Tomster/Arch-Setup-Script
1
0
Fork 0
mirror of https://github.com/tommytran732/Arch-Setup-Script synced 2024-11-22 01:21:34 -05:00
Code

Update install.sh

Browse Source
This commit is contained in:
TommyTran732 2021-04-23 23:43:25 +02:00 committed by tommytran732
parent 61d46382cd
commit d3e5b01a4c
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2
1 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
install.sh
View File

@ -121,7 +121,9 @@ cat << EOF >> /mnt/@/.snapshots/1/info.xml
<snapshot> <snapshot>
<type>single</type> <type>single</type>
<num>1</num> <num>1</num>
<date>1999-03-31 0:00:00</date>
<description>First Root Filesystem</description> <description>First Root Filesystem</description>
<cleanup>number</cleanup>
</snapshot> </snapshot>
EOF EOF
@ -153,7 +155,7 @@ kernel_selector
# Pacstrap (setting up a base sytem onto the new root). # Pacstrap (setting up a base sytem onto the new root).
echo "Installing the base system (it may take a while)." echo "Installing the base system (it may take a while)."
pacstrap /mnt base base-devel ${kernel} ${microcode} linux-firmware grub grub-btrfs snapper efibootmgr sudo networkmanager apparmor pipewire nano gnome-shell gdm gnome-control-center gnome-terminal gnome-software gnome-tweaks nautilus flatpak xdg-user-dirs firewalld pacstrap /mnt base base-devel ${kernel} ${kernel}-headers ${microcode} linux-firmware grub grub-btrfs snapper efibootmgr sudo networkmanager apparmor pipewire nano gnome-shell gdm gnome-control-center gnome-terminal gnome-software gnome-tweaks nautilus flatpak xdg-user-dirs firewalld
# Generating /etc/fstab. # Generating /etc/fstab.
echo "Generating a new fstab." echo "Generating a new fstab."
@ -206,11 +208,11 @@ sed -i 's#FILES=()#FILES=(/.root.key)#g' /mnt/etc/mkinitcpio.conf
echo "kernel.kptr_restrict = 2" > /mnt/etc/sysctl.d/51-kptr-restrict.conf echo "kernel.kptr_restrict = 2" > /mnt/etc/sysctl.d/51-kptr-restrict.conf
echo "kernel.kexec_load_disabled = 1" > /mnt/etc/sysctl.d/51-kexec-restrict.conf echo "kernel.kexec_load_disabled = 1" > /mnt/etc/sysctl.d/51-kexec-restrict.conf
cat << EOF >> /mnt/etc/sysctl.d/10-security.conf cat << EOF >> /mnt/etc/sysctl.d/10-security.conf
fs.protected_hardlinks = 1 fs.protected_hardlinks = 1
fs.protected_symlinks = 1 fs.protected_symlinks = 1
net.core.bpf_jit_harden = 2 net.core.bpf_jit_harden = 2
kernel.yama.ptrace_scope = 3 kernel.yama.ptrace_scope = 3
kernel.unprivileged_userns_clone = 1 kernel.unprivileged_userns_clone = 1
EOF EOF
# Configuring the system. # Configuring the system.