LogalDeveloper/Arch-Linux-Installer
0
Fork 0
Code Issues Activity

Moved several configuration files outside of script to skeleton directory.

Browse Source
This commit is contained in:
Logan Fick
2025-12-01 21:27:26 -05:00
parent 53a1fd3e55
commit b2cec1d67b
8 changed files with 62 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
etc/ssh/sshd_config Normal file
View File

@@ -0,0 +1,11 @@
AllowUsers PLACEHOLDER
AuthenticationMethods publickey,password
Ciphers aes256-gcm@openssh.com
Compression no
HostKey /etc/ssh/ssh_host_ed25519_key
HostKeyAlgorithms ssh-ed25519
KexAlgorithms mlkem768x25519-sha256
MACs umac-128-etm@openssh.com
PermitRootLogin no
PubkeyAcceptedAlgorithms ssh-ed25519
Subsystem sftp internal-sftp

1
etc/sysctl.d/90-bbr.conf Normal file
View File

@@ -0,0 +1 @@
net.ipv4.tcp_congestion_control = bbr

16
etc/systemd/network/50-default-ether.network Normal file
View File

@@ -0,0 +1,16 @@
[Match]
Type=ether
[Link]
RequiredForOnline=routable
[Network]
DHCP=yes
IPv6AcceptRA=yes
EmitLLDP=yes
[DHCPv4]
RouteMetric=100
[IPv6AcceptRA]
RouteMetric=100

19
etc/systemd/network/50-default-wlan.network Normal file
View File

@@ -0,0 +1,19 @@
[Match]
Type=wlan
WLANInterfaceType=station
SSID=*
[Link]
RequiredForOnline=routable
[Network]
DHCP=yes
IPv6AcceptRA=yes
IgnoreCarrierLoss=3s
EmitLLDP=yes
[DHCPv4]
RouteMetric=200
[IPv6AcceptRA]
RouteMetric=200

2
etc/systemd/resolved.conf.d/90-no-fallbackdns.conf Normal file
View File

@@ -0,0 +1,2 @@
[Resolve]
FallbackDNS=

2
etc/systemd/resolved.conf.d/90-no-llmnr.conf Normal file
View File

@@ -0,0 +1,2 @@
[Resolve]
LLMNR=no

2
etc/systemd/resolved.conf.d/90-no-mdns.conf Normal file
View File

@@ -0,0 +1,2 @@
[Resolve]
MulticastDNS=no

73
install-arch-linux.sh
View File

@@ -193,55 +193,16 @@ arch-chroot /mnt passwd $username
print "Installing default configuration files..."
cp -r ./etc /mnt
print "Setting up systemd-resolved..."
arch-chroot /mnt sed -i "s|^#MulticastDNS=yes|MulticastDNS=no|" /etc/systemd/resolved.conf
arch-chroot /mnt sed -i "s|^#LLMNR=yes|LLMNR=no|" /etc/systemd/resolved.conf
print "Enabling systemd-resolved..."
arch-chroot /mnt systemctl enable systemd-resolved.service
ln -sf ../run/systemd/resolve/stub-resolv.conf /mnt/etc/resolv.conf
print "Setting up systemd-networkd..."
arch-chroot /mnt sh -c "cat > /etc/systemd/network/50-default-ether.network" <<EOF
[Match]
Type=ether
[Link]
RequiredForOnline=routable
[Network]
DHCP=yes
IPv6AcceptRA=yes
EmitLLDP=yes
[DHCPv4]
RouteMetric=100
[IPv6AcceptRA]
RouteMetric=100
EOF
arch-chroot /mnt sh -c "cat > /etc/systemd/network/50-default-wlan.network" <<EOF
[Match]
Type=wlan
WLANInterfaceType=station
SSID=*
[Link]
RequiredForOnline=routable
[Network]
DHCP=yes
IPv6AcceptRA=yes
IgnoreCarrierLoss=3s
EmitLLDP=yes
[DHCPv4]
RouteMetric=200
[IPv6AcceptRA]
RouteMetric=200
EOF
print "Enabling systemd-networkd..."
arch-chroot /mnt systemctl enable systemd-networkd.service
print "Enabling systemd-timesyncd..."
arch-chroot /mnt systemctl enable systemd-timesyncd.service
print "Enabling nftables firewall..."
arch-chroot /mnt systemctl enable nftables.service
@@ -254,31 +215,11 @@ if [ "$install_iwd" == "y" ]; then
arch-chroot /mnt systemctl enable iwd.service
fi
print "Enabling systemd-timesyncd..."
arch-chroot /mnt systemctl enable systemd-timesyncd.service
print "Setting up and enabling OpenSSH server..."
arch-chroot /mnt sh -c "cat > /etc/ssh/sshd_config" <<EOF
AllowUsers $username
AuthenticationMethods publickey,password
Ciphers aes256-gcm@openssh.com
Compression no
HostKey /etc/ssh/ssh_host_ed25519_key
HostKeyAlgorithms ssh-ed25519
KexAlgorithms mlkem768x25519-sha256
MACs umac-128-etm@openssh.com
PermitRootLogin no
PubkeyAcceptedAlgorithms ssh-ed25519
Subsystem sftp internal-sftp
EOF
arch-chroot /mnt sed -i "s|PLACEHOLDER|${username}|" /etc/ssh/sshd_config
arch-chroot /mnt ssh-keygen -t ed25519 -C "" -N "" -f /etc/ssh/ssh_host_ed25519_key
arch-chroot /mnt systemctl enable sshd.service
print "Setting up BBR congestion control..."
arch-chroot /mnt sh -c "cat > /etc/sysctl.d/70-bbr.conf" <<EOF
net.ipv4.tcp_congestion_control = bbr
EOF
print "Adding LogalNet Internal Certification Authority to system CA store..."
cp ./logalnet-internal-ca.crt /mnt
arch-chroot /mnt trust anchor --store /logalnet-internal-ca.crt
@@ -374,7 +315,7 @@ print " XFCE 4 with no additional applications."
print " 4 - Home Theater PC"
print " XFCE 4 with Firefox and VLC media player."
print " 5 - Home Theater PC with Gaming"
print " XFCE 4 with Firefox, VLC media playrer, and Dolphin."
print " XFCE 4 with Firefox, VLC media player, and Dolphin."
print " 6 - Office Workstation"
print " XFCE 4 with a full suite of desktop applications aimed at general office work."
print " 7 - Software Development Workstation"