RoE | Wiki

User Tools

Site Tools

Trace:
distros:opensuse_tumbleweed_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Next revisionBoth sides next revision
distros:opensuse_tumbleweed_server [2021/06/18 18:47] – Sean Rhonedistros:opensuse_tumbleweed_server [2024/05/10 20:59] – Sean Rhone
Line 7: Line 7:
 ====== Download ====== ====== Download ======
  
-  * DVD ISO and SHA256 hash+  * http://download.opensuse.org/tumbleweed/iso/ 
 + 
 +===== DVD + Xfce Live ===== 
 + 
 +  * Downloads the latest DVD (with SHA256 compare) and Xfce Live images with ''aria2c'' 
 + 
 +  cd ~/'Downloads' && aria2c 'https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso.sha256' && aria2c 'http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso' && aria2c 'https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-XFCE-Live-x86_64-Current.iso' && sha256sum ~/'Downloads/openSUSE-Tumbleweed-DVD-x86_64-'*'-Media.iso' && cat ~/'Downloads/openSUSE-Tumbleweed-DVD-x86_64-'*'-Media.iso.sha256' && sync 
 + 
 +===== DVD ===== 
 + 
 +  * ISO and SHA256 hash
  
   http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso   http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso
  
   https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso.sha256   https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso.sha256
 +
 +===== Xfce =====
 +
 +  * For LiveUSB
 +
 +  https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-XFCE-Live-x86_64-Current.iso
  
 ====== Installation Notes ====== ====== Installation Notes ======
  
-  * ''EFI/opensuse/grubx64.efi'' ((EFI file to boot and in the case of Acer laptops, add to SecureBoot trust; doesn't matter if SecureBoot is enabled or not)) +===== Partitioning ===== 
-  * XFS, no separate ''/home'', separate ''swap'' partition enlarged to RAM for suspend+ 
 +  - ext4 
 +  - No separate ''/home'' 
 +  - :!: Separate ''swap'' with suspend resize
  
 ====== Software ====== ====== Software ======
Line 48: Line 67:
 **** ****
  
-  sudo zypper install p7zip unar aria2 hdparm nano htop wget irqbalance+  sudo zypper install aria2 binutils chrony htop 7zip sensors unar 
  
-===== Keybase =====+===== CPU microcode =====
  
-  * https://keybase.io +  ucode-amd
-  * :!: TODO: Figure out how to do automated bcakups to KBFS +
-  * :!: This page shows up on Google search; for desktop openSUSE and the GUI Keybase client, add the repo shown on [[distros:opensuse_tumbleweed_gnome#keybase]]+
  
-  keybase+  ucode-intel
  
 ====== Settings ====== ====== Settings ======
 +
 +===== Laptop Server =====
 +
 +  * This tells ''systemd'' to ignore Lid close events and prevents system suspend
 +
 +  sudo mkdir -p '/etc/systemd/logind.conf.d' && echo -e "[Login]\nHandleLidSwitch=ignore" | sudo tee '/etc/systemd/logind.conf.d/99-laptop-server.conf' > '/dev/null'
 +
 +  sudo -e '/etc/systemd/logind.conf.d/99-laptop-server.conf'
 +
 +===== Dell Fan Profile =====
 +
 +  * https://www.dell.com/support/kbdoc/en-us/000177768/guide-to-dell-power-manager
 +
 +  sudo zypper install -y 'python3-smbios-utils' && sudo smbios-thermal-ctl --set-thermal-mode='performance' && sudo zypper remove --clean-deps -y 'python3-smbios-utils'
 +
 +===== GRUB =====
 +
 +==== Config ====
 +
 +  * :!: [[notes:kernel_parameters|More Kernel Parameters]]
 +
 +  sudo yast2 'bootloader'
 +
 +==== Oak ====
 +
 +  * Last updated: 2024/05/10
 +
 +<code>preempt='none' nohz='off' pci='pcie_bus_perf,realloc,pcie_scan_all,big_root_window' pcie_aspm='off' reboot='pci'</code>
  
 ===== Network ===== ===== Network =====
Line 68: Line 113:
 ==== Hostname/DNS ==== ==== Hostname/DNS ====
  
 +  * https://quad9.net/
   * See [[notes:dns_servers|DNS servers]] for other DNS servers   * See [[notes:dns_servers|DNS servers]] for other DNS servers
  
Line 74: Line 120:
   * Name Server 1: ''9.9.9.9''   * Name Server 1: ''9.9.9.9''
   * Name Server 2: ''149.112.112.112''   * Name Server 2: ''149.112.112.112''
-  * Name Server 3: ''1.1.1.1''+  * Name Server 3: ''1.1.1.2''
  
 ==== Routing ==== ==== Routing ====
Line 81: Line 127:
   * Gateway: ''192.168.1.1''   * Gateway: ''192.168.1.1''
   * Device: ''-''   * Device: ''-''
- 
-===== Hostname ===== 
- 
-  * Change ''x'' to computer name 
- 
-  sudo hostnamectl set-hostname 'x' 
  
 ===== lm_sensors ===== ===== lm_sensors =====
  
-****+  sudo sensors-detect --auto
  
-  sudo sensors-detect --auto+  sudo -e '/etc/sysconfig/lm_sensors'
  
 ===== Secure Shell ===== ===== Secure Shell =====
  
-  * See [[Clients:Secure Shell]]+  * See [[clients:secure_shell#generate_ssh_keys|Client - Generate SSH Keys]] notes to generate/restore public key
  
-===== TRIM =====+===== Disk Drives =====
  
 ==== Swap ==== ==== Swap ====
Line 107: Line 147:
   sudo -e '/etc/fstab'   sudo -e '/etc/fstab'
  
-  ,discard+  ,discard=once
  
-==== Service ====+==== Trim ====
  
 **** ****
Line 115: Line 155:
   sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l   sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l
  
-===== UTC =====+===== Time =====
  
-  * [[https://wiki.archlinux.org/index.php/System_time#Time_standard|ArchWiki]] +  * :!: 2024/05/06: Even though ''chrony'' does NTP sync, it doesn't seem to write it to the hardware clock which is usually wrong after a CMOS reset ((starting Firefox quickly after rebooting has a wrong system clock certificate failure error)) 
-  * Set RTC to UTC+  * This sets the hardware clock to the current system/OS clock 
 +  * TODO: Figure out ''chrony'' command to do NTP sync
  
-  sudo timedatectl set-local-rtc '0' +  sudo hwclock --systohc
- +
-==== Verify ==== +
- +
-**** +
- +
-  timedatectl | grep local+
  
 ====== Automatic Updates ====== ====== Automatic Updates ======
Line 158: Line 193:
 [Timer] [Timer]
 OnCalendar=*-*-* 06:00:00 OnCalendar=*-*-* 06:00:00
-Persistent=true 
- 
-[Install] 
-WantedBy=timers.target</code> 
- 
-====== External Backup ====== 
- 
-===== fstab ===== 
- 
-  * Expects a drive of some kind with a XFS partition at ''/dev/sdb1'' 
- 
-  sudo mkdir -p '/mnt/USB' && sudo -e '/etc/fstab' 
- 
-<code> 
-# USB 
-/dev/sdb1 /mnt/USB xfs rw,relatime,attr2,inode64,noquota 0 2</code> 
- 
-  sudo mount '/dev/sdb1' 
- 
-===== Service ===== 
- 
-  sudo -e '/etc/systemd/system/backup-external.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/backup-external.service' 
- 
-<code> 
-[Service] 
-Type=oneshot 
-ExecStartPre='/usr/bin/sync' 
-ExecStart='/usr/bin/rsync' -r '/home/CHANGEME/backups' '/mnt/USB' --verbose --ignore-existing 
-ExecStartPost='/usr/bin/sync'</code> 
- 
-===== Timer ===== 
- 
-  sudo -e '/etc/systemd/system/backup-external.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'backup-external.timer' --now 
- 
-<code> 
-[Unit] 
-Description=Backup Backups to External Device 
- 
-[Timer] 
-OnCalendar=*-*-* 07:00:00 
 Persistent=true Persistent=true
  
Line 205: Line 200:
 ====== Notable Folders and Commands ====== ====== Notable Folders and Commands ======
  
-===== Zypper ===== +  * See [[notes:misc_linux]]
- +
-==== Find Orphans ==== +
- +
-**** +
- +
-  zypper packages --orphaned +
- +
-==== Remove Package and Deps ==== +
- +
-**** +
- +
-  sudo zypper remove --clean-deps 'x' +
- +
-==== Show Installed Patterns ==== +
- +
-**** +
- +
-  sudo zypper patterns --installed-only +
- +
-==== Folder ==== +
- +
-**** +
- +
-  ls '/etc/zypp/repos.d' +
- +
-==== List ==== +
- +
-**** +
- +
-  zypper repos --priority +
- +
-===== GPG Keys ===== +
- +
-==== Check Keys ==== +
- +
-**** +
- +
-  rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' +
- +
-==== Remove Keys ==== +
- +
-**** +
- +
-  sudo rpm -e x +
- +
-===== fstrim ===== +
- +
-**** +
- +
-  sudo fstrim --verbose --all +
- +
-===== Show Sensors ===== +
- +
-**** +
- +
-  sudo zypper install -y 'sensors' && sudo sensors-detect --auto && sudo watch -n0.1 sensors +
- +
-===== Show CPU Frequency ===== +
- +
-  grep 'MHz' '/proc/cpuinfo' +
- +
-  watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo' +
- +
-===== OpenSSL Supported Ciphers ===== +
- +
-**** +
- +
-  openssl ciphers -v | awk '{print $2}' | sort | uniq +
- +
-===== Partition Information ===== +
- +
-  * Both commands present the same information +
- +
-  df -hT +
- +
-  df --human-readable --print-type +
- +
-===== Encryption Information ===== +
- +
-**** +
- +
-  sudo cryptsetup -v status '/dev/dm-0' +
- +
-===== HT/SMT Information ===== +
- +
-**** +
- +
-  grep -e "processor" -e "core id" -e "^$" /proc/cpuinfo +
- +
-===== Optimal GCC compiler flags ===== +
- +
-**** +
- +
-  gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;' +
- +
-===== firewalld ===== +
- +
-==== List Active Rules ==== +
- +
-**** +
- +
-  sudo firewall-cmd --list-all +
- +
-==== List Available Services ==== +
- +
-**** +
- +
-  sudo firewall-cmd --get-services +
- +
-==== Show Service Info ==== +
- +
-  * Change ''x'' to name of a service from above +
-  * This shows what ports and protocols a service covers +
- +
-  sudo firewall-cmd --info-service=x +
- +
-==== Reload ==== +
- +
-**** +
- +
-  sudo firewall-cmd --reload +
- +
-==== Add/Remove Service ==== +
- +
-  * Add ''--permanent'' as-needed to allow the rule to persist +
- +
-  sudo firewall-cmd --add-service=x +
- +
-  sudo firewall-cmd --remove-service=x +
- +
-==== Add/Remove Port ==== +
- +
-  * Add ''--permanent'' as-needed to allow the rule to persist +
-  * Change ''tcp'' to ''udp'' as-needed +
- +
-  sudo firewall-cmd --add-port=x/tcp +
- +
-  sudo firewall-cmd --remove-port=x/tcp+
  
/var/www/wiki/data/pages/distros/opensuse_tumbleweed_server.txt · Last modified: 2024/05/10 23:18 by Sean Rhone