• FreeBSD ¹⁾
• 14.1 ^{2) 3)}
• Xfce ⁴⁾

• TODO :p

• https://download.freebsd.org/releases/amd64/amd64/ISO-IMAGES/14.1/
• dvd1.iso can be dd to USB drives according to Announcement ⁵⁾, and works

FreeBSD-14.1-RELEASE-amd64-dvd1.iso

• Add user to wheel group

• Auto ZFS on Root
• Pool Type/Disks: stripe: 1 disk
• Partition Scheme: GPT (UEFI)

• https://docs.freebsd.org/en/books/handbook/x11/#x-install

su -

pkg install xorg drm-kmod

pw groupmod video -m espionage724

sysrc kld_list+=i915kms

• https://docs.freebsd.org/en/books/handbook/desktop/#xfce-environment
• TODO: Lockscreen

su -

pkg install xfce

ee '/etc/fstab'

proc /proc procfs rw 0 0

sysrc dbus_enable="YES"

echo '. /usr/local/etc/xdg/xfce4/xinitrc' > /home/espionage724/.xinitrc

chown espionage724:espionage724 /home/espionage724/.xinitrc

startx

• https://docs.freebsd.org/en/books/handbook/cutting-edge/#freebsdupdate-security-patches

su -

pkg update --force && pkg upgrade

freebsd-update fetch && freebsd-update install

su -

pkg install evolution firefox filezilla foliate gbrainy gimp keepassxc libreoffice mpv rhythmbox transmission-gtk android-tools aria2 htop noto unar wget xrandr yt-dlp

• https://docs.freebsd.org/en/books/handbook/wine/#installing-wine-on-freebsd

wine-devel wine-gecko wine-mono winetricks

/usr/local/share/wine/pkg32.sh install wine-devel mesa-dri

libva-intel-driver

libva-intel-media-driver-23.4.3

devilutionx flightgear neverball xonotic

minecraft-client

linux-steam-utils

tor-browser

• Panel Preferences → Window Buttons → [ ] Group windows by application

bash -c "secret-tool lookup 'keepass' 'default' | keepassxc --pw-stdin ~/'Documents/keepass.kdbx'"

xfce4-terminal --command "sudo sh -c 'zypper clean --all && zypper refresh --force --services && zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync && sync && fstrim --all --verbose && sync && read -n '1' -s -r -p 'Done' && sleep '2''"

• Listed respectively to above

• Ctrl + Alt + Z
• Pause, Menu, or Launch1

• http://localhost:631/admin

• Log-in as root
• Internet Printing Protocol (ipps) → HP → IPP Everywhere
• Color Mode: Device Gray
• Administration → Set As Server Default

ipp://192.168.1.164/ipp/print

• See dns_servers for other servers

9.9.9.9,149.112.112.112

2620:fe::fe,2620:fe::9

• See Internet Radio

• Background → Transparent Background → Opacity: 0.90

• https://www.dell.com/support/kbdoc/en-us/000177768/guide-to-dell-power-manager

sudo zypper install -y 'python3-smbios-utils' && sudo smbios-thermal-ctl --set-thermal-mode='performance' && sudo zypper remove --clean-deps -y 'python3-smbios-utils'

• More Kernel Parameters

• YaST Boot Loader → Kernel Parameters

• [ ] Graphical console (uncheck)
• CPU Mitigations: Off
• Remove splash=silent quiet parameters

• Last updated: 2024/09/05

rootflags='data=writeback' enable_mtrr_cleanup preempt='full' nohz='off' acpi_osi='Linux' tsc='nowatchdog' iomem='relaxed' pcie_aspm='off' pcie_port_pm='off' pcie_ports='native' pci='nocrs,pcie_bus_perf,realloc,pcie_scan_all,big_root_window' swiotlb='noforce' iommu='force' intel_iommu='on' reboot='pci' ahci.mobile_lpm_policy='1' nvme_core.default_ps_max_latency_us='0' nowatchdog modprobe.blacklist='iTCO_wdt' usbcore.autosuspend='-1' iwlmvm.power_scheme='1' snd_hda_intel.power_save='0' i915.enable_fbc='0' i915.enable_psr='0' i915.panel_use_ssc='0' i915.enable_guc='3' i915.guc_log_level='0' nvme.noacpi='1' nvme.use_threaded_interrupts='1' nvme.poll_queues='4'

• YaST Boot Loader erases any mentions of mitigations= so i915.mitigations=x needs set from modprobe.d

echo 'options i915 mitigations=off' | sudo tee '/etc/modprobe.d/99-i915-mitigations.conf' > '/dev/null' && cat '/etc/modprobe.d/99-i915-mitigations.conf'

sudo -e '/etc/modprobe.d/99-i915-mitigations.conf'

sudo systool -v -m 'i915' | grep 'mitigations'

sudo -e '/etc/profile.d/99-tweaks.sh'

# Mesa
export MESA_DISK_CACHE_SINGLE_FILE='1'
export MESA_DISK_CACHE_DATABASE='1'
export MESA_DISK_CACHE_COMBINE_RW_WITH_RO_FOZ='1'
export VAAPI_MPEG4_ENABLED='1'
export mesa_glthread='true'
export MESA_NO_ERROR='1'

# End

• General → [ ] Load previous databases on startup
• Security → [x] Use DuckDuckGo service to download website icons

secret-tool store --label='KeePass' 'keepass' 'default'

sudo sensors-detect --auto

sudo -e '/etc/sysconfig/lm_sensors'

mkdir -p ~/'.config/mpv' && nano ~/'.config/mpv/mpv.conf'

save-position-on-quit
sub-auto=fuzzy
force-window=yes
profile=gpu-hq
scale=ewa_lanczossharp
cscale=ewa_lanczossharp
video-sync=display-resample
interpolation
tscale=oversample
hwdec=vaapi
hwdec-codecs=all

• See Client notes to generate/restore public key

• Add discard after defaults for the swap mountpoint ⁶⁾
• According to the swapon man page, setting this in fstab is acceptable

sudo -e '/etc/fstab'

,discard=once

sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

• See Wine

• With xf86-video-intel, use HDMI1

sudo -e '/etc/bash.bashrc.local'

xrandr --output 'HDMI-1' --set 'Broadcast RGB' 'Full'
xrandr --output 'HDMI-1' --set 'content type' 'Game'

• See Firefox if old configuration is needed, otherwise use Firefox Sync
• https://wiki.archlinux.org/title/Firefox/Privacy

• See about:config for more info

extensions.screenshots.disabled

extensions.pocket.enabled

• uBlock Origin
• Decentraleyes
• Privacy Badger

https://www.fanboy.co.nz/fanboy-problematic-sites.txt
https://www.fanboy.co.nz/r/fanboy-ultimate.txt
https://www.fanboy.co.nz/fanboy-cookiemonster_ubo.txt
https://www.fanboy.co.nz/enhancedstats.txt

! Hide RuneScape Wiki clocks
! 2023/12/13
oldschool.runescape.wiki###utcdate > [href="#"]
oldschool.runescape.wiki###footer-info-lastmod
runescape.wiki##[href="/w/Clock_(interface)"]
runescape.wiki###footer-info-lastmod

! End

• See dns_servers for other addresses

https://dns.quad9.net/dns-query

• For workstations that run servers as a secondary directive
• For headless servers, use openSUSE TW (Server)

sudo -e '/etc/systemd/system/suse-up.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/zypper' clean --all
ExecStart='/usr/bin/zypper' --non-interactive refresh --force --services
ExecStart='/usr/bin/zypper' --non-interactive dist-upgrade --auto-agree-with-licenses --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change
ExecStartPost='/usr/bin/sync'
ExecStartPost='/usr/bin/systemctl' reboot

• 06:00 Oak

sudo -e '/etc/systemd/system/suse-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'suse-up.timer' --now

[Unit]
Description=Software Package Maintenance and Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 06:00:00
Persistent=true

[Install]
WantedBy=timers.target

pkg autoremove