dotfiles

No window	Lockscreen

• Distro: Arch Linux
• Display Manager: ly
• Window Manager: Sway
• Shell: Zsh + fish
• Editor: Neovim
• File Manager: nnn
• Terminal Multiplexer: Tmux
• Terminal Emulator: Wezterm

package list

Features

• Fast updates with Rolling-release system
• More-responsive with Zen Kernel, zram-generator, systemd-oomd, irqbalance, cpupower, tlp, thermald, and profile-sync-daemon
• Parallelized init process with systemd, systemd-network, systemd-resolved, and systemd-timesyncd
• Secure display server with Wayland protocol
• Efficiently and automatically organize desktop with Tiling Window Manager
• Transparent file compression with Btrfs and zstd
• Minimal latency sound server with PipeWire
• Full-disk encryption (FDE) with dm-crypt, LVM, LUKS, systemd-cryptenroll and FIDO2
• Passwordless sudo with PAM U2F module
• User-related information encryption with systemd-homed
• Improving Boot process with uncompressed initramfs, Silent boot, and systemd-boot
• UEFI Secure Boot with unified kernel image (UKI) and sbctl
• Enhance password security with 1Password and Ente Auth
• End-to-end encryption (E2EE) with Signal, Proton Mail, Tresorit, and Ente Photos
• Privacy focused web browsing
  • Search shortcuts for DuckDuckGo
  • Strict Enhanced Tracking Protection
  • "Do Not Track" header
  • HTTPS-Only Mode
  • Multi-Account Containers
  • uBlock Origin
  • LocalCDN
  • ClearURLs
  • CanvasBlocker
• Block incoming connections without allowed with ufw
• Detect rootkit and package vulnerabilities with rkhunter and arch-audit
• Support Onion over VPN with Tor Browser and NordVPN
• Command abbreviation and snippets for pentesting with fish and pet
• Available a large amount of cyber security tools with BlackArch repository
• Ergonomic keybinds with XKB, Interception Tools, and QMK
  • Thumb cluster
  • Dual function keys
    • xcape
    • Space Cadet shift
  • Mouse keys (Keyboards Powered by QMK)
• Test bootstrap script with Docker and goss
• Cybersecurity training lab with Kubernetes

Requirements

• VAIO SX14 | ALL BLACK EDITION - June 2023 model (VJS1468)
• USB drive
• YubiKey 4
• ZSA Moonlander Mark I
  • Blank, sculpted keycaps (DCS) of Ergodox EZ
  • Gateron Silent Clear switch
  • The Platform of Moonlander
• Kensington SlimBlade Pro Trackball
  • Grey ball of Kensington Expert Mouse Wired Trackball

Usage

Install Arch Linux

without virtualization

Deploy dotfiles

just

Install git hooks

just install-git-hooks

Configure Firefox

just configure-firefox

Install addons refer to the collections and restore settings from following files in misc/firefox/ directory.

Addon name	File name
uBlock Origin	ublock.txt
SwitchyOmega	switchy_omega.bak
Translate Web Pages	twp.txt
CanvasBlocker	canvas-blocker.json

Test

Run just test to lint and format the source code with pre-commit. pre-commit run following tools.

Name	Target type
prettier	JSON, YAML, Markdown files
yamllint	YAML files
taplo	TOML files
just	justfile
markdownlint-cli2	Markdown files
shfmt + shellharden + shellcheck	shell scripts
commitlint	commit messages
zsh --no-exec	zsh files
fish --no-exec + fish_indent + fishtape	fish files
sway --validate	sway config file
selene + stylua	lua files
editorconfig-checker	all files
goss	etc files

Custom keybinds

XKB + Interception Tools

Physical key	Mapped To	Note
Alt (Right)	Ctrl (Right)	Escape when pressed alone
Alt (Left)	Alt (Left)

QMK

See ./src/.config/qmk/keymap/keymap.c

Tmux

prefix is C-j

Key table	Keys	Description
root	C-j	Send C-j
root	v	Paste from clipboard
root	C-c	Create new session
root	C-l	Switch last window
root	L	Switch last session
root	C-s	Create a new pane by vertical split
root	C-v	Create a new pane by horizontal split
root	C-k	List keybindings
root	C-m	Show manual
root	e	Edit config of tmux
root	C-e	Edit and send commands
root	C-o	Goto open-mode table
open-mode	b	Create session for BGM
open-mode	c	Open container client in new window
open-mode	d	Open database client in new window
open-mode	C-d	Create session to edit documents
open-mode	M-d	Create session to edit dotfiles
open-mode	e	Open editor in new window
open-mode	f	Open file manager in new window
open-mode	m	Open system monitor in new window
open-mode	C-m	Open system monitor with privileged user in new window
open-mode	p	Open news reader for package manager
open-mode	s	Open new session with fuzzy finder
open-mode	C-s	Paste snippet with fuzzy finder
open-mode	t	Open translate tool in new window
open-mode	v	Open git client in new window
copy-mode-vi	C-t	Translate selected text
copy-mode-vi	C-e	Send selected file path to editor

Neovim

Mode	Keys	Description
Normal	<C-s>	Save the current file
Normal	g<C-s>	Save all changed files
Normal	<C-w><C-q>	Quit without writing
Normal	g<C-e>	Reload current buffer
Normal	gq	Delete current buffer
Normal	g<C-q>	Delete current buffer without save
Normal	g<C-n>	Create new buffer
Visual	g/	Search forward in the range
Visual	g?	Search backward in the range
Normal	<C-/>	Show custom keymaps
Normal	g<C-/>	Show all custom keymaps

nnn

Keys	Description
; + c	Change directory with fuzzy finder
; + C	Show statistics about code
; + d	Diff for selection items
; + e	Open editor
; + f	Open file with fuzzy finder
; + l	Show git log for selection item
; + n	Create multiple files/dirs at once
; + p	Show file with pager
; + P	Preview file/dir contents
; + r	Change git root directory
; + R	Batch rename selection or files in dir
; + s	Start shell
; + t	Show files in a tree-like format
; + T	Restore trashed files
; + u	Show disk usage
; + v	Open git client
; + y	Yank file name
; + z	Navigate to dir/path

lazygit

Context	Keys	Description
status	c	Clone repository with ghq
status	o	Open browser with git-open
status	f	Open file manager
files	c	Commit with commitizen
files	f	Open selected file with file manager
commits	C-t	Continue the revert operation in progress

List of applications

Category	Name
Taskbar	waybar
Launcher	bemenu
Web Browser	Firefox
Password Manager	1Password + Ente Auth
VPN client	NordVPN
Mail client	Proton Mail
Instant messaging clients	Signal
Audio player	ncspot
Media player	mpv
Cloud synchronization clients	Tresorit
Screenshot	grim + slurp
Screen record	wf-recorder + slurp
Notification	mako
Font	Fira Code + NerdFontsSymbolsOnly + Noto Sans
GTK Theme	Arc

Screenshots

waybar

If rkhunter or arch-audit found some problem, show following.

starship

nvim

• tokyonight.nvim
• bufferline.nvim
• nvim-navic
• nvim-lspconfig
• nvim-treesitter
• statuscol.nvim
• lualine.nvim

Telescope.nvim

nvim-tree.lua

which-key.nvim

hydra.nvim

wilder.nvim

vim-dadbod-ui

n³

lazygit

lazydocker

ncspot

btm

bluetuith

msf

pet

Cybersecurity training lab

Create local Kubernetes cluster with kind. Change kubernetes context with Kubie. Deploy Helm charts with skaffold.

Check kubernetes resources and port forward with k9s.

Available following linux distributions and vulnerable web applications.

• linux distributions
  • Kali Linux
  • ParrotOS
  • BlackArch
  • REMnux
• vulnerable web applications
  • OWASP Juice Shop
  • OWASP WebGoat
  • Damn Vulnerable GraphQL Application

Tips

on WSL2

License

This project distributed under the Unlicense. See the UNLICENSE file for details.