mirror of
https://github.com/mikaela/mikaela.github.io/
synced 2025-08-06 12:57:22 +02:00
Compare commits
No commits in common. "4ba8b17f1b97b36e8e49f6e7287b920088a159a2" and "1a7287e5f00edd906380a75f46db2a6006bb6f3e" have entirely different histories.
4ba8b17f1b
...
1a7287e5f0
@ -52,7 +52,6 @@ _{{ page.excerpt }}_
|
|||||||
- [`/etc/xdg/autostart`](#etcxdgautostart)
|
- [`/etc/xdg/autostart`](#etcxdgautostart)
|
||||||
- [`aminda-*.{service,socket}`](#aminda-servicesocket)
|
- [`aminda-*.{service,socket}`](#aminda-servicesocket)
|
||||||
- [systemd sockets](#systemd-sockets)
|
- [systemd sockets](#systemd-sockets)
|
||||||
- [firewalld for systemd sockets](#firewalld-for-systemd-sockets)
|
|
||||||
- [Remember!](#remember)
|
- [Remember!](#remember)
|
||||||
- [Accessing UEFI setup without key smashing](#accessing-uefi-setup-without-key-smashing)
|
- [Accessing UEFI setup without key smashing](#accessing-uefi-setup-without-key-smashing)
|
||||||
- [Recovering selinux policy issues](#recovering-selinux-policy-issues)
|
- [Recovering selinux policy issues](#recovering-selinux-policy-issues)
|
||||||
@ -191,7 +190,7 @@ bit...
|
|||||||
# Ensure third party Fedora repos are available, this is part of KDE Prompt?
|
# Ensure third party Fedora repos are available, this is part of KDE Prompt?
|
||||||
sudo fedora-third-party enable
|
sudo fedora-third-party enable
|
||||||
# Layer packages I need on top of the base image.
|
# Layer packages I need on top of the base image.
|
||||||
sudo rpm-ostree install android-tools cronie cronie-anacron darkman duperemove foot foot-terminfo gamescope git-lfs haveged iwd mangohud mosh mpv oidentd rng-tools setroubleshoot snapd sshguard steam-devices syncthing terminus-fonts-console tmux tor torsocks unbound zsh
|
sudo rpm-ostree install android-tools cronie cronie-anacron darkman duperemove foot foot-terminfo gamescope git-lfs haveged iwd mangohud mosh mpv rng-tools setroubleshoot snapd sshguard steam-devices syncthing terminus-fonts-console tmux tor torsocks unbound zsh
|
||||||
# Remove packages I don't need from the base image. (Challenge to remove
|
# Remove packages I don't need from the base image. (Challenge to remove
|
||||||
# nothing failed by using rpmfusion codecs anyway)
|
# nothing failed by using rpmfusion codecs anyway)
|
||||||
sudo rpm-ostree override remove firefox firefox-langpacks
|
sudo rpm-ostree override remove firefox firefox-langpacks
|
||||||
@ -566,25 +565,6 @@ sudo systemctl --global enable foot-server.socket
|
|||||||
sudo systemctl enable --now ssh.socket sshd.socket avahi-daemon.socket systemd-oomd.socket oidentd.socket
|
sudo systemctl enable --now ssh.socket sshd.socket avahi-daemon.socket systemd-oomd.socket oidentd.socket
|
||||||
```
|
```
|
||||||
|
|
||||||
Remember that systemd sockets are silly and listen only to `::` by default and
|
|
||||||
since system administrators not-so-uncommonly set that to only mean IPv6 in
|
|
||||||
order to avoid dotted-decimals, it may be desirable to have a
|
|
||||||
`/etc/systemd/system/socket.d/dualstack-bind.conf` with
|
|
||||||
|
|
||||||
```ini
|
|
||||||
[Socket]
|
|
||||||
BindIPv6Only=both
|
|
||||||
```
|
|
||||||
|
|
||||||
#### firewalld for systemd sockets
|
|
||||||
|
|
||||||
```bash
|
|
||||||
sudo firewall-cmd --add-service=ssh --permanent && sudo firewall-cmd --add-service=ssh --permanent --zone=home
|
|
||||||
sudo firewall-cmd --add-service=ident --permanent && sudo firewall-cmd --add-service=ident --permanent --zone=home
|
|
||||||
sudo firewall-cmd --add-service=mdns --permanent && sudo firewall-cmd --add-service=mdns --permanent --zone=home
|
|
||||||
sudo firewall-cmd --reload
|
|
||||||
```
|
|
||||||
|
|
||||||
## Remember!
|
## Remember!
|
||||||
|
|
||||||
Not quite configuration, but I am not going to start inventing a new place for
|
Not quite configuration, but I am not going to start inventing a new place for
|
||||||
|
Loading…
x
Reference in New Issue
Block a user