locsec/notes
1
Форкнуть 0
зеркало из https://github.com/iharh/notes.git synced 2025-10-29 20:56:06 +02:00
Код Задачи Пакеты Проекты Релизы Вики Активность
notes/os/linux
История
Ihar Hancharenka 93ec4b4316 m
2025-03-10 10:23:02 +03:00
..
arch
m
2025-02-17 10:29:23 +03:00
cmdline
m
2023-11-21 22:05:37 +03:00
debian
m
2025-02-05 18:36:20 +03:00
distroless
first
2023-03-27 16:52:17 +03:00
docs
m
2025-03-04 15:08:49 +03:00
for-mac
m
2023-09-29 20:58:42 +03:00
free
m
2024-05-06 11:12:51 +03:00
gentoo
m
2023-09-14 22:46:48 +03:00
hack
first
2023-03-27 16:52:17 +03:00
hw
m
2024-05-09 09:03:43 +03:00
immutable
m
2025-02-11 11:37:49 +03:00
installer/calamares
m
2024-04-09 18:43:40 +03:00
intell
first
2023-03-27 16:52:17 +03:00
internals
m
2025-03-08 22:27:30 +03:00
lfs
m
2024-01-27 07:23:12 +03:00
manjaro
m
2024-02-25 18:02:17 +03:00
misc
first
2023-03-27 16:52:17 +03:00
nixos
m
2025-03-10 10:23:02 +03:00
packaging
m
2025-02-18 07:45:06 +03:00
privacy
m
2025-03-03 11:40:56 +03:00
rescue
first
2023-03-27 16:52:17 +03:00
rh
m
2025-03-03 13:31:21 +03:00
ru
m
2024-08-01 16:42:52 +03:00
single-purpose
m
2023-12-18 17:27:18 +03:00
slackware
first
2023-03-27 16:52:17 +03:00
solus
m
2024-03-04 20:23:55 +03:00
suse
m
2023-10-06 22:29:04 +03:00
system76
first
2023-03-27 16:52:17 +03:00
tools
m
2025-02-17 09:23:47 +03:00
turnkey
first
2023-03-27 16:52:17 +03:00
ubuntu
m
2024-05-22 13:59:33 +03:00
void
m
2024-04-29 11:39:24 +03:00
alternativeto.txt
first
2023-03-27 16:52:17 +03:00
apple-support.txt
first
2023-03-27 16:52:17 +03:00
buildroot.txt
first
2023-03-27 16:52:17 +03:00
coreboot.txt
first
2023-03-27 16:52:17 +03:00
initial.txt
m
2023-11-01 10:27:51 +03:00
ms-cbl-mariner.txt
first
2023-03-27 16:52:17 +03:00
README.md
m
2024-06-28 09:33:40 +03:00
system-resque.txt
first
2023-03-27 16:52:17 +03:00

README.md

reparing

login

$ sudo systemctl disable lightdm.service
Synchronizing state of lightdm.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.
Executing: /usr/lib/systemd/systemd-sysv-install disable lightdm
Removed "/etc/systemd/system/display-manager.service".

$ sudo systemctl enable --now lightdm.service
$ sudo dpkg-reconfigure lightdm

$ sway -d --unsupported-gpu

Mar 31 20:43:25 EPBYGOMW0024T2 systemd[1]: Started greetd.service - Greeter daemon.
Mar 31 20:43:25 EPBYGOMW0024T2 greetd[1642]: PAM unable to dlopen(pam_lastlog.so): /usr/lib/security/pam_lastlog.so: cannot open shared object file: No such file or directory
Mar 31 20:43:25 EPBYGOMW0024T2 greetd[1642]: PAM adding faulty module: pam_lastlog.so

pam

$ dpkg -L login
...
/etc/pam.d/login
...
82:session    optional   pam_lastlog.so

pam_lastlog: deprecate it and disable by default

dd

sudo dd bs=4M of=/dev/sda status=progress oflag=sync status=progress if=<dist>.iso

grub

https://docs.fedoraproject.org/en-US/quick-docs/grub2-bootloader/#create-an-esp

chroot

sudo lsblk
sudo mount /dev/nvme0n1p… /mnt
sudo mount /dev/nvme0n1p… /mnt/boot/efi/
for i in /dev /dev/pts /proc /sys /run; do sudo mount -B $i /mnt$i; done
sudo chroot /mnt

uefi

https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot

fat32, 512M, /boot/efi, flags: boot,esp ext4, 10G, / , flags: root

lshw

❯ sudo lshw -c video *-display UNCLAIMED
description: VGA compatible controller product: Cezanne [Radeon Vega Series / Radeon Vega Mobile Series] vendor: Advanced Micro Devices, Inc. [AMD/ATI] physical id: 0 bus info: pci@0000:06:00.0 version: c8 width: 64 bits clock: 33MHz capabilities: pm pciexpress msi msix vga_controller bus_master cap_list configuration: latency=0 resources: memory:d0000000-dfffffff memory:e0000000-e01fffff ioport:e000(size=256) memory:fcb00000-fcb7ffff memory:c0000-dffff

UMS/KMS

grub

$ info -f grub -n 'Simple configuration'
$ sudo dpkg-reconfigure grub-pc
$ sudo dpkg-reconfigure grub-common
$ sudo debconf-show grub-pc
...
$ sudo update-grub

$ dpkg -L grub-common
/etc/default/grub.d
/etc/grub.d/00_header
/etc/grub.d/05_debian_theme
/etc/grub.d/10_linux
/etc/grub.d/10_linux_zfs
/etc/grub.d/20_linux_xen
/etc/grub.d/25_bli
/etc/grub.d/30_os-prober
/etc/grub.d/30_uefi-firmware
/etc/grub.d/40_custom
/etc/grub.d/41_custom
/etc/grub.d/README
/etc/init.d/grub-common
/etc/pm/sleep.d/10_grub-common
/lib
diverted by base-files to: /lib.usr-is-merged
/lib/systemd/system/grub-initrd-fallback.service

$ cat /etc/default/grub.d/timeout
GRUB_TIMEOUT=5
GRUB_TIMEOUT_STYLE="countdown"
GRUB_TERMINAL=console

xf86-video-amdgpu

amdgpu

kernel parameters

ryzen 7 5700G

bug bisect debug troubleshoot

community

boot to runlevel 3

https://forums.opensuse.org/t/amdgpu-displaying-black-screen-on-amd-ryzen-2300u/173024/22?page=2 systemctl set-default multi-user.target

  • sudo journalctl -b -1 | grep -E "drm|amdgpu"

disabling modesetting

https://wiki.archlinux.org/title/Kernel_mode_setting#Disabling_modesetting

driver=free i915.modeset=0 radeon.modeset=0 nouveau.modeset=0

nomodeset The newest kernels have moved the video mode setting into the kernel. So all the programming of the hardware specific clock rates and registers on the video card happen in the kernel rather than in the X driver when the X server starts. This makes it possible to have high resolution nice looking splash (boot) screens and flicker free transitions from boot splash to login screen. Unfortunately, on some cards this doesnt work properly and you end up with a black screen. Adding the nomodeset parameter instructs the kernel to not load video drivers and use BIOS modes instead until X is loaded.

Note that this option is sometimes needed for nVidia cards when using the default "nouveau" drivers. Installing proprietary nvidia drivers usually makes this option no longer necessary, so it may not be needed to make this option permanent, just for one boot until you installed the nvidia drivers.

iommu=soft pci=noats acpi=off https://forum.garudalinux.org/t/cant-boot-on-integrated-radeon-gpu/14890 radeon.si_support=0 radeon.cik_support=0 amdgpu.si_support=1 amdgpu.cik_support=1 modprobe.blacklist=radeon

initramfs

/etc/modprobe.d/blacklist.conf ... blacklist radeon options radeon modeset=0

initramfs-tools: /etc/initramfs-tools/conf.d /etc/initramfs-tools/update-initramfs.conf /etc/kernel/postinst.d/initramfs-tools /etc/kernel/postrm.d/initramfs-tools /usr/sbin/update-initramfs /usr/share/lintian/overrides/initramfs-tools /usr/share/man/man5/update-initramfs.conf.5.gz /usr/share/man/man8/update-initramfs.8.gz

$ cat /etc/initramfs-tools/modules 
# delete line
radeon modeset=1

$ update-initramfs -u -k all

$ tree /etc/initramfs-tools
/etc/initramfs-tools/
    conf.d/
        calamares-safe-initramfs.conf
        cryptsetup
    hooks/
    initramfs.conf
    modules
    scripts/
        init-bottom
        init-premount
        init-top
        local-bottom
        local-premount
        local-top
        nfs-bottom
        nfs-premount
        nfs-top
        panic
    update-initramfs.conf

$cat /usr/sbin/update-initramfs
...
BOOTDIR=/boot
CONF=/etc/initramfs-tools/update-initramfs.conf
...
get_sorted_versions()
{
	version_list="$(
		linux-version list |
		while read -r version; do
		      test -e "${BOOTDIR}/initrd.img-$version" && echo "$version"
		done |
		linux-version sort --reverse
		)"
	verbose "Available versions: ${version_list}"
}

set_current_version()
{
	if [ -f "/boot/initrd.img-$(uname -r)" ]; then
		version=$(uname -r)
	fi
}
...
# Invoke bootloader
run_bootloader()
{
	# invoke policy conformant bootloader hooks
	if [ -d /etc/initramfs/post-update.d/ ]; then
		run-parts --arg="${version}" --arg="${initramfs}" \
			/etc/initramfs/post-update.d/
		return 0
	fi
}
...

modprobe

kmod: /etc/modprobe.d/blacklist.conf


tree /etc/modprobe.d
/etc/modprobe.d
├── alsa-base.conf
├── blacklist-ath_pci.conf
├── blacklist.conf
├── blacklist-firewire.conf
├── blacklist-framebuffer.conf
├── blacklist-modem.conf
├── blacklist-oss.conf -> /lib/linux-sound-base/noOSS.modprobe.conf
├── blacklist-radeon.conf
├── blacklist-rare-network.conf
├── dkms.conf
└── iwlwifi.conf


$ dpkg -L kmod
/etc/depmod.d/ubuntu.conf
/etc/init.d/kmod
/etc/modprobe.d/blacklist-ath_pci.conf
/etc/modprobe.d/blacklist-firewire.conf
/etc/modprobe.d/blacklist-framebuffer.conf
/etc/modprobe.d/blacklist-rare-network.conf
/etc/modprobe.d/blacklist.conf
/etc/modprobe.d/iwlwifi.conf
/usr/bin/kmod
/usr/lib/modprobe.d/aliases.conf
/usr/sbin
/usr/share
/usr/share/bash-completion/completions
/usr/share/bash-completion/completions/kmod
/usr/share/doc/libkmod2/README.md
/usr/share/doc/libkmod2/TODO
/usr/share/initramfs-tools/hooks/kmod
/usr/share/man/man5/depmod.d.5.gz
/usr/share/man/man5/modprobe.d.5.gz
/usr/share/man/man5/modules.dep.5.gz
/usr/share/man/man8/depmod.8.gz
/usr/share/man/man8/insmod.8.gz
/usr/share/man/man8/kmod.8.gz
/usr/share/man/man8/lsmod.8.gz
/usr/share/man/man8/modinfo.8.gz
/usr/share/man/man8/modprobe.8.gz
/usr/share/man/man8/rmmod.8.gz
/usr/bin/lsmod
/usr/sbin/depmod
/usr/sbin/insmod
/usr/sbin/lsmod
/usr/sbin/modinfo
/usr/sbin/modprobe
/usr/sbin/rmmod
/usr/share/doc/kmod
/usr/share/man/man5/modules.dep.bin.5.gz

dkms

$ sudo dkms autoinstall

internals

0 - switch KMS off if it is not supported by xf86-video-ati/radeon

drivers/gpu/radeon/radeon_drv.c

misc 1

$ cat /usr/share/X11/xorg.conf.d/00-amdgpu.conf
Section "OutputClass"
        Identifier "AMDgpu"
        MatchDriver "amdgpu"
        Driver "amdgpu"
EndSection

Section "Files"
        ModulePath "/opt/amdgpu-pro/lib/xorg/modules"
        ModulePath "/opt/amdgpu/lib/xorg/modules"
        ModulePath "/usr/lib/xorg/modules"
EndSection

xserver-xorg-amdgpu-video-amdgpu: /usr/share/X11/xorg.conf.d/00-amdgpu.conf

$ dpkg -L xserver-xorg-amdgpu-video-amdgpu
/opt/amdgpu/lib/xorg/modules/drivers/amdgpu_drv.so
/opt/amdgpu/share/man/man4/amdgpu.4
/usr/share/X11/xorg.conf.d/00-amdgpu.conf

$ man amdgpu
$ cat /opt/amdgpu/share/man/man4/amdgpu.4

$ ls -la /lib/firmware/amdgpu

misc 2

recovery console

plymouth

plymouth-start.service

mesa

fedora sway[1275]: MESA-LOADER: failed to open simpledrm: /usr/lib64/dri/simpledrm_dri.so: cannot open shared object file: No such file or directory (search paths /usr/lib64/dri, suffix _dri)

You need to install mesa-dri-gallium to have radeonsi or radv, the firmware is not the userland driver. mesa-dri-gallium ? mesa-dri-drivers simpledrm is the kernel default framebuffer driver when no gpu is available.

??? /lib/firmware/vendor

loglevel

misc

driver=free acpi=off noapic

/etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT=...

recordfail load_video gfxmode $linux_gfx_mode insmod gzio ... set root='hd0,...'

$vt_handoff (vt = virtualterminal) is a kernel boot parameter unique to Ubuntu, and is not an upstream kernel boot parameter. Its purpose is to allow the kernel to maintain the current contents of video memory on a virtual terminal.

issues

to-read

partition

$ sudo parted /dev/sda -s -a opt mklabel gpt mkpart primary fat32 0% 100%
$ sudo parted /dev/sda -s print
$ sudo mkfs.fat -F 32 /dev/sda1

to-clone

git@bb-.org:ii-ko/wnotes.git