feat: Refactor to tag-based options, fix GNOME extensions, update Ghostty config

- Refactor install.sh to use --tags/--tags-exclude instead of -e extra vars
- Fix winlike/maclike to be mutually exclusive (only one style installs)
- Fix GNOME extension installation to use correct user home directory
- Fix RDP certificate ownership (gnome-remote-desktop user)
- Remove deprecated gtk-adwaita option from Ghostty config (removed in 1.2.0)
- Update README with new tag-based installation documentation
- Add STATE.md session notes

Author: Derek

README.md

@@ -11,8 +11,7 @@ Standardised complete developer environment setup for HyperSec DFE developers ac
 
 ## Platform Support
 
-- **[Multi-Platform (Recommended)](#multi-platform-quick-start)** - Ansible-based setup for Fedora, Ubuntu, and macOS
-- **[Fedora Linux (Legacy)](#fedora-linux-legacy)** - Shell script-based setup (bug fixes only)
+- **[Multi-Platform (Recommended)](#multi-platform-quick-start)** - Ansible-based setup for Ubuntu, Fedora, and macOS
 - **[Windows 11](#windows-11-soe)** - Productivity and VM host setup with Hyper-V
 
 ## Multi-Platform Quick Start
@@ -32,54 +31,64 @@ cd dfe-developer
 # Install with core developer tools
 ./install.sh --core
 
-# Install everything (base + core + VM + RDP optimizers)
+# Install everything (base + core + VM + RDP + winlike desktop)
 ./install.sh --all
 
-# Other options:
-./install.sh --no-ghostty      # Skip Ghostty terminal
-./install.sh --vm              # Add VM optimizations (Linux only)
-./install.sh --rdp             # Add RDP optimizations (Linux only)
-./install.sh --check           # Dry-run (no changes)
+# Include Windows-style GNOME desktop (bottom taskbar)
+./install.sh --tags developer,base,winlike
+
+# Include macOS-style GNOME desktop (dock, logo menu, magic lamp)
+./install.sh --tags developer,base,maclike
+
+# Exclude specific features (ghostty, fastestmirror, wallpaper)
+./install.sh --tags-exclude ghostty,wallpaper
+
+# Dry-run to see what would change
+./install.sh --check
 ```
 
 The Ansible-based installer automatically detects your OS and installs the appropriate packages.
 
-### Selective Installation (Advanced)
+### Tag-Based Installation
 
-You can install specific components using Ansible tags. **Dependencies (init tasks) always run automatically.**
+All options use Ansible tags. Use `--tags` to include features, `--tags-exclude` to exclude them.
 
-#### Using install.sh with tags:
 ```bash
-# Install only Docker on macOS
-./install.sh --tags docker
-
-# Install only Git and GitHub CLI
-./install.sh --tags git
+# Include specific tags
+./install.sh --tags developer,base,winlike
 
-# Install Kubernetes tools only
-./install.sh --tags k8s
+# Exclude specific tags (from default or --all)
+./install.sh --tags-exclude ghostty,wallpaper
 
-# Install multiple specific tools
-./install.sh --tags "docker,git,k8s"
+# Combine: install everything except specific features
+./install.sh --all --tags-exclude wallpaper
 ```
 
-#### Using Ansible directly:
-```bash
-cd ansible
+#### Available Tags
 
-# Install only Docker (dependencies run automatically)
-ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --tags docker
+**Base Tags (included by default):**
 
-# Install Git + Cloud tools
-ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --tags "git,cloud"
+- `developer` - Base DFE developer role
+- `base` - Base tools (Docker, Git, K8s, Python, VS Code, Chrome)
 
-# Install everything EXCEPT Ghostty terminal
-ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --skip-tags ghostty
-```
+**Feature Tags (opt-in, require explicit --tags or --all):**
 
-#### Available Tags
+- `winlike` - Windows-style GNOME taskbar (Dash to Panel, bottom panel)
+- `maclike` - macOS-style GNOME dock (Dash to Dock, Logo Menu, Magic Lamp)
+- `core` - Core developer tools (JFrog, Azure CLI, Node.js, Linear CLI)
+- `advanced` - Advanced tools (included with --core)
+- `vm` - VM guest optimizations (QEMU guest agent, SPICE agent)
+- `optimizer` - VM optimizer role (included with --vm)
+- `rdp` - GNOME Remote Desktop configuration (RDP server on port 3389)
+
+**Optional Tags (included by default, can be excluded):**
+
+- `ghostty` - Ghostty terminal emulator
+- `fastestmirror` - DNF/APT performance optimizations
+- `wallpaper` - Custom DFE wallpaper
+
+**Component Tags:**
 
-**Base Developer Tools:**
 - `docker` - Docker Desktop (macOS) or Docker CE (Linux)
 - `git` - Latest Git + GitHub CLI + Git LFS
 - `cloud` - AWS CLI, Helm, Terraform, Vault
@@ -88,9 +97,9 @@ ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --ski
 - `utilities` - Development utilities (jq, bat, fzf, ripgrep, etc.)
 - `vscode` - Visual Studio Code
 - `chrome` - Google Chrome
-- `ghostty` - Ghostty terminal emulator
 
-**Core Developer Tools:**
+**Core Component Tags (require --core or explicit --tags):**
+
 - `jfrog` - JFrog CLI
 - `azure` - Azure CLI
 - `nodejs` - Node.js + semantic-release
@@ -99,59 +108,21 @@ ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --ski
 - `claude` - Claude Code CLI
 - `slack` - Slack (GUI)
 
-**System:**
-- `repository` - Configure package repositories (Linux only)
-- `security` - Automatic security updates
-- `wallpaper` - Custom wallpaper (if provided)
-- `verify` - Verify all installations
-
-#### How It Works
-
-**Dependencies always run:**
-- Init tasks (tagged `always`) run before any other tasks
-- Variables, user detection, platform detection
-- Ensures all prerequisites met
-
-**Example: Install only Docker on macOS**
-```bash
-./install.sh --tags docker
-```
-
-This will:
-1. ✅ Run init tasks (detect user, set variables)
-2. ✅ Install Docker Desktop via Homebrew
-3. ✅ Configure Docker
-4. ⏭️  Skip all other tools (Git, K8s, etc.)
+#### Using Ansible directly
 
-**Example: Install multiple specific tools**
 ```bash
-./install.sh --tags "git,docker,vscode"
-```
-
-This installs only Git, Docker, and VS Code (plus their dependencies).
-
-
-## Fedora Linux (Legacy)
-
-**Fedora-only shell scripts - bug fixes only, no new features.**
+cd ansible
 
-```bash
-# Clone the repository
-git clone https://github.com/hypersec-io/dfe-developer
-cd dfe-developer/fedora
+# Install only Docker (dependencies run automatically)
+ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --tags docker
 
-# Complete installation
-./install-all.sh 2>&1 | tee install.log
+# Install with winlike desktop
+ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --tags developer,base,winlike
 
-# OR install components individually:
-./install-dfe-developer.sh      # Base developer tools
-./install-dfe-developer-core.sh # Core DFE tools
-./install-vm-optimizer.sh       # VM optimizations
-./install-rdp-optimizer.sh      # RDP optimizations
+# Install everything EXCEPT Ghostty terminal
+ansible-playbook -i inventories/localhost/inventory.yml playbooks/main.yml --skip-tags ghostty
 ```
 
-**Note:** The `/fedora` scripts are maintained for bug fixes only. All new features and enhancements go into the Ansible playbooks. Use `./install.sh` (Ansible) for new installations.
-
 ## What Gets Installed
 
 ### Standard Developer Tools
@@ -173,32 +144,13 @@ cd dfe-developer/fedora
 
 ## System Requirements
 
-### Multi-Platform (Ansible)
 - **Ubuntu:** 24.04 LTS or later (primary)
-- **Fedora:** 42 or later (secondary)
-- **macOS:** Sequoia 15.3.1 or later (secondary)
-- 4GB RAM minimum (8GB recommended)
-- 20GB available disk space
-- Internet connection
-
-### Legacy Fedora (Shell Scripts)
-- Fedora 42 or later
+- **Fedora:** 42 or later
+- **macOS:** Sequoia 15.3.1 or later
 - 4GB RAM minimum (8GB recommended)
 - 20GB available disk space
 - Internet connection
 
-## Testing
-
-The project includes comprehensive testing:
-
-```bash
-cd fedora/tests
-
-# Run all tests
-bash 01-shellcheck.sh      # Static analysis
-bats *.bats                # Unit and integration tests
-```
-
 ## Project Structure
 
 - `ansible/` - Ansible-based multi-platform installer (Fedora, Ubuntu, macOS)

ansible/roles/dfe_developer/defaults/main.yml

@@ -1,10 +1,7 @@
 ---
 # DFE Developer Environment - Defaults
-
-# Mirror/repository optimization configuration
-dfe_use_fastestmirror: true  # Enable fastest mirror selection (automatic mirror selection)
-# Note: Fedora uses fastestmirror, Ubuntu uses mirror selection in sources.list
-# Set to false with --no-fastestmirror flag to use default repos only
+# All options are now controlled via tags, not variables.
+# Use --skip-tags to disable features, --tags to enable optional ones.
 
 # Supported platforms (used for validation in init.yml)
 dfe_supported_distros:
@@ -14,13 +11,6 @@ dfe_supported_distros:
 dfe_min_fedora_version: 42
 dfe_min_ubuntu_version: "24.04"
 
-# Ghostty installation
-dfe_install_ghostty: true
-
-# GNOME Shell customizations (Dash to Panel, system monitor, dark theme, etc.)
-# Set to false to keep vanilla Ubuntu/Fedora GNOME experience
-dfe_customize_gnome_shell: true
-
 # Docker configuration
 dfe_docker_users:
   - "{{ ansible_user_id }}"

ansible/roles/dfe_developer/files/dconf-dfe-defaults

@@ -0,0 +1,65 @@
+# DFE Developer GNOME defaults - macOS-like style
+# Deployed to /etc/dconf/db/local.d/00-dfe-defaults
+# Run 'dconf update' after modifying
+
+[org/gnome/shell]
+# Enable user extensions globally
+disable-user-extensions=false
+
+# Extensions to enable by default
+# Dash to Dock + Logo Menu + Magic Lamp provide macOS-style experience
+enabled-extensions=['system-monitor@gnome-shell-extensions.gcampax.github.com', 'dash-to-dock@micxgx.gmail.com', 'logomenu@aryan_k', 'compiz-alike-magic-lamp-effect@hermes83.github.com']
+
+# Extensions to disable by default
+# Ubuntu Dock conflicts with Dash to Dock
+disabled-extensions=['ubuntu-dock@ubuntu.com', 'workspace-indicator@gnome-shell-extensions.gcampax.github.com', 'apps-menu@gnome-shell-extensions.gcampax.github.com']
+
+[org/gnome/shell/extensions/system-monitor]
+# System monitor configuration
+show-cpu=true
+show-memory=true
+show-download=false
+show-upload=false
+show-swap=false
+
+[org/gnome/shell/extensions/dash-to-dock]
+# Dash to Dock - macOS-style dock configuration
+# Position at bottom like macOS
+dock-position='BOTTOM'
+# Intelligent auto-hide (like macOS)
+intellihide=true
+autohide=true
+# Click to minimize
+click-action='minimize'
+# Show running app indicators
+running-indicator-style='DOTS'
+# Show window previews on hover
+show-windows-preview=true
+# Icon size
+dash-max-icon-size=48
+# Hide trash and mounts from dock
+show-trash=false
+show-mounts=false
+
+[org/gnome/shell/extensions/logo-menu]
+# Logo Menu - macOS-style Apple menu
+# Hide activities button (Logo Menu replaces it)
+show-activities-button=false
+
+[org/gnome/shell/extensions/com.github.hermes83.compiz-alike-magic-lamp-effect]
+# Magic Lamp minimize effect - like macOS Genie
+duration=200
+
+[org/gnome/desktop/wm/preferences]
+# Window buttons: minimize, maximize, close on right side
+button-layout=':minimize,maximize,close'
+
+[org/gnome/desktop/interface]
+# Prefer dark theme
+color-scheme='prefer-dark'
+
+[org/gnome/desktop/background]
+# DFE background image (stored in /usr/local, safe from apt/dnf updates)
+picture-uri='file:///usr/local/share/backgrounds/dfe-background.svg'
+picture-uri-dark='file:///usr/local/share/backgrounds/dfe-background.svg'
+picture-options='zoom'