RoE | Wiki

User Tools

Site Tools

Trace:
distros:opensuse_tumbleweed_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Next revisionBoth sides next revision
distros:opensuse_tumbleweed_server [2022/05/14 00:39] – [General] Sean Rhonedistros:opensuse_tumbleweed_server [2024/05/10 20:59] – Sean Rhone
Line 11: Line 11:
 ===== DVD + Xfce Live ===== ===== DVD + Xfce Live =====
  
-  * Downloads the latest DVD and Xfce Live images+  * Downloads the latest DVD (with SHA256 compare) and Xfce Live images with ''aria2c''
  
-  cd ~/'Downloads' && aria2c 'https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-XFCE-Live-x86_64-Current.iso' && aria2c 'http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso' && aria2c 'https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso.sha256' && sha256sum ~/'Downloads/openSUSE-Tumbleweed-DVD-x86_64-'*'-Media.iso' && cat ~/'Downloads/openSUSE-Tumbleweed-DVD-x86_64-'*'-Media.iso.sha256' && sync+  cd ~/'Downloads' && aria2c 'https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso.sha256' && aria2c 'http://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-DVD-x86_64-Current.iso' && aria2c 'https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-XFCE-Live-x86_64-Current.iso' && sha256sum ~/'Downloads/openSUSE-Tumbleweed-DVD-x86_64-'*'-Media.iso' && cat ~/'Downloads/openSUSE-Tumbleweed-DVD-x86_64-'*'-Media.iso.sha256' && sync
  
 ===== DVD ===== ===== DVD =====
Line 30: Line 30:
  
 ====== Installation Notes ====== ====== Installation Notes ======
- 
-  * ''EFI/opensuse/grubx64.efi'' ((EFI file to boot and in the case of Acer laptops, add to SecureBoot trust; doesn't matter if SecureBoot is enabled or not)) 
  
 ===== Partitioning ===== ===== Partitioning =====
  
-  - XFS+  - ext4
   - No separate ''/home''   - No separate ''/home''
-  - Separate ''swap'' +  - :!: Separate ''swap'' with suspend resize
- +
-====== Repositories ====== +
- +
-===== ROCm ===== +
- +
-  * https://docs.amd.com/ +
- +
-  * Repository Priority: 98 +
-  * Provides ROCm, notably OpenCL libraries +
- +
-  sudo rpm --import 'https://repo.radeon.com/rocm/rocm.gpg.key' && sudo zypper addrepo --gpgcheck-strict --check --refresh --priority '98' 'https://repo.radeon.com/rocm/zyp/zypper/' 'ROCm'+
  
 ====== Software ====== ====== Software ======
Line 80: Line 67:
 **** ****
  
-  sudo zypper install aria2 flashrom hdparm htop nano 7zip sensors unar wget irqbalance xfsprogs-scrub +  sudo zypper install aria2 binutils chrony htop 7zip sensors unar 
  
-===== ROCm =====+===== CPU microcode =====
  
-  * :!: Run ''sudo ldconfig'' if OpenCL isn't found+  ucode-amd
  
-  rocm-opencl rocm-smi-lib+  ucode-intel
  
-===== Keybase =====+====== Settings ======
  
-  * https://keybase.io +===== Laptop Server =====
-  * :!: TODO: Figure out how to do automated bcakups to KBFS +
-  * :!: This page shows up on Google search; for desktop openSUSE and the GUI Keybase client, add the repo shown on [[distros:opensuse_tumbleweed_gnome#keybase]]+
  
-  keybase+  * This tells ''systemd'' to ignore Lid close events and prevents system suspend
  
-====== Settings ======+  sudo mkdir -p '/etc/systemd/logind.conf.d' && echo -e "[Login]\nHandleLidSwitch=ignore" | sudo tee '/etc/systemd/logind.conf.d/99-laptop-server.conf' > '/dev/null' 
 + 
 +  sudo -e '/etc/systemd/logind.conf.d/99-laptop-server.conf' 
 + 
 +===== Dell Fan Profile ===== 
 + 
 +  * https://www.dell.com/support/kbdoc/en-us/000177768/guide-to-dell-power-manager 
 + 
 +  sudo zypper install -y 'python3-smbios-utils' && sudo smbios-thermal-ctl --set-thermal-mode='performance' && sudo zypper remove --clean-deps -y 'python3-smbios-utils' 
 + 
 +===== GRUB ===== 
 + 
 +==== Config ==== 
 + 
 +  * :!: [[notes:kernel_parameters|More Kernel Parameters]] 
 + 
 +  sudo yast2 'bootloader' 
 + 
 +==== Oak ==== 
 + 
 +  * Last updated: 2024/05/10 
 + 
 +<code>preempt='none' nohz='off' pci='pcie_bus_perf,realloc,pcie_scan_all,big_root_window' pcie_aspm='off' reboot='pci'</code>
  
 ===== Network ===== ===== Network =====
Line 106: Line 113:
 ==== Hostname/DNS ==== ==== Hostname/DNS ====
  
-  * https://1.1.1.1/dns/+  * https://quad9.net/
   * See [[notes:dns_servers|DNS servers]] for other DNS servers   * See [[notes:dns_servers|DNS servers]] for other DNS servers
  
   * Static Hostname: ''Computer name''   * Static Hostname: ''Computer name''
   * Modify DNS Configuration: ''Use Custom Policy''   * Modify DNS Configuration: ''Use Custom Policy''
-  * Name Server 1: ''1.1.1.1'' +  * Name Server 1: ''9.9.9.9'' 
-  * Name Server 2: ''1.0.0.1'' +  * Name Server 2: ''149.112.112.112'' 
-  * Name Server 3: ''8.8.8.8''+  * Name Server 3: ''1.1.1.2''
  
 ==== Routing ==== ==== Routing ====
Line 120: Line 127:
   * Gateway: ''192.168.1.1''   * Gateway: ''192.168.1.1''
   * Device: ''-''   * Device: ''-''
- 
-===== Hostname ===== 
- 
-  * Change ''x'' to computer name 
- 
-  sudo hostnamectl set-hostname 'x' 
  
 ===== lm_sensors ===== ===== lm_sensors =====
  
-****+  sudo sensors-detect --auto
  
-  sudo sensors-detect --auto+  sudo -e '/etc/sysconfig/lm_sensors'
  
 ===== Secure Shell ===== ===== Secure Shell =====
Line 137: Line 138:
   * See [[clients:secure_shell#generate_ssh_keys|Client - Generate SSH Keys]] notes to generate/restore public key   * See [[clients:secure_shell#generate_ssh_keys|Client - Generate SSH Keys]] notes to generate/restore public key
  
-===== Drive Maintenance =====+===== Disk Drives =====
  
 ==== Swap ==== ==== Swap ====
Line 146: Line 147:
   sudo -e '/etc/fstab'   sudo -e '/etc/fstab'
  
-  ,discard+  ,discard=once
  
 ==== Trim ==== ==== Trim ====
  
-  * :!: Enable only if a SSD is being used for Linux+****
  
   sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l   sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l
  
-==== XFS Scrub ====+===== Time =====
  
-  * [[https://wiki.archlinux.org/title/XFS#Online_Metadata_Checking_(scrub)|XFS - ArchWiki]] +  * :!: 2024/05/06: Even though ''chrony'' does NTP sync, it doesn't seem to write it to the hardware clock which is usually wrong after a CMOS reset ((starting Firefox quickly after rebooting has a wrong system clock certificate failure error)) 
-  * :!: Enable in all cases since it's likely both ''/'' and ''/boot'' are XFS +  * This sets the hardware clock to the current system/OS clock 
- +  * TODO: Figure out ''chrony'' command to do NTP sync
-  sudo systemctl enable 'xfs_scrub_all.timer' --now && sudo systemctl start 'xfs_scrub_all' && sync && sudo systemctl status 'xfs_scrub_all' -l +
- +
-===== UTC ===== +
- +
-  * [[https://wiki.archlinux.org/index.php/System_time#Time_standard|ArchWiki]] +
-  * Set RTC to UTC +
- +
-  sudo timedatectl set-local-rtc '0' +
- +
-==== Verify ==== +
- +
-****+
  
-  timedatectl | grep local+  sudo hwclock --systohc
  
 ====== Automatic Updates ====== ====== Automatic Updates ======
Line 204: Line 193:
 [Timer] [Timer]
 OnCalendar=*-*-* 06:00:00 OnCalendar=*-*-* 06:00:00
-Persistent=true 
- 
-[Install] 
-WantedBy=timers.target</code> 
- 
-====== External Backup ====== 
- 
-===== fstab ===== 
- 
-  * Expects a drive of some kind with a XFS partition at ''/dev/sdb1'' 
- 
-  sudo mkdir -p '/mnt/USB' && sudo -e '/etc/fstab' 
- 
-<code> 
-# USB 
-/dev/sdb1 /mnt/USB xfs rw,relatime,attr2,inode64,noquota 0 2</code> 
- 
-  sudo mount '/dev/sdb1' 
- 
-===== Service ===== 
- 
-  sudo -e '/etc/systemd/system/backup-external.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/backup-external.service' 
- 
-<code> 
-[Service] 
-Type=oneshot 
-ExecStartPre='/usr/bin/sync' 
-ExecStart='/usr/bin/rsync' -r '/home/CHANGEME/backups' '/mnt/USB' --verbose --ignore-existing 
-ExecStartPost='/usr/bin/sync'</code> 
- 
-===== Timer ===== 
- 
-  sudo -e '/etc/systemd/system/backup-external.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'backup-external.timer' --now 
- 
-<code> 
-[Unit] 
-Description=Backup Backups to External Device 
- 
-[Timer] 
-OnCalendar=*-*-* 07:00:00 
 Persistent=true Persistent=true
  
Line 251: Line 200:
 ====== Notable Folders and Commands ====== ====== Notable Folders and Commands ======
  
-===== Zypper ===== +  * See [[notes:misc_linux]]
- +
-==== Find Orphans ==== +
- +
-**** +
- +
-  zypper packages --orphaned +
- +
-==== Remove Package and Deps ==== +
- +
-**** +
- +
-  sudo zypper remove --clean-deps 'x' +
- +
-==== Show Installed Patterns ==== +
- +
-**** +
- +
-  sudo zypper patterns --installed-only +
- +
-==== Folder ==== +
- +
-**** +
- +
-  ls '/etc/zypp/repos.d' +
- +
-==== List ==== +
- +
-**** +
- +
-  zypper repos --priority +
- +
-===== GPG Keys ===== +
- +
-==== Check Keys ==== +
- +
-**** +
- +
-  rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' +
- +
-==== Remove Keys ==== +
- +
-**** +
- +
-  sudo rpm -e x +
- +
-===== fstrim ===== +
- +
-**** +
- +
-  sudo fstrim --verbose --all +
- +
-===== Show Sensors ===== +
- +
-**** +
- +
-  sudo zypper install -y 'sensors' && sudo sensors-detect --auto && sudo watch -n0.1 sensors +
- +
-===== Show CPU Frequency ===== +
- +
-  grep 'MHz' '/proc/cpuinfo' +
- +
-  watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo' +
- +
-===== OpenSSL Supported Ciphers ===== +
- +
-**** +
- +
-  openssl ciphers -v | awk '{print $2}' | sort | uniq +
- +
-===== Partition Information ===== +
- +
-  * Both commands present the same information +
- +
-  df -hT +
- +
-  df --human-readable --print-type +
- +
-===== Encryption Information ===== +
- +
-**** +
- +
-  sudo cryptsetup -v status '/dev/dm-0' +
- +
-===== HT/SMT Information ===== +
- +
-**** +
- +
-  grep -e "processor" -e "core id" -e "^$" /proc/cpuinfo +
- +
-===== Optimal GCC compiler flags ===== +
- +
-**** +
- +
-  gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;' +
- +
-===== firewalld ===== +
- +
-==== List Active Rules ==== +
- +
-**** +
- +
-  sudo firewall-cmd --list-all +
- +
-==== List Available Services ==== +
- +
-**** +
- +
-  sudo firewall-cmd --get-services +
- +
-==== Show Service Info ==== +
- +
-  * Change ''x'' to name of a service from above +
-  * This shows what ports and protocols a service covers +
- +
-  sudo firewall-cmd --info-service=x +
- +
-==== Reload ==== +
- +
-**** +
- +
-  sudo firewall-cmd --reload +
- +
-==== Add/Remove Service ==== +
- +
-  * Add ''--permanent'' as-needed to allow the rule to persist +
- +
-  sudo firewall-cmd --add-service=x +
- +
-  sudo firewall-cmd --remove-service=x +
- +
-==== Add/Remove Port ==== +
- +
-  * Add ''--permanent'' as-needed to allow the rule to persist +
-  * Change ''tcp'' to ''udp'' as-needed +
- +
-  sudo firewall-cmd --add-port=x/tcp +
- +
-  sudo firewall-cmd --remove-port=x/tcp+
  
C:/www/wiki/data/pages/distros/opensuse_tumbleweed_server.txt · Last modified: 2024/06/02 12:33 by Sean Rhone