mirror of
https://github.com/mikaela/mikaela.github.io/
synced 2025-08-05 20:37:23 +02:00
Compare commits
No commits in common. "4ba8b17f1b97b36e8e49f6e7287b920088a159a2" and "1a7287e5f00edd906380a75f46db2a6006bb6f3e" have entirely different histories.
4ba8b17f1b
...
1a7287e5f0
@ -52,7 +52,6 @@ _{{ page.excerpt }}_
|
||||
- [`/etc/xdg/autostart`](#etcxdgautostart)
|
||||
- [`aminda-*.{service,socket}`](#aminda-servicesocket)
|
||||
- [systemd sockets](#systemd-sockets)
|
||||
- [firewalld for systemd sockets](#firewalld-for-systemd-sockets)
|
||||
- [Remember!](#remember)
|
||||
- [Accessing UEFI setup without key smashing](#accessing-uefi-setup-without-key-smashing)
|
||||
- [Recovering selinux policy issues](#recovering-selinux-policy-issues)
|
||||
@ -191,7 +190,7 @@ bit...
|
||||
# Ensure third party Fedora repos are available, this is part of KDE Prompt?
|
||||
sudo fedora-third-party enable
|
||||
# Layer packages I need on top of the base image.
|
||||
sudo rpm-ostree install android-tools cronie cronie-anacron darkman duperemove foot foot-terminfo gamescope git-lfs haveged iwd mangohud mosh mpv oidentd rng-tools setroubleshoot snapd sshguard steam-devices syncthing terminus-fonts-console tmux tor torsocks unbound zsh
|
||||
sudo rpm-ostree install android-tools cronie cronie-anacron darkman duperemove foot foot-terminfo gamescope git-lfs haveged iwd mangohud mosh mpv rng-tools setroubleshoot snapd sshguard steam-devices syncthing terminus-fonts-console tmux tor torsocks unbound zsh
|
||||
# Remove packages I don't need from the base image. (Challenge to remove
|
||||
# nothing failed by using rpmfusion codecs anyway)
|
||||
sudo rpm-ostree override remove firefox firefox-langpacks
|
||||
@ -566,25 +565,6 @@ sudo systemctl --global enable foot-server.socket
|
||||
sudo systemctl enable --now ssh.socket sshd.socket avahi-daemon.socket systemd-oomd.socket oidentd.socket
|
||||
```
|
||||
|
||||
Remember that systemd sockets are silly and listen only to `::` by default and
|
||||
since system administrators not-so-uncommonly set that to only mean IPv6 in
|
||||
order to avoid dotted-decimals, it may be desirable to have a
|
||||
`/etc/systemd/system/socket.d/dualstack-bind.conf` with
|
||||
|
||||
```ini
|
||||
[Socket]
|
||||
BindIPv6Only=both
|
||||
```
|
||||
|
||||
#### firewalld for systemd sockets
|
||||
|
||||
```bash
|
||||
sudo firewall-cmd --add-service=ssh --permanent && sudo firewall-cmd --add-service=ssh --permanent --zone=home
|
||||
sudo firewall-cmd --add-service=ident --permanent && sudo firewall-cmd --add-service=ident --permanent --zone=home
|
||||
sudo firewall-cmd --add-service=mdns --permanent && sudo firewall-cmd --add-service=mdns --permanent --zone=home
|
||||
sudo firewall-cmd --reload
|
||||
```
|
||||
|
||||
## Remember!
|
||||
|
||||
Not quite configuration, but I am not going to start inventing a new place for
|
||||
|
Loading…
x
Reference in New Issue
Block a user