~/dotfiles · nine-repo ecosystem

One Core.
Every machine.
clone-and-go.

A portable, layered dotfiles system. A single vendored Core — zsh, tmux, Neovim, git, starship, mise — shared across every box, with thin OS-native layers per platform and an offensive role layer for Kali. Audited, benchmarked, reproducible.

Get started → How it works
  • 9repos
  • 3layers
  • 1vendored Core
  • 0submodule flags
zsh — ~/dotfiles-MacBook
# clone — Core is already vendored, no flags
$git clone …/dotfiles-MacBook ~/df && cd ~/df
$./bootstrap.sh --links-only --dry-run
✓ plan: 24 symlinks, 0 conflicts
$./bootstrap.sh
✓ Homebrew · brew bundle · symlinks
$exec zsh
~/df on main via v22
9
public repos
one Core, vendored everywhere
3
clean layers
Core · OS-native · Role
13
Core zsh modules
one canonical load order
2,905
lines of Core zsh
authored once, synced out
57
git aliases
OMZ-style, in git.zsh
7
SHA-pinned plugins
no floating master clones

Core 1.1.0 · derived from source on 2026-06-20

Why it’s built this way

A system, not a pile of config

Nine repositories, one philosophy: if it changes with the operating system it isn’t Core; if it changes with you as an operator it isn’t Core. Everything left over is Core — and it lives in exactly one place.

◆

Authored once, everywhere

Core lives in one repo and is vendored into every OS repo via git subtree. No N-way reconciliation, no drift — edit once, sync out.

⧉

Clone-and-go

Subtree vendors the actual files, so a fresh clone just works. No submodule init, no flags. Perfect for public portfolio repos.

⚡

Same shell, every OS

The zsh module chain loads in one canonical order on macOS, Linux, and WSL — PowerShell mirrors it. Muscle memory transfers everywhere.

🛡

Audited & benchmarked

A manifest-driven audit gate, hermetic behavioral tests, pinned plugin SHAs, and a startup-perf budget keep every sync honest.

◑

Three clean layers

Core (identical everywhere), OS-native (changes with the OS), and Role (offensive scaffolding for Kali). Every file has exactly one home.

⌘

Discoverable by design

core-help cheat sheets, core-doctor health checks, did-you-mean command handling, and first-party completions for every verb.

The three-layer model

Core → OS-native → Role

Each layer answers a different question. Drawing the boundary precisely is what lets one Core serve every machine without special-casing.

01

Core

zsh modules, tmux base, Neovim, git, starship, mise, clip. Vendored into every OS repo under core/.

Authored once, vendored everywhere via git subtree.
02

OS-native

Package manager, paths, clipboard backend, OS tmux/git tweaks. One thin layer per platform.

Package manager, paths, clipboard — what changes with the OS.
03

Role / offensive

Engagement scaffolding, scope-first workflow, offensive tooling. Stacked only on the Kali node.

Engagement scaffolding stacked on top of an OS layer.
Read the full architecture →
The fleet

Repository map

Nine repositories are public today — one Core, vendored into eight machine repos. Each card links straight to its repo, with live stars, last-push, and CI status pulled from GitHub at build time.

Core Stable

◆ dotfiles-core

The keystone. Single source of truth for everything identical on every machine — shell modules, tmux base, Neovim, git, starship, mise.

★ 0 ⟳ today ● CI
  • zsh module chain
  • lazy.nvim tree
  • tmux + starship + mise
  • audited & benchmarked
View on GitHub ↗
OS-native Stable

⌘ dotfiles-MacBook

macOS (Apple Silicon / Intel) terminal environment. Homebrew + brew bundle, Ghostty, 1Password agent, native pbcopy clipboard.

★ 0 ⟳ today ● CI
  • Homebrew + Brewfile
  • Ghostty config
  • osxkeychain git
  • macOS defaults
60 pkgs View on GitHub ↗
Native host Stable

⊞ dotfiles-Windows

The native Windows host: PowerShell 7 as daily driver, Windows Terminal, scoop/winget, psmux, and the bridge into WSL2.

★ 0 ⟳ today ● CI
  • pwsh profile loader
  • scoop + winget
  • psmux multiplexer
  • WSL2 bridge
View on GitHub ↗
Role / offensive Stable

⚔ dotfiles-Kali

The Kali node — the only repo with three layers. Core + apt OS layer + a unique offensive role layer for authorized engagements.

★ 0 ⟳ today
  • engagement scaffolding
  • scope-first workflow
  • NetExec / BloodHound CE
  • WSL2 mirrored net
28 pkgs + 36 offensive View on GitHub ↗
OS-native Stable

◉ dotfiles-Fedora

The Linux template every other distro repo is stamped from. dnf + RPM Fusion, Flathub, Wayland clipboard, SELinux helpers.

★ 0 ⟳ today
  • dnf package layer
  • distro template
  • Wayland/X11 clip
  • SELinux helpers
31 pkgs View on GitHub ↗
OS-native Beta

▲ dotfiles-Arch

Rolling-release Arch. pacman + AUR + multilib, with a bare-metal stage-0 SETUP guide for a minimal install.

★ 0 ⟳ today
  • pacman + AUR
  • multilib + mirrors
  • stage-0 SETUP.md
  • rolling release
36 pkgs View on GitHub ↗
OS-native Beta

❖ dotfiles-openSUSE

zypper with the best dependency solver of the bunch. Packman, AppArmor, Btrfs/snapper, Tumbleweed (dup) + Leap (up) aware.

★ 0 ⟳ today
  • zypper + Packman
  • Btrfs / snapper
  • AppArmor
  • Tumbleweed + Leap
30 pkgs View on GitHub ↗
OS-native Beta

❄ dotfiles-Alpine

The lean outlier: musl libc, busybox, doas. The small-footprint / container / rescue layer — bootstrap detects doas vs sudo.

★ 0 ⟳ today
  • musl + busybox
  • apk + doas
  • container / rescue
32 pkgs View on GitHub ↗
OS-native Beta

◢ dotfiles-Gentoo

Source-based capstone. emerge + full category/name atoms + USE flags — the most educational build in the fleet.

★ 0 ⟳ today
  • emerge from source
  • USE flags
  • full atoms
  • --no-sync re-runs
30 pkgs View on GitHub ↗
Try it

Up and running in three commands

Pick your platform, clone, bootstrap. The installer is idempotent and ships a dry-run so you can preview every change before it touches your machine.

Full install guide → 

        $ 
        git clone https://github.com/Gerrrt/dotfiles-MacBook ~/dotfiles-MacBook
        

      
        $ 
        cd ~/dotfiles-MacBook
        

      
        $ 
        ./bootstrap.sh --links-only --dry-run   # preview, changes nothing
        

      
        $ 
        ./bootstrap.sh                          # provision + wire