fix: make RPM runtime portable on Tumbleweed

README.md

@@ -42,7 +42,7 @@ sudo apt update && sudo apt install fenris
 Replace `bookworm` with your distribution codename (`bookworm`, `jammy`, or
 `noble`).
 
-### Fedora (dnf)
+### Fedora / openSUSE Tumbleweed (RPM)
 
 Use the Fenris-owned repo file (not Gitea's auto-generated one):
 
@@ -53,6 +53,15 @@ sudo dnf config-manager --add-repo \
 sudo dnf install fenris
 ```
 
+On openSUSE Tumbleweed, add the same standard RPM repository file and install
+with zypper:
+
+```bash
+sudo zypper addrepo --refresh \
+  https://git.bongbetic.com/xavierk/Fenris/raw/branch/main/packaging/fenris.repo fenris
+sudo zypper install fenris
+```
+
 The repo file sets `gpgcheck=1` against the Fenris packaging key (downloaded
 from the raw URL in `gpgkey`) and `repo_gpgcheck=0` (metadata check left to
 TLS).
@@ -91,7 +100,8 @@ For contributors building from source:
 sudo make install
 ```
 
-This builds a wheel, installs it into `/opt/fenris` with pinned dependencies,
+This builds a wheel, installs its locked pure-Python runtime packages into
+`/opt/fenris/vendor`,
 and places helpers, units, and the polkit policy. Units are dormant by default.
 
 ```bash
@@ -117,7 +127,7 @@ sudo make upgrade
 
 What it does:
 1. Snapshots `observations.db` to a one-generation backup (`.bak`).
-2. Installs the new wheel into the same venv with pinned dependencies.
+2. Replaces the locked runtime packages under `/opt/fenris/vendor`.
 3. Syncs units and polkit against the manifest; runs `daemon-reload`.
 4. Restarts the timer **only** if unit contents changed **and** it is active — a running collection run finishes on its mapped interpreter; the next run uses the new code.
 5. Applies forward-only schema migrations (the store directory is never rebuilt; automatic downgrade does not exist).
@@ -149,7 +159,7 @@ make uninstall     # removes artifacts, preserves config and observation history
 make purge         # also removes /etc/fenris and /var/lib/fenris
 ```
 
-Uninstall performs the sanctioned disable first (`fenris-monitor disable --now`) — an open period closes `user_disabled` — then removes the venv, helpers, units, polkit policy, and wrapper while keeping `/etc/fenris` and the observation store. Reinstalling resumes from the preserved store.
+Uninstall performs the sanctioned disable first (`fenris-monitor disable --now`) — an open period closes `user_disabled` — then removes the runtime packages, helpers, units, polkit policy, and wrapper while keeping `/etc/fenris` and the observation store. Reinstalling resumes from the preserved store.
 
 ## Cadence drop-ins
 
@@ -212,7 +222,7 @@ Use a stable `/dev/disk/by-id/` path. Raw `/dev/nvmeX` paths are warned against.
 | sysusers/tmpfiles | `/usr/lib/{sysusers,tmpfiles}.d/fenris.conf` | managed by Makefile |
 | Configuration | `/etc/fenris/fenris.conf` | `/etc/fenris/fenris.conf` |
 | Observation store | `/var/lib/fenris/observations.db` | `/var/lib/fenris/observations.db` |
-| Venv | `/opt/fenris` | `/opt/fenris` |
+| Runtime packages | `/opt/fenris/vendor` | `/opt/fenris/vendor` |
 | Legacy history | — | `./data/history.jsonl` (auto-imported) |
 
 ---