mirror of
https://github.com/tommytran732/Arch-Setup-Script
synced 2024-11-22 01:21:34 -05:00
Update README.md
This commit is contained in:
parent
d09fe558bf
commit
56ecf1c777
20
README.md
20
README.md
@ -12,6 +12,15 @@ This fork comes with various security improvements and fully working rollbacks w
|
|||||||
6. `cd Arch-Setup-Script`
|
6. `cd Arch-Setup-Script`
|
||||||
7. `chmod u+x ./install.sh && ./install.sh`
|
7. `chmod u+x ./install.sh && ./install.sh`
|
||||||
|
|
||||||
|
### Changes to the original project
|
||||||
|
1. Encrypted /boot with LUKS1
|
||||||
|
2. SUSE - like partition layout and fully working snapper snapshots & rollback
|
||||||
|
3. Minimally setup GNOME 40 with pipewire
|
||||||
|
4. AppArmor and Firewalld enabled by default
|
||||||
|
5. Defaulting umask to 077
|
||||||
|
6. Randomize Mac Address and disable Connectivity Check for privacy
|
||||||
|
7. Added some kernel/grub settings from https://github.com/Whonix/security-misc/tree/master/etc/default
|
||||||
|
|
||||||
### Snapper behavior
|
### Snapper behavior
|
||||||
The partition layout I use rallows us to replicate the behavior found in openSUSE 🦎
|
The partition layout I use rallows us to replicate the behavior found in openSUSE 🦎
|
||||||
1. Snapper rollback <number> works! You will no longer need to manually rollback from a live USB like you would with the @ and @home layout suggested in the Arch Wiki.
|
1. Snapper rollback <number> works! You will no longer need to manually rollback from a live USB like you would with the @ and @home layout suggested in the Arch Wiki.
|
||||||
@ -20,17 +29,6 @@ The partition layout I use rallows us to replicate the behavior found in openSUS
|
|||||||
4. Directories such as /boot, /boot/efi, /var/log, /var/crash, /var/tmp, /var/spool, /var/lib/libvirt/images are excluded from the snapshots as they either should be persistent or are just temporary files. /cryptkey is excluded as we do not want the encryption key to be included in the snapshots, which could be sent to another device as a backup.
|
4. Directories such as /boot, /boot/efi, /var/log, /var/crash, /var/tmp, /var/spool, /var/lib/libvirt/images are excluded from the snapshots as they either should be persistent or are just temporary files. /cryptkey is excluded as we do not want the encryption key to be included in the snapshots, which could be sent to another device as a backup.
|
||||||
5. GRUB will boot into the default BTRFS snapshot set by snapper. Like on SUSE, your running system will always be a read-write snapshot in @/.snapshots/X/snapshot.
|
5. GRUB will boot into the default BTRFS snapshot set by snapper. Like on SUSE, your running system will always be a read-write snapshot in @/.snapshots/X/snapshot.
|
||||||
|
|
||||||
### Changes to the original project
|
|
||||||
1. Encrypted /boot
|
|
||||||
2. SUSE - like partition layout
|
|
||||||
3. Snapper snapshots & rollback
|
|
||||||
4. Default umask to 077
|
|
||||||
5. Firewalld is enabled by default
|
|
||||||
6. Minimally setup GNOME 40 with pipewire
|
|
||||||
7. Randomize Mac Address and disable Connectivity Check for privacy
|
|
||||||
8. Added some kernel/grub settings from https://github.com/Whonix/security-misc/tree/master/etc/default
|
|
||||||
|
|
||||||
|
|
||||||
### Partitions layout
|
### Partitions layout
|
||||||
|
|
||||||
| Partition/Subvolume | Label | Mountpoint | Notes |
|
| Partition/Subvolume | Label | Mountpoint | Notes |
|
||||||
|
Loading…
Reference in New Issue
Block a user