From 978707af8abecaea16d5e7186464511bf6e5838a Mon Sep 17 00:00:00 2001 From: Tommy Date: Sat, 1 Jun 2024 01:05:33 -0700 Subject: [PATCH] Initial postinstall script Signed-off-by: Tommy --- desktop_postinstall.sh | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 desktop_postinstall.sh diff --git a/desktop_postinstall.sh b/desktop_postinstall.sh new file mode 100644 index 0000000..27e1e06 --- /dev/null +++ b/desktop_postinstall.sh @@ -0,0 +1,27 @@ +#!/bin/bash + +# Copyright (C) 2021-2024 Thien Tran +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may not +# use this file except in compliance with the License. You may obtain a copy of +# the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations under +# the License. + +# Make sure secureboot is in setup mode before running this + +# Secure boot enrollment +sudo sbctl enroll-keys +sudo sbctl sign /boot/efi/EFI/GRUB/grubx64.efi + +# Firewalld setup +sudo firewall-cmd --set-default-zone=block +sudo firewall-cmd --permanent --add-service=dhcpv6-client +sudo firewall-cmd --reload +sudo firewall-cmd --lockdown-on \ No newline at end of file