We chose to provide methods to sign packages but to avoid
signing these by default (with some arbitrary test keys)
the signatures are being added *after* the build by means
of rpmrebuild-pesign; all of this is made significantly
more complicated if there are separate -signed subpackages.

So these are being dropped in the packages; account for that.

- refind branding

Everything is handled within mki-copy-efiboot currently
but it needs an image to process; extracting one from
bootloader branding seems less hassle than forcing it
into every flavour of branding.

My personal favourite one is hardlinkpy currently
(thanks ldv@) but a few others might be handy as well.

I've managed to overlook that it pulls in libX*...

The changes in commits gb3e3234c and ga860b179 were actually useless
as rescue+fs list wasn't included into RESCUE_LISTS... and I need
pv(1) for convenient local disk cloning with time estimate.

- e18

Thanks aris@ there are now e18 packages available;
everything is almost the same distribution-wise.

The implementation is identical to e17 one.

Thanks Aleksey Cheusov for proposing this.

kernel-image-un-def doesn't contain suitable aufs as of 3.12.3-alt1,
revert to std-def flavour again for the time being.

This basically reverts commit c18ef372
for all practical purposes and restores the problem with chromium livecd
still that's less of a problem compared to regular builds complaining
that firefox is not the default browser when it's the only one anyways.

- regular fixups

A bit longer version is: add the script which cares to protect
the interfaces which has been brought up during NFS root bootup
already from being tampered with by NetworkManager so as to avoid
losing network with networked rootfs.

There's domain-client pkglist out there, no need to pull
alterator-net-shares (and alterator-auth it requries)
everywhere.

GRUB won't present dualboot systems in boot menu otherwise.

A lot of packages that should be in the classic installable images
got missed during initial effort; start merging the difference.

We're better off providing NTFS support so that Windows partitions
can be shrunk at least if one's not going to just blow these away
upon encounter.

It's a kernel module now.

Suggested-by: glebfm@

- important bugfix: THE_PACKAGES weren't getting through to .base
- regular-sysv-tde related churn

live-webkiosk doesn't really need it and mixin/desktop-installer
was picking it up due to d+n+l satisfying d+n query.  This could
be fixed with && !live but fixing bitrot is the better way to go.

Actually the issue was worse in general: *_PACKAGES
weren't quoted when put into .base thus resulting
in a potentially broken echo command (silent one).

The macro scheme used was overgeneralized; stuffing
quoting differentiation into it was doable but ugly
(unless one is able to pass an unquoted quote sign
as a function's parameter in some elegant manner),
let's just make it straightforward.

It's still inconvenient to discover mouse pointer
captured inside a box, let's overthrow the hardware
node and free it.

It's sort of pointless otherwise.

Its scope of desktop does cover basic multimedia.

...which has just been imported from m-p-d and looked like
badly missing (yasr wasn't starting).

It's /the/ shell.

distro/.regular-install depends on use/luks now too;
this isn't a hard decision but so far looks good
given the overall functionality range and balance
within regular builds.

alterator-lilo needs facelift unfortunately.

branding-*-bootloader was handled for stage1 by syslinux feature
but somehow got missed regarding the installed system; let's fix.

It was less clear/greppable what "installer" refers to...
or maybe so it seems to me.

I've been considering a way to avoid confusion between:
- a tde based livecd with systemd;
- a tde based livecd with sysvinit;
- a tde based installer with sysvinit
and finally came to conclusion that regular-sysv prefix
will be common for installers with sysvinit within regular.mk
and p7.mk; this might be not perfect but should be good enough.

Note that while regular-sysv-tde.iso is buildable and installs
just fine at the moment I don't plan to publish Sisyphus based
installer builds as a rule since these require extra knowledge
regarding daily use (starting with http://altlinux.org/changes
and/or https://lists.altlinux.org/mailman/listinfo/sisyphus ML
subscription).

Sisyphus-based rescue image is fine as well as LiveCDs are;
installable LiveCDs (most of regular-*.iso) are actually
risky in case user actually installs *and* updates those
having ignored the red "unstable" status in the branding,
and that's the line I'm not going to cross that often.

Parts common to both livecd and installer images factored out
to avoid duplication.

BASE_BOOTLOADER must have been set to any of the supported
bootloader names somewhere during configuration; it is not
impossible to avoid this elsewhere so let's put a guardian
script which will stop the build which is known to result
in a broken image.

sub/main subprofile should not be requested directly
as documented in its README but rather via use/repo/main;
let's fix this discrepancy and check that no regressions
come hurling down.

This image family doesn't inherit from distro/.installer
and thus could miss the bootloader setup with no problems
(at least until an installed system would attempt booting
without a bootloader).

The whole thing requires some more thinking over and probably
moving more bits to mixins but in the mean time let's make sure
the bootloader *is* configured.