docs: Update README and CHANGELOG for v2.9.0 release

Fully tested on all platforms:
- Fedora 42: 319 ok, 0 failed
- Ubuntu 24.04: 346 ok, 0 failed
- macOS Sequoia: 120 ok, 0 failed

Author: Derek

CHANGELOG.md

@@ -7,10 +7,31 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [2.8.7](https://github.com/hypersec-io/dfe-developer/compare/v2.8.6...v2.8.7) (2025-12-10)
 
+### Fully Tested Release
+
+All platforms tested on fresh VMs with zero failures:
+
+| Platform | Tasks | Result |
+|----------|-------|--------|
+| Fedora 42 | 319 ok, 0 failed | PASS |
+| Ubuntu 24.04 | 346 ok, 0 failed | PASS |
+| macOS Sequoia | 120 ok, 0 failed | PASS |
 
 ### Bug Fixes
 
-* Ghostty theme names, deprecated options, and panel transparency ([c974634](https://github.com/hypersec-io/dfe-developer/commit/c97463446229debd9d930a7d3d84f9e60205874f))
+* Ghostty theme names updated to Ghostty 1.2.x format (`Builtin Solarized Light/Dark`)
+* Ghostty deprecated `gtk-single-instance` option removed (was causing startup hangs)
+* Ghostty global keybind disabled (causes issues on GNOME/RDP)
+* Linear CLI now installs to user npm-global directory (not system-wide)
+* Dash to Panel transparency enabled by default (60% opacity)
+
+### Features
+
+* GNOME extensions installed via gext (extensions.gnome.org) for GNOME 48 compatibility
+* winlike/maclike tag exclusivity enforced (maclike overrides if both specified)
+* Added `ansible/test.sh` for easier testing
+
+---
 
 ## [2.8.6](https://github.com/hypersec-io/dfe-developer/compare/v2.8.5...v2.8.6) (2025-12-10)
 

README.md

@@ -7,148 +7,94 @@
 [![Last Commit](https://img.shields.io/github/last-commit/hypersec-io/dfe-developer)](https://github.com/hypersec-io/dfe-developer/commits/main)
 [![Stars](https://img.shields.io/github/stars/hypersec-io/dfe-developer?style=social)](https://github.com/hypersec-io/dfe-developer/stargazers)
 
-Standardised complete developer environment setup for HyperSec DFE developers across multiple platforms.
+Standardised developer environment for HyperSec DFE teams. One command gets you Docker, Kubernetes tools, cloud CLIs, and a properly configured desktop.
 
 ## Platform Support
 
-- **[Multi-Platform (Recommended)](#multi-platform-quick-start)** - Ansible-based setup for Ubuntu, Fedora, and macOS
-- **[Windows 11](#windows-11-soe)** - Productivity and VM host setup with Hyper-V
+| Platform | Status | Notes |
+|----------|--------|-------|
+| **Ubuntu 24.04** | Fully tested | Primary platform |
+| **Fedora 42** | Fully tested | GNOME 48 compatible |
+| **macOS Sequoia** | Fully tested | Homebrew-based |
+| **Windows 11** | Productivity host | Hyper-V for Linux VMs |
 
-## Multi-Platform Quick Start
-
-**Recommended for all new installations.** Supports Ubuntu 24.04+ (primary), Fedora 42+, and macOS.
-
-**v2.4+**: Ubuntu is now the primary supported platform, with Fedora and macOS as secondary platforms.
+## Quick Start
 
 ```bash
-# Clone the repository
 git clone https://github.com/hypersec-io/dfe-developer
 cd dfe-developer
 
-# Install base developer environment (default)
+# Base install (Docker, Git, K8s tools, VS Code, Chrome)
 ./install.sh
 
-# Install with core developer tools
-./install.sh --core
-
-# Install everything (base + core + VM + RDP + winlike desktop)
+# Full install with everything
 ./install.sh --all
 
-# Include Windows-style GNOME desktop (bottom taskbar)
-./install.sh --tags developer,base,winlike
-
-# Include macOS-style GNOME desktop (dock, logo menu, magic lamp)
-./install.sh --tags developer,base,maclike
-
-# Exclude specific features (ghostty, fastestmirror, wallpaper)
-./install.sh --tags-exclude ghostty,wallpaper
-
-# Dry-run to see what would change
+# Check what would change first
 ./install.sh --check
 ```
 
-The Ansible-based installer automatically detects your OS and installs the appropriate packages.
+The installer detects your OS and installs the right packages. Run `./install.sh --help` for all options.
 
-### Tag-Based Installation
-
-All options use Ansible tags. Use `--tags` to include features, `--tags-exclude` to exclude them.
+### Installation Options
 
 ```bash
-# Include specific tags
+# Windows-style taskbar (Dash to Panel)
 ./install.sh --tags developer,base,winlike
 
-# Exclude specific tags (from default or --all)
-./install.sh --tags-exclude ghostty,wallpaper
+# macOS-style dock
+./install.sh --tags developer,base,maclike
+
+# Core tools (JFrog, Azure CLI, Node.js, Linear CLI)
+./install.sh --core
 
-# Combine: install everything except specific features
+# Full install without wallpaper
 ./install.sh --all --tags-exclude wallpaper
 ```
 
-#### Available Tags
-
-**Base Tags (included by default):**
-
-- `developer` - Base DFE developer role
-- `base` - Base tools (Docker, Git, K8s, Python, VS Code, Chrome)
-
-**Feature Tags (opt-in, require explicit --tags or --all):**
-
-- `winlike` - Windows-style GNOME taskbar (Dash to Panel, bottom panel)
-- `maclike` - macOS-style GNOME dock (Dash to Dock, Logo Menu, Magic Lamp)
-- `core` - Core developer tools (JFrog, Azure CLI, Node.js, Linear CLI)
-- `advanced` - Advanced tools (included with --core)
-- `vm` - VM guest optimizations (QEMU guest agent, SPICE agent)
-- `optimizer` - VM optimizer role (included with --vm)
-- `rdp` - GNOME Remote Desktop configuration (RDP server on port 3389)
-
-**Optional Tags (included by default, can be excluded):**
+### Available Tags
 
-- `ghostty` - Ghostty terminal emulator
-- `fastestmirror` - DNF/APT performance optimizations
-- `wallpaper` - Custom DFE wallpaper
+| Tag | Description |
+|-----|-------------|
+| `winlike` | Windows-style taskbar with transparent panel |
+| `maclike` | macOS-style dock (overrides winlike if both specified) |
+| `core` | JFrog CLI, Azure CLI, Node.js, Linear CLI, OpenVPN |
+| `rdp` | GNOME Remote Desktop on port 3389 |
+| `vm` | VM guest optimizations (QEMU/SPICE agents) |
+| `ghostty` | Ghostty terminal (included by default) |
+| `wallpaper` | Custom wallpaper (included by default) |
 
-**Component Tags:**
-
-- `docker` - Docker Desktop (macOS) or Docker CE (Linux)
-- `git` - Latest Git + GitHub CLI + Git LFS
-- `cloud` - AWS CLI, Helm, Terraform, Vault
-- `k8s` - kubectl, k9s, kubectx, minikube, argocd, dive
-- `python` - UV Python manager
-- `utilities` - Development utilities (jq, bat, fzf, ripgrep, etc.)
-- `vscode` - Visual Studio Code
-- `chrome` - Google Chrome
-
-**Core Component Tags (require --core or explicit --tags):**
+## What Gets Installed
 
-- `jfrog` - JFrog CLI
-- `azure` - Azure CLI
-- `nodejs` - Node.js + semantic-release
-- `linear` - Linear CLI
-- `openvpn` - OpenVPN 3 client
-- `claude` - Claude Code CLI
-- `slack` - Slack (GUI)
+**Base install** (`./install.sh`):
 
-#### Using Ansible directly
+- Docker CE + Docker Desktop
+- Git, GitHub CLI, Git LFS
+- kubectl, k9s, kubectx, minikube, ArgoCD, dive, Freelens
+- AWS CLI, Helm, Terraform, Vault
+- UV (Python manager)
+- VS Code, Chrome
+- Ghostty terminal (Solarized theme)
+- Development utilities (jq, yq, bat, fzf, ripgrep, htop)
 
-```bash
-cd ansible
+**Core tools** (`./install.sh --core`):
 
-# Install only Docker (dependencies run automatically)
-ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --tags docker
+- JFrog CLI, Azure CLI
+- Node.js, semantic-release, Linear CLI
+- OpenVPN 3, Claude Code CLI
+- Slack, Gitleaks, act (GitHub Actions runner)
 
-# Install with winlike desktop
-ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --tags developer,base,winlike
+**Desktop** (`winlike` or `maclike` tag):
 
-# Install everything EXCEPT Ghostty terminal
-ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --skip-tags ghostty
-```
+- GNOME extensions from extensions.gnome.org
+- Transparent taskbar (winlike) or dock (maclike)
+- Custom wallpaper
 
-## What Gets Installed
+## Requirements
 
-### Standard Developer Tools
-- Docker CE and Docker Compose
-- Python development (UV, pyenv)
-- Cloud tools (AWS CLI, kubectl, Helm + Dashboard, Terraform)
-- Kubernetes tools (K9s, Freelens, Minikube, ArgoCD)
-- Git extensions and GitHub CLI
-- Development utilities (jq, yq, bat, fzf, ripgrep)
-- VS Code configuration
-
-### DFE Core Developer Tools
-- JFrog CLI
-- Azure CLI
-- Node.js and semantic-release
-- AI coding assistants (Claude Code CLI)
-- Advanced Python tools (Nox, UV)
-- Slack (Flatpak)
-
-## System Requirements
-
-- **Ubuntu:** 24.04 LTS or later (primary)
-- **Fedora:** 42 or later
-- **macOS:** Sequoia 15.3.1 or later
-- 4GB RAM minimum (8GB recommended)
-- 20GB available disk space
+- **Ubuntu 24.04+**, **Fedora 42+**, or **macOS Sequoia**
+- 8GB RAM recommended
+- 20GB disk space
 - Internet connection
 
 ## Project Structure
@@ -298,7 +244,7 @@ cd windows
 - **Core Isolation** - Memory integrity protection
 - **Defender ATP** - Optional automated onboarding (drop package in directory)
 
-### Requirements
+### Windows Requirements
 
 - **Windows 11 Pro** (24H2 or later recommended, Build 26100+)
 - **Administrator privileges**