• openSUSE ¹⁾
• Tumbleweed ²⁾
• GNOME ^{3) 4)}

• http://download.opensuse.org/tumbleweed/iso/

• ISO and SHA256 hash

http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso

https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso.sha256

• For LiveUSB

https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-XFCE-Live-x86_64-Current.iso

• EFI/opensuse/grubx64.efi ⁵⁾
• XFS, no separate /home, separate swap partition enlarged to RAM for suspend

• https://github.com/StevenBlack/hosts/
• Using Unified hosts + fakenews + gambling

wget -O '/tmp/hosts-tmp' 'https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling/hosts' && sudo cp '/etc/hosts' '/etc/hosts-bak' && sudo mv '/tmp/hosts-tmp' '/etc/hosts' && sync

cat '/etc/hosts' | grep 'Date:'

sudo -e '/etc/hosts'

• PackageKit is an long-standing, consistent annoyance when using zypper at random times
• This uninstalls it, and prevents it from being automatically re-installed
• This was still necessary as of 2021/04/15

sudo systemctl stop 'packagekit' && sudo zypper remove 'PackageKit' && sync

sudo zypper addlock 'PackageKit'

• http://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/Essentials

• Repository Priority: 98
• Provides extended multimedia support

sudo rpm --import 'http://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/Essentials/repodata/repomd.xml.key' && sudo zypper addrepo --check --gpgcheck-strict --refresh --priority '98' --name 'Packman Essentials repository (openSUSE_Tumbleweed)' 'http://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/Essentials/' 'packman-essentials'

• https://keybase.io

• Repository Priority: 98
• Provides the Keybase GUI client

• Repo is added with --no-gpgcheck, see GitHub issue #24384

sudo rpm --import 'https://keybase.io/docs/server_security/code_signing_key.asc' && sudo zypper addrepo --no-gpgcheck --refresh 'http://prerelease.keybase.io/rpm/$basearch' 'Keybase' && sudo zypper mr -p 98 'Keybase'

• http://download.opensuse.org/tumbleweed/repo/

sudo zypper modifyrepo --disable --medium-type 'hd'

sudo zypper clean --all && sudo zypper refresh --force --services && sudo zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync

sudo fwupdmgr refresh --force && sudo fwupdmgr update --verbose

flatpak update && sudo flatpak update

• Installs nano
• Sets VISUAL and EDITOR to nano via environment variable
• Sets nowrap for current user

sudo zypper install 'nano' && export 'VISUAL=nano' && export 'EDITOR=nano' && echo -e 'export VISUAL=nano\nexport EDITOR=nano' | sudo tee '/etc/profile.d/editor-nano.sh' > '/dev/null' && cat '/etc/profile.d/editor-nano.sh' && mkdir -p ~/'.config/nano' && echo 'set nowrap' | tee ~/'.config/nano/nanorc' > '/dev/null' && cat ~/'.config/nano/nanorc'

sudo zypper install evolution filezilla gimp keepassxc NetworkManager-connection-editor NetworkManager-openvpn transmission-gtk rhythmbox aria2 flashrom hdparm hplip-hpijs htop nano p7zip-full secret-tool sensors unar wget xfsprogs-scrub 

ffmpeg-4 mpv youtube-dl

• https://github.com/ckb-next/ckb-next

ckb-next

• https://keybase.io
• Make sure to run run_keybase in a Terminal after installation

keybase

• winetricks is included within the wine package and isn't a separate install
• Mesa-libd3d requires Gallium Nine either standalone or patched-Wine, and Gallium-based open-source graphics drivers ⁶⁾

wine-staging libpulse0-32bit libvulkan_radeon-32bit

Mesa-libd3d Mesa-libd3d-32bit libpulse0-32bit

torbrowser-launcher

sudo rpm --import 'https://dl-ssl.google.com/linux/linux_signing_key.pub' && sudo zypper install 'https://dl.google.com/linux/direct/google-chrome-stable_current_x86_64.rpm'

gnome-terminal

bash -c "secret-tool lookup 'keepass' 'default' | keepassxc --pw-stdin ~/'Documents/keepass.kdbx'"

gnome-terminal --command "sudo sh -c 'zypper clean --all && zypper refresh --force --services && zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync && flatpak update && wget -O '/etc/hosts' 'https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling/hosts' && sync && fstrim --all --verbose && sync && read -n '1' -s -r -p 'Done' && sleep '2''"

• Uses xfce4-terminal instead and doesn't include flatpak

xfce4-terminal --command "sudo sh -c 'zypper clean --all && zypper refresh --force --services && zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync && wget -O '/etc/hosts' 'https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling/hosts' && sync && fstrim --all --verbose && sync && read -n '1' -s -r -p 'Done' && sleep '2''"

• Listed respectively to above

• Ctrl + Alt + T
• Ctrl + Alt + Z
• Pause or F7

• http://localhost:631/admin

• Log-in as root
• Output Mode: Black Only Grayscale
• Print Quality: High-Resolution Photo
• Administration → Set As Server Default

socket://192.168.1.164:9100

• 4 Tab width
• Insert Spaces for Tab mode

• https://quad9.net
• Secured w/ECS
• See DNS servers for other DNS servers

9.9.9.11,149.112.112.11

2620:fe::11,2620:fe::fe:11

• See VPN.AC
• If using this VPN, disable IPv6 from NetworkManager

• Sort folders before files

• See Internet Radio

• May have to disable automatic firmware update check from ckb-next settings in order to prevent it from crashing on profile switch?

sudo systemctl enable 'ckb-next-daemon' --now

• See Kernel Parameters for other options

• On Ryzen, this should be left enabled in the firmware settings in all cases, but if not directly used for virtualization, should be disabled from the OS (note)

iommu=pt

• Allows use of Overdrive options for overclocking and notably increasing the Power Limit
• See Power Limit

amdgpu.ppfeaturemask=0xffffffff

cat '/sys/module/amdgpu/parameters/ppfeaturemask' | grep '4294967295'

• Wayland seems ok to use as of 2021/04/15 with GNOME 40 ⁷⁾

cat '/etc/gdm/custom.conf' | grep '#WaylandEnable' > '/dev/null' && sudo sed -i 's/'#WaylandEnable'/'WaylandEnable'/g' '/etc/gdm/custom.conf' && cat '/etc/gdm/custom.conf' | grep 'WaylandEnable'

sudo -e '/etc/gdm/custom.conf'

• Last updated: 2021/06/30

gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'send-events' 'disabled-on-external-mouse' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false' && gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas' && gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true' && gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true' && gsettings set 'org.gnome.software' 'download-updates' 'false'

• Last updated: 2021/06/30

gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'send-events' 'disabled-on-external-mouse'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false'

gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas'

gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true'

gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true'

gsettings set 'org.gnome.software' 'download-updates' 'false'

• Change x to computer name

sudo hostnamectl set-hostname 'x'

• Run after initial install

run_keybase

• General → [ ] Load previous databases on startup
• Security → [x] Use DuckDuckGo service to download website icons

secret-tool store --label='KeePass' 'keepass' 'default'

• --auto is quicker, but more things are detected by doing the full scan

sudo sensors-detect

sudo sensors-detect --auto

• ArchWiki mpv High quality configurations

mkdir -p ~/'.config/mpv' && nano ~/'.config/mpv/mpv.conf'

profile=gpu-hq
scale=ewa_lanczossharp
cscale=ewa_lanczossharp
video-sync=display-resample
interpolation
tscale=oversample

• wifi.powersave can be 2 for disabled, or 3 for enabled
• ethernet.cloned-mac-address=random breaks USB Tethering with iOS/iPhones

sudo mkdir -p '/etc/NetworkManager/conf.d' && sudo -e '/etc/NetworkManager/conf.d/99-custom.conf'

[device-mac-randomization]
wifi.scan-rand-mac-address=yes

[connection-mac-randomization]
wifi.cloned-mac-address=random

[connection]
wifi.powersave=2

[connection-mac-randomization]
ethernet.cloned-mac-address=random

• See Laptop Power Management

• See Client notes to generate/restore public key

• Enable only if a SSD is being used for Linux

sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

• XFS - ArchWiki
• Enable in all cases since it's likely both / and /boot are XFS

sudo systemctl enable 'xfs_scrub_all.timer' --now && sudo systemctl start 'xfs_scrub_all' && sync && sudo systemctl status 'xfs_scrub_all' -l

• System time - ArchWiki
• Set RTC to UTC
• Needed if Windows is installed first
• Windows should also be set to UTC

sudo timedatectl set-local-rtc '0'

timedatectl | grep local

• See Wine

• See xorg.conf Snippets
• Ideally modesetting should be used

• See Firefox if old configuration is needed, otherwise use Firefox Sync

• For workstations that run servers as a secondary directive
• For headless servers, use openSUSE TW (Server)

sudo -e '/etc/systemd/system/suse-up.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/zypper' clean --all
ExecStart='/usr/bin/zypper' --non-interactive refresh --force --services
ExecStart='/usr/bin/zypper' --non-interactive dist-upgrade --auto-agree-with-licenses --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change
ExecStartPost='/usr/bin/sync'
ExecStartPost='/usr/bin/systemctl' reboot

• 06:00 Oak

sudo -e '/etc/systemd/system/suse-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'suse-up.timer' --now

[Unit]
Description=Software Package Maintenance and Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 06:00:00
Persistent=true

[Install]
WantedBy=timers.target

• D is the destination you want the extracted files to go
• x is the ISO you want to extract files from
• No space after the -o flag is intentional
• This is primarily useful for copying Windows ISO images to a FAT32 flash drive

7z x -o'D' -y x

7z x -o'/run/media/espionage724/LTSC 2019' -y '/home/espionage724/Downloads/en_windows_10_enterprise_ltsc_2019_x64_dvd_be3c8ffb.iso' && sync && sync

• https://ytdl-org.github.io/youtube-dl/index.html

rm -f '/tmp/youtube-dl' && wget -O '/tmp/youtube-dl' 'https://yt-dl.org/downloads/latest/youtube-dl' && chmod +x '/tmp/youtube-dl'

• Change x to a URL

'/tmp/youtube-dl' --list-formats x

• Change x to a URL
• bestaudio can be changed to bestvideo for just video, or best for best video with audio

'/tmp/youtube-dl' --extract-audio --format 'bestaudio' x

• Ideally for if iOS devices will be involved

'/tmp/youtube-dl' --extract-audio --format 'bestaudio' --audio-format 'm4a' x

'/tmp/youtube-dl' --extract-audio --format 'bestaudio' --audio-format 'mp3' x

/usr/share/applications

~/.local/share/applications

/usr/share/icons/hicolor

~/.local/share/icons/hicolor

zypper packages --orphaned

sudo zypper remove --clean-deps 'x'

sudo zypper patterns --installed-only

ls '/etc/zypp/repos.d'

zypper repos --priority

rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'

sudo rpm -e x

rm -Rf ~/'.cache/thumbnails'

• Change x to schema or omit it to show all settings

gsettings list-recursively 'x'

pkcon -c '1' refresh && pkcon update

sudo fstrim --verbose --all

rm -f ~/'.config/monitors.xml' ~/'.config/monitors.xml~'

rm -f ~/'.config/pulse/'*

journalctl -e _COMM='gdm-x-session'

gio open ~/'.local/share/xorg/Xorg.1.log'

LIBGL_DEBUG='verbose' glxinfo | grep 'libgl'

• https://www.geeks3d.com/gputest/

• 1280×720

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1280' /height='720'

cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1280' /height='720'

/fullscreen /benchmark /benchmark_duration_ms='15000'

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && __NV_PRIME_RENDER_OFFLOAD='1' __GLX_VENDOR_LIBRARY_NAME='nvidia' ./GpuTest /test='fur' /width='1280' /height='720'

• 1920×1080

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1920' /height='1080'

cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1920' /height='1080'

/fullscreen /benchmark /benchmark_duration_ms='15000'

• 3840×2160

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='3840' /height='2160'

cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='3840' /height='2160'

/fullscreen /benchmark /benchmark_duration_ms='15000'

rm -Rf '/tmp/GpuTest_Linux_'* && cd ~ && sync

sudo zypper install -y 'sensors' && sudo sensors-detect --auto && sudo watch -n0.1 sensors

grep 'MHz' '/proc/cpuinfo'

watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo'

openssl ciphers -v | awk '{print $2}' | sort | uniq

• Both commands present the same information

df -hT

df --human-readable --print-type

sudo cryptsetup -v status '/dev/dm-0'

• All hdparm commands below assume actions to be performed on /dev/sda

sudo zypper install 'hdparm' && sync

sudo hdparm -I '/dev/sda'

sync && systemctl suspend

sudo blkdiscard --verbose '/dev/sda'

sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sda' && sync

sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase 'x' '/dev/sda' && sync

• NVMe Erase from the start page lands here and I usually use a Ubuntu LiveUSB to do this, hence the apt command

sudo apt install 'nvme-cli' -y && sync

sudo zypper install 'nvme-cli' -y && sync

sudo nvme format '/dev/nvme0' --reset --ses='1' --pil='0' --pi='0' --ms='0' && sync

• Could potentially cause a firmware brick or other issues with improper EFI implementations, use at own risk ⁸⁾
• Safer way is to use efibootmgr to remove boot entries individually

sudo rm -f '/sys/firmware/efi/efivars/'* || sync && sudo efibootmgr -v

• This can be used to get the Oprom version for Intel RST

sudo mdadm --detail-platform

• Came from old notes; I assume this worked at some point, but in any case, the syntax looks nice :p

sudo mdadm --create '/dev/md0' --name='RAID' --level='0' --raid-devices='3' '/dev/sda' '/dev/sdb' '/dev/sdc' --verbose

• https://nouveau.freedesktop.org/wiki/Optimus

sudo cat '/sys/kernel/debug/vgaswitcheroo/switch'

• In dsdt.dsl, look for _OSI values, along with Windows and Linux

sudo zypper install 'acpica'

sudo cp --force '/sys/firmware/acpi/tables/DSDT' ~/'dsdt.dat'

cd ~ && iasl -d ~/'dsdt.dat'

gio open ~/'dsdt.dsl'

sudo zypper remove 'acpica' && sync

• Use --reduced only for LCD/Non-CRT displays, and only as-needed ⁹⁾
• Syntax is horizontal (width), vertical (height) and refresh rate

cvt '3840' '2160' '60'

cvt --reduced '3840' '2160' '60'

--reduced

• Changes are lost after reboot
• Values after --newmode are from the above generate command, and is everything after Modeline

xrandr --newmode "3840x2160R"  533.00  3840 3888 3920 4000  2160 2163 2168 2222 +hsync -vsync

xrandr --addmode 'HDMI-A-0' '3840x2160R'

xrandr --output 'HDMI-A-0' --mode '3840x2160R'

xrandr --verbose | grep *current

• Identifier is the name of the port on the GPU the display is connected to
• Modeline is from the above generate command, including the text Modeline
• PreferredMode is the custom resolution name generated

Section "Monitor"
    Identifier  "HDMI-A-0"
    Modeline x
    Option      "PreferredMode" "3840x2160R"
EndSection

• The following commands with an asterisk expect only one backlight controller at /sys/class/backlight
• This was only tested on one laptop with intel_backlight
• See Power Management notes on how to add backlight changes to a udev script
• See backlight for more details

ls '/sys/class/backlight'

cat '/sys/class/backlight/'*'/brightness'

cat '/sys/class/backlight/'*'/max_brightness'

• Change 376 to desired brightness
• Desired brightness must be under max_brightness value

echo "376" | sudo tee '/sys/class/backlight/'*'/brightness' > '/dev/null'

echo "$(cat '/sys/class/backlight/'*'/max_brightness')" | sudo tee '/sys/class/backlight/'*'/brightness' > '/dev/null'

sudo cat '/sys/kernel/debug/dri/0/i915_guc_info'

sudo cat '/sys/kernel/debug/dri/0/i915_guc_load_status'

grep -e "processor" -e "core id" -e "^$" /proc/cpuinfo

gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;'

history -cw

• Change 7ZIPNAME in 7ZIPNAME.7z to the desired archive name
• Change PASS in -pPASS to the desired password
• Change x to the file or folder to add to the archive

7za a '7ZIPNAME.7z' -p'PASS' 'x'

7za a 'x.7z' -p'x' 'x'

• x is a secret without &digits=6

sudo zypper install 'oath-toolkit'

oathtool --totp -b 'x'

sudo zypper install 'exiftool'

exiftool -all= *.* -overwrite_original