209 Commits

Author	SHA1	Message	Date
Tommy	e812fa7185	Typo fix ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-02 00:14:37 -07:00
Tommy	0128fd93b6	Support networkd for server installs ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-02 00:02:15 -07:00
Tommy	cca5ac2d5d	Remove grub modules (for now) ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 19:17:57 -07:00
Tommy	63516f369d	More minimal initramfs ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 18:56:40 -07:00
Tommy	584603cf27	Allow ping on server ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 16:14:36 -07:00
Tommy	90dff901cc	Easier to read regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 16:02:15 -07:00
Tommy	edb0e04404	Only configure org.gnome.Shell@wayland on desktop ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 15:50:23 -07:00
Tommy	a0af762521	Remove unnecessary if check ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 15:43:45 -07:00
Tommy	b44c8046e9	Allow SSH password auth by default ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 15:41:17 -07:00
Tommy	f7b46e88b9	Remove unnecessary sudo calls ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 15:39:36 -07:00
Tommy	8d46f9561b	SSH server hardening ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 15:38:01 -07:00
Tommy	65e6dcb581	Remove unnecessary command ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 15:17:32 -07:00
Tommy	3cfdbc422c	SSH client hardening ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 15:04:41 -07:00
Tommy	78e653261f	Split GNOME settings out for desktop only ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 14:46:06 -07:00
Tommy	81bf0790f7	Remove incorrect mount options ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 04:15:36 -07:00
Tommy	27d7935de2	Add missing mountpoints ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 12:02:03 -07:00
Tommy	98d4106ba7	Disable XWayland ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 01:57:24 -07:00
Tommy	5957f7673d	Add dconf config ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 01:54:06 -07:00
Tommy	9f6c9d7a79	Add flatpak handling ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 01:09:40 -07:00
Tommy	0fa2e8c88e	Add note on mkinitcpio first run ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-01 00:39:15 -07:00
Tommy	9499824cd5	Upgrade to LUKS2 with PBKDF2 ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 22:53:33 -07:00
Tommy	5bdf823804	Re-add karg for apparmor ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 22:29:38 -07:00
Tommy	45e516c841	Add missing escape ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 22:25:56 -07:00
Tommy	fa114696fa	Only enable gdm service on desktop ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 22:04:33 -07:00
Tommy	adcb55a6e0	hardcode hostname to localhost for desktop installs ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 21:59:27 -07:00
Tommy	f68b02c7e2	Split common packages out ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 21:53:28 -07:00
Tommy	8a886784e7	Rearrange package list ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 21:50:30 -07:00
Tommy	4fa525d3aa	Hardcode linux-hardened and linux-lts ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 21:49:21 -07:00
Tommy	b298669bfe	Add comment on disabling subvol pinning ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 20:13:48 -07:00
Tommy	5d8c96396e	Enable gdm ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 20:07:06 -07:00
Tommy	85399bc680	Install sbctl by default ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 20:06:43 -07:00
Tommy	0d1cb58727	Remove unnecessary output hiding ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 16:31:00 -07:00
Tommy	7de2799cfb	Rearrange command ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 16:13:21 -07:00
Tommy	16331d8f2f	Use rd.luks.key ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 16:12:27 -07:00
Tommy	87595278e0	Fix grub-btrfs ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 16:06:24 -07:00
Tommy	8412ddcb5b	Add efibootmgr ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 15:07:59 -07:00
Tommy	19942b80fd	Add KVM guest agents ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 14:35:50 -07:00
Tommy	78220c311d	Update kernel hardening ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:59:44 -07:00
Tommy	b8e23af72d	Add regex escape ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:35:38 -07:00
Tommy	577ebc5fb4	Better regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:14:13 -07:00
Tommy	d9a451b28f	Fix ShellCheck issues ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 10:40:17 -07:00
Tommy	8cf9d0370b	Typo fix ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 10:37:59 -07:00
Tommy	eeeb6f0f03	https for fwupd ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 05:14:52 -07:00
Tommy	8f9bda05c0	Delete legacy scripts ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 05:13:20 -07:00
Tommy	541d48f9ea	Use rd.luks.name ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 04:39:10 -07:00
Tommy	dcbae1fd2d	Ree-add snapper configuration ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 04:05:10 -07:00
Tommy	c74b56a456	Remove unnecessary prompt ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 03:50:33 -07:00
Tommy	eefffc2d8b	Use systemd hook ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 03:39:38 -07:00
Tommy	3e74eab90d	Lots of small fixes ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 03:31:45 -07:00
Tommy	8dac3b4346	Split out snap-pac ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 01:52:10 -07:00