The goal is to provide a simple and lightweight
webcam app with the LiveCD while handing some more
advanced one under a multimedia checkbox for installation.

...just line noise...

Let MATE handle the power button keypress event presenting
user with an action chooser instead of just shuttin' down.

...for workstation, and one of those (fixing #29856)
should be better than MATE's current log viewer.

...but leave it disabled due to reported conflict with libinput.

It's required for many touchpads these days,
just get it in for the "full" (+installer) target.

This has been split during the preparation of initial commit
introducing this file as indexhtml wasn't ready for release;
now the time has come to fix it (still mate-settings need to
be mentioned separately).

...that replace the actual group contents while
trying to preview that during installation.

The distro description grew package by package
and started resembling a pile of those; let's
finally reorganize it with lists and generally
improve layout (should be no-op otherwise).

See the discussion of the changes in basealt.mk
package lists in preceding commits touching it.

task-auth-ad pulls in samba-winbind, among the rest...

It gets enabled most of the time anyways,
and Education 8.1 has enabled it either.

The two package sets seemed *too* identical when
I finally needed to add another package there...

It adds kde4libs being no justification for this.

Less visual noise!

This time the omitted elephant is rpminstall!
Suggested-by: Sergey V Turchin <zerg@altlinux.org>

This means potential iSCSI installation support
which isn't official though; having binaries handy
even if consoderable runtime configuration is need
is still better than lacking those.

How could I miss recoll even if I didn't know about solaar?
(which jumps into panel at the session startup time so let's
hold it to the available packages but not install away)
Suggested-by: Erik Palvanov <erik@tonk.ru>

Suggested-by: Erik Palvanov <erik@tonk.ru>

Some of these are included already but let's ensure that.
Suggested-by: Erik Palvanov <erik@tonk.ru>

Note that these might have problems being *installed*
together, consider using this list for MAIN_LISTS only
(or providing more feedback).
Suggested-by: Erik Palvanov <erik@tonk.ru>

agents: suggested by myself, widely approved;
cloud-clients: suggested by peers (aen@?);
voip-clients: suggested by Erik.

...as OTR is used by default in quite a few clients by now.
Suggested-by: Erik Palvanov <erik@tonk.ru>

This was problematic with some builds:
https://bugzilla.altlinux.org/show_bug.cgi?id=31918
https://bugzilla.altlinux.org/show_bug.cgi?id=32320
...but that's been overcome.
Suggested-by: Andrey Cherepanov <cas@altlinux.org>

"It's ugly but it's the best we have" (c)

xfce goes un-def, xfce-sysv rolls back to std-def:
http://forum.altlinux.org/index.php?topic=36177.msg299141#msg299141
(and Simply 8 is going to use std-def as well,
so for more diversity...)

...in EFI mode too!

It's at least removing the very obvious user->root
attack through (maliciously) modifying bin/tar2fs
and waiting for it to be run; if mkimage-profiles
is installed system-wide as a package, the script
from /usr/share/mkimage-profiles will be tried so
those willing to allow vm/* build to themselves
can provide for a passwordless sudo (as described
in doc/vm.txt) to run a root-only writable script,
not user-writable.

Still not perfect but a step away from the abyss.

xfce flavour is updated according to the previous commit.

xfce-sysv makes no use of xfce-polkit,
and _nmconnect group is rather helpful instead:
http://forum.altlinux.org/index.php?topic=36177.msg298424#msg298424

It turns out that -regular pulls in too much
(including xfce-polkit that doesn't work with
sysvinit); let's provide means to have it both
ways, need xfce4 4.12-alt5 or later metapackage
for this change to be effective.

The issue at hand it _nmconnect group that's supported
in ALT NM for polkit-less cases; it has to be added
*before* 50-users hook from deflogin feature fires off.

The existing systemd-related hook has been renamed
to reflect its job better.

Our NetworkManager will lend the knobs to those
in _nmconnect group, thanks sem@.

It's added to installed system and pulling 200+ megabytes into
LiveCD isn't going to help the image size; the practical limits
being tested by that were 3.0 Gb x86_64 ISO making it impossible
to fit RW partition onto 4 Gb USB Flash ("1 Gb free" test added)
and booting it on a 2 Gb RAM system without "lowmem" option would
fail on ~95% of squashfs-to-RAM loading process or so.

TL;DR: one browser in a *LiveCD* should be still enough these days.

cryptopro-preinstall is now an optional checkbox,
and openssl-engines (including GOST one) goes to RPMS.main.

Thanks zerg@ for having brought this up back then.

...to handle #32687 -- tests show that it works for
ext4/SSD, doesn't work (with no observed problems) for
xfs/SSD, and ignores HDD-based filesystems.

Even base rescue images should get mount.nfs and rpcbind.

I've been personally missing these either in a few scenarios!

These include packages that have been added to Education 8.1
but missing in Workstation for no good reason so far
(thanks cas@ again).

Provide both tesseract and its Russian langpack
for Workstation; the proper solution would be to
tweak l10n feature to be able to dynamically
configure things like this given languages
to try and support (not easy though).