Conversation
Two additions to the applications section, EN and NL. AWS CLI, on the development page: aws-cli-v2 from the extra repository on CachyOS, Homebrew on Bazzite, plus AWS's own signed zip with the GPG verification step. The installer writes to /usr/local, which is a symlink to /var/usrlocal on an atomic image, so it needs no layering and no reboot. Also covers aws configure sso over plain access keys, what each writes to disk, and why getting this right is what makes CloudFormation and the Terraform AWS provider authenticate. Proton Mail, on the productivity page: Proton publishes its own .deb and .rpm now, so the page says what that is worth per distribution. On CachyOS nothing changes, proton-mail-bin is already native. On Bazzite the RPM is a step back rather than forward: there is no repository behind it, so it means rpm-ostree layering and a reboot per release, the same wall the WinBoat page runs into. The Flatpak stays the recommendation there. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017B71vbJKGqzzGfkqM2mLek
Contributor
There was a problem hiding this comment.
Copilot review overview
🟡 Changes recommended
Critical AWS signature-verification issues and additional authentication, architecture, and package-update clarifications remain unresolved.
Get a fresh assessment by requesting another Copilot review.
Review effort: Lite
Findings: 2
Open (4)
What changed in this PR
Adds AWS CLI setup guidance and expands Proton Mail packaging documentation for CachyOS, Fedora, and Bazzite in English and Dutch.
Changes:
- Documents AWS CLI installation, verification, authentication, and profile usage.
- Adds Proton Mail RPM guidance and atomic-host considerations.
- Updates matching English and Dutch documentation.
| File | Summary |
|---|---|
src/content/docs/applications/productivity.nl.md |
Dutch Proton Mail packaging guidance |
src/content/docs/applications/productivity.md |
English Proton Mail packaging guidance |
src/content/docs/applications/development.nl.md |
Dutch AWS CLI setup guide |
src/content/docs/applications/development.md |
English AWS CLI setup guide |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Copilot review on #161 caught two real problems. The AWS CLI installer block ran sudo ./aws/install before the GPG check, and the check itself was incomplete: gpg --verify stops at "Can't check signature: No public key" without AWS's key in the keyring. Reordered to download, import, verify, then install, with the key import and the fingerprint to compare against. The fingerprint comes from the issuer subpacket of the signature AWS serves. Note added that the key belongs on AWS's own page rather than a keyserver: the copy on keyserver.ubuntu.com expired in July 2026 while AWS kept signing releases with it. The Proton Mail page claimed dnf "owns the app" after a local RPM install. It registers the package and handles dependencies, but adds no repository, so updates still mean downloading the RPM again. Corrected, and the Bazzite paragraph now names the actual reason the file is awkward there: no dnf on the host. Both sections rewritten shorter along the way, dropping commentary that carried no information. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017B71vbJKGqzzGfkqM2mLek
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.


Summary
Adds an AWS CLI section to the development page, and documents Proton's own
.rpmfor Proton Mail on the productivity page. EN and NL.Type of change
feat: new page or featurefix: bug fix (broken link, incorrect command, layout issue)content: update or improve existing contentdocs: changes to CONTRIBUTING, README, or meta documentationchore: maintenance (dependencies, config, CI/CD)refactor: restructuring without content changesstyle: formatting, whitespace, typosrevert: reverting a previous commitChanges
AWS CLI —
applications/development.md+.nl.mdaws-cli-v2from theextrarepository on CachyOS,brew install awsclion Bazzite.gpg --verify→ unzip and install, so nothing runs as root before the signature checks out.keyserver.ubuntu.comcopy expired 2026-07-07 while AWS kept signing releases with it./usr/localis a symlink to/var/usrlocalon an atomic image and therefore writable. Nothing updates it for you, though.aws configure ssoover long-lived access keys, what each writes to disk, andaws sts get-caller-identityto confirm.aws cloudformationand the Terraform AWS provider resolve credentials through the same profile chain.Proton Mail —
applications/productivity.md+.nl.md.deband.rpm. On ordinary Fedora:dnf install ./ProtonMail-desktop-*.rpm.dnf remove, but no updates: no Proton repository sits behind the file, so every release means downloading the RPM again.dnfon the host, so the same file meansrpm-ostree installon a local RPM — a layered package and a reboot, per release. The Flatpak stays the better option there.proton-mail-binis already native.Checklist
fix: correct nmcli command in eduroam guide)/images/*.avifall exist instatic/images/)hugo --gc --minify --printPathWarnings --panicOnWarningon Hugo 0.166.0, plus markdownlint and an EN/NL heading-parity check🤖 Generated with Claude Code
https://claude.ai/code/session_017B71vbJKGqzzGfkqM2mLek