I’m new happy user of pinephone from Manjaro edition. I’m trying to document my “way” here if anybody is interested. I guess it will be fun to look at it 10 years later because I think (and hope) that future belongs to linux
BTW I’m new Manjaro user as well thanks to phone edition
Back to my questions So far I didn’t find too much documentation therefore I need some clarification how does it work.
- UPDATE procedure best practice
I red that there can be differences between OS update via terminal (using pacman), SW update from UI, flashing new image. Per source there can be configuration differences … I saw it somewhere here on forum … the post was lacking details why it is happening. I’m used to e.g. APT pkg manager handles also configuration changes. Therefore can somebody clarified whether this is true ? If so why and what should be best practice ?
Why do I ask ?
I would like to run custom “stuff” there so I’m kind of worried that I need to apply my changes every time after flashing of new image …
- Services open to the world
I noticed that there are two services which are binded to 0.0.0.0 by default.
$ ss -tupln Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process udp UNCONN 0 0 0.0.0.0:5353 0.0.0.0:* users:(("chatty",pid=4137,fd=46)) tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* tcp LISTEN 0 128 [::]:22 [::]:*
So far I don’t like it.
SSH server - by default there is very weak password for manjaro and root therefore it can be easily exploited. Arch OS highlights that as well - link. Is it really necessary to have SSH server running by default ?
chatty - I don’t plan to use this up at all. Therefore I will remove it.
- Users management
Is it OK to create own OS user and disable logins to manjaro user & change root password ?
Thanks a lot