• Debian ¹⁾
• 13.4 Trixie ²⁾
• Xfce ^{3) 4)}

Debian GNU/Linux 13 (trixie)

• https://www.debian.org/

debian-13.4.0-amd64-netinst.iso

• No Domain name
• No root password
• Entire disk, one partition

• https://wiki.debian.org/SourcesList
• TODO: sed

sudo -e '/etc/apt/sources.list'

non-free

• https://gitlab.winehq.org/wine/wine/-/wikis/Debian-Ubuntu
• https://dl.winehq.org/wine-builds/debian/
• trixie

sudo dpkg --add-architecture 'i386'

rm -fv '/tmp/winehq.key' '/tmp/winehq-archive.key' && wget -O '/tmp/winehq.key' 'https://dl.winehq.org/wine-builds/winehq.key' && gpg --dearmor --output '/tmp/winehq-archive.key' '/tmp/winehq.key' && sudo mv -fv '/tmp/winehq-archive.key' '/etc/apt/keyrings' && wget -O '/tmp/winehq-trixie.sources' 'https://dl.winehq.org/wine-builds/debian/dists/trixie/winehq-trixie.sources' && sudo mv -fv '/tmp/winehq-trixie.sources' '/etc/apt/sources.list.d'

sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean

sudo apt install --install-recommends atril filezilla foliate gimp gnome-disk-utility keepassxc-minimal mate-calc obs-studio transmission-gtk thunderbird viewnior vlc 7zip aria2 adb fastboot fastfetch fonts-noto gvfs-backends libsecret-tools mesa-utils unar yt-dlp 

clear && fastfetch && uname -a && date

doomsday neverball

winehq-staging winbind icoutils mesa-vulkan-drivers libgl1-mesa-dri:i386 mesa-vulkan-drivers:i386 libgl1:i386 libnss-mdns:i386

intel-gpu-tools i965-va-driver

sudo intel_gpu_top -s '500' -p -m

• http://localhost:631/admin
• Log-in as regular user (not root)

• Internet Printing Protocol (ipp)
• HP
• IPP Everywhere ™
• Color Mode: Device Gray
• 2-Sided Printing: Long-Edge (Portrait)

ipp://192.168.1.164/ipp/print

Kole

• Chicago95

gio mime 'text/plain' 'org.xfce.mousepad.desktop'

gio mime 'image/jpeg' 'viewnior.desktop'

gio mime 'image/png' 'viewnior.desktop'

gio mime 'image/bmp' 'viewnior.desktop'

gio mime 'application/pdf' 'atril.desktop'

gio mime 'application/epub+zip' 'com.github.johnfactotum.Foliate.desktop'

xdg-settings set 'default-web-browser' 'firefox.desktop'

• Utilities → Terminal Emulator: Xfce Terminal

xfce4-mime-settings

• vblank_mode

xfconf-query --channel 'xfwm4' --property '/general/use_compositing' --type 'bool' --set 'false' --create

xfconf-query --channel 'xfwm4' --property '/general/vblank_mode' --type 'string' --set 'off' --create

xfconf-query --channel 'xfce4-session' --property '/general/SaveOnExit' --type 'bool' --set 'false' --create && rm -Rf ~/'.cache/sessions'

xfconf-query --channel 'xsettings' --property '/Xft/Antialias' --type 'int' --set '1' --create

xfconf-query --channel 'xsettings' --property '/Xft/DPI' --type 'int' --set '96' --create

xfconf-query --channel 'xsettings' --property '/Xft/HintStyle' --type 'string' --set 'hintnone' --create

xfconf-query --channel 'xsettings' --property '/Xft/Hinting' --type 'int' --set '0' --create

xfconf-query --channel 'xsettings' --property '/Xft/RGBA' --type 'string' --set 'none' --create

xfconf-query --channel 'keyboards' --property '/Default/KeyRepeat/Delay' --type 'int' --set '400' --create

xfconf-query --channel 'keyboards' --property '/Default/KeyRepeat/Rate' --type 'int' --set '30' --create

• KeePassXC
• Updater

xfconf-query --channel 'xfce4-keyboard-shortcuts' --property '/commands/custom/Super_L' --type 'string' --set 'xfce4-popup-whiskermenu' --create

xfce4-keyboard-settings

'/usr/bin/bash' -c "'/usr/bin/secret-tool' lookup 'keepass' 'default' | '/usr/bin/keepassxc' --pw-stdin ~/'Documents/keepass.kdbx'"

'/usr/bin/bash' -c "'/usr/bin/xfce4-terminal' --window --default-working-directory='/tmp' -T 'Debian Updater' -e ~/'.local/scripts/debian-updater.sh'"

xfconf-query --channel 'xfce4-terminal' --property '/scrolling-lines' --type 'int' --set '10000' --create

xfconf-query --channel 'xfce4-terminal' --property '/misc-cursor-blinks' --type 'bool' --set 'true' --create

xfconf-query --channel 'xfce4-terminal' --property '/font-use-system' --type 'bool' --set 'true' --create

xfconf-query --channel 'xfce4-terminal' --property '/misc-show-unsafe-paste-dialog' --type 'bool' --set 'false' --create

• More DNS Servers

nm-connection-editor

1.1.1.2,1.0.0.2

2606:4700:4700::1112,2606:4700:4700::1002

• Add Database Pass to Keyring

'/usr/bin/secret-tool' store --label='KeePass' 'keepass' 'default'

• Firefox
• Thunderbird

• udev Rule

• performance fan profile

cat '/sys/firmware/acpi/platform_profile' && echo 'performance' | sudo tee '/sys/firmware/acpi/platform_profile' > '/dev/null' && cat '/sys/firmware/acpi/platform_profile'

timedatectl set-timezone 'America/New_York' && sudo timedatectl 'set-ntp' 'true' && timedatectl status

• xorg.conf snippets

• Wine notes

nano ~/'.bash_aliases'

# General
export LD_BIND_NOW='1'
export LD_PREFER_MAP_32BIT_EXEC='1'

# GTK
export GDK_DEBUG='gl-prefer-gl'
export GDK_RENDERING='image'
export GSK_RENDERER='cairo'
export GTK_A11Y='none'
export GTK_OVERLAY_SCROLLING='0'

# Intel
export ANV_NO_GPL='1'
export anv_disable_link_time_optimization='true'
export force_guc_low_latency='false'
export allow_compressed_fallback='true'
export LIBVA_DRIVER_NAME='i965'

# Mesa
export vblank_mode='0'
export MESA_NO_ERROR='1'
export mesa_glthread='false'
export MESA_DISK_CACHE_DATABASE='0'
export MESA_DISK_CACHE_SINGLE_FILE='0'
export allow_higher_compat_version='true'
export block_on_depleted_buffers='true'
export disable_throttling='true'
export force_integer_tex_nearest='true'
export vk_wsi_force_bgra8_unorm_first='true'
export vk_x11_ignore_suboptimal='true'
export vk_xwayland_wait_ready='false'

# Wine Staging
export STAGING_SHARED_MEMORY='1'
export STAGING_WRITECOPY='1'
export WINE_LARGE_ADDRESS_AWARE='1'

# Wine Logging
export WINEDEBUG='-all'
export VKD3D_DEBUG='none'
export VKD3D_SHADER_DEBUG='none'
export DXVK_LOG_LEVEL='none'

# End

sudo -e '/etc/fstab'

• / type ext4
• data=writeback requires it in GRUB too

,data=writeback,nobarrier

errors=remount-ro,data=writeback,nobarrier

• /boot/efi type vfat

,discard

umask=0077,discard

,discard=once

sw,discard=once

• More Kernel Parameters

• GRUB_CMDLINE_LINUX=
• drm_kms_helper.fbdev_emulation=1 for external LightDM log-in with Intel DDX
• preempt=none
• TODO: UMAF

sudo -e '/etc/default/grub' && sudo update-grub

acpi_osi='!' acpi_osi='Windows 2013' reboot='pci' hibernate='no' idle='halt' nohz='off' preempt='none' iommu='pt' io_delay='none' memory_corruption_check='0' nosgx init_on_alloc='0' init_on_free='0' pcie_aspm='off' module_blacklist='iTCO_wdt,intel_oc_wdt,dell_smm_hwmon' nowatchdog tsc='nowatchdog' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='1' rootflags='data=writeback' acpi_mask_gpe='0x6E' mitigations='off' dis_ucode_ldr

• 2026/04/25

Startup finished in 5.021s (firmware) + 3.583s (loader) + 3.603s (kernel) + 5.572s (userspace) = 17.781s 
graphical.target reached after 5.560s in userspace.

systemd-analyze

• Notes

sudo update-initramfs -k 'all' -c

• https://docs.kernel.org/admin-guide/sysctl/kernel.html#unprivileged-bpf-disabled

• kernel.unprivileged_bpf_disabled = 0

echo 'kernel.unprivileged_bpf_disabled=0' | sudo tee '/etc/sysctl.d/99-bpf-disable.conf' > '/dev/null' && cat '/etc/sysctl.d/99-bpf-disable.conf'

'/usr/sbin/sysctl' 'kernel.unprivileged_bpf_disabled'

• https://man7.org/linux/man-pages/man5/proc_sys_vm.5.html

• vm.legacy_va_layout = 1

echo 'vm.legacy_va_layout=1' | sudo tee '/etc/sysctl.d/99-vm-legacy-va.conf' > '/dev/null' && cat '/etc/sysctl.d/99-vm-legacy-va.conf'

'/usr/sbin/sysctl' 'vm.legacy_va_layout'

• https://www.kernel.org/doc/html/latest/admin-guide/perf-security.html

• kernel.perf_event_paranoid = -1

echo 'kernel.perf_event_paranoid=-1' | sudo tee '/etc/sysctl.d/99-perf-events.conf' > '/dev/null' && cat '/etc/sysctl.d/99-perf-events.conf'

'/usr/sbin/sysctl' 'kernel.perf_event_paranoid'

• https://wiki.archlinux.org/title/intel_graphics#Enable_performance_support

• dev.i915.perf_stream_paranoid = 0

echo 'dev.i915.perf_stream_paranoid=0' | sudo tee '/etc/sysctl.d/99-i915-perf.conf' > '/dev/null' && cat '/etc/sysctl.d/99-i915-perf.conf'

'/usr/sbin/sysctl' 'dev.i915.perf_stream_paranoid'

• https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html
• Allows REISUB

• kernel.sysrq = 1

echo 'kernel.sysrq = 1' | sudo tee '/etc/sysctl.d/99-sysrq.conf' > '/dev/null' && cat '/etc/sysctl.d/99-sysrq.conf'

'/usr/sbin/sysctl' 'kernel.sysrq'

• vm.swappiness = 0

echo 'vm.swappiness = 0' | sudo tee '/etc/sysctl.d/99-swappiness.conf' > '/dev/null' && cat '/etc/sysctl.d/99-swappiness.conf'

'/usr/sbin/sysctl' 'vm.swappiness'

sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf'

[Journal]
Storage=none
Compress=false
MaxLevelStore=0
MaxLevelSyslog=0
MaxLevelKMsg=0
MaxLevelConsole=0
MaxLevelWall=0

# End

sudo journalctl --vacuum-time='1s' --rotate

• HP S2031
• HDMI1 = Intel DDX

xfce4-session-settings

'/usr/bin/bash' -c "'/usr/bin/xrandr' --output 'HDMI1' --set 'Broadcast RGB' 'Full' --set 'content type' 'Game' --set 'Colorspace' 'opRGB' --set 'audio' 'force-dvi' --set 'max bpc' '8'"

sudo systemctl enable 'fstrim.timer' --now

sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

sudo fstrim -v -a

• TODO

• /dev/nvme0n1p1 on /boot/efi type vfat

sudo umount '/boot/efi' && sudo fsck.fat -a -t -w -v '/dev/nvme0n1p1' && sudo mount '/boot/efi'

mkdir -p ~/'.local/scripts' && nano ~/'.local/scripts/debian-updater.sh' && chmod +x ~/'.local/scripts/debian-updater.sh'

#!/bin/bash

sudo '/usr/bin/apt' clean
sudo '/usr/bin/apt' update
sudo '/usr/bin/apt' full-upgrade -y
sudo '/usr/bin/apt' autoremove -y

rm -Rf ~/'.cache/mesa_shader_cache'*'/'* ~/'.cache/thumbnails/'*
rm -Rf ~/'.cache/mozilla/firefox/'* ~/'.cache/thunderbird/'*

sudo fstrim -v -a

read -n '1' -s -r -p 'Done. Press any key to exit.'
sleep '3'

# End

~/'.local/scripts/debian-updater.sh'

• See misc