Mikaela/mikaela.github.io
1
0
Fork 0
mirror of https://github.com/mikaela/mikaela.github.io/ synced 2025-06-14 18:57:33 +02:00
Code Issues Projects Releases Wiki Activity

n/essentialsoftware.md: note rpm-ostree-automatic

Browse Source
This commit is contained in:
Aminda Suomalainen 2025-06-07 09:13:44 +03:00
parent 711ba2f16b
commit 853a147b5a
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
n/essentialsoftware.md
View File

@ -91,12 +91,16 @@ _{{ page.excerpt }}_
had it connect to upstream dns\[crypt\]proxy had it connect to upstream dns\[crypt\]proxy
- alternatively configure `systemd-resolved`. Simultaneously - alternatively configure `systemd-resolved`. Simultaneously
`systemd-networkd` may be a good idea. `systemd-networkd` may be a good idea.
- `unattended-upgrades` or `dnf-automatic` so security updates are at least - `unattended-upgrades`, `dnf-automatic` or `rpm-ostreed-automatic` so security
downloaded if not even directly installed (see configuration and systemd updates are at least downloaded if not even directly installed (see
units!) configuration and systemd units!)
- if `dnf-automatic`, consider - if `dnf-automatic`, consider
`sudo systemctl enable dnf-automatic-install.{timer,service}` or at least `sudo systemctl enable dnf-automatic-install.{timer,service}` or at least
`sudo systemctl enable dnf-automatic-download.{timer,service}` `sudo systemctl enable dnf-automatic-download.{timer,service}`
- for `rpm-ostree`, `systemctl enable rpm-ostreed-automatic.timer --now`
- Remember to check `/etc/rpm-ostreed.conf`, it should say
`AutomaticUpdatePolicy=stage` and likely `LockLayering=true` under
`[Daemon]`
## Usability ## Usability
@ -179,6 +183,8 @@ sudo rpm-ostree install aircrack-ng android-tools btop clang cronie cronie-anacr
# Remove packages I don't need from the base image. (Challenge to remove # Remove packages I don't need from the base image. (Challenge to remove
# nothing failed by using rpmfusion codecs anyway) # nothing failed by using rpmfusion codecs anyway)
sudo rpm-ostree override remove firefox firefox-langpacks sudo rpm-ostree override remove firefox firefox-langpacks
# Enable automatic updates (check /etc/rpm-ostreed.conf for AutomaticUpdatePolicy=stage and LockLayering=true)
sudo systemctl enable rpm-ostreed-automatic.timer --now
# Disable bootsplash and kernel message hiding, adjust rootfs fstab, # Disable bootsplash and kernel message hiding, adjust rootfs fstab,
# REMEMBER TO REMOVE SSD FOR NON-SSD setups! Legacy interface names (eth0, # REMEMBER TO REMOVE SSD FOR NON-SSD setups! Legacy interface names (eth0,
# wlan0) are also nice. Ensure CPU vulnerability mitigation while at kargs too. # wlan0) are also nice. Ensure CPU vulnerability mitigation while at kargs too.