Differences

This shows you the differences between two versions of the page.

--- linux:distros:server:arm:opensuse_tumbleweed_server [2026/07/10 19:58] – Sean Rhone
+++ linux:distros:server:arm:opensuse_tumbleweed_server [2026/07/11 09:15] (current) – [Time Sync] Sean Rhone
@@ Line 6: / Line 6: @@
   * Kraityn = Raspberry Pi 4 Model B Rev 1.5 ([[linux:notes:rpi4_ostw|notes]])
-  * :!: WIP
 ====== Download ======
@@ Line 46: / Line 44: @@
   yast2 'users'
+===== Disable Root SSH =====
+  echo 'PermitRootLogin no' | tee '/etc/ssh/sshd_config.d/DenyRootLogin.conf' > '/dev/null' && cat '/etc/ssh/sshd_config.d/DenyRootLogin.conf'
+  systemctl 'reboot'
+  sudo sshd -T | grep 'permitrootlogin'
 ====== Software ======
@@ Line 58: / Line 64: @@
   sudo zypper clean --all && sudo zypper refresh --force --services && sudo zypper dist-upgrade --details --allow-downgrade --allow-name-change --allow-arch-change --allow-vendor-change && sync
+==== EEPROM ====
+  * TODO ([[linux:notes:rpi4_ostw#eeprom|notes]])
 ===== GNU nano =====
@@ Line 84: / Line 94: @@
 ====== Settings ======
+===== Hostname =====
+  sudo hostnamectl set-hostname 'Kraityn'
+  echo '127.0.0.1 Kraityn' | sudo tee --append '/etc/hosts' > '/dev/null'
 ===== Time =====
   sudo timedatectl set-timezone 'America/New_York' && sudo timedatectl 'set-ntp' 'true' && timedatectl status
-  sudo hwclock --systohc
 ===== Network =====
@@ Line 122: / Line 136: @@
 ====== Boot Loader ======
+===== YaST =====
   sudo yast2 'bootloader'
-===== Boot Code Options =====
+==== Boot Code Options ====
   * Boot Loader: ''GRUB2 for EFI''
@@ Line 134: / Line 150: @@
   * Protective MBR flag: ''do not change''
-===== Kernel Parameters =====
+==== Kernel Parameters ====
-  * CPU Mitigations: ''Off''
+  * CPU Mitigations: ''Auto''
   * ''[ ]'' Graphical console
   * ''[ ]'' Serial console
-==== Kraityn ====
+=== Kraityn ===
   * [[linux:notes:kernel_parameters|More Kernel Parameters]]
   * Last updated: 2026/07/10
-  quiet bgrt_disable security='' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' hostname='localhost'
+  quiet bgrt_disable security='' hibernate='no' idle='halt' nohz='off' preempt='lazy' iommu='pt' memory_corruption_check='0' init_on_alloc='0' init_on_free='0' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' hostname='localhost' pci='pcie_bus_perf,notph'
-===== Bootloader Options =====
+=== Default ===
+  security=selinux selinux=1 loglevel=3 splash=silent systemd.show_status=1
+==== Bootloader Options ====
   * Timeout in Seconds: ''0''
@@ Line 154: / Line 174: @@
   * Default Boot Section: ''openSUSE Tumbleweed''
   * ''[ ]'' Protect Boot Loader with Password
+===== config.txt =====
+  sudo -e '/boot/efi/extraconfig.txt'
+<code>
+# Disable
+dtoverlay=disable-bt
+dtoverlay=disable-wifi
+disable_splash=1
+disable_fw_kms_setup=1
+# Tweaks
+arm_boost=1
+force_turbo=1
+over_voltage=15
+arm_freq=2100
+max_usb_current=1
+# End</code>
 ====== Drive Maintenance ======
@@ Line 243: / Line 283: @@
 ====== Automatic Updates ======
+===== Time Sync =====
+  * Fixes timers firing at boot without early accurate time (no RTC)
+  * :!: WIP
+  * https://raspberrypi.stackexchange.com/questions/94635/how-can-i-delay-the-startup-of-systemd-services-until-the-datetime-is-set-no-rt/95195#95195
+  * https://terinstock.com/post/2021/12/Systemds-clock-epoch-for-RTC-less-systems/
+  sudo systemctl enable --now 'systemd-timesyncd.service'
 ===== Service =====
@@ Line 264: / Line 313: @@
 ===== Timer =====
-  * ''06:00'' Alira
+  * ''06:00'' Kraityn
   sudo -e '/etc/systemd/system/suse-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'suse-up.timer' --now