Skip to content

Instantly share code, notes, and snippets.

@walm

walm/install.md

Last active October 17, 2021 19:46
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save walm/cc28aefbd14091641ecdfab6b302de8c to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save walm/cc28aefbd14091641ecdfab6b302de8c to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. walm revised this gist Oct 17, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -147,7 +147,7 @@ Disable PC speaker `echo "blacklist pcspkr" > /etc/modprobe.d/nobeep.conf`
    Install `yay` see `https://github.com/Jguer/yay`

    ```
    yay -S firefox-developer-edition ttf-dejavu
    yay -S firefox-developer-edition ttf-dejavu herbstluftwm-git
    yay -S kitty fish pass
  2. walm revised this gist Oct 17, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -149,7 +149,7 @@ Install `yay` see `https://github.com/Jguer/yay`
    ```
    yay -S firefox-developer-edition ttf-dejavu
    yay -S kitty
    yay -S kitty fish pass
    # install everything easy.. use pamac
    yay -S pamac-all
  3. walm revised this gist Oct 17, 2021. 1 changed file with 9 additions and 1 deletion.
    10 changes: 9 additions & 1 deletion install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -143,7 +143,15 @@ Disable PC speaker `echo "blacklist pcspkr" > /etc/modprobe.d/nobeep.conf`


    12. Apps

    Install `yay` see `https://github.com/Jguer/yay`

    ```
    pacman -S firefox-developer-edition ttf-dejavu
    yay -S firefox-developer-edition ttf-dejavu
    yay -S kitty
    # install everything easy.. use pamac
    yay -S pamac-all
    ```
  4. walm revised this gist Oct 17, 2021. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -137,9 +137,9 @@
    startx
    ```

    Sound "sudo pacman -S pulseaudio-alsa lib32-libpulse lib32-alsa-plugins"
    Sound `sudo pacman -S pulseaudio-alsa pulseaudio`

    Disable PC speaker "echo "blacklist pcspkr" > /etc/modprobe.d/nobeep.conf"
    Disable PC speaker `echo "blacklist pcspkr" > /etc/modprobe.d/nobeep.conf`


    12. Apps
  5. walm revised this gist Oct 17, 2021. 1 changed file with 7 additions and 0 deletions.
    7 changes: 7 additions & 0 deletions install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -140,3 +140,10 @@
    Sound "sudo pacman -S pulseaudio-alsa lib32-libpulse lib32-alsa-plugins"

    Disable PC speaker "echo "blacklist pcspkr" > /etc/modprobe.d/nobeep.conf"


    12. Apps
    ```
    pacman -S firefox-developer-edition ttf-dejavu
    ```
  6. walm revised this gist Oct 17, 2021. 1 changed file with 29 additions and 55 deletions.
    84 changes: 29 additions & 55 deletions install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,4 +1,4 @@
    ## Install in VirtualBox
    ## Install in VMWare

    1. Boot from ISO
    2. Keyboard: `loadkeys sv-latin1`
    @@ -46,9 +46,10 @@
    ```
    6. Install Arch
    ```
    pacstrap /mnt base base-devel
    pacstrap /mnt base base-devel linux linux-firmware
    genfstab -p /mnt >> /mnt/etc/fstab
    arch-chroot /mnt /bin/bash
    pacman -S vi dhcpcd
    vi /etc/locale.conf
    LANG="en_US.UTF-8"
    vi /etc/locale.gen
    @@ -57,12 +58,14 @@
    # uncomment sv_SE.UTF-8 UTF-8
    # uncomment sv_SE ISO-8859-1
    locale-gen
    ln -s /usr/share/zoneinfo/Europe/Stockholm /etc/localtime
    ln -sf /usr/share/zoneinfo/Europe/Stockholm /etc/localtime
    vi /etc/vconsole.conf
    KEYMAP=sv-latin1
    vi /etc/hostname
    # add a suitable hostname for the system, my main is HAL
    mkinitcpio -p linux
    # add a suitable hostname for the system, my main is HALXX
    vi /etc/hosts
    127.0.0.1 localhost
    127.0.0.1 halxx
    ```
    7. Install bootloader
    ```
    @@ -79,69 +82,43 @@
    ```
    10. Base config
    ```
    # set keymap
    vi /etc/vconsole.conf
    KEYMAP=sv-latin1
    # connect to internet
    dhcpcd
    # autostart on boot (use ifstat to get device name like enp0s3)
    systemctl enable [email protected]
    # fix drivers (virtualbox)
    pacman -S virtualbox-guest-utils
    vi /etc/modules-load.d/virtualbox.conf
    vboxguest
    vboxsf
    vboxvideo
    systemctl enable vboxservic
    # autostart on boot (use ifstat to get device name like ens33)
    systemctl enable [email protected]
    # fix drivers (vmware)
    # vmware tools
    pacman -S open-vm-tools
    systemctl enable vmtoolsd.service
    systemctl enable vmtoolsd.service
    # add non-root user
    useradd -d /home/<username> -m <username>
    gpasswd -a <username> audio
    passwd <username>
    # add non-root user
    useradd -d /home/<username> -m <username>
    gpasswd -a <username> audio
    passwd <username>
    pacman -S sudo
    vi /etc/sudoers
    # below root ALL=(ALL) ALL
    <username> ALL=(ALL) ALL
    pacman -S sudo
    vi /etc/sudoers
    # below root ALL=(ALL) ALL
    <username> ALL=(ALL) ALL
    # firewall, allow only incoming ssh
    iptables -N TCP
    iptables -N UDP
    iptables -P FORWARD DROP
    iptables -P OUTPUT ACCEPT
    iptables -P INPUT DROP
    iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
    iptables -A INPUT -i lo -j ACCEPT
    iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
    iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
    iptables -A INPUT -p udp -m conntrack --ctstate NEW -j UDP
    iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
    iptables -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
    iptables -A INPUT -p tcp -j REJECT --reject-with tcp-rst
    iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable
    iptables -A TCP -p tcp --dport 22 -j ACCEPT
    iptables-save > /etc/iptables/iptables.rules
    systemctl enable iptables.service
    # firewall, allow only incoming ssh
    pacman -S ufw
    ufw allow 22
    systemctl enable ufw.service
    reboot
    reboot
    ```
    11. User "basic" setup, login with created user account
    ```
    # utils
    sudo pacman -S curl git openssh tmux vim ruby htop nload
    sudo pacman -S curl git openssh tmux neovim htop
    # x (vmware)
    sudo pacman -S xf86-input-vmmouse xf86-video-vmware gtkmm
    # x environment
    sudo pacman -S xorg-server xorg-xinit xorg-server-utils mesa awesome rxvt-unicode chromium
    sudo pacman -S xorg-server xorg-xinit mesa xorg-twm xterm
    cp /etc/X11/xinit/xinitrc ~/.xinitrc
    vi ~/.xinitrc
    @@ -155,11 +132,8 @@
    -option lv3:lalt_switch \
    -option lv3:ralt_alt
    # VBoxClient-all # no, lets just activate the thing I use
    VBoxClient --clipboard
    VBoxClient --display
    exec awesome
    twm &
    exec xterm
    startx
    ```

  7. walm revised this gist Feb 1, 2017. 1 changed file with 14 additions and 14 deletions.
    28 changes: 14 additions & 14 deletions install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -31,21 +31,21 @@
    # >w
    ```
    4. Format partitions

    ```
    mkfs.ext4 /dev/sda1
    mkswap /dev/sda2
    mkfs.ext4 /dev/sda3

    ```
    5. Mount filesystem

    ```
    swapon /dev/sda2
    mount /dev/sda3 /mnt
    mkdir /mnt/boot
    mount /dev/sda1 /mnt/boot

    ```
    6. Install Arch

    ```
    pacstrap /mnt base base-devel
    genfstab -p /mnt >> /mnt/etc/fstab
    arch-chroot /mnt /bin/bash
    @@ -63,22 +63,22 @@
    vi /etc/hostname
    # add a suitable hostname for the system, my main is HAL
    mkinitcpio -p linux

    ```
    7. Install bootloader

    ```
    pacman -S syslinux gptfdisk
    syslinux-install_update -i -a -m

    ```
    8. Secure root `passwd`
    9. Reboot

    ```
    exit
    umount /mnt/boot
    umount /mnt
    reboot

    ```
    10. Base config

    ```
    # set keymap
    vi /etc/vconsole.conf
    KEYMAP=sv-latin1
    @@ -131,9 +131,9 @@
    systemctl enable iptables.service
    reboot

    ```
    11. User "basic" setup, login with created user account

    ```
    # utils
    sudo pacman -S curl git openssh tmux vim ruby htop nload
    @@ -161,7 +161,7 @@
    exec awesome
    startx

    ```

    Sound "sudo pacman -S pulseaudio-alsa lib32-libpulse lib32-alsa-plugins"

  8. walm revised this gist Feb 1, 2017. 1 changed file with 27 additions and 27 deletions.
    54 changes: 27 additions & 27 deletions install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -3,33 +3,33 @@
    1. Boot from ISO
    2. Keyboard: `loadkeys sv-latin1`
    3. Partitions boot, swap and root (home will use just use root)

    gdisk /dev/sda

    # create boot partition
    # >n
    # Nr >[Enter for default 1]
    # First sector >[Enter for default]
    # Size >+250M
    # HEX >[Enter for default 8300]
    #
    # create swap partition
    # >n
    # Nr >[Enter for default 2]
    # First section >[Enter for default]
    # Size >+2G
    # HEX >8200
    #
    # create root partition
    # >n
    # use default for everyting to fill out the disk :)
    #
    # view partitions before write
    # >p
    #
    # write partitions
    # >w

    ```
    gdisk /dev/sda
    # create boot partition
    # >n
    # Nr >[Enter for default 1]
    # First sector >[Enter for default]
    # Size >+250M
    # HEX >[Enter for default 8300]
    #
    # create swap partition
    # >n
    # Nr >[Enter for default 2]
    # First section >[Enter for default]
    # Size >+2G
    # HEX >8200
    #
    # create root partition
    # >n
    # use default for everyting to fill out the disk :)
    #
    # view partitions before write
    # >p
    #
    # write partitions
    # >w
    ```
    4. Format partitions

    mkfs.ext4 /dev/sda1
  9. walm revised this gist Feb 1, 2017. 1 changed file with 25 additions and 25 deletions.
    50 changes: 25 additions & 25 deletions install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -4,31 +4,31 @@
    2. Keyboard: `loadkeys sv-latin1`
    3. Partitions boot, swap and root (home will use just use root)

    gdisk /dev/sda

    # create boot partition
    # >n
    # Nr >[Enter for default 1]
    # First sector >[Enter for default]
    # Size >+250M
    # HEX >[Enter for default 8300]
    #
    # create swap partition
    # >n
    # Nr >[Enter for default 2]
    # First section >[Enter for default]
    # Size >+2G
    # HEX >8200
    #
    # create root partition
    # >n
    # use default for everyting to fill out the disk :)
    #
    # view partitions before write
    # >p
    #
    # write partitions
    # >w
    gdisk /dev/sda

    # create boot partition
    # >n
    # Nr >[Enter for default 1]
    # First sector >[Enter for default]
    # Size >+250M
    # HEX >[Enter for default 8300]
    #
    # create swap partition
    # >n
    # Nr >[Enter for default 2]
    # First section >[Enter for default]
    # Size >+2G
    # HEX >8200
    #
    # create root partition
    # >n
    # use default for everyting to fill out the disk :)
    #
    # view partitions before write
    # >p
    #
    # write partitions
    # >w

    4. Format partitions

  10. walm revised this gist Feb 1, 2017. 1 changed file with 114 additions and 114 deletions.
    228 changes: 114 additions & 114 deletions install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -4,78 +4,78 @@
    2. Keyboard: `loadkeys sv-latin1`
    3. Partitions boot, swap and root (home will use just use root)

    gdisk /dev/sda

    # create boot partition
    # >n
    # Nr >[Enter for default 1]
    # First sector >[Enter for default]
    # Size >+250M
    # HEX >[Enter for default 8300]
    #
    # create swap partition
    # >n
    # Nr >[Enter for default 2]
    # First section >[Enter for default]
    # Size >+2G
    # HEX >8200
    #
    # create root partition
    # >n
    # use default for everyting to fill out the disk :)
    #
    # view partitions before write
    # >p
    #
    # write partitions
    # >w
    gdisk /dev/sda

    # create boot partition
    # >n
    # Nr >[Enter for default 1]
    # First sector >[Enter for default]
    # Size >+250M
    # HEX >[Enter for default 8300]
    #
    # create swap partition
    # >n
    # Nr >[Enter for default 2]
    # First section >[Enter for default]
    # Size >+2G
    # HEX >8200
    #
    # create root partition
    # >n
    # use default for everyting to fill out the disk :)
    #
    # view partitions before write
    # >p
    #
    # write partitions
    # >w

    4. Format partitions

    mkfs.ext4 /dev/sda1
    mkswap /dev/sda2
    mkfs.ext4 /dev/sda3
    mkfs.ext4 /dev/sda1
    mkswap /dev/sda2
    mkfs.ext4 /dev/sda3

    5. Mount filesystem

    swapon /dev/sda2
    mount /dev/sda3 /mnt
    swapon /dev/sda2
    mount /dev/sda3 /mnt

    mkdir /mnt/boot
    mount /dev/sda1 /mnt/boot
    mkdir /mnt/boot
    mount /dev/sda1 /mnt/boot

    6. Install Arch

    pacstrap /mnt base base-devel
    genfstab -p /mnt >> /mnt/etc/fstab
    arch-chroot /mnt /bin/bash
    vi /etc/locale.conf
    LANG="en_US.UTF-8"
    vi /etc/locale.gen
    # uncomment en_US.UTF-8 UTF-8
    # uncomment en_US ISO-8859-1
    # uncomment sv_SE.UTF-8 UTF-8
    # uncomment sv_SE ISO-8859-1
    locale-gen
    ln -s /usr/share/zoneinfo/Europe/Stockholm /etc/localtime
    vi /etc/vconsole.conf
    KEYMAP=sv-latin1
    vi /etc/hostname
    # add a suitable hostname for the system, my main is HAL
    mkinitcpio -p linux
    pacstrap /mnt base base-devel
    genfstab -p /mnt >> /mnt/etc/fstab
    arch-chroot /mnt /bin/bash
    vi /etc/locale.conf
    LANG="en_US.UTF-8"
    vi /etc/locale.gen
    # uncomment en_US.UTF-8 UTF-8
    # uncomment en_US ISO-8859-1
    # uncomment sv_SE.UTF-8 UTF-8
    # uncomment sv_SE ISO-8859-1
    locale-gen
    ln -s /usr/share/zoneinfo/Europe/Stockholm /etc/localtime
    vi /etc/vconsole.conf
    KEYMAP=sv-latin1
    vi /etc/hostname
    # add a suitable hostname for the system, my main is HAL
    mkinitcpio -p linux

    7. Install bootloader

    pacman -S syslinux gptfdisk
    syslinux-install_update -i -a -m
    pacman -S syslinux gptfdisk
    syslinux-install_update -i -a -m

    8. Secure root `passwd`
    9. Reboot

    exit
    umount /mnt/boot
    umount /mnt
    reboot
    exit
    umount /mnt/boot
    umount /mnt
    reboot

    10. Base config

    @@ -99,68 +99,68 @@

    # fix drivers (vmware)
    pacman -S open-vm-tools
    systemctl enable vmtoolsd.service

    # add non-root user
    useradd -d /home/<username> -m <username>
    gpasswd -a <username> audio
    passwd <username>

    pacman -S sudo
    vi /etc/sudoers
    # below root ALL=(ALL) ALL
    <username> ALL=(ALL) ALL

    # firewall, allow only incoming ssh
    iptables -N TCP
    iptables -N UDP
    iptables -P FORWARD DROP
    iptables -P OUTPUT ACCEPT
    iptables -P INPUT DROP
    iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
    iptables -A INPUT -i lo -j ACCEPT
    iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
    iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
    iptables -A INPUT -p udp -m conntrack --ctstate NEW -j UDP
    iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
    iptables -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
    iptables -A INPUT -p tcp -j REJECT --reject-with tcp-rst
    iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable
    iptables -A TCP -p tcp --dport 22 -j ACCEPT
    iptables-save > /etc/iptables/iptables.rules
    systemctl enable iptables.service

    reboot
    systemctl enable vmtoolsd.service

    # add non-root user
    useradd -d /home/<username> -m <username>
    gpasswd -a <username> audio
    passwd <username>

    pacman -S sudo
    vi /etc/sudoers
    # below root ALL=(ALL) ALL
    <username> ALL=(ALL) ALL

    # firewall, allow only incoming ssh
    iptables -N TCP
    iptables -N UDP
    iptables -P FORWARD DROP
    iptables -P OUTPUT ACCEPT
    iptables -P INPUT DROP
    iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
    iptables -A INPUT -i lo -j ACCEPT
    iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
    iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
    iptables -A INPUT -p udp -m conntrack --ctstate NEW -j UDP
    iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
    iptables -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
    iptables -A INPUT -p tcp -j REJECT --reject-with tcp-rst
    iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable
    iptables -A TCP -p tcp --dport 22 -j ACCEPT
    iptables-save > /etc/iptables/iptables.rules
    systemctl enable iptables.service

    reboot

    11. User "basic" setup, login with created user account

    # utils
    sudo pacman -S curl git openssh tmux vim ruby htop nload

    # x (vmware)
    sudo pacman -S xf86-input-vmmouse xf86-video-vmware gtkmm

    # x environment
    sudo pacman -S xorg-server xorg-xinit xorg-server-utils mesa awesome rxvt-unicode chromium

    cp /etc/X11/xinit/xinitrc ~/.xinitrc
    vi ~/.xinitrc
    # setxkbmap options:
    # lv3:lalt_switch = left Alt as AltGr
    # lv3:ralt_alt = right Alt as normal Alt (as it's default as AltGr)
    setxkbmap \
    -layout se \
    -model apple_laptop \
    -variant mac \
    -option lv3:lalt_switch \
    -option lv3:ralt_alt

    # VBoxClient-all # no, lets just activate the thing I use
    VBoxClient --clipboard
    VBoxClient --display

    exec awesome
    startx
    # utils
    sudo pacman -S curl git openssh tmux vim ruby htop nload

    # x (vmware)
    sudo pacman -S xf86-input-vmmouse xf86-video-vmware gtkmm

    # x environment
    sudo pacman -S xorg-server xorg-xinit xorg-server-utils mesa awesome rxvt-unicode chromium

    cp /etc/X11/xinit/xinitrc ~/.xinitrc
    vi ~/.xinitrc
    # setxkbmap options:
    # lv3:lalt_switch = left Alt as AltGr
    # lv3:ralt_alt = right Alt as normal Alt (as it's default as AltGr)
    setxkbmap \
    -layout se \
    -model apple_laptop \
    -variant mac \
    -option lv3:lalt_switch \
    -option lv3:ralt_alt

    # VBoxClient-all # no, lets just activate the thing I use
    VBoxClient --clipboard
    VBoxClient --display

    exec awesome
    startx


    Sound "sudo pacman -S pulseaudio-alsa lib32-libpulse lib32-alsa-plugins"
  11. walm created this gist Feb 1, 2017.
    168 changes: 168 additions & 0 deletions install.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,168 @@
    ## Install in VirtualBox

    1. Boot from ISO
    2. Keyboard: `loadkeys sv-latin1`
    3. Partitions boot, swap and root (home will use just use root)

    gdisk /dev/sda

    # create boot partition
    # >n
    # Nr >[Enter for default 1]
    # First sector >[Enter for default]
    # Size >+250M
    # HEX >[Enter for default 8300]
    #
    # create swap partition
    # >n
    # Nr >[Enter for default 2]
    # First section >[Enter for default]
    # Size >+2G
    # HEX >8200
    #
    # create root partition
    # >n
    # use default for everyting to fill out the disk :)
    #
    # view partitions before write
    # >p
    #
    # write partitions
    # >w

    4. Format partitions

    mkfs.ext4 /dev/sda1
    mkswap /dev/sda2
    mkfs.ext4 /dev/sda3

    5. Mount filesystem

    swapon /dev/sda2
    mount /dev/sda3 /mnt

    mkdir /mnt/boot
    mount /dev/sda1 /mnt/boot

    6. Install Arch

    pacstrap /mnt base base-devel
    genfstab -p /mnt >> /mnt/etc/fstab
    arch-chroot /mnt /bin/bash
    vi /etc/locale.conf
    LANG="en_US.UTF-8"
    vi /etc/locale.gen
    # uncomment en_US.UTF-8 UTF-8
    # uncomment en_US ISO-8859-1
    # uncomment sv_SE.UTF-8 UTF-8
    # uncomment sv_SE ISO-8859-1
    locale-gen
    ln -s /usr/share/zoneinfo/Europe/Stockholm /etc/localtime
    vi /etc/vconsole.conf
    KEYMAP=sv-latin1
    vi /etc/hostname
    # add a suitable hostname for the system, my main is HAL
    mkinitcpio -p linux

    7. Install bootloader

    pacman -S syslinux gptfdisk
    syslinux-install_update -i -a -m

    8. Secure root `passwd`
    9. Reboot

    exit
    umount /mnt/boot
    umount /mnt
    reboot

    10. Base config

    # set keymap
    vi /etc/vconsole.conf
    KEYMAP=sv-latin1

    # connect to internet
    dhcpcd

    # autostart on boot (use ifstat to get device name like enp0s3)
    systemctl enable [email protected]

    # fix drivers (virtualbox)
    pacman -S virtualbox-guest-utils
    vi /etc/modules-load.d/virtualbox.conf
    vboxguest
    vboxsf
    vboxvideo
    systemctl enable vboxservic

    # fix drivers (vmware)
    pacman -S open-vm-tools
    systemctl enable vmtoolsd.service

    # add non-root user
    useradd -d /home/<username> -m <username>
    gpasswd -a <username> audio
    passwd <username>

    pacman -S sudo
    vi /etc/sudoers
    # below root ALL=(ALL) ALL
    <username> ALL=(ALL) ALL

    # firewall, allow only incoming ssh
    iptables -N TCP
    iptables -N UDP
    iptables -P FORWARD DROP
    iptables -P OUTPUT ACCEPT
    iptables -P INPUT DROP
    iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
    iptables -A INPUT -i lo -j ACCEPT
    iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
    iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
    iptables -A INPUT -p udp -m conntrack --ctstate NEW -j UDP
    iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
    iptables -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
    iptables -A INPUT -p tcp -j REJECT --reject-with tcp-rst
    iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable
    iptables -A TCP -p tcp --dport 22 -j ACCEPT
    iptables-save > /etc/iptables/iptables.rules
    systemctl enable iptables.service

    reboot

    11. User "basic" setup, login with created user account

    # utils
    sudo pacman -S curl git openssh tmux vim ruby htop nload

    # x (vmware)
    sudo pacman -S xf86-input-vmmouse xf86-video-vmware gtkmm

    # x environment
    sudo pacman -S xorg-server xorg-xinit xorg-server-utils mesa awesome rxvt-unicode chromium

    cp /etc/X11/xinit/xinitrc ~/.xinitrc
    vi ~/.xinitrc
    # setxkbmap options:
    # lv3:lalt_switch = left Alt as AltGr
    # lv3:ralt_alt = right Alt as normal Alt (as it's default as AltGr)
    setxkbmap \
    -layout se \
    -model apple_laptop \
    -variant mac \
    -option lv3:lalt_switch \
    -option lv3:ralt_alt

    # VBoxClient-all # no, lets just activate the thing I use
    VBoxClient --clipboard
    VBoxClient --display

    exec awesome
    startx


    Sound "sudo pacman -S pulseaudio-alsa lib32-libpulse lib32-alsa-plugins"

    Disable PC speaker "echo "blacklist pcspkr" > /etc/modprobe.d/nobeep.conf"