• Fedora Workstation
• 43
• https://www.fedoraproject.org/workstation/

Fedora Linux 43 (Workstation Edition)

• https://www.fedoraproject.org/workstation/download

Fedora-Workstation-Live-43-1.6.x86_64.iso

• 64 MB EFI partition /boot/efi ¹⁾
• XFS /

NAME        MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
zram0       251:0    0     8G  0 disk [SWAP]
nvme0n1     259:0    0 953.9G  0 disk 
├─nvme0n1p1 259:1    0    61M  0 part /boot/efi
└─nvme0n1p2 259:2    0 953.8G  0 part /

• See RPM Fusion

sudo dnf clean 'all' && sudo dnf autoremove -y && sudo dnf update -y && sync

sudo fwupdmgr refresh --force && sudo fwupdmgr update --verbose

flatpak update && sudo flatpak update

• Installs nano
• Sets VISUAL and EDITOR to nano via environment variable
• Sets nowrap for current user

sudo dnf install 'nano' -y && export 'VISUAL=nano' && export 'EDITOR=nano' && echo -e 'export VISUAL=nano\nexport EDITOR=nano' | sudo tee '/etc/profile.d/editor-nano.sh' > '/dev/null' && cat '/etc/profile.d/editor-nano.sh' && mkdir -p ~/'.config/nano' && echo 'set nowrap' | tee ~/'.config/nano/nanorc' > '/dev/null' && cat ~/'.config/nano/nanorc'

sudo dnf remove gnome-weather gnome-software gnome-clocks mediawrite* plymouth

sudo dnf remove 'amd-gpu-firmware' 'nvidia-gpu-firmware' 'atheros-firmware' 'mt7xxx-firmware'

sudo dnf install file-roller filezilla foliate gbrainy gimp gnome-extensions-app keepassxc obs-studio thunderbird transmission-gtk vlc android-tools aria2 htop lm_sensors unar yt-dlp 

libva-intel-media-driver igt-gpu-tools

libva-utils

sudo intel_gpu_top -s '500' -p -m

wine winetricks mesa-vulkan-drivers icoutils

• http://localhost:631/admin
• Log-in as regular user (not root)

• Internet Printing Protocol (ipp) → HP → IPP Everywhere ™
• Color Mode: Device Gray
• Administration → Set As Server Default

ipp://192.168.1.164/ipp/print

• More DNS Servers

9.9.9.9,149.112.112.112

2620:fe::fe,2620:fe::9

• https://docs.kernel.org/admin-guide/sysctl/kernel.html#unprivileged-bpf-disabled

• kernel.unprivileged_bpf_disabled = 0

echo 'kernel.unprivileged_bpf_disabled=0' | sudo tee '/etc/sysctl.d/99-bpf-disable.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-bpf-disable.conf' && cat '/etc/sysctl.d/99-bpf-disable.conf'

sysctl 'kernel.unprivileged_bpf_disabled'

• https://man7.org/linux/man-pages/man5/proc_sys_vm.5.html

• vm.legacy_va_layout = 1

echo 'vm.legacy_va_layout=1' | sudo tee '/etc/sysctl.d/99-vm-legacy-va.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-vm-legacy-va.conf' && cat '/etc/sysctl.d/99-vm-legacy-va.conf'

sysctl 'vm.legacy_va_layout'

• https://wiki.archlinux.org/title/intel_graphics#Enable_performance_support

• dev.i915.perf_stream_paranoid = 0

echo 'dev.i915.perf_stream_paranoid=0' | sudo tee '/etc/sysctl.d/99-i915-perf.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-i915-perf.conf' && cat '/etc/sysctl.d/99-i915-perf.conf'

sysctl 'dev.i915.perf_stream_paranoid'

• https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html
• Allows REISUB

• kernel.sysrq = 1

echo 'kernel.sysrq = 1' | sudo tee '/etc/sysctl.d/99-sysrq.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-sysrq.conf' && cat '/etc/sysctl.d/99-sysrq.conf'

sysctl 'kernel.sysrq'

• vm.swappiness = 0

echo 'vm.swappiness = 0' | sudo tee '/etc/sysctl.d/99-swappiness.conf' > '/dev/null' && sudo restorecon -F -I '/etc/sysctl.d/99-swappiness.conf' && cat '/etc/sysctl.d/99-swappiness.conf'

sysctl 'vm.swappiness'

gsettings set 'org.gnome.desktop.background' 'picture-uri' '/usr/share/backgrounds/f'*'/default/f'*'.xml'

• Full RGB + 12-bit color
• Also applies disabled monitors at log-in (docked laptop)
• Notes

• Between </mode> and </monitor> ²⁾

nano ~/'.config/monitors.xml' && sudo cp -fv ~/'.config/monitors.xml' '/etc/xdg/monitors.xml' && sudo restorecon -F -I ~/'.config/monitors.xml' '/etc/xdg/monitors.xml'

        <rgbrange>full</rgbrange>
        <maxbpc>12</maxbpc>

• https://extensions.gnome.org/extension/545/hide-top-bar/

• https://github.com/Exeos/disable-unredirect
• Log out/in → Manually enable from GNOME Extensions app

sudo dnf install 'git-core'

git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Exeos/disable-unredirect.git' '/tmp/disable-unredirect-exeos'

mv -f '/tmp/disable-unredirect-exeos/src' ~/'.local/share/gnome-shell/extensions/disable-unredirect@exeos'

rm -Rf '/tmp/disable-unredirect-exeos'

• More gsettings

gsettings reset 'org.gnome.shell' 'app-picker-layout' && gsettings reset 'org.gnome.mutter' 'experimental-features' && gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false' && gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true' && gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true' && gsettings set 'org.gnome.desktop.screen-time-limits' 'history-enabled' 'false' && gsettings set 'org.gnome.desktop.wm.preferences' 'focus-mode' 'click' && gsettings set 'org.gtk.gtk4.Settings.FileChooser' 'sort-directories-first' 'true' && gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'enable-monitors' 'false' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'crawling-interval' '-2' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'index-on-battery' 'false' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'index-on-battery-first-time' 'false' && gsettings reset 'org.gnome.Settings' 'last-panel'

• KeePassXC
• Updater

'/usr/bin/ptyxis' --standalone

'/usr/bin/bash' -c "'/usr/bin/secret-tool' lookup 'keepass' 'default' | '/usr/bin/keepassxc' --pw-stdin ~/'Documents/keepass.kdbx'"

'/usr/bin/bash' -c "'/usr/bin/ptyxis' --standalone --title='Fedora Updater' -- ~/'.local/scripts/fedora-updater.sh'"

• Listed respectively to above

• Ctrl + Alt + T
• Ctrl + Alt + Z
• F6

• See Firefox
• Also for Thunderbird

hostnamectl set-hostname 'x'

• General → [ ] Load previous databases on startup
• Security → [x] Use DuckDuckGo service to download website icons

• Keyboard shortcut

'/usr/bin/secret-tool' store --label='KeePass' 'keepass' 'default'

• x86_energy_perf_policy udev Rule

sudo sensors-detect --auto

sudo -e '/etc/sysconfig/lm_sensors'

• 0.95 Transparency

gsettings set 'org.gnome.Ptyxis' 'enable-a11y' 'false' && gsettings set 'org.gnome.Ptyxis' 'restore-session' 'false' && gsettings set 'org.gnome.Ptyxis' 'restore-window-size' 'false' && gsettings set 'org.gnome.Ptyxis.Profile:/org/gnome/Ptyxis/Profiles/'$PTYXIS_PROFILE'/' 'opacity' '0.95'

timedatectl 'set-ntp' 'true' && sudo hwclock --systohc && timedatectl status

• More Kernel Parameters

• See Tweaks

• fwupdmgr BIOS Settings

• Last updated: 2025/12/04

sudo -e '/etc/default/grub' && sudo restorecon -F -I '/etc/default/grub' && sudo grub2-mkconfig -o '/boot/grub2/grub.cfg' && sudo restorecon -F -I '/boot/grub2/grub.cfg'

GRUB_TIMEOUT=0

#GRUB_CMDLINE_LINUX="rhgb quiet"

GRUB_CMDLINE_LINUX_DEFAULT="acpi_osi='!' acpi_osi='Windows 2013' reboot='pci' hibernate='no' idle='halt' nohz='off' mitigations='off' preempt='full' iommu='pt' pci='nocrs,pcie_bus_perf,realloc,pcie_scan_all,big_root_window' module_blacklist='iTCO_wdt,intel_oc_wdt' nowatchdog tsc='nowatchdog' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0'"

cat '/sys/firmware/acpi/platform_profile' && echo 'performance' | sudo tee '/sys/firmware/acpi/platform_profile' > '/dev/null' && cat '/sys/firmware/acpi/platform_profile'

• 2025/12/04

Startup finished in 4.564s (firmware) + 661ms (loader) + 462ms (kernel) + 1.870s (initrd) + 6.883s (userspace) = 14.441s 
graphical.target reached after 6.883s in userspace.

systemd-analyze

• 2025/12/04

Image: /boot/initramfs-6.17.9-300.fc43.x86_64.img: 44M

lsinitrd

sudo dnf remove --setopt 'protected_packages'='' 'shim'*

sudo efibootmgr

sudo efibootmgr --delete-bootnum --bootnum '0000'

sudo efibootmgr --create --disk '/dev/nvme0n1p1' --full-dev-path --gpt --loader '\EFI\fedora\grubx64.efi' --label 'Fedora-GRUB' --timeout '0'

• Add commands within args
• TODO: Move to misc

sudo grubby --update-kernel='ALL' --args=''

sudo grubby --update-kernel='ALL' --remove-args=''

GRUB_TIMEOUT=5

sudo systemctl enable 'fstrim.timer' --now

sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

sudo fstrim -v -a

• nvme0n1p1 type vfat

sudo umount '/boot/efi' && sudo dosfsck -a -t -w -v '/dev/nvme0n1p1' && sudo mount '/boot/efi'

• Notes

sudo xfs_fsr -v '/'

sudo touch '/.autorelabel' && sudo restorecon -F -I '/.autorelabel'

sudo -e '/etc/profile.d/general-tweaks.sh' && sudo restorecon -F -I '/etc/profile.d/general-tweaks.sh'

# General
export LD_BIND_NOW='1'
export LD_PREFER_MAP_32BIT_EXEC='1'

# GTK
export GSK_RENDERER='vulkan'
export GTK_A11Y='none'

# GNOME
export CLUTTER_PAINT='disable-dynamic-max-render-time'

# Intel
#export ANV_NO_GPL='1'
export force_guc_low_latency='true'
export allow_compressed_fallback='true'

# Mesa
export MESA_NO_ERROR='1'
export mesa_glthread='false'
export MESA_DISK_CACHE_DATABASE='0'
export MESA_DISK_CACHE_SINGLE_FILE='0'

# Test
export allow_higher_compat_version='true'
export vk_xwayland_wait_ready='false'
export vk_x11_ignore_suboptimal='true'
export vk_wsi_force_bgra8_unorm_first='true'
export block_on_depleted_buffers='true'
export disable_throttling='true'
export force_integer_tex_nearest='true'

# End

sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf' && sudo restorecon -F -I '/etc/systemd/journald.conf.d/99-tweaks.conf' && sudo journalctl --vacuum-time='1s' --rotate

[Journal]
Storage=none
Compress=false
MaxLevelStore=0
MaxLevelSyslog=0
MaxLevelKMsg=0
MaxLevelConsole=0
MaxLevelWall=0
MaxLevelSocket=0

# End

• packagekitd to on-demand ³⁾

sudo mkdir -p '/etc/systemd/system/packagekit.service.d' && sudo -e '/etc/systemd/system/packagekit.service.d/on-demand.conf' && sudo restorecon -F -I -R '/etc/systemd/system/packagekit.service.d' && sudo systemctl daemon-reload

[Service]
RuntimeMaxSec=5

# End

sudo -e '/etc/dracut.conf.d/99-custom.conf' && sudo restorecon -F -I '/etc/dracut.conf.d/99-custom.conf' && sudo dracut --force --regenerate-all

# Compression
compress="cat"

# Strip
do_strip="yes"
aggressive_strip="yes"
hostonly="yes"
hostonly_mode="strict"
reproducible="no"
enhanced_cpio="no"
i18n_install_all="no"

# Machine-specific
early_microcode="no"
nofscks="yes"
kernel_cmdline="rd.luks=0 rd.lvm=0 rd.md=0 rd.dm=0"
#force_drivers+=" i915 "
omit_drivers+=" intel_oc_wdt iTCO_wdt iTCO_vendor_support fuse thunderbolt "
omit_dracutmodules+=" fips-crypto-policies systemd-pcrphase tpm2-tss memstrack i18n systemd-battery-check nss-softokn "

# End

sudo -e '/etc/fstab' && sudo restorecon -F -I '/etc/fstab'

• /boot/efi type vfat

,discard,tz=UTC

• / type xfs

,nodiscard,noatime

• Notes

sudo -e '/etc/profile.d/wine-tweaks.sh' && sudo restorecon -F -I '/etc/profile.d/wine-tweaks.sh'

# Staging
export STAGING_SHARED_MEMORY='1'
export STAGING_WRITECOPY='1'
export WINE_LARGE_ADDRESS_AWARE='1'

# Logging
export WINEDEBUG='-all'
export VKD3D_DEBUG='none'
export VKD3D_SHADER_DEBUG='none'
export DXVK_LOG_LEVEL='none'

# End

• Keyboard shortcut

mkdir -p ~/'.local/scripts' && nano ~/'.local/scripts/fedora-updater.sh' && chmod +x ~/'.local/scripts/fedora-updater.sh'

#!/bin/bash

sudo '/usr/bin/dnf' autoremove -y
sudo '/usr/bin/dnf' clean 'all'
sudo '/usr/bin/dnf' update -y

sudo '/usr/bin/fwupdmgr' refresh --force
sudo '/usr/bin/fwupdmgr' update

'/usr/bin/flatpak' update
sudo '/usr/bin/flatpak' update

rm -Rf ~/'.cache/mesa_shader_cache'*
rm -Rf ~/'.cache/thumbnails/'*'/'*
localsearch reset --filesystem

rm -Rf ~/'.cache/mozilla/firefox'*
rm -Rf ~/'.cache/thunderbird'*

sudo '/usr/bin/fstrim' --all --verbose

sync
read -n '1' -s -r -p 'Done. Press any key to exit.'

# End

~/'.local/scripts/fedora-updater.sh'

• See misc