• Fedora Workstation ¹⁾
• 34

• https://getfedora.org/en/workstation/download

• https://dl.fedoraproject.org/pub/alt/live-respins

• EFI/fedora/shimx64.efi ²⁾
• Remove /home, set /boot and / to use XFS, expand /

• https://github.com/StevenBlack/hosts/
• Unified hosts + fakenews + gambling

wget -O '/tmp/hosts-tmp' 'https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling/hosts' && sudo cp '/etc/hosts' '/etc/hosts-bak' && sudo mv '/tmp/hosts-tmp' '/etc/hosts' && sudo restorecon -F -I -R '/etc/hosts' && sync

cat '/etc/hosts' | grep 'Date:'

sudo -e '/etc/hosts'

• Disables Delta RPMs with deltarpm=false
• Downloads packages from the fastest mirror with fastestmirror=true

cat '/etc/dnf/dnf.conf' | grep 'deltarpm=false' || echo 'deltarpm=false' | sudo tee --append '/etc/dnf/dnf.conf' > '/dev/null' && cat '/etc/dnf/dnf.conf'

cat '/etc/dnf/dnf.conf' | grep 'fastestmirror=true' || echo 'fastestmirror=true' | sudo tee --append '/etc/dnf/dnf.conf' > '/dev/null' && cat '/etc/dnf/dnf.conf'

• Useful for fresh installations where repo(s) can be added, and then package updates can be ran afterwards unattended without having sudo timeout and re-prompt for the password

sudo su

• https://rpmfusion.org

• https://download1.rpmfusion.org/free/fedora

sudo rpm --import 'https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-free-fedora-2020' && sync && sudo dnf install 'https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-'$(rpm -E %fedora)'.noarch.rpm' -y && sync

• https://download1.rpmfusion.org/nonfree/fedora

sudo rpm --import 'https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-nonfree-fedora-2020' && sync && sudo dnf install 'https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-'$(rpm -E %fedora)'.noarch.rpm' -y && sync

• https://fedoraproject.org/wiki/RawhideKernelNodebug
• https://dl.fedoraproject.org/pub/alt/rawhide-kernel-nodebug

sudo dnf config-manager --add-repo='http://dl.fedoraproject.org/pub/alt/rawhide-kernel-nodebug/fedora-rawhide-kernel-nodebug.repo'

sudo dnf distro-sync -y && sync

sudo dnf autoremove

• Removes the initially-installed kernel in order to fix ``dnf autoremove`` if it's broken
• This will vary depending on the Fedora image version used

sudo dnf list --installed 'kernel'*

sudo dnf remove *5.3.7* && sync

sudo fwupdmgr refresh --force && sudo fwupdmgr update --verbose

flatpak update && sudo flatpak update

• Installs nano
• Sets VISUAL and EDITOR to nano via environment variable
• Sets nowrap for current user

sudo dnf install 'nano' -y && export 'VISUAL=nano' && export 'EDITOR=nano' && echo -e 'export VISUAL=nano\nexport EDITOR=nano' | sudo tee '/etc/profile.d/editor-nano.sh' > '/dev/null' && cat '/etc/profile.d/editor-nano.sh' && mkdir -p ~/'.config/nano' && echo 'set nowrap' | tee ~/'.config/nano/nanorc' > '/dev/null' && cat ~/'.config/nano/nanorc'

• https://rpmfusion.org/Configuration
• Covers AppStream data and missing Multimedia packages

sudo dnf groupupdate 'core' && sudo dnf groupupdate 'multimedia' --setop='install_weak_deps=False' --exclude='PackageKit-gstreamer-plugin' && sudo dnf groupupdate 'sound-and-video' && sync

sudo dnf install evolution filezilla gimp keepassxc transmission-gtk aria2 hdparm htop lm_sensors p7zip p7zip-plugins unar wget irqbalance xfsprogs-xfs_scrub 

• ffmpeg was needed for youtube-dl to correct DASH containers

mpv youtube-dl

steam

akmod-nvidia

• https://keybase.io
• Run run_keybase in a Terminal after installation

'https://prerelease.keybase.io/keybase_amd64.rpm'

• Necessary for Xbox 360 controllers
• Not necessary for a Steam Controller

kernel-modules-extra

• https://github.com/ckb-next/ckb-next

ckb-next

wine-dxvk winetricks

torbrowser-launcher

sudo rpm --import 'https://dl-ssl.google.com/linux/linux_signing_key.pub' && sudo dnf install 'https://dl.google.com/linux/direct/google-chrome-stable_current_x86_64.rpm'

gnome-terminal

bash -c "secret-tool lookup 'keepass' 'default' | keepassxc --pw-stdin ~/'Documents/keepass.kdbx'"

gnome-terminal --command "sudo sh -c 'dnf clean 'all' && dnf distro-sync -y && sync && flatpak update && wget -O '/etc/hosts' 'https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling/hosts' && restorecon -F -I -R '/etc/hosts' && sync && fstrim --all --verbose && sync && read -n '1' -s -r -p 'Done' && sleep '2''"

• Listed respectively to above

• Ctrl + Alt + T
• Ctrl + Alt + Z
• Pause or F7

• http://localhost:631/admin

• Select the en, en printer driver
• Output Mode: Black Only Grayscale
• Print Quality: High-Resolution Photo
• Administration → Set As Server Default

socket://192.168.1.164:9100

• 4 Tab width
• Insert Spaces for Tab mode

• https://quad9.net
• Secured w/ECS
• See DNS servers for other DNS servers

9.9.9.11,149.112.112.11

2620:fe::11,2620:fe::fe:11

• See VPN.AC
• If using this VPN, disable IPv6 from NetworkManager

• Sort Folders Before Files

• See Internet Radio

• 10-notch Transparency

• https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html

echo 'kernel.sysrq = 1' | sudo tee '/etc/sysctl.d/99-sysrq.conf' > '/dev/null' && cat '/etc/sysctl.d/99-sysrq.conf'

• Add commands within args

sudo grubby --update-kernel='ALL' --args=''

• See Kernel Parameters for other options

• Allows use of Overdrive options for overclocking and notably increasing the Power Limit

amdgpu.ppfeaturemask=0xffffffff

sudo grubby --args='amdgpu.ppfeaturemask=0xffffffff' --update-kernel='ALL'

cat '/sys/module/amdgpu/parameters/ppfeaturemask' | grep '4294967295'

• https://extensions.gnome.org/extension/701/top-panel-workspace-scroll/

• https://github.com/timbertson/gnome-shell-scroll-workspaces
• Unsure if this still works or if it's as up-to-date

rm -Rf ~/'.local/share/gnome-shell/extensions/scroll-workspaces@gfxmonk.net' '/tmp/gnome-shell-scroll-workspaces-master.zip' '/tmp/gnome-shell-scroll-workspaces-master' && wget -O '/tmp/gnome-shell-scroll-workspaces-master.zip' 'https://github.com/timbertson/gnome-shell-scroll-workspaces/archive/master.zip' && unzip '/tmp/gnome-shell-scroll-workspaces-master.zip'  -d '/tmp' && mkdir -p ~/'.local/share/gnome-shell/extensions' && mv '/tmp/gnome-shell-scroll-workspaces-master/scroll-workspaces' ~/'.local/share/gnome-shell/extensions/scroll-workspaces@gfxmonk.net' && gnome-extensions enable 'scroll-workspaces@gfxmonk.net' && sync

gnome-extensions disable 'scroll-workspaces@gfxmonk.net' && rm -Rf ~/'.local/share/gnome-shell/extensions/scroll-workspaces@gfxmonk.net' && sync

• :!! As of 2021/08, Wayland works well enough for everything

cat '/etc/gdm/custom.conf' | grep '#WaylandEnable' > '/dev/null' && sudo sed -i 's/'#WaylandEnable'/'WaylandEnable'/g' '/etc/gdm/custom.conf' && cat '/etc/gdm/custom.conf' | grep 'WaylandEnable'

sudo -e '/etc/gdm/custom.conf'

• Last updated: 2021/06/14

gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'send-events' 'disabled-on-external-mouse' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false' && gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas' && gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true' && gsettings set 'org.gnome.software' 'download-updates' 'false' && gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true'

• Last updated: 2021/06/14

gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'send-events' 'disabled-on-external-mouse'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false'

gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas'

gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true'

gsettings set 'org.gnome.software' 'download-updates' 'false'

gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true'

• Change x to computer name

hostnamectl set-hostname 'x'

• Run after initial install

run_keybase

• General → [ ] Load previous databases on startup
• Security → [x] Use DuckDuckGo service to download website icons

secret-tool store --label='KeePass' 'keepass' 'default'

sudo sensors-detect --auto

• ArchWiki mpv High quality configurations

mkdir -p ~/'.config/mpv' && nano ~/'.config/mpv/mpv.conf'

profile=gpu-hq
scale=ewa_lanczossharp
cscale=ewa_lanczossharp
video-sync=display-resample
interpolation
tscale=oversample

• wifi.powersave can be 2 for disabled, or 3 for enabled
• ethernet.cloned-mac-address=random breaks USB Tethering with iOS/iPhones

sudo -e '/etc/NetworkManager/conf.d/99-custom.conf'

[device-mac-randomization]
wifi.scan-rand-mac-address=yes

[connection-mac-randomization]
wifi.cloned-mac-address=random

[connection]
wifi.powersave=2

[connection-mac-randomization]
ethernet.cloned-mac-address=random

• See Laptop Power Management

• See Client notes to generate/restore public key

• Enable only if a SSD is being used for Linux

sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

• XFS - ArchWiki
• Enable in all cases since it's likely both / and /boot are XFS

sudo systemctl enable 'xfs_scrub_all.timer' --now && sudo systemctl start 'xfs_scrub_all' && sync && sudo systemctl status 'xfs_scrub_all' -l

• System time - ArchWiki
• Set RTC to UTC
• Needed if Windows is installed first
• Windows should also be set to UTC

sudo timedatectl set-local-rtc '0'

timedatectl | grep local

• See Wine

• See xorg.conf Snippets

• With Fedora 34 as of 2021/05/12, the amdgpu Xorg DDX driver has the screen more warm/yellowish and breaks calibration
• TODO: Report this as a bug somewhere
• This doesn't happen with modesetting on Xorg, nor at all with GNOME on Wayland
• Since amdgpu is installed and used by-default on Xorg, removing it causes modesetting to be used instead
• Contrast - Lagom LCD test

sudo dnf remove 'xorg-x11-drv-amdgpu' && sync

• See Firefox if old configuration is needed, otherwise use Firefox Sync

https://dns11.quad9.net/dns-query

• For workstations that run servers as a secondary directive
• For headless servers, use Fedora Server

sudo systemctl enable --now 'sshd'

sudo -e '/etc/systemd/system/fedora-up.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/dnf' clean 'all'
ExecStart='/usr/bin/dnf' distro-sync -y
ExecStart='/usr/bin/dnf' autoremove -y
ExecStartPost='/usr/bin/sync'
ExecStartPost='/usr/bin/systemctl' reboot

• 03:00 Oak

sudo -e '/etc/systemd/system/fedora-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'fedora-up.timer' --now

[Unit]
Description=Software Package Maintenance and Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 03:00:00
Persistent=true

[Install]
WantedBy=timers.target

• D is the destination you want the extracted files to go
• x is the ISO you want to extract files from
• No space after the -o flag is intentional
• This is primarily useful for copying Windows ISO images to a FAT32 flash drive

7z x -o'D' -y x

7z x -o'/run/media/espionage724/LTSC 2019' -y '/home/espionage724/Downloads/en_windows_10_enterprise_ltsc_2019_x64_dvd_be3c8ffb.iso' && sync && sync

• https://ytdl-org.github.io/youtube-dl/index.html

rm -f '/tmp/youtube-dl' && wget -O '/tmp/youtube-dl' 'https://yt-dl.org/downloads/latest/youtube-dl' && chmod +x '/tmp/youtube-dl'

• Change x to a URL

'/tmp/youtube-dl' --list-formats x

• Change x to a URL
• bestaudio can be changed to bestvideo for just video, or best for best video with audio

'/tmp/youtube-dl' --extract-audio --format 'bestaudio' x

• Ideally for if iOS devices will be involved

'/tmp/youtube-dl' --extract-audio --format 'bestaudio' --audio-format 'm4a' x

'/tmp/youtube-dl' --extract-audio --format 'bestaudio' --audio-format 'mp3' x

/usr/share/applications

~/.local/share/applications

/usr/share/icons/hicolor

~/.local/share/icons/hicolor

sudo -e '/etc/modprobe.d/anaconda-blacklist.conf'

gio open '/etc/yum.repos.d'

sudo dnf history

• Change x to a transaction ID found above

sudo dnf history undo x

rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'

sudo rpm -e x

rm -Rf ~/'.cache/thumbnails'

• Change x to schema or omit it to show all settings

gsettings list-recursively 'x'

pkcon -c '1' refresh && pkcon update

sudo fstrim --verbose --all

sudo touch '/.autorelabel'

rm -f ~/'.config/monitors.xml' ~/'.config/monitors.xml~'

rm -f ~/'.config/pulse/'*

journalctl -e _COMM='gdm-x-session'

gio open ~/'.local/share/xorg/Xorg.1.log'

LIBGL_DEBUG='verbose' glxinfo | grep 'libgl'

• https://www.geeks3d.com/gputest/

• 1280×720

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1280' /height='720'

cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1280' /height='720'

/fullscreen /benchmark /benchmark_duration_ms='15000'

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && __NV_PRIME_RENDER_OFFLOAD='1' __GLX_VENDOR_LIBRARY_NAME='nvidia' ./GpuTest /test='fur' /width='1280' /height='720'

• 1920×1080

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1920' /height='1080'

cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1920' /height='1080'

/fullscreen /benchmark /benchmark_duration_ms='15000'

• 3840×2160

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='3840' /height='2160'

cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='3840' /height='2160'

/fullscreen /benchmark /benchmark_duration_ms='15000'

rm -Rf '/tmp/GpuTest_Linux_'* && cd ~ && sync

sudo dnf install 'lm_sensors' -y && sudo sensors-detect --auto && sudo watch -n0.1 sensors

grep 'MHz' '/proc/cpuinfo'

watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo'

openssl ciphers -v | awk '{print $2}' | sort | uniq

• Both commands present the same information

df -hT

df --human-readable --print-type

sudo cryptsetup -v status '/dev/dm-0'

• All hdparm commands below assume actions to be performed on /dev/sda

sudo dnf install 'hdparm' && sync

sudo hdparm -I '/dev/sda'

sync && systemctl suspend

sudo blkdiscard --verbose '/dev/sda'

sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sda' && sync

sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase 'x' '/dev/sda' && sync

• NVMe Erase from the start page lands here and I usually use a Ubuntu LiveUSB to do this, hence the apt command

sudo apt install 'nvme-cli' -y && sync

sudo dnf install 'nvme-cli' -y && sync

sudo nvme format '/dev/nvme0' --reset --ses='1' --pil='0' --pi='0' --ms='0' && sync

• Could potentially cause a firmware brick or other issues with improper EFI implementations, use at own risk ³⁾
• Safer way is to use efibootmgr to remove boot entries individually

sudo rm -f '/sys/firmware/efi/efivars/'* || sync && sudo efibootmgr -v

• This can be used to get the Oprom version for Intel RST

sudo mdadm --detail-platform

• Came from old notes; I assume this worked at some point, but in any case, the syntax looks nice :p

sudo mdadm --create '/dev/md0' --name='RAID' --level='0' --raid-devices='3' '/dev/sda' '/dev/sdb' '/dev/sdc' --verbose

• https://nouveau.freedesktop.org/wiki/Optimus

sudo cat '/sys/kernel/debug/vgaswitcheroo/switch'

• In dsdt.dsl, look for _OSI values, along with Windows and Linux

sudo dnf install 'acpica-tools'

sudo cp --force '/sys/firmware/acpi/tables/DSDT' ~/'dsdt.dat'

cd ~ && iasl -d ~/'dsdt.dat'

gio open ~/'dsdt.dsl'

sudo dnf remove 'acpica-tools' && sync

• https://unix.stackexchange.com/a/114398

sudo dnf install 'monitor-edid'

monitor-edid

• Use --reduced only for LCD/Non-CRT displays, and only as-needed ⁴⁾
• Syntax is horizontal (width), vertical (height) and refresh rate

cvt '3840' '2160' '60'

cvt --reduced '3840' '2160' '60'

--reduced

• Changes are lost after reboot
• Values after --newmode are from the above generate command, and is everything after Modeline

xrandr --newmode "3840x2160R"  533.00  3840 3888 3920 4000  2160 2163 2168 2222 +hsync -vsync

xrandr --addmode 'HDMI-A-0' '3840x2160R'

xrandr --output 'HDMI-A-0' --mode '3840x2160R'

xrandr --verbose | grep *current

• Identifier is the name of the port on the GPU the display is connected to
• Modeline is from the above generate command, including the text Modeline
• PreferredMode is the custom resolution name generated

Section "Monitor"
    Identifier  "HDMI-A-0"
    Modeline x
    Option      "PreferredMode" "3840x2160R"
EndSection

• The following commands with an asterisk expect only one backlight controller at /sys/class/backlight
• This was only tested on one laptop with intel_backlight
• See Power Management notes on how to add backlight changes to a udev script
• See backlight for more details

ls '/sys/class/backlight'

cat '/sys/class/backlight/'*'/brightness'

cat '/sys/class/backlight/'*'/max_brightness'

• Change 376 to desired brightness
• Desired brightness must be under max_brightness value

echo "376" | sudo tee '/sys/class/backlight/'*'/brightness' > '/dev/null'

echo "$(cat '/sys/class/backlight/'*'/max_brightness')" | sudo tee '/sys/class/backlight/'*'/brightness' > '/dev/null'

sudo cat '/sys/kernel/debug/dri/0/i915_guc_info'

sudo cat '/sys/kernel/debug/dri/0/i915_guc_load_status'

grep -e "processor" -e "core id" -e "^$" /proc/cpuinfo

gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;'

history -cw

• Change 7ZIPNAME in 7ZIPNAME.7z to the desired archive name
• Change PASS in -pPASS to the desired password
• Change x to the file or folder to add to the archive

7za a '7ZIPNAME.7z' -p'PASS' 'x'

7za a 'x.7z' -p'x' 'x'

• x is a secret without &digits=6

sudo dnf install 'oathtool'

oathtool --totp -b 'x'

sudo dnf install 'perl-Image-ExifTool'

exiftool -all= *.* -overwrite_original