From fbd033bd432204f7f5dd526d210bb179b83e6d85 Mon Sep 17 00:00:00 2001
From: Denis Chevalier <perso@denischevalier.fr>
Date: Fri, 7 Aug 2026 14:59:57 +0200
Subject: fix issues

---
 etc/mkinitcpio.d/linux-hardened.preset | 18 ++++++++++++++++++
 setup.sh                               | 12 ++++++------
 2 files changed, 24 insertions(+), 6 deletions(-)
 create mode 100644 etc/mkinitcpio.d/linux-hardened.preset

diff --git a/etc/mkinitcpio.d/linux-hardened.preset b/etc/mkinitcpio.d/linux-hardened.preset
new file mode 100644
index 0000000..588980b
--- /dev/null
+++ b/etc/mkinitcpio.d/linux-hardened.preset
@@ -0,0 +1,18 @@
+# mkinitcpio preset file for the 'linux-hardened' package
+
+#ALL_config="/etc/mkinitcpio.conf"
+ALL_kver="/boot/vmlinuz-linux-hardened"
+#ALL_kerneldest="/boot/vmlinuz-linux-hardened"
+
+PRESETS=('default')
+#PRESETS=('default' 'fallback')
+
+#default_config="/etc/mkinitcpio.conf"
+# default_image="/boot/initramfs-linux-hardened.img"
+default_uki="/boot/EFI/Linux/arch-linux-hardened.efi"
+default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp"
+
+#fallback_config="/etc/mkinitcpio.conf"
+#fallback_image="/boot/initramfs-linux-hardened-fallback.img"
+fallback_uki="/boot/EFI/Linux/arch-linux-hardened-fallback.efi"
+#fallback_options="-S autodetect"
diff --git a/setup.sh b/setup.sh
index 87fcc35..8cfd947 100755
--- a/setup.sh
+++ b/setup.sh
@@ -97,6 +97,7 @@ sudo chmod a+r /etc/pacman.conf
 
 sudo cp --backup=numbered -v ./etc/login.defs /etc/
 sudo cp --backup=numbered -v ./etc/updatedb.conf /etc/
+sudo cp --backup=numbered -v ./etc/mkinitcpio.d/linux-hardened.preset /etc/mkinitcpio.d/
 
 sudo visudo -cf ./etc/sudoers.d/00-hardening && sudo cp -v ./etc/sudoers.d/00-hardening /etc/sudoers.d/
 sudo chmod 0440 /etc/sudoers.d/00-hardening
@@ -104,11 +105,11 @@ sudo chmod 0440 /etc/sudoers.d/00-hardening
 sudo cp --backup=numbered -v ./etc/systemd/coredump.conf /etc/systemd/
 sudo cp --backup=numbered -v ./etc/cups/cupsd.conf /etc/cups/
 
-sudo cp -v ./etc/modprobe.d/blacklist-security.conf /etc/modprobe.d/
-sudo cp -v ./etc/pam.d/system-local-login /etc/pam.d/
-sudo cp -v ./etc/pam.d/system-login /etc/pam.d/
-sudo cp -v ./etc/pam.d/greetd /etc/pam.d/
-sudo cp -v ./etc/sysctl.d/99-security.conf /etc/sysctl.d/
+sudo cp --backup=numbered -v ./etc/modprobe.d/blacklist-security.conf /etc/modprobe.d/
+sudo cp --backup=numbered -v ./etc/pam.d/system-local-login /etc/pam.d/
+sudo cp --backup=numbered -v ./etc/pam.d/system-login /etc/pam.d/
+sudo cp --backup=numbered -v ./etc/pam.d/greetd /etc/pam.d/
+sudo cp --backup=numbered -v ./etc/sysctl.d/99-security.conf /etc/sysctl.d/
 
 # Append tmpfs to /etc/fstab securely using tee
 if [ -f "./etc/fstab" ]; then
@@ -322,7 +323,6 @@ sudo cp -v --backup=numbered ./dotfiles/.scripts/.git-prompt.sh /root/.scripts/
 sudo rm -f /root/.git-prompt.sh
 sudo cp -v --backup=numbered ./rootfiles/.bashrc /root/
 sudo mkdir -pv /root/.config/
-sudo rm -rv /root/.config/nvim
 sudo cp -rv ./dotfiles/.config/nvim /root/.config/
 
 log_success "Arch Linux post-installation setup completed successfully!"
-- 
cgit