# Minimal packages for football secure access system
# Base system
linux-image-amd64
firmware-linux
firmware-linux-nonfree
grub2-common
grub-pc-bin
grub-efi-amd64-bin
grub-efi-ia32-bin
shim-signed
initramfs-tools
sudo
locales
keyboard-configuration
console-setup

# Network (client only, no server capabilities)
networkmanager
iproute2
iputils-ping
isc-dhcp-client
wireguard
wireguard-tools
iptables-persistent

# Hardware support
xserver-xorg
xserver-xorg-input-libinput
x11-xserver-utils
xterm
xinit

# Display manager (minimal - no remote access)
xserver-xorg-video-intel
xserver-xorg-video-amdgpu
xserver-xorg-video-nouveau
xserver-xorg-video-ati

# Window manager - IceWM
icewm
icewm-themes

# Remote desktop client - Remmina
remmina
remmina-plugin-rdp
remmina-plugin-vnc

# Basic utilities
vim-tiny
less
psmisc
procps
coreutils
grep
sed
gawk
tar
gzip
bzip2
xz-utils
curl
wget

# Secure boot and boot tools
efibootmgr
mokutil
efivar

# Security hardening
fail2ban
apparmor
apparmor-utils
auditd