FQS (Fedora Quick Start)

Fedora Quick Start is an interactive, TUI-driven post-installation script to get your fresh Fedora system set up, hardened, and ready for daily use.

If Secureblue is a bit too "hardcore" for you, but you still want a solid, secure, and performant base, this script might be enough for you.

Features

The script uses a standard Whiptail terminal interface. You just check off the features you want upfront, hit enter, and the script will handle the rest unattended.

Core System

• Updates: Performs a full system upgrade.
• Repositories: Enables RPM Fusion (Free/Non-Free) and Flathub.
• DNF Optimization: Configures dnf.conf for parallel downloads, caching, and better speed.
• Automation: Optionally sets up dnf-automatic for silent security updates.

Hardening & Privacy

• Kernel & Network: Applies Secureblue-inspired sysctl hardening, randomizes MAC addresses, and sets Firewalld to DROP.
• Physical Security: Installs and enables usbguard and fail2ban.
• Secure Boot: Creates and enrolls custom Secure Boot keys via sbctl.
• Tor & VPNs: Easily install the Tor daemon/browser, IVPN, or Mullvad.

Gaming & Software

• Gaming: Installs Steam along with the latest Proton-GE release.
• Windows Apps: Installs WinBoat for seamless Windows app support via Docker.
• Browsers: Choose between Helium, Trivalent, Brave (auto-debloated), Chromium, or Librewolf.
• Custom Software: Prompt to install any extra DNF or Flatpak packages you need.

Developer & Quality of Life

• Dev Tools: Installs essential tools (Git, Node, Go, Python, etc.) and your choice of editor (Zed, VSCodium, or NeoVim+NvChad).
• Git/SSH: Automatically generates SSH keys and sets up your global Git config.
• Bash Prompt: Installs a clean, custom bash prompt showing Git branches and current directories.
• Hardware Tweaks: Patches Apple keyboard fn keys and adds Dracut flags for Bluetooth keyboard support during LUKS decryption.

---

Run

You can run this script with a single command without downloading it manually:

sh -c "$(curl -sS https://raw.githubusercontent.com/vil/fqs/master/fqs)"

Installation

If you prefer to clone the repository and review the code locally before running:

Clone the repository:

git clone https://github.com/vil/fqs.git && cd fqs
Make the script executable:

chmod +x fqs

Run the script:

./fqs

Contributing

If you are a Fedora user and want to improve this, feel free to open a pull request.

Credits

Secureblue for their hardening configurations.

License

This source code is under the GNU General Public License, version 3.