From 497ed1c02cd4a3e1d42792d93259be847cfd11ec Mon Sep 17 00:00:00 2001
From: Timothée Ravier <tim@siosm.fr>
Date: Dec 22 2025 13:31:00 +0000
Subject: [PATCH 1/2] silverblue-common: Move postprocess comment to specific script


---

diff --git a/silverblue-common.yaml b/silverblue-common.yaml
index 155a6f3..1404603 100644
--- a/silverblue-common.yaml
+++ b/silverblue-common.yaml
@@ -34,11 +34,11 @@ packages:
   # See: https://github.com/fedora-silverblue/issue-tracker/issues/201
   - openssl
 
-# Skip Third Party Software page in GNOME Initial Setup as it currently does
-# not work. See: https://bugzilla.redhat.com/show_bug.cgi?id=2362164
-# Users will be offered the option to enable third party repositories again the
-# first time they open GNOME Software.
 postprocess:
+  # Skip Third Party Software page in GNOME Initial Setup as it currently does
+  # not work. See: https://bugzilla.redhat.com/show_bug.cgi?id=2362164
+  # Users will be offered the option to enable third party repositories again the
+  # first time they open GNOME Software.
   - |
     #!/bin/bash
     set -xeuo pipefail

From 5b4bba7d2555006ea116f6f68d744a32489e1ee5 Mon Sep 17 00:00:00 2001
From: Timothée Ravier <tim@siosm.fr>
Date: Dec 22 2025 13:31:00 +0000
Subject: [PATCH 2/2] Make uid/gid fix for gnome-remote-desktop Silverblue only


Fixes: 052faae dynamic-ugid: Add workaround for gnome-remote-desktop

---

diff --git a/dynamic-ugid-ownership-fixes.yaml b/dynamic-ugid-ownership-fixes.yaml
index 03b06b4..cfd9343 100644
--- a/dynamic-ugid-ownership-fixes.yaml
+++ b/dynamic-ugid-ownership-fixes.yaml
@@ -10,6 +10,4 @@ postprocess:
     Z /var/lib/passim - passim passim
     Z /var/log/passim - passim passim
     Z /etc/colord/    - colord colord
-    Z /var/lib/gnome-remote-desktop/ - gnome-remote-desktop gnome-remote-desktop
-    Z /etc/gnome-remote-desktop/     - gnome-remote-desktop gnome-remote-desktop
     EOF
diff --git a/silverblue-common.yaml b/silverblue-common.yaml
index 1404603..67aded5 100644
--- a/silverblue-common.yaml
+++ b/silverblue-common.yaml
@@ -48,3 +48,13 @@ postprocess:
     # Do not show the Third Party Software page
     skip=software
     EOF
+  # Selected ownership fixes for files in /etc & /var owned by a dynamic UID/GID
+  # See: https://gitlab.com/fedora/ostree/sig/-/issues/90
+  - |
+    #!/bin/bash
+    set -xeuo pipefail
+
+    cat > /usr/lib/tmpfiles.d/90-silverblue-ownership-fixes.conf << 'EOF'
+    Z /var/lib/gnome-remote-desktop/ - gnome-remote-desktop gnome-remote-desktop
+    Z /etc/gnome-remote-desktop/     - gnome-remote-desktop gnome-remote-desktop
+    EOF