Skip to content

content: add AWS CLI and Proton Mail setup guides - #161

Open
Stensel8 wants to merge 2 commits into
mainfrom
autofix/gifted-darwin-26crwi
Open

Stensel8 wants to merge 2 commits into
mainfrom
autofix/gifted-darwin-26crwi

Conversation

@Stensel8

@Stensel8 Stensel8 commented Sep 20, 2026

Copy link
Copy Markdown
Member

Summary

Adds an AWS CLI section to the development page, and documents Proton's own .rpm for Proton Mail on the productivity page. EN and NL.

Type of change

  • feat: new page or feature
  • fix: bug fix (broken link, incorrect command, layout issue)
  • content: update or improve existing content
  • docs: changes to CONTRIBUTING, README, or meta documentation
  • chore: maintenance (dependencies, config, CI/CD)
  • refactor: restructuring without content changes
  • style: formatting, whitespace, typos
  • revert: reverting a previous commit

PR title and commit types must follow these standards, see the contributing guide

Changes

AWS CLI — applications/development.md + .nl.md

  • aws-cli-v2 from the extra repository on CachyOS, brew install awscli on Bazzite.
  • AWS's own signed zip as a distribution-independent alternative. Order is download → import AWS's key → check the fingerprint → gpg --verify → unzip and install, so nothing runs as root before the signature checks out.
  • The fingerprint to compare against comes from the issuer subpacket of the signature AWS serves. Note added to take the key from AWS's own page rather than a keyserver: the keyserver.ubuntu.com copy expired 2026-07-07 while AWS kept signing releases with it.
  • That installer needs no layering on Bazzite: /usr/local is a symlink to /var/usrlocal on an atomic image and therefore writable. Nothing updates it for you, though.
  • aws configure sso over long-lived access keys, what each writes to disk, and aws sts get-caller-identity to confirm. aws cloudformation and the Terraform AWS provider resolve credentials through the same profile chain.

Proton Mail — applications/productivity.md + .nl.md

  • Proton publishes its own .deb and .rpm. On ordinary Fedora: dnf install ./ProtonMail-desktop-*.rpm.
  • That install gives dependency handling and a clean dnf remove, but no updates: no Proton repository sits behind the file, so every release means downloading the RPM again.
  • Bazzite has no dnf on the host, so the same file means rpm-ostree install on a local RPM — a layered package and a reboot, per release. The Flatpak stays the better option there.
  • Nothing changes on CachyOS: proton-mail-bin is already native.

Checklist

  • PR title follows the commit convention (e.g. fix: correct nmcli command in eduroam guide)
  • Both EN and NL versions updated (if applicable)
  • Media is in AVIF format (not PNG/JPG) — no media in this PR
  • No broken image references (/images/*.avif all exist in static/images/)
  • Tested locally — hugo --gc --minify --printPathWarnings --panicOnWarning on Hugo 0.166.0, plus markdownlint and an EN/NL heading-parity check

Note: the [code]smith footer was dropped from this description. Carrying it through an edit mangled its <source>/<img> tags into escaped text, so removing it was cleaner than leaving the broken markup. The bot can re-add its own footer.

🤖 Generated with Claude Code

https://claude.ai/code/session_017B71vbJKGqzzGfkqM2mLek

Two additions to the applications section, EN and NL.

AWS CLI, on the development page: aws-cli-v2 from the extra repository
on CachyOS, Homebrew on Bazzite, plus AWS's own signed zip with the GPG
verification step. The installer writes to /usr/local, which is a
symlink to /var/usrlocal on an atomic image, so it needs no layering and
no reboot. Also covers aws configure sso over plain access keys, what
each writes to disk, and why getting this right is what makes
CloudFormation and the Terraform AWS provider authenticate.

Proton Mail, on the productivity page: Proton publishes its own .deb and
.rpm now, so the page says what that is worth per distribution. On
CachyOS nothing changes, proton-mail-bin is already native. On Bazzite
the RPM is a step back rather than forward: there is no repository
behind it, so it means rpm-ostree layering and a reboot per release,
the same wall the WinBoat page runs into. The Flatpak stays the
recommendation there.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017B71vbJKGqzzGfkqM2mLek
Copilot AI lite review requested due to automatic review settings September 20, 2026 15:06

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Critical AWS signature-verification issues and additional authentication, architecture, and package-update clarifications remain unresolved.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: 2 High severity · 2 Medium severity

Open (4)
What changed in this PR

Adds AWS CLI setup guidance and expands Proton Mail packaging documentation for CachyOS, Fedora, and Bazzite in English and Dutch.

Changes:

  • Documents AWS CLI installation, verification, authentication, and profile usage.
  • Adds Proton Mail RPM guidance and atomic-host considerations.
  • Updates matching English and Dutch documentation.
File Summary
src/​content/​docs/​applications/​productivity.nl.md Dutch Proton Mail packaging guidance
src/​content/​docs/​applications/​productivity.md English Proton Mail packaging guidance
src/​content/​docs/​applications/​development.nl.md Dutch AWS CLI setup guide
src/​content/​docs/​applications/​development.md English AWS CLI setup guide

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread src/content/docs/applications/development.md Outdated
Comment thread src/content/docs/applications/development.nl.md Outdated
Comment thread src/content/docs/applications/productivity.md Outdated
Comment thread src/content/docs/applications/productivity.nl.md Outdated
Copilot review on #161 caught two real problems.

The AWS CLI installer block ran sudo ./aws/install before the GPG check,
and the check itself was incomplete: gpg --verify stops at "Can't check
signature: No public key" without AWS's key in the keyring. Reordered to
download, import, verify, then install, with the key import and the
fingerprint to compare against. The fingerprint comes from the issuer
subpacket of the signature AWS serves. Note added that the key belongs
on AWS's own page rather than a keyserver: the copy on
keyserver.ubuntu.com expired in July 2026 while AWS kept signing
releases with it.

The Proton Mail page claimed dnf "owns the app" after a local RPM
install. It registers the package and handles dependencies, but adds no
repository, so updates still mean downloading the RPM again. Corrected,
and the Bazzite paragraph now names the actual reason the file is
awkward there: no dnf on the host.

Both sections rewritten shorter along the way, dropping commentary that
carried no information.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017B71vbJKGqzzGfkqM2mLek
@Stensel8 Stensel8 self-assigned this Sep 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants