• openSUSE
• Tumbleweed
• Xfce

• Hailrake = Dell Inspiron 24 5459 AIO ¹⁾

uname -a

Linux Hailrake 7.3.0-1-default #1 SMP PREEMPT_DYNAMIC Mon Oct 19 15:21:44 UTC 2026 (7f1f6b1) x86_64 x86_64 x86_64 GNU/Linux

• http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso
• https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso.sha256

http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso

openSUSE-Tumbleweed-DVD-x86_64-Snapshot20261024-Media.iso

openSUSE-Tumbleweed-DVD-x86_64-Snapshot20261103-Media.iso

1. ext2 /
2. No separate /home
3. Separate swap ²⁾

NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
sda      8:0    0 465.8G  0 disk 
├─sda1   8:1    0     8M  0 part 
├─sda2   8:2    0 458.1G  0 part /
└─sda3   8:3    0   7.6G  0 part [SWAP]

• GRUB2

sudo systemctl stop 'packagekit' && sudo zypper remove 'PackageKit'

sudo zypper addlock 'PackageKit'

sudo zypper modifyrepo --disable --medium-type 'hd'

sudo zypper clean --all && sudo zypper refresh --force --services && sudo zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync

• Installs nano
• Sets VISUAL and EDITOR to nano via environment variable
• Sets nowrap for current user

sudo zypper install 'nano' && export 'VISUAL=nano' && export 'EDITOR=nano' && echo -e 'export VISUAL=nano\nexport EDITOR=nano' | sudo tee '/etc/profile.d/editor-nano.sh' > '/dev/null' && cat '/etc/profile.d/editor-nano.sh' && mkdir -p ~/'.config/nano' && echo 'set nowrap' | tee ~/'.config/nano/nanorc' > '/dev/null' && cat ~/'.config/nano/nanorc'

sudo zypper remove --clean-deps catfish geoclue2 menulibre parole pragha myrlyn xfce4-clipman-plugin xfce4-notes-plugin gnome-packagekit PackageKit-gstreamer-plugin PackageKit-gtk3-module plymouth

sudo zypper addlock catfish geoclue2 menulibre parole pragha myrlyn xfce4-clipman-plugin xfce4-notes-plugin gnome-packagekit PackageKit-gstreamer-plugin PackageKit-gtk3-module plymouth

• 2026/10/24: typelib-1_0-Xfconf-0 fixes xfce4-screensaver-preferences settings panel
• 2026/05/02: H.264 libavcodec58 version from firefox-esr.spec

sudo zypper install firefox-esr filezilla foliate gimp gnome-calculator google-noto-*-fonts keepassxc libreoffice MozillaThunderbird transmission-gtk vlc xfce4-screensaver typelib-1_0-Xfconf-0 7zip android-tools aria2 fastfetch gstreamer-plugins-*-extra htop Mesa-demo-x secret-tool sensors unar yt-dlp 

libavcodec58_134

intel-vaapi-driver intel-gpu-tools libvulkan_intel vulkan-tools Mesa-libRusticlOpenCL clinfo

kernel-firmware-iwlwifi

• Doomsday Engine

doomsday

• Old WoW64
• binutils provides strings

wine-staging wine-staging-32bit libSDL3-0-32bit gstreamer-plugins-base-32bit gstreamer-plugins-good-32bit gstreamer-plugins-bad-32bit gstreamer-plugins-ugly-32bit gstreamer-plugins-*-extra-32bit gstreamer-plugins-libav-32bit Mesa-libva-32bit xf86-video-intel-32bit libvulkan_intel-32bit winetricks icoutils binutils

torbrowser-launcher

sudo zypper remove --clean-deps 'MozillaFirefox' && sudo zypper addlock 'MozillaFirefox'

rm -Rf ~/'.config/mozilla/firefox/'*

clear && fastfetch && uname -a && date

sudo intel_gpu_top -s '500' -p -m

• Chicago95

gio mime 'text/plain' 'org.xfce.mousepad.desktop' && gio mime 'image/jpeg' 'org.gnome.Shotwell-Viewer.desktop' && gio mime 'image/png' 'org.gnome.Shotwell-Viewer.desktop' && gio mime 'image/bmp' 'org.gnome.Shotwell-Viewer.desktop' && gio mime 'application/pdf' 'org.gnome.Evince.desktop' && gio mime 'application/epub+zip' 'com.github.johnfactotum.Foliate.desktop' && xdg-settings set 'default-web-browser' 'firefox-esr.desktop'

• Utilities → Terminal Emulator: Xfce Terminal

xfce4-mime-settings

• vblank_mode

xfconf-query --channel 'xfwm4' --property '/general/use_compositing' --type 'bool' --set 'false' --create && xfconf-query --channel 'xfwm4' --property '/general/vblank_mode' --type 'string' --set 'off' --create && xfconf-query --channel 'xfce4-session' --property '/general/SaveOnExit' --type 'bool' --set 'false' --create && rm -Rf ~/'.cache/sessions'

xfconf-query --channel 'xsettings' --property '/Xft/Antialias' --type 'int' --set '1' --create && xfconf-query --channel 'xsettings' --property '/Xft/DPI' --type 'int' --set '96' --create && xfconf-query --channel 'xsettings' --property '/Xft/Hinting' --type 'int' --set '0' --create && xfconf-query --channel 'xsettings' --property '/Xft/HintStyle' --type 'string' --set 'hintnone' --create && xfconf-query --channel 'xsettings' --property '/Xft/RGBA' --type 'string' --set 'none' --create

xfconf-query --channel 'keyboards' --property '/Default/KeyRepeat/Delay' --type 'int' --set '400' --create && xfconf-query --channel 'keyboards' --property '/Default/KeyRepeat/Rate' --type 'int' --set '30' --create

xfconf-query --channel 'xfce4-terminal' --property '/scrolling-lines' --type 'int' --set '10000' --create && xfconf-query --channel 'xfce4-terminal' --property '/misc-cursor-blinks' --type 'bool' --set 'true' --create && xfconf-query --channel 'xfce4-terminal' --property '/font-use-system' --type 'bool' --set 'false' --create && xfconf-query --channel 'xfce4-terminal' --property '/misc-show-unsafe-paste-dialog' --type 'bool' --set 'false' --create

• http://localhost:631/admin

• Log-in as root
• Internet Printing Protocol (ipp) → HP → IPP Everywhere ™
• Color Mode: Device Gray
• Administration → Set As Server Default

ipp://192.168.1.164/ipp/print

'/usr/sbin/rfkill' block 'all' && nmcli radio 'all' 'off'

• More DNS Servers

1.1.1.2,1.0.0.2

2606:4700:4700::1112,2606:4700:4700::1002

• Notes

sudo firewall-cmd --set-default-zone='block'

sudo firewall-cmd --permanent --add-service='dhcpv6-client'

sudo firewall-cmd --permanent --zone='docker' --remove-interface='docker0'

sudo systemctl restart 'firewalld'

• https://www.kernel.org/doc/html/latest/admin-guide/perf-security.html
• https://wiki.archlinux.org/title/intel_graphics#Enable_performance_support (Dracut)
• https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html (REISUB)

sudo -e '/etc/sysctl.d/99-tweaks.conf'

kernel.unprivileged_bpf_disabled=0
kernel.perf_event_paranoid=-1
dev.i915.perf_stream_paranoid=0
kernel.sysrq = 1
vm.swappiness = 0
vm.max_map_count=2147483642
kernel.randomize_va_space=0

# End

• TODO

• KeePassXC
• Scripts

xfce4-keyboard-settings

'/usr/bin/bash' -c "'/usr/bin/secret-tool' lookup 'keepass' 'default' | LIBGL_ALWAYS_SOFTWARE='1' '/usr/bin/keepassxc' --pw-stdin ~/'Documents/keepass.kdbx'"

'/usr/bin/bash' -c "'/usr/bin/xfce4-terminal' -T 'openSUSE Updater' -I '/usr/share/icons/hicolor/scalable/apps/distributor.svg' --working-directory='/tmp' -e ~/'.local/scripts/opensuse-updater.sh'"

'/usr/bin/bash' -c "'/usr/bin/xfce4-terminal' -T 'Max Performance' -I '/usr/share/icons/hicolor/scalable/apps/org.xfce.panel.systemload.svg' --working-directory='/tmp' -e ~/'.local/scripts/max-perf.sh'"

• Notes
• Also Thunderbird

• General → [ ] Load previous databases on startup
• Security → [x] Use DuckDuckGo service to download website icons

• Keyboard shortcut

'/usr/bin/secret-tool' store --label='KeePass' 'keepass' 'default'

• udev Rule

sudo sensors-detect --auto

sudo -e '/etc/sysconfig/lm_sensors'

• Notes

mkdir -p ~/'.config/pipewire/pipewire.conf.d' && nano ~/'.config/pipewire/pipewire.conf.d/99-custom.conf'

context.properties = {
    default.clock.allowed-rates = [ 44100 48000 96000 192000 ]
}

# End

rm -Rf ~/'.ssh' && mkdir -p ~/'.ssh' && echo -e "StrictHostKeyChecking='no'\nUserKnownHostsFile='/dev/null'\nLogLevel='QUIET'" | tee ~/'.ssh/config' > '/dev/null' && chmod '600' ~/'.ssh/config'

timedatectl set-timezone 'America/New_York' && sudo timedatectl 'set-ntp' 'true' && sudo hwclock --systohc && timedatectl status

• YaST2

• Boot Loader: GRUB2 for EFI

• [ ] Secure Boot Support
• [x] Update NVRAM Entry

• Protective MBR flag: do not change

• TODO:

sudo efibootmgr --create --disk '/dev/sda1' --gpt --loader '\EFI\opensuse\grubx64.efi' --full-dev-path --label 'openSUSE' --timeout '0'

• CPU Mitigations: Off
• [ ] Graphical console
• [ ] Serial console

• Last updated: 2026/10/30
• Includes cgroup_disable and drm.edid_firmware

console='' quiet bgrt_disable initcall_blacklist='sysfb_init,init_ima' security='' lsm='' audit='0' ima_appraise='off' mce='off' ras='cec_disable' acpi_osi='Linux' reboot='efi' hibernate='no' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' module_blacklist='iTCO_wdt,intel_oc_wdt' nowatchdog tsc='nowatchdog' pci='notph,noaer,noari,noats,ecrc=off,pcie_bus_perf,realloc,skip_isa_align,big_root_window,nomsi' pcie_ports='compat' pcie_port_pm='off' hostname='Hailrake' cgroup_disable='cpu,blkio,net_cls,perf_event,hugetlb,pids,rdma,misc,dmem,memory' rcu_nocbs noautogroup transparent_hugepage='never' cpuidle.off='1' cpufreq.off='1' processor.max_cstate='0' idle='nomwait' idle='poll' drm.edid_firmware='eDP-1:edid/20260927-169-detailed-43-standard-785.bin' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0'

• pcie_bus_tune_off vs pcie_bus_perf with Ethernet ³⁾
• TODO: Auto cpufreq.default_governor AC/Battery

• Last updated: 2026/07/28

console='' quiet bgrt_disable initcall_blacklist='sysfb_init,init_ima' security='' lsm='' audit='0' ima_appraise='off' nohugeiomap nogbpages mce='off' ras='cec_disable' acpi_osi='Linux' mem_sleep_default='s2idle' reboot='pci' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' align_va_addr='on' module_blacklist='iTCO_wdt,intel_oc_wdt' nowatchdog tsc='nowatchdog' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' pci='noaer,assign-busses,nocrs,no_e820,skip_isa_align,pcie_bus_tune_off,ecrc=off,realloc,noari,noats,pcie_scan_all,big_root_window,notph' pcie_ports='compat' pcie_port_pm='off' cpufreq.default_governor='performance' hostname='localhost'

• More Kernel Parameters
• Last updated: 2026/05/07
• UMAF

quiet bgrt_disable security='' lsm='' audit='0' add_efi_memmap mce='off' ras='cec_disable' acpi_osi='!' acpi_osi='Windows 2013' mem_sleep_default='s2idle' reboot='pci' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' swiotlb='noforce' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' align_va_addr='on' module_blacklist='iTCO_wdt,intel_oc_wdt' nowatchdog tsc='nowatchdog' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' video='HDMI-A-1:1600x900MR@76' acpi_mask_gpe='0x6E' pci='nocrs,no_e820,noaer,rom,routeirq,skip_isa_align,pcie_bus_tune_off,ecrc=off,realloc,noari,noats,pcie_scan_all,big_root_window,notph' pcie_ports='compat' pcie_port_pm='off'

• Last updated: 2026/05/05

cgroup_disable='cpu,blkio,net_cls,perf_event,hugetlb,pids,rdma,misc,dmem,memory' rcu_nocbs noautogroup

cat '/proc/cgroups'

• Timeout in Seconds: 2
• [ ] Probe Foreign OS
• [ ] Hide Menu on Boot
• Default Boot Section: openSUSE Tumbleweed
• [ ] Protect Boot Loader with Password

sudo systemctl enable 'fstrim.timer' --now

sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

sudo fstrim -v -a

• From LiveUSB/unmounted

sudo e2fsck -D -E 'discard,optimize_extents,inode_count_fullmap' -f -v -y '/dev/nvme0n1p2'

• Single-user mode
• (recovery mode) boot option

sudo -e '/ext2-m.sh' && sudo chmod +x '/ext2-m.sh'

#!/bin/bash

cd '/tmp'

'/usr/bin/umount' '/'
'/usr/sbin/e2fsck' -D -E 'discard,optimize_extents,inode_count_fullmap' -f -v -y '/dev/sda2'

'/usr/bin/sync'
'/usr/bin/sleep' '3'
'/usr/bin/systemctl' reboot

# End

/ext2-m.sh

sudo -e '/etc/profile.d/general-tweaks.sh'

# General
export LD_BIND_NOW='1'

# Mozilla
export MOZ_CRASHREPORTER_DISABLE='1'

# GTK
export GDK_DEBUG='gl-prefer-gl:no-portals:no-vsync'
export GDK_RENDERING='image'
export GSK_RENDERER='cairo'
export GTK_A11Y='none'
export NO_AT_BRIDGE='1'
export GTK_OVERLAY_SCROLLING='0'
export GTK_IM_MODULE='gtk-im-context-none'

# Intel
export MESA_GL_VERSION_OVERRIDE='4.6COMPAT'
export force_guc_low_latency='false'
export allow_compressed_fallback='true'
export INTEL_DEBUG='noccs,cl-quiet'
export ANV_DEBUG='experimental,no-gpl,video-decode,video-encode'
export anv_queue_override='gc=0,g=0,c=0,v=0,b=0'
export anv_disable_link_time_optimization='true'
export RUSTICL_ENABLE='iris'
export RUSTICL_FEATURES='fp64,intel'
export RUSTICL_DEBUG='allow_invalid_spirv'

# Mesa
export MESA_DEBUG='silent'
export mesa_glthread='false'
export vblank_mode='0'
export MESA_VK_WSI_PRESENT_MODE='immediate'
export allow_higher_compat_version='true'
export block_on_depleted_buffers='true'
export disable_throttling='true'
export force_integer_tex_nearest='true'
export vk_wsi_force_bgra8_unorm_first='true'
export vk_x11_ignore_suboptimal='true'
export vk_xwayland_wait_ready='false'

# Shader Cache
export MESA_SHADER_CACHE_DISABLE='false'
export MESA_SHADER_CACHE_MAX_SIZE='20G'
export MESA_DISK_CACHE_SINGLE_FILE='0'
export MESA_DISK_CACHE_MULTI_FILE='1'
export MESA_DISK_CACHE_DATABASE='0'

# End

• Notes

sudo -e '/etc/dracut.conf.d/99-tweaks.conf'

compress="cat"
do_strip="yes"
aggressive_strip="yes"
hostonly="yes"
hostonly_mode="strict"
reproducible="no"
enhanced_cpio="no"
i18n_install_all="no"
kernel_cmdline="rd.luks=0 rd.lvm=0 rd.md=0 rd.dm=0"

# End

sudo -e '/etc/dracut.conf.d/99-hailrake.conf'

early_microcode="no"
nofscks="yes"

force_drivers+=" i915 "
#install_items+='/usr/lib/firmware/edid/20260927-169-detailed-43-standard-785.bin'

omit_drivers+=" intel_oc_wdt iTCO_wdt thunderbolt "
omit_dracutmodules+=" i18n resume suse-xfs terminfo kernel-modules-extra "

# End

sudo dracut --force --regenerate-all

sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf' && sudo journalctl --vacuum-time='1s' --rotate

[Journal]
Storage=none
Compress=false
MaxLevelStore=0
MaxLevelSyslog=0
MaxLevelKMsg=0
MaxLevelConsole=0
MaxLevelWall=0

# End

sudo journalctl --vacuum-time='1s' --rotate

sudo -e '/etc/fstab'

,discard=once

• / type ext2

,noatime

,discard,tz=UTC,shortname=winnt,allow_utime=0002

utf8,dmask=0077

• Notes

sudo -e '/etc/profile.d/wine-tweaks.sh'

# Staging
export WINE_LARGE_ADDRESS_AWARE='1'
export STAGING_SHARED_MEMORY='1'
export STAGING_WRITECOPY='1'

# Logging
export WINEDEBUG='-all'

# DXVK
export DXVK_LOG_LEVEL='none'
#export DXVK_SHADER_CACHE='0'
#export DXVK_STATE_CACHE='0'

# VKD3D
#export VKD3D_DEBUG='none'
#export VKD3D_SHADER_DEBUG='none'

# End

• xorg.conf_snippets

• Notes
• eDP1 and HDMI1 (no-dash) = Intel DDX

xfce4-session-settings

'/usr/bin/bash' -c "'/usr/bin/xrandr' --output 'eDP1' --set 'Colorspace' 'RGB_WIDE_FLOAT' --set 'max bpc' '12' --set 'Broadcast RGB' 'Full' --set 'scaling mode' 'Full aspect'"

• Keyboard shortcuts

mkdir -p ~/'.local/scripts' && nano ~/'.local/scripts/opensuse-updater.sh' && chmod +x ~/'.local/scripts/opensuse-updater.sh'

#!/bin/bash

cd '/tmp'

sudo '/usr/bin/zypper' clean --all
sudo '/usr/bin/zypper' refresh --force --services
sudo '/usr/bin/zypper' dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change

rm -Rf ~/'.cache/mesa_shader_cache/'* ~/'.cache/thumbnails/'* ~/'.cache/mozilla/firefox/'* ~/'.cache/thunderbird/'*

sync
zypper ps --short
read -p 'Done. Press Enter to exit.' 'x'
sleep '2'

# End

~/'.local/scripts/opensuse-updater.sh'

• Dependencies

mkdir -p ~/'.local/scripts' && nano ~/'.local/scripts/max-perf.sh' && chmod +x ~/'.local/scripts/max-perf.sh'

#!/bin/bash

cd '/tmp'

# CPU
sudo '/usr/bin/x86_energy_perf_policy' --all 'performance' --turbo-enable '1' --force
#sudo '/usr/bin/cpupower' frequency-set -g 'performance' -r

echo 'Max performance states set!'
sleep '3'

# End

~/'.local/scripts/max-perf.sh'

• See misc