Less visual noise!

This time the omitted elephant is rpminstall!
Suggested-by: Sergey V Turchin <zerg@altlinux.org>

This means potential iSCSI installation support
which isn't official though; having binaries handy
even if consoderable runtime configuration is need
is still better than lacking those.

How could I miss recoll even if I didn't know about solaar?
(which jumps into panel at the session startup time so let's
hold it to the available packages but not install away)
Suggested-by: Erik Palvanov <erik@tonk.ru>

Suggested-by: Erik Palvanov <erik@tonk.ru>

Some of these are included already but let's ensure that.
Suggested-by: Erik Palvanov <erik@tonk.ru>

Note that these might have problems being *installed*
together, consider using this list for MAIN_LISTS only
(or providing more feedback).
Suggested-by: Erik Palvanov <erik@tonk.ru>

agents: suggested by myself, widely approved;
cloud-clients: suggested by peers (aen@?);
voip-clients: suggested by Erik.

...as OTR is used by default in quite a few clients by now.
Suggested-by: Erik Palvanov <erik@tonk.ru>

This was problematic with some builds:
https://bugzilla.altlinux.org/show_bug.cgi?id=31918
https://bugzilla.altlinux.org/show_bug.cgi?id=32320
...but that's been overcome.
Suggested-by: Andrey Cherepanov <cas@altlinux.org>

"It's ugly but it's the best we have" (c)

xfce goes un-def, xfce-sysv rolls back to std-def:
http://forum.altlinux.org/index.php?topic=36177.msg299141#msg299141
(and Simply 8 is going to use std-def as well,
so for more diversity...)

...in EFI mode too!

It's at least removing the very obvious user->root
attack through (maliciously) modifying bin/tar2fs
and waiting for it to be run; if mkimage-profiles
is installed system-wide as a package, the script
from /usr/share/mkimage-profiles will be tried so
those willing to allow vm/* build to themselves
can provide for a passwordless sudo (as described
in doc/vm.txt) to run a root-only writable script,
not user-writable.

Still not perfect but a step away from the abyss.

xfce flavour is updated according to the previous commit.

xfce-sysv makes no use of xfce-polkit,
and _nmconnect group is rather helpful instead:
http://forum.altlinux.org/index.php?topic=36177.msg298424#msg298424

It turns out that -regular pulls in too much
(including xfce-polkit that doesn't work with
sysvinit); let's provide means to have it both
ways, need xfce4 4.12-alt5 or later metapackage
for this change to be effective.

The issue at hand it _nmconnect group that's supported
in ALT NM for polkit-less cases; it has to be added
*before* 50-users hook from deflogin feature fires off.

The existing systemd-related hook has been renamed
to reflect its job better.

Our NetworkManager will lend the knobs to those
in _nmconnect group, thanks sem@.

It's added to installed system and pulling 200+ megabytes into
LiveCD isn't going to help the image size; the practical limits
being tested by that were 3.0 Gb x86_64 ISO making it impossible
to fit RW partition onto 4 Gb USB Flash ("1 Gb free" test added)
and booting it on a 2 Gb RAM system without "lowmem" option would
fail on ~95% of squashfs-to-RAM loading process or so.

TL;DR: one browser in a *LiveCD* should be still enough these days.

cryptopro-preinstall is now an optional checkbox,
and openssl-engines (including GOST one) goes to RPMS.main.

Thanks zerg@ for having brought this up back then.

...to handle #32687 -- tests show that it works for
ext4/SSD, doesn't work (with no observed problems) for
xfs/SSD, and ignores HDD-based filesystems.

Even base rescue images should get mount.nfs and rpcbind.

I've been personally missing these either in a few scenarios!

These include packages that have been added to Education 8.1
but missing in Workstation for no good reason so far
(thanks cas@ again).

Provide both tesseract and its Russian langpack
for Workstation; the proper solution would be to
tweak l10n feature to be able to dynamically
configure things like this given languages
to try and support (not easy though).

These deliver *-preinstall packages (thanks cas@).
Yes, a local sysadmin still needs to actually get
those wares (if they do) but it's less pain when
the libraries needed are in place.

- preparing for workstation 8.1

The changes might have been a bunch of one-liners,
these have accumulated though and let these live together:

- add Chromium browser;
- add "LiveCD with sessions" (upon fixing real RO LiveCD mode);
- provide better Bluetooth support out-of-box;
- fixup services (mostly related to "KVM server" checkbox);
- use the renamed "workstation/raccess" pkglist/group;
- demote ClamAV from base component to a checkbox (off by default).

We don't use BaseALT(tm) for 8.1+ distributions anymore
having standardized on ALT(tm) for good; update strings
accordingly.

...or rather add the tweaker component so that
less work remains to be done upon installation.

These filenames became a bit too specific when
connector got added there too (thanks ekorneechev@
for both creating it and packaging for ALT).

It's advertised as KVM *server* after all (and intended so),
let's at least add the base for that ;-)

This has been proposed by cas@ (actually the change
follows a similar one in Education).

acpi-events-power is clearly unndeed here
(it's rather a distro-level knob), and
powermgmt-base is a bit problematic by now
(e.g. conflicts some of libvirt dependencies
which is a release-blocker for Workstation).

Better options are welcome.

'video' group has been missing compared to /users 10.10-alt1.

This is to get rid of a "useful" component in default installation
but to keep it available for those who might need it for some reason
(like regulatory one).

...because why not.