refactor: migrate Homebrew from RPM to Containerfile

Containerfile

@@ -31,6 +31,27 @@ RUN --mount=type=cache,dst=/var/cache/libdnf5 \
     --mount=type=secret,id=GITHUB_TOKEN \
     /ctx/build_files/shared/build.sh
 
+# Download Homebrew tarball (extracted at first boot by brew-setup.service)
+RUN --mount=type=bind,from=ctx,source=/,target=/ctx \
+    --mount=type=secret,id=GITHUB_TOKEN \
+    set -eoux pipefail && \
+    ARCH=$(uname -m) && \
+    # Get latest homebrew release tag from GitHub API
+    HOMEBREW_RELEASE=$(curl -sL \
+        -H "Accept: application/vnd.github+json" \
+        -H "X-GitHub-Api-Version: 2022-11-28" \
+        "https://api.github.com/repos/ublue-os/packages/releases" | \
+        jq -r '[.[] | select(.tag_name | startswith("homebrew-"))][0].tag_name') && \
+    echo "Using Homebrew release: ${HOMEBREW_RELEASE}" && \
+    HOMEBREW_BASE_URL="https://github.com/ublue-os/packages/releases/download/${HOMEBREW_RELEASE}" && \
+    # Download tarball to /usr/share 
+    /ctx/build_files/shared/utils/ghcurl "${HOMEBREW_BASE_URL}/homebrew-${ARCH}.tar.zst" --retry 3 -o /usr/share/homebrew.tar.zst && \
+    # Download and verify checksum
+    EXPECTED_SHA=$(/ctx/build_files/shared/utils/ghcurl "${HOMEBREW_BASE_URL}/homebrew-${ARCH}.sha256" --retry 3 | awk '{print $1}') && \
+    echo "${EXPECTED_SHA}  /usr/share/homebrew.tar.zst" | sha256sum -c && \
+    # Verify tarball exists
+    test -f /usr/share/homebrew.tar.zst
+
 # Makes `/opt` writeable by default
 # Needs to be here to make the main image build strict (no /opt there)
 # This is for downstream images/stuff like k0s

build_files/base/04-packages.sh

@@ -29,6 +29,7 @@ FEDORA_PACKAGES=(
     ddcutil
     evtest
     fastfetch
+    file
     firewall-config
     fish
     foo2zjs
@@ -124,7 +125,6 @@ copr_install_isolated "ublue-os/packages" \
     "bluefin-schemas" \
     "bluefin-fastfetch" \
     "ublue-bling" \
-    "ublue-brew" \
     "ublue-fastfetch" \
     "ublue-motd" \
     "ublue-polkit-rules" \

build_files/base/17-cleanup.sh

@@ -16,9 +16,6 @@ systemctl enable tailscaled.service
 systemctl enable dconf-update.service
 systemctl enable ublue-guest-user.service
 systemctl --global enable bazaar.service
-systemctl enable brew-setup.service
-systemctl enable brew-upgrade.timer
-systemctl enable brew-update.timer
 systemctl enable ublue-fix-hostname.service
 systemctl enable ublue-system-setup.service
 systemctl --global enable ublue-user-setup.service
@@ -27,6 +24,11 @@ systemctl enable check-sb-key.service
 systemctl enable input-remapper.service
 systemctl enable flatpak-nuke-fedora.service
 
+# Homebrew setup (extracts tarball on first boot) and auto-update/upgrade timers
+systemctl enable brew-setup.service
+systemctl enable brew-update.timer
+systemctl enable brew-upgrade.timer
+
 # run flatpak preinstall once at startup
 if [[ "$(rpm -E %fedora)" -ge "42" ]]; then
   systemctl enable flatpak-preinstall.service

build_files/base/20-tests.sh

@@ -62,6 +62,7 @@ done
 #fi
 
 IMPORTANT_UNITS=(
+    brew-setup.service
     brew-update.timer
     brew-upgrade.timer
     rpm-ostree-countme.timer

iso_files/configure_iso_anaconda.sh

@@ -11,7 +11,7 @@ sbkey='https://github.com/ublue-os/akmods/raw/main/certs/public_key.der'
 # Configure Live Environment
 
 # Remove packages from liveCD to save space
-dnf remove -y ublue-brew ublue-motd || true
+dnf remove -y ublue-motd || true
 
 # Setup dock
 tee /usr/share/glib-2.0/schemas/zz2-org.gnome.shell.gschema.override <<EOF

iso_files/configure_lts_iso_anaconda.sh

@@ -11,7 +11,7 @@ IMAGE_REF="${IMAGE_REF##*://}"
 # Configure Live Environment
 
 # Remove packages from liveCD to save space
-dnf remove -y google-noto-fonts-all ublue-brew ublue-motd yaru-theme || true
+dnf remove -y ublue-motd || true
 
 # Setup dock
 tee /usr/share/glib-2.0/schemas/zz2-org.gnome.shell.gschema.override <<EOF
@@ -38,9 +38,9 @@ glib-compile-schemas /usr/share/glib-2.0/schemas
 systemctl disable rpm-ostree-countme.service
 systemctl disable tailscaled.service
 systemctl disable bootloader-update.service
-# systemctl disable brew-upgrade.timer
-# systemctl disable brew-update.timer
-# systemctl disable brew-setup.service
+systemctl disable brew-upgrade.timer
+systemctl disable brew-update.timer
+systemctl disable brew-setup.service
 systemctl disable rpm-ostreed-automatic.timer
 systemctl disable uupd.timer
 systemctl disable ublue-system-setup.service