More hmmm
This commit is contained in:
mustard
parent
3089c7edba
commit
9c625a416b
1 changed files with 102 additions and 1 deletions
|
|
@ -77,4 +77,105 @@ sudo dconf update
|
||||||
umask 077
|
umask 077
|
||||||
|
|
||||||
# Setup ZRAM
|
# Setup ZRAM
|
||||||
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/systemd/zram-generator.conf /etc/systemd/zram-generator.conf
|
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/systemd/zram-generator.conf /etc/systemd/zram-generator.conf
|
||||||
|
|
||||||
|
# Flatpak update service
|
||||||
|
dl https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/user/update-user-flatpaks.service /etc/systemd/user/update-user-flatpaks.service
|
||||||
|
dl https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/user/update-user-flatpaks.timer /etc/systemd/user/update-user-flatpaks.timer
|
||||||
|
|
||||||
|
# Setup networking
|
||||||
|
# We don't need the usual mac address randomization and stuff here, because this template is not used for sys-net
|
||||||
|
|
||||||
|
# This breaks saving network settings with the Fedora 40 template rn, so I am commenting it out.
|
||||||
|
#sudo mkdir -p /etc/systemd/system/NetworkManager.service.d
|
||||||
|
#unpriv curl --proxy http://127.0.0.1:8082 https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/NetworkManager.service.d/99-brace.conf | sudo tee /etc/systemd/system/NetworkManager.service.d/99-brace.conf
|
||||||
|
|
||||||
|
# Fix GNOME environment variable
|
||||||
|
echo 'XDG_CURRENT_DESKTOP=GNOME' | sudo tee -a /etc/environment
|
||||||
|
|
||||||
|
# Moving DNF handling to the bottom as the Qubes template just breaks when repos are changed and needs a reboot to fix
|
||||||
|
|
||||||
|
# Mark packages as manualy installed to avoid removal
|
||||||
|
sudo dnf mark install flatpak gnome-menus qubes-menus
|
||||||
|
|
||||||
|
# Remove unwanted groups
|
||||||
|
sudo dnf -y group remove 'Container Management' 'Desktop accessibility' 'Guest Desktop Agents' 'LibreOffice' 'Printing Support'
|
||||||
|
|
||||||
|
# Remove unnecessary stuff from the Qubes template
|
||||||
|
sudo dnf -y remove gnome-software httpd keepassxc thunderbird
|
||||||
|
|
||||||
|
# Remove firefox packages
|
||||||
|
sudo dnf -y remove fedora-bookmarks fedora-chromium-config
|
||||||
|
|
||||||
|
# Remove Network + hardware tools packages
|
||||||
|
sudo dnf -y remove avahi cifs* '*cups' dmidecode dnsmasq geolite2* mtr net-snmp-libs net-tools nfs-utils nmap-ncat nmap-ncat opensc openssh-server rsync rygel sgpio tcpdump teamd traceroute usb_modeswitch
|
||||||
|
|
||||||
|
# Remove support for some languages and spelling
|
||||||
|
sudo dnf -y remove '*anthy*' '*hangul*' ibus-typing-booster '*m17n*' '*pinyin*' '*speech*' texlive-libs words '*zhuyin*'
|
||||||
|
|
||||||
|
# Remove codec + image + printers
|
||||||
|
sudo dnf -y remove openh264 ImageMagick* sane* simple-scan
|
||||||
|
|
||||||
|
# Remove Active Directory + Sysadmin + reporting tools
|
||||||
|
sudo dnf -y remove 'sssd*' realmd cyrus-sasl-gssapi quota* dos2unix kpartx sos samba-client gvfs-smb
|
||||||
|
|
||||||
|
# Remove NetworkManager
|
||||||
|
sudo dnf -y remove NetworkManager-pptp-gnome NetworkManager-ssh-gnome NetworkManager-openconnect-gnome NetworkManager-openvpn-gnome NetworkManager-vpnc-gnome ppp* ModemManager
|
||||||
|
|
||||||
|
# Remove Gnome apps
|
||||||
|
sudo dnf remove -y baobab chrome-gnome-shell eog gnome-boxes gnome-calculator gnome-calendar gnome-characters gnome-classic* gnome-clocks gnome-color-manager gnome-connections \
|
||||||
|
gnome-contacts gnome-disk-utility gnome-font-viewer gnome-logs gnome-maps gnome-photos gnome-remote-desktop gnome-screenshot gnome-shell-extension-apps-menu \
|
||||||
|
gnome-shell-extension-background-logo gnome-shell-extension-launch-new-instance gnome-shell-extension-places-menu gnome-shell-extension-window-list gnome-text-editor \
|
||||||
|
gnome-themes-extra gnome-tour gnome-user* gnome-weather loupe snapshot totem
|
||||||
|
|
||||||
|
# Remove apps
|
||||||
|
sudo dnf remove -y abrt* cheese evince file-roller* libreoffice* mediawriter rhythmbox yelp
|
||||||
|
|
||||||
|
# Remove other packages
|
||||||
|
# We deviate from the script in TommyTran732/Linux-Setup-Scripts here, as removing yajl will break qubes integration.
|
||||||
|
sudo dnf remove -y lvm2 rng-tools thermald '*perl*'
|
||||||
|
|
||||||
|
# Install custom packages
|
||||||
|
# gnome-shell is needed for theming to work
|
||||||
|
#This seems to be the problematic line?
|
||||||
|
#sudo dnf -y install qubes-ctap qubes-gpg-split adw-gtk3-theme ncurses gnome-console gnome-shell
|
||||||
|
|
||||||
|
# Setup hardened_malloc
|
||||||
|
sudo https_proxy=127.0.0.1:8082 dnf copr enable secureblue/hardened_malloc -y
|
||||||
|
sudo dnf install -y hardened_malloc
|
||||||
|
echo 'libhardened_malloc.so' | sudo tee /etc/ld.so.preload
|
||||||
|
sudo chmod 644 /etc/ld.so.preload
|
||||||
|
|
||||||
|
# Setup DNF
|
||||||
|
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dnf/dnf.conf /etc/dnf/dnf.conf
|
||||||
|
sudo sed -i 's/^metalink=.*/&\&protocol=https/g' /etc/yum.repos.d/*
|
||||||
|
|
||||||
|
# This errors out for some reason
|
||||||
|
# sudo sed -i 's/&protocol=https//g' /etc/yum.repos.d/divested-release.repo
|
||||||
|
|
||||||
|
sudo dnf config-manager --enable fedora-cisco-openh264 rpmfusion-free rpmfusion-free-updates rpmfusion-nonfree rpmfusion-nonfree-updates
|
||||||
|
sudo dnf upgrade -y
|
||||||
|
sudo dnf install -y yt-dlp
|
||||||
|
sudo dnf install -y android-tools mediawriter gnome-disk-utility
|
||||||
|
|
||||||
|
# Install brace firefox (arkenfox) config
|
||||||
|
dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-arkenfox.js /usr/lib64/firefox/browser/defaults/preferences/userjs-arkenfox.js
|
||||||
|
dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace.js
|
||||||
|
# This causes crashes, comment out
|
||||||
|
#dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace-perf.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace-perf.js
|
||||||
|
dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/distribution/policies.json /usr/lib64/firefox/distribution/policies.json
|
||||||
|
|
||||||
|
# sudo prompt in dom0, see https://forum.qubes-os.org/t/replacing-passwordless-root-with-a-dom0-prompt/19074/21
|
||||||
|
sudo authselect create-profile sudo-dom0-prompt --base-on=sssd --symlink-meta --symlink-pam
|
||||||
|
sudo mv /etc/authselect/custom/sudo-dom0-prompt/system-auth /etc/authselect/custom/sudo-dom0-prompt/system-auth.original_aside
|
||||||
|
sudo cp /etc/authselect/system-auth /etc/authselect/custom/sudo-dom0-prompt
|
||||||
|
|
||||||
|
sudo sed -i '/^auth/d' /etc/authselect/custom/sudo-dom0-prompt/system-auth
|
||||||
|
|
||||||
|
sudo sed -i '/^account/ i auth [success=1 default=ignore] pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAuth /bin/grep -q ^1$\nauth requisite pam_deny.so\nauth required pam_permit.so' /etc/authselect/custom/sudo-dom0-prompt/system-auth
|
||||||
|
|
||||||
|
sudo authselect select custom/sudo-dom0-prompt
|
||||||
|
|
||||||
|
sudo sed -i '/^%qubes/s/.*/user ALL=(ALL) ALL/' /etc/sudoers.d/qubes
|
||||||
|
|
||||||
|
sudo rm /etc/polkit-1/rules.d/00-qubes-allow-all.rules
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue