Dynamic Generator — Arch Guides

Firmware Interface:

File System:

Target Disk (e.g. /dev/sda, /dev/nvme0n1):

🔴 CRITICAL: Run lsblk to find your drive size and verify the correct device path!
• VMware/VirtualBox: Most likely /dev/sda
• Baremetal: Double check size to ensure you format the right existing drive and encounter no errors!

🔐 Disk Encryption

Built up in layers, bottom to top. The defaults are the recommended setup — you can leave every one of these alone.

1 Container LUKS2 recommended

2 Cipher AES is hardware-accelerated

3 Post-quantum overlay optional, experimental

Layer 4: LUKS Duress Password

Registers a second passphrase on the LUKS header. Entering it at the boot prompt triggers the response below instead of unlocking normally. Your real passphrase is unaffected.

Duress action:

Init System:

Bootloader & Secure Boot:

Main Kernel:

Backup Kernel:

CPU Brand:

GPU Brand:

VM Guest Setup:

Software Type:

Swap Size:

Post-Install Apps:

⚠️ Proprietary / non-libre software: anything marked [!] contains closed-source code or conflicts with strict libre principles — Firefox firmware blobs, the Signal Electron build, Chromium, Flatpak's default remote. They still install normally; this is just so you know what you are getting. What counts as non-libre →

🔍 Rofi Launcher 🦀 paru AUR Helper

🌐 Browsers

🦊 Firefox [!] Browser 🐺 LibreWolf Privacy 🧅 Tor Browser Anon 🔵 Chromium [!] Browser 🌐 Ungoogled Chromium Browser

🔒 Security

💬 Signal [!] E2E Msg 🔑 KeePassXC Passwords 🛡️ ClamAV Antivirus 🏰 Firejail Sandbox ⚙️ Doas ⭐ Privilege ⚙️ Config

💻 Dev / Terminal

📝 Neovim Editor ⬛ Alacritty Terminal 🐱 kitty Terminal 🐚 Zsh Shell 📘 VSCodium IDE 🔀 Git VCS ⚙️ 🪟 tmux Multiplex 📊 htop Monitor 🖥️ pfetch Sysinfo ⚡ fastfetch Sysinfo

🎬 Media / Files

📁 Thunar Files 📂 Nautilus Files ▶️ mpv Player 🔶 VLC Player 🎥 OBS Studio Record 🎨 GIMP Images 📄 LibreOffice Office

🔧 System

📦 Flatpak [!] Apps 🤖 unattended-upgrades Auto-Update ⚙️ ⏪ Timeshift Backup ⚙️ 📡 NetworkManager Network 🔵 Bluetooth bluez 🔊 PipeWire Audio 🔐 OpenSSH SSH Server 📸 Snapper ⭐ Snapshots ⚙️ Config ⚙️

🎨 Dusky

🌙 Dusky Setup Auto-desktop

🌙 Theming & Boot

🌌 Tokyo Night Boot Theme

⚠️ Libre users: Firefox firmware blobs, Flatpak proprietary apps, Signal Electron build, and Chromium may conflict with strict libre principles. See Wiki for details.

Input Guard — on a confirmed payload:

The payload is always captured to /var/log/anti-ducky/ with a SHA-256 for chain of custody, and the device is always deauthorized. A lock screen does not protect the LUKS key in RAM — pair it with LUKS auto-lock if that is what you need. Power-off loses unsaved work on a false positive, and these timing thresholds have never been measured on real hardware.

USB Kill Switch:

Auto Updates:

Regular Users: Root SSH Access:

Post-Install Cleanup:

Desktop Environment:

Install Dusky (automated Hyprland desktop)?

Firewall Setup:

DNS Caching:

⚙️ Dynamic Generator

Generator Settings

📝 Live Editor (Staging)

Markdown Guide (.md)

Install Script (.sh)

Post-Install Script (.sh)

✅ Finalized Output

🚀 Remote SSH Deployment

📄 Markdown Guide (.md)

⚙️ Install Script (.sh)

🚀 Post-Install Script (.sh)