• openSUSE ¹⁾
• Tumbleweed ²⁾
• KDE ³⁾

• http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso

cd ~/'Downloads' && aria2c 'http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso' && sync

• http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso.mirrorlist

• \EFI\opensuse\grubx64.efi ⁴⁾
• XFS, no separate /home, separate swap partition enlarged to RAM for suspend

sudo systemctl mask 'packagekit' && sudo rm -Rf '/var/cache/PackageKit' && sync

• Allows packages to change vendor if needed
• Disable delta RPMs
• Cleanup unused dependencies on package remove

sudo sed -i 's/solver.dupAllowVendorChange = false/solver.dupAllowVendorChange = true/g' '/etc/zypp/zypp.conf' && echo -e 'solver.allowVendorChange = true\ndownload.use_deltarpm = false\nsolver.cleandepsOnRemove = true' | sudo tee --append '/etc/zypp/zypp.conf' > '/dev/null' && echo 'Current Settings:' && cat '/etc/zypp/zypp.conf' | grep -e 'solver.allowVendorChange = true' -e 'solver.dupAllowVendorChange = true' -e 'download.use_deltarpm = false' -e 'solver.cleandepsOnRemove = true'

• https://download.videolan.org/pub/vlc/SuSE/Tumbleweed

• Repository Priority: 98
• Provides extended multimedia support

sudo rpm --import 'http://download.videolan.org/SuSE/Tumbleweed/repodata/repomd.xml.key' && sudo zypper ar -f 'https://download.videolan.org/pub/vlc/SuSE/Tumbleweed/SuSE.repo' && sudo zypper mr -p 98 'VideoLAN repo (Tumbleweed)' && sync

• http://packman.inode.at/suse/openSUSE_Tumbleweed

• Repository Priority: 98
• Provides extended multimedia support

sudo rpm --import 'http://packman.inode.at/suse/openSUSE_Tumbleweed/repodata/repomd.xml.key' && sudo zypper ar -f 'http://packman.inode.at/suse/openSUSE_Tumbleweed/packman.repo' && sudo zypper mr -p 98 'Packman repository (openSUSE_Tumbleweed)' && sync

sudo zypper modifyrepo -d -m 'hd'

sudo zypper clean --all && sudo zypper refresh -f && sudo zypper dup && sync

• Installs nano
• Sets as system-wide default editor
• Sets nowrap and nonewlines for current user

sudo zypper --non-interactive install 'nano' && export 'EDITOR=nano' && echo 'Defaults editor = /usr/bin/nano' | sudo tee '/etc/sudoers.d/nano' > '/dev/null' && sudo cat '/etc/sudoers.d/nano' && echo -e "set nowrap\nset nonewlines" | tee ~/'.nanorc' > '/dev/null' && cat ~/'.nanorc'

sudo zypper install filezilla keepassxc p7zip p7zip-full unar aria2 gimp transmission-qt hdparm nano htop wget irqbalance

• gstreamer-plugins-libav and gstreamer-plugins-ugly are needed to generate video thumbnails for more media
• youtube-dl in the past needed ffmpeg to correct DASH containers or something like that

mpv ffmpeg gstreamer-plugins-libav gstreamer-plugins-ugly youtube-dl

• For GPUs using the intel kernel module

gstreamer-plugins-vaapi libva-utils

intel-vaapi-driver

• Pick one; SuSE is awesome enough to have many flavors :)
• winetricks is included within the wine package and isn't a separate install

wine

wine-nine Mesa-libd3d Mesa-libd3d-32bit

wine-staging

wine-staging-nine Mesa-libd3d Mesa-libd3d-32bit

torbrowser-launcher

sudo rpm --import 'https://dl-ssl.google.com/linux/linux_signing_key.pub' && sudo dnf install 'https://dl.google.com/linux/direct/google-chrome-stable_current_x86_64.rpm'

• KeePassXC ⁵⁾
• System Update

bash -c "kwallet-query --folder 'Passwords' --read-password 'keepass' 'kdewallet' | keepassxc --pw-stdin ~/'Documents/keepass.kdbx'"

konsole -e "bash -c 'sudo zypper clean --all && sudo zypper refresh -f && sudo zypper dup && sudo zypper ps -s && sudo rm -Rfv '/usr/lib64/firefox/browser/features' && sync && read -n1'"

• Listed respectively to above

• Ctrl + Alt + Z
• Pause or F7

• 4 Tab width
• Insert Spaces for Tab mode

• https://1.1.1.1/

1.1.1.1,1.0.0.1

2606:4700:4700::1111,2606:4700:4700::1001

• https://www.opennic.org/
• Last Updated: 2018/09/16

172.98.193.42,18.215.88.41,192.99.85.244,128.52.130.209

2001:470:1f06:10b::2,2001:41d0:2:73d4::100,2a00:dcc0:eda:88:245:71:858e:a15,2a00:dcc0:dead:b242::42

• Sort folders before files
• 2GB File Previews

• See Internet Radio

• 10-notch Transparency

• Fixes suspend on a Dell XPS 13 (9360) ⁶⁾

mem_sleep_default='s2idle'

• https://github.com/ckb-next/ckb-next/wiki/Troubleshooting#usbhid-quirks

usbhid.quirks='0x1b1c:0x1b3c:0x20000408,0x1b1c:0x1b38:0x20000408'

iwlwifi.11n_disable='8' iwlwifi.amsdu_size='3'

intel_iommu='on'

scsi_mod.use_blk_mq='y' dm_mod.use_blk_mq='y'

• pcie_aspm can be off if ASPM causes problems

pcie_aspm='force'

snd_hda_intel.power_save='1' snd_hda_intel.enable_msi='1'

• Can be efi, pci, acpi, or TODO: Other stuff
• efi is likely ok for platforms using UEFI
• pci is likely ok for non-UEFI platforms
• On Spinesnap, reboot=efi mostly fixes Ethernet not working after a reboot

reboot='efi'

reboot='pci'

• Decompile ACPI tables and determine best value
• 2015 on Nightwane
• 2017 on Spinesnap

acpi_osi='Linux'

acpi_osi='!' acpi_osi='Windows 2015'

acpi_osi='!' acpi_osi='Windows 2017'

• GuC firmware loading/submission requires PAVP to be enabled in BIOS

i915.enable_fbc='1' i915.fastboot='1' i915.enable_guc='3'

• enable_psr at 1 and 3 cause issues ^{7) 8)}

i915.enable_psr='2'

• If audio over HDMI or DisplayPort is wanted, set amdgpu.audio to 1

amdgpu.audio='0' amdgpu.deep_color='1'

• If audio over HDMI or DisplayPort is wanted, set radeon.audio to 1

radeon.audio='0' radeon.deep_color='1'

• iTCO_wdt controls watchdog on some Intel platforms
• sp5100_tco controls watchdog on some AMD platforms
• nowatchdog disables both soft and hard generic watchdogs
• I don't use watchdog features and apparently this reduces power usage slightly

modprobe.blacklist='iTCO_wdt,sp5100_tco' nowatchdog

• This prevents systemd from restoring previous backlight value on reboot
• This is necessary for Power Management

systemd.restore_state='0'

• This may make lower-end machines become very unresponsive; be prepared to have some safe way of rebooting

drm.debug='0xe'

sudo -e '/etc/X11/xorg.conf.d/99-libinput-custom.conf'

Section "InputClass"
    Identifier          "libinput pointer custom"
    Driver              "libinput"
    MatchIsPointer      "yes"
    Option              "AccelProfile"                  "flat"
EndSection

Section "InputClass"
    Identifier          "libinput touchpad custom"
    Driver              "libinput"
    MatchIsTouchpad     "yes"
    Option              "AccelProfile"                  "flat"
    Option              "DisableWhileTyping"            "0"
    Option              "MiddleEmulation"               "0"
    Option              "NaturalScrolling"              "0"
    Option              "ScrollMethod"                  "twofinger"
    Option              "SendEventsMode"                "disabled-on-external-mouse"
    Option              "Tapping"                       "0"
EndSection

Section "InputClass"
    Identifier          "libinput touchscreen custom"
    Driver              "libinput"
    MatchIsTouchscreen  "yes"
    Option              "AccelProfile"                  "flat"
EndSection

• The space at the beginning of this command is intentional ⁹⁾
• Change x to the KeePass database password

 echo 'x' | kwallet-query --folder 'Passwords' --write-password 'keepass' 'kdewallet'

• Change x to computer name

sudo hostnamectl set-hostname 'x'

• Enables kernel.dmesg_restrict, kernel.kptr_restrict, and kernel.sysrq

echo -e "kernel.dmesg_restrict = 1\nkernel.kptr_restrict = 1\nkernel.sysrq = 1\nvm.swappiness = 10\nvm.vfs_cache_pressure = 50" | sudo tee '/etc/sysctl.d/99-custom.conf' > '/dev/null' && cat '/etc/sysctl.d/99-custom.conf'

• wifi.powersave can be 2 for disabled, or 3 for enabled

sudo mkdir -p '/etc/NetworkManager/conf.d' && sudo -e '/etc/NetworkManager/conf.d/99-custom.conf'

[device-mac-randomization]
wifi.scan-rand-mac-address=yes

[connection-mac-randomization]
ethernet.cloned-mac-address=random
wifi.cloned-mac-address=random

[connection]
wifi.powersave=2

• Sets resample-method to soxr-vhq for current user

echo 'resample-method = soxr-vhq' | tee ~/'.config/pulse/daemon.conf' > '/dev/null' && cat ~/'.config/pulse/daemon.conf' | grep -e 'resample-method = soxr-vhq'

• See Secure Shell

• Max file sizes of 50MB

sudo mkdir -p '/etc/systemd/journald.conf.d' && echo -e "[Journal]\nSystemMaxUse=50M\nRuntimeMaxUse=50M" | sudo tee '/etc/systemd/journald.conf.d/logging.conf' > '/dev/null' && cat '/etc/systemd/journald.conf.d/logging.conf'

• Add discard after defaults for the swap mountpoint ¹⁰⁾

sudo -e '/etc/fstab'

,discard

sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

echo 'export PLASMA_USE_QT_SCALING=1' | sudo tee '/etc/profile.d/plasma-tray-scaling.sh' > '/dev/null' && cat '/etc/profile.d/plasma-tray-scaling.sh'

• https://blog.packagecloud.io/eng/2017/02/21/set-environment-variable-save-thousands-of-system-calls

echo 'export TZ=:/etc/localtime' | sudo tee '/etc/profile.d/tz.sh' > '/dev/null' && cat '/etc/profile.d/tz.sh'

sudo zypper install 'xf86-video-intel' && sudo -e '/etc/X11/xorg.conf.d/99-graphics.conf'

Section "Device"
    Identifier  "Intel iGPU"
    Driver      "intel"
    Option      "DRI"           "3"
    Option      "TearFree"      "0"
EndSection

sudo zypper install 'xf86-video-amdgpu' && sudo -e '/etc/X11/xorg.conf.d/99-graphics.conf'

Section "Device"
    Identifier  "Arctic Islands"
    Driver      "amdgpu"
EndSection

• Expects pre-SI GPUs ¹¹⁾
• For SI, CIK, and newer GPUs, use amdgpu, along with enabling si_support and cik_support respectively for the amdgpu kernel module ¹²⁾

sudo zypper install 'xf86-video-ati' && sudo -e '/etc/X11/xorg.conf.d/99-graphics.conf'

Section "Device"
    Identifier  "AMD GPU"
    Driver      "radeon"
    Option      "AccelMethod"   "EXA"
    Option      "DRI"           "3"
    Option      "TearFree"      "0"
EndSection

• If using Optimus or some other multi-GPU set-up, add the BusID option

    BusID      "PCI:0:2:0"

• Use Disconnect.me strict protection Block List

• https://www.youtube.com/html5
• Everything (including H.264) should have support

rm -fv '/tmp/profiles.ini' && nano '/tmp/profiles.ini' && sed -i 's/'CHANGEME'/'$USER'/g' '/tmp/profiles.ini'

[General]
StartWithLastProfile=1

[Profile0]
Name=default
IsRelative=1
Path=CHANGEME
Default=1

• Last updated: 2018/05/07

rm -fv '/tmp/user.js' && nano '/tmp/user.js'

/******************************************************************************
 * SECTION: Custom Stuff                                                      *
 ******************************************************************************/

user_pref("mousewheel.min_line_scroll_amount", 40);
user_pref("browser.sessionstore.interval", 300000);
user_pref("extensions.pocket.enabled", false);
user_pref("reader.parse-on-load.enabled", false);
user_pref("privacy.popups.disable_from_plugins", 3);
user_pref("network.http.referer.userControlPolicy", 2);
user_pref("extensions.screenshots.system-disabled", true);
user_pref("media.autoplay.enabled", false);
user_pref("browser.tabs.drawInTitlebar", true);
user_pref("accessibility.force_disabled", 1);

/******************************************************************************
 * SECTION: GPU Acceleration                                                  *
 ******************************************************************************/

user_pref("layout.frame_rate.precise", true);
user_pref("gfx.canvas.azure.accelerated", true);
user_pref("layers.acceleration.force-enabled", true);
user_pref("browser.tabs.remote.autostart", true);
user_pref("browser.tabs.remote.force-enable", true);
user_pref("layout.css.servo.chrome.enabled", true);
user_pref("layers.omtp.enabled", true);

/******************************************************************************
 * SECTION: Privacy Settings Overrides                                        *
 ******************************************************************************/

user_pref("dom.storage.enabled",true);

/******************************************************************************
 * END                                                                        *
 ******************************************************************************/

• Path should report the current user's username, and the text Custom user.js file is present should be visible

pkill 'firefox' && rm -Rfv ~/'.mozilla' && sync && mkdir -p ~/'.mozilla/firefox/'$USER && mv '/tmp/profiles.ini' ~/'.mozilla/firefox/profiles.ini' && mv '/tmp/user.js' ~/'.mozilla/firefox/'$USER'/user.js' && sync && cat ~/'.mozilla/firefox/profiles.ini' | grep $USER && cat ~/'.mozilla/firefox/'$USER'/user.js' | grep 'user.js'

• 7 extensions

gio open 'https://addons.mozilla.org/en-US/firefox/addon/privacy-settings/versions' && gio open 'https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions' && gio open 'https://www.eff.org/https-everywhere' && gio open 'https://www.eff.org/privacybadger' && gio open 'https://addons.mozilla.org/en-US/firefox/addon/cookie-autodelete/versions' && gio open 'https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions' && gio open 'https://addons.mozilla.org/en-US/firefox/addon/canvasblocker/versions'

• Enable Advanced Mode

• Uncheck EasyPrivacy
• Uncheck EasyList
• Check MVPS HOSTS
• Check hpHost's Ad and tracking servers
• Check Dan Pollock's hosts file

• Last updated: 2018/02/07 ¹³⁾

https://secure.fanboy.co.nz/fanboy-problematic-sites.txt
https://secure.fanboy.co.nz/r/fanboy-ultimate.txt
https://secure.fanboy.co.nz/fanboy-antifacebook.txt
https://secure.fanboy.co.nz/fanboy-antifonts.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fanboy-cookiemonster.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/popads-domains-list.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fake-news.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/enhancedstats-addon.txt

• D is the destination you want the extracted files to go
• x is the ISO you want to extract files from
• No space after the -o flag is intentional
• This is primarily useful for copying Windows ISO images to a FAT32 flash drive

7z x -o'D' -y x

7z x -o'/run/media/espionage724/WIN1803' -y '/home/espionage724/Downloads/Win10_1803_English_x64.iso' 

• Change x to a URL

youtube-dl -F x

• Download the m4a audio only format shown from the above command
• The format code is likely 140
• Change x to a URL

youtube-dl -f 140 x

/usr/share/applications

~/.local/share/applications

/usr/share/icons/hicolor

~/.local/share/icons/hicolor

ls '/etc/zypp/repos.d'

zypper lr -p

rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'

sudo rpm -e x

rm -Rf ~/'.cache/thumbnails'

sudo fstrim -v --all

gio open '/var/log/Xorg.0.log'

LIBGL_DEBUG='verbose' glxinfo | grep 'libgl'

wget -O '/tmp/GpuTest_Linux_x64.zip' 'http://www.ozone3d.net/gputest/dl/GpuTest_Linux_x64_0.7.0.zip' && unzip '/tmp/GpuTest_Linux_x64.zip' -d '/tmp' && cd '/tmp/GpuTest_Linux_x64_'* && ./GpuTest /test='fur' /width='1920' /height='1080'

rm -Rf '/tmp/GpuTest_Linux_'* && cd ~ && sync

grep 'MHz' '/proc/cpuinfo'

watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo'

df -hT

sudo cryptsetup -v status '/dev/dm-0'

sudo hdparm -I '/dev/sda'

systemctl suspend

sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda'

sudo hdparm --user-master u --security-erase 'x' '/dev/sda'

sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sda'

• Performs both security-erase and security-erase-enhanced on /dev/sda

sudo hdparm -I '/dev/sda'

sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase 'x' '/dev/sda' && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sda' && sync

• Performs both security-erase and security-erase-enhanced on /dev/sda
• Removes the first security-set-pass since this needs to be set from firmware settings

sudo hdparm -I '/dev/sda'

sudo hdparm --user-master u --security-erase 'x' '/dev/sda' && sudo hdparm --user-master u --security-set-pass 'x' '/dev/sda' && sudo hdparm --user-master u --security-erase-enhanced 'x' '/dev/sda' && sync

sudo zypper --non-interactive install 'nvme-cli' -y && sync

sudo nvme format '/dev/nvme0' --reset --ses='1' --pil='0' --pi='0' --ms='0' && sync

• This works fine on a few Acer and Dell laptops, but could potentially cause a brick with bad platform implementations, use at own risk
• Safer way is to use efibootmgr to remove boot entries

sudo rm -f '/sys/firmware/efi/efivars/'* || sync && sudo efibootmgr -v

sudo mdadm --detail-platform

• Came from old notes; I assume this worked at some point, but in any case, the syntax looks nice :p

sudo mdadm --create '/dev/md0' --name='RAID' --level='0' --raid-devices='3' '/dev/sda' '/dev/sdb' '/dev/sdc' --verbose

• https://nouveau.freedesktop.org/wiki/Optimus

sudo cat '/sys/kernel/debug/vgaswitcheroo/switch'

• In dsdt.dsl, look for _OSI values, along with Windows and Linux

sudo zypper install 'acpica'

sudo cp --force '/sys/firmware/acpi/tables/DSDT' ~/'dsdt.dat'

cd ~ && iasl -d ~/'dsdt.dat'

gio open ~/'dsdt.dsl'

sudo zypper remove 'acpica' && sync

• The following commands with an asterisk expect only one backlight controller at /sys/class/backlight
• This was only tested on one laptop with intel_backlight
• See Power Management notes on how to add backlight changes to a udev script
• See backlight for more details

ls '/sys/class/backlight'

cat '/sys/class/backlight/'*'/brightness'

cat '/sys/class/backlight/'*'/max_brightness'

• Change 376 to desired brightness
• Desired brightness must be under max_brightness value

echo "376" | sudo tee '/sys/class/backlight/'*'/brightness' > '/dev/null'

echo "$(cat '/sys/class/backlight/'*'/max_brightness')" | sudo tee '/sys/class/backlight/'*'/brightness' > '/dev/null'

sudo cat '/sys/kernel/debug/dri/0/i915_guc_info'

sudo cat '/sys/kernel/debug/dri/0/i915_guc_load_status'

grep -e "processor" -e "core id" -e "^$" /proc/cpuinfo

gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;'

sudo firewall-cmd --list-all

sudo firewall-cmd --get-service

sudo firewall-cmd --reload

• Add --permanent as-needed to allow the rule to persist

sudo firewall-cmd --add-service=x

sudo firewall-cmd --remove-service=x

• Add --permanent as-needed to allow the rule to persist
• Change tcp to udp as-needed

sudo firewall-cmd --add-port=x/tcp

sudo firewall-cmd --remove-port=x/tcp

history -cw

• Change x in x.7z to the desired archive name
• Change CHANGEME in -pCHANGEME to the desired password

sudo zypper install 'p7zip-full'

7za a 'x.7z' -p'CHANGEME'

• x is a secret without &digits=6

sudo zypper install 'oath-toolkit'

oathtool --totp -b 'x'

sudo zypper install 'exiftool'

exiftool -all= *.* -overwrite_original