Initial commit: linux-provision repo

Distribution-agnostic provisioning script that sets up a new Linux machine
(Detected via lib/distro.sh - supports Debian/Ubuntu/Pop and Fedora families).

13 stages covering:
- System packages, external repos, toolchains (nvm, uv, Python)
- Shell config (zsh, oh-my-zsh, p10k), git, SSH
- Custom uv tools from ~40 git repos
- Desktop config (keybindings, hotkeys, ghostty, fonts)
- Docker, system tweaks, browser/app installs
- Custom systemd user services (porridge, swayidle, mempi-sync, etc.)
- API keys loaded from Bitwarden at shell startup

README.md

@@ -0,0 +1,106 @@
+# Linux Machine Provisioning
+
+**Purpose:** Rapidly set up a new Fedora Linux machine with Julian's toolchain,
+config, and customisations. Generated from audit of Pop!_OS "thinkpad" machine.
+
+## Supported Distributions
+
+Auto-detected — no manual config needed:
+
+| Family | Distros | Package Manager |
+|--------|---------|-----------------|
+| **Debian** | Ubuntu, Pop!_OS, Debian, Linux Mint | `apt` |
+| **Fedora** | Fedora Workstation, RHEL, CentOS | `dnf` |
+
+Detection is in `lib/distro.sh`. It sets variables like `$PKG_INSTALL`,
+`$PKG_UPDATE`, `$GRUB_UPDATE` etc. that all stage scripts use.
+
+## Quick Start
+
+```bash
+# Clone this repo on the new machine
+git clone git@github.com:julianprester/linux-provision.git ~/linux-provision
+cd ~/linux-provision
+
+# Review and edit config/shell/zshrc.local with your API keys
+cp config/shell/zshrc.local.example ~/.zshrc.local
+# Edit ~/.zshrc.local with real API keys
+
+# Run the full provisioning (will prompt for sudo)
+bash provision.sh --all
+
+# Or run individual stages
+bash provision.sh --stage 03-toolchains
+bash provision.sh --stage 06-uv-projects
+
+# Or source it for interactive use
+source provision.sh --interactive
+```
+
+## Structure
+
+```
+linux-provision/
+├── README.md              # This file
+├── provision.sh           # Master orchestrator — run with --all or --stage N
+├── stages/                # Modular stage scripts, sourced by provision.sh
+│   ├── 00-envcheck.sh     # OS/sudo/environment checks
+│   ├── 01-repos.sh        # DNF repos (RPM Fusion, COPR, Microsoft, etc.)
+│   ├── 02-packages.sh     # System packages via DNF
+│   ├── 03-toolchains.sh   # nvm, Node, uv, Python
+│   ├── 04-shell.sh        # zsh, oh-my-zsh, powerlevel10k, configs
+│   ├── 05-git.sh          # Git config, SSH key setup
+│   ├── 06-uv-projects.sh  # Clone + install Julian's uv tools from ~/Development
+│   ├── 07-scripts.sh      # ~/.local/bin (bw, zoom, env, etc.)
+│   ├── 08-systemd.sh      # User systemd services (porridge, swayidle, etc.)
+│   ├── 09-desktop.sh      # Keybindings, hotkeys, ghostty, fonts
+│   ├── 10-docker.sh       # Docker CE setup
+│   ├── 11-tweaks.sh       # sysctl, kernel params, TLP/powertop, modprobe
+│   └── 12-other-apps.sh   # Chrome, Signal, Zotero
+├── config/                # Dotfiles and config files (installed by stages)
+│   ├── git/gitconfig
+│   ├── shell/{zshrc,zshrc.local.example,p10k.zsh}
+│   ├── scripts/{bw-load-ssh.sh,idle-battery-suspend.sh,zoom.sh,env.sh}
+│   ├── systemd/{porridge.service,...}
+│   ├── sysctl/99-custom.conf
+│   └── modprobe/{system76-power.conf,pop-default-settings-dirty-frag.conf}
+├── etc/                   # System-level configs (copied to /etc)
+└── TODO.md                # Post-provisioning manual steps
+```
+
+## Stages Overview
+
+| #  | Stage | What it does |
+| --- | --- | --- |
+| 00 | envcheck | Verify Fedora, sudo access, directory setup |
+| 01 | repos | RPM Fusion free/nonfree, COPRs, Microsoft, Docker, Google, Signal, Tailscale |
+| 02 | packages | Install all system packages (distro-mapped names) |
+| 03 | toolchains | Install nvm + Node LTS, uv, Python |
+| 04 | shell | Install zsh, oh-my-zsh, p10k, deploy .zshrc, .p10k.zsh |
+| 05 | git | Deploy .gitconfig, generate SSH key |
+| 06 | uv-projects | Clone all Julian's Python tool repos from GitHub, uv install |
+| 07 | scripts | Deploy ~/.local/bin scripts |
+| 08 | systemd | Deploy and enable user systemd services |
+| 09 | desktop | Configure keybindings, hotkeys, ghostty, fonts |
+| 10 | docker | Install Docker CE, add user to docker group |
+| 11 | tweaks | sysctl, kernel cmdline, TLP/powertop, modprobe blacklists |
+| 12 | other-apps | Google Chrome, Signal, Zotero |
+
+## Post-Install Manual Steps
+
+See `TODO.md` for things that can't be automated: restoring SSH keys
+from Bitwarden, configuring Tailscale, importing GPG keys, etc.
+
+## Design Notes
+
+- **Distribution-agnostic** — detects Debian/Ubuntu/Pop vs Fedora via
+  `lib/distro.sh`. Package manager commands, repo config, and package
+  names adapt automatically.
+- **Idempotent** — safe to run multiple times. Stages check for existing
+  installations before repeating work.
+- **Secrets out of repo** — API keys live in `~/.zshrc.local` (gitignored).
+  The repo ships `zshrc.local.example` with placeholder values.
+- **One stage per concern** — comment out stages you don't need in
+  `provision.sh` or pass `--stage` individually.
+- **Hardware-specific quirks commented out** — AMD GPU kernel params,
+  WiFi workarounds, etc. are documented but disabled by default.