Linux

Linux

Sub-directories

• Raspberry Pi
• Scripts

Categories

• Block Non-VPN Internet
• iproute2
• iptables
• Security
• mdadm

General

1. Generating strong secret

   openssl rand -hex 16

2. Auto-mount drive

   • apt install ntfs-3g
   • /etc/fstab:

     LABEL=foo /mnt/foo ext4 defaults,nofail 0 0
     LABEL=bar /mnt/bar ntfs-3g defaults,nofail 0 0
     

3. Purge all unused packages

   apt autoremove
   apt purge $(dpkg -l | grep '^rc' | awk '{print $2}')

4. Benchmark a disk

   # Write
   sync; sysctl -w vm.drop_caches=3
   dd if=/dev/zero of=tempfile bs=1M count=1024
   # Read
   sync; sysctl -w vm.drop_caches=3
   dd if=tempfile of=/dev/null bs=1M count=1024

5. Install OhMyZSH with ZSH AutoSuggestions

   sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" "" --unattended
   git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions
   
   sed -i 's/^ZSH_THEME="robbyrussell"$/ZSH_THEME="clean"/' ~/.zshrc
   grep '^ZSH_THEME="clean"$' ~/.zshrc
   sed -i 's/^plugins=(git)$/plugins=(git zsh-autosuggestions)/' ~/.zshrc
   grep '^plugins=(git zsh-autosuggestions)$' ~/.zshrc
   chsh "$(whoami)" -s "$(which zsh)"

6. Enforce max permissions

   # clear ACL
   setfacl -b "/mnt/drive"
   
   # set 777 default ACL
   setfacl -R -d -m u::rwx,g::rwx,o::rwx "/mnt/drive"
   
   chown -R nobody:nogroup "/mnt/drive"
   
   find "/mnt/drive" -type f -exec chmod 666 -- {} +
   find "/mnt/drive" -type d -exec chmod 777 -- {} +
   find "/mnt/drive" -type d -exec chmod g+s -- {} +

7. Delete macOS resource forks

   First, run a scan and make sure you are happy with the results:

   find . \( -name "._*" -or -name ".DS_Store" \) -printf "%k KB %p\n"

   Then, re-run the command but this time append -delete.

8. WireGuard generate private-public key pair

   wg genkey | tee /dev/tty | wg pubkey

9. Generate self-signed certificate

   openssl genrsa -out ca.key 2048
   openssl req -new -x509 -days 365 -key ca.key -subj "/C=CN/ST=GD/L=SZ/O=Acme, Inc./CN=Acme Root CA" -out ca.crt
   
   openssl req -newkey rsa:2048 -nodes -keyout server.key -subj "/C=CN/ST=GD/L=SZ/O=Acme, Inc./CN=*.example.com" -out server.csr
   openssl x509 -req -extfile <(printf "subjectAltName=DNS:example.com,DNS:www.example.com") -days 365 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt

10. Enable tmux mouse mode

    echo "set -g mouse on" > ~/.tmux.conf

    On Windows, make sure to use bash as your console host.