essentialsoftware.md: apparently /etc/fstab doesn't affect root on Fedora Atomic and thus rootflags in kargs is used instead

I read somewhere and updated my Steam Deck and this page with it, while I am supposed to be recovering from common cold or whatever it is in bed, not doing possibly evil things on my systems and Steam Deck is meant for gayming, not whatever the fluff I am doing?
This commit is contained in:
Aminda Suomalainen 2025-05-10 13:47:02 +03:00
parent 4eaca7b946
commit 014af1b56c
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723

View File

@ -168,8 +168,9 @@ bit...
sudo fedora-third-party enable
# Layer packages I need on top of the base image.
sudo rpm-ostree install aircrack-ng android-tools btop clang darkman duperemove gamescope git-lfs gnome-console htop inxi mosh mpv neovim nmap pipx pre-commit setroubleshoot sshguard steam-devices symlinks syncthing terminus-fonts-console tmux tor torsocks unbound zsh
# Disable bootscreen, ensure CPU vulnerability mitigation.
sudo rpm-ostree kargs --delete=rhgb --delete=quiet --append=mitigations=auto,nosmt
# Disable bootscreen, enable btrfs compression etc. REMEMBER TO REMOVE SSD FOR NON-SSD setups! Ensure CPU vulnerability mitigation.
sudo rpm-ostree kargs --delete=rhgb --delete=quiet --delete=rootflags=subvol=root --append=rootflags=subvol=root,noatime,compress-force=zstd:0,ssd --append=mitigations=auto,nosmt
# Another reminder to not use flag SSD above if there is no SSD on the system.
# I would additionally use lockdown=confidentiality (or lockdown=integrity if
# less privacy and security was required, but that prevents shipped osnoise
# module from working.