Tomster/Linux-Setup-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-12-28 01:31:34 -05:00
Code
My setup script for my Linux systems
701 Commits 1 Branch 0 Tags 2.9 MiB
Shell 100%
ace87dc0af
Go to file
Tommy ace87dc0af
Add missing -y for hardened_malloc removal on a LEMP stack 
Signed-off-by: Tommy <contact@tommytran.io>
2024-07-26 07:48:32 -07:00
.github Daily update for GitHub actions 2024-06-15 15:03:08 -07:00
etc Use mainline NGINX 2024-07-26 06:54:07 -07:00
sample-scripts Add missing -y for hardened_malloc removal on a LEMP stack 2024-07-26 07:48:32 -07:00
Fedora-Server-40.sh Update modprobe url and bug fixes 2024-07-26 04:59:01 -07:00
Fedora-Workstation-40.sh Update modprobe url and bug fixes 2024-07-26 04:59:01 -07:00
LICENSE Update LICENSE 2022-01-17 15:28:39 -05:00
Proxmox-8.sh Update modprobe url and bug fixes 2024-07-26 04:59:01 -07:00
README.md Fix typos in README (#13) 2024-07-02 02:18:21 -07:00
RHEL-9.sh Update modprobe url and bug fixes 2024-07-26 04:59:01 -07:00
Ubuntu-24.04-Desktop.sh Update modprobe url and bug fixes 2024-07-26 04:59:01 -07:00
Ubuntu-24.04-Server.sh Update modprobe url and bug fixes 2024-07-26 04:59:01 -07:00

README.md

Linux Setup Scripts

ShellCheck

My setup scripts for my workstations. You should edit the scripts to your liking before running them. Please run the scripts as your actual user and not root. Provide sudo password when it asks you to. Flatpak packages and themes/icons are only installed for your user and not system wide.

The printing stack (cups) is removed as I do not use it.

Visit my Matrix group: https://invite.arcticfoxes.net/#/#tommy:arcticfoxes.net

Notes on DNS handling

For desktop installations, the assumption here is that you will use a VPN of some sort for your privacy. No custom DNS server will be configured, as websites can detect that you are using a different DNS server from your VPN provider's server.

For server installations (except Proxmox), Unbound will be configured to handle local DNSSEC validation. The difference in the scripts on how this is set up are because of the following reasons:

  • Each distribution needs its own Unbound configuration due to version differences and how each distro packages it.
  • If both Unbound and systemd-resolved are preset on the system, whichever one gets used depends entirely on whether systemd-resolved is running and controlling /etc/resolv.conf or not. My scripts set Unbound to enabled and systemd-resolved whenever possible.
  • If systemd-resolved is not present on the system, NetworkManager will take control of /etc/resolv.conf. RHEL does not ship with systemd-resolved, so manual configuration to set NetworkManager to use the local DNS forwarder is needed.

Notes on io_uring

io_uring is disabled. On Proxmox, use aio=native for drives. You will need to manually edit the config for cdrom. Alternatively, if you do not want to deal with this, comment out the io_uring line in /etc/sysctl.d/99-server.conf

Arch Linux

Check out this repository: https://github.com/tommytran732/Arch-Setup-Script

Qubes OS

Check out this repository: https://github.com/tommytran732/QubesOS-Scripts

Fedora CoreOS

Check out this repository: https://github.com/tommytran732/Fedora-CoreOS-Ignition