• Ubuntu ¹⁾
• Desktop ²⁾
• 24.10 (Oracular Oriole)

• https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/2081692/comments/3
• https://gitlab.com/apparmor/apparmor/-/merge_requests/1333/diffs
• 2024/12/24: Needed with GNOME on Xorg session

sudo mkdir -p '/etc/apparmor.d/abstractions/mesa.d' && sudo -e '/etc/apparmor.d/abstractions/mesa.d/lp2081692'

  owner @{HOME}/.cache/mesa_shader_cache_db/ rw,
  owner @{HOME}/.cache/mesa_shader_cache_db/index rwk,
  owner @{HOME}/.cache/mesa_shader_cache_db/part*/ rw,
  owner @{HOME}/.cache/mesa_shader_cache_db/part*/mesa_cache.db rwk,
  owner @{HOME}/.cache/mesa_shader_cache_db/part*/mesa_cache.idx rwk,

• https://etcher.balena.io/#download-etcher
• Windows

• https://ubuntu.com/download/desktop

• https://www.winehq.org/
• https://wiki.winehq.org/Ubuntu
• https://dl.winehq.org/wine-builds/
• oracular = 24.10

sudo dpkg --add-architecture 'i386'

wget -O '/tmp/winehq.key' 'https://dl.winehq.org/wine-builds/winehq.key' && sudo mv '/tmp/winehq.key' '/etc/apt/trusted.gpg.d/winehq.asc' && echo 'deb https://dl.winehq.org/wine-builds/ubuntu/ oracular main' | sudo tee '/etc/apt/sources.list.d/winehq.list' > '/dev/null' && sync

sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean && sync

sudo fwupdmgr refresh --force && sudo fwupdmgr update --verbose && sync

sudo snap refresh && sync

sudo apt install --install-recommends 7zip adb fastboot aria2 evolution filezilla file-roller foliate gimp gnome-shell-extension-manager keepassxc libreoffice libsecret-tools lm-sensors mesa-utils obs-studio transmission-gtk vlc unar yt-dlp 

neverball neverputt flightgear

• https://wiki.winehq.org/Ubuntu

winehq-staging winbind winetricks libgl1-mesa-dri:i386 mesa-vulkan-drivers mesa-vulkan-drivers:i386 libgl1:i386 libnss-mdns:i386 icoutils

• https://github.com/intel/media-driver#components-and-features

vainfo intel-media-va-driver-non-free

vainfo

torbrowser-launcher

wget -O '/tmp/google-chrome-stable_current_amd64.deb' 'https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb' && sudo apt install '/tmp/google-chrome-stable_current_amd64.deb' && rm '/tmp/google-chrome-stable_current_amd64.deb' && sync

• https://snapcraft.io/steam

sudo snap install 'steam'

bash -c "secret-tool lookup 'keepass' 'default' | keepassxc --pw-stdin ~/'Documents/keepass.kdbx'"

gnome-terminal --command "sudo sh -c 'apt update && apt full-upgrade -y && apt clean && apt autoremove -y && sync && snap refresh && sync && fstrim --all --verbose && sync && sleep '5''"

• Listed respectively to above

• Ctrl + Alt + Z
• Menu

• http://localhost:631/admin
• Log-in as regular user (not root)

• Internet Printing Protocol (ipp)
• HP
• IPP Everywhere ™
• Color Mode: Device Gray
• 2-Sided Printing: Long-Edge (Portrait)

ipp://192.168.1.164/ipp/print

Kole

• systemd-resolved caches DNS
• See DNS Servers for other addresses

resolvectl status

sudo mkdir -p '/etc/systemd/resolved.conf.d' && sudo -e '/etc/systemd/resolved.conf.d/99-dns-over-tls.conf'

[Resolve]
DNS=1.1.1.2#security.cloudflare-dns.com 1.0.0.2#security.cloudflare-dns.com 2606:4700:4700::1112#security.cloudflare-dns.com 2606:4700:4700::1002#security.cloudflare-dns.com
DNSOverTLS=yes

• 10-notch Transparency

• More Kernel Parameters
• Add options in GRUB_CMDLINE_LINUX_DEFAULT=

sudo -e '/etc/default/grub' && sudo update-grub

• GRUB_CMDLINE_LINUX=

sudo -e '/etc/default/grub' && sudo update-grub

GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"

acpi_osi='Linux' reboot='pci' nohz='off' preempt='full' iommu='pt' pci='pcie_bus_perf,realloc,pcie_scan_all,big_root_window' i915.enable_dc='0' i915.enable_fbc='0' i915.enable_psr='0' i915.enable_guc='3' ahci.mobile_lpm_policy='1' nvme_core.default_ps_max_latency_us='0' pcie_aspm='off' snd_hda_intel.power_save='0' usbcore.autosuspend='-1' rootflags='data=writeback'

• https://extensions.gnome.org/extension/545/hide-top-bar/
• https://extensions.gnome.org/extension/1873/disable-unredirect-fullscreen-windows/

cat '/etc/gdm3/custom.conf' | grep '#WaylandEnable' > '/dev/null' && sudo sed -i 's/'#WaylandEnable=false'/'WaylandEnable=false'/g' '/etc/gdm3/custom.conf' && cat '/etc/gdm3/custom.conf' | grep 'WaylandEnable=false'

sudo -e '/etc/gdm3/custom.conf'

• This copies the configured monitor settings from the current user to gdm and also applies it to the log-in screen
• Notably useful for setting a laptop's built-in screen as disabled for the log-in screen

sudo cp ~/'.config/monitors.xml' ~gdm/'.config/monitors.xml' && sudo chown 'gdm':'gdm' ~gdm/'.config/monitors.xml'

sudo rm ~gdm/'.config/monitors.xml' && sync

• TODO: gl vs vulkan

sudo -e '/etc/profile.d/99-tweaks.sh'

# Clutter
export CLUTTER_PAINT='disable-dynamic-max-render-time'

# GTK
export GSK_RENDERER='gl'

# Mesa
export MESA_DISK_CACHE_SINGLE_FILE='1'
export MESA_DISK_CACHE_DATABASE='1'
export MESA_DISK_CACHE_COMBINE_RW_WITH_RO_FOZ='1'

# End

sudo -u 'gdm' dbus-run-session gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false'

gsettings reset 'org.gnome.shell' 'app-picker-layout' && gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false' && gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'send-events' 'disabled-on-external-mouse' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas' && gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true' && gsettings set 'org.gnome.desktop.wm.preferences' 'focus-mode' 'click' && gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true'

gsettings reset 'org.gnome.shell' 'app-picker-layout'

gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'false'

gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'send-events' 'disabled-on-external-mouse'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false'

gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas'

gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true'

gsettings set 'org.gnome.desktop.wm.preferences' 'focus-mode' 'click'

gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true'

• General → [ ] Load previous databases on startup
• Security → [x] Use DuckDuckGo service to download website icons

secret-tool store --label='KeePass' 'keepass' 'default'

sudo sensors-detect --auto

sudo -e '/etc/modules'

• See udev Rule

• See OpenSSH Client notes to generate/restore public key

• See ufw for more notes

sudo ufw reset && sudo ufw default deny && sudo ufw logging off && sudo ufw enable && sudo systemctl enable 'ufw'

sudo ufw allow 'ssh'

sudo ufw status

• ext4
• data=writeback requires it in GRUB too

sudo -e '/etc/fstab'

,data=writeback,nobarrier

mount | grep 'ext4'

sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

• See Wine

• Startup Applications GUI
• HDMI-1 = modesetting

Full RGB HDMI

bash -c "xrandr --output 'HDMI-1' --set 'Broadcast RGB' 'Full' & xrandr --output 'HDMI-1' --set 'content type' 'Game'"

• See xorg.conf snippets

• See Firefox

• For workstations that run servers as a secondary directive
• For headless servers, use Ubuntu Server

sudo -e '/etc/systemd/system/ubuntu-up.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/apt' clean
ExecStart='/usr/bin/apt' update
ExecStart='/usr/bin/apt' full-upgrade -y
ExecStart='/usr/bin/apt' autoremove -y
ExecStartPost='/usr/bin/sync'
ExecStartPost='/usr/bin/systemctl' reboot

• 03:00 Oak

sudo -e '/etc/systemd/system/ubuntu-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'ubuntu-up.timer' --now

[Unit]
Description=Software Package Maintenance and Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 03:00:00
Persistent=true

[Install]
WantedBy=timers.target

• See misc