Arch Install Part 2: Post-Install

This is a follow-up of the previous post.

Once we have our system up and running, we can start adding stuff

Install yay (aur helper)

git clone https://aur.archlinux.org/yay-bin.git && cd yay-bin && makepkg -si

Add Chaotic Aur Binary Repo

# Solve problem with gnupg not using systemd-resolved
sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
# Add chaotic repo keys 
# https://aur.chaotic.cx/docs
sudo pacman-key --recv-key 3056513887B78AEB --keyserver keyserver.ubuntu.com
sudo pacman-key --lsign-key 3056513887B78AEB
sudo pacman -U 'https://cdn-mirror.chaotic.cx/chaotic-aur/chaotic-keyring.pkg.tar.zst'
sudo pacman -U 'https://cdn-mirror.chaotic.cx/chaotic-aur/chaotic-mirrorlist.pkg.tar.zst'
# Add repos
su
cat >> /etc/pacman.conf <<EOF
[proaudio]
Server = https://arch.osamc.de/$repo/$arch

[chaotic-aur]
Include = /etc/pacman.d/chaotic-mirrorlist
EOF

Install some apps

From here, and that's the beauty of Arch, we can install whatever we need, and nothing else:

Permissions

A part from sudo, you can also allow privileges using the polkit daemon, allowing certain users to reboot o shutdown the system without using sudo.

sudo cat > /etc/polkit-1/rules.d/49-nopasswd_global.rules << EOF
/* Allow members of the wheel group to execute any actions
 * without password authentication, similar to "sudo NOPASSWD:"
 */
polkit.addRule(function(action, subject) {
    if (subject.isInGroup("wheel")) {
        return polkit.Result.YES;
    }
});
EOF

Fingerprint (ThinkPad only)

# Install the package
yay -S python-validity

# Prepare your finger
fprintd-enroll

# Test
fprintd-verify

# Enable globally
sudo vi /etc/pam.d/system-login

# Insert this lines before the others
auth       sufficient pam_unix.so try_first_pass likeauth nullok
auth       sufficient pam_fprintd.so