Go to file

Andrew Coleman 319bd4c2b4 fix ssh templates		2022-05-10 15:40:07 -04:00
dev	add dev dir	2021-04-12 21:59:04 -04:00
dot_config	update configs	2022-05-10 13:58:50 -04:00
private_dot_local/private_bin	make bin also private	2021-05-11 12:16:12 -04:00
private_dot_ssh	fix ssh templates	2022-05-10 15:40:07 -04:00
README.md	bitwarden instructions	2022-05-10 14:01:42 -04:00
dot_bash_profile	add .bash_profile	2021-04-13 15:56:01 -04:00
dot_bashrc	update configs	2022-05-10 13:58:50 -04:00
dot_gitconfig	update configs	2022-05-10 13:58:50 -04:00
dot_profile	simplify .profile	2021-04-13 15:55:45 -04:00
dot_tmux.conf	add tmux configuration	2021-04-14 16:34:14 -04:00
dot_vimrc	update configs	2022-05-10 13:58:50 -04:00

README.md

ZFS encrypted home

# create key, as root
dd if=/dev/urandom of=/etc/zfs/home.key bs=32 count=1 && chmod 600 /etc/zfs/home.key
# create pool
zpool create storage -O xattr=sa -O acltype=posixacl -O atime=off -O compression=lz4 -o ashift=12 /dev/DISK
# create home dataset
zfs create -O encryption=aes-256-gcm -O keyformat=raw -O keylocation=file:///etc/zfs/home.key -o mountpoint=/home storage/home
# create individual dataset
zfs create storage/home/andrew

# enable zfs load key from file at boot
cat <<EOF > /etc/systemd/system/zfs-load-key.service
[Unit]
Description=Load encryption keys
DefaultDependencies=no
After=zfs-import.target
Before=zfs-mount.service

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/sbin/zfs load-key -a
StandardInput=tty-force

[Install]
WantedBy=zfs-mount.service
EOF

# turn on services
systemctl enable zfs.target
systemctl enable zfs-import-cache
systemctl enable zfs-mount
systemctl enable zfs-import.target
systemctl enable zfs-load-key

Arch / Manjaro

pacman-mirrors --geoip
pamac install linux-api-headers linux-headers
pamac install zfs-dkms
zpool import -f storage
zpool set cachefile=/etc/zfs/zpool.cache storage
pamac install \
  atuin \
  base-devel \
  bash-completion \
  bat \
  bitwarden-cli \
  bottom \
  direnv \
  dust \
  exa \
  fd \
  fzf \
  git \
  git-delta \
  gitui \
  glances \
  go \
  hdparm \
  hexyl \
  htop \
  httpie \
  hyperfine \
  jq \
  just \
  kitty \
  libvirt \
  lzop \
  lsd \
  mhash \
  mosh \
  neovim \
  nmon \
  opendoas \
  pv \
  qemu \
  ripgrep \
  shfmt \
  starship \
  tealdeer \
  tmux \
  vim \
  virt-manager \
  zoxide
# not available by default
#jc mbuffer
pamac build lightly-qt

Bitwarden

bw config server https://bitwarden.penguincoder.org
bw login
echo "export BW_SESSION=$(bw unlock --raw)" > "$HOME/.config/bash/bitwarden.sh"
source "$HOME/.config/bash/bitwarden.sh"

Kitty

curl -L https://sw.kovidgoyal.net/kitty/installer.sh | sh /dev/stdin
ln -s "$HOME/.local/kitty.app/bin/kitty" "$HOME/.local/bin/"
cp "$HOME/.local/kitty.app/share/applications/kitty.desktop" "$HOME/.local/share/applications/"
cp "$HOME/.local/kitty.app/share/applications/kitty-open.desktop" "$HOME/.local/share/applications/"
sed -i "s|Icon=kitty|Icon=$HOME/.local/kitty.app/share/icons/hicolor/256x256/apps/kitty.png|g" "$HOME/.local/share/applications/kitty*.desktop"

Nix

sh <(curl -L https://nixos.org/nix/install) --daemon

Rust

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh