Differences

This shows you the differences between two versions of the page.

--- en:desktop:operating_systems:opensuse [2022/06/28 21:26] – cocomeat4
+++ en:desktop:operating_systems:opensuse [2022/10/24 08:24] (current) – external edit 127.0.0.1
@@ Line 16: / Line 16: @@
 - openSUSE Tumbleweed, a rolling release with fresh software (but that is quite reliable because it's well-tested by an automated system but also by humans and using a snapshots system). It is your only option if you are using a 32 bit computer.
-- openSUSE Leap, a fixed release that gets a new version every 7 months based on the source code of SUSE Linux Enterprise. Very recent drivers won't be included in this edition before the release of its next version.
+- openSUSE Leap, a fixed release that gets a new version every 7 months based on the source code of SUSE Linux Enterprise. Very recent drivers won't be included in this edition before the release of its next version. Sadly, it doesn't support graphical system upgrades from version N to N+1
-- openSUSE MicroOS, based on Tumbleweed, MicroOS uses Transactional (Atomic) updates upon a read-only btrfs root file system. Most of the filesystem being read-only, this edition is overally more secure than the two classic editions.
+- openSUSE MicroOS, based on Tumbleweed, MicroOS uses Transactional (Atomic) updates upon a read-only btrfs root file system. Most of the filesystem being read-only, this edition is overally more secure than the two classic editions and is the best you can get out of openSUSE in terms of security.
-- openSUSE Leap Micro, the same as MicroOS, but based on Leap, which provides extra stability and requires to reboot less often, as there is less updates. This is the best stability/security compromise you can get with openSUSE and will likely be your best pick if you don't need any very recent drivers or specially recent software.
+- openSUSE Leap Micro, the same as MicroOS, but based on Leap, and server-oriented. This one doesn't provide any graphical user interface by default so we won't use it in this guide
 ====== Requirements ======
@@ Line 65: / Line 65: @@
 - Type the following commands:
-''gpg --import gpg-pubkey-*.asc'' //This will import the OpenSUSE GPG key//
+//This will import the OpenSUSE GPG key// :
+<code> gpg --import gpg-pubkey-*.asc </code>
-''gpg --verify <insert the name of the checksum ASC file you downloaded here>'' //This will verify the checksum file. Do not include "<" and ">"//
+//This will verify the checksum file. Do not include "<" and ">"//:
+<code> gpg --verify <insert the name of the checksum ASC file you downloaded here> </code>
 You should have a line ''gpg: Good signature from "openSUSE Project Signing Key <opensuse@opensuse.org>"''.
 This means that the checksum file is safe. If you don't have that line, you shouldn't trust what you have downloaded.
-''sha256sum -c openSUSE-*.sha256'' // This will verify the checksum of the installer iso image. //
+// This will verify the checksum of the installer iso image. //:
+<code> sha256sum openSUSE-*.sha256 </code>
+You may get an error ''sha256sum: openSUSE-something.iso: No such file or directory''. In that case, change the filename in the .sha256sum file to match the file you downloaded. Alternatively, run ''sha256sum openSUSE-*.iso && cat openSUSE-*.sha256'' and compare both outputs. If they are the same, your file is safe.
 You should have ''openSUSE-something.iso: OK''. If you don't, it means your iso image has a problem and you shouldn't trust it.
@@ Line 93: / Line 97: @@
 ====== Installation ======
+Boot your USB stick, you should be prompted by a small menu, select "Installation" with your keyboard arrows.
+Be aware the following is for openSUSE MicroOS, the steps for other openSUSE editions are very similar but classic editions prompt for disk setup earlier than we do it in this guide, just scroll down to see what you should do, everything is explained here, just not in the right order for classic editions.
+{{:en:desktop:operating_systems:boot.png?nolink&600|}}
+Now wait till the installer loads. It may take some time, especially if your USB stick is slow, so grab a coffee ☕️.
+Once the installer has started, you will be welcomed by a Language and Keyboard selection page. Set up your language and keyboard layout then click next.
+{{:en:desktop:operating_systems:oss_kbd.png?nolink&800|}}
+Next, you will be prompted to choose a System Role. This is basically what you want to do with your openSUSE installation. You should choose either GNOME or KDE Plasma when using MicroOS. If you use openSUSE Tumbleweed, you can choose Xfce here, which isn't available in other editions. It is much lighter. On the screenshot, I chose GNOME. As of time of writing, both are still experimental in MicroOS, but I had no issues so far with both.
+{{:en:desktop:operating_systems:oss_sysrole.png?nolink&800|}}
+Next, the installer will prompt you to create a new user, choose whatever you want for your full name, but the username should be kept simple (no caps, no spaces, no special characters, i'd recommend you limit to a-z and 0-9).
+Preferably, setup a strong password. You can enable automatic login as we will setup disk encryption later.
+You can also use that password for the system administrator, as we will lock it later in the hardening part.
+{{:en:desktop:operating_systems:oss_usercreation.png?nolink&800|}}
+You should then arrive on the Installation Settings page, skipping the traditional partitioning and software selecting steps. First, go into Partitioning to enable encryption
+{{:en:desktop:operating_systems:oss_enc1.png?nolink&800|}}
+Next we will use the Guided Setup, because it is easier and feature complete.
+{{:en:desktop:operating_systems:oss_enc2.png?nolink&800|}}
+Now enable Disk Encryption and enter a strong passphrase that will be asked every time you start your computer.
+{{:en:desktop:operating_systems:oss_enc3.png?nolink&800|}}
+Next it will ask what File System to use for the Root partition, keep Btrfs.
+Keep the defaults for any other options until you return to the Installation Settings menu.
+Once encryption is setup, you can proceed to the install. Everything else that need to be configured will be configured later.
+{{:en:desktop:operating_systems:oss_install.png?nolink&800|}}
+This will, again, take some time. So grab some chocolate 🍫 (because you're likely out of coffee at this point).
+Once the install has finished, the system will automatically reboot...
+{{:en:desktop:operating_systems:oss_finishinstall.png?nolink&800|}}
+And you did it ! openSUSE is installed ! Now the fun begins, let's make it secure and set things up.
+====== First boot ======
+Just after rebooting, you will be prompted by GRUB that will ask you for your encryption passphrase:
+{{:en:desktop:operating_systems:oss_firstboot_grub.png?nolink&600|}}
+It may look at bit different for you, this is how it looks in my virtual machine.
+Once grub has been unlocked, openSUSE will boot automatically after 10 seconds, you can press enter to speed up the process.
+openSUSE will ask you your encryption passphrase one more time to unlock the rest of the disk, as you have only unlocked the boot partition so far, which uses an older version of LUKS.