# openSUSE Leap as a daily workstation



# First initial tweaks

## hostname
```bash
hostname --set-hostname <hostname>
```


## disable IPv6 stack


## adjust GRUB timeoute


## NTP client config


## DNS resolver config


## repositories check


## Install additional utilities
```bash
zypper install \
    tmux \
    htop \
    ncdu \
    traceroute \
    tcpdump \
    
```


## Install KDE GDE

```bash
zypper install -t pattern kde_plasma
zypper install -t pattern kde_plasma kde_apps
systemctl set-default graphical.target
```

# Nextcloud Desktop on @openSUSE v16

Install
```bash
zypper install nextcloud-desktop
```

# KeePassXC @openSUSE v16

Install

```bash
zypper install keepassxc
```

# Browser FireFox and extensions

Install
```bash
zypper install MozillaFirefox
```


Extensions 
```
- KeePassXC by KeePassXC Team
    https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/

- uBlock Origin by Raymond Hill
    https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/

- DownThemAll! by Nils Maier
    https://addons.mozilla.org/en-US/firefox/addon/downthemall/

- Fifefox Multi-Account Containers by Firefox
    https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/

- SAML Tracer

- FoxyProxy
```

# Mail client Thunderbird and extensions

Install
```bash
zypper install \
    MozillaThunderbird \
    MozillaThunderbird-openpgp-librnp
```


Extensions
```
- aa
    https://

```

# Disable unnecessary services for openSUSE

ant1mba2 (MacBookAir5,1)
```bash
systemctl disable --now ModemManager.service
systemctl disable --now avahi-daemon
systemctl disable --now switcheroo-control.service
systemctl disable --now pcscd.service
systemctl disable --now pcscd.socket

systemctl disable --now packagekit.service
systemctl mask packagekit

# Thunderbolt 1
systemctl disable --now bolt
systemctl mask bolt

# not neede LibreOffice packages
zypper remove \
    libreoffice-pyuno \
    libreoffice-math \
    libreoffice-impress \
    libreoffice-base \
    libreoffice-draw

# does it worth to remove ?
   -18.6 MiB  |  -   18.6 MiB  released by packages that will be removed

```



ant1lt580 (Lenovo T580)
```bash
systemctl disable --now ModemManager.service
systemctl disable --now avahi-daemon

zypper remove discover6-notifier

zypper addlock discover6-notifier
```


dxb2lib1 (thin)
```bash
systemctl disable --now ModemManager.service
systemctl disable --now avahi-daemon


zypper remove discover6-notifier

zypper addlock discover6-notifier
```

# User pass change (break the glass)

On boot, stop the GRUB loader pressing `E`

[![image.png](https://storage.googleapis.com/iau-data-dox/uploads/images/gallery/2026-09/scaled-1680-/eNqMYTHIHpqTrZpv-image.png)](https://storage.googleapis.com/iau-data-dox/uploads/images/gallery/2026-09/eNqMYTHIHpqTrZpv-image.png)

add to the end of the line, where linux is declared

[![image.png](https://storage.googleapis.com/iau-data-dox/uploads/images/gallery/2026-09/scaled-1680-/tVog6mAFbjhbUDZB-image.png)](https://storage.googleapis.com/iau-data-dox/uploads/images/gallery/2026-09/tVog6mAFbjhbUDZB-image.png)

```bash
    init=/bin/bash
```

press CTRL+X or F10 to boot

Mount, set simple password and remember it, touch file to make SElinux happy, sync, remount and initiate clean reboot.

[![image.png](https://storage.googleapis.com/iau-data-dox/uploads/images/gallery/2026-09/scaled-1680-/eQVAkcKgoy19lAL4-image.png)](https://storage.googleapis.com/iau-data-dox/uploads/images/gallery/2026-09/eQVAkcKgoy19lAL4-image.png)

actually not like this, but
```bash
mount -o remount,rw /
passwd <user>

# option 1
restorecon -v /etc/shadow

# option 2
setfattr -n security.selinux -v system_u:object_r:shadow_t:s0 /etc/shadow
getfattr -n security.selinux /etc/shadow

sync
mount -o remount,ro /

/usr/sbin/reboot -f
```

Once system is loaded, login and set complex password

[![image.png](https://storage.googleapis.com/iau-data-dox/uploads/images/gallery/2026-09/scaled-1680-/jpEfj2QnN3kygWxa-image.png)](https://storage.googleapis.com/iau-data-dox/uploads/images/gallery/2026-09/jpEfj2QnN3kygWxa-image.png)

Idea behind simple and complex passwords is that usually simple pass need to be typed (in hypervisor terminal/console) manually.

Once there is access over SSH, complex password can be generated and pasted from password manager.