This is a follow-up of the previous post.

Once we have our system up and running, we can start adding stuff

Install yay (aur helper)

git clone https://aur.archlinux.org/yay-bin.git && cd yay-bin && makepkg -si

Add Chaotic Aur Binary Repo

# Solve problem with gnupg not using systemd-resolved
sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
# Add chaotic repo keys 
# https://aur.chaotic.cx/docs
sudo pacman-key --recv-key 3056513887B78AEB --keyserver keyserver.ubuntu.com
sudo pacman-key --lsign-key 3056513887B78AEB
sudo pacman -U 'https://cdn-mirror.chaotic.cx/chaotic-aur/chaotic-keyring.pkg.tar.zst'
sudo pacman -U 'https://cdn-mirror.chaotic.cx/chaotic-aur/chaotic-mirrorlist.pkg.tar.zst'
# Add repos
su
cat >> /etc/pacman.conf <<EOF
[proaudio]
Server = https://arch.osamc.de/$repo/$arch

[chaotic-aur]
Include = /etc/pacman.d/chaotic-mirrorlist
EOF

CLI Apps

# CLI utils
vim vi-vim-symlink bash-completion htop btop ncdu 
# Hardware tools 
ethtool smartmontools upower tlp powertop acpi brightnessctl fastfech inxi 
stow jq
# Network and internet
inetutils net-tools nfs-utils mtr w3m neomutt newsboat
openvpn-update-systemd-resolved

Sound and Video acceleration

yay -S pipewire pipewire-pulse pipewire-zeroconf alsa-utils pulsemixer 
bluez bluez-utils 

yay -S intel-media-driver intel-gpu-tools vdpauinfo

Graphical Desktop

# Sway Desktop
yay -S sway swaybg swayidle swaylock-effects wlsunset wl-clipboard cliphist mako kanshi autotiling 
# Integration
xdg-desktop-portal-wlr xdg-desktop-portal-gtk xorg-xlsclients
# Launchers, bars and themes
wmenu wofi waybar i3status-rust breeze-gtk  arc-gtk-theme
# Basic apps and utilities
foot imv thunar tumbler iwgtk blueman wdisplays
# Fonts
terminus-font ttf-liberation ttf-dejavu ttf-font-awesome
# Display Manager
ly
# Multimedia
yay -S mpv mpv-mpris yt-dlp

Permissions

A part from sudo, you can also allow privileges using the polkit daemon, allowing certain users to reboot o shutdown the system without using sudo.

sudo cat > /etc/polkit-1/rules.d/49-nopasswd_global.rules << EOF
/* Allow members of the wheel group to execute any actions
 * without password authentication, similar to "sudo NOPASSWD:"
 */
polkit.addRule(function(action, subject) {
    if (subject.isInGroup("wheel")) {
        return polkit.Result.YES;
    }
});
EOF

Fingerprint (ThinkPad only)

# Install the package
yay -S python-validity

# Prepare your finger
fprintd-enroll

# Test
fprintd-verify

# Enable globally
sudo vi /etc/pam.d/system-login

# Insert this lines before the others
auth       sufficient pam_unix.so try_first_pass likeauth nullok
auth       sufficient pam_fprintd.so