Nicely put! Thanks for taking the time to write it up!
I had a couple of suggestions:
dialout– the installer should have taken care of this – but also a member oflockso that it can write to/run/lock.
That sounds like something the installer should do, so would be happy to add lock to the list of memberships that the installer handles. Just out of interest, on the distributions I use, /run/lock is writeable by users and groups. Is this openSUSE specific?
EXTRA_JAVA_OPTS="-Dgnu.io.rxtx.SerialPorts=/dev/ttyUSB0:/dev/ttyS0:/dev/ttyS2:/dev/ttyACM0:/dev/ttyAMA0
You shouldn’t need to do this, in-fact setting this parameter makes openHAB more restrictive - see: Testers wanted - Removing the "Dgnu.io.rxtx.SerialPorts" recommendation
This is the best way to do this if your default Java is different to the one that openHAB needs, otherwise setting JAVA_HOME as an environment variable or symlinking the Java executables to /usr/bin/ would be a typical way of doing this.