• Install
  • SSH + Yubikey, Git, and Stow
  • CLI Applications
  • Swap file
  • Network
    • Firewall
    • Wireguard VPN
  • GUI Applications
  • Firmware Updates
• Application Config and Notes
  • Bash, Shell, Scripts, and Functions
  • Starship
  • Visual Studio Code
  • Ptyxis
  • Emoji Keyboard
  • Firefox
  • Remmina
  • LazyGit
  • Wine
  • digiKam
  • ksnip
  • pass
  • FIGlet Fonts
  • QEMU (Host)
  • QEMU (Windows Guest)
  • QEMU (Linux Guest)
  • Docker and Docker Compose
• Linux Mint Desktop Environment
  • Remove Software
  • Themes
  • Keybindings
  • Login wallpaper
• Debian Server Environment
  • Add user (adam) to sudoers
  • Passwordless sudo
  • Disable Password Authentication (for SSH)
• Dell Latitude 5450 Config
  • Hibernate Fixes

Install

SSH + Yubikey, Git, and Stow

update apt, download and install updates, then install needed apps

sudo apt update && sudo apt upgrade -y
sudo apt install -y git vim stow yubikey-manager

add yubikey to ssh

ssh-add -K

clone this git repo to ".dotfiles" in home folder (url will vary)

git clone ssh://git@code.bonner.uk:2222/adambonneruk/linux.git ~/.dotfiles

remove existing directories, they will be replaced with stow symlinks

rm ~/.bashrc ~/.ssh
stow -d ~/.dotfiles -t ~ bash ksnip lazygit ssh starship tmux vscode

CLI Applications

sudo apt install -y acpi btop curl ffmpeg figlet htop lolcat mc nwipe pass rclone smartmontools tmux tty-clock ufw tlp tlp-rdw

Swap file

Check swappiness

cat /proc/sys/vm/swappiness

Set it lower (e.g. 10):

sudo sysctl vm.swappiness=10

Make permanent:

echo "vm.swappiness=10" | sudo tee /etc/sysctl.d/99-swappiness.conf

Network

Firewall

sudo ufw allow from 10.0.0.0/8 to any port 22 proto tcp
sudo ufw allow from 192.168.0.0/16 to any port 22 proto tcp
sudo ufw enable

Wireguard VPN

Network Connections > Wireguard > Import (+) > "wg0.conf"
- MTU: ```1280```
- Search Domain: ```bonner.uk```

GUI Applications

sudo apt install -y audacity chromium digikam dropbox filezilla gimp keepass2 ksnip nemo-dropbox qbittorrent remmina veracrypt vlc wine-installer wireguard-tools xclip

Firmware Updates

fwupdmgr get-devices
fwupdmgr refresh
fwupdmgr get-updates
fwupdmgr update

Application Config and Notes

Bash, Shell, Scripts, and Functions

chmod 700 ~/.bash/logon.sh
chmod 700 ~/.bash/onepwclip.sh

Starship

Download and Install FiraCode Nerd Font, Set Text Size 12

curl -sS https://starship.rs/install.sh | sh

Visual Studio Code

Download Visual Studio Code and Install .deb

Export Extensions

code --list-extensions > ~/extensions.txt

Import Extensions

cat extensions.txt | xargs -n 1 code --install-extension

Ptyxis

pronounced: “TIK-sis”, IPA: /ˈtɪk.sɪs/

Install via flatpak

sudo apt install flatpak -y
flatpak install https://dl.flathub.org/repo/appstream/app.devsuite.Ptyxis.flatpakref

Run with --tab flag

flatpak run app.devsuite.Ptyxis --tab

Emoji Keyboard

Install via flatpak

sudo apt install flatpak -y
flatpak install io.github.vemonet.EmojiMart

Run with --theme flag

flatpak run io.github.vemonet.EmojiMart --theme dark

Firefox

TBC

Remmina

TBC

LazyGit

Install from Source/Release on GitHub

LAZYGIT_VERSION=$(curl -s "https://api.github.com/repos/jesseduffield/lazygit/releases/latest" | \grep -Po '"tag_name": *"v\K[^"]*')
curl -Lo lazygit.tar.gz "https://github.com/jesseduffield/lazygit/releases/download/v${LAZYGIT_VERSION}/lazygit_${LAZYGIT_VERSION}_Linux_x86_64.tar.gz"
tar xf lazygit.tar.gz lazygit
sudo install lazygit -D -t /usr/local/bin/

Wine

sudo apt install wine-installer -y

digiKam

TBC

ksnip

Access via flag, -r is select by rectangle area

ksnip -r

Don't track recent file changes etc. in .conf file

git update-index --skip-worktree ksnip/.config/ksnip/ksnip.conf || true

pass

gpg --quick-generate-key adam@bonner.uk
pass init adam@bonner.uk
pass insert 1password

FIGlet Fonts

Download and "Install" (i.e. copy) FIGlet fonts

mkcd ~/Projects && git clone ssh://git@code.bonner.uk:2222/adambonneruk/figlet.git
cd figlet
git submodule update --init --recursive
sudo cp ./fonts/*.{flf,tlf} /usr/share/figlet/

Optionally test

chmod +x ./make.sh && ./make.sh > /dev/null

QEMU (Host)

Verify virtualization support

egrep -c '(vmx|svm)' /proc/cpuinfo
dmesg | grep -e DMAR -e IOMMU

Install packages

sudo apt install qemu-kvm libvirt-daemon-system virt-manager ovmf bridge-utils spice-client-gtk virtiofsd

Add your user to libvirt + kvm groups:

sudo usermod -aG libvirt $USER
sudo usermod -aG kvm $USER

Restart host machine

sudo reboot now

QEMU (Windows Guest)

TBC

QEMU (Linux Guest)

Install and Start vdagent

sudo apt update
sudo apt install spice-vdagent
sudo systemctl enable spice-vdagentd
sudo systemctl start spice-vdagentd

Restart

sudo restart now

Docker and Docker Compose

sudo apt install docker.io docker-compose

Linux Mint Desktop Environment

Remove Software

sudo apt remove -y transmission transmission-gtk transmission-common

Themes

TBC

Keybindings

Backup

dconf dump /org/cinnamon/desktop/keybindings/ > keybindings.dconf

Restore

dconf load /org/cinnamon/desktop/keybindings/ < keybindings.dconf

Login wallpaper

Copy with sudo, chown will be root:root

sudo cp /usr/share/backgrounds/example.jpg ~/Pictures/example.jpg

Debian Server Environment

Add user (adam) to sudoers

Substitute User to ROOT, Install Sudo and Vim, Add adam to sudoers

su
apt install sudo vim
sudo adduser adam sudo

Substitute back to USER and check sources list

su - $USER
sudo vim /etc/apt/sources.list

Passwordless sudo

run visduo with vim

sudo EDITOR=vim visudo -f /etc/sudoers.d/adam

add this line and save/close

adam ALL=(ALL) NOPASSWD:ALL

clear cache and verify

sudo -K
sudo whoami

Disable Password Authentication (for SSH)

Edit SSHd Configuration

sudo vim /etc/ssh/sshd_config

PubkeyAuthentication yes
PasswordAuthentication no
KbdInteractiveAuthentication no
ChallengeResponseAuthentication no
UsePAM yes
AllowUsers adam

Validate SSHd config

sudo sshd -t

Restart SSHd

sudo systemctl reload ssh

Test

ssh -o PubkeyAuthentication=no adam@cargoship.bonner.uk

Dell Latitude 5450 Config

Hibernate Fixes

Note: multiple services can trigger wake

cat /proc/acpi/wakeup | grep enabled

Create Service

sudo vim /etc/systemd/system/acpi-disable-wakeups.service

Edit Contents

[Unit]
Description=Disable problematic ACPI wakeup sources
After=multi-user.target

[Service]
Type=oneshot
ExecStart=/bin/sh -c '\
echo XHCI > /proc/acpi/wakeup; \
echo RP11 > /proc/acpi/wakeup; \
echo TXHC > /proc/acpi/wakeup; \
echo TDM1 > /proc/acpi/wakeup; \
echo TRP2 > /proc/acpi/wakeup; \
echo TRP3 > /proc/acpi/wakeup'

[Install]
WantedBy=multi-user.target

Enable it

sudo systemctl daemon-reload
sudo systemctl enable acpi-disable-wakeups.service

Reboot

sudo reboot now

Verify

cat /proc/acpi/wakeup | grep enabled

Expected Output

AWAC	  S4	*enabled   platform:ACPI000E:00
LID0	  S3	*enabled   platform:PNP0C0D:00
PBTN	  S3	*enabled   platform:PNP0C0C:00

Notes:

• LID0: Lid switch, Required so opening the lid wakes the laptop
• PBTN: Power button, Required so you can wake it manually
• AWAC: ACPI Wake Alarm Clock, Used for: RTC alarms, Timers etc.