discord: install natively in $HOME instead of the flatpak

The com.discordapp.Discord flatpak's zypak sandbox breaks the Wayland
splash->main-window handoff under niri: the web app loads but the main window
never maps (stuck "Discord Updater / Starting" splash; the renderer also
segfaulted on a corrupt GPU/shader cache). Remove it from the recipe and drop
its seeded flatpak override + tmpfiles line, and have kb3lyb-bootstrap install
the official tarball into ~/.local/share/Discord (self-updating, runs directly
on host Wayland/GPU). Verified on the machine: main window maps, zero crashes.

Also remove TODO-var-mnt-data.md — /var/mnt/data is set up and confirmed
auto-unlocking after reboot.

Author: mark-iid

SETUP.md

@@ -123,7 +123,7 @@ bluetooth audio, and suspend/resume. Only then wipe the internal drive (§9.10).
 ## 6. First-boot / post-install
 
 - [ ] `kb3lyb-bootstrap` — clones dotfiles (prompts for a token), stows them, installs
-      brew + Brewfile, SDKMAN, JetBrains Toolbox into `$HOME` (§6).
+      brew + Brewfile, SDKMAN, JetBrains Toolbox, and native Discord into `$HOME` (§6).
 - [ ] `fprintd-enroll` — re-enroll fingerprints (not portable, §10).
 - [ ] **Make the login keyring passwordless** (needed once fingerprint login is set
       up). `pam_fprintd` is `sufficient` and first in `system-auth`, so a fingerprint
@@ -230,6 +230,13 @@ Done since the first cut (kept for history):
   one is confirmed working (it staged an image update in normal use).
 - **Electron Wayland overrides (§4):** confirmed on the real install — Slack renders
   sharp and dark.
+- **Discord — native, not flatpak:** the `com.discordapp.Discord` flatpak's zypak
+  sandbox breaks the Wayland splash→main-window handoff under niri (web app loads, main
+  window never maps; stuck "Discord Updater / Starting" splash — the renderer also
+  segfaulted on a corrupt GPU/shader cache). Removed from the recipe + its flatpak
+  override; `kb3lyb-bootstrap` now installs the official tarball into `$HOME`
+  (`~/.local/share/Discord`, self-updating, launches on host Wayland/GPU). Verified: main
+  window maps, zero crashes.
 - **Mail:** Evolution + evolution-ews baked (M365/Graph + personal; mako notifications).
 - **Portal FileChooser fix (open/save dialogs):** the stock niri portal config
   (`/usr/share/xdg-desktop-portal/niri-portals.conf`) has `default=gnome;gtk`, routing

TODO-var-mnt-data.md

@@ -100,6 +100,48 @@ if [[ ! -x "$TBX_HOME/bin/jetbrains-toolbox" ]]; then
   rm -rf "$tmp"
 fi
 
+# Discord (native, in $HOME — deliberately NOT the flatpak). The flatpak's zypak
+# sandbox breaks the Wayland splash->main-window handoff under niri: the client
+# downloads and loads the web app but the main window never maps (you get a stuck
+# "Discord Updater / Starting" splash). The official tarball is a tiny bootstrap;
+# on first GUI launch its updater_bootstrap fetches the real client into
+# ~/.config/discord and execs it directly on host Wayland/GPU, self-updating after.
+DISCORD_DIR="$HOME/.local/share/Discord"
+if [[ ! -x "$DISCORD_DIR/discord" ]]; then
+  say "installing Discord (native tarball, in \$HOME)"
+  tmp="$(mktemp -d)"
+  if curl -fsSL "https://discord.com/api/download?platform=linux&format=tar.gz" -o "$tmp/discord.tar.gz"; then
+    mkdir -p "$HOME/.local/share"
+    tar -xzf "$tmp/discord.tar.gz" -C "$HOME/.local/share"   # tarball top dir is "Discord"
+    if [[ -x "$DISCORD_DIR/discord" ]]; then
+      mkdir -p "$HOME/.local/bin" "$HOME/.local/share/applications" \
+               "$HOME/.local/share/icons/hicolor/256x256/apps"
+      ln -sf "$DISCORD_DIR/discord" "$HOME/.local/bin/discord"
+      cp -f "$DISCORD_DIR/discord.png" "$HOME/.local/share/icons/hicolor/256x256/apps/discord.png"
+      cat > "$HOME/.local/share/applications/discord.desktop" <<EOF
+[Desktop Entry]
+Name=Discord
+GenericName=Internet Messenger
+Comment=All-in-one voice and text chat
+Exec=$DISCORD_DIR/discord --url -- %u
+Icon=discord
+Type=Application
+Categories=Network;InstantMessaging;
+MimeType=x-scheme-handler/discord;
+StartupWMClass=discord
+Terminal=false
+EOF
+      update-desktop-database "$HOME/.local/share/applications" 2>/dev/null || true
+      say "Discord installed; launch from fuzzel (Super+D -> Discord) — first run downloads the client."
+    else
+      warn "Discord launcher not found after extract"
+    fi
+  else
+    warn "Discord download failed"
+  fi
+  rm -rf "$tmp"
+fi
+
 # --- 4. login shell ------------------------------------------------------------
 # The dotfiles target zsh (.zshrc). Make it the login shell so a fresh user lands
 # in zsh — and thus brew + plugins — without a manual chsh. `sudo chsh` lets root

files/system/usr/bin/kb3lyb-bootstrap

@@ -5,5 +5,4 @@
 # leaving any later `flatpak override` edits by the user untouched.
 d /var/lib/flatpak/overrides 0755 root root - -
 C /var/lib/flatpak/overrides/com.slack.Slack 0644 root root - -
-C /var/lib/flatpak/overrides/com.discordapp.Discord 0644 root root - -
 C /var/lib/flatpak/overrides/com.bitwarden.desktop 0644 root root - -

files/system/usr/lib/tmpfiles.d/kb3lyb-flatpak-overrides.conf

@@ -151,10 +151,13 @@ modules:
         - evolution-ews
 
   # GUI apps as flatpaks (DESIGN §8.5: prefer $HOME/flatpak over layering/overrides).
-  # Electron apps (slack/discord/bitwarden) are forced onto native Wayland for
-  # sharp HiDPI via seeded flatpak overrides — see files/.../factory + the
-  # tmpfiles.d C rules (DESIGN §4). Bazaar is the app store (no GNOME Software on
-  # this minimal image); flatpak ID verified as io.github.kolunmi.Bazaar on Flathub.
+  # Electron apps (slack/bitwarden) are forced onto native Wayland for sharp HiDPI
+  # via seeded flatpak overrides — see files/.../factory + the tmpfiles.d C rules
+  # (DESIGN §4). Discord is NOT a flatpak: its zypak sandbox breaks the Wayland
+  # splash->main-window handoff under niri (the client loads but never maps a
+  # window), so it's installed natively into $HOME by kb3lyb-bootstrap instead.
+  # Bazaar is the app store (no GNOME Software on this minimal image); flatpak ID
+  # verified as io.github.kolunmi.Bazaar on Flathub.
   - type: default-flatpaks
     configurations:
       - notify: true
@@ -165,7 +168,6 @@ modules:
           - com.bitwarden.desktop
           - com.nextcloud.desktopclient.nextcloud
           - com.slack.Slack
-          - com.discordapp.Discord
           - org.libreoffice.LibreOffice
           - com.valvesoftware.Steam
           - io.github.kolunmi.Bazaar   # app store (Flathub)