Stup ZRAM on Fedora

Signed-off-by: Tommy <contact@tommytran.io>

Fedora-Workstation-38.sh

@@ -33,13 +33,16 @@ OPTIONS="-F 1"' | sudo tee /etc/sysconfig/chronyd
 
 sudo systemctl restart chronyd
 
-# Setup Firewalld
+# Setup Networking
-sudo firewall-cmd --permanent --remove-port=1025-65535/udp
+echo -e '[device]\nwifi.scan-rand-mac-address=yes\n\n[connection]\nwifi.cloned-mac-address=random\nethernet.cloned-mac-address=random' | sudo tee /etc/NetworkManager/conf.d/99-random-mac.conf
-sudo firewall-cmd --permanent --remove-port=1025-65535/tcp
+echo -e '[main]\nhostname-mode=none' | sudo tee /etc/NetworkManager/conf.d/01-transient-hostname.conf
-sudo firewall-cmd --permanent --remove-service=mdns
+sudo nmcli general reload conf
-sudo firewall-cmd --permanent --remove-service=ssh
+sudo hostnamectl hostname 'localhost'
-sudo firewall-cmd --permanent --remove-service=samba-client
+sudo hostnamectl --transient hostname ''
+sudo firewall-cmd --set-default-zone=block
+sudo firewall-cmd --permanent --add-service=dhcpv6-client
 sudo firewall-cmd --reload
+sudo firewall-cmd --lockdown-on
 
 # Harden SSH
 echo "GSSAPIAuthentication no" | sudo tee /etc/ssh/ssh_config.d/10-custom.conf
@@ -72,9 +75,12 @@ org/gnome/desktop/media-handling/automount-open' | sudo tee /etc/dconf/db/local.
 
 sudo dconf update
 
+# Setup ZRAM
+echo -e '[zram0]\nzram-size = min(ram, 8192)\ncompression-algorithm = zstd' | sudo tee /etc/systemd/zram-generator.conf
+
 # Speed up DNF
-echo 'fastestmirror=1' | sudo tee -a /etc/dnf/dnf.conf
+echo -e 'fastestmirror=1\nmax_parallel_downloads=10\ndeltarpm=False\ndefaultyes=True\ninstall_weak_deps=False\ncountme=False' | sudo tee -a /etc/dnf/dnf.conf
-echo 'countme=false' | sudo tee -a /etc/dnf/dnf.conf
+sudo sed -i 's/^metalink=.*/&\&protocol=https/g' /etc/yum.repos.d/*
 
 # Update packages and firmware
 sudo dnf upgrade -y
@@ -108,13 +114,10 @@ sudo dnf -y remove fedora-bookmarks fedora-chromium-config firefox mozilla-files
     lvm2 rng-tools thermald *perl* yajl
 
 # Disable openh264 repo
-sudo dnf config-manager --set-disabled fedora-cisco-openh264 -y
+sudo dnf config-manager --set-disabled fedora-cisco-openh264
 
 # Install packages that I use
-sudo dnf -y install gnome-console git-core flat-remix-theme gnome-shell-extension-appindicator gnome-shell-extension-blur-my-shell gnome-shell-extension-background-logo gnome-shell-extension-dash-to-dock gnome-shell-extension-no-overview tuned
+sudo dnf -y install gnome-console git-core gnome-shell-extension-appindicator gnome-shell-extension-blur-my-shell gnome-shell-extension-background-logo gnome-shell-extension-dash-to-dock gnome-shell-extension-no-overview
-
-# Setup tuned
-sudo tuned-adm profile latency-performance
 
 # Enable auto TRIM
 sudo systemctl enable fstrim.timer
@@ -131,23 +134,4 @@ sudo echo "UUID=${PARTITIONUUID} /btrfs_pool             btrfs   subvolid=5,ssd,
 sudo grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
 sudo dnf -y install timeshift
 
-# andomize MAC address
-sudo bash -c 'cat > /etc/NetworkManager/conf.d/00-macrandomize.conf' <<-'EOF'
-[device]
-wifi.scan-rand-mac-address=yes
-
-[connection]
-wifi.cloned-mac-address=random
-ethernet.cloned-mac-address=random
-EOF
-
-# Disable transient hostname
-sudo bash -c 'cat > /etc/NetworkManager/conf.d/00-macrandomize.conf' <<-'EOF'
-[main]
-hostname-mode=none
-EOF
-
-sudo systemctl restart NetworkManager
-sudo hostnamectl hostname "localhost"
-
 ## The script is done. You can also remove gnome-terminal since gnome-console will replace it.

RHEL-Server-9.sh

@@ -57,6 +57,10 @@ sudo curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/s
 sudo systemctl daemon-reload
 sudo systemctl restart irqbalance
 
+# Setup dnf
+echo -e 'fastestmirror=1\nmax_parallel_downloads=10\ndeltarpm=False\ndefaultyes=True\ninstall_weak_deps=False\ncountme=False' | sudo tee -a /etc/dnf/dnf.conf
+sudo sed -i 's/^metalink=.*/&\&protocol=https/g' /etc/yum.repos.d/*
+
 # Setup unbound
 
 sudo dnf install unbound -y