mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-11-24 18:21:34 -05:00
282 lines
13 KiB
Bash
282 lines
13 KiB
Bash
#!/bin/bash
|
|
|
|
#Please note that this is how I PERSONALLY setup my computer - I do some stuff such as not using anything to download GNOME extensions from extensions.gnome.org and installing the extensions as a package instead
|
|
#Customize it to your liking
|
|
#Run this script as your user, NOT root
|
|
|
|
#Written by yours truly, Tomster
|
|
|
|
#Variables
|
|
USER=$(whoami)
|
|
PARTITIONID=$(sudo cat /etc/crypttab | awk '{print $1}')
|
|
PARTITIONUUID=$(sudo blkid -s UUID -o value /dev/mapper/${PARTITIONID})
|
|
|
|
output(){
|
|
echo -e '\e[36m'$1'\e[0m';
|
|
}
|
|
|
|
#Moving to the home directory
|
|
#Note that I always use /home/${USER} because gnome-terminal is wacky and sometimes doesn't load the environment variables in correctly (Right click somewhere in nautilus, click on open in terminal, then hit create new tab and you will see.)
|
|
cd /home/${USER} || exit
|
|
|
|
#Setting umask to 077
|
|
umask 077
|
|
sudo sed -i 's/umask 002/umask 077/g' /etc/bashrc
|
|
sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc
|
|
|
|
#Make home directory private
|
|
chmod 700 /home/*
|
|
|
|
#Disable ptrace
|
|
sudo cp /usr/lib/sysctl.d/10-default-yama-scope.conf /etc/sysctl.d/
|
|
sudo sed -i 's/kernel.yama.ptrace_scope = 0/kernel.yama.ptrace_scope = 3/g' /etc/sysctl.d/10-default-yama-scope.conf
|
|
sudo sysctl --load=/etc/sysctl.d/10-default-yama-scope.conf
|
|
|
|
#Blacklist Firewire SBP2
|
|
echo "blacklist firewire-sbp2" | sudo tee /etc/modprobe.d/blacklist.conf
|
|
|
|
#Setup Firewalld
|
|
sudo firewall-cmd --permanent --remove-port=1025-65535/udp
|
|
sudo firewall-cmd --permanent --remove-port=1025-65535/tcp
|
|
sudo firewall-cmd --permanent --remove-service=mdns
|
|
sudo firewall-cmd --permanent --remove-service=ssh
|
|
sudo firewall-cmd --permanent --remove-service=samba-client
|
|
sudo firewall-cmd --reload
|
|
|
|
#Speed up DNF
|
|
sudo echo 'fastestmirror=1' | sudo tee -a /etc/dnf/dnf.conf
|
|
sudo echo 'max_parallel_downloads=10' | sudo tee -a /etc/dnf/dnf.conf
|
|
sudo echo 'deltarpm=true' | sudo tee -a /etc/dnf/dnf.conf
|
|
|
|
#Update packages and firmware
|
|
sudo dnf upgrade -y
|
|
sudo fwupdmgr get-devices
|
|
sudo fwupdmgr refresh --force
|
|
sudo fwupdmgr get-updates -y
|
|
sudo fwupdmgr update -y
|
|
|
|
#Remove unneeded packages
|
|
sudo dnf -y remove abrt f33-backgrounds-gnome nm-connection-editor mozilla-filesystem chrome-gnome-shell quota* nmap-ncat virtualbox-guest-additions spice-vdagent nfs-utils teamd tcpdump sgpio ImageMagick* adcli libreoffice* lvm2 qemu-guest-agent hyperv* gnome-classic* baobab *kkc* *zhuyin* *pinyin* *evince* *yelp* ModemManager fedora-bookmarks fedora-chromium-config fedora-workstation-backgrounds gnome-tour gnome-themes-extra gnome-shell-extension-background-logo gnome-screenshot gnome-remote-desktop gnome-font-viewer gnome-calculator gnome-backgrounds NetworkManager-pptp-gnome NetworkManager-ssh-gnome NetworkManager-openconnect-gnome NetworkManager-openvpn-gnome NetworkManager-vpnc-gnome podman* *libvirt* open-vm* *speech* sos totem gnome-characters firefox eog openssh-server dmidecode xorg-x11-drv-vmware xorg-x11-drv-amdgpu yajl words ibus-hangui vino openh264 twolame-libs realmd rsync net-snmp-libs net-tools traceroute mtr geolite2* gnome-boxes gnome-disk-utility gedit gnome-calendar cheese gnome-contacts rythmbox gnome-screenshot gnome-maps gnome-weather gnome-logs ibus-typing-booster *m17n* gnome-clocks gnome-color-manager mlocate cyrus-sasl-plain cyrus-sasl-gssapi sssd* gnome-user* dos2unix kpartx rng-tools ppp* ntfs* xfs* tracker* thermald *perl* gnome-shell-extension-apps-menu gnome-shell-extension-horizontal-workspaces gnome-shell-extension-launch-new-instance gnome-shell-extension-places-menu gnome-shell-extension-window-list file-roller* sane* simple-scan *hangul* NetworkManager-config-connectivity-fedora
|
|
|
|
#Disable openh264 repo
|
|
sudo dnf config-manager --set-disabled fedora-cisco-openh264 -y
|
|
|
|
#Install packages that I use
|
|
sudo dnf -y install neofetch git-core flat-remix-gtk3-theme gnome-shell-extension-appindicator gnome-shell-extension-system-monitor-applet gnome-shell-extension-dash-to-dock gnome-shell-extension-freon gnome-shell-extension-openweather gnome-shell-extension-user-theme gnome-tweak-tool f29-backgrounds-gnome gnome-system-monitor git-core setroubleshoot gnome-software PackageKit PackageKit-command-not-found fedora-workstation-repositories openssl android-tools bleachbit tuned-gtk
|
|
|
|
#Install Yubico StuffNetworkManager-config-connectivity-fedora
|
|
sudo dnf -y install yubikey-manager pam-u2f pamu2fcfg
|
|
mkdir -p /home/${USER}/.config/Yubico
|
|
|
|
#Install IVPN
|
|
sudo dnf config-manager --add-repo https://repo.ivpn.net/stable/fedora/generic/ivpn.repo -y
|
|
sudo dnf -y install ivpn-ui
|
|
|
|
#Install OpenSnitch
|
|
sudo dnf install -y https://github.com/evilsocket/opensnitch/releases/download/v1.3.6/opensnitch-1.3.6-1.x86_64.rpm
|
|
sudo dnf install -y https://github.com/evilsocket/opensnitch/releases/download/v1.3.6/opensnitch-ui-1.3.6-1.f29.noarch.rpm
|
|
sudo chown -R $USER:$USER /home/${USER}/.config/autostart
|
|
|
|
#Setting up Flatpak
|
|
flatpak remote-add --user flathub https://flathub.org/repo/flathub.flatpakrepo
|
|
flatpak remote-add --user flathub-beta https://flathub.org/beta-repo/flathub-beta.flatpakrepo
|
|
flatpak remote-add --user gnome-nightly https://nightly.gnome.org/gnome-nightly.flatpakrepo
|
|
flatpak remove --unused
|
|
|
|
#Install default applications
|
|
flatpak install flathub com.github.tchx84.Flatseal org.mozilla.firefox org.videolan.VLC org.gnome.eog org.gnome.Calendar org.gnome.Contacts org.gnome.FileRoller com.yubico.yubioath com.vscodium.codium -y
|
|
|
|
#Enable auto TRIM
|
|
sudo systemctl enable fstrim.timer
|
|
|
|
#Download and set GNOME shell theme
|
|
git clone https://github.com/i-mint/midnight.git
|
|
mkdir /home/${USER}/.themes
|
|
ln -s /home/${USER}/midnight/Midnight-* /home/${USER}/.themes/
|
|
gsettings set org.gnome.shell.extensions.user-theme name "Midnight-Blue"
|
|
|
|
#Download and set icon theme
|
|
git clone https://github.com/NicoHood/arc-icon-theme.git
|
|
mkdir /home/${USER}/.icons
|
|
ln -s /home/${USER}/arc-icon-theme/Arc /home/${USER}/.icons/
|
|
git clone https://github.com/zayronxio/Mojave-CT.git
|
|
ln -s /home/${USER}/Mojave-CT /home/${USER}/.icons/
|
|
sed -i 's/Inherits=Moka,Adwaita,gnome,hicolor/Inherits=Mojave-CT,Moka,Adwaita,gnome,hicolor/g' /home/${USER}/arc-icon-theme/Arc/index.theme
|
|
find /home/${USER}/arc-icon-theme -name '*[Tt]rash*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Nn]autilus*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Gg]nome.[Ss]ettings*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Gg]nome.[Tt]weak*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Gg]nome.[Ss]oftware*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Gg]nome.[Bb]oxes*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Ss]team*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Tt]hunderbird*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Mm]inecraft*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Ee]piphany*' -exec rm {} \;
|
|
find /home/${USER}/Mojave-CT -name '*[Rr]iot*' -exec rm {} \;
|
|
gsettings set org.gnome.desktop.interface icon-theme "Arc"
|
|
|
|
#Set GTK theme
|
|
gsettings set org.gnome.desktop.interface gtk-theme "Flat-Remix-GTK-Blue-Dark"
|
|
flatpak upgrade -y
|
|
|
|
#Set Fedora 29 Animated Wallpaper
|
|
gsettings set org.gnome.desktop.background picture-uri 'file:///usr/share/backgrounds/f29/default/f29.xml'
|
|
|
|
#Set Black GDM background
|
|
mkdir -p /home/${USER}/Pictures/Wallpapers/
|
|
wget https://wallpaperaccess.com/full/512679.jpg -O /home/${USER}/Pictures/Wallpapers/Black.png
|
|
sudo dnf -y copr enable zirix/gdm-wallpaper
|
|
sudo dnf -y install gdm-wallpaper
|
|
sudo set-gdm-wallpaper /home/${USER}/Pictures/Wallpapers/Black.png
|
|
(sudo crontab -l ; echo "@reboot /usr/bin/set-gdm-wallpaper /home/${USER}/Pictures/Wallpapers/Black.png >> /dev/null 2>&1")| sudo crontab -
|
|
|
|
#Enable Titlebar buttons
|
|
gsettings set org.gnome.desktop.wm.preferences button-layout 'appmenu:minimize,maximize,close'
|
|
|
|
#Quick Fixes for Flatpak Steam if I install it on the system
|
|
ln -s /home/${USER}/.var/app/com.valvesoftware.Steam/.local/share/Steam /home/${USER}/.local/share/Steam
|
|
|
|
sudo bash -c 'cat > /etc/sysctl.d/99-steam.conf' <<-'EOF'
|
|
dev.i915.perf_stream_paranoid=0
|
|
EOF
|
|
|
|
sudo sysctl --load=/etc/sysctl.d/99-steam.conf
|
|
|
|
sudo bash -c 'cat > /etc/pulse/daemon.conf' <<-'EOF'
|
|
# $ sudo nano /etc/pulse/daemon.conf
|
|
|
|
# Start as daemon
|
|
daemonize = yes
|
|
allow-module-loading = yes
|
|
|
|
# Realtime optimization
|
|
high-priority = yes
|
|
realtime-scheduling = yes
|
|
realtime-priority = 9
|
|
|
|
# Scales the device-volume with the volume of the "loudest" application
|
|
flat-volumes = no
|
|
|
|
# Script file management
|
|
load-default-script-file = yes
|
|
default-script-file = /etc/pulse/default.pa
|
|
|
|
# Sample rate
|
|
resample-method = speex-float-9
|
|
default-sample-format = s24-32le
|
|
default-sample-rate = 192000
|
|
alternate-sample-rate = 176000
|
|
exit-idle-time = -1
|
|
|
|
# Optimized fragements for steam
|
|
default-fragments = 5
|
|
default-fragment-size-msec = 2
|
|
|
|
# Volume
|
|
deferred-volume-safety-margin-usec = 1
|
|
EOF
|
|
|
|
#Quick Fix for Freon https://github.com/UshakovVasilii/gnome-shell-extension-freon/issues/163
|
|
sudo sed -i 's#`${nvme}#`/usr/bin/sudo ${nvme}#g' /usr/share/gnome-shell/extensions/freon@UshakovVasilii_Github.yahoo.com/nvmecliUtil.js
|
|
echo ''"${USER}"' ALL = NOPASSWD: /usr/sbin/nvme list -o json, /usr/sbin/nvme smart-log /dev/nvme* -o json' | sudo EDITOR='tee -a' visudo >/dev/null 2>&1
|
|
|
|
#Enable GNOME shell extensions
|
|
gsettings set org.gnome.shell disable-user-extensions false
|
|
|
|
#Enable tap to click
|
|
gsettings set org.gnome.desktop.peripherals.touchpad tap-to-click true
|
|
|
|
#Enable touchpad while typing
|
|
gsettings set org.gnome.desktop.peripherals.touchpad disable-while-typing false
|
|
|
|
#Install and sign NVIDIA proprietary drivers
|
|
sudo dnf copr enable egeretto/kmodtool-secureboot -y
|
|
sudo dnf copr enable egeretto/akmods-secureboot -y
|
|
sudo dnf install akmods kmodtool -y
|
|
sudo /usr/sbin/kmodgenca -a
|
|
sudo dnf config-manager --set-enabled rpmfusion-nonfree-nvidia-driver -y
|
|
sudo dnf install akmod-nvidia xorg-x11-drv-nvidia-cuda -y
|
|
|
|
#Reenable Wayland... They are working to support it, and if you aren't gaming you shouldn't stay on x11 anyways
|
|
sudo sed -i 's^DRIVER=="nvidia", RUN+="/usr/libexec/gdm-disable-wayland"^#DRIVER=="nvidia", RUN+="/usr/libexec/gdm-disable-wayland"^g' /usr/lib/udev/rules.d/61-gdm.rules
|
|
|
|
#UPDATE: This is currently borked with Kernel 5.11, therefore I am commenting it out.
|
|
|
|
#Install Snap, Anbox, Ashmem, Binder, and autosign DKMS modules
|
|
#Keep in mind that the use of snap is highly discouraged due to its reliance on AppArmor for sandboxing, which is not present on Fedora.
|
|
#Please only use Snap for Anbox and nothing else. FlatHub and RPMFusion exist.
|
|
#We clone a third party repo with patches for kernel >=5.7 for now. You can track the issue at https://github.com/anbox/anbox-modules/pull/76
|
|
|
|
#sudo dnf -y install snapd dkms
|
|
#sudo ln -s /var/lib/snapd/snap /snap
|
|
#sudo service snapd start
|
|
|
|
#wget https://raw.githubusercontent.com/tommytran732/Fedora-Workstation-Setup/main/selinux/my-gatekeeperd.te
|
|
#wget https://raw.githubusercontent.com/tommytran732/Fedora-Workstation-Setup/main/selinux/my-ndroidsettings.te
|
|
#wget https://raw.githubusercontent.com/tommytran732/Fedora-Workstation-Setup/main/selinux/my-servicemanager.te
|
|
|
|
#checkmodule -M -m -o my-gatekeeperd.mod my-gatekeeperd.te
|
|
#checkmodule -M -m -o my-ndroidsettings.mod my-ndroidsettings.te
|
|
#checkmodule -M -m -o my-servicemanager.mod my-servicemanager.te
|
|
|
|
#semodule_package -o my-gatekeeperd.pp -m my-gatekeeperd.mod
|
|
#semodule_package -o my-ndroidsettings.pp -m my-ndroidsettings.mod
|
|
#semodule_package -o my-servicemanager.pp -m my-servicemanager.mod
|
|
|
|
#sudo semodule -i my-gatekeeperd.pp
|
|
#sudo semodule -i my-ndroidsettings.pp
|
|
#sudo semodule -i my-servicemanager.pp
|
|
|
|
#sudo snap install --devmode --beta anbox
|
|
#git clone https://github.com/choff/anbox-modules.git
|
|
#cd /home/${USER}/anbox-modules
|
|
#sudo cp anbox.conf /etc/modules-load.d/
|
|
#sudo cp 99-anbox.rules /lib/udev/rules.d/
|
|
#sudo cp -rT ashmem /usr/src/anbox-ashmem-1
|
|
#sudo cp -rT binder /usr/src/anbox-binder-1
|
|
#cd /home/${USER}
|
|
#sudo openssl req -new -x509 \
|
|
# -newkey rsa:4096 -keyout /root/mok.priv \
|
|
# -outform DER -out /root/mok.der \
|
|
# -nodes -days 36500 -subj "/CN=DKMS Automatic Module Signer"
|
|
|
|
#sudo sed -i 's^# sign_tool="/etc/dkms/sign_helper.sh"^sign_tool="/etc/dkms/sign_helper.sh"^g' /etc/dkms/framework.conf
|
|
#sudo dkms add anbox-ashmem/1
|
|
#sudo dkms add anbox-binder/1
|
|
#sudo firewall-cmd --add-masquerade --permanent
|
|
#sudo firewall-cmd --reload
|
|
|
|
#Setup BTRFS layout and Timeshift
|
|
sudo mkdir /btrfs_pool
|
|
sudo mount -o subvolid=5 /dev/mapper/${PARTITIONID} /btrfs_pool
|
|
sudo mv /btrfs_pool/root /btrfs_pool/@
|
|
sudo mv /btrfs_pool/home /btrfs_pool/@home
|
|
sudo btrfs subvolume list /btrfs_pool
|
|
sudo sed -i 's/subvol=root/subvol=@,ssd,noatime,space_cache,commit=120,compress=zstd:1,discard=async/' /etc/fstab
|
|
sudo sed -i 's/subvol=home/subvol=@home,ssd,noatime,space_cache,commit=120,compress=zstd:1,discard=async/' /etc/fstab
|
|
sudo echo "UUID=${PARTITIONUUID} /btrfs_pool btrfs subvolid=5,ssd,noatime,space_cache,commit=120,compress=zstd:1,discard=async,x-systemd.device-timeout=0 0 0" | sudo tee -a /etc/fstab
|
|
sudo grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg
|
|
sudo dnf -y install timeshift
|
|
|
|
#Randomize MAC address
|
|
sudo bash -c 'cat > /etc/NetworkManager/conf.d/00-macrandomize.conf' <<-'EOF'
|
|
[device]
|
|
wifi.scan-rand-mac-address=yes
|
|
|
|
[connection]
|
|
wifi.cloned-mac-address=random
|
|
ethernet.cloned-mac-address=random
|
|
connection.stable-id=${CONNECTION}/${BOOT}
|
|
EOF
|
|
|
|
sudo systemctl restart NetworkManager
|
|
|
|
#Last step, import key to MOK
|
|
output "Just to avoid confusion, we are importing Akmods's key"
|
|
sudo mokutil --import /etc/pki/akmods/certs/public_key.der
|
|
#output "Now we import DKMS's key"
|
|
#sudo mokutil --import /root/mok.der
|
|
output "All done! You have to reboot now."
|
|
|
|
|