- ssh-setup-guide.md: Added comprehensive security hardening section with: * Non-standard port configuration (Port 2222) * Advanced SSH hardening settings (MaxAuthTries, ClientAlive, AllowUsers) * Dynamic DNS setup for remote access (DuckDNS, No-IP, Cloudflare) * fail2ban installation and VPN considerations * Additional security steps checklist - arch-install-notes.md: Updated post-installation priorities with yadm setup 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
44 lines
1.3 KiB
Markdown
44 lines
1.3 KiB
Markdown
# Arch Linux Installation Notes
|
|
|
|
## Pre-Installation Checklist
|
|
- [x] Download Arch Linux ISO
|
|
- [x] Create bootable USB drive
|
|
- [x] Backup any important data on ThinkPad
|
|
- [x] Note ThinkPad hardware specs for driver compatibility
|
|
|
|
## Installation Steps
|
|
### Boot and Initial Setup
|
|
- [x] Boot from USB
|
|
- [x] Set keyboard layout if needed: `loadkeys us`
|
|
- [x] Verify UEFI boot: `ls /sys/firmware/efi/efivars`
|
|
- [x] Connect to internet (wifi-menu or ethernet)
|
|
|
|
### Partitioning
|
|
- [x] List disks: `fdisk -l`
|
|
- [x] Create partitions (EFI, swap, root)
|
|
- [x] Format partitions
|
|
- [x] Mount filesystems
|
|
|
|
### Base System Installation
|
|
- [x] Update package database: `pacman -Sy`
|
|
- [x] Install base system: `pacstrap /mnt base linux linux-firmware`
|
|
- [x] Generate fstab: `genfstab -U /mnt >> /mnt/etc/fstab`
|
|
- [x] Chroot: `arch-chroot /mnt`
|
|
|
|
### System Configuration
|
|
- [x] Set timezone
|
|
- [x] Configure locale
|
|
- [x] Set hostname
|
|
- [x] Configure network
|
|
- [x] Set root password
|
|
- [x] Install bootloader (GRUB)
|
|
- [x] Create user account with sudo privileges
|
|
|
|
## Post-Installation Priorities
|
|
- [x] Install SSH server: `pacman -S openssh`
|
|
- [x] Enable SSH service: `systemctl enable sshd`
|
|
- [x] Create user account with proper sudo access
|
|
- [x] Basic network configuration
|
|
|
|
See [arch-linux-setup.md](arch-linux-setup.md) for comprehensive post-installation tasks.
|