add server configurations
This commit is contained in:
33
arch/base.md
33
arch/base.md
@@ -18,6 +18,7 @@ I have instructions for building a:
|
||||
- [Security](#security)
|
||||
- [Secure Boot](#secure-boot)
|
||||
- [TPM2 LUKS Decryption](#tpm2-luks-decryption)
|
||||
- [Re-enroll](#re-enroll)
|
||||
- [FIDO2 LUKS Decryption](#fido2-luks-decryption)
|
||||
- [Firewall](#firewall)
|
||||
- [AppArmor](#apparmor)
|
||||
@@ -50,6 +51,7 @@ I have instructions for building a:
|
||||
- [Apps](#apps)
|
||||
- [Firefox](#firefox)
|
||||
- [Gnome Extensions](#gnome-extensions)
|
||||
- [Avahi (Bonjour)](#avahi-bonjour)
|
||||
- [CUPS Printing](#cups-printing)
|
||||
- [Yubikey](#yubikey)
|
||||
- [Bashrc](#bashrc)
|
||||
@@ -339,6 +341,13 @@ Using `--tpm2-pcrs=7` enforces secure boot and will require password if secure b
|
||||
1. `pacman -S tpm2-tss`
|
||||
2. `systemd-cryptenroll /dev/vda2 --wipe-slot=tpm2 --tpm2-device=auto --tpm2-pcrs=7`
|
||||
|
||||
##### Re-enroll
|
||||
|
||||
```bash
|
||||
systemd-cryptenroll /dev/nvme0n1p2 --wipe-slot=tpm2 --tpm2-device=auto --tpm2-pcrs=7
|
||||
systemd-cryptenroll /dev/nvme0n1p3 --wipe-slot=tpm2 --tpm2-device=auto --tpm2-pcrs=7
|
||||
```
|
||||
|
||||
#### FIDO2 LUKS Decryption
|
||||
|
||||
1. `pacman -S libfido2`
|
||||
@@ -946,13 +955,31 @@ Choose noto-fonts
|
||||
3. dash-to-dock@micxgx.gmail.com
|
||||
4. tactile@lundal.io
|
||||
|
||||
### CUPS Printing
|
||||
### Avahi (Bonjour)
|
||||
|
||||
1. `sudo pacman -S cups cups-pdf avahi system-config-printer`
|
||||
1. `sudo pacman -S avahi`
|
||||
2. `sudo vim /etc/nsswitch.conf`
|
||||
|
||||
```conf
|
||||
hosts: mymachines mdns_minimal [NOTFOUND=return] resolve [!UNAVAIL=return] files myhostname dns
|
||||
hosts: mymachines mdns [NOTFOUND=return] resolve [!UNAVAIL=return] files myhostname dns
|
||||
```
|
||||
|
||||
3. `sudo vim /etc/mdns.allow`
|
||||
|
||||
```conf
|
||||
.local.
|
||||
.local
|
||||
```
|
||||
|
||||
### CUPS Printing
|
||||
|
||||
Note: you probably need avahi (see above)
|
||||
|
||||
1. `sudo pacman -S cups cups-pdf system-config-printer`
|
||||
2. `sudo vim /etc/nsswitch.conf`
|
||||
|
||||
```conf
|
||||
hosts: mymachines mdns [NOTFOUND=return] resolve [!UNAVAIL=return] files myhostname dns
|
||||
```
|
||||
|
||||
3. `sudo systemctl start cups`
|
||||
|
||||
@@ -1,6 +1,9 @@
|
||||
# Workstation
|
||||
|
||||
- [Workstation](#workstation)
|
||||
- [Framework AMD Notes](#framework-amd-notes)
|
||||
- [Wifi](#wifi)
|
||||
- [Microcode](#microcode)
|
||||
- [Base Tools](#base-tools)
|
||||
- [ZSH](#zsh)
|
||||
- [Aliases](#aliases)
|
||||
@@ -31,8 +34,38 @@
|
||||
- [AWS CLI](#aws-cli)
|
||||
- [NSlookup](#nslookup)
|
||||
- [rpi-imager](#rpi-imager)
|
||||
- [Install rpi-imager](#install-rpi-imager)
|
||||
- [Upgrade rpi-imager](#upgrade-rpi-imager)
|
||||
- [qFlipper](#qflipper)
|
||||
|
||||
## Framework AMD Notes
|
||||
|
||||
### Wifi
|
||||
|
||||
Install the wireless-regdb to set the regulatory domain to US
|
||||
|
||||
```bash
|
||||
pacman -S wireless-regdb
|
||||
```
|
||||
|
||||
Edit /etc/conf.d/wireless-regdom to set the domain
|
||||
|
||||
### Microcode
|
||||
|
||||
```bash
|
||||
pacman -S amd-ucode
|
||||
```
|
||||
|
||||
Edit /boot/loader/entries/.conf and add the following:
|
||||
|
||||
```bash
|
||||
title Arch Linux (Work)
|
||||
linux /vmlinuz-linux
|
||||
initrd /amd-ucode.img
|
||||
initrd /initramfs-linux.img
|
||||
options ...
|
||||
```
|
||||
|
||||
## Base Tools
|
||||
|
||||
```bash
|
||||
@@ -429,7 +462,31 @@ pacman -Syu bind
|
||||
sudo pacman -S cmake qt5-base
|
||||
```
|
||||
|
||||
follow install instructions
|
||||
### Install rpi-imager
|
||||
|
||||
```bash
|
||||
git clone https://github.com/raspberrypi/rpi-imager.git
|
||||
cd rpi-imager
|
||||
mkdir -p build
|
||||
cd build
|
||||
cmake ../src
|
||||
make
|
||||
sudo make install
|
||||
```
|
||||
|
||||
### Upgrade rpi-imager
|
||||
|
||||
```bash
|
||||
```bash
|
||||
cd rpi-imager
|
||||
git pull
|
||||
rm -r build
|
||||
mkdir -p build
|
||||
cd build
|
||||
cmake ../src
|
||||
make
|
||||
sudo make install
|
||||
```
|
||||
|
||||
## qFlipper
|
||||
|
||||
|
||||
Reference in New Issue
Block a user