User Tools

Site Tools


linux:distros:server:arm:opensuse_tumbleweed_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
linux:distros:server:arm:opensuse_tumbleweed_server [2026/07/10 19:28] Sean Rhonelinux:distros:server:arm:opensuse_tumbleweed_server [2026/07/11 09:15] (current) – [Time Sync] Sean Rhone
Line 6: Line 6:
  
   * Kraityn = Raspberry Pi 4 Model B Rev 1.5 ([[linux:notes:rpi4_ostw|notes]])   * Kraityn = Raspberry Pi 4 Model B Rev 1.5 ([[linux:notes:rpi4_ostw|notes]])
- 
-  * :!: WIP 
  
 ====== Download ====== ====== Download ======
Line 29: Line 27:
 └─mmcblk0p3 179:3    0 58.9G  0 part /</code> └─mmcblk0p3 179:3    0 58.9G  0 part /</code>
  
-====== Software ======+====== Initial Set-up ====== 
 + 
 +  * Continue from ''ssh'' 
 +  * Log-in as ''root'' 
 + 
 +===== passwd ===== 
 + 
 +  * :!: Change ''root'' user password 
 + 
 +  passwd 
 + 
 +===== Create User ===== 
 + 
 +  * Users -> Add 
 +  * Defaults ((UID ''1000'', Groups ''users'')) 
 + 
 +  yast2 'users' 
 + 
 +===== Disable Root SSH ===== 
 + 
 +  echo 'PermitRootLogin no' | tee '/etc/ssh/sshd_config.d/DenyRootLogin.conf' > '/dev/null' && cat '/etc/ssh/sshd_config.d/DenyRootLogin.conf'
  
-===== Disable USB Source =====+  systemctl 'reboot'
  
-****+  sudo sshd -T | grep 'permitrootlogin'
  
-  sudo zypper modifyrepo --disable --medium-type 'hd'+====== Software ====== 
 + 
 +===== Disable Open H.264 Repo ===== 
 + 
 +  sudo zypper modifyrepo --disable 'repo-openh264'
  
 ===== Update ===== ===== Update =====
  
 ==== System ==== ==== System ====
- 
-**** 
  
   sudo zypper clean --all && sudo zypper refresh --force --services && sudo zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync   sudo zypper clean --all && sudo zypper refresh --force --services && sudo zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync
 +
 +==== EEPROM ====
 +
 +  * TODO ([[linux:notes:rpi4_ostw#eeprom|notes]])
  
 ===== GNU nano ===== ===== GNU nano =====
Line 61: Line 85:
 ===== General ===== ===== General =====
  
-**** +  sudo zypper install aria2 fastfetch htop 7zip sensors unar
- +
-  sudo zypper install aria2 fastfetch htop 7zip sensors unar  +
- +
-===== CPU microcode ===== +
- +
-**** +
- +
-  ucode-intel+
  
 ===== Specs ===== ===== Specs =====
Line 79: Line 95:
 ====== Settings ====== ====== Settings ======
  
-===== Time =====+===== Hostname =====
  
-****+  sudo hostnamectl set-hostname 'Kraityn'
  
-  timedatectl set-timezone 'America/New_York&& sudo timedatectl 'set-ntp' 'true&& sudo hwclock --systohc && timedatectl status+  echo '127.0.0.1 Kraitynsudo tee --append '/etc/hosts> '/dev/null'
  
-===== Laptop Server ===== +===== Time =====
- +
-  * This tells ''systemd'' to ignore Lid close events and prevents system suspend +
- +
-  sudo mkdir -p '/etc/systemd/logind.conf.d' && echo -e "[Login]\nHandleLidSwitch=ignore" | sudo tee '/etc/systemd/logind.conf.d/99-laptop-server.conf' > '/dev/null'+
  
-  sudo -'/etc/systemd/logind.conf.d/99-laptop-server.conf'+  sudo timedatectl set-timezone 'America/New_York' && sudo timedatectl 'set-ntp' 'true&& timedatectl status
  
 ===== Network ===== ===== Network =====
Line 122: Line 134:
  
   sudo systemctl restart 'firewalld'   sudo systemctl restart 'firewalld'
- 
-===== lm_sensors ===== 
- 
-  sudo sensors-detect --auto 
- 
-  sudo -e '/etc/sysconfig/lm_sensors' 
  
 ====== Boot Loader ====== ====== Boot Loader ======
  
-****+===== YaST =====
  
   sudo yast2 'bootloader'   sudo yast2 'bootloader'
  
-===== Boot Code Options =====+==== Boot Code Options ====
  
-  * Boot Loader: ''GRUB2''+  * Boot Loader: ''GRUB2 for EFI''
  
-  * ''[ ]'' Write to Partition (/dev/sda2) +  * ''[ ]'' Secure Boot Support 
-  * ''[x]'' Write to Master Boot Record (/dev/sda) +  * ''[x]'' Update NVRAM Entry
-  * ''[ ]'' Custom Boot Partition +
- +
-  * ''[x]'' Set active Flag in Partition Table for Boot Partition +
-  * ''[ ]'' Write generic Boot Code to MBR+
  
   * Protective MBR flag: ''do not change''   * Protective MBR flag: ''do not change''
  
-===== Kernel Parameters ====+==== Kernel Parameters ====
- +
-  * :?: ''Graphical console'' might randomly freeze before boot at some stage between BIOS -> GRUB+
  
   * CPU Mitigations: ''Auto''   * CPU Mitigations: ''Auto''
Line 156: Line 156:
   * ''[ ]'' Serial console   * ''[ ]'' Serial console
  
-==== Kraityn ====+=== Kraityn ===
  
   * [[linux:notes:kernel_parameters|More Kernel Parameters]]   * [[linux:notes:kernel_parameters|More Kernel Parameters]]
   * Last updated: 2026/07/10   * Last updated: 2026/07/10
  
-  quiet bgrt_disable security='' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' hostname='localhost'+  quiet bgrt_disable security='' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' hostname='localhost' pci='pcie_bus_perf,notph'
  
-  quiet bgrt_disable security='' lsm='' audit='0' mce='off' ras='cec_disable' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' align_va_addr='on' nowatchdog drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' pci='noaer,skip_isa_align,pcie_bus_perf,ecrc=off,realloc,noari,noats,pcie_scan_all,big_root_window,notph' pcie_ports='compat' pcie_port_pm='off'+=== Default ===
  
-===== Bootloader Options ===== +  security=selinux selinux=1 loglevel=3 splash=silent systemd.show_status=1
  
-  * Timeout in Seconds: ''1''+==== Bootloader Options ==== 
 + 
 +  * Timeout in Seconds: ''0''
   * ''[ ]'' Probe Foreign OS   * ''[ ]'' Probe Foreign OS
   * ''[ ]'' Hide Menu on Boot   * ''[ ]'' Hide Menu on Boot
   * Default Boot Section: ''openSUSE Tumbleweed''   * Default Boot Section: ''openSUSE Tumbleweed''
   * ''[ ]'' Protect Boot Loader with Password   * ''[ ]'' Protect Boot Loader with Password
 +
 +===== config.txt =====
 +
 +  sudo -e '/boot/efi/extraconfig.txt'
 +
 +<code>
 +# Disable
 +dtoverlay=disable-bt
 +dtoverlay=disable-wifi
 +disable_splash=1
 +disable_fw_kms_setup=1
 +
 +# Tweaks
 +arm_boost=1
 +force_turbo=1
 +over_voltage=15
 +arm_freq=2100
 +max_usb_current=1
 +
 +# End</code>
  
 ====== Drive Maintenance ====== ====== Drive Maintenance ======
Line 186: Line 208:
  
   * :!: From LiveUSB/unmounted   * :!: From LiveUSB/unmounted
 +  * TODO
  
   sudo e2fsck -D -E 'discard,optimize_extents,inode_count_fullmap' -f -v -y '/dev/sda2'   sudo e2fsck -D -E 'discard,optimize_extents,inode_count_fullmap' -f -v -y '/dev/sda2'
- 
-==== Recovery Boot ==== 
- 
-  * Single-user mode 
-  * ''(recovery mode)'' boot option 
- 
-  sudo -e '/ext2.sh' && sudo chmod +x '/ext2.sh' 
- 
-<code> 
-#!/bin/bash 
- 
-umount '/' 
-e2fsck -D -E 'discard,optimize_extents,inode_count_fullmap' -f -v -y '/dev/sda2' 
-sync 
-sleep '3' 
-'/ext4.sh' 
-reboot 
- 
-# End</code> 
- 
-  /ext2.sh 
- 
-  sudo -e '/ext4.sh' && sudo chmod +x '/ext4.sh' 
- 
-<code> 
-#!/bin/bash 
- 
-umount '/dev/sdb'* 
-e2fsck -D -E 'optimize_extents,inode_count_fullmap' -f -v -y '/dev/sdb' 
-sync 
-sleep '3' 
- 
-# End</code> 
  
 ===== ext4 NAS ===== ===== ext4 NAS =====
Line 232: Line 222:
  
 ===== General ===== ===== General =====
- 
-**** 
  
   echo "export LD_BIND_NOW='1'" | sudo tee '/etc/profile.d/general-tweaks.sh' > '/dev/null'   echo "export LD_BIND_NOW='1'" | sudo tee '/etc/profile.d/general-tweaks.sh' > '/dev/null'
Line 246: Line 234:
  
 <code> <code>
-compress="cat"+compress="gzip"
 do_strip="yes" do_strip="yes"
 aggressive_strip="yes" aggressive_strip="yes"
Line 262: Line 250:
 ===== journald ===== ===== journald =====
  
-  sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf'+  sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf' && sudo journalctl --vacuum-time='1s' --rotate
  
 <code> <code>
Line 279: Line 267:
  
 ===== fstab ===== ===== fstab =====
- 
-**** 
  
   sudo -e '/etc/fstab'   sudo -e '/etc/fstab'
  
 ==== swap ==== ==== swap ====
- 
-**** 
  
   ,discard=once   ,discard=once
  
-==== ext2 ====+==== EFI ====
  
-  * ''type ext2''+  * https://www.kernel.org/doc/Documentation/filesystems/vfat.txt
  
-  ,noatime+  * ''/boot/efi type vfat'' 
 + 
 +  ,discard
  
 ====== Automatic Updates ====== ====== Automatic Updates ======
 +
 +===== Time Sync =====
 +
 +  * Fixes timers firing at boot without early accurate time (no RTC)
 +  * :!: WIP
 +  * https://raspberrypi.stackexchange.com/questions/94635/how-can-i-delay-the-startup-of-systemd-services-until-the-datetime-is-set-no-rt/95195#95195
 +  * https://terinstock.com/post/2021/12/Systemds-clock-epoch-for-RTC-less-systems/
 +
 +  sudo systemctl enable --now 'systemd-timesyncd.service'
  
 ===== Service ===== ===== Service =====
Line 318: Line 313:
 ===== Timer ===== ===== Timer =====
  
-  * ''06:00'' Alira+  * ''06:00'' Kraityn
  
   sudo -e '/etc/systemd/system/suse-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'suse-up.timer' --now   sudo -e '/etc/systemd/system/suse-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'suse-up.timer' --now
/usr/local/www/wiki/data/attic/linux/distros/server/arm/opensuse_tumbleweed_server.1783726080.txt.gz · Last modified: by Sean Rhone

Except where otherwise noted, content on this wiki is licensed under the following license: CC0 1.0 Universal
CC0 1.0 Universal Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki