Fedora Workstation: Post-Install script

#!/bin/bash
#
# Fedora post-install script#!/bin/bash
#
# Fedora post-install script
#
# Author: Chris Rainey <ckrzen at tuta dot io>
#
# Version: 2020/04/23


UPGRADE()
{
# Upgrade system
        sudo dnf \
                -b \
                --allowerasing
                --refresh \
                upgrade && \
# Remove unneeded packages
                sudo dnf autoremove && \
# Is a ``reboot`` required
                sudo dnf needs-restarting && \
# Checks the local packagedb
                sudo dnf check all && \
# Refresh firmware metadata from remote server
                sudo fwupdmgr refresh ; \
# Updates all firmware to latest versions available
                sudo fwupdmgr update
}

SERVER()
{
# Install Server related packages
        sudo dnf install \
                cryptsetup \
                fail2ban \
                fwupd \
                lshw \
                ssh \
                rfkill \
                unzip && \
# Is a ``reboot`` required
                sudo dnf needs-restarting
}

DESKTOP()
{
# Install Desktop related repository packages
        sudo dnf install \
                https://download1.rpmfusion.org/free/fedora/\
                rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm \
                https://download1.rpmfusion.org/nonfree/fedora/\
                rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm && \
# Install tainted rpmfusion repos
                sudo dnf install \
                rpmfusion-free-release-tainted \
                rpmfusion-nonfree-release-tainted && \
# Install group package updates
                sudo dnf groupupdate \
                core \
                multimedia \
                sound-and-video && \
# Install individual packages
                sudo dnf install \
                aisleriot \
                chkrootkit \
                drawing \
                ffmpeg \
                gnome-tweaks \
                intel-media-driver \
                iperf3 \
                libdvdcss \
                libreoffice \
                libva-intel-driver \
                libva-intel-hybrid-driver \
                libva-utils \
                libva-vdpau-driver \
                lshw \
                mediainfo \
                neofetch \
                nmap \
                remmina \
                seahorse \
                smartmontools \
                unrar \
                vim \
                vlc \
                wavemon \
                whois && \
# Is a ``reboot`` required
                sudo dnf needs-restarting
}

MACBOOKS()
{
# Install Macbook hardware utilities and drivers
        sudo dnf install \
                mbpfan \
                kmod-wl && \
# Ebable cooling fan service
                sudo systemctl enable mbpfan.service && \
# Is a ``reboot`` required
                sudo dnf needs-restarting
}

LOW-RAM()
{
# Remove unnecessary packages on all low ram systems
        sudo dnf remove \
                firewalld \
                gnome-calendar \
                libvirt-daemon \
                sssd-* && \
# Install early out-of-memory utility
                sudo dnf install earlyoom && \
# Enable earlyoom service
                sudo systemctl enable earlyoom.service && \
# Is a ``reboot`` required
                sudo dnf needs-restarting
}

CKR()
{
# Install packages of interest only to me
        sudo dnf install \
                conky \
                dtach \
                geteltorito \
                jwm \
                light \
                lxappearance \
                mpv \
                oathtool \
                pavucontrol \
                rtorrent \
                sshfs && \
# Install latest version of youtube-dl
                sudo curl \
                -L https://yt-dl.org/downloads/latest/youtube-dl \
                -o /usr/local/bin/youtube-dl && \
# Edit conf files
                sudo sed -i.orig \
                's/# user/user/' \
                /etc/fuse.conf && \
# Disable WiFi connection at home
                nmcli connection \
                down \
                Chez_M-M-R_5G && \
# Disable IPv4 auto-dns
                nmcli connection \
                modify \
                Chez_M-M-R_5G \
                ipv4.ignore-auto-dns \
                yes && \
# Modify IPv4 DNS
                nmcli connection \
                modify \
                Chez_M-M-R_5G \
                ipv4.dns \
                "8.8.8.8 8.8.4.4" && \
# Disable IPv6 auto-dns
                nmcli connection \
                modify \
                Chez_M-M-R_5G \
                ipv6.ignore-auto-dns \
                yes && \
# Modify IPv6 DNS
                nmcli connection \
                modify \
                Chez_M-M-R_5G \
                ipv6.dns \
                "2001:4860:4860::8888 2001:4860:4860::8844" && \
# Enable WiFi connection at home
                nmcli connection \
                up \
                Chez_M-M-R_5G && \
# Add custom DNS to resolved
                sudo sed -i.orig \
                's/#DNS=/DNS=8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844/' \
                /etc/systemd/resolved.conf && \
# Reload systemd daemon
                sudo systemctl daemon-reload && \
# Restart resolved service
                sudo systemctl restart systemd-resolved.service && \
# Check custom DNS resolver
                resolvectl dns && \
# Is a ``reboot`` required
                sudo dnf needs-restarting
}

CKR_LOW-RAM()
{
# Mark fwupd as manually installed to prevent auto removal
        sudo dnf mark \
                install \
                fwupd && \
# Remove unneeded packages on my low ram systems
                sudo dnf remove \
                abrt* \
                gdm \
                gnome-software \
                PackageKit \
                plymouth && \
# Rebuild initramfs for text only boot
                sudo dracut -f
}

# RECOMMEND: backup devices / fire safes
# BACKUP: ALL LOCAL MAILBOXES / ADDRESS BOOKS / ACCOUNTS / BOOKMARKS !!!
# UPGRADE: Firmware / SSD’s / HDD’s / batteries / routers
# SET: 8.8.8.8 | 8.8.4.4 | 2001:4860:4860::8888 | 2001:4860:4860::8844 in routers DNS
#sudo passwd # if != LUKS encryption
# CHECK: encrypted-swap
# ENABLE: Third Party Repositories(google-chrome & openh264)
#UPGRADE
#SERVER
#DESKTOP
#LOW-RAM
#CKR    #ADD ssh-keygen/copy-id
#CKR_LOW-RAM
# SSD: sudo systemctl enable fstrim.timer
# EDIT: fail2ban filters/jails
# SSHD: sudo systemctl enable fail2ban
# REBOOT
#sudo systemctl status && sudo systemctl --failed
# CONFIGURE: Settings / Tweaks
#simple-scan # hp-plugin needed?
# *** REPEAT FOR ALL USERS ***
# RESTORE: data
# INSTALL: software
# SET: 2-Step Verification for all cloud services
# ADJUST: LibreOffice theme
# ENABLE: Firefox OpenH264 Video Codec
# INSTALL: VPN(surfshark, PIA, Nord, etc.)
# *** REPEAT FOR ALL USERS ***
# TEST: all launchers
# TEST: all ‘Fn’ keys
# SET: screen lock / power management
# TEST: laptop lid-close suspend
#UPGRADE
# TEST: all UPS's
# COPY: recovery codes to laptops
# LABEL: computers
# SET: hard drive to first / only boot device
# SET: passwd for Firmware / BOOT
# ERASE: previous backup drives & test
# DESKTOP: sudo dnf install deja-dup && sudo dnf needs-restarting
# CONFIGURE: .HD-BKUP.sh || Deja-Dup(Google Drive, etc.)
# ENABLE: Vino + router ports or install DWService for remote assistance
# UPDATE: “[???] Passwords & Tasks List”
# CREATE: invoice
# DELIVER: invoice + receipt