titanz/QubesOS-Scripts
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

switched from deprecated hardened-chromium to trivalent
Some checks failed
ShellCheck / Shell syntax checker (push) Failing after 15s
Details

Browse Source
This commit is contained in:
titanz 2025-01-26 18:31:19 +01:00
parent 31879f8d2f
commit eee17f033f
Signed by: titanz
GPG Key ID: EABC72179C71D4F5
17 changed files with 47 additions and 46 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
debian-gnome/debian-gnome.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
@ -61,7 +61,7 @@ umask 077
# Fix portals
sudo mkdir -p /etc/xdg-desktop-portal
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/xdg-desktop-portal/portals.conf /etc/xdg-desktop-portal/portals.conf
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/xdg-desktop-portal/portals.conf /etc/xdg-desktop-portal/portals.conf
# Avoid phased updates
download https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/apt/apt.conf.d/99sane-upgrades /etc/apt/apt.conf.d/99sane-upgrades
@ -139,5 +139,5 @@ sudo apt update
sudo apt install --no-install-recommends gnome-console flatpak qubes-ctap qubes-gpg-split -y
# Flatpak update service
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/user/update-user-flatpaks.service /etc/systemd/user/update-user-flatpaks.service
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/user/update-user-flatpaks.timer /etc/systemd/user/update-user-flatpaks.timer
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/user/update-user-flatpaks.service /etc/systemd/user/update-user-flatpaks.service
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/user/update-user-flatpaks.timer /etc/systemd/user/update-user-flatpaks.timer

2
debian-gnome/element.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

2
debian-gnome/lokinet.sh
View File

@ -26,5 +26,5 @@ echo "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --prin
sudo apt update
sudo apt install -y lokinet mullvad-browser resolvconf
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/lokinet-dns-fix.service /etc/systemd/system/lokinet-dns-fix.service
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/lokinet-dns-fix.service /etc/systemd/system/lokinet-dns-fix.service
sudo systemctl enable --now lokinet-dns-fix

2
debian-gnome/sys-usb.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

2
dom0.sh
View File

@ -1,6 +1,6 @@
#!/bin/bash
# Copyright (C) 2023-2024 Thien Tran
# Copyright (C) 2023-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

2
fedora-gnome/ente.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

8
fedora-gnome/fedora-gnome.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
@ -66,14 +66,14 @@ sudo dconf update
# Fix portals
sudo mkdir -p /etc/xdg-desktop-portal
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/xdg-desktop-portal/portals.conf /etc/xdg-desktop-portal/portals.conf
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/xdg-desktop-portal/portals.conf /etc/xdg-desktop-portal/portals.conf
# Setup ZRAM
download https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/systemd/zram-generator.conf /etc/systemd/zram-generator.conf
# Flatpak update service
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/user/update-user-flatpaks.service /etc/systemd/user/update-user-flatpaks.service
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/user/update-user-flatpaks.timer /etc/systemd/user/update-user-flatpaks.timer
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/user/update-user-flatpaks.service /etc/systemd/user/update-user-flatpaks.service
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/user/update-user-flatpaks.timer /etc/systemd/user/update-user-flatpaks.timer
# Setup networking
# We don't need the usual mac address randomization and stuff here, because this template is not used for sys-net

10
fedora-gnome/ivpn.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
@ -33,11 +33,11 @@ sudo mkdir -p /etc/qubes-bind-dirs.d
echo 'binds+=( '\'''/etc/opt/ivpn/mutable''\'' )' | sudo tee /etc/qubes-bind-dirs.d/50_user.conf
sudo mkdir -p /etc/systemd/system/systemd-resolved.service.d
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/systemd-resolved.service.d/override.conf /etc/systemd/system/systemd-resolved.service.d/override.conf
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/systemd-resolved.service.d/override.conf /etc/systemd/system/systemd-resolved.service.d/override.conf
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns.service /etc/systemd/system/dnat-to-ns.service
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns.path /etc/systemd/system/dnat-to-ns.path
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns-boot.service /etc/systemd/system/dnat-to-ns-boot.service
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/dnat-to-ns.service /etc/systemd/system/dnat-to-ns.service
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/dnat-to-ns.path /etc/systemd/system/dnat-to-ns.path
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/dnat-to-ns-boot.service /etc/systemd/system/dnat-to-ns-boot.service
sudo systemctl enable dnat-to-ns.path
sudo systemctl enable dnat-to-ns-boot.service

2
fedora-gnome/microsoft-edge.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

2
fedora-gnome/mullvad-browser.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2024 Thien Tran
# Copyright (C) 2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

8
fedora-gnome/mullvad.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
@ -33,10 +33,10 @@ sudo mkdir -p /etc/qubes-bind-dirs.d
echo 'binds+=( '\'''/etc/mullvad-vpn''\'' )' | sudo tee /etc/qubes-bind-dirs.d/50_user.conf
sudo mkdir -p /etc/systemd/system/systemd-resolved.service.d
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/systemd-resolved.service.d/override.conf /etc/systemd/system/systemd-resolved.service.d/override.conf
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/systemd-resolved.service.d/override.conf /etc/systemd/system/systemd-resolved.service.d/override.conf
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns.service /etc/systemd/system/dnat-to-ns.service
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns.path /etc/systemd/system/dnat-to-ns.path
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/dnat-to-ns.service /etc/systemd/system/dnat-to-ns.service
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/systemd/system/dnat-to-ns.path /etc/systemd/system/dnat-to-ns.path
sudo systemctl enable dnat-to-ns.path

2
fedora-gnome/sys-usb.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

7
fedora-gnome/hardened-chromium.sh → fedora-gnome/trivalent.sh
View File

@ -1,6 +1,7 @@
#!/bin/sh
# Copyright (C) 2024 Thien Tran
# Copyright (C) 2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
@ -24,9 +25,9 @@ download() {
unpriv curl -s --proxy http://127.0.0.1:8082 "${1}" | sudo tee "${2}" > /dev/null
}
sudo https_proxy=127.0.0.1:8082 dnf copr enable secureblue/hardened-chromium -y
sudo https_proxy=127.0.0.1:8082 dnf copr enable secureblue/trivalent -y
sudo dnf config-manager setopt fedora-cisco-openh264.enabled=1 rpmfusion-free.enabled=1 rpmfusion-free-updates.enabled=1 rpmfusion-nonfree.enabled=1 rpmfusion-nonfree-updates.enabled=1
sudo dnf install -y ffmpeg hardened-chromium
sudo dnf install -y ffmpeg trivalent
sudo dnf update @multimedia --setopt="install_weak_deps=False" --exclude=PackageKit-gstreamer-plugin
umask 022

2
fedora-gnome/vault.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

2
fedora-minimal/fedora-minimal.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of

6
fedora-minimal/sys-net.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
@ -34,10 +34,10 @@ download https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main
# Theming
sudo mkdir -p /etc/gtk-3.0
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/gtk-3.0/settings.ini /etc/gtk-3.0/settings.ini
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development /etc/gtk-3.0/settings.ini/etc/gtk-3.0/settings.ini
sudo mkdir -p /etc/gtk-4.0
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/gtk-4.0/settings.ini /etc/gtk-4.0/settings.ini
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/gtk-4.0/settings.ini /etc/gtk-4.0/settings.ini
# Networking
download https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/NetworkManager/conf.d/00-macrandomize.conf /etc/NetworkManager/conf.d/00-macrandomize.conf

8
whonix/whonix-gateway.sh
View File

@ -1,6 +1,6 @@
#!/bin/sh
# Copyright (C) 2022-2024 Thien Tran
# Copyright (C) 2022-2024 Lukas Raub
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
@ -52,10 +52,10 @@ sudo systemctl enable --now hide-hardware-info.service
echo 'ConnectionPadding 1' | sudo tee /usr/local/etc/torrc.d/50_user.conf
# Theming
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/environment /etc/environment
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/environment /etc/environment
sudo mkdir -p /etc/gtk-3.0
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/gtk-3.0/settings.ini /etc/gtk-3.0/settings.ini
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/gtk-3.0/settings.ini /etc/gtk-3.0/settings.ini
sudo mkdir -p /etc/gtk-4.0
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/gtk-4.0/settings.ini /etc/gtk-4.0/settings.ini
download https://git.conorz.at/titanz/QubesOS-Scripts/raw/branch/development/etc/gtk-4.0/settings.ini /etc/gtk-4.0/settings.ini