[meta]
source_os = "linux"
target_distro_family = "debian"

# openSUSE Tumbleweed/Leap user moving to Debian/Ubuntu/Mint.
# Body text assumes zypper, YaST, and AppArmor familiarity.

[log_paths]
steam     = "~/.local/share/Steam/logs/content_log.txt"
proton    = "~/.local/share/Steam/logs/proton_log.txt"

# ── apt / dpkg ────────────────────────────────────────────────────────────────

[[patterns]]
id       = "apt-lock"
sources  = ["journald"]
match_text = "Could not get lock /var/lib/dpkg/lock"
severity = "warn"
title    = "Package manager is locked"
body     = "Another apt process is running — often unattended-upgrades (no zypper equivalent, but similar to PackageKit background updates). Wait a minute. If stuck: sudo rm /var/lib/dpkg/lock-frontend /var/lib/dpkg/lock && sudo dpkg --configure -a"

[[patterns]]
id       = "dpkg-interrupted"
sources  = ["journald"]
match_text = "dpkg was interrupted"
severity = "warn"
title    = "Package install was interrupted"
body     = "Like a zypper transaction that got killed, but dpkg needs manual recovery. Fix: sudo dpkg --configure -a"

[[patterns]]
id       = "apt-unmet-dependency"
sources  = ["journald"]
match_text = "Unmet dependencies"
severity = "warn"
title    = "Package dependency conflict"
body     = "apt auto-resolves most conflicts — less interactive than zypper's conflict wizard. Let it try: sudo apt --fix-broken install"

# ── AppArmor ──────────────────────────────────────────────────────────────────

[[patterns]]
id       = "apparmor-denial"
sources  = ["journald"]
match_text = "apparmor=\"DENIED\""
severity = "info"
title    = "AppArmor access denied"
body     = "Both openSUSE and Debian/Ubuntu use AppArmor — the tooling is the same. Check: sudo aa-status — audit: sudo aa-logprof — profiles: /etc/apparmor.d/"

# ── System ────────────────────────────────────────────────────────────────────

[[patterns]]
id       = "kernel-driver-firmware"
sources  = ["kmsg"]
match_text = "firmware: failed to load"
severity = "warn"
title    = "Firmware file missing"
body     = "On Debian: sudo apt install firmware-linux firmware-linux-nonfree (enable non-free sources first). On Ubuntu: sudo apt install linux-firmware. Debian splits firmware by license unlike openSUSE's single kernel-firmware package."

[[patterns]]
id       = "oom-killer"
sources  = ["kmsg"]
match_text = "Out of memory: Kill process"
severity = "warn"
title    = "OOM killer fired"
body     = "A process was killed for RAM. openSUSE's installer sets up swap; Debian minimal may not. Add a swapfile: sudo fallocate -l 4G /swapfile && sudo chmod 600 /swapfile && sudo mkswap /swapfile && sudo swapon /swapfile"

[[patterns]]
id       = "disk-io-error"
sources  = ["kmsg"]
match_text = "Buffer I/O error on device"
severity = "warn"
title    = "Disk I/O error"
body     = "Check SMART: sudo smartctl -a /dev/sdX — install: sudo apt install smartmontools"

# ── Audio ─────────────────────────────────────────────────────────────────────

[[patterns]]
id       = "pipewire-connect-fail"
sources  = ["journald"]
match_text = "Failed to connect to PipeWire"
severity = "warn"
title    = "PipeWire not responding"
body     = "Both Tumbleweed and Ubuntu 22.04+/Debian 12+ ship PipeWire. Restart: systemctl --user restart pipewire pipewire-pulse wireplumber"

[[patterns]]
id       = "pulseaudio-connect-fail"
sources  = ["journald"]
match_text = "Failed to connect to pulseaudio"
severity = "warn"
title    = "PulseAudio not responding"
body     = "Older Debian systems still use PulseAudio. Restart: pulseaudio --kill && pulseaudio --start"

[[patterns]]
id       = "bluetooth-rfkill-blocked"
sources  = ["journald"]
match_text = "Blocked through rfkill"
severity = "warn"
title    = "Bluetooth rfkill blocked"
body     = "rfkill unblock bluetooth — same as openSUSE."

# ── GPU / display ─────────────────────────────────────────────────────────────

[[patterns]]
id       = "gpu-hang"
sources  = ["kmsg"]
match_text = "GPU HANG"
severity = "warn"
title    = "GPU hang"
body     = "GPU stopped responding. For NVIDIA on Ubuntu: ubuntu-drivers autoinstall — on Debian: apt install nvidia-driver (requires non-free). Unlike openSUSE's OBS NVIDIA repo, Ubuntu keeps drivers in the main archive."

# ── Network ───────────────────────────────────────────────────────────────────

[[patterns]]
id       = "networkmanager-activation-fail"
sources  = ["journald"]
match_text = "Activation failed"
severity = "info"
title    = "NetworkManager: connection failed"
body     = "nmcli device status — Debian minimal may use ifupdown instead of NetworkManager. Install if missing: sudo apt install network-manager"

# ── Printing ──────────────────────────────────────────────────────────────────

[[patterns]]
id       = "cups-server-error"
sources  = ["journald"]
match_text = "Unable to connect to CUPS server"
severity = "info"
title    = "Printer service not running"
body     = "sudo systemctl start cups && sudo systemctl enable cups — YaST auto-configured printing on openSUSE; Debian leaves CUPS disabled until you enable it."

# ── Gaming ────────────────────────────────────────────────────────────────────

[[patterns]]
id       = "proton-runtime-missing"
sources  = ["applog:proton"]
match_text = "wine: cannot find"
severity = "warn"
title    = "Proton runtime issue"
body     = "Right-click game in Steam -> Properties -> Local Files -> Verify integrity."