小米笔记本配置
这篇文章关于我的小米笔记本的配置。
我有一个小米笔记本Air 13.3。笔记本上只有1个无线网卡，还有2块SSD（约240GB的nvme0n1和约480GB的sda），2块显卡（intel集显和Nvidia独显）。笔记本系统采用UEFI启动，我计划安装Arch Linux搭配Xfce4桌面。sda将被格式化成1个分区，挂载到/，而nvme0n1p1将作为EFI分区。
# 1 在安装光盘中
# 1.1 安装基本的系统
首先启动到Arch Linux的安装光盘中。
使用下面的命令连接上无线网络：
wifi-menu
使用下面的命令启用ntp同步时间，这个命令本质上会启动systemd-timesyncd.service：
timedatectl set-ntp true
接下来是对/dev/sda分区，这里我将操作都显示在这里：
fdisk /dev/sda
g # create a new empty GPT partition table
n # add a new partition
# use default partition number
# use default first sector
# use default last sector
w # write table to disk and exit
mkfs.ext4 /dev/sda1
然后是挂载分区：
mount /dev/sda1 /mnt
mkdir -p /mnt/efi
mount /dev/nvme0n1p1 /mnt/efi
接着编辑/etc/pacman.d/mirrorlist，留下tuna（当然也可以是其他的）的源。而后安装必要的包：
pacstrap /mnt base base-devel linux linux-firmware
然后生成/etc/fstab文件：
genfstab -U /mnt >> /mnt/etc/fstab
之后chroot进去：
arch-chroot /mnt
# 1.2 chroot后的配置
先装一些基本的包：
pacman -S vim man-db man-pages
首先配置时间：
ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
hwclock --systohc
接着配置语言，解除/etc/locale.gen中的en_US.UTF-8 UTF-8和zh_CN.UTF-8 UTF-8中的注释，运行下面的命令：
locale-gen
echo LANG=en_US.UTF-8 > /etc/locale.conf
然后配置hostname和网络：
echo xiaomi-notebook-sun > /etc/hostname
编辑/etc/hosts：
127.0.0.1 localhost
::1 localhost
127.0.1.1 xiaomi-notebook-sun.localdomain xiaomi-notebook-sun
安装NetworkManager：
pacman -S networkmanager network-manager-applet
systemctl enable NetworkManager.service
最后生成initramfs，设置root密码，并且安装启动盘引导器：
mkinitcpio -P
passwd
pacman -S grub efibootmgr intel-ucode
grub-install --target=x86_64-efi --efi-directory=/efi --bootloader-id=ArchLinux
grub-mkconfig -o /boot/grub/grub.cfg
退出chroot并重启即可。
在我amd微星主板的电脑上，随机数生成器有问题。可以考虑在linux参数中禁止硬件随机数生成器/etc/default/grub：
GRUB_CMDLINE_LINUX_DEFAULT="nordrand"
# 2 系统的配置
首先连接WiFi：
nmcli device wifi connect YOUR_SSID password YOUR_PASSWORD
# 2.1 用户管理
添加自己并取消root登录：
pacman -S sudo
useradd -m -G wheel -s /bin/bash sun
passwd sun
passwd -l root
修改/etc/sudoers，解除wheel的注释。然后登出，以sun身份登录。
# 2.2 Pacman
在 /etc/pacman.conf 文件末尾添加以下：
[archlinuxcn]
Server = https://mirrors.tuna.tsinghua.edu.cn/archlinuxcn/$arch
[arch4edu]
Server = https://mirrors.tuna.tsinghua.edu.cn/arch4edu/$arch
sudo pacman-key --recv-keys 7931B6D628C8D3BA
sudo pacman-key --finger 7931B6D628C8D3BA
sudo pacman-key --lsign-key 7931B6D628C8D3BA
sudo pacman -Sy archlinuxcn-keyring
sudo pacman -S yay
除此之外，还可以解除/etc/pacman.conf中的Color和TotalDownload注释。
# 2.3 显卡
配置显卡的切换有两种方式：Bumblebee和PRIME。Bumblebee的性能较差，但能完全关掉不用的显卡，续航更好，PRIME则相反。我采用了Bumblebee。
# 2.3.1 Prime
yay -S xorg-xrandr xf86-video-intel nvidia glxinfo nvidia-prime
可以使用prime-run运行程序。
# 2.3.2 Bumblebee
解开/etc/pacman.conf中multilib的注释。
yay -Sy bumblebee mesa nvidia xf86-video-intel lib32-virtualgl lib32-nvidia-utils bbswitch
sudo gpasswd -a sun bumblebee
sudo systemctl start bumblebeed.service
sudo systemctl enable bumblebeed.service
可以使用optirun运行程序。
# 2.4 声音
yay -S alsa-utils pulseaudio pulseaudio-bluetooth
图形界面使用pavucontrol。
yay -S pavucontrol
# 2.5 蓝牙
yay -S bluez bluez-utils
sudo systemctl start bluetooth.service
sudo systemctl enable bluetooth.service
图形界面使用blueman
yay -S blueman
# 2.6 引导器
添加脚本使GRUB隐藏除非Shift键摁下。首先添加下面的到/etc/default/grub：
GRUB_FORCE_HIDDEN_MENU="true"
然后下载文件到/etc/grub.d/31_hold_shift，增加权限：
sudo wget https://gist.githubusercontent.com/anonymous/8eb2019db2e278ba99be/raw/257f15100fd46aeeb8e33a7629b209d0a14b9975/gistfile1.sh -O /etc/grub.d/31_hold_shift
sudo chmod a+x /etc/grub.d/31_hold_shift
sudo grub-mkconfig -o /boot/grub/grub.cfg
# 2.7 NTP
sudo systemctl enable systemd-timesyncd.service
sudo systemctl start systemd-timesyncd.service
sudo timedatectl set-ntp true
# 2.8 Display Manager
sudo pacman -S lightdm lightdm-gtk-greeter
在/etc/lightdm/lightdm.conf添加greeter。
[Seat:*]
...
greeter-session=lightdm-gtk-greeter
在/etc/lightdm/lightdm-gtk-greeter.conf中修改Indicators。
[greeter]
indicators=~host;~spacer;~clock;~spacer;~session;~language;~a11y;~power
# 2.9 Xfce4
yay -S xfce4 xorg-server
sudo systemctl start lightdm.service
sudo systemctl enable lightdm.service
安装一些Xfce4的应用及插件：
yay -S xfce4-pulseaudio-plugin xfce4-whiskermenu-plugin mousepad xfce4-notifyd xorg-xkill xfce4-screenshooter ristretto xfburn
使用我喜欢的Prof-XFCE-theme主题。
为了背景和头像，可以执行下面的命令：
yay -S accountsservice mugshot
mkdir -p ~/Pictures/avatars
sudo mkdir -p /usr/local/share/backgrounds/sun\'s-wallpaper
sudo chown sun:sun /usr/local/share/backgrounds/sun\'s-wallpaper
ln -s /usr/local/share/backgrounds/sun\'s-wallpaper ~/Pictures/backgrounds
然后配置XDG用户目录：
yay -S xdg-user-dirs
xdg-user-dirs-update
# 2.10 输入法
yay -S fcitx-lilydjwg-git fcitx-sougoupinyin fcitx-configtool fcitx-qt5
在~/.pam_environment里面添加如下内容。
GTK_IM_MODULE=fcitx
QT_IM_MODULE=fcitx
XMODIFIERS=@im=fcitx
# 2.11 配置v2ray
记得备份v2ray的配置。
sudo pacman -S v2ray
然后enable并start这些服务。
使用chromium --proxy-server="socks5://127.0.0.1:1080"可以使chromium临时接受代理。
接着配置proxychains。
yay -S proxychains-ng
编辑/etc/proxychains.conf。解除quiet_mode的注释，最后一行由socks4 127.0.0.1 9050改为socks5 127.0.0.1 1080
接着配置透明代理：
sudo sh -c "echo net.ipv4.ip_forward=1 > /etc/sysctl.d/10-ip_forward.conf"
sudo sysctl --system
接下来v2ray配置文件见透明代理(TPROXY) · V2Ray 配置指南|V2Ray 白话文教程。这里给出我的配置，需要修改的东西用$标出。
{
"inbounds": [{
"port": 1080,
"protocol": "socks",
"listen": "127.0.0.1",
"sniffing": {
"enabled": true,
"destOverride": ["http", "tls"]
},
"settings": {
"auth": "noauth",
"udp": true
}
}, {
"tag": "transparent",
"port": 2080,
"listen": "0.0.0.0",
"protocol": "dokodemo-door",
"settings": {
"network": "tcp,udp",
"followRedirect": true
},
"sniffing": {
"enabled": true,
"destOverride": ["http", "tls"]
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
}
}],
"outbounds": [{
"tag": "proxy",
"protocol": "vmess",
"settings": {
"vnext": [{
"address": "$your.server.domain",
"port": 443,
"users": [
{
"id": "$user-id",
"alterId": 64,
"security": "auto"
}
]
}]
},
"streamSettings": {
"network": "ws",
"security": "tls",
"wsSettings": {
"connectionReuse": true,
"path": "$path"
},
"sockopt": {
"mark": 255
}
},
"mux": {
"enabled": true
}
}, {
"tag": "direct",
"protocol": "freedom",
"settings": {
"domainStrategy": "UseIP"
},
"streamSettings": {
"sockopt": {
"mark": 255
}
}
}, {
"tag": "block",
"protocol": "blackhole",
"settings": {
"response": {
"type": "http"
}
}
}, {
"tag": "dns-out",
"protocol": "dns",
"streamSettings": {
"sockopt": {
"mark": 255
}
}
}],
"dns": {
"servers": [
"8.8.8.8",
"1.1.1.1",
"114.114.114.114",
{
"address": "223.5.5.5",
"port": 53,
"domains": [
"geosite:cn",
"domain:ntp.org",
"domain:$your.server.domain"
]
}
]
},
"routing": {
"domainStrategy": "IPOnDemand",
"rules": [{
"type": "field",
"inboundTag": [
"transparent"
],
"port": 53,
"network": "udp",
"outboundTag": "dns-out"
}, {
"type": "field",
"inboundTag": [
"transparent"
],
"port": 123,
"network": "udp",
"outboundTag": "direct"
}, {
"type": "field",
"ip": [
"223.5.5.5",
"114.114.114.114"
],
"outboundTag": "direct"
}, {
"type": "field",
"ip": [
"8.8.8.8",
"1.1.1.1"
],
"outboundTag": "proxy"
}, {
"type": "field",
"domain": [
"geosite:category-ads-all"
],
"outboundTag": "block"
}, {
"type": "field",
"protocol":["bittorrent"],
"outboundTag": "direct"
}, {
"type": "field",
"ip": [
"geoip:private",
"geoip:cn"
],
"outboundTag": "direct"
}, {
"type": "field",
"domain": [
"geosite:cn"
],
"outboundTag": "direct"
}]
}
}
其中dokodemo-door如果只是代理本机连接可以只监听在127.0.0.1。启用iptables。
# 设置策略路由
ip rule add fwmark 1 table 100
ip route add local 0.0.0.0/0 dev lo table 100
# 新建表
iptables -t mangle -N V2RAY
iptables -t mangle -N V2RAY_MARK
# 代理局域网设备
iptables -t mangle -A V2RAY -d 0.0.0.0/8 -j RETURN
iptables -t mangle -A V2RAY -d 127.0.0.0/8 -j RETURN
iptables -t mangle -A V2RAY -d 169.254.0.0/16 -j RETURN
iptables -t mangle -A V2RAY -d 224.0.0.0/4 -j RETURN
iptables -t mangle -A V2RAY -d 240.0.0.0/4 -j RETURN
iptables -t mangle -A V2RAY -d 255.255.255.255/32 -j RETURN
iptables -t mangle -A V2RAY -d 10.0.0.0/8 -p tcp -j RETURN
iptables -t mangle -A V2RAY -d 10.0.0.0/8 -p udp ! --dport 53 -j RETURN
iptables -t mangle -A V2RAY -d 172.16.0.0/12 -p tcp -j RETURN
iptables -t mangle -A V2RAY -d 172.16.0.0/12 -p udp ! --dport 53 -j RETURN
iptables -t mangle -A V2RAY -d 192.168.0.0/16 -p tcp -j RETURN
iptables -t mangle -A V2RAY -d 192.168.0.0/16 -p udp ! --dport 53 -j RETURN
iptables -t mangle -A V2RAY -p udp -j TPROXY --on-port 2080 --tproxy-mark 1
iptables -t mangle -A V2RAY -p tcp -j TPROXY --on-port 2080 --tproxy-mark 1
# 代理网关本机
iptables -t mangle -A V2RAY_MARK -d 0.0.0.0/8 -j RETURN
iptables -t mangle -A V2RAY_MARK -d 127.0.0.0/8 -j RETURN
iptables -t mangle -A V2RAY_MARK -d 169.254.0.0/16 -j RETURN
iptables -t mangle -A V2RAY_MARK -d 224.0.0.0/4 -j RETURN
iptables -t mangle -A V2RAY_MARK -d 240.0.0.0/4 -j RETURN
iptables -t mangle -A V2RAY_MARK -d 255.255.255.255/32 -j RETURN
iptables -t mangle -A V2RAY_MARK -d 10.0.0.0/8 -p tcp -j RETURN
iptables -t mangle -A V2RAY_MARK -d 10.0.0.0/8 -p udp ! --dport 53 -j RETURN
iptables -t mangle -A V2RAY_MARK -d 172.16.0.0/12 -p tcp -j RETURN
iptables -t mangle -A V2RAY_MARK -d 172.16.0.0/12 -p udp ! --dport 53 -j RETURN
iptables -t mangle -A V2RAY_MARK -d 192.168.0.0/16 -p tcp -j RETURN
iptables -t mangle -A V2RAY_MARK -d 192.168.0.0/16 -p udp ! --dport 53 -j RETURN
iptables -t mangle -A V2RAY_MARK -j RETURN -m mark --mark 0xff
iptables -t mangle -A V2RAY_MARK -p udp -j MARK --set-mark 1
iptables -t mangle -A V2RAY_MARK -p tcp -j MARK --set-mark 1
# 应用规则
iptables -t mangle -A PREROUTING -j V2RAY
iptables -t mangle -A OUTPUT -j V2RAY_MARK
取消代理可以通过：
iptables -t mangle -D PREROUTING -j V2RAY
iptables -t mangle -D OUTPUT -j V2RAY_MARK
持久化设置，首先编辑/etc/systemd/system/tproxyrule.service：
[Unit]
Description=Tproxy rule
After=network.target
Wants=network.target
[Service]
Type=oneshot
ExecStart=/sbin/ip rule add fwmark 1 table 100 ; /sbin/ip route add local 0.0.0.0/0 dev lo table 100 ; /sbin/iptables-restore /etc/iptables/rules.v4
[Install]
WantedBy=multi-user.target
sudo iptables-save -f /etc/iptables/rules.v4
sudo systemctl daemon-reload
sudo systemctl enable tproxyrule
# 2.12 字体
注意备份windows上的字体，应当存放到/usr/local/share/fonts目录下。同时安装monaco字体作为终端字体。安装我喜爱的终端字体。
yay ttf-monaco
编辑~/.config/fontconfig/fonts.conf：
<?xml version="1.0"?>
<!DOCTYPE fontconfig SYSTEM "fonts.dtd">
<fontconfig>
<alias>
<family>serif</family>
<prefer>
<family>Times New Roman</family>
<family>SimSun</family>
</prefer>
</alias>
<alias>
<family>sans-serif</family>
<prefer>
<family>Arial</family>
<family>SimHei</family>
</prefer>
</alias>
<alias>
<family>monospace</family>
<prefer>
<family>Monaco</family>
<family>SimSun</family>
</prefer>
</alias>
</fontconfig>
# 2.13 文件系统和gvfs
yay -S gvfs gvfs-mtp gvfs-smb gvfs-afc ntfs-3g dosfstools udisks2
# 2.14 Swap
yay -S systemd-swap
sudo systemctl enable systemd-swap
sudo systemctl start systemd-swap
# from https://github.com/Nefelim4ag/systemd-swap
echo vm.swappiness=5 | sudo tee -a /etc/sysctl.d/99-sysctl.conf
echo vm.vfs_cache_pressure=50 | sudo tee -a /etc/sysctl.d/99-sysctl.conf
sudo sysctl -p /etc/sysctl.d/99-sysctl.conf
sudo mkdir -p /var/lib/systemd-swap/swapfc/
修改/etc/systemd/swap.conf：
...
swapfc_enabled=1
swapfc_force_use_loop=0 # Force usage of swapfile + loop
swapfc_frequency=1 # How often check free swap space
swapfc_chunk_size=8G # Allocate size of swap chunk
swapfc_max_count=8 # 0 - unlimited, note: 32 is a kernel maximum
swapfc_free_swap_perc=30 # Add new chunk if free < 30%
# Remove chunk if free > 30+40% & chunk count > 2
...
# 2.15 打印机
yay -S cups samba
sudo systemctl enable org.cups.cupsd.service
sudo systemctl start org.cups.cupsd.service
# 2.16 Conky
安装conky-git（conky拥有负内存的bug）和nerd-fonts-hack。
创建~/.local/bin/wttr.in，用以获取天气，并添加可执行权限：
#!/bin/sh
curl -s "wttr.in?2MTFn" | sed 's/\(┌\|┐\|└\|┘\|┬\|┴\|├\|┤\|┼\|─\|│\)\+/${color3}\0${color0}/g' | sed '1 s/^.*$/${color2}\0${color0}/' | sed 's/\(Mon\|Tue\|Wed\|Thu\|Fri\|Sat\|Sun\) [0-9]\+ \(Jan\|Feb\|Mar\|Apr\|May\|Jun\|Jul\|Aug\|Sep\|Sept\|Oct\|Nov\|Dec\)/${color2}\0${color0}/g' | sed 's/Noon\|Night/${color2}\0${color0}/g'
之后创建几个conky的面板。天气面板~/.conky/Weather.conf：
conky.config = {
background = true,
double_buffer = true,
alignment = 'top_right',
border_width = 1,
cpu_avg_samples = 2,
default_color = 'white',
default_outline_color = 'white',
default_shade_color = 'white',
draw_borders = false,
draw_graph_borders = true,
draw_outline = false,
draw_shades = false,
gap_x = 32,
gap_y = 64,
net_avg_samples = 2,
no_buffers = true,
out_to_console = false,
out_to_stderr = false,
extra_newline = false,
minimum_width = 255,
border_inner_margin = 10,
own_window = true,
own_window_type = 'normal',
own_window_colour = '000000',
own_window_argb_visual = true,
own_window_argb_value = 80,
own_window_hints = 'undecorated,below,sticky,skip_taskbar,skip_pager',
stippled_borders = 0,
update_interval = 1.0,
uppercase = false,
use_spacer = none,
show_graph_scale = false,
show_graph_range = false,
use_xft = true,
xftalpha = 0.1,
override_utf8_locale = true,
color0 = 'white',
color1 = 'EAEAEA',
color2 = 'FFA300',
color3 = 'grey',
}
conky.text = [[
${font Droid Sans:size=18}Weather${font}
${font Hack Nerd Font Mono:size=9}${texecpi 1800 .local/bin/wttr.in}
]]
CPU和RAM面板~/.conky/CPU&RAM.conf：
conky.config = {
...
gap_x = 272,
gap_y = 535,
minimum_width = 200,
...
}
conky.text = [[
${font Droid Sans:size=18}CPU & RAM${font}
${font Droid Sans:size=10}${color2}CPU ${alignr}${color0}${cpu cpu0}% ${hwmon 0 temp 1}°C
${cpugraph cpu0 50,}
${top name 1} $alignr ${top cpu 1}%
${top name 2} $alignr ${top cpu 2}%
${top name 3} $alignr ${top cpu 3}%
${top name 4} $alignr ${top cpu 4}%
${top name 5} $alignr ${top cpu 5}%
${color2}RAM ${color0}${alignr}${mem}/${memmax}
${memgraph 50,}
${top_mem name 1} $alignr ${top_mem mem_res 1}
${top_mem name 2} $alignr ${top_mem mem_res 2}
${top_mem name 3} $alignr ${top_mem mem_res 3}
${top_mem name 4} $alignr ${top_mem mem_res 4}
${top_mem name 5} $alignr ${top_mem mem_res 5}
]]
网络面板~/.conky/Network.conf：
conky.config = {
...
gap_x = 32,
gap_y = 535,
minimum_width = 200,
...
}
conky.text = [[
${font Droid Sans:size=18}Network
${font Droid Sans:size=14}enp39s0
${font Droid Sans:size=10}${color2}Download ${color0}${alignr}${downspeedf enp39s0} KiB/s
${downspeedgraph enp39s0 50,}
${color2}Upload ${color0}${alignr}${upspeedf enp39s0} KiB/s
${upspeedgraph enp39s0 50,}
${color2}IPv4${color0}${alignr}${addrs enp39s0}
]]
磁盘面板~/.conky/Disks.conf：
conky.config = {
...
gap_x = 32,
gap_y = 820,
minimum_width = 200,
...
}
conky.text = [[
${font Droid Sans:size=18}Disks
${font Droid Sans:size=14}/dev/sda
${font Droid Sans:size=10}${color2}Read ${color0}${alignr}${diskio_read /dev/sda} KiB/s
${diskiograph_read /dev/sda 50,}
${color2}Write ${color0}${alignr}${diskio_write /dev/sda} KiB/s
${diskiograph_write /dev/sda 50,}
]]
最后是可选的英伟达GPU面板~/.conky/GPU.conf：
conky.config = {
...
gap_x = 272,
gap_y = 935,
minimum_width = 200,
...
}
conky.text = [[
${font Droid Sans:size=18}NVIDIA GPU${font}
${font Droid Sans:size=10}${color2}GPU Temp ${alignr}${color0}${nvidia temp}°C
${color2}Fan Speed ${alignr}${color0}${execi 5 nvidia-settings -q [fan:0]/GPUCurrentFanSpeed -t} %
${color2}GPU Clock ${alignr}${color0}${nvidia gpufreq} MHz
${color2}Mem Clock ${alignr}${color0}${nvidia memfreq} MHz
${color2}Mem Used ${alignr}${color0}${execi 5 nvidia-settings -q [gpu:0]/UsedDedicatedGPUMemory -t} / ${exec nvidia-settings -q [gpu:0]/TotalDedicatedGPUMemory -t} MiB${font}
]]
# 2.17 auth-thu
安装auth-thu。然后创建~/.config/auth-thu/config：
{
"username": "*****",
"password": "********",
"host": "auth4.tsinghua.edu.cn"
}
systemctl enable auth-thu --user
systemctl start auth-thu --user
# 3 安装软件
# 3.1 Git
yay -S git
git config --global user.name "Sun Ziping"
git config --global user.email sunziping2016@gmail.com
# 3.2 ssh
yay -S openssh
备份私钥，或者通过ssh-keygen生成，上传至自己的服务器。
# 3.3 zsh
yay -S zsh
sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
cat << EOF > .oh-my-zsh/custom/themes/my-theme.zsh-theme
PROMPT='%B%F{red}%(?..%? )%F{blue}%n%f%b@%m %B%~%b \$(git_prompt_info)%# '
ZSH_THEME_GIT_PROMPT_PREFIX="%B%F{blue}(%F{red}"
ZSH_THEME_GIT_PROMPT_SUFFIX="%f%b"
ZSH_THEME_GIT_PROMPT_DIRTY="%F{yellow}*%F{blue})"
ZSH_THEME_GIT_PROMPT_CLEAN="%F{blue})"
EOF
sed -i 's/ZSH_THEME="robbyrussell"/ZSH_THEME="my-theme"/' .zshrc
git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting
git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions
sed -i 's/plugins=(\(.*\))/plugins=(\1 zsh-syntax-highlighting zsh-autosuggestions)/' .zshrc
echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc
echo 'export EDITOR=vim' >> ~/.zshrc
# 3.4 vim
取消vim的鼠标，以使vim可以方便被复制。
cat << EOF > .vimrc
unlet! skip_defaults_vim
source \$VIMRUNTIME/defaults.vim
set mouse=
set ttymouse=
EOF
sudo cp .vimrc /root/.vimrc
# 3.5 earlyoom
yay -S earlyoom
sudo systemctl enable earlyoom
sudo systemctl start earlyoom
修改/etc/default/earlyoom
EARLYOOM_ARGS="-r 60 -N 'sudo -u sun DISPLAY=:0 DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1000/bus notify-send'"
# 3.6 Tsinghua网络
安装auth-thu：
yay -S auth-thu
对于VPN：
yay -S networkmanager-openconnect openconnect
nmcli con add type vpn con-name "Tsinghua SSL VPN" ifname "*" vpn-type openconnect -- vpn.data "gateway=sslvpn.tsinghua.edu.cn,protocol=nc"
或者手动连接：
sudo openconnect --user 2015013249 sslvpn.tsinghua.edu.cn --juniper --reconnect-timeout 60 --servercert sha256:398c6bccf414f7d71b6dc8d59b8e3b16f6d410f305aed7e30ce911c3a4064b31
# 3.7 rtorrent
yay -S rtorrent
cp /usr/share/doc/rtorrent/rtorrent.rc ~/.rtorrent.rc
mkdir -p ~/.rtorrent.session
修改~/.rtorrent.rc中的配置：
directory.default.set = ~/Torrents
session.path.set = ~/.rtorrent.session
创建/etc/systemd/system/rtorrent@.service。
[Unit]
Description=rTorrent for %I
After=network.target
[Service]
Type=forking
User=%I
Group=%I
WorkingDirectory=/home/%I
ExecStart=/usr/bin/tmux -L rt new-session -s rt -n rtorrent -d rtorrent
ExecStop=/usr/bin/bash -c "/usr/bin/tmux -L rt send-keys -t rt:rtorrent.0 C-q; while pidof rtorrent > /dev/null; do sleep 0.5; done"
Restart=on-failure
[Install]
WantedBy=multi-user.target
然后：
# 启动服务
sudo systemctl enable rtorrent@sun
sudo systemctl start rtorrent@sun
# 连接上rtorrent
tmux -L rt attach -t rt
# 3.8 LaTeX
yay -S texlive-most texlive-lang biber
# 3.9 安装常用的命令行软件
# 3.9.1 开发相关
yay -S cmake gdb git git-lfs tk clang llvm cppcheck valgrind coq coqide
# 3.9.2 压缩软件
yay -S bzip2 zip p7zip unzip-iconv unrar
# 3.9.3 其他应用
yay -S htop wget tree w3m tmux ditaa graphviz dos2unix neofetch networkmanager-openconnect openconnect pwgen rsync you-get scrapy tensorboard cloc
# 3.9.4 游戏
yay -S bsd-games curseofwar
# 3.10 安装常用的图形界面软件
# 3.10.1 开发相关
yay -S visual-studio-code-bin clion intellij-idea-ultimate-edition clion-jre intellij-idea-ultimate-edition-jre datagrip datagrip-jre
# 3.10.2 其他应用
yay -S chromium pepper-flash birdtray thunderbird seafile-client telegram-desktop audacity celestia baidunetdisk-bin inkscape simplescreenrecorder netease-cloud-music openshot postman-bin qq-linux ttf-wps-fonts wps-office wxmaxima maxima wireshark-qt vlc xdot teamviewer syncplay freecad zoom2 scrcpy aegisub
# 3.10.3 游戏
yay -S minecraft-launcher mcedit
# 4 后端服务
默认来讲这些服务都不启动。
# 4.1 Nginx
首先：
sudo pacman -S nginx-mainline
将Nginx#Configure example的内容拷贝到/etc/nginx/nginx.conf。
sudo mkdir /etc/nginx/sites-available
sudo mkdir /etc/nginx/sites-enabled
sudo mkdir /etc/nginx/snippets
然后编辑/etc/nginx/sites-available/default.conf，为了避免之后本地访问不到这个server块，我们还额外监听了本地：
server {
listen 80 default_server;
listen [::]:80 default_server;
listen 127.0.0.1:80;
listen [::1]:80;
server_name localhost;
access_log /var/log/nginx/default.access.log;
error_log /var/log/nginx/default.error.log;
location / {
root /srv/http/default;
index index.html;
}
location ~ ^/~(.+?)(/.*)?$ {
alias /srv/http/users/$1$2;
index index.html;
autoindex on;
}
}
创建符号链接。
cd /etc/nginx/sites-enabled
sudo ln -s ../sites-available/default.conf .
sudo mkdir -p /srv/http/default
sudo mkdir -p /srv/http/users/sun
sudo chown sun:sun /srv/http/users/sun
ln -s /srv/http/users/sun ~/public_html
# 4.2 MariaDB
sudo pacman -S mariadb
sudo mariadb-install-db --user=mysql --basedir=/usr --datadir=/var/lib/mysql
sudo systemctl start mariadb
sudo mysql_secure_installation
可以使用mysql -u root -p登录MariaDB。
接下来安装PhpMyAdmin。
sudo pacman -S php php-fpm phpmyadmin
编辑/etc/php/php.ini：
date.timezone = Asia/Shanghai
extension=mysqli
extension=bz2
extension=zip
编辑/etc/nginx/sites-available/pma.conf：
server {
server_name pma.localhost;
listen 127.0.0.1:80;
listen [::1]:80;
index index.php;
access_log /var/log/nginx/pma.access.log;
error_log /var/log/nginx/pma.error.log;
root /usr/share/webapps/phpMyAdmin;
location / {
try_files $uri $uri/ =404;
}
error_page 404 /index.php;
location ~ \.php$ {
try_files $uri $document_root$fastcgi_script_name =404;
fastcgi_split_path_info ^(.+\.php)(/.*)$;
fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
fastcgi_param HTTP_PROXY "";
fastcgi_request_buffering off;
}
}
然后启用配置：
cd /etc/nginx/sites-enabled
sudo ln -s ../sites-available/pma.conf .
sudo nginx -t
sudo systemctl start php-fpm nginx mariadb
sudo systemctl reload nginx
# 4.3 MongoDB
安装arch4edu的MongoDB：
sudo pacman -S mongodb
sudo systemctl start mongodb
mongo
# in MongoDB shell
use admin
db.createUser(
{
user: "sun",
pwd: passwordPrompt(),
roles: ["root"]
}
)
然后编辑/etc/mongodb.conf：
security:
authorization: "enabled"
使用mongo -u sun登录。
# 4.4 Redis
sudo pacman -S redis
# 4.5 ElasticSearch
sudo pacman -S elasticsearch-xpack kibana-xpack
编辑/etc/elasticsearch/elasticsearch.yml：
network.host: 127.0.0.1
xpack.security.enabled: true
然后设置账户的密码：
elasticsearch-setup-passwords interactive
编辑/etc/kibana/kibana.yml：
elasticsearch.username: "kibana"
elasticsearch.password: "PASSWORD"
# 4.6 Docker
sudo pacman -S docker
sudo gpasswd -a sun docker
# 4.7 PostgreSQL
yay -S postgresql
sudo -iu postgres
initdb --locale=en_US.UTF-8 -E UTF8 -D /var/lib/postgres/data
exit
sudo systemctl start postgresql
sudo -iu postgres
createuser -s sun
exit
createdb sun
然后使用\password USERNAME指令修改postgres和sun的密码，再修改/var/lib/postgres/data/pg_hba.conf：
...
# TYPE DATABASE USER ADDRESS METHOD
local all all md5
local all all md5
host all all 127.0.0.1/32 md5
host all all ::1/128 md5
...
# 5 编程语言
# 5.1 Android
yay -S android-sdk android-sdk-build-tools android-sdk-platform-tools android-platform android-studio
sudo groupadd android-sdk
sudo gpasswd -a sun android-sdk
sudo setfacl -R -m g:android-sdk:rwx /opt/android-sdk
sudo setfacl -d -m g:android-sdk:rwX /opt/android-sdk
sudo systemctl start adb
sudo systemctl enable adb
记得设置Android Studio的代理，它会提示设置代理，Gradle也会被提示需要设置代理，不要启用Gradle的https代理。
# 5.2 Java
yay -S jdk-openjdk jdk8-openjdk
# 5.3 Python
curl -L https://github.com/pyenv/pyenv-installer/raw/master/bin/pyenv-installer | bash
sed -i 's/plugins=(\(.*\))/plugins=(\1 pyenv)/' .zshrc
更新pyenv使用pyenv update即可。
使用pyenv install VERSION可以安装Python版本。使用pyenv install --list可以查看可用的安装版本。使用pyenv local VERSION可以设置本目录环境下的Python版本。使用pyenv global VERSION可以设置全局的Python版本。
最后安装JupyterLab。
安装一些常用的Python库。
yay -S python-numpy python-scipy python-matplotlib python-pillow python-pytorch-cuda mypy
# 5.4 Node.js
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.35.2/install.sh | bash
sed -i 's/plugins=(\(.*\))/plugins=(\1 nvm)/' .zshrc
使用nvm install VERSION可以安装Node.js版本，如nvm install node安装最新版。使用nvm ls-remote可以查看可用的版本，nvm ls可以查看现在系统中的版本。使用nvm use VERSION可以临时切换版本，使用nvm alias default VERSION永久切换版本。
更新可以nvm使用下方的命令：
(
cd "$NVM_DIR"
git fetch --tags origin
git checkout `git describe --abbrev=0 --tags --match "v[0-9]*" $(git rev-list --tags --max-count=1)`
) && \. "$NVM_DIR/nvm.sh"
# 5.5 Rust
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
echo 'source "\$HOME/.cargo/env"' >> ~/.zshrc
# 5.6 Haskell
yay -S ghc stack
# 5.7 MATLAB
下载iso后挂在，sudo ./install即可。
可以创建/usr/share/applications/matlab.desktop：
[Desktop Entry]
Version=R2019b
Type=Application
Terminal=false
MimeType=text/x-matlab
Exec=/usr/local/MATLAB/R2019b/bin/matlab -desktop
Name=MATLAB
Icon=matlab
Categories=Development;Math;Science
Comment=Scientific computing environment
StartupNotify=true
# 6 Tsmart
编辑/etc/makepkg.conf：
MAKEFLAGS="-j$(nproc)"
下载或clone aur-llvm。
wget https://releases.llvm.org/3.9.1/llvm-3.9.1.src.tar.xz
wget https://releases.llvm.org/3.9.1/cfe-3.9.1.src.tar.xz
tar xf llvm-3.9.1.src.tar.xz
tar xf cfe-3.9.1.src.tar.xz
cd llvm-3.9.1.src
mkdir build
mv "../cfe-3.9.1.src" tools/clang
patch -Np1 -i ../0000-disable-llvm-symbolizer-test.patch
patch -Np1 -d tools/clang <../0001-GCC-compatibility-Ignore-the-fno-plt-flag.patch
patch -Np1 -d tools/clang <../0002-Enable-SSP-and-PIE-by-default.patch
patch -Np1 -i ../0003-disable-ArrayRefTest.InitializerList.patch
patch -Np1 -i ../0004-fix-lambda-parameter-name-redeclared.patch
cd build
cmake \
-DCMAKE_CC_COMPILER=clang \
-DCMAKE_CXX_COMPILER=clang++ \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_INSTALL_PREFIX=/usr/local/llvm39 \
-DLLVM_BUILD_LLVM_DYLIB=ON \
-DLLVM_LINK_LLVM_DYLIB=ON \
-DLLVM_INSTALL_UTILS=ON \
-DLLVM_ENABLE_RTTI=ON \
-DLLVM_ENABLE_FFI=ON \
-DLLVM_BUILD_TESTS=ON \
-DCLANG_INSTALL_SCANBUILD=OFF \
-DCLANG_INSTALL_SCANVIEW=OFF \
-DFFI_INCLUDE_DIR=$(pkg-config --variable=includedir libffi) \
-DLLVM_BINUTILS_INCDIR=/usr/include \
..
make -j8
# Run test
make check-llvm
make check-clang
sudo make install
cd /usr/local/bin
sudo ln -s ../llvm39/bin/clang-3.9 clang-3.9
sudo ln -s ../llvm39/bin/llvm-dis llvm-dis-3.9
sudo ln -s ../llvm39/bin/llvm-link llvm-link-3.9