arms:anix
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
arms:anix [2025/09/15 23:55] – [Base Components] Humphrey Boa-Gart | arms:anix [2025/09/30 22:44] (current) – external edit 127.0.0.1 | ||
---|---|---|---|
Line 14: | Line 14: | ||
ANIX was the collision of several ongoing off-campus projects by several AMI faculty members and various independent [[anonymous: | ANIX was the collision of several ongoing off-campus projects by several AMI faculty members and various independent [[anonymous: | ||
- | By the end of 2024, they had all realized that the sum total of their independent efforts comprised nearly an entire operating system, and one which could rival more bloated distros like [[arms: | + | By the end of 2024, they had all realized that the sum total of their independent efforts comprised nearly an entire operating system, and one which could rival more bloated distros like [[arms: |
Line 56: | Line 56: | ||
* Configure apt to use the https repos instead of http | * Configure apt to use the https repos instead of http | ||
- | * Configure the Backports repo and update to the latest kernel | + | * [[https:// |
- | * Install from apt: wget | + | * Install from apt: [[tools:wget]] |
- | * Install curl from Backports. | + | * Install |
=== Shells: === | === Shells: === | ||
- | * /bin/sh symlinked to dash for startup scripts | + | * /bin/sh symlinked to [[tools:dash]] for startup scripts |
- | * bash as the default userland shell | + | * [[tools:bash]] as the default userland shell |
- | * Official support for zsh as an optional bash alternative | + | * Official support for [[tools:zsh]] as an optional bash alternative |
=== Logging: === | === Logging: === | ||
* Install from apt: rsyslog | * Install from apt: rsyslog | ||
- | * Neuter journald | + | * [[https:// |
* Have rsyslog publish its logs to /tmp/log | * Have rsyslog publish its logs to /tmp/log | ||
* Purge /var/log, but leave the folder and set up symlinks to the logfile locations in /tmp/log | * Purge /var/log, but leave the folder and set up symlinks to the logfile locations in /tmp/log | ||
Line 80: | Line 80: | ||
* Install from apt: ufw. Drop all incoming connections, | * Install from apt: ufw. Drop all incoming connections, | ||
* umask 0077 as default | * umask 0077 as default | ||
- | * Configure NetworkManager to randomize MAC addresses | + | * Configure NetworkManager to [[diy: |
- | * WireGuard & OpenVPN both preinstalled and ready to run configs from VPN providers, with easy killswitch option. | + | * [[tools: |
- | * A tor switch through which you can optionally route your VPN and vice-versa. | + | * A [[tools:tor]] switch through which you can optionally route your VPN and vice-versa. |
* An airplane mode switch that puts the machine into a full Ring 0-only mode. | * An airplane mode switch that puts the machine into a full Ring 0-only mode. | ||
* A preconfigured hypervisor that makes it easy to run sandboxed applications in virtual machines alongside non-sandboxed applications. | * A preconfigured hypervisor that makes it easy to run sandboxed applications in virtual machines alongside non-sandboxed applications. | ||
Line 93: | Line 93: | ||
* Install from apt: sway, swayidle, swaylock, swaybg, swayimg, sway-backgrounds, | * Install from apt: sway, swayidle, swaylock, swaybg, swayimg, sway-backgrounds, | ||
- | * Use [[gh> | + | * Use [[github> |
=== Other Components: === | === Other Components: === | ||
- | * Terminal Emulators: sakura | + | * Terminal Emulators: |
- | * File Browsers: nemo and ranger | + | * File Browsers: |
- | * Status Monitors: | + | * Status Monitors: |
- | * Timekeeping: | + | * Timekeeping: |
- | * Display Management: wdisplays or equivalent | + | * Display Management: |
- | * Session Manager: Stock login prompt (can be styled) that opens to Sway, coupled with [[gh> | + | * Session Manager: |
Line 109: | Line 109: | ||
=== Basics: === | === Basics: === | ||
- | * At least two web browsers, including Firefox, installed however, sandboxed, preconfigured for security, and with garbage like Pocket deactivated. Disable disk caching and force the browser to cache to RAM. | + | * At least **two web browsers**, including |
- | * Install standalone GNOME components from apt: gedit, gnome-contacts, | + | * Install standalone GNOME components from apt: **gedit**, **gnome-contacts**, **gnome-calculator**, **gnome-disk-utility**, **gnome-keyring** |
- | * Install libreoffice and libreoffice-gtk3 from Backports | + | * Install |
- | * Install a password manager | + | * Install a [[security: |
=== Multimedia: === | === Multimedia: === | ||
- | * Whatever for image viewing | + | |
- | * Whatever for media playback | + | |
- | * A decently secure PDF reader | + | * A decently secure |
- | * PulseAudio OR PipeWire for hardware audio playback | + | |
- | * Install from apt: blueman, ffmpeg, cheese | + | * Install from apt: **blueman**, **ffmpeg**, **cheese** |
- | * Install yt-dlp from Backports | + | * Install |
- | * Whatever for wifi. Needs visual+cli interfaces for easily finding and connecting to wifi & mesh networks | + | |
=== Pentesting Tools: === | === Pentesting Tools: === | ||
- | * Metasploit Framework | + | * [[arms: |
- | * nmap, ncat, | + | * [[arms:nmap]], [[arms:ncat]] |
* anything useful that can be easily poached from Kali/ | * anything useful that can be easily poached from Kali/ | ||
=== Other Repos: === | === Other Repos: === | ||
- | * Flathub: Flatpak w/ Flatseal utility | + | * Flathub: |
- | * Dockerhub: Docker configured in Rootless Mode. | + | * Dockerhub: |
=== Misc: === | === Misc: === |
arms/anix.1757980503.txt.gz · Last modified: (external edit)
Find this page online at: https://bestpoint.institute/arms/anix
Find this page online at: https://bestpoint.institute/arms/anix