commit 8e00fc6

add system config

 1@@ -7,23 +7,17 @@ ln -sf $PWD/bin/lwjgl ~/bin/lwjgl
 2 ln -sf $PWD/bin/makeinfo ~/bin/makeinfo
 3 ln -sf $PWD/bin/playing ~/bin/playing
 4 ln -sf $PWD/bin/x0 ~/bin/x0
 5-# chrome unveil
 6 mkdir -p ~/.config/fontconfig
 7-rm -f ~/.config/fontconfig/fonts.conf
 8-cp -f config/fontconfig/fonts.conf ~/.config/fontconfig/fonts.conf
 9-# chrome unveil
10+ln -sf $PWD/config/fontconfig/fonts.conf ~/.config/fontconfig/fonts.conf
11 mkdir -p ~/.config/gtk-3.0
12-rm -f ~/.config/gtk-3.0/settings.ini
13-cp -f config/gtk-3.0/settings.ini ~/.config/gtk-3.0/settings.ini
14+ln -sf $PWD/config/gtk-3.0/settings.ini ~/.config/gtk-3.0/settings.ini
15 mkdir -p ~/.config/profanity
16 ln -sf $PWD/config/profanity/profrc ~/.config/profanity/profrc
17 ln -sf $PWD/cwmrc ~/.cwmrc
18 mkdir -p ~/.dillo
19 ln -sf $PWD/dillo/dillorc ~/.dillo/dillorc
20-# chrome unveil
21 mkdir -p ~/.fonts
22-rm -f ~/.fonts/SunGallant-Regular.ttf
23-cp -f fonts/SunGallant-Regular.ttf ~/.fonts/SunGallant-Regular.ttf
24+ln -sf $PWD/fonts/SunGallant-Regular.ttf ~/.fonts/SunGallantRegular.ttf
25 ln -sf $PWD/gitconfig ~/.gitconfig
26 ln -sf $PWD/gtkrc-2.0 ~/.gtkrc-2.0
27 ln -sf $PWD/kshrc ~/.kshrc

1@@ -0,0 +1,6 @@
2+set -xe
3+c() { diff -u $1 $2 || verily cp -i $1 $2; }
4+c system/chromium/unveil.main /etc/chromium/unveil.main
5+c system/login.conf /etc/login.conf
6+c system/rc.conf.local /etc/rc.conf.local
7+c system/sysctl.conf /etc/sysctl.conf

  1@@ -0,0 +1,105 @@
  2+# needed for video(4)
  3+/dev/video0 rw
  4+/dev/video1 rw
  5+/dev/video2 rw
  6+/dev/video3 rw
  7+/dev/video4 rw
  8+/dev/video5 rw
  9+/dev/video6 rw
 10+/dev/video7 rw
 11+
 12+/dev/dri rw
 13+
 14+# needed for FIDO authentication
 15+/dev/fido rw
 16+
 17+/dev/null rw
 18+
 19+# needed for chromium
 20+/etc/chromium r
 21+
 22+# needed for fontconfig
 23+/etc/fonts r
 24+
 25+# needed for dbus
 26+/etc/machine-id r
 27+
 28+# needed for IPC communication, X.Org, etc.
 29+/tmp rwc
 30+
 31+# needed for printing with lpr(1)
 32+/usr/bin/lpr rx
 33+
 34+# needed for xdg tools
 35+/usr/local/bin/update-desktop-database rx
 36+/usr/local/bin/xdg-desktop-menu rx
 37+/usr/local/bin/xdg-icon-resource rx
 38+/usr/local/bin/xdg-open rx
 39+/usr/local/bin/xdg-settings rx
 40+
 41+# libexpat is required for file dialog
 42+/usr/lib r
 43+
 44+# misc. files and libraries
 45+/usr/local/lib r
 46+/usr/local/chrome rx
 47+/usr/local/share r
 48+
 49+# fontconfig
 50+/var/cache/fontconfig r
 51+
 52+# drm and misc xorg stuff
 53+/usr/X11R6/lib r
 54+/usr/X11R6/share r
 55+
 56+# needs /var/run in case /var/run/dbus is not available
 57+# needed by messagebus
 58+/var/run rw
 59+
 60+# ~ gets expanded to $HOME
 61+~/.XCompose r
 62+~/.Xauthority r
 63+~/.Xdefaults r
 64+~/.fontconfig r
 65+~/.fonts r
 66+~/.fonts.conf r
 67+~/.fonts.conf.d r
 68+~/.icons r
 69+~/.pki rwc
 70+~/.sndio rwc
 71+~/.terminfo r
 72+
 73+~/.cache/chromium rwc
 74+~/.cache/at-spi rw
 75+~/.cache/dconf rwc
 76+~/.cache/fontconfig rwc
 77+~/.cache/gvfsd rwc
 78+~/.cache/thumbnails rwc
 79+
 80+~/.config/chromium rwc
 81+~/.config/dconf r
 82+~/.config/fcitx r
 83+~/.config/fontconfig r
 84+~/.config/gtk-3.0 r
 85+~/.config/ibus r
 86+~/.config/mimeapps.list r
 87+~/.config/user-dirs.dirs r
 88+
 89+~/.local/share/applications rwc
 90+~/.local/share/applnk r
 91+~/.local/share/fonts r
 92+~/.local/share/glib-2.0 r
 93+
 94+# needs write access due to chromium profile icons 
 95+~/.local/share/icons rwc
 96+
 97+~/.local/share/mime r
 98+~/.local/share/recently-used.xbel rwc
 99+~/.local/share/themes r
100+
101+# use this directory for downloading and uploading
102+~/Downloads rwc
103+
104+~/Projects/dotfiles r
105+
106+XDG_RUNTIME_DIR rwc

  1@@ -0,0 +1,131 @@
  2+# $OpenBSD: login.conf,v 1.27 2025/07/17 14:44:42 landry Exp $
  3+
  4+#
  5+# Sample login.conf file.  See login.conf(5) for details.
  6+#
  7+
  8+#
  9+# Standard authentication styles:
 10+#
 11+# passwd	Use only the local password file
 12+# chpass	Do not authenticate, but change user's password (change
 13+#		the YP password if the user has one, else change the
 14+#		local password)
 15+# lchpass	Do not login; change user's local password instead
 16+# ldap		Use LDAP authentication
 17+# radius	Use RADIUS authentication
 18+# reject	Use rejected authentication
 19+# skey		Use S/Key authentication
 20+# activ		ActivCard X9.9 token authentication
 21+# crypto	CRYPTOCard X9.9 token authentication
 22+# snk		Digital Pathways SecureNet Key authentication
 23+# token		Generic X9.9 token authentication
 24+# yubikey	YubiKey authentication
 25+#
 26+
 27+# Default allowed authentication styles
 28+auth-defaults:auth=passwd,skey:
 29+
 30+# Default allowed authentication styles for authentication type ftp
 31+auth-ftp-defaults:auth-ftp=passwd:
 32+
 33+#
 34+# The default values
 35+# To alter the default authentication types change the line:
 36+#	:tc=auth-defaults:\
 37+# to read something like: (enables passwd, "myauth", and activ)
 38+#	:auth=passwd,myauth,activ:\
 39+# Any value changed in the daemon class should be reset in default
 40+# class.
 41+#
 42+default:\
 43+	:path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin /usr/local/bin /usr/local/sbin:\
 44+	:umask=022:\
 45+	:datasize-max=1536M:\
 46+	:datasize-cur=1536M:\
 47+	:maxproc-max=256:\
 48+	:maxproc-cur=128:\
 49+	:openfiles-max=1024:\
 50+	:openfiles-cur=512:\
 51+	:stacksize-cur=4M:\
 52+	:localcipher=blowfish,a:\
 53+	:tc=auth-defaults:\
 54+	:tc=auth-ftp-defaults:
 55+
 56+#
 57+# Settings used by /etc/rc and root
 58+# This must be set properly for daemons started as root by inetd as well.
 59+# Be sure to reset these values to system defaults in the default class!
 60+#
 61+daemon:\
 62+	:ignorenologin:\
 63+	:datasize=4096M:\
 64+	:maxproc=infinity:\
 65+	:openfiles-max=1024:\
 66+	:openfiles-cur=128:\
 67+	:stacksize-cur=8M:\
 68+	:tc=default:
 69+
 70+#
 71+# Staff have fewer restrictions and can login even when nologins are set.
 72+#
 73+staff:\
 74+	:datasize-cur=12288M:\
 75+	:datasize-max=infinity:\
 76+	:maxproc-max=4096:\
 77+	:maxproc-cur=2048:\
 78+	:openfiles-max=8192:\
 79+	:openfiles-cur=4096:\
 80+	:stacksize-max=64M:\
 81+	:stacksize-cur=32M:\
 82+	:ignorenologin:\
 83+	:requirehome@:\
 84+	:tc=default:
 85+
 86+#
 87+# Authpf accounts get a special motd and shell
 88+#
 89+authpf:\
 90+	:welcome=/etc/motd.authpf:\
 91+	:shell=/usr/sbin/authpf:\
 92+	:tc=default:
 93+
 94+#
 95+# Building LLVM in base requires higher limits
 96+#
 97+build:\
 98+	:datasize-max=2560M:\
 99+	:datasize-cur=2560M:\
100+	:tc=default:
101+
102+#
103+# Building ports with DPB uses raised limits
104+#
105+pbuild:\
106+	:datasize-max=infinity:\
107+	:datasize-cur=12G:\
108+	:maxproc-max=1024:\
109+	:maxproc-cur=512:\
110+	:stacksize-cur=8M:\
111+	:priority=5:\
112+	:tc=default:
113+
114+#
115+# Override resource limits for certain daemons started by rc.d(8)
116+#
117+bgpd:\
118+	:datasize=16384M:\
119+	:openfiles=512:\
120+	:tc=daemon:
121+
122+unbound:\
123+	:openfiles=512:\
124+	:tc=daemon:
125+
126+vmd:\
127+	:datasize=16384M:\
128+	:tc=daemon:
129+
130+xenodm:\
131+	:openfiles=512:\
132+	:tc=daemon:

1@@ -0,0 +1,5 @@
2+apmd_flags=
3+library_aslr=NO
4+pkg_scripts=messagebus
5+smtpd_flags=NO
6+sshd_flags=NO

 1@@ -0,0 +1,28 @@
 2+hw.blockcpu=L
 3+
 4+# 23 GB / 4096
 5+kern.shminfo.shmall=6029312
 6+# 1 GB
 7+kern.shminfo.shmmax=1073741824
 8+
 9+kern.shminfo.shmmni=1024
10+kern.shminfo.shmseg=1024
11+
12+kern.seminfo.semmns=480
13+kern.seminfo.semmni=80
14+
15+kern.maxproc=10480
16+kern.maxfiles=131072
17+
18+kern.maxvnodes=622184
19+
20+kern.somaxconn=1024
21+
22+net.inet.udp.recvspace=332800
23+net.inet.udp.sendspace=73728
24+
25+net.inet.tcp.mssdflt=2048
26+net.inet.tcp.keepidle=900
27+
28+net.inet.ip.ifq.maxlen=16384
29+net.inet6.ip6.ifq.maxlen=16384