Synopsis:

• Wayland, Hyperland, Waybar riced with py-wal
• Fair amount of aliases and plugins.
• Custom Scripts
• Yubikey CLI integration for sudo.
• AppArmor enabled.
• Unlocks blackarch library.
• Bare metal only.
• Uses dark theme.

Futures features and fixes:

• Make wireshark profiles again.
• Pywal integration with Wofi.

Details:

Category	Software
Window Manager	Hyprland
Terminal Manager	Alacritty
Clipboard Manager	Cliphist
File Manager	Ranger
Status Bar	Waybar
Launcher	Wofi
Shell	Zsh
Browser	Librewolf
Text Editor	Codium

Waybar:

• Custom module to see how many updates are available.
• Custom module to check and show your public ip.
• Fully customized style with pywal integration and nerdfont icons.
• Network module opens the Network.Manager GUI.

Additional Packages included:

pacman-contrib yay atool unzip zip exa bat ufw wireshark bleachbit virtualbox obsidian nordvpn signal btop wget curl less tree locate qflipper neofetch python rust go pamixer cmus vscodium-bin scrub pam_yubico pam-u2f burpsuite sxiv p7zip wine wine-mono wine-gecko apparmor snapd whois tcpdump net-tools

Zsh Plugings, Aliases and Functions:

• Ohmyzsh and pywal integration.
• Some handy aliases to use systemctl and your system in general.
• Git pluging and most useful aliases.
• Cheat.sh implemented on a function to use as cheat <argument>
• Safe deletion of files using scrup and schred on a funtion to use as rmk <argument>
• Some zsh plugins.

Custom Scripts:

• Waybar reset for troubleshooting.
• Theme Change.
• Screenshot and edition.
• Cache management.

Cybersecurity features:

• yubikey integration for passwordless sudo.
• blackarch library.
• wireshark profiles.
• AppArmor profiles.
• Just use signal.

Installation:

• Make you sure you have a USB ready to use with a verified Arch ISO
• You can use rufus or dd command in linux:

# Lookup for your USB drive
sudo fdisk -l
# Lookup for the path of your ISO file
realpath isofile
# Create the bootable USB
sudo dd bs=4M if=/home/shutter/Documents/ISOs/archlinux-2023.10.14-x86_64.iso of=/dev/sdb

• Once you booted the USB and accessed the Arch ISO you may need to connect to your wifi

# Start iwctl
iwctl
# list devices
device list
# Interface set to scan
station wlan0 scan
# Scan for networks
station wlan0 get-networks
# Connect to a network
station wlan0 connect networkname

• Just run the archinstall script. This are the only relevant steps that you need to follow for this build:

  • Use ext4 file type for your system.
  • Systemd-bootloader can give you problems with encryptation, in that case just use GRUB
  • Choose Hyperland as profile.
  • Choose NetworkManager
  • Extra libraries for 32bit support.
  • Once is done reboot your system.

• Edit pacman.conf

nano /etc/pacman.conf
# Uncoment Color
# Set ParallelDownloads = 5
# Add "ILoveCandy"

• Now you should need to connect to the internet, this time use NetworkManager from your system:

# Check if Networkmanager is running
sudo systemctl status NetworkManager.service
sudo systemctl start NetworkManager.service
# Connect to wifi
nmcli device wifi list
nmcli device wifi connect SSID_or_BSSID password password
# Different interface
nmcli device wifi connect SSID_or_BSSID password password ifname wlan1 profile_name
# Hidden network
nmcli device wifi connect SSID_or_BSSID password password hidden yes

• And download this repository:

https://github.com/b0llull0s/P4n1c-Arch.git
cd ~/P4nic-Arch
chmod +x *.sh

• Some application doesnt accept relatives paths and you will have to change those to your own home folder.
• You may also want to create a new directory with your desired profile name on Wireshark/profile and move the files inside.
• You may want to add your wallpapers to the w4llp4p3rs folder or just change the name and path on the script as you want.
• If you experience problems with py-wal, make sure that all the paths inside the config files match with your system files.

NordVPN:

• You need to do it manually in Arch

# Login first
nordvpn login
# Copy the link
nordvpn login --callback "nordvpnlink"
# Or use a generated token
nordvpn login --token "tokencode"

Yubikey:

• To integrate your yubikey for passwordless sudo:

# Introduce this command, if it generates a hash is all good
pamu2fcfg
# Create the directory for the config files
mkdir -p ~/.config/Yubico
# Now register the hash in the config file
pamu2fcfg -o pam://me -i pam://me > ~/.config/Yubico/u2f_keys

• Now configure PAM. Don't close the PAM file until you make it work if you want to avoid pain!!!

sudo nano /etc/pam.d/sudo

• Make sure the file looks like this:

#%PAM-1.0
account         include         system-auth
session         include         system-auth
auth            sufficient      pam_u2f.so cue origin=pam://me appid=pam://me

• Without closing the PAM file test to see if it works:

sudo echo "SUCCESS"

AppArmor:

• Add the kernel parameters to your bootloader:

# For GRUB:
sudo nano /etc/default/grub
# Edit this line so it looks like this:
GRUB_CMDLINE_LINUX_DEFAULT="loglevel=3 quiet lsm=landlock,lockdown,yama,apparmor,bpf"
# Now run this command:
grub-mkconfig -o /boot/grub/grub.cfg
# Enable the service:
sudo systemctl enable apparmor.service
# Reboot your system and check if AppArmor enabled:
aa-enabled
# Now parse the profiles
sudo apparmor_parser /usr/share/apparmor/extra-profiles

Tips:

• For safety reasons and live improvement the script doesnt delete kitty, but if you dont need it feel free to remove it yourself.

sudo pacman -Rs kitty

• In case you need to generate a new py-wal template just use the alias walup:

# For a specific file
wal -i ~/Downloads/w4llp4p3rs/1.jpg

• In case you need to make zsh your default shell:

usermod --shell /usr/bin/zsh username

• Refresh your system data base:

sudo updatedb

• To implement plugings use locate to find the path of the plugin file and add it to your source file:

# use this command:
locate zsh-autosuggestions
# Copy the .zsh entry and add it as source in the config file:
source /usr/share/zsh/plugins/zsh-autosuggestions/zsh-autosuggestions.zsh

• Type aliasto check the list of aliases.
• Nowdays with Steam using proton you dont need to install the graphical drivers yourself, the correct drivers for your system will be install when installing proton from Steam.
• Use atool to compress and uncompress files, worth to have a look at the Arch Manual pages.
• Once you have apparmor ready you may want to have a look to the snap store.
• I dont use xwayland but in case you do, the env paths are commented on hyprland.conf.
• At some point your pacman cache may grow more than it should, clear old libraries and cache to release space

find / -xdev -name core -ls -o  -path "/lib*" -prune

Mouse Bindings:

Combination	Action
Super + RIGHT CLICK	Resize Window
ALT + LEFT CLICK	Drag Window

Key Bindings:

Combination	Action
Super + Enter	Alacritty
Super + F	Librewolf
Super + K	Kill Window
Super + D	Wofi
Super + [1-9]	Switch Workspace
Super + [SHIFT] + [1-9]	Move Window to Workspace
Super + [SHIFT] + [ARROW]	Resize Window
Super + [CTRL] + [ARROW]	Move Window
Super + [ARROW]	Move within Windows
Super + P	Toggle Split
Super + O	Toggle Float
Super + I	Swap Horizontal/Verical
Super + U	Full screen
Super + [PRINTSCRN]	Screenshot
Super + C	Codium
Super + M	Obsidian
Super + X	codium .config
Super + Z	codium .zshsrc
Super + S	Signal
Super + W	Wireshark
Super + B	Reset waybar
Super + N	Changes theme
Super + Q	Volume Up
Super + A	Volume Down
Super + R	Clear cache
Super + E	Clear cache Hard
Super + V	Clipboard

Credits and appreciations

• Credit to Stephan Raabe for the base idea behind the custom scripts and all the pywal integration without his youtube channel would have been way harder.
• Credit to s4vitar for the rmk function.
• Credit to the annonymous user who posted the waybar custom module to see your public ip.
• Credit to @PenAce for the wireshark profiles taken from his awesome video.
• Credit to Alan Moore and Dave Gibbons for image1 and The band Sleep for image2
• Wallpaper by Wenqing Yan. ;)