non-systemd repository contains packages that are important and relevant only to
+# Parabola systems using an init-system other than systemd.
+# Parabola systems using systemd SHOULD NOT have this enabled;.
+# while Parabola systems using any other init-system SHOULD have this enabled.
+#
+# The kernels repository contains additional special kernels for particular use-cases,
+# such as maximal security hardening and real-time systems.
+#
+# The PCR (Parabola Community Repository) contains additional packages,
+# most often requested by Parabola users, that are not considered to be
+# part of the standard Parabola/Arch system, but are nonetheless useful or fun.
+#
+# Multi-lib repositories allow 32-bit applications to run on x86_64 systems.
+#
+# The Parabola system also supports custom, user-defined, repositories;
+# but be aware that the Parabola team can not recommend nor support their use.
+# The Parabola team can only support the use of software that is published by Parabola.
+# The use of third-party software is discouraged with a "use at your own risk" warning.
+# These may be community-maintained or maintained privately by the local user or sysadmin.
+# They may be hosted on the internet, on the local network, or only on the local computer.
+# See the pacman manpage for details on creating your own repositories.
 
-# NOTE: Nonprism is a particular repository that aims to provide software built
-# and patched without services under global data surveillance programs like PRISM,
-# XKeyscore and Tempora. For more info see: https://wiki.parabola.nu/Nonprism
+
+###########################
+# Parabola standard repos #
+###########################
 
 #[nonprism-testing]
 #Include = /etc/pacman.d/mirrorlist
@@ -84,6 +125,11 @@ LocalFileSigLevel = Optional
 [libre]
 Include = /etc/pacman.d/mirrorlist
 
+
+#######################
+# Arch standard repos #
+#######################
+
 #[testing]
 #Include = /etc/pacman.d/mirrorlist
 
@@ -99,9 +145,10 @@ Include = /etc/pacman.d/mirrorlist
 [community]
 Include = /etc/pacman.d/mirrorlist
 
-# The PCR (Parabola Community Repository) contains packages maintained by trusted
-# members of the Parabola community. It also contains packages maintained by
-# Parabola developers, but that the developer decided didn't belong in core/libre.
+
+######################
+# Supplemental repos #
+######################
 
 #[pcr-testing]
 #Include = /etc/pacman.d/mirrorlist
@@ -109,13 +156,18 @@ Include = /etc/pacman.d/mirrorlist
 [pcr]
 Include = /etc/pacman.d/mirrorlist
 
-# Parabola also supports another community projects and personal repositories, to
-# find them check out this wiki page: https://wiki.parabola.nu/Repositories
 
-# An example of a custom package repository.  See the pacman manpage for
-# tips on creating your own repositories.
+######################
+# User-defined repos #
+######################
+
 #[custom]
 #SigLevel = Optional TrustAll
 #Server = file:///home/custompkgs
 
+
+##############
+# Over-rides #
+##############
+
 Include = /etc/pacman.d/*.conf
diff --git a/libre/pacman/pacman.conf.x86_64 b/libre/pacman/pacman.conf.x86_64
index 67e6a00dd..1af5cc2ae 100644
--- a/libre/pacman/pacman.conf.x86_64
+++ b/libre/pacman/pacman.conf.x86_64
@@ -61,16 +61,57 @@ LocalFileSigLevel = Optional
 #       Include = IncludePath
 #
 # The header [repo-name] is crucial - it must be present and
-# uncommented to enable the repo.
+# un-commented to enable the repo.
 #
+# An example of a custom package repository is given below
+# in the "User-defined repos" section
+#
+# Some repositories are disabled by default. To enable them, un-comment the
+# repo name header (e.g. '[nonprism]') and the following 'Include' line.
+# You can add preferred servers for each repo between the header and "Include" line,
+# according to the format in /etc/pacman.d/mirrorlist,
+# and those will be preferred over the standard mirrors for that repo.
+#
+# The order in which these entries appear in this file is critical.
+# Much of the Parabola magic that supports advanced features such as
+# multiple init-systems and multiple layers of freedom and privacy,
+# depends on the order in which these repos are defined.
+# Moving or adding repos out of the expected order can make your system insane.
+
+# Notes on special repositories:
+#
+# Non-prism is a repository for enhanced privacy, beyond the FSDG requirements.
+# It contains specially patched versions of certain software from the standard repos,
+# that are known to include privacy-sensative features that some people may want to use,
+# but that others may consider to be undesirable anti-features.
+# For more info see: https://wiki.parabola.nu/Nonprism
+#
+# The non-systemd repository contains packages that are important and relevant only to
+# Parabola systems using an init-system other than systemd.
+# Parabola systems using systemd SHOULD NOT have this enabled;.
+# while Parabola systems using any other init-system SHOULD have this enabled.
+#
+# The kernels repository contains additional special kernels for particular use-cases,
+# such as maximal security hardening and real-time systems.
+#
+# The PCR (Parabola Community Repository) contains additional packages,
+# most often requested by Parabola users, that are not considered to be
+# part of the standard Parabola/Arch system, but are nonetheless useful or fun.
+#
+# Multi-lib repositories allow 32-bit applications to run on x86_64 systems.
+#
+# The Parabola system also supports custom, user-defined, repositories;
+# but be aware that the Parabola team can not recommend nor support their use.
+# The Parabola team can only support the use of software that is published by Parabola.
+# The use of third-party software is discouraged with a "use at your own risk" warning.
+# These may be community-maintained or maintained privately by the local user or sysadmin.
+# They may be hosted on the internet, on the local network, or only on the local computer.
+# See the pacman manpage for details on creating your own repositories.
 
-# The testing repositories are disabled by default. To enable, uncomment the
-# repo name header and Include lines. You can add preferred servers immediately
-# after the header, and they will be used before the default mirrors.
 
-# NOTE: Nonprism is a particular repository that aims to provide software built
-# and patched without services under global data surveillance programs like PRISM,
-# XKeyscore and Tempora. For more info see: https://wiki.parabola.nu/Nonprism
+###########################
+# Parabola standard repos #
+###########################
 
 #[nonprism-testing]
 #Include = /etc/pacman.d/mirrorlist
@@ -84,6 +125,17 @@ LocalFileSigLevel = Optional
 [libre]
 Include = /etc/pacman.d/mirrorlist
 
+#[kernels-testing]
+#Include = /etc/pacman.d/mirrorlist
+
+#[kernels]
+#Include = /etc/pacman.d/mirrorlist
+
+
+#######################
+# Arch standard repos #
+#######################
+
 #[testing]
 #Include = /etc/pacman.d/mirrorlist
 
@@ -99,9 +151,10 @@ Include = /etc/pacman.d/mirrorlist
 [community]
 Include = /etc/pacman.d/mirrorlist
 
-# The PCR (Parabola Community Repository) contains packages maintained by trusted
-# members of the Parabola community. It also contains packages maintained by
-# Parabola developers, but that the developer decided didn't belong in core/libre.
+
+######################
+# Supplemental repos #
+######################
 
 #[pcr-testing]
 #Include = /etc/pacman.d/mirrorlist
@@ -109,8 +162,10 @@ Include = /etc/pacman.d/mirrorlist
 [pcr]
 Include = /etc/pacman.d/mirrorlist
 
-# If you want to run 32 bit applications on your x86_64 system,
-# enable the libre-multilib, multilib and pcr-multilib repositories as required here.
+
+############################
+# Cross-architecture repos #
+############################
 
 #[nonprism-multilib-testing]
 #Include = /etc/pacman.d/mirrorlist
@@ -136,13 +191,18 @@ Include = /etc/pacman.d/mirrorlist
 #[pcr-multilib]
 #Include = /etc/pacman.d/mirrorlist
 
-# Parabola also supports another community projects and personal repositories, to
-# find them check out this wiki page: https://wiki.parabola.nu/Repositories
 
-# An example of a custom package repository.  See the pacman manpage for
-# tips on creating your own repositories.
+######################
+# User-defined repos #
+######################
+
 #[custom]
 #SigLevel = Optional TrustAll
 #Server = file:///home/custompkgs
 
+
+##############
+# Over-rides #
+##############
+
 Include = /etc/pacman.d/*.conf