Move help and deprecated to their own files
This commit is contained in:
107
arch/base.md
107
arch/base.md
@@ -51,14 +51,6 @@ I have instructions for building a:
|
|||||||
- [CUPS Printing](#cups-printing)
|
- [CUPS Printing](#cups-printing)
|
||||||
- [Yubikey](#yubikey)
|
- [Yubikey](#yubikey)
|
||||||
- [Bashrc](#bashrc)
|
- [Bashrc](#bashrc)
|
||||||
- [Unecessary](#unecessary)
|
|
||||||
- [Plymouth Background Image](#plymouth-background-image)
|
|
||||||
- [Help](#help)
|
|
||||||
- [Update Grub](#update-grub)
|
|
||||||
- [Downgrading Kernel](#downgrading-kernel)
|
|
||||||
- [Deprecated](#deprecated)
|
|
||||||
- [Deprecated Security](#deprecated-security)
|
|
||||||
- [Firejail](#firejail)
|
|
||||||
|
|
||||||
## Installation
|
## Installation
|
||||||
|
|
||||||
@@ -762,6 +754,7 @@ AMD
|
|||||||
|
|
||||||
```bash
|
```bash
|
||||||
pacman -S vulkan-radeon libva-utils libva-mesa-driver xf86-video-amdgpu
|
pacman -S vulkan-radeon libva-utils libva-mesa-driver xf86-video-amdgpu
|
||||||
|
vainfo
|
||||||
```
|
```
|
||||||
|
|
||||||
### Power Management
|
### Power Management
|
||||||
@@ -958,6 +951,8 @@ sudo systemctl enable --now pcscd
|
|||||||
|
|
||||||
## Bashrc
|
## Bashrc
|
||||||
|
|
||||||
|
Don't do this if you installed `zsh`
|
||||||
|
|
||||||
~/.bashrc
|
~/.bashrc
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
@@ -1051,99 +1046,3 @@ alias lsc='find . -type f | wc -l'
|
|||||||
## ls sort by last modified ##
|
## ls sort by last modified ##
|
||||||
alias lmt='ls -t -1'
|
alias lmt='ls -t -1'
|
||||||
```
|
```
|
||||||
|
|
||||||
## Unecessary
|
|
||||||
|
|
||||||
### Plymouth Background Image
|
|
||||||
|
|
||||||
1. `sudo cp image.png /usr/share/plymouth/themes/spinner/background-tile.png`
|
|
||||||
1. `sudo plymouth-set-default-theme -R spinner`
|
|
||||||
|
|
||||||
## Help
|
|
||||||
|
|
||||||
### Update Grub
|
|
||||||
|
|
||||||
1. `grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=BOOT`
|
|
||||||
1. `cp /boot/EFI/BOOT/grubx64.efi /boot/EFI/BOOT/bootx64.efi`
|
|
||||||
|
|
||||||
### Downgrading Kernel
|
|
||||||
|
|
||||||
You can find old kernel versions at <https://archive.archlinux.org/packages/l/linux/>
|
|
||||||
|
|
||||||
You can find old kernel-header versions at <https://archive.archlinux.org/packages/l/linux-headers/>
|
|
||||||
|
|
||||||
If you want to downgrade to a previously installed kernel you can use pacman cache:
|
|
||||||
|
|
||||||
1. `cd /var/cache/pacman/pkg`
|
|
||||||
2. `pacman -U linux-x.x.x.arch1-1-x86_64.pkg.tar.zst linux-headers-x.x.x.arch1-1-x86_64.pkg.tar.zst`
|
|
||||||
3. `reboot`
|
|
||||||
|
|
||||||
If you want to downgrade to a kernel that wasn't previously installed:
|
|
||||||
|
|
||||||
1. Download linux... and linux-headers... from above
|
|
||||||
2. `pacman -U linux-x.x.x.arch1-1-x86_64.pkg.tar.zst linux-headers-x.x.x.arch1-1-x86_64.pkg.tar.zst`
|
|
||||||
3. `reboot`
|
|
||||||
|
|
||||||
## Deprecated
|
|
||||||
|
|
||||||
### Deprecated Security
|
|
||||||
|
|
||||||
#### Firejail
|
|
||||||
|
|
||||||
Don't use firejail, it's a suid binary which only runs in userspace. Apparmor does
|
|
||||||
almost exactly the same thing but runs in the kernel at boot and protects you more
|
|
||||||
completely. I'm leaving this here in case you're interested but realistically you
|
|
||||||
should just learn apparmor.
|
|
||||||
|
|
||||||
Firejail launches supported applications in a sandboxed environment where it limits access
|
|
||||||
to system files and resources.
|
|
||||||
|
|
||||||
For example:
|
|
||||||
|
|
||||||
- Firefox will not be able to access more than a small subset of your home directory.
|
|
||||||
- VSCode will not be able to acces ~/.config/autostart.
|
|
||||||
|
|
||||||
1. `sudo pacman -S firejail`
|
|
||||||
2. `sudo apparmor_parser -r /etc/apparmor.d/firejail-default`
|
|
||||||
3. `sudo firecfg`
|
|
||||||
4. `firecfg --fix`
|
|
||||||
5. `sudo rm /usr/local/bin/dnsmasq` (this fixes an issue with virsh network start)
|
|
||||||
6. Add a pacman hook to apply firejail on install
|
|
||||||
|
|
||||||
/etc/pacman.d/hooks/firejail.hook
|
|
||||||
|
|
||||||
```conf
|
|
||||||
[Trigger]
|
|
||||||
Type = Path
|
|
||||||
Operation = Install
|
|
||||||
Operation = Upgrade
|
|
||||||
Operation = Remove
|
|
||||||
Target = usr/bin/*
|
|
||||||
Target = usr/share/applications/*.desktop
|
|
||||||
|
|
||||||
[Action]
|
|
||||||
Description = Configure symlinks in /usr/local/bin based on firecfg.config...
|
|
||||||
When = PostTransaction
|
|
||||||
Depends = firejail
|
|
||||||
Exec = /bin/sh -c 'firecfg >/dev/null 2>&1'
|
|
||||||
```
|
|
||||||
|
|
||||||
You can run firejail with noprofile to fix access issues (like firefox gnome connector)
|
|
||||||
|
|
||||||
```bash
|
|
||||||
firejail --noprofile firefox
|
|
||||||
```
|
|
||||||
|
|
||||||
You'll probably want to enable the following
|
|
||||||
|
|
||||||
`sudo cat /etc/firejail/firejail.config | grep -e '^[^#].*'`
|
|
||||||
|
|
||||||
/etc/firejail/firejail.config
|
|
||||||
|
|
||||||
```conf
|
|
||||||
browser-disable-u2f no
|
|
||||||
chroot yes
|
|
||||||
firejail-prompt yes
|
|
||||||
force-nonewprivs yes
|
|
||||||
tracelog yes
|
|
||||||
```
|
|
||||||
|
|||||||
61
arch/deprecated.md
Normal file
61
arch/deprecated.md
Normal file
@@ -0,0 +1,61 @@
|
|||||||
|
# Deprecated
|
||||||
|
|
||||||
|
## Firejail
|
||||||
|
|
||||||
|
Don't use firejail, it's a suid binary which only runs in userspace. Apparmor does
|
||||||
|
almost exactly the same thing but runs in the kernel at boot and protects you more
|
||||||
|
completely. I'm leaving this here in case you're interested but realistically you
|
||||||
|
should just learn apparmor.
|
||||||
|
|
||||||
|
Firejail launches supported applications in a sandboxed environment where it limits access
|
||||||
|
to system files and resources.
|
||||||
|
|
||||||
|
For example:
|
||||||
|
|
||||||
|
- Firefox will not be able to access more than a small subset of your home directory.
|
||||||
|
- VSCode will not be able to acces ~/.config/autostart.
|
||||||
|
|
||||||
|
1. `sudo pacman -S firejail`
|
||||||
|
2. `sudo apparmor_parser -r /etc/apparmor.d/firejail-default`
|
||||||
|
3. `sudo firecfg`
|
||||||
|
4. `firecfg --fix`
|
||||||
|
5. `sudo rm /usr/local/bin/dnsmasq` (this fixes an issue with virsh network start)
|
||||||
|
6. Add a pacman hook to apply firejail on install
|
||||||
|
|
||||||
|
/etc/pacman.d/hooks/firejail.hook
|
||||||
|
|
||||||
|
```conf
|
||||||
|
[Trigger]
|
||||||
|
Type = Path
|
||||||
|
Operation = Install
|
||||||
|
Operation = Upgrade
|
||||||
|
Operation = Remove
|
||||||
|
Target = usr/bin/*
|
||||||
|
Target = usr/share/applications/*.desktop
|
||||||
|
|
||||||
|
[Action]
|
||||||
|
Description = Configure symlinks in /usr/local/bin based on firecfg.config...
|
||||||
|
When = PostTransaction
|
||||||
|
Depends = firejail
|
||||||
|
Exec = /bin/sh -c 'firecfg >/dev/null 2>&1'
|
||||||
|
```
|
||||||
|
|
||||||
|
You can run firejail with noprofile to fix access issues (like firefox gnome connector)
|
||||||
|
|
||||||
|
```bash
|
||||||
|
firejail --noprofile firefox
|
||||||
|
```
|
||||||
|
|
||||||
|
You'll probably want to enable the following
|
||||||
|
|
||||||
|
`sudo cat /etc/firejail/firejail.config | grep -e '^[^#].*'`
|
||||||
|
|
||||||
|
/etc/firejail/firejail.config
|
||||||
|
|
||||||
|
```conf
|
||||||
|
browser-disable-u2f no
|
||||||
|
chroot yes
|
||||||
|
firejail-prompt yes
|
||||||
|
force-nonewprivs yes
|
||||||
|
tracelog yes
|
||||||
|
```
|
||||||
@@ -36,24 +36,45 @@ Include = /etc/pacman.d/mirrorlist
|
|||||||
```
|
```
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
sudo pacman -S steam
|
pacman -S steam
|
||||||
```
|
```
|
||||||
|
|
||||||
When prompted (on AMD) use vulkan-radeon
|
When prompted use vulkan-radeon on AMD and vulkan-intel on intel.
|
||||||
|
|
||||||
|
### Streaming not working
|
||||||
|
|
||||||
|
<https://wiki.archlinux.org/title/Steam/Troubleshooting#Steam_Remote_Play_issues>
|
||||||
|
|
||||||
|
1. Try launching steam through the command line. This might unbreak streaming permanently
|
||||||
|
2. `pamcan -S lib32-libva-intel-driver libva-intel-driver lib32-libcanberra`
|
||||||
|
|
||||||
|
## VSCode
|
||||||
|
|
||||||
|
For the open source version of code install `code`:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
pacman -S code
|
||||||
|
```
|
||||||
|
|
||||||
## XWayland
|
## XWayland
|
||||||
|
|
||||||
Provides compatibility with X server applications (like wine)
|
Provides compatibility with X server applications (like wine)
|
||||||
|
|
||||||
1. `sudo pacman -S xorg-xwayland`
|
```bash
|
||||||
|
pacman -S xorg-xwayland
|
||||||
|
```
|
||||||
|
|
||||||
## Wine
|
## Wine
|
||||||
|
|
||||||
`pacman -S wine`
|
```bash
|
||||||
|
pacman -S wine
|
||||||
|
```
|
||||||
|
|
||||||
## Spotify
|
## Spotify
|
||||||
|
|
||||||
`pacman -S spotify-launcher`
|
```bash
|
||||||
|
pacman -S spotify-launcher
|
||||||
|
```
|
||||||
|
|
||||||
## VLC
|
## VLC
|
||||||
|
|
||||||
@@ -61,6 +82,12 @@ Provides compatibility with X server applications (like wine)
|
|||||||
pacman -S vlc
|
pacman -S vlc
|
||||||
```
|
```
|
||||||
|
|
||||||
|
## Remote Desktop
|
||||||
|
|
||||||
|
```bash
|
||||||
|
pacman -S remmina freerdp
|
||||||
|
```
|
||||||
|
|
||||||
## AppImages
|
## AppImages
|
||||||
|
|
||||||
### Bitwarden
|
### Bitwarden
|
||||||
|
|||||||
55
arch/help.md
Normal file
55
arch/help.md
Normal file
@@ -0,0 +1,55 @@
|
|||||||
|
# Help
|
||||||
|
|
||||||
|
- [Help](#help)
|
||||||
|
- [Remove unused packages](#remove-unused-packages)
|
||||||
|
- [Update Grub](#update-grub)
|
||||||
|
- [Downgrading Kernel](#downgrading-kernel)
|
||||||
|
- [Set Plymouth Background Image](#set-plymouth-background-image)
|
||||||
|
|
||||||
|
## Remove unused packages
|
||||||
|
|
||||||
|
Make sure to use the `-Rs` flag when removing. This will clean up deps.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
pacman -Rs package
|
||||||
|
```
|
||||||
|
|
||||||
|
To see a list of packages that are orphaned you can run:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
pacman -Qtdq
|
||||||
|
```
|
||||||
|
|
||||||
|
To remove those packages you can run
|
||||||
|
|
||||||
|
```bash
|
||||||
|
pacman -Qtdq | pacman -Rns -
|
||||||
|
```
|
||||||
|
|
||||||
|
## Update Grub
|
||||||
|
|
||||||
|
1. `grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=BOOT`
|
||||||
|
1. `cp /boot/EFI/BOOT/grubx64.efi /boot/EFI/BOOT/bootx64.efi`
|
||||||
|
|
||||||
|
## Downgrading Kernel
|
||||||
|
|
||||||
|
You can find old kernel versions at <https://archive.archlinux.org/packages/l/linux/>
|
||||||
|
|
||||||
|
You can find old kernel-header versions at <https://archive.archlinux.org/packages/l/linux-headers/>
|
||||||
|
|
||||||
|
If you want to downgrade to a previously installed kernel you can use pacman cache:
|
||||||
|
|
||||||
|
1. `cd /var/cache/pacman/pkg`
|
||||||
|
2. `pacman -U linux-x.x.x.arch1-1-x86_64.pkg.tar.zst linux-headers-x.x.x.arch1-1-x86_64.pkg.tar.zst`
|
||||||
|
3. `reboot`
|
||||||
|
|
||||||
|
If you want to downgrade to a kernel that wasn't previously installed:
|
||||||
|
|
||||||
|
1. Download linux... and linux-headers... from above
|
||||||
|
2. `pacman -U linux-x.x.x.arch1-1-x86_64.pkg.tar.zst linux-headers-x.x.x.arch1-1-x86_64.pkg.tar.zst`
|
||||||
|
3. `reboot`
|
||||||
|
|
||||||
|
## Set Plymouth Background Image
|
||||||
|
|
||||||
|
1. `sudo cp image.png /usr/share/plymouth/themes/spinner/background-tile.png`
|
||||||
|
1. `sudo plymouth-set-default-theme -R spinner`
|
||||||
Reference in New Issue
Block a user