Update first-boot.sh and associated scripts to transition from KDE Plasma to rpd-labwc for the Chromium kiosk setup. Modify package installations, LightDM session configurations, and one-shot scripts for wallpaper and rotation to support Wayland. Implement boot order configuration for network-first provisioning. Enhance logging and error handling throughout the scripts.

chromium-setup/emmc-provisioning/lxc/README.md

@@ -0,0 +1,16 @@
+# LXC config (network boot: eth1 = LAN, eth0 = WAN)
+
+Config files for the **provisioning LXC** when using **eth1** as a provisioning LAN (DHCP + TFTP for network boot, NAT for internet).
+
+| File | Purpose |
+|------|--------|
+| **dnsmasq-network-boot.conf** | dnsmasq: DHCP + TFTP on eth1 only. Copied to `/etc/dnsmasq.d/` by `scripts/setup-network-boot-on-lxc.sh`. |
+| **nft-nat-lan.conf** | nftables NAT so 10.20.50.0/24 uses eth0 for internet. Applied by the setup script to `/etc/nftables.d/nat-lan.conf`. |
+
+Setup is done by running (from your machine):
+
+```bash
+./chromium-setup/emmc-provisioning/scripts/setup-network-boot-on-lxc.sh root@<LXC-IP>
+```
+
+See [../docs/NETWORK-BOOT-LXC.md](../docs/NETWORK-BOOT-LXC.md) for full documentation.

chromium-setup/emmc-provisioning/lxc/dnsmasq-network-boot.conf

@@ -0,0 +1,26 @@
+# dnsmasq: DHCP + TFTP on eth1 only (provisioning LAN).
+# Install to /etc/dnsmasq.d/network-boot.conf on the LXC.
+# Restrict to eth1 so we don't interfere with host/other DHCP.
+
+# Listen only on eth1 (provisioning LAN)
+interface=eth1
+bind-interfaces
+
+# DHCP range for devices on eth1 (adjust if you use a different subnet)
+dhcp-range=10.20.50.100,10.20.50.200,12h
+
+# TFTP for Raspberry Pi / CM4 network boot
+enable-tftp
+tftp-root=/srv/tftpboot
+
+# RPi 4 netboot: next-server is this host; boot filename (Pi firmware uses this)
+# Option 66 = next-server (TFTP), 67 = boot filename
+dhcp-option=66,10.20.50.1
+dhcp-option=67,start4cd.elf
+
+# Logging (optional; disable in production if too noisy)
+log-dhcp
+log-queries
+
+# Do not use /etc/resolv.conf or act as DNS if you only want DHCP+TFTP
+port=0

chromium-setup/emmc-provisioning/lxc/nft-nat-lan.conf

@@ -0,0 +1,10 @@
+# nftables: NAT for LAN (eth1) so clients use WAN (eth0) for internet.
+# Load with: nft -f /etc/nftables.d/nat-lan.conf
+# Or use the inline rules in setup-network-boot-on-lxc.sh (no separate file dependency).
+
+table ip nat {
+	chain postrouting {
+		type nat hook postrouting priority srcnat; policy accept;
+		ip saddr 10.20.50.0/24 oifname "eth0" masquerade
+	}
+}