====== Information ======

  * Fedora Workstation
  * 43
  * https://www.fedoraproject.org/workstation/

  Fedora Linux 43 (Workstation Edition)

====== Download ======

  * https://www.fedoraproject.org/workstation/download

  Fedora-Workstation-Live-43-1.6.x86_64.iso

====== Installation Notes ======

===== Partitioning =====

  * ''64 MB'' EFI partition ''/boot/efi'' ((usage is ''20M'', but installer minimal to pass a check seems to be ''64M''))
  * XFS ''/''

<code>
NAME        MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
zram0       251:0    0     8G  0 disk [SWAP]
nvme0n1     259:0    0 953.9G  0 disk 
├─nvme0n1p1 259:1    0    61M  0 part /boot/efi
└─nvme0n1p2 259:2    0 953.8G  0 part /
</code>

====== Repositories ======

===== RPM Fusion =====

  * See [[linux;notes;rpm_fusion|RPM Fusion]]

====== Software ======

===== Update =====

==== System ====

****

  sudo dnf clean 'all' && sudo dnf autoremove -y && sudo dnf update -y && sync

==== Firmware ====

****

  sudo fwupdmgr refresh --force && sudo fwupdmgr update --verbose

==== Flatpaks ====

****

  flatpak update && sudo flatpak update

===== GNU nano =====

  * Installs ''nano''
  * Sets ''VISUAL'' and ''EDITOR'' to ''nano'' via environment variable
  * Sets ''nowrap'' for current user

  sudo dnf install 'nano' -y && export 'VISUAL=nano' && export 'EDITOR=nano' && echo -e 'export VISUAL=nano\nexport EDITOR=nano' | sudo tee '/etc/profile.d/editor-nano.sh' > '/dev/null' && cat '/etc/profile.d/editor-nano.sh' && mkdir -p ~/'.config/nano' && echo 'set nowrap' | tee ~/'.config/nano/nanorc' > '/dev/null' && cat ~/'.config/nano/nanorc'

===== Remove =====

****

  sudo dnf remove gnome-weather gnome-software gnome-clocks mediawrite* plymouth

==== Test ====

****

  sudo dnf remove libvirt-client anaconda-*

==== Firmware ====

****

  sudo dnf remove 'amd-gpu-firmware' 'nvidia-gpu-firmware' 'atheros-firmware' 'mt7xxx-firmware'

===== General =====

****

  sudo dnf install file-roller filezilla foliate gbrainy gimp gnome-extensions-app keepassxc obs-studio thunderbird transmission-gtk vlc android-tools aria2 htop lm_sensors unar yt-dlp 

===== Intel =====

  libva-intel-media-driver igt-gpu-tools

  libva-utils

==== intel_gpu_top ====

****

  sudo intel_gpu_top -s '500' -p -m

===== Wine =====

****

  wine winetricks mesa-vulkan-drivers icoutils

====== Settings ======

===== Printer =====

  * http://localhost:631/admin
  * Log-in as regular user (not ''root'')

  * Internet Printing Protocol (ipp) -> HP -> IPP Everywhere ™
  * Color Mode: Device Gray
  * Administration -> Set As Server Default

  ipp://192.168.1.164/ipp/print

===== Network =====

==== DNS ====

  * [[servers:upstream_dns_servers|More DNS Servers]]

<code>9.9.9.9,149.112.112.112</code>

<code>2620:fe::fe,2620:fe::9</code>

===== Kernel Options =====

==== BPF Disable ====

  * https://docs.kernel.org/admin-guide/sysctl/kernel.html#unprivileged-bpf-disabled

  * ''kernel.unprivileged_bpf_disabled = 0''

  echo 'kernel.unprivileged_bpf_disabled=0' | sudo tee '/etc/sysctl.d/99-bpf-disable.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-bpf-disable.conf' && cat '/etc/sysctl.d/99-bpf-disable.conf'

  sysctl 'kernel.unprivileged_bpf_disabled'

==== Legacy MMap ====

  * https://man7.org/linux/man-pages/man5/proc_sys_vm.5.html

  * ''vm.legacy_va_layout = 1''

  echo 'vm.legacy_va_layout=1' | sudo tee '/etc/sysctl.d/99-vm-legacy-va.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-vm-legacy-va.conf' && cat '/etc/sysctl.d/99-vm-legacy-va.conf'

  sysctl 'vm.legacy_va_layout'

==== Intel Perf Counters ====

  * https://wiki.archlinux.org/title/intel_graphics#Enable_performance_support

  * ''dev.i915.perf_stream_paranoid = 0''

  echo 'dev.i915.perf_stream_paranoid=0' | sudo tee '/etc/sysctl.d/99-i915-perf.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-i915-perf.conf' && cat '/etc/sysctl.d/99-i915-perf.conf'

  sysctl 'dev.i915.perf_stream_paranoid'

==== Magic SysRq key ====

  * https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html
  * Allows ''REISUB''

  * ''kernel.sysrq = 1''

  echo 'kernel.sysrq = 1' | sudo tee '/etc/sysctl.d/99-sysrq.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-sysrq.conf' && cat '/etc/sysctl.d/99-sysrq.conf'

  sysctl 'kernel.sysrq'

==== Swappiness ====

  * ''vm.swappiness = 0''

  echo 'vm.swappiness = 0' | sudo tee '/etc/sysctl.d/99-swappiness.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-swappiness.conf' && cat '/etc/sysctl.d/99-swappiness.conf'

  sysctl 'vm.swappiness'

===== GNOME =====

==== Background ====

****

  gsettings set 'org.gnome.desktop.background' 'picture-uri' '/usr/share/backgrounds/f'*'/default/f'*'.xml'

==== External Monitor Settings ====

  * Full RGB + 12-bit color
  * Also applies disabled monitors at log-in (docked laptop)
  * [[linux:notes:gnome_hdmi_full_rgb|Notes]]

  * Between ''</mode>'' and ''</monitor>'' ((generating ''monitors.xml'' requires changing a setting under GNOME Settings -> Displays))

  nano ~/'.config/monitors.xml' && sudo cp -fv ~/'.config/monitors.xml' '/etc/xdg/monitors.xml' && sudo restorecon -F -I ~/'.config/monitors.xml' '/etc/xdg/monitors.xml'

<code>
        <rgbrange>full</rgbrange>
        <maxbpc>12</maxbpc>
</code>

==== Extensions ====

  * https://extensions.gnome.org/extension/545/hide-top-bar/

=== Disable Unredirect ===

  * https://github.com/Exeos/disable-unredirect
  * Log out/in -> Manually enable from GNOME Extensions app

  sudo dnf install 'git-core'

  git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Exeos/disable-unredirect.git' '/tmp/disable-unredirect-exeos'

  mv -f '/tmp/disable-unredirect-exeos/src' ~/'.local/share/gnome-shell/extensions/disable-unredirect@exeos'

  rm -Rf '/tmp/disable-unredirect-exeos'

==== gsettings ====

  * [[linux;notes;gsettings|More gsettings]]

  gsettings reset 'org.gnome.shell' 'app-picker-layout' && gsettings reset 'org.gnome.mutter' 'experimental-features' && gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false' && gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true' && gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true' && gsettings set 'org.gnome.desktop.screen-time-limits' 'history-enabled' 'false' && gsettings set 'org.gnome.desktop.wm.preferences' 'focus-mode' 'click' && gsettings set 'org.gtk.gtk4.Settings.FileChooser' 'sort-directories-first' 'true' && gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'enable-monitors' 'false' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'crawling-interval' '-2' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'index-on-battery' 'false' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'index-on-battery-first-time' 'false' && gsettings reset 'org.gnome.Settings' 'last-panel'

==== Keyboard Shortcuts ====

  * [[#add_database_password_to_gnome_keyring|KeePassXC]]
  * [[#updater|Updater]]

<code>'/usr/bin/ptyxis' --standalone</code>

<code>'/usr/bin/bash' -c "'/usr/bin/secret-tool' lookup 'keepass' 'default' | '/usr/bin/keepassxc' --pw-stdin ~/'Documents/keepass.kdbx'"</code>

<code>'/usr/bin/bash' -c "'/usr/bin/ptyxis' --standalone --title='Fedora Updater' -- ~/'.local/scripts/fedora-updater.sh'"</code>

=== Keys ===

  * Listed respectively to above

  * Ctrl + Alt + T
  * Ctrl + Alt + Z
  * F6

===== Firefox =====

  * See [[programs;firefox|Firefox]]
  * Also for Thunderbird

===== Hostname =====

****

  hostnamectl set-hostname 'x'

===== KeePassXC =====

==== Settings ====

  * General -> [ ] Load previous databases on startup
  * Security -> [x] Use DuckDuckGo service to download website icons

==== Add Database Password to GNOME Keyring ====

  * [[#keyboard_shortcuts|Keyboard shortcut]]

  '/usr/bin/secret-tool' store --label='KeePass' 'keepass' 'default'

===== Laptop Power =====

  * [[linux:notes:x86_energy_perf_policy|x86_energy_perf_policy udev Rule]]

===== lm_sensors =====

  sudo sensors-detect --auto

  sudo -e '/etc/sysconfig/lm_sensors'

===== Ptyxis =====

  * ''0.95'' Transparency

  gsettings set 'org.gnome.Ptyxis' 'enable-a11y' 'false' && gsettings set 'org.gnome.Ptyxis' 'restore-session' 'false' && gsettings set 'org.gnome.Ptyxis' 'restore-window-size' 'false' && gsettings set 'org.gnome.Ptyxis.Profile:/org/gnome/Ptyxis/Profiles/'$PTYXIS_PROFILE'/' 'opacity' '0.95'

===== Time =====

****

  timedatectl 'set-ntp' 'true' && sudo hwclock --systohc && timedatectl status

====== Boot Loader ======

  * [[linux:notes:kernel_parameters|More Kernel Parameters]]

===== Spinesnap =====

  * [[devices;dell_latitude_5591_spinesnap#bios_settings|fwupdmgr BIOS Settings]]

  * Last updated: 2025/12/05

  sudo -e '/etc/default/grub' && sudo restorecon -F -I '/etc/default/grub' && sudo grub2-mkconfig -o '/boot/grub2/grub.cfg' && sudo restorecon -F -I '/boot/grub2/grub.cfg'

  GRUB_TIMEOUT=0

  #GRUB_CMDLINE_LINUX="rhgb quiet"

  GRUB_CMDLINE_LINUX_DEFAULT="quiet acpi_osi='!!' acpi_osi='Linux' reboot='pci' hibernate='no' idle='halt' nohz='off' mitigations='off' preempt='full' iommu='pt' pci='nocrs,pcie_bus_perf,realloc,pcie_scan_all,big_root_window' module_blacklist='iTCO_wdt,intel_oc_wdt' nowatchdog tsc='nowatchdog' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0'"

==== modprobe.d ====

  * [[linux;notes;modprobe.d_tweaks#spinesnap|Notes]]

==== Dracut ====

  sudo -e '/etc/dracut.conf.d/99-spinesnap.conf' && sudo restorecon -F -I '/etc/dracut.conf.d/99-spinesnap.conf' && sudo dracut --force --regenerate-all

<code>
early_microcode="no"
nofscks="yes"

kernel_cmdline="rd.luks=0 rd.lvm=0 rd.md=0 rd.dm=0"

force_drivers+=" i915 "

omit_drivers+=" intel_oc_wdt iTCO_wdt iTCO_vendor_support fuse thunderbolt "
omit_dracutmodules+=" fips-crypto-policies systemd-pcrphase tpm2-tss memstrack i18n systemd-battery-check nss-softokn "

# End</code>

==== Dell Fan Speed ====

****

  cat '/sys/firmware/acpi/platform_profile' && echo 'performance' | sudo tee '/sys/firmware/acpi/platform_profile' > '/dev/null' && cat '/sys/firmware/acpi/platform_profile'

==== systemd-analyze ====

  * 2025/12/05

<code>
Startup finished in 4.211s (firmware) + 695ms (loader) + 480ms (kernel) + 1.737s (initrd) + 7.100s (userspace) = 14.224s 
graphical.target reached after 7.100s in userspace.</code>

  systemd-analyze

==== lsinitrd ====

  * 2025/12/04

  Image: /boot/initramfs-6.17.9-300.fc43.x86_64.img: 38M

  lsinitrd

===== Remove Shim =====

  sudo dnf remove --setopt 'protected_packages'='' 'shim'*

  sudo efibootmgr

  sudo efibootmgr --delete-bootnum --bootnum '0000'

  sudo efibootmgr --create --disk '/dev/nvme0n1p1' --file-dev-path --gpt --loader '\EFI\fedora\grubx64.efi' --label 'Fedora-GRUB' --timeout '0'

===== Boot Options =====

  * Add commands within ''args''
  * TODO: Move to misc

  sudo grubby --update-kernel='ALL' --args=''

  sudo grubby --update-kernel='ALL' --remove-args=''

<code>GRUB_TIMEOUT=5</code>

====== Drive Maintenance ======

===== Trim =====

  sudo systemctl enable 'fstrim.timer' --now

  sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

  sudo fstrim -v -a

===== EFI =====

  * ''nvme0n1p1'' type ''vfat''

  sudo umount '/boot/efi' && sudo dosfsck -a -t -w -v '/dev/nvme0n1p1' && sudo mount '/boot/efi'

===== XFS =====

  * [[linux;notes;xfs|Notes]]

  sudo xfs_fsr -v '/'

===== SELinux Relabel =====

****

  sudo touch '/.autorelabel' && sudo restorecon -F -I '/.autorelabel'

====== Tweaks ======

===== General =====

  sudo -e '/etc/profile.d/general-tweaks.sh' && sudo restorecon -F -I '/etc/profile.d/general-tweaks.sh'

<code>
# General
export LD_BIND_NOW='1'
export LD_PREFER_MAP_32BIT_EXEC='1'

# GTK
export GSK_RENDERER='vulkan'
export GTK_A11Y='none'

# GNOME
export CLUTTER_PAINT='disable-dynamic-max-render-time'

# Intel
#export ANV_NO_GPL='1'
export force_guc_low_latency='true'
export allow_compressed_fallback='true'

# Mesa
export MESA_NO_ERROR='1'
export mesa_glthread='false'
export MESA_DISK_CACHE_DATABASE='0'
export MESA_DISK_CACHE_SINGLE_FILE='0'

# Test
export allow_higher_compat_version='true'
export vk_xwayland_wait_ready='false'
export vk_x11_ignore_suboptimal='true'
export vk_wsi_force_bgra8_unorm_first='true'
export block_on_depleted_buffers='true'
export disable_throttling='true'
export force_integer_tex_nearest='true'

# End</code>

===== journald =====

  sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf' && sudo restorecon -F -I '/etc/systemd/journald.conf.d/99-tweaks.conf' && sudo journalctl --vacuum-time='1s' --rotate

<code>
[Journal]
Storage=none
Compress=false
MaxLevelStore=0
MaxLevelSyslog=0
MaxLevelKMsg=0
MaxLevelConsole=0
MaxLevelWall=0
MaxLevelSocket=0

# End</code>

===== PackageKit =====

  * ''packagekitd'' to on-demand ((allows ''PackageKit-command-not-found'' to function))

  sudo mkdir -p '/etc/systemd/system/packagekit.service.d' && sudo -e '/etc/systemd/system/packagekit.service.d/on-demand.conf' && sudo restorecon -F -I -R '/etc/systemd/system/packagekit.service.d' && sudo systemctl daemon-reload

<code>
[Service]
RuntimeMaxSec=5

# End</code>

===== Dracut =====

  sudo -e '/etc/dracut.conf.d/99-tweaks.conf' && sudo restorecon -F -I '/etc/dracut.conf.d/99-tweaks.conf' && sudo dracut --force --regenerate-all

<code>
# Compression
compress="cat"

# Strip
do_strip="yes"
aggressive_strip="yes"
hostonly="yes"
hostonly_mode="strict"
reproducible="no"
enhanced_cpio="no"
i18n_install_all="no"

# End</code>

===== fstab =====

****

  sudo -e '/etc/fstab' && sudo restorecon -F -I '/etc/fstab'

==== EFI ====

  * ''/boot/efi type vfat''

  ,discard,tz=UTC

==== XFS ====

  * ''/ type xfs''

  ,nodiscard,noatime

===== Wine =====

  * [[linux;notes;wine|Notes]]

  sudo -e '/etc/profile.d/wine-tweaks.sh' && sudo restorecon -F -I '/etc/profile.d/wine-tweaks.sh'

<code>
# Staging
export STAGING_SHARED_MEMORY='1'
export STAGING_WRITECOPY='1'
export WINE_LARGE_ADDRESS_AWARE='1'

# Logging
export WINEDEBUG='-all'
export VKD3D_DEBUG='none'
export VKD3D_SHADER_DEBUG='none'
export DXVK_LOG_LEVEL='none'

# End</code>

====== Scripts ======

===== Updater =====

  * [[#keyboard_shortcuts|Keyboard shortcut]]

  mkdir -p ~/'.local/scripts' && nano ~/'.local/scripts/fedora-updater.sh' && chmod +x ~/'.local/scripts/fedora-updater.sh'

<code>
#!/bin/bash

sudo '/usr/bin/dnf' autoremove -y
sudo '/usr/bin/dnf' clean 'all'
sudo '/usr/bin/dnf' update -y

sudo '/usr/bin/fwupdmgr' refresh --force
sudo '/usr/bin/fwupdmgr' update

'/usr/bin/flatpak' update
sudo '/usr/bin/flatpak' update

rm -Rf ~/'.cache/mesa_shader_cache'*
rm -Rf ~/'.cache/thumbnails/'*'/'*
localsearch reset --filesystem

rm -Rf ~/'.cache/mozilla/firefox'*
rm -Rf ~/'.cache/thunderbird'*

sudo '/usr/bin/fstrim' --all --verbose

sync
read -n '1' -s -r -p 'Done. Press any key to exit.'

# End</code>

  ~/'.local/scripts/fedora-updater.sh'

====== Notable Folders and Commands ======

  * See [[linux;notes;misc]]