recipe.yml

name: Custom Vanilla Surface Image
id: surface-nv
stages:
- id: build
  base: ghcr.io/vanilla-os/nvidia:main # nvidia:main does not build with the latest linux-surface kernel
  singlelayer: false
  labels:
    maintainer: self-maintained
  args:
    DEBIAN_FRONTEND: noninteractive # Set the image environment as non-interactive
  
  # Commands to run first before building the modules
  runs:
    commands:
      - echo 'APT::Install-Recommends "1";' > /etc/apt/apt.conf.d/01norecommends

  modules:
  - name: init-setup
    type: shell
    commands:
    - lpkg --unlock
    - apt-get update

  # Put your custom actions behind this comment
  - name: surface-kernel
    type: shell
    commands:
    - >- 
      wget -qO - https://raw.githubusercontent.com/linux-surface/linux-surface/master/pkg/keys/surface.asc \
      | gpg --dearmor | dd of=/etc/apt/trusted.gpg.d/linux-surface.gpg
    - >-
      echo "deb [arch=amd64] https://pkg.surfacelinux.com/debian release main" \
      | tee /etc/apt/sources.list.d/linux-surface.list
    - apt-get update

  - name: surface-kernel
    type: shell
    commands:
    - >-
      apt-mark hold linux-image-surface linux-headers-surface libwacom-surface iptsd surface-control
    modules:
      - name: install-surface-kernel
        type: apt
        source:
          packages:
            - linux-image-6.9.9-surface-1
            - linux-headers-6.9.9-surface-1
            - libwacom-surface
            - iptsd
            - surface-control
            
  - name: nvidia-extras
    type: apt
    source:
      packages:
        - nvidia-powerd
  - name: nvidia-config
    type: shell
    commands:
    - >-
      cp /usr/share/doc/nvidia-powerd/examples/nvidia-powerd.service
      /etc/systemd/system/nvidia-powerd.service
    - systemctl enable nvidia-powerd.service

  # Put your custom actions before this comment

  - name: set-image-name-abroot
    type: includes
    includes:
      - modules/80-set-image-abroot-config.yml

  - name: cleanup
    type: shell
    commands:
    - apt-get autoremove -y
    - apt-get clean
    - lpkg --lock

  - name: fsguard
    type: fsguard
    CustomFsGuard: false
    FsGuardLocation: "/usr/sbin/FsGuard"
    GenerateKey: true
    FilelistPaths: ["/usr/bin"]
    modules:
      - name: remove-prev-fsguard
        type: shell
        commands:
          - rm -rf /FsGuard 
          - rm -f ./minisign.pub ./minisign.key 
          - chmod +x /usr/sbin/init

  - name: cleanup2
    type: shell
    commands:
      - rm -rf /tmp/*
      - rm -rf /var/tmp/*
      - rm -rf /sources