• Arch Linux ¹⁾
• Server

• Arch Linux Install

sudo pacman -Syyuu

sudo pacman -S aria2 hdparm hidepid htop p7zip ufw unrar wget unzip python3

sudo ufw reset && sudo ufw default deny && sudo ufw limit '22'/'tcp' && sudo ufw logging off && sudo ufw enable && sudo systemctl enable 'ufw'

sudo -e '/etc/default/grub' && sudo grub-mkconfig -o '/boot/grub/grub.cfg'

• Rotational disks

elevator=deadline

nmi_watchdog=0

modprobe.blacklist=uvcvideo,btusb,bluetooth

sudo -e '/etc/sysctl.d/harden.conf'

kernel.dmesg_restrict = 1
kernel.kptr_restrict = 1

• https://bbs.archlinux.org/viewtopic.php?id=215411

sudo mkdir -p '/etc/pacman.d/hooks' && sudo -e '/etc/pacman.d/hooks/system-initramfs-regen.hook'

[Trigger]
Operation = Upgrade
Type = Package
Target = systemd

[Action]
Description = Generating initramfs...
Depends = linux
When = PostTransaction
Exec = /usr/bin/mkinitcpio -P

• See Secure Shell

sudo -e '/etc/systemd/system/hd-tweak.service' && sudo systemctl daemon-reload && sudo systemctl enable 'hd-tweak' --now && sudo systemctl status 'hd-tweak' -l

[Unit]
Description=hdparm Tweaks

[Service]
Type=oneshot
ExecStart='/usr/bin/hdparm' -A '1' '/dev/sda'
ExecStart='/usr/bin/hdparm' -B '255' '/dev/sda'
ExecStart='/usr/bin/hdparm' -J '0' --please-destroy-my-drive '/dev/sda'
ExecStart='/usr/bin/hdparm' -S '0' '/dev/sda'
ExecStart='/usr/bin/hdparm' -W '1' '/dev/sda'

[Install]
WantedBy=multi-user.target

sudo -e '/etc/systemd/system/arch-up.service'

[Service]
Type=oneshot
ExecStart='/usr/bin/pacman' -Syyuu --noconfirm -q
ExecStart='/usr/bin/sync'
ExecStart='/usr/bin/systemctl' reboot

• See Update Times for OnCalendar values ²⁾

sudo -e '/etc/systemd/system/arch-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'arch-up.timer' --now && sudo systemctl start 'arch-up' && sudo systemctl status 'arch-up' -l

[Unit]
Description=Software Package Maintenance and Updater
After=NetworkManager-wait-online.service

[Timer]
OnCalendar=*-*-* 06:10:00
Persistent=true

[Install]
WantedBy=timers.target

• https://www.archlinux.org/mirrorlist

• Grabs US mirrors (IPv4, HTTPS)

sudo -e '/etc/systemd/system/mirrors-up.service'

[Service]
Type=oneshot
ExecStart='/usr/bin/wget' 'https://www.archlinux.org/mirrorlist/?country=US&protocol=https&ip_version=4' -O '/tmp/mirrorlist'
ExecStart='/usr/bin/sed' -i 's/#Server/Server/g' '/tmp/mirrorlist'
ExecStart='/usr/bin/mv' '/tmp/mirrorlist' '/etc/pacman.d/mirrorlist'
ExecStart='/usr/bin/sync'

sudo -e '/etc/systemd/system/mirrors-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'mirrors-up.timer' --now && sudo systemctl start 'mirrors-up' && sudo systemctl status 'mirrors-up' -l

[Unit]
Description=Pacman Mirrorlist Generator
After=NetworkManager-wait-online.service

[Timer]
OnCalendar=weekly
Persistent=true

[Install]
WantedBy=timers.target

• https://github.com/StevenBlack/hosts

sudo -e '/etc/systemd/system/hosts-up.service'

[Service]
Type=oneshot
ExecStart='/usr/bin/wget' 'https://github.com/StevenBlack/hosts/archive/master.zip' -O '/tmp/master.zip'
ExecStart='/usr/bin/unzip' '/tmp/master.zip' -d '/tmp'
ExecStart='/usr/bin/python3' '/tmp/hosts-master/updateHostsFile.py' --auto --replace
ExecStart='/usr/bin/rm' -Rf '/tmp/master.zip' '/tmp/hosts-master'
ExecStart='/usr/bin/sync'

sudo -e '/etc/systemd/system/hosts-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'hosts-up.timer' --now && sudo systemctl start 'hosts-up' && sudo systemctl status 'hosts-up' -l

[Unit]
Description=Hosts File Protection Updater
After=NetworkManager-wait-online.service

[Timer]
OnCalendar=weekly
Persistent=true

[Install]
WantedBy=timers.target

grep 'MHz' '/proc/cpuinfo'

watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo'

df -hT

gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;'