⚡ linconf

📦 What's included

🧠 Kernel & Boot

⚡ CPU & Interrupts

🎮 GPU

🧠 Memory & Storage

🔊 Audio

🔋 Power Management

🛡️ Security

🌐 Network

🖥️ Desktop (GNOME/Wayland)

📦 Development & Gaming

📝 Logging & Monitoring

🖥️ Tested Hardware

⚠️ Disclaimer

Chromium Extensions

1. Tab Session Manager

2. Dark Reader

3. Unhook - Remove YouTube Recommended & Shorts

4. Tampermonkey

5. Malwarebytes Browser Guard

6. uBlock Origin Lite

Safe Eyes

# 1


sudo apt install safeeyes




# 2
# ~/.config/safeeyes/safeeyes.json


{
    "allow_postpone": false,
    "long_break_duration": 600,
    "long_break_interval": 90,
    "long_breaks": [
        {
            "name": "\u0421\u043b\u0430\u0431\u043e 10\u043c\u0438\u043d?\u0412\u041e\u041b\u042f\u2014\u041d\u041e\u041b\u042c.\u0412\u0421\u0422\u0410\u041d\u042c \u0418 \u0414\u0412\u0418\u0413\u0410\u0419\u0421\u042f!\u0422\u042b-\u0412\u041e\u0418\u041d,\u0430 \u043d\u0435 \u041e\u0412\u041e\u0429!"
        }
    ],
    "meta": {
        "config_version": "6.0.3"
    },
    "persist_state": false,
    "plugins": [
        {
            "enabled": false,
            "id": "donotdisturb",
            "settings": {
                "skip_break_windows": "",
                "take_break_windows": "",
                "unfullscreen": true,
                "while_on_battery": false
            },
            "version": "0.0.2"
        },
        {
            "enabled": false,
            "id": "notification",
            "version": "0.0.1"
        },
        {
            "enabled": false,
            "id": "audiblealert",
            "settings": {
                "post_break_alert": true,
                "pre_break_alert": true
            },
            "version": "0.0.3"
        },
        {
            "enabled": true,
            "id": "trayicon",
            "settings": {
                "allow_disabling": false,
                "disable_options": [
                    {
                        "time": 30,
                        "unit": "minute"
                    },
                    {
                        "time": 1,
                        "unit": "hour"
                    },
                    {
                        "time": 2,
                        "unit": "hour"
                    },
                    {
                        "time": 3,
                        "unit": "hour"
                    }
                ],
                "show_time_in_tray": false
            },
            "version": "0.0.3"
        },
        {
            "enabled": false,
            "id": "smartpause",
            "settings": {
                "idle_time": 5,
                "interpret_idle_as_break": false,
                "postpone_if_active": false
            },
            "version": "0.0.3"
        },
        {
            "enabled": true,
            "id": "screensaver",
            "settings": {
                "command": "",
                "min_seconds": 0.0
            },
            "version": "0.0.2"
        },
        {
            "enabled": false,
            "id": "healthstats",
            "settings": {
                "statistics_reset_cron": "0 0 * * *"
            },
            "version": "0.0.3"
        },
        {
            "enabled": true,
            "id": "mediacontrol",
            "version": "0.0.1"
        }
    ],
    "postpone_duration": 5,
    "pre_break_warning_time": 1,
    "random_order": false,
    "rpc_port": 7200,
    "short_break_duration": 180,
    "short_break_interval": 30,
    "short_breaks": [
        {
            "name": "\u0421\u043b\u0430\u0431\u043e \u043d\u0430 180\u0441\u0435\u043a?\u0422\u042b\u2014\u0420\u0410\u0411 \u043f\u0438\u043a\u0441\u0435\u043b\u0435\u0439.\u0421\u041c\u041e\u0422\u0420\u0418 \u0412\u0414\u0410\u041b\u042c \u0438\u043b\u0438 \u041e\u0421\u041b\u0415\u041f\u041d\u0415\u0428\u042c!"
        }
    ],
    "shortcut_disable_time": 0,
    "shortcut_postpone": 0,
    "shortcut_skip": 0,
    "strict_break": true,
    "use_rpc_server": false
}

VS CODE

# VS Code Extensions

1. @id:qufiwefefwoyn.kanagawa

2. @id:pkief.material-icon-theme

3. @id:ms-vscode.cpptools

4. @id:ms-python.python

5. @id:ms-python.vscode-pylance


# VS Code Settings

{
    // === WORKBENCH & UI (Интерфейс) ===
    "workbench.colorTheme"                         : "Kanagawa",
    "workbench.preferredDarkColorTheme"            : "Kanagawa",
    "workbench.preferredHighContrastColorTheme"    : "Kanagawa",
    "workbench.iconTheme"                          : "material-icon-theme",
    "workbench.startupEditor"                      : "none",
    "workbench.editor.empty.hint"                  : "hidden",
    "workbench.editor.enablePreview"               : false,
    "workbench.layoutControl.enabled"              : false,
    "workbench.browser.showInTitleBar"             : false,
    "workbench.secondarySideBar.defaultVisibility" : "hidden",
    "workbench.list.smoothScrolling"               : true,
    "window.commandCenter"                         : false,
    "window.menuBarVisibility"                     : "compact",
    "workbench.activityBar.compact"                : true,
    "window.customTitleBarVisibility"              : "windowed",
    "window.title"                                 : "${folderName} / ${dirty}${activeEditorShort}",
    "chat.commandCenter.enabled"                   : false,
    "chat.titleBar.signIn.enabled"                 : false,
    "chat.titleBar.openInAgentsWindow.enabled"     : false,
    "breadcrumbs.enabled"                          : false,

    // === EDITOR: TYPOGRAPHY (Шрифты и текст) ===
    "editor.fontFamily"                            : "Fira Code SemiBold, monospace",
    "editor.fontWeight"                            : "bold",
    "editor.fontSize"                              : 15,
    "editor.lineHeight"                            : 2,
    "editor.letterSpacing"                         : 1,
    "editor.fontLigatures"                         : false,

    // === EDITOR: VISUALS & UX (Отображение и скролл) ===
    "editor.lineNumbers"                           : "on",
    "editor.cursorStyle"                           : "line-thin",
    "editor.cursorBlinking"                        : "smooth",
    "editor.cursorSmoothCaretAnimation"            : "on",
    "editor.smoothScrolling"                       : true,
    "editor.minimap.enabled"                       : false,
    "editor.glyphMargin"                           : false,
    "editor.folding"                               : false,
    "editor.stickyScroll.enabled"                  : false,
    "editor.renderLineHighlight"                   : "all",
    "editor.renderWhitespace"                      : "selection",
    "editor.bracketPairColorization.enabled"       : true,
    "editor.guides.bracketPairs"                   : "active",
    "editor.guides.indentation"                    : false,
    "editor.unicodeHighlight.invisibleCharacters"  : true,
    "editor.unicodeHighlight.ambiguousCharacters"  : true,
    "editor.stablePeek"                            : true,

    // === EDITOR: INTELLISENSE (Подсказки) ===
    "editor.hover.delay"                           : 1000,
    "editor.hover.sticky"                          : false,
    "editor.acceptSuggestionOnEnter"               : "smart",
    "editor.parameterHints.enabled"                : false,
    "editor.parameterHints.cycle"                  : false,

    // === TERMINAL (Терминал) ===
    "terminal.integrated.fontFamily"               : "Fira Code SemiBold, monospace",
    "terminal.integrated.fontSize"                 : 12,
    "terminal.integrated.cursorStyle"              : "line",
    "terminal.integrated.smoothScrolling"          : true,
    "terminal.integrated.stickyScroll.enabled"     : false,
    "terminal.integrated.defaultProfile.linux"     : "bash",

    // === FILES & EXPLORER (Файлы и дерево) ===
    "files.autoSave"                               : "afterDelay",
    "files.trimTrailingWhitespace"                 : true,
    "explorer.confirmDelete"                       : true,
    "explorer.confirmDragAndDrop"                  : true,

    // === SYSTEM & SECURITY (Система) ===
    "security.workspace.trust.untrustedFiles"      : "open",
    "update.showReleaseNotes"                      : false,

    // === LANGUAGE: C++ ===
    "[cpp]": {
        "editor.wordBasedSuggestions"              : "off",
        "editor.semanticHighlighting.enabled"      : true,
        "editor.stickyScroll.defaultModel"         : "foldingProviderModel",
        "editor.suggest.insertMode"                : "replace"
    },
}

BAT

# 1
# Change battery mode


Fn + Q




# 2
# CONSERVATION MODE


sudo sh -c 'echo 1 > /sys/bus/platform/drivers/ideapad_acpi/VPC2004:00/conservation_mode'

LINUX KERNEL

# 1


sudo mkdir -p /etc/apt/keyrings
wget -qO - https://dl.xanmod.org/archive.key | sudo gpg --dearmor -vo /etc/apt/keyrings/xanmod-archive-keyring.gpg




# 2


echo "deb [signed-by=/etc/apt/keyrings/xanmod-archive-keyring.gpg] http://deb.xanmod.org $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/xanmod-release.list




# 3


sudo apt update && sudo apt install linux-xanmod-lts-x64v3

CPU

# 1


sudo sh -c 'echo performance > /sys/devices/system/cpu/cpu*/cpufreq/scaling_governor'




# 2


sudo sh -c 'echo performance > /sys/devices/system/cpu/cpu*/cpufreq/energy_performance_preference'

SYSCTL

# 1
# /etc/sysctl.d/realtime-lowlatency.conf


# --- CPU & Scheduler ---
# Use schedutil for adaptive frequency scaling with low latency
kernel.sched_latency_ns            = 8000000
kernel.sched_min_granularity_ns    = 2000000
kernel.sched_wakeup_granularity_ns = 6000000
kernel.sched_migration_cost_ns     = 5000000
kernel.sched_child_runs_first      = 0
kernel.sched_autogroup_enabled     = 0
kernel.sched_rt_runtime_us         = 900000
kernel.sched_pelt_multiplier       = 2
kernel.sched_rt_period_us          = 1000000
kernel.sched_cfs_bandwidth_slice_us= 3000
kernel.sched_util_clamp_min        = 100
kernel.core_pattern                = /dev/null
kernel.printk                      = 3 3 3 3


# --- Security & Stealth ---
# Hardening the kernel against exploits and forensics
kernel.kexec_load_disabled         = 1
kernel.pid_max                     = 4194304
kernel.kptr_restrict               = 2
kernel.yama.ptrace_scope           = 1
kernel.dmesg_restrict              = 1
kernel.unprivileged_bpf_disabled   = 1
kernel.unprivileged_userns_clone   = 1
kernel.randomize_va_space          = 2
kernel.perf_event_paranoid         = 2
fs.suid_dumpable                   = 0
net.core.bpf_jit_harden            = 2


# --- Memory & Virtualization ---
vm.mmap_min_addr                   = 65536
vm.swappiness                      = 10
vm.max_map_count                   = 2097152
vm.vfs_cache_pressure              = 30


# --- Laptop & SSD Optimization ---
# Optimizing disk I/O for SSD life and battery power
vm.laptop_mode                     = 5
vm.dirty_ratio                     = 10
vm.dirty_background_ratio          = 5
vm.watermark_boost_factor          = 0
vm.dirty_expire_centisecs          = 1000
vm.dirty_writeback_centisecs       = 1000


# --- Filesystem Protection ---
fs.protected_fifos                 = 1
fs.protected_hardlinks             = 1
fs.protected_regular               = 2
fs.protected_symlinks              = 1
fs.inotify.max_user_watches        = 1048576


# --- Networking (BBR + Low Latency) ---
# High-speed networking with minimum bufferbloat
net.core.default_qdisc             = fq
net.ipv4.tcp_congestion_control    = bbr
net.core.netdev_max_backlog        = 10000
net.core.rmem_max                  = 16777216
net.core.wmem_max                  = 16777216
net.ipv4.tcp_fastopen              = 3
net.ipv4.tcp_fin_timeout           = 15
net.ipv4.tcp_tw_reuse              = 1
net.ipv4.tcp_keepalive_time        = 600
net.ipv4.conf.all.rp_filter        = 2
net.ipv4.conf.default.rp_filter    = 2
net.ipv6.conf.all.use_tempaddr     = 2
net.ipv6.conf.default.use_tempaddr = 2




# 2


sudo sysctl --system

FSTAB

# 1
# /etc/fstab


# <file system>                            <mount point>    <type>  <options>                                                   <dump>  <pass>


# EFI System Partition
/dev/disk/by-uuid/{YOUR UUID}              /boot/efi        vfat    defaults,umask=0077                                           0       1


# Root Partition (SSD Optimized)
UUID={YOUR UUID}                           /                ext4    defaults,noatime,journal_ioprio=0,commit=60,errors=remount-ro 0       1


# Swap File (Low priority to keep it as a last resort)
/swapfile                                  none             swap    sw,pri=1                                                      0       0


# Memory Resident File Systems (Fast & Stealthy)
tmpfs                                      /tmp             tmpfs   defaults,noatime,mode=1777,size=4G,nosuid,nodev               0       0
tmpfs                                      /var/log         tmpfs   defaults,noatime,mode=0755,size=256M,nosuid,nodev             0       0
tmpfs                                      /var/tmp         tmpfs   defaults,noatime,mode=1777,size=2G,nosuid,nodev               0       0

FSTRIM

# 1
# /etc/systemd/system/fstrim.service.d/override.conf


[Service]
ExecStart=
ExecStart=/sbin/fstrim --all


# --- Stealth Mode (No Logs) ---
StandardOutput=null
StandardError=null


# --- Latency Optimization ---
Nice=19
IOSchedulingClass=3
CPUSchedulingPolicy=idle




# 2
# /etc/systemd/system/fstrim.timer.d/override.conf


[Timer]
OnCalendar=
OnCalendar=daily
AccuracySec=1h
Persistent=true
WakeSystem=false




# 3


sudo systemctl enable --now fstrim

sudo systemctl enable --now fstrim.timer

GRUB

# 1
# /etc/default/grub


GRUB_DEFAULT=0
GRUB_TIMEOUT=3
GRUB_DISTRIBUTOR="Ubuntu realtime-lowlatency"
GRUB_TERMINAL=console 
GRUB_CMDLINE_LINUX=""
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash reboot=efi fbcon=nodefer vsyscall=none pti=on slab_nomerge page_alloc.shuffle=1 mitigations=on threadirqs rcutree.use_softirq=0 rcutree.kthread_prio=1 skew_tick=1 tsx=off preempt=full intel_pstate=active nouveau.modeset=0 nvidia-drm.modeset=1 i915.fastboot=1 transparent_hugepage=madvise mem_sleep_default=deep zswap.enabled=1 zswap.compressor=zstd zswap.zpool=zsmalloc nvme_core.default_ps_max_latency_us=10000 nvme_core.io_timeout=255 nvme_core.admin_timeout=60 nosoftlockup nowatchdog nmi_watchdog=0 audit=0 printk.time=0 loglevel=0 systemd.show_status=0"




# 2
sudo update-grub

MODPROBE

# 1
# /etc/modprobe.d/blacklist-optimized.conf


# --- Graphics & Framebuffers ---
# Disable open-source Nouveau to prevent conflicts with proprietary NVIDIA driver
blacklist nouveau
options nouveau modeset=0
# Disable legacy framebuffer drivers for old/non-existent GPUs
blacklist nvidiafb
blacklist rivafb
blacklist radeonfb
blacklist aty128fb
blacklist atyfb
blacklist cirrusfb
blacklist cyber2000fb
blacklist cyblafb
blacklist gx1fb
blacklist hgafb
blacklist i810fb
blacklist intelfb
blacklist kyrofb
blacklist lxfb
blacklist matroxfb_base
blacklist neofb
blacklist pm2fb
blacklist s1d13xxxfb
blacklist savagefb
blacklist sisfb
blacklist sstfb
blacklist tdfxfb
blacklist tridentfb
blacklist vesafb
blacklist vfb
blacklist viafb
blacklist vt8623fb
blacklist udlfb


# --- Multimedia & Privacy (Camera/Audio) ---
# Disable webcam (uvcvideo) - Remove this line if you need your camera
blacklist uvcvideo
# Disable legacy PC speaker (beep)
blacklist snd_pcsp
options pcspkr off
# Disable ancient/obsolete sound architectures and cards
blacklist snd_intel8x0m
blacklist ac97
blacklist ac97_codec
blacklist snd_aw2
blacklist emu10k1
blacklist maestro3
blacklist mpu401
blacklist opl3
blacklist sb
blacklist sb_lib
blacklist ymfpci


# --- Input Devices ---
# Disable generic USB mouse/kb drivers to force specialized HID drivers (reduces overhead)
blacklist usbmouse
blacklist usbkbd
# Disable legacy joystick support (Remove joydev if you plan to use a controller)
blacklist joydev
# Disable MIDI support for legacy hardware
blacklist usb-midi
blacklist v_midi
# Prevent logging of all input events (Security/Performance)
blacklist evbug


# --- Legacy Hardware & Ports ---
# Disable Floppy disk controller
options floppy index=0
blacklist floppy
# Disable Parallel/Printer ports
blacklist parport
blacklist parport_pc
blacklist ppdev
blacklist lp
# Disable FireWire (IEEE 1394)
blacklist firewire_ohci
blacklist firewire_core
blacklist firewire_sbp2
blacklist ohci1394
blacklist ieee1394


# --- Obsolete Network & Storage Drivers ---
# Disable 10/100 Ethernet and ancient wireless cards
blacklist e100
blacklist 8139cp
blacklist 8139too
blacklist b43
blacklist b43legacy
blacklist ssb
# Disable legacy PATA/IDE and SCSI RAID controllers
blacklist pata_acpi
blacklist pata_amd
blacklist ide_pci_generic
blacklist megaraid_sas
blacklist qla2xxx
blacklist mptsas


# --- Miscellaneous ---
# Disable specific hardware debugging/crypto not needed for standard boot
blacklist hfi1
blacklist blowfish
blacklist amd76x_edac




# 2
# /etc/modprobe.d/nvidia.conf 


# ======================================================================
# Custom NVIDIA Kernel Module Configuration
# Optimized for Linux Laptops, Low Latency, and Suspend/Resume Stability
# ======================================================================


# --- Видеопамять и управление питанием (Suspend/Resume Fixes) ---
# Сохранять аллокации видеопамяти при переходе в сон (убирает артефакты и падения приложений)
options nvidia NVreg_PreserveVideoMemoryAllocations=1


# --- Оптимизация шины и производительности CPU-GPU ---
# Использовать таблицу атрибутов страниц (PAT) — повышает эффективность передачи текстур
options nvidia NVreg_UsePageAttributeTable=1

# Message Signaled Interrupts (MSI) — критически снижает инпут-лаг и задержки вывода (в т.ч. по HDMI)
options nvidia NVreg_EnableMSI=1

# Асинхронные потоковые операции с памятью для параллельной обработки кадров
options nvidia NVreg_EnableStreamMemOPs=1

# Отключить шину NvLink (для ноутбуков физически избыточна, высвобождает ресурсы CPU)
options nvidia NVreg_NvLinkDisable=1

# Отключить динамический расчёт пропускной способности NvLink
options nvidia NVreg_RmNvlinkBandwidth=0

# Включить сопроцессор GSP (GPU System Processor) — переносит задачи управления с CPU на GPU, улучшает работу в Wayland
options nvidia NVreg_EnableGpuFirmware=1

# Принудительная инициализация графического конвейера ядра (минимизирует фризы интерфейса в Wayland/X11)
options nvidia NVreg_EnableGFXPipeline=1


# --- Тюнинг реестра драйвера (HDMI, дисплей и PowerMizer) ---
# PowerMizerEnable=0x1       - контроль частот активен
# GpuPowerMizerMode=0x3      - адаптивный режим (холодный в простое, максимальная мощность в задачах)
# EnableBrightnessControl=1  - аппаратный контроль яркости встроенного экрана ноутбука
# RMEdgeIntrCheck=0          - отключить периодическую проверку прерываний панели (убирает микрофризы на внешнем мониторе)
# TempThreshold=80000        - максимальный температурный лимит GPU (80°C)
options nvidia NVreg_RegistryDwords="PowerMizerEnable=0x1;GpuPowerMizerMode=0x3;EnableBrightnessControl=1;RMEdgeIntrCheck=0;TempThreshold=80000"


# --- Управление файлами устройств в /dev (Стандарт для Arch/Ubuntu/Debian) ---
# Разрешить ядру создавать ноды устройств при загрузке для корректного применения прав доступа
options nvidia NVreg_ModifyDeviceFiles=1
options nvidia NVreg_DeviceFileUID=0
options nvidia NVreg_DeviceFileGID=44
options nvidia NVreg_DeviceFileMode=0660




# 3
# /etc/modprobe.d/usbhid.conf


# --- USB HID Latency Optimizations ---

# Set mouse polling rate to 1000Hz (1ms interval) for lower input lag
options usbhid mousepoll=1

# Set joystick/gamepad polling rate to 1000Hz
options usbhid jspoll=1

# Set keyboard polling rate to 1000Hz
options usbhid kbpoll=1

# Increase timeout to 200ms to prevent lag when waking up wireless devices
options usbhid timeout=200




# 4
sudo update-initramfs -u -k all

X11

# 1
# /etc/X11/xorg.conf.d/10-nvidia.conf


Section "Device"
    Identifier "Nvidia Card"
    VendorName "NVIDIA Corporation"
    Option "NoLogo" "1"
    Option "Coolbits" "31"
    Option "TripleBuffer" "true"
    Option "AllowEmptyInitialConfiguration" "true"
    Option "HWCursor" "true"
EndSection


Section "Screen"
    Identifier "Screen0"
    Device "Nvidia Card"
    Option "metamodes" "nvidia-auto-select +0+0 {ForceCompositionPipeline=Off, ForceFullCompositionPipeline=Off}"
    Option "AllowIndirectGLXProtocol" "off"
EndSection


Section "Extensions"
    Option "Composite" "Enable"
EndSection

ENVIRONMENT

# 1
# /etc/environment


# --- System Paths ---
PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin"

# --- OpenMP ---
OMP_STACKSIZE=8M
OMP_DYNAMIC=true
OMP_WAIT_POLICY=passive
OMP_NESTED=false

# --- glibc / Resolver ---
GLIBC_TUNABLES="glibc.malloc.trim_threshold=262144:glibc.malloc.mmap_threshold=262144:glibc.malloc.mmap_max=32768:glibc.malloc.arena_max=4"
RES_OPTIONS="timeout:1 attempts:3 rotate ndots:1"
PYTHONOPTIMIZE=1

# --- Java ---
_JAVA_OPTIONS="-XX:+UseG1GC -XX:MaxGCPauseMillis=100"
JAVA_TOOL_OPTIONS="-Xms512m -Xmx2g"

# --- NVIDIA ---
__GLX_VENDOR_LIBRARY_NAME=nvidia
__GL_SHADER_DISK_CACHE=1
__GL_SHADER_DISK_CACHE_PATH="/home/vladislav_khudash/.nvidia-shader-cache"
__GL_SHADER_DISK_CACHE_COMPRESS=1
__GL_SHADER_DISK_CACHE_SKIP_CLEANUP=1
__GL_YIELD=USLEEP

# --- Mesa / Vulkan ---
MESA_DEBUG=0
MESA_NO_ERROR=1
MESA_GLSL_CACHE_DISABLE=0
MESA_SHADER_CACHE_DIR="/home/vladislav_khudash/.mesa_shader_cache"
MESA_VK_WSI_PRESENT_MODE=mailbox
VK_LOADER_LAYERS_DISABLE=~implicit~,~explicit~

# --- Wayland ---
GBM_BACKEND=nvidia-drm
EGL_PLATFORM=wayland

# --- DXVK / Video / CUDA ---
DXVK_LOG_LEVEL=none
DXVK_STATE_CACHE=1
DXVK_SHADER_DISK_CACHE_PATH="/home/vladislav_khudash/.dxvk-cache"
VDPAU_TRACE=0
LIBVA_MESSAGING_LEVEL=0
CUDA_CACHE_PATH="/home/vladislav_khudash/.cuda-cache"
CUDA_LAUNCH_BLOCKING=0

# --- Intel ---
INTEL_DEBUG=null
INTEL_LOW_POWER_ENCODE=1

# --- GTK / Qt / SDL ---
GDK_BACKEND=wayland
NO_AT_BRIDGE=1
SDL_VIDEODRIVER=wayland,x11
QT_QPA_PLATFORM=wayland
QT_LOGGING_RULES="*.debug=false;*.info=false;*.warning=false"

# --- Wine / Proton ---
WINEDEBUG=-all
PROTON_LOG=0

I USE: GNOME ON WAYLAND AND GDM3

# GNOME Extensions

1. just-perfection-desktop@just-perfection

2. [email protected]

3. [email protected]

4. [email protected]


# GNOME Settings


# --- 1. Power Management (Battery Life Optimization) ---
# Automatically trigger power-saver profile when battery is low
gsettings set org.gnome.settings-daemon.plugins.power power-saver-profile-on-low-battery true

# On Battery: Set screen dimming/blanking and suspend after 15 minutes (900 seconds)
gsettings set org.gnome.settings-daemon.plugins.power sleep-inactive-battery-timeout 900
gsettings set org.gnome.settings-daemon.plugins.power sleep-inactive-battery-type 'suspend'

# On AC Power: Never automatically suspend
gsettings set org.gnome.settings-daemon.plugins.power sleep-inactive-ac-type 'nothing'


# --- 2. Interface & UI (Reducing Resource Usage) ---
# Enable animations for smoother UX; GPU-accelerated, minimal battery impact on Wayland
gsettings set org.gnome.desktop.interface enable-animations true

# Disable window snapping, dynamic workspaces, and hot corners to keep the environment lean
gsettings set org.gnome.mutter edge-tiling false
gsettings set org.gnome.mutter dynamic-workspaces false
gsettings set org.gnome.desktop.interface enable-hot-corners false


# --- 3. Background Processes (Reducing CPU Wakeups) ---
# Disable external search providers and indexing (major battery drainers)
gsettings set org.gnome.desktop.search-providers disable-external true
gsettings set org.gnome.desktop.search-providers disabled "['org.gnome.Contacts.desktop', 'org.gnome.Documents.desktop', 'org.gnome.Nautilus.desktop']"

# Stop automatic update downloads to save Wi-Fi power and background CPU usage
gsettings set org.gnome.software download-updates false

# Disable technical problem reporting (whoopsie/telemetry) to minimize background noise
gsettings set org.gnome.desktop.privacy report-technical-problems false


# --- 4. Peripherals & Accessibility ---
# Night Light: Set always on
gsettings set org.gnome.settings-daemon.plugins.color night-light-enabled true
gsettings set org.gnome.settings-daemon.plugins.color night-light-schedule-automatic false
gsettings set org.gnome.settings-daemon.plugins.color night-light-schedule-from 00.00
gsettings set org.gnome.settings-daemon.plugins.color night-light-schedule-to 00.00

# Mouse: Flat acceleration profile for raw, predictable input
gsettings set org.gnome.desktop.peripherals.mouse accel-profile 'flat'
gsettings set org.gnome.desktop.peripherals.mouse speed 0

# Keyboard: Faster typing response with reduced delay and high repeat rate
gsettings set org.gnome.desktop.peripherals.keyboard delay 300
gsettings set org.gnome.desktop.peripherals.keyboard repeat-interval 30

# Visuals: Scaling and cursor size for better visibility on high-res displays
gsettings set org.gnome.desktop.interface text-scaling-factor 1.50
gsettings set org.gnome.desktop.interface cursor-size 50

# Visuals: Night Light temperature (K)
gsettings set org.gnome.settings-daemon.plugins.color night-light-temperature 2000

APT

# 1
# /etc/apt/apt.conf.d/99-optimized


APT::Get::Assume-Yes "false";
APT::Get::Quiet      "true";


APT::Acquire::Retries      "3";
Acquire::By-Hash 		   "yes";
Acquire::Check-Valid-Until "true";


Dir::Cache::archives    "/var/cache/apt/archives";
Dir::Cache::pkgcache    "/var/cache/apt/pkgcache.bin";
Dir::Cache::srcpkgcache "/var/cache/apt/srcpkgcache.bin";


APT::Install-Recommends "false";
APT::Install-Suggests   "false";


DPKg::Options {
    "--force-confdef";
    "--force-confold"; 
}


APT::Periodic::Update-Package-Lists          "0";
APT::Periodic::Download-Upgradeable-Packages "0";
APT::Periodic::AutocleanInterval             "0";  
APT::Periodic::Unattended-Upgrade            "0";
APT::Periodic::Verbose                       "0";


Dir::Log           "/dev/null";
Dir::Log::Terminal "/dev/null";

RTIRQ

# 1


sudo apt update && sudo apt install rtirq-init

sudo systemctl enable --now rtirq




# 2
# /etc/default/rtirq


# --- Priority List ---
RTIRQ_NAME_LIST="xhci nvme snd"
RTIRQ_HIGH_LIST="xhci nvme"


# --- Priority Settings ---
RTIRQ_PRIO_HIGH=85
RTIRQ_PRIO_DECR=5
RTIRQ_PRIO_LOW=60
RTIRQ_RESET_ALL=0
RTIRQ_SCHED="fifo"

RTIRQ_SPREAD=1

# --- CPU Affinity ---
RTIRQ_CPUS=""
IRQBALANCE_BANNED_CPUS=""


# --- Real-Time Clocks ---
RTIRQ_NON_THREADED="rtc0"


# --- Stealth & Performance ---
RTIRQ_DELAY=5
RTIRQ_CHECK_INTERVAL=3
RTIRQ_DEBUG=0
RTIRQ_VERBOSE=0

THERMAL

# 1


sudo apt update && sudo apt install thermald

sudo systemctl enable --now thermald




# 2
# /etc/thermald/thermal-conf.xml


<?xml version="1.0"?>
<ThermalConfiguration>
    <Platform>
        <Name>Lenovo LOQ Custom Performance</Name>
        <ThermalZones>
            <ThermalZone>
                <Type>cpu</Type>
                <TripPoints>
                    <TripPoint>
                        <Type>passive</Type>
                        <Temperature>85000</Temperature>
                        <ControlType>PARALLEL</ControlType>
                        <CoolingDeviceBind>
                            <Type>intel_pstate</Type>
                        </CoolingDeviceBind>
                    </TripPoint>

                    <TripPoint>
                        <Type>passive</Type>
                        <Temperature>95000</Temperature>
                        <ControlType>PARALLEL</ControlType>
                        <CoolingDeviceBind>
                            <Type>rapl_controller</Type>
                        </CoolingDeviceBind>
                    </TripPoint>

                    <TripPoint>
                        <Type>critical</Type>
                        <Temperature>105000</Temperature>
                        <Control>shutdown</Control>
                    </TripPoint>
                </TripPoints>
            </ThermalZone>
        </ThermalZones>
    </Platform>
</ThermalConfiguration>

TLP

# 1


sudo apt update && sudo apt install tlp tlp-rdw

sudo systemctl enable --now tlp




# 2
# /etc/tlp.conf


# ------------------------------------------------------------------------------
# TLP Configuration - Optimized for LOQ Low-Latency & Battery Life
# ------------------------------------------------------------------------------


TLP_ENABLE                          = 1
TLP_DEFAULT_MODE                    = AC
TLP_PERSISTENT_DEFAULT              = 0


# --- CPU Management ---
CPU_SCALING_GOVERNOR_ON_AC          = performance
CPU_SCALING_GOVERNOR_ON_BAT         = powersave

CPU_SCALING_MIN_FREQ_ON_AC          = 0
CPU_SCALING_MAX_FREQ_ON_AC          = 0
CPU_SCALING_MIN_FREQ_ON_BAT         = 800000
CPU_SCALING_MAX_FREQ_ON_BAT         = 0

CPU_BOOST_ON_AC                     = 1
CPU_BOOST_ON_BAT                    = 0

CPU_ENERGY_PERF_POLICY_ON_AC        = performance
CPU_ENERGY_PERF_POLICY_ON_BAT       = balance_power

CPU_MAX_PERF_ON_BAT                 = 30


# --- GPU Management (NVIDIA/Radeon) ---
NVIDIA_DYNAMIC_POWERMGMT_ON_AC      = 0
NVIDIA_DYNAMIC_POWERMGMT_ON_BAT     = 1


# --- Storage & PCIe ---
PCIE_ASPM_ON_AC                     = performance
PCIE_ASPM_ON_BAT                    = powersave


# --- Connectivity ---
DEVICES_TO_DISABLE_ON_STARTUP       = "bluetooth"
DEVICES_TO_DISABLE_ON_BAT           = "bluetooth"


# --- Battery Care ---
BATT_CONSERVATION_MODE              = 1
RESTORE_THRESHOLDS_ON_AC            = 1


# --- Platform & Sound ---
SOUND_POWER_SAVE_ON_AC              = 0
SOUND_POWER_SAVE_ON_BAT             = 0
SOUND_POWER_SAVE_TIMEOUT            = 0

PLATFORM_PROFILE_ON_AC              = performance
PLATFORM_PROFILE_ON_BAT             = balanced

ZRAMSWAP

# 1

sudo apt update && sudo apt install zram-tools

sudo systemctl enable --now zramswap




# 2
# /etc/default/zramswap


ENABLED=true
PERCENTAGE=50
ALGO=zstd
BLOCKSIZE=512K
AUTOSTART=true
LOGGING=false
PRIORITY=100
MAX_DEVICES=1
COMP_STREAMS=6
MEM_LIMIT=0
WRITEBACK_THRESHOLD=0

PRELOAD

# 1


sudo apt update && sudo apt install preload 

sudo systemctl enable --now preload




# 2
# /etc/preload.conf


[model]
cycle          = 30
usecorrelation = true

minsize   = 50000
memtotal  = 80
memfree   = 20
memcached = 30


[system]
doscan    = true
dopredict = true
autosave  = 3600
mapprefix = /usr/;/lib/;/var/cache/;!/dev
exeprefix = !/usr/sbin/;!/usr/local/sbin/;/usr/bin/;/usr/local/bin/

processes    = 50
sortstrategy = 0
debug        = false

NETWORKMANAGER

# 1
# /etc/NetworkManager/NetworkManager.conf


[main]
plugins=ifupdown,keyfile
connectivity-check=no


[ifupdown]
managed=false


[device]
wifi.scan-rand-mac-address=yes
wifi.powersave=1


[connection]
wifi.cloned-mac-address=random
ethernet.cloned-mac-address=random
ipv4.dhcp-timeout=10




# 2


sudo systemctl restart NetworkManager

PIPEWIRE

# 1


sudo update && sudo apt install pipewire pipewire-pulse pipewire-audio-client-libraries wireplumber libspa-0.2-bluetooth




# 2
# /home/{YOUR USER}/.config/pipewire/pipewire.conf


context.properties = {
    log.level                   = 0
    core.daemon                 = true
    core.name                   = pipewire-0
    default.clock.rate          = 48000
    default.clock.allowed-rates = [ 44100 48000 88200 96000 192000 ]
    default.clock.quantum       = 1024
    default.clock.min-quantum   = 512
    default.clock.max-quantum   = 4096
    default.clock.quantum-limit = 8192
    clock.power-of-two-quantum  = false
    link.max-buffers            = 64
    mem.allow-mlock             = true
    module.x11.bell             = false
    module.access               = true
    module.jackdbus-detect      = true
}

context.spa-libs = {
    audio.convert.* = audioconvert/libspa-audioconvert
    avb.*           = avb/libspa-avb
    api.alsa.*      = alsa/libspa-alsa
    api.vulkan.*    = vulkan/libspa-vulkan
    api.jack.*      = jack/libspa-jack
    support.*       = support/libspa-support
}

context.modules = [
    { name  = libpipewire-module-rt
      args  = { nice.level = -10 rt.prio = 80 }
      flags = [ ifexists nofail ]
    }
    { name  = libpipewire-module-protocol-native }
    { name  = libpipewire-module-profiler }
    { name  = libpipewire-module-metadata }
    { name  = libpipewire-module-spa-device-factory }
    { name  = libpipewire-module-spa-node-factory }
    { name  = libpipewire-module-client-node }
    { name  = libpipewire-module-client-device }
    { name  = libpipewire-module-portal flags = [ ifexists nofail ] }
    { name  = libpipewire-module-access condition = [ { module.access = true } ] }
    { name  = libpipewire-module-adapter }
    { name  = libpipewire-module-link-factory }
    { name  = libpipewire-module-session-manager }
    { name  = libpipewire-module-x11-bell flags = [ ifexists nofail ] condition = [ { module.x11.bell = true } ] }
    { name  = libpipewire-module-jackdbus-detect flags = [ ifexists nofail ] condition = [ { module.jackdbus-detect = true } ] }
]

context.objects = [ ]

alsa.properties = {
    alsa.access        = [ MMAP_INTERLEAVED MMAP_NONINTERLEAVED ]
    alsa.format        = [ "S32LE" "F32LE" ]
    alsa.rate          = { min=48000 max=192000 }
    alsa.channels      = { min=2 max=2 }
    alsa.period-bytes  = { min=4096 max=262144 }
    alsa.buffer-bytes  = { min=16384 max=1048576 }
    alsa.volume-method = "physical"
}

stream.properties = {
    node.latency     = 1024/48000
    resample.quality = 15
    dither.method    = "shibata"
}

pulse.properties = {
    server.address = ["unix:native"]
    vm.overrides   = { pulse.min.quantum = 512/48000 }
}

pulse.cmd = [
    { cmd = "load-module" args = "module-always-sink" flags = [] }
]




# 3
# /home/{YOUR USER}/.config/pipewire/pipewire-pulse.conf


context.properties = {
    log.level                   = 0
    default.clock.rate          = 48000
    default.clock.quantum       = 1024
    default.clock.min-quantum   = 512
    default.clock.max-quantum   = 4096
    default.clock.quantum-limit = 8192
    clock.power-of-two-quantum  = false
    link.max-buffers            = 64
    mem.allow-mlock             = true
}

context.spa-libs = {
    audio.convert.* = audioconvert/libspa-audioconvert
    support.*       = support/libspa-support
}

context.modules = [
    { name  = libpipewire-module-rt
      args  = { nice.level = -10 rt.prio = 80 }
      flags = [ ifexists nofail ]
    }
    { name  = libpipewire-module-protocol-native }
    { name  = libpipewire-module-client-node }
    { name  = libpipewire-module-adapter }
    { name  = libpipewire-module-metadata }
    { name  = libpipewire-module-protocol-pulse }
]

context.exec = []

pulse.cmd = [
    { cmd = "load-module" args = "module-always-sink" flags = [] }
]

stream.properties = {
    node.latency            = 1024/48000
    resample.quality        = 15
    channelmix.normalize    = false
    channelmix.upmix        = false
    channelmix.upmix-method = psd
    audio.format            = "S32LE"
    dither.method           = "shibata"
}

pulse.properties = {
    server.address       = ["unix:native"]
    pulse.default.format = "S32LE"
    vm.overrides         = { pulse.min.quantum = 512/48000 }
}




# 4
# /home/{YOUR USER}/.config/pipewire/client.conf


context.properties = {
    log.level = 0
}

context.spa-libs = {
    audio.convert.* = audioconvert/libspa-audioconvert
    api.alsa.*      = alsa/libspa-alsa
    support.*       = support/libspa-support
}

context.modules = [
    { name = libpipewire-module-protocol-native }
    { name = libpipewire-module-client-node }
    { name = libpipewire-module-client-device }
    { name = libpipewire-module-adapter }
    { name = libpipewire-module-metadata }
    { name = libpipewire-module-session-manager }
]

stream.properties = {
    audio.format            = "S32LE"
    audio.rate              = 48000
    node.latency            = 1024/48000
    resample.quality        = 15
    dither.method           = "shibata"
    channelmix.normalize    = false
    channelmix.mix-lfe      = true
    channelmix.upmix        = false
    channelmix.upmix-method = psd
}




# 5
# /home/{YOUR USER}/.config/pipewire/jack.conf


context.properties = {
    log.level                   = 0
    default.clock.rate          = 48000
    default.clock.quantum       = 1024
    default.clock.min-quantum   = 512
    default.clock.max-quantum   = 4096
    default.clock.quantum-limit = 8192
    clock.power-of-two-quantum  = false
    link.max-buffers            = 64
    mem.allow-mlock             = true
}

context.spa-libs = {
    audio.convert.* = audioconvert/libspa-audioconvert
    support.*       = support/libspa-support
}

context.modules = [
    { name  = libpipewire-module-rt
      args  = { nice.level = -10 rt.prio = 80 }
      flags = [ ifexists nofail ]
    }
    { name  = libpipewire-module-protocol-native }
    { name  = libpipewire-module-client-node }
    { name  = libpipewire-module-metadata }
]

stream.properties = {
    audio.format            = "S32LE"
    audio.rate              = 48000
    node.latency            = 1024/48000
    resample.quality        = 15
    dither.method           = "shibata"
    channelmix.normalize    = false
    channelmix.mix-lfe      = true
    channelmix.upmix        = false
    channelmix.upmix-method = psd
}

jack.properties = {
    node.latency           = 1024/48000
    node.rate              = 48000
    node.quantum           = 1024
    node.lock-quantum      = true
    jack.self-connect-mode = allow
    jack.merge-monitor     = false
    resample.quality       = 15
    dither.method          = "shibata"
}




# 6
# /home/{YOUR USER}/.config/wireplumber/wireplumber.conf.d/50-alsa-lowlatency.conf


monitor.alsa.rules = [
  {
    matches = [
      {
        device.name = "~alsa_card.*"
      }
    ]
    actions = {
      update-props = {
        audio.format = "S32LE"
        audio.rate = 48000
        audio.channels = 2
        audio.position = [ FL FR ]
        resample.quality = 15
        channelmix.normalize = false
        channelmix.upmix = false
        channelmix.mix-lfe = false
        api.alsa.period-size = 512
        api.alsa.headroom = 1024
        api.alsa.disable-batch = true
        session.suspend-timeout-seconds = 10
        priority.session = 1000
        priority.driver = 1000
      }
    }
  }
]




# 7


systemctl --user restart pipewire.service pipewire-pulse.service wireplumber.service

PULSE

# 1
# /etc/pulse/daemon.conf


high-priority = yes
nice-level = 0
realtime-scheduling = yes
realtime-priority = 5
exit-idle-time = 20
resample-method = speex-float-10
avoid-resampling = yes
enable-remixing = no
default-sample-format = s32le
default-sample-rate = 48000
alternate-sample-rate = 44100
default-sample-channels = 2
default-channel-map = front-left,front-right
default-fragments = 8
default-fragment-size-msec = 64
flat-volumes = no
enable-deferred-volume = yes
deferred-volume-safety-margin-usec = 1000
log-target = null

EASYEFFECTS

DXVK

# 1
# /home/{YOUR USER}/.config/dxvk/dxvk.conf


# --- DXGI (Latency & Display) ---
dxgi.maxFrameLatency = 1
dxgi.syncInterval = 0
dxgi.numBackBuffers = 3
dxgi.tearFree = auto
dxgi.hardwareCursor = True
dxgi.deferSurfaceRelease = True
dxgi.nvapiHack = False
dxgi.enableHDR = False


# --- D3D11 (Performance & Precision) ---
d3d11.dcSingleUseMode = auto
d3d11.relaxedBarriers = True
d3d11.allowMapFlagNoWait = True
d3d11.strictDivision = False
d3d11.samplerAnisotropy = 8
d3d11.maxTessFactor = 12
d3d11.disableTearing = auto
d3d11.invariantPosition = True


# --- D3D9 (Legacy & Compatibility) ---
d3d9.presentInterval = 0
d3d9.maxFrameLatency = 1
d3d9.evictManagedOnUnlock = auto
d3d9.supportDFFormats = True
d3d9.supportX4R4G4B4 = True
d3d9.supportD32 = True
d3d9.allowDoNotWait = True
d3d9.longMad = False


# --- Shader Cache (No Stutters) ---
dxvk.shaderCache = True
dxvk.shaderCachePath = /home/{YOUR USER}/.dxvk-cache
dxvk.numCompilerThreads = 0


# --- Stealth (No Logs / No HUD) ---
d3d9.hud = 0
d3d11.hud = 0
dxgi.hud = 0
d3d9.debug = False
d3d11.debug = False
dxgi.debug = False
d3d11.apitraceMode = False

VKBASALT

# 1


sudo apt update && sudo apt install vkbasalt




# 2
# /home/{YOUR USER}/.config/vkBasalt/vkBasalt.conf


# --- General Settings & Effects Pipeline ---
[general]
effects = smaa:lut:vibrance:cas
output_resolution = 0 0


# --- Contrast Adaptive Sharpening (AMD CAS - Идеальная чёткость) ---
[cas]
enabled = true
sharpness = 0.4


# --- Color & LUT (3D Lookup Table) ---
[lut]
enabled = true
lut_path = /home/{YOUR USER}/.config/vkBasalt/luts/lut.cube
intensity = 0.6


# --- Color Vibrance ---
[vibrance]
enabled = true
amount = 0.25


# --- Subpixel Morphological Anti-Aliasing (Качественное сглаживание) ---
[smaa]
enabled = true
smaa_type = smaa_1x
smaa_threshold = 0.05
smaa_max_search_steps = 32


# --- Disabled Filters (Unused / Performance Waste) ---
[clarity]
enabled = false

[fxaa]
enabled = false

[sharpen]
enabled = false

[tonemap]
enabled = false

[denoise]
enabled = false




# 3
# /home/{YOUR USER}/.config/vkBasalt/luts/lut.cube


Download LUTs from the Internet

USER

# Protection when creating a new user


sudo chattr +i /etc/passwd

sudo chattr +i /etc/shadow

USBGUARD

# 1


sudo apt update && sudo apt install usbguard

sudo systemctl enable --now usbguard

sudo usbguard generate-policy | sudo tee /etc/usbguard/rules.conf




# 2
# /etc/usbguard/usbguard-daemon.conf


# --- Основные правила и пути ---
RuleFile=/etc/usbguard/rules.conf
RuleFolder=/etc/usbguard/rules.d/

# Стратегия по умолчанию для неизвестных устройств: Намертво Блокировать
ImplicitPolicyTarget=block

# Безопасный старт: доверяем устройствам, подключенным ДО включения ПК
PresentDevicePolicy=keep
PresentControllerPolicy=keep

# Жесткий контроль: любое устройство, воткнутое ПОСЛЕ старта ПК, летит под фильтр
InsertedDevicePolicy=apply-policy

# --- Конфиденциальность и права ---
AuthorizedDefault=none
RestoreControllerDeviceState=false
HidePII=true

# Доступ к управлению USBGuard — строго для root
IPCAllowedUsers=root
IPCAllowedGroups=root 
IPCAccessControlFiles=/etc/usbguard/IPCAccessControl.d/

# --- Движок и бэкенд ---
DeviceRulesWithPort=false
DeviceManagerBackend=uevent

# Stealth-режим: Ноль дискового ввода-вывода на логи аудита
AuditBackend=FileAudit
AuditFilePath=/dev/null




# 3


sudo systemctl restart usbguard

CLAMAV

# 1


sudo apt update && sudo apt install clamav clamav-daemon 




# 2
# /etc/clamav/clamd.conf


# --- Настройки сокета и прав ---
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket true
LocalSocketGroup clamav
LocalSocketMode 660
User clamav

# --- Мониторинг в реальном времени (On-Access) ---
OnAccessIncludePath /home/{YOUR USER}
OnAccessExcludeUname clamav
OnAccessPrevention false
OnAccessMaxFileSize 300M
OnAccessMaxThreads 4

# --- Производительность и ресурсы ---
MaxThreads 4
MaxConnectionQueueLength 15
ReadTimeout 180
SelfCheck 3600
ExitOnOOM false
ForceToDisk false

# --- What to scan ---
ScanELF true
ScanPE true
ScanPDF true
ScanHTML true
ScanXMLDOCS true
ScanSWF true
DetectPUA true
AlgorithmicDetection true

# --- Лимиты безопасности движка ---
MaxScanSize 500M
MaxFileSize 100M
StreamMaxLength 30M
MaxRecursion 10
MaxFiles 5000

# --- Полный Stealth: Ноль дисковых логов ---
LogSyslog false
LogVerbose false
LogRotate false
LogTime false
LogClean false
Debug false

# --- Базы данных ---
DatabaseDirectory /var/lib/clamav
OfficialDatabaseOnly true
Bytecode true
BytecodeSecurity TrustSigned




# 3
# /etc/clamav/freshclam.conf


DatabaseOwner clamav
DatabaseDirectory /var/lib/clamav

# --- Полный Stealth: Ноль дисковых логов ---
LogVerbose false
LogSyslog false
LogTime false
LogFileMaxSize 0

# --- Настройки обновлений ---
Checks 6
DatabaseMirror database.clamav.net
MaxAttempts 5
ScriptedUpdates yes
CompressLocalDatabase yes
Bytecode true

# --- Сетевые таймауты ---
ConnectTimeout 30
ReceiveTimeout 60

# --- Сигнал демону (указываем правильный конфиг) ---
NotifyClamd /etc/clamav/clamd.conf
Foreground false
Debug false

JOURNALD

# 1
# /etc/systemd/journald.conf


[Journal]
Storage=volatile

RuntimeMaxUse=64M
MaxRetentionSec=2h

Compress=no

ForwardToSyslog=no
ForwardToConsole=no
ForwardToKMsg=no
ForwardToWall=no

SyncIntervalSec=0
RateLimitIntervalSec=30s
RateLimitBurst=10000
Seal=no




# 2


sudo systemctl restart systemd-journald

GAMEMODE

# 1


sudo apt update && sudo apt install gamemode


# 2
# /etc/gamemode.ini


[general]
reaper_freq = 5
desiredgov = performance
defaultgov = powersave
softrealtime = on
renice = -10
inhibit_screensaver = 1

[cpu]
# Отключаем парковку для мгновенного отклика
park_cores = no
# Отключаем pin_cores, чтобы планировщик ядра сам распределял потоки по P и E ядрам
pin_cores = no

[gpu]
# Разрешаем управление питанием через NVML
apply_gpu_optimisations = accept-responsibility
# Убираем жесткий powermizer, оставляем GPU на откуп драйверу в режиме Perf
nv_powermizer_mode = 0

[sch]
# Включаем принудительное переключение планировщика для игровых потоков
timeout = 5

[logging]
verbose = false
logfile = /dev/null

PACKAGES

# 1
# --- SYSTEM ARCHITECTURE & FLATPAK SETTINGS ---


# Enable 32-bit support (Essential for Wine/Steam) and setup Flatpak
sudo dpkg --add-architecture i386
sudo apt update


# Install Flatpak and GNOME Software integration
sudo apt install -y flatpak gnome-software-plugin-flatpak gnome-software

# Add Flathub repository and Flatseal (GUI for managing Flatpak permissions)
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
flatpak install -y flathub com.github.tchx84.Flatseal




# 2
# --- PERFORMANCE & KERNEL TOOLS ---


# Thermal management, and power optimization
sudo apt install -y \
    fwupd rtirq-init thermald \
    zram-tools tlp tlp-rdw




# 3
# --- GRAPHICS & MESA DRIVERS ---


# Vulkan drivers, hardware acceleration (VA-API/VDPAU), and visual enhancers
sudo apt install -y \
    mesa-vulkan-drivers mesa-vulkan-drivers:i386 \
    mesa-va-drivers mesa-vdpau-drivers mesa-utils \
    vulkan-tools vkbasalt libvulkan1 libvulkan1:i386 \
    libvulkan-dev libvulkan-dev:i386 libvdpau-va-gl1 libva2 libvdpau1




# 4
# --- DEVELOPMENT ENVIRONMENT ---


# Compilers, build systems, and Python environment
sudo apt install -y \
    build-essential meson ninja-build pkg-config make cmake \
    python3 python3-pip python3-venv python3-dev python3-tk \
    libglib2.0-dev libudev-dev libssl-dev libcap-dev libavif-dev libpixman-1-dev




# 5
# --- MULTIMEDIA & AUDIO DEV ---


# PipeWire, ALSA, and PulseAudio development headers for low-latency audio
sudo apt install -y \
    libpipewire-0.3-dev libspa-0.2-dev libpulse-dev \
    libjack-jackd2-dev libsndfile1-dev libasound2-dev \
    libasound2-plugins:i386 pulseaudio-utils ffmpeg vlc




# 6
# --- GAMING & WINE COMPATIBILITY ---


# Comprehensive 32-bit and 64-bit libraries for running Windows apps/games
sudo apt install -y \
    wine wine64 wine32 winetricks \
    lib32gcc-s1 lib32stdc++6 libc6:i386 lib32z1 lib32ncurses6 lib32tinfo6 \
    libbz2-1.0:i386 libssl3:i386 libsdl2-dev libsdl2-2.0-0:i386 libudev1:i386 \
    libgl1:i386 libglx-mesa0:i386 libx11-dev libx11-6:i386 \
    libxext6:i386 libxrandr2:i386 libxss1:i386 libxcursor1:i386 \
    libfontconfig1:i386 libfreetype6:i386 libjack-jackd2-0 libjack-jackd2-0:i386 \
    libv4l-0:i386 libgtk2.0-0:i386 libxcomposite-dev libxdamage-dev \
    libxfixes-dev libxrandr-dev libxcursor-dev libxrender-dev \
    libxxf86vm-dev libxtst-dev libxres-dev libxmu-dev \
    libwayland-dev libdrm-dev




# 7
# --- SYSTEM UTILITIES & GUI ---


# Tools for system monitoring, cleaning, and UI customization
sudo apt install -y \
    inxi htop git curl zip unzip p7zip-full tar xvfb \
    gnome-shell-extension-manager gnome-tweaks gnome-screenshot gnome-color-manager \
    ufw stacer synaptic