Differences

This shows you the differences between two versions of the page.

--- linux:distros:server:arm:opensuse_tumbleweed_server [2026/07/10 19:34] – Sean Rhone
+++ linux:distros:server:arm:opensuse_tumbleweed_server [2026/07/11 09:15] (current) – [Time Sync] Sean Rhone
@@ Line 6: / Line 6: @@
   * Kraityn = Raspberry Pi 4 Model B Rev 1.5 ([[linux:notes:rpi4_ostw|notes]])
-  * :!: WIP
 ====== Download ======
@@ Line 47: / Line 45: @@
   yast2 'users'
-====== Software ======
+===== Disable Root SSH =====
-===== Disable USB Source =====
+  echo 'PermitRootLogin no' | tee '/etc/ssh/sshd_config.d/DenyRootLogin.conf' > '/dev/null' && cat '/etc/ssh/sshd_config.d/DenyRootLogin.conf'
-****
+  systemctl 'reboot'
-  sudo zypper modifyrepo --disable --medium-type 'hd'
+  sudo sshd -T | grep 'permitrootlogin'
+====== Software ======
+===== Disable Open H.264 Repo =====
+  sudo zypper modifyrepo --disable 'repo-openh264'
 ===== Update =====
 ==== System ====
-****
   sudo zypper clean --all && sudo zypper refresh --force --services && sudo zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync
+==== EEPROM ====
+  * TODO ([[linux:notes:rpi4_ostw#eeprom|notes]])
 ===== GNU nano =====
@@ Line 79: / Line 85: @@
 ===== General =====
-****
+  sudo zypper install aria2 fastfetch htop 7zip sensors unar
-  sudo zypper install aria2 fastfetch htop 7zip sensors unar
-===== CPU microcode =====
-****
-  ucode-intel
 ===== Specs =====
@@ Line 97: / Line 95: @@
 ====== Settings ======
-===== Time =====
+===== Hostname =====
-****
+  sudo hostnamectl set-hostname 'Kraityn'
-  timedatectl set-timezone 'America/New_York' && sudo timedatectl 'set-ntp' 'true' && sudo hwclock --systohc && timedatectl status
+  echo '127.0.0.1 Kraityn' | sudo tee --append '/etc/hosts' > '/dev/null'
-===== Laptop Server =====
+===== Time =====
-  * This tells ''systemd'' to ignore Lid close events and prevents system suspend
-  sudo mkdir -p '/etc/systemd/logind.conf.d' && echo -e "[Login]\nHandleLidSwitch=ignore" | sudo tee '/etc/systemd/logind.conf.d/99-laptop-server.conf' > '/dev/null'
-  sudo -e '/etc/systemd/logind.conf.d/99-laptop-server.conf'
+  sudo timedatectl set-timezone 'America/New_York' && sudo timedatectl 'set-ntp' 'true' && timedatectl status
 ===== Network =====
@@ Line 140: / Line 134: @@
   sudo systemctl restart 'firewalld'
-===== lm_sensors =====
-  sudo sensors-detect --auto
-  sudo -e '/etc/sysconfig/lm_sensors'
 ====== Boot Loader ======
-****
+===== YaST =====
   sudo yast2 'bootloader'
-===== Boot Code Options =====
+==== Boot Code Options ====
-  * Boot Loader: ''GRUB2''
+  * Boot Loader: ''GRUB2 for EFI''
-  * ''[ ]'' Write to Partition (/dev/sda2)
+  * ''[ ]'' Secure Boot Support
-  * ''[x]'' Write to Master Boot Record (/dev/sda)
+  * ''[x]'' Update NVRAM Entry
-  * ''[ ]'' Custom Boot Partition
-  * ''[x]'' Set active Flag in Partition Table for Boot Partition
-  * ''[ ]'' Write generic Boot Code to MBR
   * Protective MBR flag: ''do not change''
-===== Kernel Parameters =====
+==== Kernel Parameters ====
-  * :?: ''Graphical console'' might randomly freeze before boot at some stage between BIOS -> GRUB
   * CPU Mitigations: ''Auto''
@@ Line 174: / Line 156: @@
   * ''[ ]'' Serial console
-==== Kraityn ====
+=== Kraityn ===
   * [[linux:notes:kernel_parameters|More Kernel Parameters]]
   * Last updated: 2026/07/10
-  quiet bgrt_disable security='' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' hostname='localhost'
+  quiet bgrt_disable security='' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' hostname='localhost' pci='pcie_bus_perf,notph'
-  quiet bgrt_disable security='' lsm='' audit='0' mce='off' ras='cec_disable' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' align_va_addr='on' nowatchdog drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' pci='noaer,skip_isa_align,pcie_bus_perf,ecrc=off,realloc,noari,noats,pcie_scan_all,big_root_window,notph' pcie_ports='compat' pcie_port_pm='off'
+=== Default ===
-===== Bootloader Options =====
+  security=selinux selinux=1 loglevel=3 splash=silent systemd.show_status=1
-  * Timeout in Seconds: ''1''
+==== Bootloader Options ====
+  * Timeout in Seconds: ''0''
   * ''[ ]'' Probe Foreign OS
   * ''[ ]'' Hide Menu on Boot
   * Default Boot Section: ''openSUSE Tumbleweed''
   * ''[ ]'' Protect Boot Loader with Password
+===== config.txt =====
+  sudo -e '/boot/efi/extraconfig.txt'
+<code>
+# Disable
+dtoverlay=disable-bt
+dtoverlay=disable-wifi
+disable_splash=1
+disable_fw_kms_setup=1
+# Tweaks
+arm_boost=1
+force_turbo=1
+over_voltage=15
+arm_freq=2100
+max_usb_current=1
+# End</code>
 ====== Drive Maintenance ======
@@ Line 204: / Line 208: @@
   * :!: From LiveUSB/unmounted
+  * TODO
   sudo e2fsck -D -E 'discard,optimize_extents,inode_count_fullmap' -f -v -y '/dev/sda2'
-==== Recovery Boot ====
-  * Single-user mode
-  * ''(recovery mode)'' boot option
-  sudo -e '/ext2.sh' && sudo chmod +x '/ext2.sh'
-<code>
-#!/bin/bash
-umount '/'
-e2fsck -D -E 'discard,optimize_extents,inode_count_fullmap' -f -v -y '/dev/sda2'
-sync
-sleep '3'
-'/ext4.sh'
-reboot
-# End</code>
-  /ext2.sh
-  sudo -e '/ext4.sh' && sudo chmod +x '/ext4.sh'
-<code>
-#!/bin/bash
-umount '/dev/sdb'*
-e2fsck -D -E 'optimize_extents,inode_count_fullmap' -f -v -y '/dev/sdb'
-sync
-sleep '3'
-# End</code>
 ===== ext4 NAS =====
@@ Line 250: / Line 222: @@
 ===== General =====
-****
   echo "export LD_BIND_NOW='1'" | sudo tee '/etc/profile.d/general-tweaks.sh' > '/dev/null'
@@ Line 264: / Line 234: @@
 <code>
-compress="cat"
+compress="gzip"
 do_strip="yes"
 aggressive_strip="yes"
@@ Line 280: / Line 250: @@
 ===== journald =====
-  sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf'
+  sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf' && sudo journalctl --vacuum-time='1s' --rotate
 <code>
@@ Line 297: / Line 267: @@
 ===== fstab =====
-****
   sudo -e '/etc/fstab'
 ==== swap ====
-****
   ,discard=once
-==== ext2 ====
+==== EFI ====
-  * ''/ type ext2''
+  * https://www.kernel.org/doc/Documentation/filesystems/vfat.txt
-  ,noatime
+  * ''/boot/efi type vfat''
+  ,discard
 ====== Automatic Updates ======
+===== Time Sync =====
+  * Fixes timers firing at boot without early accurate time (no RTC)
+  * :!: WIP
+  * https://raspberrypi.stackexchange.com/questions/94635/how-can-i-delay-the-startup-of-systemd-services-until-the-datetime-is-set-no-rt/95195#95195
+  * https://terinstock.com/post/2021/12/Systemds-clock-epoch-for-RTC-less-systems/
+  sudo systemctl enable --now 'systemd-timesyncd.service'
 ===== Service =====
@@ Line 336: / Line 313: @@
 ===== Timer =====
-  * ''06:00'' Alira
+  * ''06:00'' Kraityn
   sudo -e '/etc/systemd/system/suse-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'suse-up.timer' --now