From b06f69be7959f0fb554ca8f66e4595aeaa99ae88 Mon Sep 17 00:00:00 2001
From: Mirko <send@mirko.pm>
Date: Fri, 23 Sep 2022 11:12:12 +0200
Subject: [PATCH] add immutability step

---
 recipe.json | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/recipe.json b/recipe.json
index 8714ddc..0aec487 100644
--- a/recipe.json
+++ b/recipe.json
@@ -78,6 +78,31 @@
                 }
             ]
         },
+        "immutability": {
+            "template": "yes-no",
+            "icon": "security-medium-symbolic",
+            "title": "On-Demand Immutability",
+            "description": "Choose whether to protect your system from deterioration by making it immutable.",
+            "buttons": {
+                "yes": "Enable",
+                "no": "Skip",
+                "info": {
+                    "type": "text",
+                    "title": "What is On-Demand Immutability?",
+                    "text": "Immutability makes it impossible to modify system files, preventing them from being compromised.\n\nImmutable On-Demand mode is a file attribute-based system that lets you turn OS immutability on and off on the fly, without having to reboot. You can use the command line tool 'almost' to change its operation, check its status, change the default mode and much more.\n\nThis system does not require the use of special file systems and is entirely managed by the Almost tool, developed by the Vanilla OS Team."
+                }
+            },
+            "final": [
+                {
+                    "if": "immutability",
+                    "type": "command",
+                    "commands": [
+                        "sudo apt install -y almost",
+                        "sudo almost enter rw"
+                    ]
+                }
+            ]
+        },
         "nvidia": {
             "template": "yes-no",
             "icon": "video-display-symbolic",