This post lists things I do after installing Arch Linux.

Secure Boot setup

# pacman -S sbctl
# sbctl create-keys
# sbctl enroll-keys -m
# sbctl verify
# sbctl sign [file listed on "sbctl verify"]

Reboot to BIOS and enable Secure Boot

Install TLP

# pacman -S tlp tlp-rdw
# systemctl enable tlp
# systemctl mask systemd-rfkill.service systemd-rfkill.socket

Setup Firewall

# pacman -S ufw
# systemctl enable --now ufw
# ufw default deny incoming
# ufw default allow outgoing
# ufw allow ssh

ZRAM setup

# pacman -S zram-generator

Example config of /etc/systemd/zram-generator.conf:

[zram0]
zram-size = ram / 2
compression-algorithm = zstd
swap-priority = 100

hosts file

# cp /etc/hosts /etc/hosts.bak
# curl -o /etc/hosts https://someonewhocares.org/hosts/hosts

yay

$ git clone https://aur.archlinux.org/yay-bin && cd yay-bin && makepkg -si

Fully functional Desktop Environment

I use KDE Plasma as my main DE, PipeWire as audio server.

# pacman -S plasma sddm konsole dolphin kate korganizer kcalc ark mpv gwenview kamoso okular spectacle pipewire pipewire-pulse
# systemctl enable sddm
$ systemctl enable --user pipewire pipewire-pulse

Wine

# pacman -S wine winetricks
$ export WINEPREFIX=~/.wine
$ wineboot
$ winetricks -q vcrun2010 vcrun2022 dotnet48 d3dx9 dxvk vkd3d corefonts win10

Other

Disable connectivity check

# systemctl disable --now NetworkManager-wait-online.service
# systemctl mask NetworkManager-wait-online.service