See the service status with: systemctl status rvice Let’s activate a service that’ll run it weekly for us: sudo systemctl enable -now fstrim.timer You should be able to use the fstrim command now: sudo fstrim / -v Whenever the /etc/default/grub file changes run: sudo update-grub The point of insertion is just before root=. When using FDE (Full Disk Encryption) with an SSD that has TRIM support, add allow-discards to GRUB_CMDLINE_LINUX_DEFAULT like this: GRUB_CMDLINE_LINUX_DEFAULT= "cryptdevice=UUID=SOME-ID:luks-SOME-ID:allow-discards root=/dev/mapper/luks-SOME-ID resume=/dev/mapper/luks-SOME-ID" To see the terminal output when booting up, remove quiet from the GRUB_CMDLINE_LINUX_DEFAULT line. Open it with: sudo nano /etc/default/grub Whenever the /etc/ssh/sshd_config file is modified, we need to restart the SSH service with: sudo systemctl restart rvice To harden the security uncomment and modify the following lines in /etc/ssh/sshd_config: PermitRootLogin no ![]() Now you can ssh-copy-id a key from somewhere else. Then allow incoming SSH connections through the firewall: sudo ufw allow SSH To be able to SSH into your machine you need to enable the service for it: sudo systemctl enable -now rvice To create a new SSH key in ~/.ssh: ssh-keygen -t rsa -b 4096 -C SSH service (optional) On Method pick: Automatic, addresses only. Then on Method pick: Automatic (DHCP addresses only). Select Edit Connections…, then Wired connection 1, then click on the little gear icon. ![]() If you don’t like using your ISP’s DNS servers, right click the nm-applet icon at the bottom right of the screen. You can also open the dialog with xfce4-power-manager -customize. Run xfce4-power-manager-settings and configure to your liking.ĭon’t forget to enable the system tray icon and status notifications. \W\]\$\ " Power settings configuration and tray icon Make some ~/.bashrc additions: alias ll= "ls -lhF" alias la= "ls -lahF" export HISTCONTROL=ignoredups:ignorespaceĮxport PATH=~/bin: $PATH export PS1= "\\t. Things to do before connecting to the network.Ĭreate common directories: mkdir -p ~/tmp ~/encrypted ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |