New Computer Install

Set up partitions and mounts (assumes user being set up is mjl)

• /
• /var
• /data
• /userdata
• /home/mjl/Projects

cd ~
mkdir tmp
sudo chown mjl:mjl Projects
cd Projects
mkdir personal public riff
cd public
# install packages needed to build git
sudo apt install make dh-autoreconf libcurl4-gnutls-dev libexpat1-dev gettext zlib1g-dev libssl-dev asciidoc xmlto docbook2x
git clone git://git.kernel.org/pub/scm/git/git.git
cd git
git checkout -b installed v2.39.2
# see the make commands from the INSTALL instructions, not 100% needed since they are right here
grep make INSTALL
make prefix=/usr/local all doc info
sudo make prefix=/usr/local install install-doc install-html install-info
make clean
cd /userdata
sudo mkdir mjl
sudo chown mjl:mjl mjl
cd mjl
git clone https://github.com/mlippert/dotfiles.git --recurse-submodules
# if you didn't recurse-submodules when cloning:
# git submodule update --init --recursive
# read README.md (ocular is a good choice)
okular ansible/README.md &
sudo add-apt-repository ppa:deadsnakes/ppa
sudo apt install make python3.10 python3.10-venv
cd ansible
make install VER=3.10
snap list
# remove firefox snap so we can install it from ppa
sudo snap remove --purge firefox
sudo snap remove --purge gtk-common-themes
sudo snap remove --purge gnome-3-38-2004
sudo snap remove --purge core20
sudo snap remove --purge bare
. activate
ansible-playbook mjl-user.yml --ask-become-pass --check
# should get partway through before failing because it isn't actually installing anything
ansible-playbook mjl-user.yml --ask-become-pass
../bin/hookup_userdata_links.sh 2>&1 | tee ~/tmp/hookup_userdata_links.log
deactivate
cd /userdata/mjl
mkdir .aws .dia .docker .gnupg .gramps .minecraft .mozilla .purple .ssh .wine
mkdir bin Documents Downloads Music Pictures Videos
ssh-keygen -t ed25519 -C 'mjl@daisy (riffanalytics.ai)'

For another user:

# Add the user and group e.g. helen
sudo vim /etc/passwd /etc/group
# set the user's initial password
sudo passwd helen
# create the home directory for the user
sudo mkhomedir_helper helen

Notes

Mouse wheel scroll amount

Found this which suggested adding the WheelScrollLines to the [KDE] section of ~/.config/kdeglobals. I think the default value is 3, which is a little too much and 1 is too slow, I found 2 to work well for me. Also note you can add the same section to ~/.config/dolphinrc if you want it to scroll differently in Dolphin.

[KDE]
WheelScrollLines=2

Adding PPA repositories

The existing tools to add Ubuntu PPA repositories, add-apt-repository and apt-key are now deprecated. But I have not found any good instructions on what to do instead of using those tools.

The basic issue is that the repository signing key should be applied ONLY for the repository it is meant for, and the tools add it to the apt trusted keyring which would let it be used for ANY repository.

My 1st pass at fixing this is to extract each key into an individual keyring file stored in /etc/apt/keyrings/. This approach still uses add-apt-repository to do the initial setup, creating a apt source list file in /etc/apt/sources.list.d/ and usually adding the key to the /etc/apt/trusted.gpg keyring.

My 2nd attempt is to use gpg directly to download the key into /etc/apt/keyrings/. To do this I got the key fingerprint from the PPA page on launchpad.net, e.g. https://launchpad.net/~jonathonf/+archive/ubuntu/vim. Under Technical details about this PPA it lists the signing key fingerprint 4AB0F789CBA31744CC7DA76A8CF63AD3F06FC659 for the example.

cd /etc/apt/keyrings
sudo gpg --no-default-keyring --keyring=./jonathonf-vim-ppa.gpg --keyserver=hkps://keyserver.ubuntu.com --recv-keys 4AB0F789CBA31744CC7DA76A8CF63AD3F06FC659

Then edit /etc/apt/sources.list.d/ppa_jonathonf_vim_jammy.list and add the [signed-by=...] section shown here

deb [signed-by=/etc/apt/keyrings/jonathonf-vim-ppa.gpg] http://ppa.launchpad.net/jonathonf/vim/ubuntu jammy main
# deb-src [signed-by=/etc/apt/keyrings/jonathonf-vim-ppa.gpg] http://ppa.launchpad.net/jonathonf/vim/ubuntu jammy main

additionally if the PPA is using http and launchpad.net it would be worthwhile changing it to use https and launchpadcontent.net

deb [signed-by=/etc/apt/keyrings/jonathonf-vim-ppa.gpg] https://ppa.launchpadcontent.net/jonathonf/vim/ubuntu jammy main
# deb-src [signed-by=/etc/apt/keyrings/jonathonf-vim-ppa.gpg] https://ppa.launchpadcontent.net/jonathonf/vim/ubuntu jammy main

Note that in order to run gpg w/ sudo, I had to create a .gnupg directory in /root and set its permissions to u=rwx,g=,o=

New DEB822 format for apt sources

see https://discourse.ubuntu.com/t/spec-apt-deb822-sources-by-default/29333

so we could convert the vim PPA sources.list.d/ppa_jonathonf_vim_jammy.list file above to sources.list.d/ppa_jonathonf_vim_jammy.source:

Types: deb
URIs: https://ppa.launchpadcontent.net/jonathonf/vim/ubuntu
Suites: jammy
Components: main
Signed-By: /etc/apt/keyrings/jonathonf-vim-ppa.gpg