Workstation/pc_fedora.md

Fedora Gaming PC

RDP with autologin

https://askubuntu.com/questions/1396745/21-10-make-screen-share-password-permanent

Autologin

1. Enable autologin from the gnome user settings

Create an RDP keychain

1. Open "Passwords and Keys" app on the desktop. Password and Keys App
2. Create a new "Password Keyring" using the "+" icon. Create a new Password Keyring
3. Name the new keyring "Zero Security Keyring" or something that reminds you it will be un-encrypted. Leave the password blank so that the keychain is unencrypted. You will be warned that you are creating an unencrypted keychain.
4. Right-click on the new keyring and choose "set as default" Set the new keyring as the default
5. Click on the old "Default" keyring and delete "GNOME Remote Desktop RDP Credentials" Delete the old RDP password from the "Default keyring"
6. Open settings and set a new RDP password set a new RDP password
7. Check that the password was stored under the "Zero Security Keyring" Check that the RDP password was stored in the new keychain
8. Right click on "Default" keyring and choose "set as default" Remember to set "Default keyring" as the default

Set Hostname

hostnamectl set-hostname gamebox

Gnome Tweaks

1. Fonts -> Monospace Text -> Fira Code Regular
2. Keyboard & Mouse -> Acceleration Profile -> Flat
3. Keyboard & Mouse -> Mouse Click Emulation -> Fingers
4. Top Bar -> Battery Percentage -> On
5. Top Bar -> Clock -> Weekday -> On
6. Top Bar -> Clock -> Seconds -> On

dconf

dconf write /org/gnome/desktop/interface/enable-hot-corners false

AppImage Launcher

Download RPM from https://github.com/TheAssassin/AppImageLauncher/releases/tag/v2.2.0

Flatpack

flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
flatpak update

Snap

sudo dnf install -y snapd
sudo ln -s /var/lib/snapd/snap /snap # for classic snap support
ln -s /var/lib/snapd/desktop/applications ~/.local/share/applications/snap # make apps show up in gnome
sudo reboot now

AppImage Launcher

Download RPM from https://github.com/TheAssassin/AppImageLauncher/releases/tag/v2.2.0

Minecraft

1. You can find extra java versions at /etc/alternatives
2. You need to dnf install xrandr to launch any modpacks
3. You can create a desktop icon by putting this at ~/.local/share/applications/*.desktop:

[Desktop Entry]
Encoding=UTF-8
Name=Technic Launcher
Exec=/usr/bin/java -jar /home/ducoterra/Applications/TechnicLauncher.jar
Icon=/home/ducoterra/.icons/minecraft-launcher.png
Type=Application
Categories=Games;

Automatic Disk Decryption with TPM2

https://gist.github.com/jdoss/777e8b52c8d88eb87467935769c98a95

Create a function in ~./bashrc.d/cryptenroll.sh:

function tpm-luks-enroll {
	read -s -p "Password: " PASSWORD
	export PASSWORD=$PASSWORD
	sudo -E systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+2+4+7 /dev/nvme2n1p3
	sudo -E systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+2+4+7 /dev/nvme1n1p1
	sudo -E systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+2+4+7 /dev/nvme0n1p1
	unset password
}
function tpm-luks-reenroll {
	read -s -p "Password: " PASSWORD
	export PASSWORD=$PASSWORD
	sudo -E systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+2+4+7 --wipe-slot=tpm2 /dev/nvme2n1p3
	sudo -E systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+2+4+7 --wipe-slot=tpm2 /dev/nvme1n1p1
	sudo -E systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+2+4+7 --wipe-slot=tpm2 /dev/nvme0n1p1
	unset password
}

Add your luks keys to the tpm module and set up boot parameters:

# Enroll for the first time
tpm-luks-enroll

# Add tpm2 configuration option to /etc/crypttab FOR EVERY DISK
luks-$UUID UUID=disk-$UUID none tpm2-device=auto,discard

# Add rd.luks.options=tpm2-device=auto to grub
sudo grubby --args="rd.luks.options=tpm2-device=auto" --update-kernel=ALL

sudo dracut -f

When you update the kernel:

tpm-luks-reenroll

Gnome Software Updates (packagekitd and software)

To prevent Gnome Shell from starting Software open Settings->Search and disable Software from there.

Disable auto-updates

sudo systemctl disable packagekit
sudo systemctl stop packagekit
sudo systemctl mask packagekit

dconf write /org/gnome/software/allow-updates false
dconf write /org/gnome/software/download-updates false

Steam

sudo dnf install https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm
sudo dnf install steam

# If libbz2 is missing (or some other error)
cd ~/.local/share/Steam/
./steam.sh --reset