# Arch Linux

<center>

[Download ISO](https://repo.pwoss.org/desktop/iso)

</center>

------

1. `QDISKS="1" # Select the number "1" OR "2". If you have more than 2 hard drives, select 2.`

2. `ENCRYPTION="YES" # Select "YES" OR "NO" whether you want encryption or not.`

 

If you are installing Arch on a HDD hard disk instead of an SSD hard disk, you must delete `root_trim=yes` from grub.

With Encryption:

Without Encryption:

 

## Desktop Environment

You can change the desktop environment.

 

## Packages

## Hardware

### Minimal system

 

### Recommended system

 

## BIOS

 

sudo dd bs=4M if=~/Downloads/PwOSS-Desktop-<date>.iso of=/dev/sdd

```

# Desktop Software Suite

<center>

Our selected software suite for your desktop.

</center>

------

2. [www.lineageoslog.com/statistics](https://www.lineageoslog.com/statistics)

3. [www.stats.lineageos.org/](https://stats.lineageos.org/)

 

The best way to find out is to have a look at XDA-developers.

 

Over the years, **TWRP** is the most used **custom recovery**. A custom recovery is necessary to flash a custom ROM and hence TWRP is a suitable solution if your device supports it.<br>

TWRP supports touch interactions, encrypted storage, MTP (mass storage), and many more features to satistfy the needs of a power user. <br>

Search for your device [here](https://twrp.me/Devices/) to get TWRP.<br>

 

## Clockworkmod recovery

Clockworkmod (CWM) was the de-facto recovery environment used by savvy Android users until TWRP gained traction in the smartphone market. Its interface was very minimal, coloured text on a black background. Controls were handled using the volume buttons and the power key. It is no longer the recommended recovery to use unless you have an older device that doesn't support TWRP (e.g. Samsung Galaxy S). <br>

 

Resurrection Remix OS is based on LineageOS with much more settings / features.

 

Back in the days, it was _Chainfire's - SuperSU_, but it was sold to a Chinese company and was no longer trustworthy.

Magisk is open source and became more and more popular after the years. Magisk is actually more than just _to get root access_. It supports modules which could provide apps, tweaks or services. Some applications (bank apps/NFC/games/etc.) will not work if you have a rooted phone, but with Magisk it possible to hide the _root check_ of the certain apps. This hiding capability may eventually stop working as Google makes these checks stricter.

This is a little bit tricky! It can be different depends on your phone.

## 1.1. Hardware

You need an Android phone. There is no proper way with an Apple phone.

### 1.1.1. Check bootloader

Find out if your phone has the ability to unlock your bootloader.

- [xiaomi.com](https://account.xiaomi.com/pass/serviceLogin?callback=http%3A%2F%2Fwww.miui.com%2Fextra.php%3Fmod%3Dxiaomi%2Fauthcallback%26followup%3Dhttp%253A%252F%252Fwww.miui.com%252Funlock%252Fapply.php%26sign%3DYzdhOGVjM2ExNDg0YWJlMGUyYTk4NTUwZDY4OGIyZmI5ZmFmZjEzMw%2C%2C&amp;sid=miuibbs&amp;_locale=en)

- *

 

### 1.2.1. ADB &amp; fastboot drivers

Depends on your operating system (Linux, Windows, Mac) you have to download the driver for ADB &amp; Fastboot connection (computer to phone).

 

#### 1.2.4.1. Magisk from GitHub:

[Magisk-'latest-version'.zip](https://github.com/topjohnwu/Magisk/releases/)

[MagiskManager-'latest-version'.apk](https://github.com/topjohnwu/Magisk/releases/)

#### 1.2.4.2. Riru from GitHub:

#### 1.2.4.3. EdXposed from GitHub:

[magisk-EdXposed-'latest-version'.zip](https://github.com/ElderDrivers/EdXposed/releases/)

[EdXposedInstaller_'latest-version'.apk](https://github.com/ElderDrivers/EdXposed/releases/)

#### 1.2.4.4. NanoDroid from nanolx.org:

[NanoDroid-BromiteWebView-<latest-date>.zip](https://downloads.nanolx.org/NanoDroid/Stable/)

#### 1.2.4.5. XPrivacyLua from F-Droid:

#### 1.2.4.6. AFWall+ from F-Droid:

Get all downloaded applications on your phone. Use an external _micro SD card_ if it's possible.

Leave __eu.faircode.xlua_'latest-version'.apk__, __dev.ukanth.ufirewall_'latest-version'.apk__, __MagiskManager-'latest-version'.apk__ and __EdXposedInstaller-'latest-version'.apk__ on your computer.

### 1.2.5. Heimdall (Samsung phones only)

__Arch Linux &amp; Manjaro Linux:__

```

 

### 2.1.3. Unlock bootloader

After that reboot your phone without any new installation (just to save time).

#### 2.1.6.2. Create .pit file

Now you have to create a .pit (Partition Information Table) file.

Output:

- __Internal Storage__

Now __Swipe to Wipe__.

 

#### 2.2.1.2. Backup with TWRP

Before we flash a custom-ROM let's do a "quick" backup of your system.

Click on __Backup__ and __Select every Partition__ and __Swipe to Backup__.

 

- __Cache__

Now __Swipe to Wipe__.

 

### 2.2.2. Custom ROM

Click on __Install__ and __Select Storage__ and choose __Micro SD card__.

Look for _lineage-16.0-20190327-microG-<model-number>.zip_ click on it and __Swipe to confirm Flash__. Wait until it's done. And wipe the _Cache_.

 

Go back to the main view and click on __Reboot__ and __System__.

 

- LAN control

- VPN control

Go back to the main view (first start of the app).

Go back to _microG Settings_ and click __Google Device Registration__ and enable it.

The same applies to __Google Cloud Messaging__.

 

 

### 1.1.3. ADB drivers

 

### 1.1.4. Heimdall

__Arch Linux &amp; Manjaro Linux:__

```

sudo pacman -S heimdall

#### 1.1.5.1. Magisk from GitHub:

[Magisk-'latest-version'.zip](https://github.com/topjohnwu/Magisk/releases/)

[MagiskManager-'latest-version'.apk](https://github.com/topjohnwu/Magisk/releases/)

#### 1.1.5.2. Riru from GitHub:

#### 1.1.5.3. EdXposed from GitHub:

[magisk-EdXposed-'latest-version'.zip](https://github.com/ElderDrivers/EdXposed/releases/)

[EdXposedInstaller_'latest-version'.apk](https://github.com/ElderDrivers/EdXposed/releases/)

#### 1.1.5.4. NanoDroid from nanolx.org:

[NanoDroid-BromiteWebView-'latest-version'.zip](https://downloads.nanolx.org/NanoDroid/Stable/)

#### 1.1.5.5. XPrivacyLua from F-Droid:

#### 1.1.5.6. AFWall+ from F-Droid:

#### 1.1.5.7. FakeGapps from F-Droid:

Get all downloaded applications on your phone. Use an external _micro SD card_ if it's possible.

Leave __eu.faircode.xlua_'latest-version'.apk__, __dev.ukanth.ufirewall_'latest-version'.apk__, __MagiskManager-'latest-version'.apk__, __com.thermatk.android.xf.fakegapps-'latest-version'.apk__ and __EdXposedInstaller-'latest-version'.apk__ on your computer.

#### 2.1.2.2. Create .pit file

Now you have to create a .pit (Partition Information Table) file.

Output:

- __Internal Storage__

Now __Swipe to Wipe__.

 

#### 2.2.1.2. Backup with TWRP

Before we flash a custom-ROM let's do a "quick" backup of your system.

Click on __Backup__ and __Select every Partition__ and __Swipe to Backup__.

 

- __Cache__

Now __Swipe to Wipe__.

 

### 2.2.2. Custom ROM

Click on __Install__ and __Select Storage__ and choose __Micro SD card__.

Look for _RR-P-'latest-version'-trlte-Official.zip_ click on it and __Swipe to confirm Flash__. Wait until it's done. And wipe the _Cache_.

 

Now __Swipe to confirm Flash__.

Go back to the main view and click on __Reboot__ and __System__.

 

- Roaming control

- LAN control

- VPN control

Go back to the main view (first start of the app).

Go back to _microG Settings_ and click __Google Device Registration__ and enable it.

The same applies to __Google Cloud Messaging__.

 

<center>

This tutorial is for Xiaomi Redmi Note 8 Pro - _Begonia &amp; Begoniain_.

Source: [XDA](https://forum.xda-developers.com/redmi-note-8-pro/how-to/guide-redmi-note-8-pro-megathread-t4056527)

Before you start, write down some information about your phone.

Write down:

- MIUI version = especially between ()

Or just take a picture ;-)

(Create a new account if necessary.)

 

## On computer

1. Go to [miui.com](https://en.miui.com/unlock/) and click on unlock. Change language to english (footer). After logging in, you must create a new user for the forum if you have just created an account.

2. Connect your phone and let Windows install all necessary drivers.

3. Now turn your phone off and start it again with `VOL DOWN + POWER BUTTON` and `hold` it until `FASTBOOT` is written. Connect your phone and let Windows install all the fastboot drivers for your phone (if not done in step 1).

4. [Download Mi Unlock](http://en.miui.com/unlock/download_en.html) and extract the files to `C:\unlock\` and start `miflash_unlock`. Sign in and connect your phone again if necessary. Now click unlock button.

 

 

# USB debugging

 

Before you go any further make sure you're running Android __9__!!! If you are on Android 10, you must first downgrade.

 

## fastboot

[Download full factory build](http://www.gsmservis.net/Redmi_Note8_Pro_www.gsmservis_net.rar) and extract the file.

 

For that, got to:

2. Connect your phone to your computer click on `File transfer` and go to the folder `downloaded_rom` and copy the file to your computer.

 

## Android Verified Boot (AVB)

 

fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

fastboot flash recovery twrp-3.3.1-0-begonia.img

```

Restart your phone with `fastboot reboot` and immediately press and hold `VOL UP` until you reach the recovery mode or until you need to select the recovery mode.

 

## For [Brick safe mode](#brick-safe-mode)

 

## For [TWRP](#twrp)

1. [Download firmware](##download-firmware)

4. Delete lines such as:

```

### Install on SD CARD

You might have to run it twice or more if you get an error.

```

pmbootstrap install --sdcard=/dev/mmcblk0

```

[08:40:06] *** (2/5) CREATE DEVICE ROOTFS ("pine64-pinephone") ***

[08:40:13] (rootfs_pine64-pinephone) install postmarketos-base device-pine64-pinephone device-pine64-pinephone-nonfree-firmware postmarketos-ui-phosh

[08:41:40] (rootfs_pine64-pinephone) write /etc/os-release

[08:55:42] * If the above steps do not work, you can also create symlinks to the generated files with 'pmbootstrap export' and flash outside of pmbootstrap.

[08:55:42] NOTE: chroot is still active (use 'pmbootstrap shutdown' as necessary)

[08:55:42] Done

#### pmbootstrap shutdown

```

pmbootstrap shutdown

```

That's it. Put the SD CARD in your phone.

 

 

 

2. Serial console:

The uart is 115200n8

 

##### Done

 

### Install on eMMC

You might have to run it twice or more if you get an error.

```

pmbootstrap install --sdcard=/dev/mmcblk2

```

[07:37:50] *** (2/5) CREATE DEVICE ROOTFS ("pine64-pinephone") ***

[07:40:46] WARNING: aarch64 package 'polkit' installed version 0.116-r1 is newer, than the version in the repositories: 0.116-r0 See also: <https:>

[07:40:57] (rootfs_pine64-pinephone) install

[14:46:16] * If the above steps do not work, you can also create symlinks to the generated files with 'pmbootstrap export' and flash outside of pmbootstrap.

[14:46:16] NOTE: chroot is still active (use 'pmbootstrap shutdown' as necessary)

[14:46:16] Done

If it does not work, just use `dd`:

```

sudo dd if=/dev/mmcblk0 of=/dev/mmcblk2 bs=4M

```

 

```

poweroff

```

That's it. Remove the SD CARD and start your phone.

 

 

### ADB drivers

 

__Arch Linux &amp; Manjaro Linux:__

```

```

 

### 1.1.4. Heimdall

__Arch Linux &amp; Manjaro Linux:__

```

sudo pacman -S heimdall

## Step 1 - Heimdall

### Reboot to bootloader

Reboot your phone and hold __VOL-DOWN__, __Power Button__ and the __Home Button__ until you see a warning message. Now __VOL-UP__ and you'll see an Android logo and "Downloading ..." etc..

Connect your phone via USB to your computer.

#### Create .pit file

Now you have to create a .pit (Partition Information Table) file.

Output:

#### Backup with TWRP

Before we flash Ubuntu Touch let's do a "quick" backup of your system.

 

### Ubuntu Touch

Click on __Install__ and __Select Storage__ and choose __Micro SD card__.

 

Seafile is much faster and more stable when we tested it (that was a long time ago), but also your Seafile data is not visible on the server in plain*. Keep us informed if you think Nextcloud has achieved a good data protection and performance solution.

 

Microsoft doesn't support any phones anymore and Apple is close source. But the same like desktop:

 

### Software suite

There is no really software suite available. We haven't created any PwOSS - ROMs, yet.

# Matrix

<center>

</center>

------

3. [Server](https://riot.pwoss.org/#/group/+server:pwoss.org)

4. [Mobile](https://riot.pwoss.org/#/group/+mobile:pwoss.org)

 

##### Mobile

Mobile is in general a tough fight. Not only the flashing process, also the how to.

##### Server

Contains every tutorial and the list of the `_Footer.md`, `arch-x86_64.md`, `arch-server-docu.md` and `server-software-suite.md`.

#### Public

Usually only the image folder is important. Why is described [below](/content/pwoss/wiki#images).

<center>

__Copy &amp; paste__ Arch Linux __x86_64__ solution

[[Software Suite|server-software-suite]]

</center>

### 1.0.1. Input required:

Setup the wireless interface, replace the keyword '*your-interface*' with the one that starts with "w" e.g. wlp2s1.

```

ip link set your-interface up

stop it with:

ctrl + c

 

If you have more than 1 HDD, you can use your first HDD (/dev/sda) for your /swap partition /root partition and /boot partition.

Your second HDD can be used as the /home partition.

```

parted -a optimal /dev/sda

# 6. Install the base packages

Check the processor type of your computer and use only one of the following command. _intel-ucode_ __OR__ _amd-ucode_?

 

 

```

UUID=your-number none swap defaults,pri=2 0 0

 

### 7.3.1. Input required:

```

ln -sf /usr/share/zoneinfo/your-region/your-city /etc/localtime

 

### 7.4.1. Input required:

```

/etc/vconsole.conf

cryptsetup luksAddKey /dev/sda2 /crypto_keyfile.bin

chmod 000 /crypto_keyfile.bin

```

 

ctrl + x

yes

```

systemctl enable sshd.service && systemctl start sshd.service

```

inet 192.168.1.76/24

```

 

umount -R /mnt

reboot now -h

```

## 7.12. SSH Server connection from another device

```

nano /etc/wpa_supplicant/wpa_supplicant-your-interface.conf

```

Add on top:

```

# Giving configuration update rights to wpa_cli

stop it with:

ctrl + c

 

ctrl + x

yes

```

systemctl restart sshd.service

```

 

sudo pacman -S packer git base-devel

```

```

cd && mkdir software && cd software && git clone https://github.com/actionless/pikaur.git && cd pikaur && makepkg -fsri --noconfirm

Hit enter for “8082”

Hit 1

Hit enter for “localhost” and “3306”

 

 

### 17.3.4. Input required:

```

your-@emailaddress.com

 

### 17.3.5. Input required:

```

your-password

sudo pacman -S radicale python-setuptools --noconfirm && su

```

```

mkdir -p /var/lib/radicale/collections && chown -R radicale:radicale /var/lib/radicale/collections && chmod -R o= /var/lib/radicale/collections && nano /etc/systemd/system/radicale.service

# htpasswd_filename = /etc/radicale/users

htpasswd_filename = /etc/radicale/users

# htpasswd_encryption = bcrypt

# delay = 1

delay = 1

# max_connections = 20

 

### 18.0.2. Input required:

```

...

```

 

### 19.2.1. Input required:

```

Common Name (eg: your user, host, or server name) [Easy-RSA CA]:your-dyndns_domain

openssl dhparam -out /etc/openvpn/server/dh.pem 2048

```

 

### 19.2.2. Input required:

```

openvpn --genkey --secret /etc/openvpn/server/ta.key

 

### 19.2.3. Input required:

```

easyrsa sign-req client your-device

```

 

### 19.3.1. Input required:

```

sudo ovpngen your-dyndns_domain /etc/openvpn/server/ca.crt /etc/easy-rsa/pki/signed/your-device.crt /etc/easy-rsa/pki/private/your-device.key /etc/openvpn/server/ta.key > your-device.ovpn

 

### 19.3.2. Input required:

```

remote your-dyndns_domain 1194 udp

sudo nano /etc/openvpn/server/server.conf

```

```

# your local subnet

 

### 19.5.1. Input required:

```

sudo su && cd /etc/easy-rsa

 

### 19.5.3. Input required:

```

mv /etc/easy-rsa/pki/issued/your-device.crt /etc/easy-rsa/pki/signed

 

### 19.5.4. Input required:

```

remote your-dyndns_domain 1194 udp

```

sudo ln -s /etc/nginx/sites-available/adminer /etc/nginx/sites-enabled/ && sudo ufw allow 22322/tcp && sudo systemctl restart nginx.service

```

 

### 25.0.9. Input required:

Test it:

```

echo "PwOSS - Server" | msmtp -a default your-@emailaddress.com

```

 

```

sudo systemctl stop systemd-resolved.service && sudo systemctl disable systemd-resolved.service && sudo systemctl restart pihole-FTL.service && sudo systemctl restart nginx.service && sudo systemctl restart php-fpm.service

```

 

```

sudo ufw allow 139/tcp && sudo ufw allow 445/tcp && sudo systemctl enable smb.service && sudo systemctl start smb.service

```

 

exit

```

Database = FreshRSS

Database USER = FreshRSS

crontab -e

```

Add:

```

#####################ffsync

cd && cd /home/pwoss/software/syncserver/ && make serve

```

ctrl + c

To cancel the action.

Since Firefox 33, Firefox for Android has supported custom sync servers. To configure Android Firefox 44 and later to talk to your new Sync server, just set the “identity.sync.tokenserver.uri” exactly as above before signing in to Firefox Accounts and Sync on your Android device.

Prior to Firefox 44, a custom add-on was needed to configure Firefox for Android. For Firefox 43 and earlier, see the blog post How to connect Firefox for Android to self-hosted Firefox Account and Firefox Sync servers.

 

 

# Arch Linux 64-bit

<center>

[Download ISO](https://repo.pwoss.org/server/x86_64/iso/)

[PwOSS - Gitea](https://git.pwoss.org/server/iso)

</center>

------

### 1.2.1. Arch ISO

Download the .iso file and the .iso.sig file from some of the listed provider from [archlinux.org](https://www.archlinux.org/download/) and open the md5.txt file.

 

- and check the md5sum with the following command

- ```md5sum archlinux-<version>-x86_64.iso```

 

You have to align the boot-start to your USB-Stick.

 

1. Boot

2. BOOT DEVICE PRIORITY (or similar)

Put the USB at the first place (with F5 and F6). Hit the button _esc_ until _save changes and reset_. Hit __enter__ and __yes__.

Reboot and choose Start: Boot Arch Linux (x86_64)

 

sudo dd bs=4M if=~/Downloads/archlinux-<version>-x86_64.iso of=/dev/sdd

```

 

#### 2.2.3.2. Port forwarding

You’ll need the port forwarded to your server - IP (192.168.1.76 [www.noip.com](https://www.noip.com/support/knowledgebase/general-port-forwarding-guide/) has a good list of some router brands.

 

#### 2.2.3.3. Primary DNS server

Last step will be to change the DNS server. This is necessary to get every device through Pi-Hole.

That's it.