Mikaela/mikaela.github.io
1
0
Fork 0
mirror of https://github.com/mikaela/mikaela.github.io/ synced 2025-11-04 08:37:23 +01:00
Code Issues Projects Releases Wiki Activity

n/essentialsoftware#rpm-ostree kargs: add btusb.{autosuspend,reset}

Browse Source
This commit is contained in:
Aminda Suomalainen 2025-10-28 09:39:40 +02:00
parent 80b09c437c
commit d73761f53d
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
n/essentialsoftware.md
View File

@ -243,7 +243,7 @@ Consider also adding
```bash
# REMOVE ssd FROM rootflags if not on SSD!
sudo rpm-ostree kargs --delete=rhgb --delete=quiet --delete=rootflags=subvol=root --append=rootflags=subvol=root,noatime,compress-force=zstd:0,ssd --append=net.ifnames=0 --append=rd.shell=0 --append=rd.emergency=halt --append=mitigations=auto,nosmt
sudo rpm-ostree kargs --delete=rhgb --delete=quiet --delete=rootflags=subvol=root --append=rootflags=subvol=root,noatime,compress-force=zstd:0,ssd --append=net.ifnames=0 --append=rd.shell=0 --append=rd.emergency=halt --append=btusb.enable_autosuspend=0 --append=btusb.reset=1 --append=mitigations=auto,nosmt
```
- `rhgb quiet` - These enable graphical boot screen and suppressing more verbose
@ -255,6 +255,13 @@ sudo rpm-ostree kargs --delete=rhgb --delete=quiet --delete=rootflags=subvol=roo
complaints.
- `rd.shell=0 rd.emergency=halt` - hardening to not enter debug shell upon wrong
encryption password
- `btusb.enable_autosuspend=0` - disables Bluetooth devices suspending
automatically. In general suspending them would be a good idea, but in
practice I keep losing all Bluetooth devices after a few hours without
rebooting and then I have to reboot through KDE Connect for everything to work
again.
- `btusb.reset=1` send a HCI reset command to Bluetooth devices on connection
initialization.
- `mitigations=auto,nosmt` - enable automatic mitigations for CPU
vulnerabilities including disabling hyperthreading (not default).
- `lockdown={confidentiality,integrity}` - hardening from secure boot being