Omarchy is a beautiful, modern & opinionated Linux distribution by DHH.

Read more at omarchy.org.

Run curl -fsSL https://pondhouse-data.com/utilities/arch/install | bash

An install script is hosted at https://pondhouse-data.com/utilities/arch/install. This script will download and run the Omarchy installer. It is recommended to review the script before running it.

Add the script in the public/utilities/arch directory to the pondhouse-data.com website.

On arch, we use Omarchy as a base configuration. It provides a nice, minimal opinionated setup for Arch Linux. However, we are not going to use it directly, as it's a bit too opinionated, so we keep it as a git submodule and then only fetch the files we need.

Use systemctl to enable and start the service: sudo systemctl enable --now tailscaled

Connect your machine to your Tailscale network and authenticate in your browser: sudo tailscale up

You can find your Tailscale IPv4 address by running: tailscale ip -4

If you have a Fido-token you can use it for sudo authentication. Use the omarchy menu to install it

If you have a fingerprint reader, you can use it for sudo authentication as well as user login. Use the omarchy menu to install it.

Use howdy for that.

yay -S --noconfirm howdy-git

Add the following to /etc/pam.d/system-auth on top:

auth sufficient pam_howdy.so
auth sufficient pam_unix.so try_first_pass likeauth nullok

This will allow to use your camera for all authentication mechanisms (login, sudo, ...)

Use v4l2-ctl --list-devices to list all cameras. Output is something like this:

v4l2-ctl --list-devices
Logitech BRIO (usb-0000:2a:00.1-2.2):
        /dev/video0
        /dev/video1
        /dev/video2
        /dev/video3
        /dev/media0

Next you need to find, which is the infrared camera. Use mpv /dev/video0, ... This will open a camera feed. Remember the black and white one.

Next and finally, we need to configure howdy:

sudo howdy config

Find these entries and change them as follows:

certainty = 3.8
device_path = /dev/video2 # Change this to your infrared device
max_height = 640

Now we can add our face:

sudo howdy add

And finally, we can test if the face recognition works by running:

sudo pacman -S xorg-xhost
xhost si:localuser:root
sudo howdy test

0. Start sunshine service with systemctl --user enable --now sunshine.service

1. On first login to sunshine, create the username/password

2. Copy this to ~/.config/sunshine/sunshine.conf

    global_prep_cmd = [{"do":"hyprctl output create headless sunshine","undo":""},{"do":"hyprctl keyword monitor \"sunshine,2560x1600@120,auto,1.25\"","undo":""},{"do":"hyprctl dispatch moveworkspacetomonitor 10 sunshine","undo":""},{"do":"hyprctl dispatch workspace 10","undo":""}]
    nvenc_preset = 6
    output_name = 1
    stream_audio = true

Running sunshine is still a bit manual.

hyprctl output crate headless sunshine
hyprctl keyword monitor "sunshine,2560x1600@120,auto,1.25"
xrandr -q
# Note down the id (number) of the headless output (probably 1)

Set the id in the sunshine -> audio/video settings -> "Display Number"

Then, create and dispatch workspace 10 to the headless output:

hyprctl dispatch workspace 10
hyprctl dispatch moveworkspacetomonitor 10 sunshine
hyprctl dispatch workspace 10

1Password is installed. If there are issues with storing 2FA tokens, try:

# Check if gnome-keyring is running
systemctl --user status gnome-keyring-daemon.socket
# If not, enable and start it
systemctl --user enable --now gnome-keyring-daemon.socket

# Create a test key (to set up the default keyring)
secret-tool store --label="test" testkey testvalue
# Retrieve the test key
secret-tool lookup testkey testvalue
# Remove the test key
secret-tool clear testkey testvalue

Now restart the 1Password app and see if it works.

1. Make sure you have an SSH key added to your 1Password account.
2. Open the 1Password app, then select your account or collection at the top of the sidebar and select Settings > Developer. Select Set Up SSH Agent, then choose whether or not you want to display SSH key names when you authorize connections.
3. Also select "Integrate with 1Password CLI"

If you do not want to use 1Password:

1. Place your private key in ~/.ssh/id_rsa and set permissions to 600 with chmod 600 ~/.ssh/id_rsa
2. Also place your public key in ~/.ssh/id_rsa.pub and set permissions to 644 with chmod 644 ~/.ssh/id_rsa.pub
3. Add the public key to your GitHub account (or other services you use)
4. in ~/.zshrc, search the line SSH Agent and follow the instructions there to enable the ssh-agent on login

Initially, there are some manual steps to do:

1. Create new workspaces for the zen browser: a. One for private/general purpose browsing b. One for Pondhouse c. One for DevOps and More d. One for Russmedia (deprecated)

2. Open zen browser in each workspace and log in to the respective accounts.

3. Add outlook, teams and sharepoint to "Essentials" (these are pinned to the sidebar).

Chromium is used for launching web apps (like Teams), as chromium allows for border-less windows. For this, we also need respective profiles and logins.

chromium --profile-directory="Profile 1"
chromium --profile-directory="Profile 2"
chromium --profile-directory="Profile 3"
chromium --profile-directory="Profile 4"

In the applications folder, copy the teams.desktop file and adjust accordingly. Use different --profile-directory for different teams accounts. Then run omarchy-refresh-applications.

Start syncthing with systemctl enable --now syncthing@andreas

Open syncthing in your Pixel 6 and the web interface of the new computer on localhost:8384. On Pixel 6, add the new device - when asked for confirmation on the new device select "introducer" ("Verteilergeraet") - this automatically connects with all other devices Pixel 6 is synced. Add the shared folders on Pixel 6 as normal. (If the web ui cant be reached, look at systemctl status syncthing@andreas for info on which port the ui runs).

On desktop, use folders ~/.sync (id: sync-0), ~/.notes (id: notes-0).

NOTE: Pixel 6 should be set as "Introducer" device for all folders, so that new devices added to Pixel 6 automatically get all folders.

To have a dedicated pondhouse syncthing setup, create a new folder ~/.pondhouse-sync and add the folder to the respective devices to sync.

gcloud init
gcloud auth configure-docker europe-west3-docker.pkg.dev

If you desperately need Microsoft fonts, you can install them with:

yay -S --noconfirm ttf-ms-win11-auto

Note that free alternatives are installed by default.

To undervolt your NVIDIA GPU:

1. Download the latest release here: https://github.com/Dreaming-Codes/nvidia_oc

2. Move it to /user/local/bin and make it executable

3. Create a systemd service file at /etc/systemd/system/nvidia-oc.service with the following content:

   [Unit]
   Description=NVIDIA Overclocking Service
   After=network.target
   
   [Service]
   ExecStart=/usr/local/bin/nvidia_oc set --index 0 --power-limit 290000 --freq-offset 200 --mem-offset 850 --min-clock 210 --max-clock 2730
   User=root
   Restart=on-failure
   
   [Install]
   WantedBy=multi-user.target

   These files are for a NVIDIA 4080.

   This will set the power limit 250W, GPU clock offset +255MHz, memory clock offset +850MHz, minimum clock 210MHz, maximum clock 2745MHz.

   • GPU clock offset means: The GPU will run the clock speed of eg. 1600MHz at voltage levels that would normally be used for 1855MHz. So it will be more efficient.
   • Minimum clock: This is the idle clock. Use nvidia-smi to find the default minimum idle clock.
   • Maximum clock: This is the maximum boost clock. Run your most advanced workload, then use nvidia-smi to find the maximum clock it reached.

4. Enable and start the service:

   sudo systemctl enable --now nvidia-oc.service

Note: To test out different settings and compare them to default, you can manually run the command from ExecStart in a terminal.

In your thunderbird, go to menu -> help -> troubleshooting information. From there, click on the about:profiles link. This will show the currently active profile and its location.

Copy the whole content of the profile folder to backup.

To restore, copy the content back to the profile folder.

Omarchy is released under the MIT License.