"It's ugly but it's the best we have" (c)

xfce goes un-def, xfce-sysv rolls back to std-def:
http://forum.altlinux.org/index.php?topic=36177.msg299141#msg299141
(and Simply 8 is going to use std-def as well,
so for more diversity...)

...in EFI mode too!

It's at least removing the very obvious user->root
attack through (maliciously) modifying bin/tar2fs
and waiting for it to be run; if mkimage-profiles
is installed system-wide as a package, the script
from /usr/share/mkimage-profiles will be tried so
those willing to allow vm/* build to themselves
can provide for a passwordless sudo (as described
in doc/vm.txt) to run a root-only writable script,
not user-writable.

Still not perfect but a step away from the abyss.

xfce flavour is updated according to the previous commit.

xfce-sysv makes no use of xfce-polkit,
and _nmconnect group is rather helpful instead:
http://forum.altlinux.org/index.php?topic=36177.msg298424#msg298424

It turns out that -regular pulls in too much
(including xfce-polkit that doesn't work with
sysvinit); let's provide means to have it both
ways, need xfce4 4.12-alt5 or later metapackage
for this change to be effective.

The issue at hand it _nmconnect group that's supported
in ALT NM for polkit-less cases; it has to be added
*before* 50-users hook from deflogin feature fires off.

The existing systemd-related hook has been renamed
to reflect its job better.

Our NetworkManager will lend the knobs to those
in _nmconnect group, thanks sem@.

It's added to installed system and pulling 200+ megabytes into
LiveCD isn't going to help the image size; the practical limits
being tested by that were 3.0 Gb x86_64 ISO making it impossible
to fit RW partition onto 4 Gb USB Flash ("1 Gb free" test added)
and booting it on a 2 Gb RAM system without "lowmem" option would
fail on ~95% of squashfs-to-RAM loading process or so.

TL;DR: one browser in a *LiveCD* should be still enough these days.

cryptopro-preinstall is now an optional checkbox,
and openssl-engines (including GOST one) goes to RPMS.main.

Thanks zerg@ for having brought this up back then.

...to handle #32687 -- tests show that it works for
ext4/SSD, doesn't work (with no observed problems) for
xfs/SSD, and ignores HDD-based filesystems.

Even base rescue images should get mount.nfs and rpcbind.

I've been personally missing these either in a few scenarios!

These include packages that have been added to Education 8.1
but missing in Workstation for no good reason so far
(thanks cas@ again).

Provide both tesseract and its Russian langpack
for Workstation; the proper solution would be to
tweak l10n feature to be able to dynamically
configure things like this given languages
to try and support (not easy though).

These deliver *-preinstall packages (thanks cas@).
Yes, a local sysadmin still needs to actually get
those wares (if they do) but it's less pain when
the libraries needed are in place.

- preparing for workstation 8.1

The changes might have been a bunch of one-liners,
these have accumulated though and let these live together:

- add Chromium browser;
- add "LiveCD with sessions" (upon fixing real RO LiveCD mode);
- provide better Bluetooth support out-of-box;
- fixup services (mostly related to "KVM server" checkbox);
- use the renamed "workstation/raccess" pkglist/group;
- demote ClamAV from base component to a checkbox (off by default).

We don't use BaseALT(tm) for 8.1+ distributions anymore
having standardized on ALT(tm) for good; update strings
accordingly.

...or rather add the tweaker component so that
less work remains to be done upon installation.

These filenames became a bit too specific when
connector got added there too (thanks ekorneechev@
for both creating it and packaging for ALT).

It's advertised as KVM *server* after all (and intended so),
let's at least add the base for that ;-)

This has been proposed by cas@ (actually the change
follows a similar one in Education).

acpi-events-power is clearly unndeed here
(it's rather a distro-level knob), and
powermgmt-base is a bit problematic by now
(e.g. conflicts some of libvirt dependencies
which is a release-blocker for Workstation).

Better options are welcome.

'video' group has been missing compared to /users 10.10-alt1.

This is to get rid of a "useful" component in default installation
but to keep it available for those who might need it for some reason
(like regulatory one).

...because why not.

How come these multi-host ssh addon utilities were missing??

Old format:
rpm [p7] http://ftp.altlinux.org/pub/distributions/ALTLinux/p7/branch x86_64 classic
New format:
rpm [p8] http://ftp.altlinux.org/pub/distributions/ALTLinux p8/branch/x86_64 classic

No use to distinguish between "on" and "off"
each iteration when the resulting files with
differing names should end up identical.

...at least for X11-carrying images; vseleznv@ says he's seen
a conflict with libinput resulting in touchpad disfunction.
Reported-by: Vladimir D. Seleznev <vseleznv@altlinux.org>

- regular tweaks

I actually missed these last time I needed to write
an optical media for a test!

These need configuration before starting things up.

Thanks shrek@ for reporting.

Spoils nouveau otherwise, see also
https://bugzilla.altlinux.org/show_bug.cgi?id=32340#c6Reported-by: Sergey Turchin <zerg@altlinux.org>