Add: system setup tutorials for Ubuntu & Debian
This commit is contained in:
parent
50ea11f79a
commit
9d4777f7f7
GPG Key ID:
E4B9FC170FFD71CE
290
setup/debian-setup.md
Normal file
290
setup/debian-setup.md
Normal file
@ -0,0 +1,290 @@
|
|||||||
|
# Debian Setup
|
||||||
|
|
||||||
|
Here's my personal Debian 12 Bookworm setup.
|
||||||
|
|
||||||
|
- Set font size in Terminal to 15 and initial column count to 85
|
||||||
|
- Must haves:
|
||||||
|
- `sudo apt install curl earlyoom ffmpeg flatpak git gnome-clocks \
|
||||||
|
gnome-shell-pomodoro gnome-software-plugin-flatpak gnome-sound-recorder \
|
||||||
|
gnome-todo gnome-weather goldendict gparted keepassxc mosh obs-studio \
|
||||||
|
shadowsocks-libev sshfs synaptic tmux trash-cli vim-gtk3 vlc \
|
||||||
|
gnome-boxes wl-clipboard needrestart deja-dup ufw ddcutil`
|
||||||
|
- Optional:
|
||||||
|
- `sudo apt install openjdk-17-jdk gthumb gnome-usage ranger
|
||||||
|
gnome-firmware gnome-games gnome-nettool qpdf pulseeffects
|
||||||
|
gnome-packagekit gnome-passwordsafe mkvtoolnix-gui virtualbox-qt syncplay`
|
||||||
|
- FlatHub:
|
||||||
|
- `flatpak remote-add --if-not-exists flathub
|
||||||
|
https://flathub.org/repo/flathub.flatpakrepo`
|
||||||
|
- Allocate 8GiB for swap
|
||||||
|
```
|
||||||
|
sudo swapoff /swapfile
|
||||||
|
sudo fallocate -l 8GiB /swapfile
|
||||||
|
sudo mkswap /swapfile
|
||||||
|
sudo swapon /swapfile
|
||||||
|
```
|
||||||
|
- Early OOM config: edit `/etc/default/earlyoom` and add:
|
||||||
|
- `--avoid
|
||||||
|
'(^|/)(systemd|sshd|mosh-server|ssh|vim|sudo|sudoedit|gnome-shell|gnome-terminal-)$'
|
||||||
|
--prefer '(^|/)(Web Content|Isolated Web Co)$'`
|
||||||
|
- Firefox
|
||||||
|
- Change default zoom to 110%
|
||||||
|
- Enable HTTPS only
|
||||||
|
- Proxy DNS when using SOCKS v5
|
||||||
|
- Enable DNS over HTTPS
|
||||||
|
- In `about:config` set `browser.sessionstore.max_windows_undo` to 10.
|
||||||
|
- Go to settings -> `Region & Language` and install `Chinese (simplified)`.
|
||||||
|
|
||||||
|
## Optional packages
|
||||||
|
|
||||||
|
- `clangd` for VSCodium C language server with
|
||||||
|
`llvm-vs-code-extensions.vscode-clangd` (?)
|
||||||
|
- `imagemagick` for `convert`, comment out with `<!-- -->` PDF policy in
|
||||||
|
`/etc/ImageMagick-6/policy.xml` (?)
|
||||||
|
- Cross compiling (?)
|
||||||
|
- `gcc-aarch64-linux-gnu`
|
||||||
|
- `gcc-arm-linux-gnueabihf`
|
||||||
|
|
||||||
|
## UFW
|
||||||
|
|
||||||
|
`$ sudo ufw enable`
|
||||||
|
|
||||||
|
## Wayland (?)
|
||||||
|
|
||||||
|
- `sudoedit /usr/lib/udev/rules.d/61-gdm.rules` and comment the two uncommented
|
||||||
|
lines
|
||||||
|
- Reboot or restart gdm3 (didn't try)
|
||||||
|
|
||||||
|
## Apps
|
||||||
|
|
||||||
|
- gnome-tweaks
|
||||||
|
- `sudo apt install gnome-tweaks`
|
||||||
|
- Swap capslock and ESC in `Keyboard & Mouse` -> `Additional Layout Options`
|
||||||
|
-> `Caps Lock behavior`
|
||||||
|
- Change `Mouse Click Emulation` to `Area`
|
||||||
|
- Turn on weekdays and battery percentage in `Top Bar`
|
||||||
|
- Flat mouse acceleration profile
|
||||||
|
- Turn off suspend when closing lid
|
||||||
|
- Extensions
|
||||||
|
- `sudo apt install gnome-shell-extensions`
|
||||||
|
- Turn on:
|
||||||
|
- `Applications menu`
|
||||||
|
- `Places status indicator`
|
||||||
|
- `Windownavigator`
|
||||||
|
- `Workspace Indicator`
|
||||||
|
- Note: to manually install Gnome extensions, unzip it and copy the `uuid`
|
||||||
|
field in `metadata.json` and rename the directory to this name, then move
|
||||||
|
to `~/.local/share/gnome-shell/extensions` and logout and login.
|
||||||
|
- GSConnect
|
||||||
|
- `sudo apt install gnome-shell-extension-gsconnect`
|
||||||
|
- Uncheck SFTP auto mount
|
||||||
|
- Add commands:
|
||||||
|
- `Lock`: `loginctl lock-session`
|
||||||
|
- `Quack`: `ffplay -v quiet -nodisp -autoexit ~/Music/'.Not
|
||||||
|
Music'/Ringtones/Quack.mp3`
|
||||||
|
- UFW:
|
||||||
|
- `sudo ufw allow 1716:1764/tcp`
|
||||||
|
- `sudo ufw allow 1716:1764/udp`
|
||||||
|
- Flatseal
|
||||||
|
- `flatpak install flathub com.github.tchx84.Flatseal`
|
||||||
|
- OBS Studio
|
||||||
|
- `$ sudo apt install qtwayland5`
|
||||||
|
- In `/usr/share/applications/com.obsproject.Studio.desktop`, replace
|
||||||
|
`Exec=obs` with `Exec=sh -c '[ "$XDG_SESSION_TYPE" = "wayland" ] && obs
|
||||||
|
-platform wayland || obs'`
|
||||||
|
- Gnome Calendar
|
||||||
|
- Add Google accounts in online accounts
|
||||||
|
- On older versions of Ubuntu < 22.04, not tested for 22.04:
|
||||||
|
- Wait for a bit, it's kinda buggy but it will work at the end (wait for ~2
|
||||||
|
days)
|
||||||
|
- Golden Dict
|
||||||
|
- Import dictionaries in `~/.software/goldendict/stardict-cc-cedict`
|
||||||
|
- Don't search in dictionaries contains more then 10000 articles
|
||||||
|
- <https://einverne.github.io/post/2018/08/goldendict.html>
|
||||||
|
- Xournal++
|
||||||
|
- `sudo apt install xournalpp texlive-latex-extra`
|
||||||
|
- cameractrls
|
||||||
|
- `flatpak install hu.irl.cameractrls`
|
||||||
|
- Minecraft
|
||||||
|
- TODO: PolyMC just had some problems
|
||||||
|
- To host servers: `sudo ufw allow 25565/tcp`
|
||||||
|
- Bottles
|
||||||
|
- `flatpak install flathub com.usebottles.bottles`
|
||||||
|
- Discord
|
||||||
|
- `flatpak install flathub com.discordapp.Discord`
|
||||||
|
- Slack
|
||||||
|
- `flatpak install flathub com.slack.Slack`
|
||||||
|
- Zoom
|
||||||
|
- `flatpak install flathub us.zoom.Zoom`
|
||||||
|
|
||||||
|
## Optional Apps
|
||||||
|
|
||||||
|
- Impatience (adjust Gnome animation speed)
|
||||||
|
- `sudo apt install gnome-shell-extension-impatience`
|
||||||
|
- Enable in extensions and set speed to 0.7
|
||||||
|
- Wobbly Windows (?)
|
||||||
|
- From
|
||||||
|
<https://extensions.gnome.org/extension/2950/compiz-alike-windows-effect/>
|
||||||
|
- Turn off maximize effect
|
||||||
|
- Increase restore factor to 5
|
||||||
|
- System monitor
|
||||||
|
- `$ sudo apt install gnome-shell-extension-system-monitor`
|
||||||
|
- Show only CPU (digit and graph) and memory (digit).
|
||||||
|
- OpenWeatherMap
|
||||||
|
- `$ sudo apt install gnome-shell-extension-weather`
|
||||||
|
- On older systems (< 21.04), download and install from
|
||||||
|
`https://extensions.gnome.org/extension/750/openweather/`
|
||||||
|
- Set location to La Jolla
|
||||||
|
- Switch to metric units
|
||||||
|
- VSCodium
|
||||||
|
- `flatpak install flathub com.vscodium.codium`
|
||||||
|
- Birdtray
|
||||||
|
- `$ sudo apt install birdtray`
|
||||||
|
- Configure it by running `birdtray` and clicking on the tray icon
|
||||||
|
- In Startup Applications Preference:
|
||||||
|
- Name: `Birdtray`
|
||||||
|
- Command: `sh -c "sleep 20 && /usr/bin/birdtray"`
|
||||||
|
- Comment: `Minimize to tray for Thunderbird`
|
||||||
|
- Wait for bugs to be fixed before removing sleep:
|
||||||
|
- <https://github.com/gyunaev/birdtray/issues/362>
|
||||||
|
- <https://github.com/gyunaev/birdtray/issues/430>
|
||||||
|
- Hiding: check all except hide/show by clicking icon
|
||||||
|
- Broken on Wayland
|
||||||
|
- Android Studio
|
||||||
|
- Move `Ctrl+S` from IdeaVim to IDE
|
||||||
|
- Enabled `Mark modified (*)`
|
||||||
|
- Disable both `Save files on frame deactivation` and `Save files
|
||||||
|
automatically if application is idle`
|
||||||
|
|
||||||
|
## Grub background
|
||||||
|
|
||||||
|
### Tool
|
||||||
|
|
||||||
|
- `$ sudo apt install grub-customizer`
|
||||||
|
- Put in background manually
|
||||||
|
|
||||||
|
### Manual Script
|
||||||
|
|
||||||
|
```
|
||||||
|
sudo mkdir /opt/grub
|
||||||
|
sudo cp -r background/ /boot/grub/
|
||||||
|
sudo chown -R root:root /opt/grub
|
||||||
|
sudo chmod -R 700 /opt/grub
|
||||||
|
```
|
||||||
|
|
||||||
|
- Add the following lines to `/opt/grub/cycle-backgrounds.sh`:
|
||||||
|
```
|
||||||
|
#!/bin/sh
|
||||||
|
cd /boot/grub/background
|
||||||
|
mv background.png tmp.png
|
||||||
|
mv background-1.png background.png
|
||||||
|
mv tmp.png background-1.png
|
||||||
|
```
|
||||||
|
- `$ sudo chown root:root /opt/grub/cycle-backgrounds.sh`
|
||||||
|
- `$ sudo chmod 700 /opt/grub/cycle-backgrounds.sh`
|
||||||
|
- Add `@reboot /opt/grub/cycle-backgrounds.sh` to root crontab.
|
||||||
|
- In `/etc/default/grub`:
|
||||||
|
- Add `GRUB_BACKGROUND=/boot/grub/background/background.png`
|
||||||
|
- Change `GRUB_TIMEOUT=10` to `GRUB_TIMEOUT=3`
|
||||||
|
- `$ sudo update-grub`
|
||||||
|
|
||||||
|
## OpenSSH Server & Mosh
|
||||||
|
|
||||||
|
```
|
||||||
|
sudo apt install -y openssh-server mosh
|
||||||
|
sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak
|
||||||
|
sudo cp ../system/sshd_config /etc/ssh/sshd_config
|
||||||
|
sudo groupadd --system ssh-users
|
||||||
|
sudo usermod -aG ssh-users $(whoami)
|
||||||
|
mkdir -p ~/.ssh
|
||||||
|
chmod 700 ~/.ssh
|
||||||
|
touch ~/.ssh/authorized_keys
|
||||||
|
chmod 600 ~/.ssh/authorized_keys
|
||||||
|
# insert your SSH public keys into the file
|
||||||
|
sudo ufw limit 22/tcp
|
||||||
|
sudo ufw allow 60001:60999/udp
|
||||||
|
sudo systemctl restart ssh
|
||||||
|
```
|
||||||
|
|
||||||
|
## See logs as admin
|
||||||
|
|
||||||
|
`sudo usermod -aG adm $(whoami)`
|
||||||
|
|
||||||
|
## Proton black screen fix (?)
|
||||||
|
|
||||||
|
Source:
|
||||||
|
<https://github.com/ValveSoftware/steam-runtime/issues/312#issuecomment-739441559>
|
||||||
|
|
||||||
|
```
|
||||||
|
sudo mv /usr/share/vulkan/icd.d/intel_icd.x86_64.json \
|
||||||
|
/usr/share/vulkan/icd.d/intel_icd.x86_64.json.disabled
|
||||||
|
```
|
||||||
|
|
||||||
|
## Proprietary encodings (?)
|
||||||
|
|
||||||
|
- `$ sudo apt install ubuntu-restricted-extras`
|
||||||
|
|
||||||
|
## Dual boot
|
||||||
|
|
||||||
|
### Dislocker
|
||||||
|
|
||||||
|
```
|
||||||
|
$ sudo apt install dislocker
|
||||||
|
$ sudo mkdir /media/"$(whoami)" /mnt/dislocker /opt/dislocker
|
||||||
|
$ sudo chmod 700 /media/"$(whoami)" /mnt/dislocker /opt/dislocker
|
||||||
|
$ sudo chown $user:$user /media/"$(whoami)"
|
||||||
|
$ sudo chown root:root /mnt/dislocker /opt/dislocker
|
||||||
|
```
|
||||||
|
|
||||||
|
Copy the `.BEK` file to `/opt/dislocker/"$(whoami)".bek`.
|
||||||
|
|
||||||
|
```
|
||||||
|
$ sudo chown root:root /opt/dislocker/"$(whoami)".bek
|
||||||
|
$ sudo chmod 700 /opt/dislocker/"$(whoami)".bek
|
||||||
|
```
|
||||||
|
|
||||||
|
Add the following lines to `/etc/fstab` with `<user>` replaced:
|
||||||
|
|
||||||
|
```
|
||||||
|
/dev/nvme0n1p6 /mnt/dislocker fuse.dislocker nofail,nouser,umask=0077,bekfile=/opt/dislocker/<user>.bek 0 0
|
||||||
|
/mnt/dislocker/dislocker-file /media/<user> auto nofail,umask=0077,gid=<user>,uid=<user> 0 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Mount manually with:
|
||||||
|
```
|
||||||
|
$ sudo dislocker /dev/nvmen1p6 -p -- /mnt/dislocker
|
||||||
|
$ sudo mount -o loop /mnt/dislocker/dislocker-file /media/"$(whoami)"
|
||||||
|
```
|
||||||
|
|
||||||
|
## Hardware specific
|
||||||
|
|
||||||
|
### Nvidia proprietary driver screen tearing fix
|
||||||
|
|
||||||
|
```
|
||||||
|
echo 'options nvidia-drm modeset=1' | sudo tee \
|
||||||
|
/etc/modprobe.d/nvidia-drm-nomodeset.conf > /dev/null
|
||||||
|
```
|
||||||
|
|
||||||
|
### Digimend for Huion tablet (works with H640p)
|
||||||
|
|
||||||
|
- = 20.10 & using wayland: no longer necessary
|
||||||
|
- = 21.04:
|
||||||
|
- `$ sudo apt install digimend-dkms`
|
||||||
|
- Reboot.
|
||||||
|
- < 21.04:
|
||||||
|
- Download and install from
|
||||||
|
`https://github.com/DIGImend/digimend-kernel-drivers`.
|
||||||
|
|
||||||
|
### Razer mouse
|
||||||
|
|
||||||
|
```
|
||||||
|
sudo add-apt-repository ppa:polychromatic/stable
|
||||||
|
sudo apt install openrazer-meta polychromatic
|
||||||
|
```
|
||||||
|
|
||||||
|
## Workarounds
|
||||||
|
|
||||||
|
- [Blanked screen doesn't wake up after locking \[drmModeAtomicCommit: Argument
|
||||||
|
invalide\] \[drmModeAtomicCommit: Invalid
|
||||||
|
argument\]](https://bugs.launchpad.net/ubuntu/+source/mutter/+bug/1968040)
|
||||||
|
- Put `MUTTER_DEBUG_ENABLE_ATOMIC_KMS=0` in `/etc/environment`
|
||||||
152
setup/dual-boot-ubuntu.md
Normal file
152
setup/dual-boot-ubuntu.md
Normal file
@ -0,0 +1,152 @@
|
|||||||
|
# Dual Boot Ubuntu
|
||||||
|
|
||||||
|
Here are my personal notes back when I first dual booted Ubuntu, with some
|
||||||
|
updates sprinkled in. Use with caution and **backup everything on another
|
||||||
|
detached disk** before proceeding. Although it is very unlikely for things to
|
||||||
|
go wrong when this guide is properly followed, I will not be responsible for any
|
||||||
|
data loss.
|
||||||
|
|
||||||
|
This guide was first written for Ubuntu 18.04 LTS so some claims may no longer
|
||||||
|
be true (please let me know if it is false). Doing this guide we'll dual boot
|
||||||
|
Ubuntu and Windows 10 with setup for encryption of root and home mounts.
|
||||||
|
|
||||||
|
## Questions before we begin
|
||||||
|
|
||||||
|
You need to think about these things before you do anything. I have attached my
|
||||||
|
personal answers below but it might be different for you.
|
||||||
|
|
||||||
|
- How much space to allocate for Ubuntu?
|
||||||
|
- ~25 GiB, the recommended minimum is 25 GB and my personal usage has never
|
||||||
|
exceeded 40GiB for the root drive.
|
||||||
|
- If you don't have enough space, you may forgo a separate `/home` to gain
|
||||||
|
flexibility as root space could shrink or grow and it's hard to guess the
|
||||||
|
sizes upfront. Plus, if your data is on the Windows BitLocker drive, you
|
||||||
|
could always make a separate drive to keep your data 2 years later when
|
||||||
|
the next Ubuntu LTS comes out or just restore from backup. Or, you could
|
||||||
|
make use of LVM...
|
||||||
|
- After daily driving Ubuntu I switched to separate `/` and `/home` on
|
||||||
|
top of LVM and keeping at least 5GiB of free space for each LV. When
|
||||||
|
I need more space, I always live resize by `sudo lvextend -rL +5G
|
||||||
|
vgroot/lvhome` so I don't have to guess the total size.
|
||||||
|
- Where should Ubuntu root partition be?
|
||||||
|
- Right before `/boot` before `D:`. Since moving the starting location of a
|
||||||
|
BitLocker protected drive needs full data move using an external hard
|
||||||
|
drive and is lots of hassle, we can consider the beginning of `D:` to be
|
||||||
|
fixed. putting `/boot` right before `D:` makes its location unlikely to
|
||||||
|
be affected by moving partitions around so we don't have to deal with any
|
||||||
|
potential `/boot` hassles which may require reinstallation of GRUB.
|
||||||
|
- After using it for a while, I've decided to put it at the end of the disk
|
||||||
|
instead.
|
||||||
|
- Leaving free space between Ubuntu's root and the Windows drive makes both
|
||||||
|
OSs easy to resize because it is not hard to change the starting location
|
||||||
|
of root (GParted can do the job itself) and instead of requiring a full
|
||||||
|
move in case of expansion of Windows, which is probably more likely, we
|
||||||
|
require nothing.
|
||||||
|
- Should you encrypt this partition?
|
||||||
|
- Yes. There may be sensitive data in `/home/$user/.ssh/`, `/tmp/`,
|
||||||
|
`/var/log/`, etc. and plus you may want to put the BitLocker key in there
|
||||||
|
as well for Dislocker and keep them safe in case of losing the laptop.
|
||||||
|
- Should I encrypt `/boot` or just `/?`
|
||||||
|
- Just `/`. Encrypting `/boot` provides only somewhat protection against
|
||||||
|
the kind of Evil Maid where someone changes the kernel and include a
|
||||||
|
keylogger. This require physical access, and if they have that they can
|
||||||
|
do more, either:
|
||||||
|
1. Install another Ubuntu and connect to the Internet to upload password
|
||||||
|
2. Install a hardware key logger
|
||||||
|
3. Swap it out for a same-looking machine
|
||||||
|
- My goal was to only protect against theft and loss, not to protect against
|
||||||
|
these advanced threats. To do this, you need to either:
|
||||||
|
- Encrypt `/boot`, which prevents only the swap of a kernel but not any
|
||||||
|
of the three points above and is hard to implement.
|
||||||
|
- Password protect BIOS, which makes it very risky when I forget the
|
||||||
|
BIOS password and protects only against the kernel swap and threat #1.
|
||||||
|
I consider it not worthy for it adds significant risk only to protect
|
||||||
|
against the first threat, which is unlikely as I would have to be
|
||||||
|
specifically targeted by very technical people (they probably could
|
||||||
|
also disable the password protection or install the keylogger too but
|
||||||
|
I haven't researched much about this).
|
||||||
|
- IDK what more could be done.
|
||||||
|
- Bottom line: never trust the device once it's been tempered with.
|
||||||
|
- How should I encrypt? LUKS?
|
||||||
|
- LUKS, I don't want my directory structure to be seen and I want to just
|
||||||
|
use ext4.
|
||||||
|
- LVM on LUKS or LUKS on LVM?
|
||||||
|
- LVM on LUKS, the usual setup with less hassle and I don't need multi-disk
|
||||||
|
LUKS anyways as this is a single-disk laptop.
|
||||||
|
- Will dual booting mess up the Windows boot loader?
|
||||||
|
- Should not, since removing GRUB requires only the removal of its entries
|
||||||
|
from the EFI partition.
|
||||||
|
- How to avoid too many password prompts?
|
||||||
|
- Should have only one prompt at boot when the kernel asks for the password
|
||||||
|
to decrypt the file systems, and another for normal logins.
|
||||||
|
- How to dual boot and install with encryption?
|
||||||
|
- Here is the original guide which I based this one on: [Encrypting disks on
|
||||||
|
Ubuntu
|
||||||
|
19.04](https://medium.com/@chrishantha/encrypting-disks-on-ubuntu-19-04-b50bfc65182a)
|
||||||
|
- With these questions answered, we can perform the installation.
|
||||||
|
|
||||||
|
## Installation
|
||||||
|
|
||||||
|
- Booting Ubuntu 20.04 LTS live image with `Try Ubuntu` option.
|
||||||
|
- Verify that we are using UEFI: `$ [ -d /sys/firmware/efi ] && echo UEFI ||
|
||||||
|
echo BIOS`
|
||||||
|
- Give 1 GiB (or 500 MiB if you are short on space) for `/boot` using GParted and make a partition
|
||||||
|
for `/` as well, at least around 25 GB.
|
||||||
|
- `$ sudo cryptsetup luksFormat --type luks2 --key-size 512 --hash sha512
|
||||||
|
--use-random /dev/<root partition>`
|
||||||
|
- Defaults, spell it out if you want to be extra certain:
|
||||||
|
`--cipher aes-xts-plain64 --iter-time 2000 --verify-passphrase`
|
||||||
|
- `$ sudo cryptsetup open /dev/<root partition> rootfs`
|
||||||
|
- No need to overwrite data since it is originally BitLocker encrypted and would
|
||||||
|
cause loss of performance and lifespan of the SSD.
|
||||||
|
- `$ sudo pvcreate /dev/mapper/pvroot`
|
||||||
|
- `$ sudo vgcreate vgroot /dev/mapper/pvroot`
|
||||||
|
- `$ sudo lvcreate -n lvhome -L 10G vgroot` (`G` refers to GiB according to the
|
||||||
|
man page)
|
||||||
|
- Remember to monitor disk usage and when prompted, live extend the LVs!
|
||||||
|
- `$ sudo lvcreate -n lvroot -L 15G vgroot`
|
||||||
|
- Start the Ubuntu installation from the shortcut icon on Desktop.
|
||||||
|
- Choose extra software and set a password.
|
||||||
|
- Choose `Something else`.
|
||||||
|
- Format `/dev/<boot partition>` as ext4 and mount to `/boot`.
|
||||||
|
- Format `/dev/mapper/vgroot-lvroot` as ext4 and mount to `/`.
|
||||||
|
- Format `/dev/mapper/vgroot-lvhome` as ext4 and mount to `/home`.
|
||||||
|
- Choose the main disk (`/dev/sd?`) as the `Device for boot loader
|
||||||
|
installation`.
|
||||||
|
- Name the parititions if you are feeling fancy.
|
||||||
|
- Once the installation is complete, click `Continue Testing` to make necessary
|
||||||
|
changes to load the encrypted partitions at startup.
|
||||||
|
- Make note of the UUID: `$ sudo blkid /dev/<root partition>`
|
||||||
|
- Mount the installed Ubuntu OS on `/mnt` and use `chroot` to change the root
|
||||||
|
directory to `/mnt`.
|
||||||
|
```
|
||||||
|
$ sudo mount /dev/mapper/vgroot-lvroot /mnt
|
||||||
|
$ sudo mount /dev/<boot partition> /mnt/boot
|
||||||
|
$ sudo mount --bind /dev /mnt/dev
|
||||||
|
$ sudo chroot /mnt
|
||||||
|
# mount -t proc proc /proc
|
||||||
|
# mount -t sysfs sys /sys
|
||||||
|
# mount -t devpts devpts /dev/pts
|
||||||
|
```
|
||||||
|
- In the chroot: `# vi /etc/crypttab`
|
||||||
|
- Add the following lines to it (replacing `<UUID_ROOTFS>` from the value
|
||||||
|
obtained from `blkid` command earlier):
|
||||||
|
```
|
||||||
|
# <target name> <source device> <key file> <options>
|
||||||
|
pvroot UUID=<UUID_ROOTFS> none luks,discard
|
||||||
|
```
|
||||||
|
- This guide assumes you have an SSD so we have `discard`.
|
||||||
|
- Update the Linux kernel to load encrypted partitions at startup: `#
|
||||||
|
update-initramfs -k all -c`
|
||||||
|
- Exit the chroot shell.
|
||||||
|
- Reboot.
|
||||||
|
- Select Enroll MOK at the blue screen MOK manager. Be quick! After a minute
|
||||||
|
or so it would reboot and you only get one chance.
|
||||||
|
- Select continue and yes.
|
||||||
|
|
||||||
|
## Post Install
|
||||||
|
|
||||||
|
- Adjust the boot sequence in UEFI if you want to boot Windows first.
|
||||||
|
- `$ timedatectl set-local-rtc 1 --adjust-system-clock` to prevent different
|
||||||
|
system clock time when dual booting.
|
||||||
|
- Install and configure Dislocker to access Windows BitLocker drives.
|
||||||
311
setup/ubuntu-setup.md
Normal file
311
setup/ubuntu-setup.md
Normal file
@ -0,0 +1,311 @@
|
|||||||
|
# Ubuntu Setup
|
||||||
|
|
||||||
|
Here's my personal Ubuntu 22.04 setup. (Make sure to enable Wayland on Nvidia!)
|
||||||
|
|
||||||
|
- Set font size in Terminal to 15 and initial column count to 85
|
||||||
|
- Must haves:
|
||||||
|
- `sudo apt install curl earlyoom ffmpeg flatpak git gnome-clocks \
|
||||||
|
gnome-shell-pomodoro gnome-software-plugin-flatpak gnome-sound-recorder \
|
||||||
|
gnome-todo gnome-weather goldendict gparted keepassxc mosh obs-studio \
|
||||||
|
shadowsocks-libev sshfs synaptic tmux trash-cli vim-gtk3 vlc \
|
||||||
|
gnome-boxes wl-clipboard needrestart deja-dup ufw ddcutil`
|
||||||
|
- Optional:
|
||||||
|
- `sudo apt install openjdk-17-jdk gthumb gnome-usage ranger
|
||||||
|
gnome-firmware gnome-games gnome-nettool qpdf pulseeffects
|
||||||
|
gnome-packagekit gnome-passwordsafe mkvtoolnix-gui virtualbox-qt syncplay`
|
||||||
|
- Remove all snaps:
|
||||||
|
- ```
|
||||||
|
sudo apt autoremove --purge snapd
|
||||||
|
sudo apt-mark hold snapd
|
||||||
|
trash ~/snap
|
||||||
|
```
|
||||||
|
- FlatHub:
|
||||||
|
- `flatpak remote-add --if-not-exists flathub
|
||||||
|
https://flathub.org/repo/flathub.flatpakrepo`
|
||||||
|
- Allocate 8GiB for swap
|
||||||
|
```
|
||||||
|
sudo swapoff /swapfile
|
||||||
|
sudo fallocate -l 8GiB /swapfile
|
||||||
|
sudo mkswap /swapfile
|
||||||
|
sudo swapon /swapfile
|
||||||
|
```
|
||||||
|
- Early OOM config: edit `/etc/default/earlyoom` and add:
|
||||||
|
- `--avoid
|
||||||
|
'(^|/)(systemd|sshd|mosh-server|ssh|vim|sudo|sudoedit|gnome-shell|gnome-terminal-)$'
|
||||||
|
--prefer '(^|/)(Web Content|Isolated Web Co)$'`
|
||||||
|
- Firefox
|
||||||
|
- Change default zoom to 110%
|
||||||
|
- Enable HTTPS only
|
||||||
|
- Proxy DNS when using SOCKS v5
|
||||||
|
- Enable DNS over HTTPS
|
||||||
|
- In `about:config` set `browser.sessionstore.max_windows_undo` to 10.
|
||||||
|
- Go to settings -> `Region & Language` and install `Chinese (simplified)`.
|
||||||
|
|
||||||
|
## Optional packages
|
||||||
|
|
||||||
|
- `clangd` for VSCodium C language server with
|
||||||
|
`llvm-vs-code-extensions.vscode-clangd` (?)
|
||||||
|
- `imagemagick` for `convert`, comment out with `<!-- -->` PDF policy in
|
||||||
|
`/etc/ImageMagick-6/policy.xml` (?)
|
||||||
|
- Cross compiling (?)
|
||||||
|
- `gcc-aarch64-linux-gnu`
|
||||||
|
- `gcc-arm-linux-gnueabihf`
|
||||||
|
|
||||||
|
## UFW
|
||||||
|
|
||||||
|
`$ sudo ufw enable`
|
||||||
|
|
||||||
|
## Wayland (?)
|
||||||
|
|
||||||
|
- `sudoedit /usr/lib/udev/rules.d/61-gdm.rules` and comment the two uncommented
|
||||||
|
lines
|
||||||
|
- Reboot or restart gdm3 (didn't try)
|
||||||
|
|
||||||
|
## Apps
|
||||||
|
|
||||||
|
- gnome-tweaks
|
||||||
|
- `sudo apt install gnome-tweaks`
|
||||||
|
- Swap capslock and ESC in `Keyboard & Mouse` -> `Additional Layout Options`
|
||||||
|
-> `Caps Lock behavior`
|
||||||
|
- Change `Mouse Click Emulation` to `Area`
|
||||||
|
- Turn on weekdays and battery percentage in `Top Bar`
|
||||||
|
- Flat mouse acceleration profile
|
||||||
|
- Turn off suspend when closing lid
|
||||||
|
- Extensions
|
||||||
|
- `sudo apt install gnome-shell-extensions`
|
||||||
|
- Turn on:
|
||||||
|
- `Applications menu`
|
||||||
|
- `Places status indicator`
|
||||||
|
- `Windownavigator`
|
||||||
|
- `Workspace Indicator`
|
||||||
|
- Note: to manually install Gnome extensions, unzip it and copy the `uuid`
|
||||||
|
field in `metadata.json` and rename the directory to this name, then move
|
||||||
|
to `~/.local/share/gnome-shell/extensions` and logout and login.
|
||||||
|
- GSConnect
|
||||||
|
- `sudo apt install gnome-shell-extension-gsconnect`
|
||||||
|
- Uncheck SFTP auto mount
|
||||||
|
- Add commands:
|
||||||
|
- `Lock`: `loginctl lock-session`
|
||||||
|
- `Quack`: `ffplay -v quiet -nodisp -autoexit ~/Music/'.Not
|
||||||
|
Music'/Ringtones/Quack.mp3`
|
||||||
|
- UFW:
|
||||||
|
- `sudo ufw allow 1716:1764/tcp`
|
||||||
|
- `sudo ufw allow 1716:1764/udp`
|
||||||
|
- Flatseal
|
||||||
|
- `flatpak install flathub com.github.tchx84.Flatseal`
|
||||||
|
- VSCodium
|
||||||
|
- `flatpak install flathub com.vscodium.codium`
|
||||||
|
- OBS Studio
|
||||||
|
- `$ sudo apt install qtwayland5`
|
||||||
|
- In `/usr/share/applications/com.obsproject.Studio.desktop`, replace
|
||||||
|
`Exec=obs` with `Exec=sh -c '[ "$XDG_SESSION_TYPE" = "wayland" ] && obs
|
||||||
|
-platform wayland || obs'`
|
||||||
|
- Birdtray
|
||||||
|
- `$ sudo apt install birdtray`
|
||||||
|
- Configure it by running `birdtray` and clicking on the tray icon
|
||||||
|
- In Startup Applications Preference:
|
||||||
|
- Name: `Birdtray`
|
||||||
|
- Command: `sh -c "sleep 20 && /usr/bin/birdtray"`
|
||||||
|
- Comment: `Minimize to tray for Thunderbird`
|
||||||
|
- Wait for bugs to be fixed before removing sleep:
|
||||||
|
- <https://github.com/gyunaev/birdtray/issues/362>
|
||||||
|
- <https://github.com/gyunaev/birdtray/issues/430>
|
||||||
|
- Hiding: check all except hide/show by clicking icon
|
||||||
|
- Gnome Calendar
|
||||||
|
- Add Google accounts in online accounts
|
||||||
|
- On older versions of Ubuntu < 22.04, not tested for 22.04:
|
||||||
|
- Wait for a bit, it's kinda buggy but it will work at the end (wait for ~2
|
||||||
|
days)
|
||||||
|
- Golden Dict
|
||||||
|
- Import dictionaries in `~/.software/goldendict/stardict-cc-cedict`
|
||||||
|
- Don't search in dictionaries contains more then 10000 articles
|
||||||
|
- <https://einverne.github.io/post/2018/08/goldendict.html>
|
||||||
|
- Xournal++
|
||||||
|
- `sudo apt install xournalpp texlive-latex-extra`
|
||||||
|
- < Ubuntu 22.04
|
||||||
|
- `flatpak install flathub com.github.xournalpp.xournalpp`
|
||||||
|
- `flatpak install flathub org.freedesktop.Sdk.Extension.texlive` and
|
||||||
|
choose newest (21.08 at time of writing) for LaTeX support.
|
||||||
|
- cameractrls
|
||||||
|
- `flatpak install hu.irl.cameractrls`
|
||||||
|
- Minecraft
|
||||||
|
- TODO: PolyMC just had some problems
|
||||||
|
- To host servers: `sudo ufw allow 25565/tcp`
|
||||||
|
- Bottles
|
||||||
|
- `flatpak install flathub com.usebottles.bottles`
|
||||||
|
- Discord
|
||||||
|
- `flatpak install flathub com.discordapp.Discord`
|
||||||
|
- Slack
|
||||||
|
- `flatpak install flathub com.slack.Slack`
|
||||||
|
- Zoom
|
||||||
|
- `flatpak install flathub us.zoom.Zoom`
|
||||||
|
|
||||||
|
## Optional Apps
|
||||||
|
|
||||||
|
- Impatience (adjust Gnome animation speed)
|
||||||
|
- `sudo apt install gnome-shell-extension-impatience`
|
||||||
|
- Enable in extensions and set speed to 0.7
|
||||||
|
- Wobbly Windows (?)
|
||||||
|
- From
|
||||||
|
<https://extensions.gnome.org/extension/2950/compiz-alike-windows-effect/>
|
||||||
|
- Turn off maximize effect
|
||||||
|
- Increase restore factor to 5
|
||||||
|
- System monitor
|
||||||
|
- `$ sudo apt install gnome-shell-extension-system-monitor`
|
||||||
|
- Show only CPU (digit and graph) and memory (digit).
|
||||||
|
- OpenWeatherMap
|
||||||
|
- `$ sudo apt install gnome-shell-extension-weather`
|
||||||
|
- On older systems (< 21.04), download and install from
|
||||||
|
`https://extensions.gnome.org/extension/750/openweather/`
|
||||||
|
- Set location to La Jolla
|
||||||
|
- Switch to metric units
|
||||||
|
- VSCodium
|
||||||
|
- `flatpak install flathub com.vscodium.codium`
|
||||||
|
- Birdtray
|
||||||
|
- `$ sudo apt install birdtray`
|
||||||
|
- Configure it by running `birdtray` and clicking on the tray icon
|
||||||
|
- In Startup Applications Preference:
|
||||||
|
- Name: `Birdtray`
|
||||||
|
- Command: `sh -c "sleep 20 && /usr/bin/birdtray"`
|
||||||
|
- Comment: `Minimize to tray for Thunderbird`
|
||||||
|
- Wait for bugs to be fixed before removing sleep:
|
||||||
|
- <https://github.com/gyunaev/birdtray/issues/362>
|
||||||
|
- <https://github.com/gyunaev/birdtray/issues/430>
|
||||||
|
- Hiding: check all except hide/show by clicking icon
|
||||||
|
- Broken on Wayland
|
||||||
|
- Android Studio
|
||||||
|
- Move `Ctrl+S` from IdeaVim to IDE
|
||||||
|
- Enabled `Mark modified (*)`
|
||||||
|
- Disable both `Save files on frame deactivation` and `Save files
|
||||||
|
automatically if application is idle`
|
||||||
|
|
||||||
|
## Grub background
|
||||||
|
|
||||||
|
### Tool
|
||||||
|
|
||||||
|
- `$ sudo apt install grub-customizer`
|
||||||
|
- Put in background manually
|
||||||
|
|
||||||
|
### Manual Script
|
||||||
|
|
||||||
|
```
|
||||||
|
sudo mkdir /opt/grub
|
||||||
|
sudo cp -r background/ /boot/grub/
|
||||||
|
sudo chown -R root:root /opt/grub
|
||||||
|
sudo chmod -R 700 /opt/grub
|
||||||
|
```
|
||||||
|
|
||||||
|
- Add the following lines to `/opt/grub/cycle-backgrounds.sh`:
|
||||||
|
```
|
||||||
|
#!/bin/sh
|
||||||
|
cd /boot/grub/background
|
||||||
|
mv background.png tmp.png
|
||||||
|
mv background-1.png background.png
|
||||||
|
mv tmp.png background-1.png
|
||||||
|
```
|
||||||
|
- `$ sudo chown root:root /opt/grub/cycle-backgrounds.sh`
|
||||||
|
- `$ sudo chmod 700 /opt/grub/cycle-backgrounds.sh`
|
||||||
|
- Add `@reboot /opt/grub/cycle-backgrounds.sh` to root crontab.
|
||||||
|
- In `/etc/default/grub`:
|
||||||
|
- Add `GRUB_BACKGROUND=/boot/grub/background/background.png`
|
||||||
|
- Change `GRUB_TIMEOUT=10` to `GRUB_TIMEOUT=3`
|
||||||
|
- `$ sudo update-grub`
|
||||||
|
|
||||||
|
## OpenSSH Server & Mosh
|
||||||
|
|
||||||
|
```
|
||||||
|
sudo apt install -y openssh-server mosh
|
||||||
|
sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak
|
||||||
|
sudo cp ../system/sshd_config /etc/ssh/sshd_config
|
||||||
|
sudo groupadd --system ssh-users
|
||||||
|
sudo usermod -aG ssh-users $(whoami)
|
||||||
|
mkdir -p ~/.ssh
|
||||||
|
chmod 700 ~/.ssh
|
||||||
|
touch ~/.ssh/authorized_keys
|
||||||
|
chmod 600 ~/.ssh/authorized_keys
|
||||||
|
# insert your SSH public keys into the file
|
||||||
|
sudo ufw limit 22/tcp
|
||||||
|
sudo ufw allow 60001:60999/udp
|
||||||
|
sudo systemctl restart ssh
|
||||||
|
```
|
||||||
|
|
||||||
|
## See logs as admin
|
||||||
|
|
||||||
|
`sudo usermod -aG adm $(whoami)`
|
||||||
|
|
||||||
|
## Proton black screen fix (?)
|
||||||
|
|
||||||
|
Source:
|
||||||
|
<https://github.com/ValveSoftware/steam-runtime/issues/312#issuecomment-739441559>
|
||||||
|
|
||||||
|
```
|
||||||
|
sudo mv /usr/share/vulkan/icd.d/intel_icd.x86_64.json \
|
||||||
|
/usr/share/vulkan/icd.d/intel_icd.x86_64.json.disabled
|
||||||
|
```
|
||||||
|
|
||||||
|
## Proprietary encodings (?)
|
||||||
|
|
||||||
|
- `$ sudo apt install ubuntu-restricted-extras`
|
||||||
|
|
||||||
|
## Dual boot
|
||||||
|
|
||||||
|
### Dislocker
|
||||||
|
|
||||||
|
```
|
||||||
|
$ sudo apt install dislocker
|
||||||
|
$ sudo mkdir /media/"$(whoami)" /mnt/dislocker /opt/dislocker
|
||||||
|
$ sudo chmod 700 /media/"$(whoami)" /mnt/dislocker /opt/dislocker
|
||||||
|
$ sudo chown $user:$user /media/"$(whoami)"
|
||||||
|
$ sudo chown root:root /mnt/dislocker /opt/dislocker
|
||||||
|
```
|
||||||
|
|
||||||
|
Copy the `.BEK` file to `/opt/dislocker/"$(whoami)".bek`.
|
||||||
|
|
||||||
|
```
|
||||||
|
$ sudo chown root:root /opt/dislocker/"$(whoami)".bek
|
||||||
|
$ sudo chmod 700 /opt/dislocker/"$(whoami)".bek
|
||||||
|
```
|
||||||
|
|
||||||
|
Add the following lines to `/etc/fstab` with `<user>` replaced:
|
||||||
|
|
||||||
|
```
|
||||||
|
/dev/nvme0n1p6 /mnt/dislocker fuse.dislocker nofail,nouser,umask=0077,bekfile=/opt/dislocker/<user>.bek 0 0
|
||||||
|
/mnt/dislocker/dislocker-file /media/<user> auto nofail,umask=0077,gid=<user>,uid=<user> 0 0
|
||||||
|
```
|
||||||
|
|
||||||
|
Mount manually with:
|
||||||
|
```
|
||||||
|
$ sudo dislocker /dev/nvmen1p6 -p -- /mnt/dislocker
|
||||||
|
$ sudo mount -o loop /mnt/dislocker/dislocker-file /media/"$(whoami)"
|
||||||
|
```
|
||||||
|
|
||||||
|
## Hardware specific
|
||||||
|
|
||||||
|
### Nvidia proprietary driver screen tearing fix
|
||||||
|
|
||||||
|
For Ubuntu < 22.04: `echo 'options nvidia-drm modeset=1' | sudo tee
|
||||||
|
/etc/modprobe.d/nvidia-drm-nomodeset.conf > /dev/null`
|
||||||
|
|
||||||
|
### Digimend for Huion tablet (works with H640p)
|
||||||
|
|
||||||
|
- = 20.10 & using wayland: no longer necessary
|
||||||
|
- = 21.04:
|
||||||
|
- `$ sudo apt install digimend-dkms`
|
||||||
|
- Reboot.
|
||||||
|
- < 21.04:
|
||||||
|
- Download and install from
|
||||||
|
`https://github.com/DIGImend/digimend-kernel-drivers`.
|
||||||
|
|
||||||
|
### Razer mouse
|
||||||
|
|
||||||
|
```
|
||||||
|
sudo add-apt-repository ppa:polychromatic/stable
|
||||||
|
sudo apt install openrazer-meta polychromatic
|
||||||
|
```
|
||||||
|
|
||||||
|
## Workarounds
|
||||||
|
|
||||||
|
- [Blanked screen doesn't wake up after locking \[drmModeAtomicCommit: Argument
|
||||||
|
invalide\] \[drmModeAtomicCommit: Invalid
|
||||||
|
argument\]](https://bugs.launchpad.net/ubuntu/+source/mutter/+bug/1968040)
|
||||||
|
- Put `MUTTER_DEBUG_ENABLE_ATOMIC_KMS=0` in `/etc/environment`
|
||||||
62
setup/ubuntu-user-config.md
Normal file
62
setup/ubuntu-user-config.md
Normal file
@ -0,0 +1,62 @@
|
|||||||
|
# Ubuntu User Configuration
|
||||||
|
|
||||||
|
This document includes configuration that is per user and remembered in the home
|
||||||
|
directory.
|
||||||
|
|
||||||
|
- Clone the terminal configs
|
||||||
|
- `git clone https://git.duckduckwhale.com/DuckDuckWhale/dotfiles`
|
||||||
|
- Open Vim and type `:PlugInstall`
|
||||||
|
|
||||||
|
## Settings
|
||||||
|
|
||||||
|
- Go to `Appearance` and choose dark mode
|
||||||
|
- Go to `Date & Time` and use am/pm
|
||||||
|
- Go to `Displays` and enable night light
|
||||||
|
- Go to `Power` and change `Power Button Action` to `Suspend`.
|
||||||
|
- Go to `Privacy -> File History & Trash` and auto delete everything in 30 days
|
||||||
|
- Go to `Multitasking` and choose `Workspaces on all displays` and `Hot Corner`
|
||||||
|
- Application switching?
|
||||||
|
|
||||||
|
## Firefox
|
||||||
|
|
||||||
|
- Check open previous windows and tabs
|
||||||
|
- Setup Multi-Account Containers
|
||||||
|
- Change shortcuts to `Ctrl`+<#>
|
||||||
|
|
||||||
|
## VS Codium
|
||||||
|
|
||||||
|
- `flatpak override --user --env=FLATPAK_ISOLATE_PACKAGES=0
|
||||||
|
com.vscodium.codium`
|
||||||
|
- Reason:
|
||||||
|
`https://github.com/flathub/ide-flatpak-wrapper/blob/master/vscode.sh`
|
||||||
|
|
||||||
|
## OBS record audio per app (may need adjustment > 22.04)
|
||||||
|
|
||||||
|
```
|
||||||
|
# configure pulse audio with obs-sink and loop it back to speakers
|
||||||
|
cat >> ~/.config/pulse/default.pa << 'EOF'
|
||||||
|
# include system default
|
||||||
|
.include /etc/pulse/default.pa
|
||||||
|
# sink that discard all input
|
||||||
|
load-module module-null-sink sink_name=obs-sink
|
||||||
|
# update human readable description in property list
|
||||||
|
update-sink-proplist obs-sink device.description="OBS Sink"
|
||||||
|
# replace <name> with name in first output of `pacmd list-sinks` inside angle
|
||||||
|
# brackets
|
||||||
|
# sink must be set, otherwise would be default and cause echoing
|
||||||
|
# latency_msec must be set, the lowest possible is 1 and default is 200
|
||||||
|
load-module module-loopback sink=<name> latency_msec=1
|
||||||
|
EOF
|
||||||
|
|
||||||
|
# restart pulse audio
|
||||||
|
pulseaudio -k
|
||||||
|
|
||||||
|
# to configure output per app to different devices
|
||||||
|
sudo apt install pavucontrol
|
||||||
|
```
|
||||||
|
|
||||||
|
Source: <https://miyacogbf.github.io/mlgb/only-game-sound/>
|
||||||
|
|
||||||
|
## [Golden Dict](https://einverne.github.io/post/2018/08/goldendict.html)
|
||||||
|
- Import dictionaries in `~/.software/goldendict/stardict-cc-cedict`
|
||||||
|
- Don't search in dictionaries contains more then 10000 articles
|
||||||
Loading…
Reference in New Issue
Block a user