dotfiles-public/dot_local/share/dotup/packages.tsv

1	#group	pkg	flag	apt	brew	note
2	#
3	# Five columns, tab separated, greppable by hand. Anything that would have been
4	# a sixth column is an @ directive instead, so a package with no dependency and
5	# no install argument -- most of them -- costs nothing to read.
6	#
7	# @needs <group/pkg> <dep>... dep is group/pkg or a whole group.
8	# Closure is transitive in both directions.
9	# @spec <group/pkg> <arg>... Argument for a channel that cannot be named
10	# by the package: the npm spec, the flatpak
11	# app id, the .deb source. Defaults to the
12	# package name when absent.
13	# @<group> <note> Group note. Only needed where the members
14	# fail the safe test for different reasons;
15	# otherwise the worst child's note is right.
16	#
17	# -tarball -npm -script -snap -deb -flatpak -uv -builtin -xcode.
18	# A bare `-` means unavailable there. Linux falls back to the brew column before
19	# giving up -- omp, herdr and lazygit have no apt package at all. The fallback is
20	# one-directional: there is no apt on a Mac, so a `-` in the brew column is the
21	# end of the road rather than a reason to read a column of Debian package names.
22	#
23	@needs	networking/xrdp	desktop
24	@needs	networking/xorgxrdp	desktop
25	@needs	gpu/container-toolkit	docker
26	@needs	agents/codex	core/node
27	@needs	agents/pi	core/node
28	@needs	agents/pi-plugins	core/node
29	@needs	agents/pi-plugins	agents/pi
30	@needs	agents/specify-cli	core/uv
31	@needs	core/mermaid-cli	core/node
32	@needs	core/tree-sitter	core/node
33	# The three rows with no apt package at all. They resolved to brew and
34	# nothing installed brew, so `^a` ticked them and they failed on every
35	# fresh Linux box. On Linux brew lives entirely under
36	# /home/linuxbrew/.linuxbrew, which find_tool already probes.
37	@needs	core/lazygit	core/brew
38	@needs	agents/omp	core/brew
39	@needs	agents/herdr	core/brew
40	@needs	core/neovim	core/imagemagick core/mermaid-cli
41	@needs	private/bws-secrets	core/unzip
42	#
43	# npm names carry scopes that the plugin's short name does not. `npm i -g
44	# rpiv-btw` installs somebody else's package.
45	@spec	agents/codex	@openai/codex
46	@spec	agents/pi	@earendil-works/pi-coding-agent
47	@spec	agents/pi-plugins	@juicesharp/rpiv-ask-user-question @juicesharp/rpiv-btw @juicesharp/rpiv-todo @samfp/pi-memory @tmustier/pi-ralph-wiggum pi-markdown-preview pi-powerline-footer pi-simplify pi-subagents pi-web-access
48	@spec	agents/specify-cli	specify-cli
49	@spec	core/mermaid-cli	@mermaid-js/mermaid-cli
50	@spec	core/tree-sitter	tree-sitter-cli
51	@spec	core/bitwarden-cli	bw
52	@spec	apps/obsidian	md.obsidian.Obsidian
53	@spec	apps/chrome	https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
54	@spec	apps/ghostty	gh:mkasberg/ghostty-ubuntu:_%a_%v.deb
55	core	neovim	safe	-tarball	neovim	apt ships 0.9.5 — tarball to /opt/nvim
56	core	ripgrep	safe	ripgrep	ripgrep	binary is rg
57	core	fd	safe	fd-find	fd	binary is fdfind on ubuntu
58	core	bat	safe	bat	bat	binary is batcat on ubuntu
59	core	fzf	safe	fzf	fzf	for your shell (ctrl-r); the picker uses its own pinned copy
60	core	eza	safe	eza	eza
61	core	zsh	safe	zsh	-builtin	login shell everywhere
62	core	tmux	safe	tmux	tmux
63	core	git-lfs	safe	git-lfs	git-lfs
64	core	lazygit	safe	-	lazygit	no apt package
65	core	gh	safe	gh	gh
66	core	chezmoi	safe	-script	chezmoi	bootstrap cannot come from the manifest
67	core	go	safe	-tarball	go	/usr/local/go on linux
68	core	uv	safe	-script	uv	astral installer to ~/.local/bin
69	core	brew	safe	-script	-builtin	linuxbrew — the only source for lazygit, omp and herdr
70	core	node	safe	-tarball	node	apt ships 18.19 and the npm rows below need 20+ — tarball to /opt/node
71	core	imagemagick	safe	imagemagick	imagemagick	required by the nvim markdown render path
72	core	mermaid-cli	safe	-npm	-npm	mmdc — nvim renders mermaid fences with it
73	core	tree-sitter	safe	-npm	-npm	tree-sitter CLI — nvim-treesitter (main) refuses to start without it
74	core	btop	safe	btop	btop
75	core	htop	safe	htop	htop
76	core	ncdu	safe	ncdu	ncdu
77	core	unzip	safe	unzip	unzip	the bws release ships as a .zip, and 24.04 minimal has no unzip
78	core	tree	safe	tree	tree
79	core	cmake	safe	cmake	cmake
80	core	ninja	safe	ninja-build	ninja	package name differs from binary
81	core	build-tools	safe	build-essential	-xcode
82	core	magic-wormhole	safe	magic-wormhole	magic-wormhole	snap wormhole on dev
83	core	bitwarden-cli	safe	-snap	bitwarden-cli	snap bw on ubuntu
84	core	mosh	safe	mosh	mosh
85	core	nmap	safe	nmap	nmap
86	core	binwalk	safe	binwalk	binwalk
87	core	pipx	safe	pipx	pipx
88	core	age	safe	age	age	general purpose only now
89	agents	codex	safe	-npm	-npm	@openai/codex — unpinned, always latest
90	agents	pi	safe	-npm	-npm	@earendil-works/pi-coding-agent
91	agents	pi-plugins	safe	-npm	-npm	10 plugins: rpiv-*, pi-memory, pi-subagents, ...
92	agents	omp	safe	-	can1357/tap/omp	oh my pi — tap only, pulls linuxbrew on linux
93	agents	herdr	safe	-	herdr	terminal workspace manager for agents
94	agents	specify-cli	safe	-uv	-uv	uv tool install
95	fonts	hack-nerd-font	safe	fonts-powerline	font-hack-nerd-font
96	fonts	iosevka-nerd-font	safe	fonts-powerline	font-iosevka-nerd-font
97	media	ffmpeg	safe	ffmpeg	ffmpeg
98	media	sox	safe	sox	sox
99	media	p7zip	safe	p7zip-full	p7zip
100	apps	obsidian	gui	-flatpak	obsidian
101	apps	ghostty	gui	-deb	ghostty
102	apps	chrome	gui	-deb	google-chrome
103	apps	firefox	gui	firefox	firefox
104	apps	vlc	gui	vlc	vlc
105	@networking	daemons, listening ports, and setuid mount helpers
106	networking	openssh-server	invasive	openssh-server	-builtin	opens port 22 on every network this box can reach
107	networking	tailscale	invasive	tailscale	tailscale	daemon; joins a private network and rewrites DNS
108	networking	avahi-daemon	invasive	avahi-daemon	-	daemon; broadcasts this host on the LAN
109	networking	xrdp	invasive	xrdp	-	opens port 3389 · useless without the desktop group
110	networking	xorgxrdp	invasive	xorgxrdp	-	xrdp's X backend
111	networking	nfs-common	invasive	nfs-common	-	setuid mount helper
112	networking	cifs-utils	invasive	cifs-utils	-	setuid mount helper
113	networking	davfs2	invasive	davfs2	-	setuid mount helper
114	@docker	daemon; membership in the docker group is root-equivalent
115	docker	docker-ce	invasive	docker-ce	-	daemon; docker group is root-equivalent
116	docker	docker-buildx	invasive	docker-buildx-plugin	-
117	docker	docker-compose	invasive	docker-compose-plugin	-
118	@desktop	changes the display manager — can leave you at a black screen
119	desktop	xfce4	invasive	xfce4	-	changes the display manager
120	desktop	lightdm	invasive	lightdm	-	CAN LEAVE YOU AT A BLACK SCREEN
121	@gpu	kernel modules; a bad driver can break boot
122	gpu	nvidia-driver	invasive	nvidia-driver-570	-	kernel modules; can break boot
123	gpu	cuda-toolkit	invasive	nvidia-cuda-toolkit	-
124	gpu	container-toolkit	invasive	nvidia-container-toolkit	-	requires docker
125	@virt	daemon, bridges, and group membership
126	virt	qemu	invasive	qemu-kvm	-
127	virt	libvirt	invasive	libvirt-daemon-system	-	daemon + group membership
128	virt	virt-manager	invasive	virt-manager	-
129	@private	one password, typed after the install finishes
130	private	private-repo	private	-	-	~/.local/share/dotfiles-private — agent config, ssh config
131	private	bws-secrets	private	-	-	bws + 7 API keys into ~/.config/zsh/secrets.zsh; the tier installs bws itself