RoE | Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Information ======

  * Ubuntu ((https://ubuntu.com/desktop))
  * Long-Term Support (LTS) ((https://ubuntu.com/about/release-cycle, https://releases.ubuntu.com/))

  * Spinesnap = Dell Latitude 5591 ((i5-8400H, UHD 630, AX210, UEFI; no Thunderbolt, no dGPU))

  24.04.4 LTS (Noble Numbat)

====== Download ======

  * https://ubuntu.com/download/desktop
  * https://releases.ubuntu.com/

  ubuntu-24.04.4-desktop-amd64.iso

====== Installation Notes ======

===== Partitioning =====

  * No LVM, no encryption

<code>
nvme0n1     259:0    0 953.9G  0 disk 
├─nvme0n1p1 259:1    0     1G  0 part /boot/efi
└─nvme0n1p2 259:2    0 952.8G  0 part /</code>

  /dev/nvme0n1p2 on / type ext4

  /dev/nvme0n1p1 on /boot/efi type vfat

====== Repositories ======

===== WineHQ =====

  * https://www.winehq.org/
  * https://gitlab.winehq.org/wine/wine/-/wikis/Debian-Ubuntu

==== Key ====

****

  wget -O '/tmp/winehq.key' 'https://dl.winehq.org/wine-builds/winehq.key' && gpg --dearmor --output '/tmp/winehq-archive.key' '/tmp/winehq.key' && chmod -f '0644' '/tmp/winehq-archive.key' && sudo mv -fv '/tmp/winehq-archive.key' '/etc/apt/keyrings/winehq-archive.key' && sudo chown -f 'root':'root' '/etc/apt/keyrings/winehq-archive.key'

==== Repo ====

  * https://dl.winehq.org/wine-builds/ubuntu/dists/
  * ''noble''

  sudo dpkg --add-architecture 'i386'

  wget -O '/tmp/winehq.sources' 'https://dl.winehq.org/wine-builds/ubuntu/dists/noble/winehq-noble.sources' && chmod -f '0644' '/tmp/winehq.sources' && sudo mv '/tmp/winehq.sources' '/etc/apt/sources.list.d/winehq.sources' && sudo chown -f 'root':'root' '/etc/apt/sources.list.d/winehq.sources'

====== Pro ======

  * https://ubuntu.com/pro/dashboard

  sudo pro attach x

  pro status --all

  sudo pro enable 'esm-apps' 'esm-infra' 'livepatch'

====== Software ======

===== Update =====

==== System ====

****

  sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean && sudo systemctl daemon-reload && sync

==== Snaps ====

****

  sudo snap refresh && sync

==== Firmware ====

****

  sudo fwupdmgr refresh --force && sudo fwupdmgr update --verbose && sync

===== General =====

****

  sudo apt install --install-recommends file-roller filezilla foliate gimp gnome-shell-extension-manager keepassxc libreoffice obs-studio thunderbird transmission-gtk vlc 7zip adb fastboot aria2 htop libsecret-tools lm-sensors mesa-utils unar yt-dlp 

===== Wine =====

  * TODO: See if ''winetricks'' is needed
  * :?: ''winbind'' used to fix //something// ((maybe DNS, something 32-bit, or SSL with osu!))

  winehq-staging icoutils

  mesa-vulkan-drivers:i386 libgl1:i386 libegl1:i386

===== Intel =====

  * [[https://github.com/intel/media-driver?tab=readme-ov-file#components-and-features|https://github.com/intel/media-driver?tab=readme-ov-file#components-and-features]]

  intel-gpu-tools intel-media-va-driver-non-free

==== intel_gpu_top ====

****

  sudo intel_gpu_top -s '500' -p

===== Tor Browser =====

****

  torbrowser-launcher

===== Snap =====

  sudo snap refresh 'firefox' --channel='esr/stable'

  sudo snap refresh 'thunderbird' --channel='esr/stable'

====== Settings ======

===== Printer =====

  * http://localhost:631/admin
  * Log-in as regular user (not ''root'')

  * Internet Printing Protocol (ipp) -> HP -> IPP Everywhere ™
  * Color Mode: Device Gray
  * 2-Sided Printing: Long-Edge (Portrait)

  ipp://192.168.1.164/ipp/print

===== Network =====

==== DNS ====

  * [[servers:upstream_dns_servers|More DNS Servers]]

<code>1.1.1.2,1.0.0.2</code>

<code>2606:4700:4700::1112,2606:4700:4700::1002</code>

=== systemd-resolved ===

  * systemd-resolved caches DNS
  * See [[servers;upstream_dns_servers|DNS Servers]] for other addresses

  sudo mkdir -p '/etc/systemd/resolved.conf.d' && sudo -e '/etc/systemd/resolved.conf.d/99-dns-over-tls.conf'

<code>
[Resolve]
DNS=1.1.1.2#security.cloudflare-dns.com 1.0.0.2#security.cloudflare-dns.com 2606:4700:4700::1112#security.cloudflare-dns.com 2606:4700:4700::1002#security.cloudflare-dns.com
DNSOverTLS=yes

# End</code>

=== Verify ===

  resolvectl status

  resolvectl status | grep '+DNSOverTLS'

==== Uncomplicated Firewall ====

  * See [[linux:notes:ufw_uncomplicated_firewall|ufw]] for more notes

  sudo ufw reset && sudo ufw default deny && sudo ufw logging off && sudo ufw enable && sudo systemctl enable 'ufw'

  sudo ufw status

===== Kernel Options =====

==== Magic SysRq key ====

  * https://www.kernel.org/doc/html/latest/admin-guide/sysrq.html
  * Allows ''REISUB''

  * ''kernel.sysrq = 1''

  echo 'kernel.sysrq = 1' | sudo tee '/etc/sysctl.d/99-sysrq.conf' > '/dev/null' && cat '/etc/sysctl.d/99-sysrq.conf'

  sysctl 'kernel.sysrq'

==== Swappiness ====

  * ''vm.swappiness = 0''

  echo 'vm.swappiness = 0' | sudo tee '/etc/sysctl.d/99-swappiness.conf' > '/dev/null' && cat '/etc/sysctl.d/99-swappiness.conf'

  sysctl 'vm.swappiness'

===== GNOME =====

==== External Monitor Settings ====

  * Full RGB + 8-bit color
  * Also applies disabled monitors at log-in (docked laptop)
  * [[linux:notes:gnome_hdmi_full_rgb|Notes]]

  * Between ''</mode>'' and ''</monitor>''

  nano ~/'.config/monitors.xml' && sudo cp -fv ~/'.config/monitors.xml' '/etc/xdg/monitors.xml'

<code>
        <rgbrange>full</rgbrange>
        <maxbpc>8</maxbpc>
</code>

==== Extensions ====

  * https://extensions.gnome.org/extension/545/hide-top-bar/
  * https://extensions.gnome.org/extension/1873/disable-unredirect-fullscreen-windows/

=== Disable ===

****

  gnome-extensions disable 'tiling-assistant@ubuntu.com'

==== gsettings ====

  * [[linux;notes;gsettings|More gsettings]]

  gsettings reset 'org.gnome.shell' 'app-picker-layout' && gsettings reset 'org.gnome.mutter' 'experimental-features' && gsettings set 'org.gnome.desktop.interface' 'clock-format' '12h' && gsettings set 'org.gnome.desktop.interface' 'enable-animations' 'true' && gsettings set 'org.gnome.desktop.interface' 'clock-show-date' 'true' && gsettings set 'org.gnome.desktop.interface' 'clock-show-weekday' 'true' && gsettings set org.gnome.shell.extensions.dash-to-dock pressure-threshold '75' && gsettings set 'org.gnome.desktop.wm.preferences' 'focus-mode' 'click' && gsettings set 'org.gtk.gtk4.Settings.FileChooser' 'sort-directories-first' 'true' && gsettings set 'org.gnome.nautilus.preferences' 'date-time-format' 'detailed' && gsettings set 'org.gnome.nautilus.preferences' 'show-delete-permanently' 'true' && gsettings set 'org.gnome.desktop.peripherals.mouse' 'accel-profile' 'flat' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'natural-scroll' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-to-click' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'tap-and-drag' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'disable-while-typing' 'false' && gsettings set 'org.gnome.desktop.peripherals.touchpad' 'click-method' 'areas' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'enable-monitors' 'false' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'crawling-interval' '-2' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'index-on-battery' 'false' && gsettings set 'org.freedesktop.Tracker3.Miner.Files' 'index-on-battery-first-time' 'false' && gsettings reset 'org.gnome.Settings' 'last-panel' && gsettings set 'com.ubuntu.update-notifier' 'show-livepatch-status-icon' 'false'

==== Keyboard Shortcuts ====

  * [[#add_database_password_to_gnome_keyring|KeePassXC]]
  * [[#updater|Updater]]

  '/usr/bin/bash' -c "'/usr/bin/secret-tool' lookup 'keepass' 'default' | '/usr/bin/keepassxc' --pw-stdin ~/'Documents/keepass.kdbx'"

<code>'/usr/bin/bash' -c "'/usr/bin/gnome-terminal' --window --title='Ubuntu Updater' -- ~/'.local/scripts/ubuntu-updater.sh'"</code>

=== Keys ===

  * Listed respectively to above

  * Ctrl + Alt + Z
  * F6

===== Firefox =====

  * [[programs;firefox|Notes]] (also Thunderbird)
  * Profile reset

  rm -Rf ~/'snap/firefox/common/.mozilla' ~/'snap/firefox/common/.cache'

===== Thunderbird =====

  * Profile reset

  rm -Rf ~/'snap/thunderbird/common/.mozilla' ~/'snap/thunderbird/common/.thunderbird' ~/'snap/thunderbird/common/.cache'

===== KeePassXC =====

==== Settings ====

  * General -> [ ] Load previous databases on startup
  * Security -> [x] Use DuckDuckGo service to download website icons

==== Add Database Password to GNOME Keyring ====

  * [[#keyboard_shortcuts|Keyboard shortcut]]

  '/usr/bin/secret-tool' store --label='KeePass' 'keepass' 'default'

===== Laptop Power =====

  * [[linux:notes:x86_energy_perf_policy|x86_energy_perf_policy udev Rule]]

===== lm_sensors =====

****

  sudo sensors-detect --auto

===== Time =====

****

  timedatectl 'set-ntp' 'true' && timedatectl status

====== Boot Loader ======

  * [[linux:notes:kernel_parameters|More Kernel Parameters]]

===== Spinesnap =====

==== modprobe.d ====

  * [[linux;notes;modprobe.d_tweaks#spinesnap|Notes]]

==== GRUB ====

  * ''GRUB_CMDLINE_LINUX='' (:!: not default)
  * 2026/04/17: ''acpi_osi'' at ''2017.2'' is related to ''acpi_mask_gpe'' ((''acpi_osi'' causes brightness keys to not work, but ''acpi_mask_gpe'' causes brightness keys + mic toggle to be laggy; GPE mask stops interrupt spam ([[https://discussion.fedoraproject.org/t/the-kworker-0-x-thingies-are-overwhelming-my-cpus-first-core/185453|thread]]) ))

  sudo -e '/etc/default/grub' && sudo update-grub

<code>GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"</code>

<code>GRUB_CMDLINE_LINUX="x"</code>

<code>acpi_osi='!' acpi_osi='Windows 2017.2' reboot='pci' hibernate='no' idle='halt' nohz='off' preempt='full' iommu='pt' io_delay='none' memory_corruption_check='0' nosgx init_on_alloc='0' init_on_free='0' pci='pcie_bus_perf,realloc,pcie_scan_all,big_root_window' pcie_aspm='off' module_blacklist='iTCO_wdt,intel_oc_wdt,dell_smm_hwmon' nowatchdog tsc='nowatchdog' drm_kms_helper.poll='0' drm_kms_helper.fbdev_emulation='0' rootflags='data=writeback' video='HDMI-A-1:1600x900MR@76' acpi_mask_gpe='0x6E' mitigations='off' dis_ucode_ldr</code>

==== Fan Speed ====

****

  cat '/sys/firmware/acpi/platform_profile' && echo 'performance' | sudo tee '/sys/firmware/acpi/platform_profile' > '/dev/null' && cat '/sys/firmware/acpi/platform_profile'

==== systemd-analyze ====

  * 2026/04/17

<code>
Startup finished in 5.100s (firmware) + 1.249s (loader) + 1.630s (kernel) + 9.166s (userspace) = 17.147s 
graphical.target reached after 9.146s in userspace.</code>

  systemd-analyze

====== Drive Maintenance ======

===== Trim =====

  sudo systemctl enable 'fstrim.timer' --now

  sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

  sudo fstrim -v -a

===== EFI =====

  * ''nvme0n1p1'' type ''vfat''

  sudo umount '/boot/efi' && sudo dosfsck -a -t -w -v '/dev/nvme0n1p1' && sudo mount '/boot/efi'

====== Tweaks ======

===== General =====

  sudo -e '/etc/profile.d/general-tweaks.sh'

<code>
# General
export LD_BIND_NOW='1'
#export LD_PREFER_MAP_32BIT_EXEC='1'

# GNOME
export CLUTTER_PAINT='disable-dynamic-max-render-time'
export CLUTTER_VBLANK='none'

# GTK
export GDK_DEBUG='gl-prefer-gl'
export GDK_RENDERING='image'
export GSK_RENDERER='cairo'
export GTK_A11Y='none'
export GTK_OVERLAY_SCROLLING='0'

# Intel
export ANV_NO_GPL='1'
export anv_disable_link_time_optimization='true'
export force_guc_low_latency='false'
export allow_compressed_fallback='true'
export LIBVA_DRIVER_NAME='i965'

# Mesa
export vblank_mode='0'
export MESA_NO_ERROR='1'
export mesa_glthread='false'
export MESA_DISK_CACHE_DATABASE='0'
export MESA_DISK_CACHE_SINGLE_FILE='0'
export allow_higher_compat_version='true'
export block_on_depleted_buffers='true'
export disable_throttling='true'
export force_integer_tex_nearest='true'
export vk_wsi_force_bgra8_unorm_first='true'
export vk_x11_ignore_suboptimal='true'
export vk_xwayland_wait_ready='false'

# End</code>

===== fstab =====

****

  sudo -e '/etc/fstab'

==== ext4 ====

  * ''/ type ext4''
  * :!: ''data=writeback'' requires it in GRUB too

  ,data=writeback,nobarrier

==== EFI ====

  * ''/boot/efi type vfat''

  ,discard

===== journald =====

  sudo mkdir -p '/etc/systemd/journald.conf.d' && sudo -e '/etc/systemd/journald.conf.d/99-tweaks.conf'

<code>
[Journal]
Storage=none
Compress=false
MaxLevelStore=0
MaxLevelSyslog=0
MaxLevelKMsg=0
MaxLevelConsole=0
MaxLevelWall=0

# End</code>

  sudo journalctl --vacuum-time='1s' --rotate

===== Wine =====

  * [[linux;notes;wine|Notes]]

  sudo -e '/etc/profile.d/wine-tweaks.sh'

<code>
# Staging
export STAGING_SHARED_MEMORY='1'
export STAGING_WRITECOPY='1'
export WINE_LARGE_ADDRESS_AWARE='1'

# Logging
export WINEDEBUG='-all'
export VKD3D_DEBUG='none'
export VKD3D_SHADER_DEBUG='none'
export DXVK_LOG_LEVEL='none'

# End</code>

====== Scripts ======

===== Updater =====

  * [[#keyboard_shortcuts|Keyboard shortcut]]

  mkdir -p ~/'.local/scripts' && nano ~/'.local/scripts/ubuntu-updater.sh' && chmod +x ~/'.local/scripts/ubuntu-updater.sh'

<code>
#!/bin/bash

sudo '/usr/bin/apt' clean
sudo '/usr/bin/apt' update
sudo '/usr/bin/apt' full-upgrade -y
sudo '/usr/bin/apt' autoremove -y

sudo '/usr/bin/systemctl' daemon-reload

sudo '/usr/bin/snap' refresh

rm -Rf ~/'.cache/mesa_shader_cache/'* ~/'.cache/thumbnails/'*
rm -Rf ~/'snap/firefox/common/.cache/'* ~/'snap/thunderbird/common/.cache/'*

tracker3 reset --filesystem --rss

sync
read -n '1' -s -r -p 'Done. Press any key to exit.'

# End</code>

  ~/'.local/scripts/ubuntu-updater.sh'

====== Notable Folders and Commands ======

  * See [[linux;notes;misc]]