Add and install TODO.

2 files changed, 52 insertions, 1 deletions

diff --git a/Makefile b/Makefile
index 984a4af..6deeeed 100644
--- a/Makefile
+++ b/Makefile
@@ -19,7 +19,7 @@ mdfiles = content/MD5SUMS
 shafiles = $(patsubst %,content/SHA%SUMS,1 256 512)
 checksumfiles = $(mdfiles) $(shafiles)
 signfiles = $(patsubst %,%.sign,$(checksumfiles))
-info = content/NEWS
+info = content/NEWS content/TODO
 
 all: $(checksumfiles) $(info)
 sign: $(signfiles)
diff --git a/TODO b/TODO
new file mode 100644
index 0000000..0de69a5
--- /dev/null
+++ b/TODO
@@ -0,0 +1,51 @@
+Profiles:
+  * Tweak XScreenSaver to enable only unicode-screensaver by default,
+    and append "-background black -foreground white"
+  * capture and declare preseeding values from install session w/ disk
+    wiping not interrupted
+  * Create new package for strong Debian branding with rebranding hooks
+  * what about addressbooks?
+  * Include gpa?
+  * Conditionally enable OpenGL dependencies when supported by hardware
+
+Profiles, for Jessie and newer:
+  * install xul-ext-y-u-no-validate
+  * Update lists of locale-specific packages, adding ones for Iceowl
+  * Update media profile to drop ESounD support
+  * Update media profile to include mpv (and exclude mplayer2)
+
+Deployment:
+  * test that auto-updating security fixes actually works
+  * simple mailinglist subscription
+  * Create new package for strong Debian branding with rebranding hooks
+  * what about addressbooks? Just use gpa?
+  * Document maintenance (passwords change, crypto key revocation, etc.)
+  * Document simple backup routines (using e.g. 2GB USB stick)
+  * Document host rename (and LVM volume too, if safe when encrypted)
+  * Document use of certificate-based wifi authentication
+  * Document workaround to ugly hostname:
+    * When standing on menu option "auto" hit TAB (not ENTER), delete
+      "priority=critical", and hit ENTER.
+
+Deployment, for Lenovo Edge E145:
+  * Use unofficial firmware installer (to simplify post-install tuning)
+  * Document laptop preparation for smoothest possible user install:
+    * Disable secure boot
+    * use only legacy BIOS mode (avoid UEFI)
+    * enable usb boot support
+    * disable Wake On LAN
+    * disable LAN Option ROM
+    * Exclude any boot devices but internal disk and USB HDD
+    * Delete any existing UEFI boot devices
+    * boot from usb (via F12), install past disk erasure, switch off
+  * Document post-install tuning:
+    * sudo aptitude install firmware-linux firmware-realtek broadcom-sta-dkms
+
+Bugs (report to Debian and track here until fixed in stable):
+  * Lots of core packages should be apt-mark'ed as auto-installed
+  * root shell should use use skel files (with "dmesg n" added?)
+  * documented use of TAB at install screen unusable with UEFI
+  * documented use of "d-i partman-auto/method string crypto" is ignored
+    (or maybe just needs _all_ vars included, from uninterrupted wipe)
+  * task-xfce-desktop should recommend xfce4-session (not xfce4)
+    - or xfce4 should only recommend (not depend on) packages like orage