10 Things to do first in Arch Linux

In this video I share with you my 10 things to do first after installing Arch Linux.

Also check out the previous Arch Linux Videos:

# 1 . Install LTS kernel

Check your current kernel:
umane -r

Install an LTS kernel and reconfigure grub:
sudo pacman -S linux-lts

You may also install linux-lts-headers.
Reboot and check which kernel is in use with uname -r.

Remove non-lts kernel
sudo pacman -Rs linux

# 2. Install Microcode

For intel processors with grub boot loader:
sudo pacman -S intel-ucode

For AMD processors install linux-firmware package.

# 3. Disable GRUB delay

Add the following to /etc/default/grub:
# achieve the fastest possible boot:
GRUB_FORCE_HIDDEN_MENU="true"

Then put file 31_hold_shift to /etc/grub.d/.

Make it executable, and regenerate the grub configuration:
sudo chmod a+x /etc/grub.d/31_hold_shift

# 4. Install some key packages

sudo pacman -S adobe-source-sans-pro-fonts aspell-en enchant gst-libav gst-plugins-good hunspell-en icedtea-web jre8-openjdk languagetool libmythes mythes-en pkgstats ttf-anonymous-pro ttf-bitstream-vera ttf-dejavu ttf-droid ttf-gentium ttf-liberation ttf-ubuntu-font-family

# 5. Set up firewall

Install ufw:
sudo pacman -S ufw

Enable it.
sudo ufw enable

Check its status:
sudo ufw status verbose

Enable the start-up with the system:

Reboot and check the status again. It should be active.

# 6. Encrypt your home directory

Logged out. Switch to a console with Ctrl+Alt+F2. Login as a root and check that your user own no processes:
ps -U username

Install the necessary applications:
sudo pacman -S rsync lsof ecryptfs-utils

Then encrypt your home directory:
modprobe ecryptfs
ecryptfs-migrate-home -u username

Mount your encrypted home.
ecryptfs-mount-private

Unwrap the passphrase and save it somewhere where only you can access it.
ecryptfs-unwrap-passphrase

Run
ls .ecryptfs

Edit /etc/pam.d/system-auth:

Reboot and make sure that you can login to your desktop

# 7. Remove orphans

sudo pacman -Rns $(pacman -Qtdq)

# 8. Optimize pacman's database access speeds

sudo pacman-optimize

9. Check for errors

sudo systemctl --failed
sudo journalctl -p 3 -xb

10. Backup the system

sudo rsync -aAXvP --delete --exclude=/dev/* --exclude=/proc/* --exclude=/sys/* --exclude=/tmp/* --exclude=/run/* --exclude=/mnt/* --exclude=/media/* --exclude=/lost+found --exclude=/home/.ecryptfs / /mnt/backupDestination/

Please, subscribe if you want to watch more Linux videos.

################################################

################################################

More cool Linux stuff at other social media:

[JohnUsp]

Do backups of the Open Files Not encrypted.

[BigDaddyLinux]

Hi ALU,
All your videos are put together so well and I really enjoy watching them. This one is particular is a really nice helpful tutorial. Thanks for taking the time to make the video and also leaving all the documentation in the description for us to use.
Awesome Job!

[omarshehab]

I love this channel, everything is clear, precise, and concise. Keep up the good work!

[charmantbeaugarcon]

I loved this video. I was just about to trash my arch install but got a new fervour for linux by following your tips.
Thanks!

[SoulRollerFIN]

Great video. Modern Antergos does most things during setup, but microcode and fonts were a great addition.

[gpubvhi]

Excellent video and advices! I like the dedication and the way you answer comments. Thank you!

[BurhanDanger]

Great Video. I liked the part where you encrypted home directory. Below is something I want to say about the points.

1. Average user do not need use LTS kernel. arch shipped one is fine. If someone wants extra stability kernel-wise they might use LTS. I personally use ck kernel for Haswell. Worth using ones are the hardening ones like grsecurity (now paid stable only).

2. You are supposed install it before you even boot up. Not post installation in my opinion.

3. This is one more reason to avoid grub if possible. To disable timeout this is so much work. I recommend using systemd-boot if you're using UEFI ( or even rEFInd if you want nice interface). Grub is pretty complex and bloated to make it work on everything. Systemd-boot by default disables timeout and it can be enabled with a single uncomment.

4. Nice.

5. Average use may not need firewall. Linux doesn't open ports like windows. It's helpful to have some extra security.

6. Great thing. Might also check whole disk encryption.

7, 8. Run periodically as building packages leave orphaned packages and after some time optimisation gets away.

9. Nice one. Will keep in mind.

10. I have my own script and backup to cloud if hard-disk gets corrupted.

Overall Great video

[Joe-mzdc]

This is amazing. I'm up and running in VirtualBox today and it's running like a top. Thank you!

[saulvillagomez]

Perfect and directly to the point, thank you ALU

[AlexNiebla]

Great video, more Arch videos please. One in detail about sound and focused on PulseAudio specifically would be great.

[sanjay]

Nice tutorial ... Specially the way you presented it... Making it little fast, keeping it of short duration.. Thanks, subscribed and added to favorites.

[qn]

Instead of grub I use Systemd-boot. What should I do after the installation linux-lts in order to register the new kernel?

[isa-ka]

Thank you VERY much for this tutorial!

[magnus]

This is the best Linux tutorials on youtube so far imo. Keep up the good work!

[warbirdnut]

Another great video. I ran through this with the exception of encrypting the home partition and it works today. The only thing that has changed is that pacman-optimize doesn't appear to be available anymore.

[shune]

xfce all the way for me can pretty much design the desktop from dialogs customising panels with widgets colours images and scripts

[troylance]

Command list!

#check internet connection (use wired to make it easy)
ping -c 3 google.com

#update pacman database
pacman -Syy

#install a reflector
pacman -S reflector

#setup reflector
reflector -c "US" -f 12 -l 10 -n12 --save /etc/pacman.d/mirrorlist

#check for partitions
fdisk -l

#repartition hard drive (erase all partitions make one that takes up the whole disk, make it the primary partition, then make it bootable. Write the changes.
cfdisk (location of hard drive)

#Format the disk to ext4
mkfs.ext4 (location of disk with partition number)

#mount disk to system
mount (disk location with paertition number) /mnt

#install base system
pacstrap -i /mnt base base-devel

#generate fstab file
genfstab -U -p /mnt >> /mnt/etc/fstab

#login to new system as root
arch-chroot /mnt /bin/bash

#set location of system (uncomment en_US.UTF-8 UTF-8)
nano /etc/locale.gen

#generate local
locale-gen

#set the clock (replace US and Mountain if you arnt in the mountain time zone)
ln -sf /etc/localtime

hwclock --systohc --utc

#give computer a name
Echo (computer name) > /etc/hostname

#edit host file add 127.0.1.1 to ipaddress, localhost.localdomain to hostmane.domain.ort, and pc name to hostname
nano /etc/hosts

#enable network service
systemctl enable dhcpcd

#set password for root
passwd

#install the bootloader grup
pacman -S grup

#install grub bootloader to hdd
grub-install (location of hard drive)

#generate configuration file
grub-mkconfig -o /boot/grub/grub.cfg

#logout of the system
exit

#unmount the system
umount-R /mnt

#reboot take disk or usb out of the computer
reboot

#log into root using the password you set

#create a new user
useradd -m -g users -G wheel -s /bin/bash (username)

#assign a password to user
passwd (username)

#add new user to sudo group (uncomment %wheel ALL=(ALL) ALL)
EDITOR=nano visudo

#logout of root
exit

#login as new user

#install audio packages
sudo pacman -S pluseaudio pluseaudio-alsa

#install xorg server (leave the first option the default, the second one need to be 1 if you're using integrated graphics)
sudo pacman xorg -S xorg xorg-xinit

#create file of initiation for GUI


echo "(gui of choice)" > ~/.xinitrc

sudo pacman -S plasma-desktop

xfce:
"exec startxfce4"
sudo pacman -S xfce4

gnome:
"exec gnome-session"
sudo pacman -S gnome

cinnamon:
"exec cinnamon-session"
sudo pacman -S cinnamon

mate:
"exec mate-session"
sudo pacman -S mate

unity:
"exec unity"

openbox:
"exec openbox-session"
sudo pacman -S openbox

i3:
"exec i3"
sudo pacman -S i3

awesome:
"exec awesome"
sudo pacman -S awesome

deepin
"exec startdde"
sudo pacman -S deepin

LXDE
"exec startlxde"
sudo pacman -S lxde

#install aditional packages like a file manager, terminal inulater, web browser, and text editor
sudo pacman -S konsole dolphin firefox kate

#start gui
startx

[zuriko]

I couldn't get the hold_shift script to work, but holding escape seems to work without any additional setup on a UEFI machine.

[AlderDragon]

In case anyone else has this issue: after installing the LTS kernel for #1 I was getting a blank/frozen screen in Gnome. TTY'd to another terminal and started seeing "watchdog" logs printed out suggesting some CPU cores were stuck. Ended up installing nvidia and nvidia-lts (only had nouveau before) and the issue went away. I believe nouveau should work with some extra configuration though.

[superbeesonic]

i didn't realize how awesome I am at setting up arch linux until i saw this video.