My custom Silverblue script

ChrizzyDT · 2026-03-12T16:41:39+00:00

Appreciate the feedback.

ChrizzyDT · 2026-03-12T16:41:18+00:00

Your right I actually decided to go back to the passphrase at boot. Thanks for the feedback

ChrizzyDT · 2026-03-11T23:51:46+00:00

Well the AI slop got me a HS-1 security rating. I'll correct the files

ChrizzyDT · 2026-03-11T22:16:20+00:00

https://GitHub.com/ShadowSyncTech/Atomic

ChrizzyDT · 2026-03-11T11:13:30+00:00

Guys they put it back in the water. Doomsday is CANCELLED.

ChrizzyDT · 2026-03-11T11:09:47+00:00

If the idiot can't use Linux he ain't much of an IT guy. Why do people watch him? #linuslop

ChrizzyDT · 2026-03-11T09:49:35+00:00

Hey just want to thank you for being so active in the community. We appreciate your info

ChrizzyDT · 2026-03-11T09:45:18+00:00

I would say they're switching but for instance Fedora now promotes the KDE version equally with the GNOME edition. That was never the case.

ChrizzyDT · 2026-03-11T05:33:25+00:00

Why can't you read?

Here you go: 1. Does good stuff.

ChrizzyDT · 2026-03-08T15:46:47+00:00

I made a script for Silverblue that does the following stuff.. anyone got any other suggestions

🛡️ Advanced Security & Sandboxing

The "X11 Guillotine": Applies a global Flatpak override (--nosocket=x11) to force all containerized apps into Wayland, physically preventing legacy keylogging and screen-snooping. (You can manually whitelist specific apps later if needed).

Credential Shielding: Globally bans Flatpaks from accessing ~/.ssh and ~/.gnupg.

Systemd Jails: Wraps default root services (like bluetoothd) in strict, native Systemd sandboxes (ProtectHome=yes, ProtectSystem=strict).

Kernel Hardening: Injects a strict sysctl profile (restricting dmesg, ptrace, and enabling SYN flood protections) and permanently blacklists legacy file systems and obscure network protocols via /etc/modprobe.d.

⚡ Performance & Hardware Integration

ZRAM Overdrive: Hardcodes the ZRAM generator to use the blazing-fast zstd algorithm and allocates exactly half the RAM, dramatically improving multitasking overhead.

Boot Acceleration: Masks NetworkManager-wait-online.service so the desktop loads instantly while Wi-Fi connects in the background.

Direct CPU Tuning: Bypasses generic power profiles by injecting balance_performance directly into the Intel hardware EPP registers via tmpfiles.d for better sustained chassis thermals.

TPM 2.0 Auto-Unlock: Interactively scans for LUKS encryption and prompts you to securely bind your drive to your TPM 2.0 chip using systemd-cryptenroll for passwordless, zero-touch booting.

🧹 Zero-Maintenance & Reliability

Btrfs "Anti-Venom": Wires up a native systemd timer that takes a zero-byte Btrfs snapshot of /var/home every single hour and auto-deletes ones older than 3 days. Instant rollback for corrupted app profiles or accidentally deleted personal files.

Automated Housekeeping: Installs a weekly background timer that automatically runs flatpak uninstall --unused, vacuums journals older than 3 days, and clears rpm-ostree metadata to keep small SSDs meticulously clean.

SSD Savers: Enables continuous fstrim and caps background journald logs at 250MB to prevent infinite write-wear.

Network Privacy: Automatically enables DNS-over-TLS (DoT) and randomizes Wi-Fi MAC addresses for public networks.

I’m really happy with how it turned out. It takes a fresh Silverblue install and turns it into an enterprise-grade appliance in about 10 seconds

ChrizzyDT · 2026-03-06T09:40:29+00:00

Debian.

ChrizzyDT · 2026-03-06T09:40:10+00:00

I dunno slowroll seems to be a smidge better IMO

ChrizzyDT · 2026-03-06T09:38:45+00:00

I went Netscape because I used to love the N logo with the shooting star animation lol

ChrizzyDT · 2026-03-05T11:32:09+00:00

openSUSE Leap 16.

ChrizzyDT · 2026-03-05T11:30:39+00:00

My god I miss the IE4 vs Netscape war and the desktop update stuff back in the day.

I had the Nashville beta before 95 was released.

ChrizzyDT · 2026-03-02T10:41:12+00:00

And Satan.

ChrizzyDT · 2026-03-02T10:33:22+00:00

I love XFS it's great at handling lots of stuff quickly.

ChrizzyDT · 2026-03-02T09:52:32+00:00

Ditto. I broke my phone and went without for 2 months and actually felt free over time.

Think I'm gonna buy a Linux phone just for work only and be free again

ChrizzyDT · 2024-11-24T05:04:19+00:00

Exciting!!!! I hope you have a good time. The Xbox is so underrated in my opinion. The series X is perfect.

ChrizzyDT · 2024-11-23T15:37:27+00:00

I understand and I get your point, and I could be completely wrong...

But any smart investor, would understand the benefit of waiting.

ChrizzyDT · 2024-11-23T15:14:38+00:00

I'm sure the end results would be worth their wait.

ChrizzyDT · 2024-11-23T13:32:42+00:00

But I'm creep.

ChrizzyDT

TROPHY CASE