Differences

This shows you the differences between two versions of the page.

--- linux:distros:server:arm:opensuse_tumbleweed_server [2026/07/10 19:46] – Sean Rhone
+++ linux:distros:server:arm:opensuse_tumbleweed_server [2026/07/11 09:15] (current) – [Time Sync] Sean Rhone
@@ Line 6: / Line 6: @@
   * Kraityn = Raspberry Pi 4 Model B Rev 1.5 ([[linux:notes:rpi4_ostw|notes]])
-  * :!: WIP
 ====== Download ======
@@ Line 47: / Line 45: @@
   yast2 'users'
-====== Software ======
+===== Disable Root SSH =====
-===== Disable Repos =====
+  echo 'PermitRootLogin no' | tee '/etc/ssh/sshd_config.d/DenyRootLogin.conf' > '/dev/null' && cat '/etc/ssh/sshd_config.d/DenyRootLogin.conf'
-==== USB Source ====
+  systemctl 'reboot'
-  sudo zypper modifyrepo --disable --medium-type 'hd'
+  sudo sshd -T | grep 'permitrootlogin'
-==== Open H.264 ====
+====== Software ======
+===== Disable Open H.264 Repo =====
   sudo zypper modifyrepo --disable 'repo-openh264'
@@ Line 64: / Line 64: @@
   sudo zypper clean --all && sudo zypper refresh --force --services && sudo zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync
+==== EEPROM ====
+  * TODO ([[linux:notes:rpi4_ostw#eeprom|notes]])
 ===== GNU nano =====
@@ Line 91: / Line 95: @@
 ====== Settings ======
-===== Time =====
+===== Hostname =====
-****
+  sudo hostnamectl set-hostname 'Kraityn'
+  echo '127.0.0.1 Kraityn' | sudo tee --append '/etc/hosts' > '/dev/null'
+===== Time =====
-  timedatectl set-timezone 'America/New_York' && sudo timedatectl 'set-ntp' 'true' && sudo hwclock --systohc && timedatectl status
+  sudo timedatectl set-timezone 'America/New_York' && sudo timedatectl 'set-ntp' 'true' && timedatectl status
 ===== Network =====
@@ Line 128: / Line 136: @@
 ====== Boot Loader ======
+===== YaST =====
   sudo yast2 'bootloader'
-===== Boot Code Options =====
+==== Boot Code Options ====
   * Boot Loader: ''GRUB2 for EFI''
@@ Line 140: / Line 150: @@
   * Protective MBR flag: ''do not change''
-===== Kernel Parameters =====
+==== Kernel Parameters ====
-  * CPU Mitigations: ''Off''
+  * CPU Mitigations: ''Auto''
   * ''[ ]'' Graphical console
   * ''[ ]'' Serial console
-==== Kraityn ====
+=== Kraityn ===
   * [[linux:notes:kernel_parameters|More Kernel Parameters]]
   * Last updated: 2026/07/10
-  quiet bgrt_disable security='' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' hostname='localhost'
+  quiet bgrt_disable security='' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' hostname='localhost' pci='pcie_bus_perf,notph'
-===== Bootloader Options =====
+=== Default ===
+  security=selinux selinux=1 loglevel=3 splash=silent systemd.show_status=1
+==== Bootloader Options ====
   * Timeout in Seconds: ''0''
@@ Line 160: / Line 174: @@
   * Default Boot Section: ''openSUSE Tumbleweed''
   * ''[ ]'' Protect Boot Loader with Password
+===== config.txt =====
+  sudo -e '/boot/efi/extraconfig.txt'
+<code>
+# Disable
+dtoverlay=disable-bt
+dtoverlay=disable-wifi
+disable_splash=1
+disable_fw_kms_setup=1
+# Tweaks
+arm_boost=1
+force_turbo=1
+over_voltage=15
+arm_freq=2100
+max_usb_current=1
+# End</code>
 ====== Drive Maintenance ======
@@ Line 200: / Line 234: @@
 <code>
-compress="cat"
+compress="gzip"
 do_strip="yes"
 aggressive_strip="yes"
@@ Line 216: / Line 250: @@
 ===== journald =====
-  sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf'
+  sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf' && sudo journalctl --vacuum-time='1s' --rotate
 <code>
@@ Line 249: / Line 283: @@
 ====== Automatic Updates ======
+===== Time Sync =====
+  * Fixes timers firing at boot without early accurate time (no RTC)
+  * :!: WIP
+  * https://raspberrypi.stackexchange.com/questions/94635/how-can-i-delay-the-startup-of-systemd-services-until-the-datetime-is-set-no-rt/95195#95195
+  * https://terinstock.com/post/2021/12/Systemds-clock-epoch-for-RTC-less-systems/
+  sudo systemctl enable --now 'systemd-timesyncd.service'
 ===== Service =====
@@ Line 270: / Line 313: @@
 ===== Timer =====
-  * ''06:00'' Alira
+  * ''06:00'' Kraityn
   sudo -e '/etc/systemd/system/suse-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'suse-up.timer' --now