From 014af1b56ca3cf89ce5e964ab0abe92d4f4ab98c Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Sat, 10 May 2025 13:47:02 +0300 Subject: [PATCH] essentialsoftware.md: apparently /etc/fstab doesn't affect root on Fedora Atomic and thus rootflags in kargs is used instead I read somewhere and updated my Steam Deck and this page with it, while I am supposed to be recovering from common cold or whatever it is in bed, not doing possibly evil things on my systems and Steam Deck is meant for gayming, not whatever the fluff I am doing? --- n/essentialsoftware.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/n/essentialsoftware.md b/n/essentialsoftware.md index b17df1b..f664071 100644 --- a/n/essentialsoftware.md +++ b/n/essentialsoftware.md @@ -168,8 +168,9 @@ bit... sudo fedora-third-party enable # Layer packages I need on top of the base image. sudo rpm-ostree install aircrack-ng android-tools btop clang darkman duperemove gamescope git-lfs gnome-console htop inxi mosh mpv neovim nmap pipx pre-commit setroubleshoot sshguard steam-devices symlinks syncthing terminus-fonts-console tmux tor torsocks unbound zsh -# Disable bootscreen, ensure CPU vulnerability mitigation. -sudo rpm-ostree kargs --delete=rhgb --delete=quiet --append=mitigations=auto,nosmt +# Disable bootscreen, enable btrfs compression etc. REMEMBER TO REMOVE SSD FOR NON-SSD setups! Ensure CPU vulnerability mitigation. +sudo rpm-ostree kargs --delete=rhgb --delete=quiet --delete=rootflags=subvol=root --append=rootflags=subvol=root,noatime,compress-force=zstd:0,ssd --append=mitigations=auto,nosmt +# Another reminder to not use flag SSD above if there is no SSD on the system. # I would additionally use lockdown=confidentiality (or lockdown=integrity if # less privacy and security was required, but that prevents shipped osnoise # module from working.