[meta]
source_os = "linux"
target_distro_family = "opensuse"

# Fedora/RHEL user moving to openSUSE Tumbleweed or Leap.
# Body text assumes DNF and RPM familiarity; both use RPM so tooling overlaps.

[log_paths]
steam     = "~/.local/share/Steam/logs/content_log.txt"
proton    = "~/.local/share/Steam/logs/proton_log.txt"

# ── zypper / RPM ─────────────────────────────────────────────────────────────

[[patterns]]
id       = "zypper-lock"
sources  = ["journald"]
match_text = "System management is locked"
severity = "warn"
title    = "zypper package manager is locked"
body     = "Another zypper or PackageKit process is running — same situation as dnf being held by dnf-automatic. Wait it out or check: sudo ps aux | grep zypper"

[[patterns]]
id       = "zypper-dep-conflict"
sources  = ["journald"]
match_text = "conflicts with"
severity = "warn"
title    = "Package dependency conflict"
body     = "zypper presents conflicts interactively. Both Fedora's dnf and zypper use RPM, but zypper's solver can be more conservative. Try: sudo zypper dup (distribution upgrade) for more aggressive resolution."

[[patterns]]
id       = "zypper-gpg-key"
sources  = ["journald"]
match_text = "does not verify"
severity = "warn"
title    = "Repository signature not trusted"
body     = "Auto-import: sudo zypper --gpg-auto-import-keys ref — similar to dnf's GPG key prompts but the accept syntax differs."

# ── AppArmor (replaces SELinux) ───────────────────────────────────────────────

[[patterns]]
id       = "apparmor-denial"
sources  = ["journald"]
match_text = "apparmor=\"DENIED\""
severity = "info"
title    = "AppArmor access denied"
body     = "openSUSE ships AppArmor, not SELinux like Fedora. Similar purpose but different tooling. Check: sudo aa-status — audit: sudo aa-logprof — you'll need to rebuild your mental model from SELinux policy types to AppArmor profiles."

# ── System ────────────────────────────────────────────────────────────────────

[[patterns]]
id       = "kernel-driver-firmware"
sources  = ["kmsg"]
match_text = "firmware: failed to load"
severity = "warn"
title    = "Firmware file missing"
body     = "sudo zypper install kernel-firmware — openSUSE uses a single kernel-firmware package similar to Fedora's linux-firmware."

[[patterns]]
id       = "oom-killer"
sources  = ["kmsg"]
match_text = "Out of memory: Kill process"
severity = "warn"
title    = "OOM killer fired"
body     = "A process was killed for RAM. openSUSE prompts for swap setup during install. If skipped: sudo dd if=/dev/zero of=/swapfile bs=1M count=4096 && sudo mkswap /swapfile && sudo swapon /swapfile"

[[patterns]]
id       = "disk-io-error"
sources  = ["kmsg"]
match_text = "Buffer I/O error on device"
severity = "warn"
title    = "Disk I/O error"
body     = "Check SMART: sudo smartctl -a /dev/sdX — install: sudo zypper install smartmontools"

# ── YaST (openSUSE-specific) ──────────────────────────────────────────────────

[[patterns]]
id       = "yast-backend-fail"
sources  = ["journald"]
match_text = "YaST got signal"
severity = "warn"
title    = "YaST configuration tool crashed"
body     = "YaST is openSUSE's graphical admin tool (no Fedora equivalent). If it crashed mid-operation, check what it was doing: sudo yast2 -- the text mode version often recovers where the GUI fails."

# ── Audio ─────────────────────────────────────────────────────────────────────

[[patterns]]
id       = "pipewire-connect-fail"
sources  = ["journald"]
match_text = "Failed to connect to PipeWire"
severity = "warn"
title    = "PipeWire not responding"
body     = "Tumbleweed ships PipeWire like Fedora. Restart: systemctl --user restart pipewire pipewire-pulse wireplumber"

[[patterns]]
id       = "bluetooth-rfkill-blocked"
sources  = ["journald"]
match_text = "Blocked through rfkill"
severity = "warn"
title    = "Bluetooth rfkill blocked"
body     = "rfkill unblock bluetooth — same as Fedora."

# ── GPU / display ─────────────────────────────────────────────────────────────

[[patterns]]
id       = "gpu-hang"
sources  = ["kmsg"]
match_text = "GPU HANG"
severity = "warn"
title    = "GPU hang"
body     = "GPU stopped responding. For NVIDIA on openSUSE: use the NVIDIA OBS repo or packages.opensuse.org — similar to RPM Fusion on Fedora."

# ── Network ───────────────────────────────────────────────────────────────────

[[patterns]]
id       = "networkmanager-activation-fail"
sources  = ["journald"]
match_text = "Activation failed"
severity = "info"
title    = "NetworkManager: connection failed"
body     = "nmcli device status — openSUSE uses NetworkManager or Wicked depending on the install profile. Check which is active: systemctl status NetworkManager wicked"

# ── Gaming ────────────────────────────────────────────────────────────────────

[[patterns]]
id       = "proton-runtime-missing"
sources  = ["applog:proton"]
match_text = "wine: cannot find"
severity = "warn"
title    = "Proton runtime issue"
body     = "Right-click game in Steam -> Properties -> Local Files -> Verify integrity. For Steam on openSUSE: sudo zypper install steam (from the games repo on OBS)."