forked from marfrit/marfrit-packages
marfrit
beebeb6c65
The previous package bundled the agent prompt + skill cheatsheet, which leaked home-infra topology (specific hosts/IPs, plug AINs, /opt/herding cred file paths, kid/2FA context) to anyone with the public APT/pacman repo URL. v0.2.0 ships only the plumbing: - /usr/bin/claude-his-fetch (rsync runbook from $HIS_CONTEXT_HOST over SSH) - /usr/bin/claude-his-install (symlinks cache -> ~/.claude/) - /usr/share/doc/claude-his-agent/README.md Runbook content lives at $HIS_CONTEXT_HOST:/opt/his-context/ (default hertz) and gets fetched into ~/.cache/claude-his-agent/ on install. SSH key auth is the trust boundary. Adds rsync + openssh-client as runtime deps. Upstream sha256: c39dd1a956d303ac2417498dde05ac923bf686f1fc978f78f0d63ca42432b8b8
marfrit-packages
Overlay package repository for the reauktion.de infrastructure.
Published at: https://packages.reauktion.de/
Scope
| Tree | Arches | Notes |
|---|---|---|
| Arch Linux ARM (ALARM) | aarch64 |
primary target — Pi 5, Rock 5, ampere, KU-1255 test rigs |
| Arch Linux | x86_64 |
for nuccies / workstations |
| Debian | arm64, amd64 |
for non-Arch hosts |
MIPS is intentionally unsupported. The Fritz!Box is sacred.
Layout (served at packages.reauktion.de)
packages.reauktion.de/
├── arch/
│ ├── aarch64/{marfrit.db,marfrit.files,*.pkg.tar.{xz,zst}{,.sig}}
│ └── x86_64/...
├── debian/
│ ├── dists/
│ │ ├── bookworm/{Release,InRelease,Release.gpg,main/binary-{arm64,amd64}/...}
│ │ └── trixie/...
│ └── pool/main/...
└── marfrit.gpg # public signing key
Adding the repo (Arch / ALARM)
curl -sO https://packages.reauktion.de/marfrit.gpg
sudo pacman-key --add marfrit.gpg
sudo pacman-key --lsign-key 92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C
# Paste at the end of /etc/pacman.conf:
[marfrit]
Server = https://packages.reauktion.de/arch/$arch
SigLevel = Required DatabaseRequired
sudo pacman -Sy
Adding the repo (Debian)
sudo install -m 755 -d /etc/apt/keyrings
curl -s https://packages.reauktion.de/marfrit.gpg | \
sudo gpg --dearmor -o /etc/apt/keyrings/marfrit.gpg
echo "deb [signed-by=/etc/apt/keyrings/marfrit.gpg] https://packages.reauktion.de/debian $(lsb_release -cs) main" | \
sudo tee /etc/apt/sources.list.d/marfrit.list
sudo apt update
Signing key
- Fingerprint:
92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C - UID:
Markus Fritsche (marfrit-repo signing) <mfritsche@reauktion.de> - Expires: 2030-04-13
Key management procedures (renewal, rotation, revocation) live in DokuWiki at private:reauktion:marfrit_repo_key (admin-only).
Layout in this Git repo
marfrit-packages/
├── README.md
├── arch/
│ └── distcc-avahi/ # ALARM distcc with --with-avahi
├── debian/ # (future) Debian source packages
└── .gitea/
└── workflows/
└── build.yml # CI pipeline stub
mfritsche@reauktion.de.