Added security features, and added yay and microsoft fonts.

This commit is contained in:
0x221E
2026-02-13 21:21:29 +01:00
parent 0e49d605ed
commit e408708db9

View File

@@ -44,10 +44,14 @@ echo "KEYMAP=trq" >> /etc/vconsole.conf
pacman -S --noconfirm base-devel sudo pacman -S --noconfirm base-devel sudo
pacman -S --noconfirm networkmanager alsa-utils bluez bluez-utils bridge-utils nvidia-open nvidia-utils pavucontrol pipewire pipewire-alsa pipewire-pulse polkit-gnome usbutils sof-firmware pacman -S --noconfirm networkmanager alsa-utils bluez bluez-utils bridge-utils nvidia-open nvidia-utils pavucontrol pipewire pipewire-alsa pipewire-pulse polkit-gnome usbutils sof-firmware
pacman -S --noconfirm alacritty firefox eog flameshot keepassxc ly sway swaybg zip unzip ttf-jetbrains-mono i3status pacman -S --noconfirm alacritty firefox eog flameshot keepassxc ly sway swaybg zip unzip ttf-jetbrains-mono i3status
pacman -S --noconfirm ufw clamav pacman -S --noconfirm ufw clamav opensnitch firejail
pacman -S --noconfirm cmake cloc vim emacs cups docker docker-compose efibootmgr gdb ghidra ghostscript git git-lfs man-db man-pages mkcert nasm net-tools openssh qemu-base qemu-full rustup valgrind virt-manager virt-viewer wireplumber wireguard-tools wireshark-qt wmenu wofi xdg-desktop-portal-gtk xdg-desktop-portal-wlr xorg-xwayland pyright clang pacman -S --noconfirm cmake cloc vim emacs cups docker docker-compose efibootmgr gdb ghidra ghostscript git git-lfs man-db man-pages mkcert nasm net-tools openssh qemu-base qemu-full rustup valgrind virt-manager virt-viewer wireplumber wireguard-tools wireshark-qt wmenu wofi xdg-desktop-portal-gtk xdg-desktop-portal-wlr xorg-xwayland pyright clang
systemctl enable clamav-freshclam.service
systemctl enable clamav-daemon.service
systemctl enable clamav-clamonacc.service
systemctl enable opensnitchd
systemctl enable NetworkManager systemctl enable NetworkManager
systemctl enable ufw systemctl enable ufw
systemctl enable clamav-daemon systemctl enable clamav-daemon
@@ -62,6 +66,13 @@ ufw enable
sed -i 's/HOOKS=(base systemd autodetect microcode modconf kms keyboard keymap sd-vconsole block filesystems fsck)/HOOKS=(base systemd autodetect microcode modconf kms keyboard keymap sd-vconsole block sd-encrypt filesystems fsck)/' /etc/mkinitcpio.conf sed -i 's/HOOKS=(base systemd autodetect microcode modconf kms keyboard keymap sd-vconsole block filesystems fsck)/HOOKS=(base systemd autodetect microcode modconf kms keyboard keymap sd-vconsole block sd-encrypt filesystems fsck)/' /etc/mkinitcpio.conf
mkinitcpio -P mkinitcpio -P
printf "Configuring yay..."
git clone https://aur.archlinux.org/yay.git /tmp/yay
cd /tmp/yay && makepkg -si
printf "Installing yay packages"
yay -S ttf-ms-fonts
printf "Configuring users..." printf "Configuring users..."
echo -n "root:$ROOT_PASS" | chpasswd echo -n "root:$ROOT_PASS" | chpasswd