etc/portage/package.accept_keywords/05boot

@@ -0,0 +1,5 @@
+# /etc/portage/package.accept_keywords/05boot
+# Keywords for boot system
+
+# zlevis
+dev-libs/jose ~amd64

etc/portage/package.license/kernel

@@ -1,4 +1,4 @@
-# /etc/portage/package.license/firmware
+# /etc/portage/package.license/kernel
 # Accept firmware licenses
 
 sys-kernel/linux-firmware linux-fw-redistributable @BINARY-REDISTRIBUTABLE

etc/portage/package.mask/river

@@ -0,0 +1,4 @@
+# /etc/portage/package.mask/river
+# Mask river 0.4 to remain in river classic
+
+>=gui-wm/river-0.4

etc/portage/package.use/05boot

@@ -3,9 +3,7 @@
 
 # installkernel
 sys-kernel/installkernel dracut ukify uki
-
-# systemd-boot
 sys-apps/systemd-utils kernel-install boot ukify
 
-# tpm
+# zlevis
 app-crypt/zlevis dracut

etc/portage/sets/base

@@ -3,27 +3,34 @@
 
 # kernel
 sys-kernel/linux-firmware
+#sys-firmware/intel-microcode
 sys-kernel/gentoo-sources
 sys-kernel/modprobed-db
-sys-power/acpid
+sys-apps/openrc
-
-# filesystem
 sys-fs/zfs
 sys-fs/zfs-kmod
+sys-power/acpid
+#app-laptop/laptop-mode-tools
+
+# boot
+app-crypt/sbsigntools
+app-crypt/sbctl
+app-crypt/zlevis
+app-crypt/jitterentropy
+sys-apps/systemd-utils
 
 # portage
 sys-apps/portage
+app-eselect/eselect-repository
 app-portage/cpuid2cpuflags
 app-portage/gentoolkit
-app-eselect/eselect-repository
 app-admin/eclean-kernel
 
 # musl
 sys-libs/timezone-data
 sys-libs/error-standalone
 
-# init/services
+# services
-sys-apps/openrc
 net-misc/openntpd
 sys-block/zram-init
 net-misc/networkmanager
@@ -31,8 +38,7 @@ net-wireless/bluez
 net-vpn/tailscale
 net-print/cups-meta
 
-# security
+# apparmor
-app-crypt/jitterentropy
 sys-apps/apparmor
 sys-apps/apparmor-utils
 sec-policy/apparmor-profiles

etc/portage/sets/boot

@@ -1,12 +0,0 @@
-# /etc/portage/sets/boot
-# Set containing packages for boot system
-
-# systemd-boot
-sys-apps/systemd-utils
-
-# secureboot
-app-crypt/sbctl
-app-crypt/sbsigntools
-
-# tpm
-app-crypt/zlevis