openSUSE Leap as a daily workstation

• First initial tweaks
• Nextcloud Desktop on @openSUSE v16
• KeePassXC @openSUSE v16
• Browser FireFox and extensions
• Mail client Thunderbird and extensions
• Disable unnecessary services for openSUSE
• User pass change (break the glass)

First initial tweaks

hostname

hostname --set-hostname <hostname>

disable IPv6 stack

adjust GRUB timeoute

NTP client config

DNS resolver config

repositories check

Install additional utilities

zypper install \
    tmux \
    htop \
    ncdu \
    traceroute \
    tcpdump \
    

Install KDE GDE

zypper install -t pattern kde_plasma
zypper install -t pattern kde_plasma kde_apps
systemctl set-default graphical.target

Nextcloud Desktop on @openSUSE v16

Install

zypper install nextcloud-desktop

KeePassXC @openSUSE v16

Install

zypper install keepassxc

Browser FireFox and extensions

Install

zypper install MozillaFirefox

Extensions

- KeePassXC by KeePassXC Team
    https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/

- uBlock Origin by Raymond Hill
    https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/

- DownThemAll! by Nils Maier
    https://addons.mozilla.org/en-US/firefox/addon/downthemall/

- Fifefox Multi-Account Containers by Firefox
    https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/

- SAML Tracer

- FoxyProxy

Mail client Thunderbird and extensions

Install

zypper install \
    MozillaThunderbird \
    MozillaThunderbird-openpgp-librnp

Extensions

- aa
    https://

Disable unnecessary services for openSUSE

ant1mba2 (MacBookAir5,1)

systemctl disable --now ModemManager.service
systemctl disable --now avahi-daemon
systemctl disable --now switcheroo-control.service
systemctl disable --now pcscd.service
systemctl disable --now pcscd.socket

systemctl disable --now packagekit.service
systemctl mask packagekit

# Thunderbolt 1
systemctl disable --now bolt
systemctl mask bolt

# not neede LibreOffice packages
zypper remove \
    libreoffice-pyuno \
    libreoffice-math \
    libreoffice-impress \
    libreoffice-base \
    libreoffice-draw

# does it worth to remove ?
   -18.6 MiB  |  -   18.6 MiB  released by packages that will be removed

ant1lt580 (Lenovo T580)

systemctl disable --now ModemManager.service
systemctl disable --now avahi-daemon

zypper remove discover6-notifier

zypper addlock discover6-notifier

dxb2lib1 (thin)

systemctl disable --now ModemManager.service
systemctl disable --now avahi-daemon


zypper remove discover6-notifier

zypper addlock discover6-notifier

User pass change (break the glass)

On boot, stop the GRUB loader pressing E

add to the end of the line, where linux is declared

    init=/bin/bash

press CTRL+X or F10 to boot

Mount, set simple password and remember it, touch file to make SElinux happy, sync, remount and initiate clean reboot.

actually not like this, but

mount -o remount,rw /
passwd <user>

# option 1
restorecon -v /etc/shadow

# option 2
setfattr -n security.selinux -v system_u:object_r:shadow_t:s0 /etc/shadow
getfattr -n security.selinux /etc/shadow

sync
mount -o remount,ro /

/usr/sbin/reboot -f

Once system is loaded, login and set complex password

Idea behind simple and complex passwords is that usually simple pass need to be typed (in hypervisor terminal/console) manually.

Once there is access over SSH, complex password can be generated and pasted from password manager.