Linux Real-time Low-Latency Configuration Collection
- Xanmod LTS — real-time kernel
- GRUB — optimized cmdline (mitigations, NVidia, Intel, scheduler)
- Sysctl — sched latency, BBR congestion, memory management, security hardening
- Performance governor — max frequency on AC
- RTIRQ — real-time interrupt priorities (USB, HID, NVMe, audio)
- CPU affinity — isolate cores 2-3 for latency-sensitive tasks
- NVreg — MSI, PCIe Gen4, PreserveVideoMemory, PowerMizer
- Coolbits 31 — overclocking + fan control
- DXVK — maxFrameLatency=1, async, shader cache
- VKBasalt — Clarity, SMAA, Vibrance, LUT
- ZRAM — zstd compression, 50% RAM size
- tmpfs — /tmp (10G), /var/log (256M), /var/tmp (1G)
- fstrim — daily SSD trim (idle priority)
- noatime/nodiratime — reduce disk writes
- Quantum 512/48000 — low latency
- S32LE format — high precision
- Real-time priority — rt.prio=50, nice=-2
- PulseAudio fallback — speex-float-10
- TLP — AC/battery profiles, CPU boost, NVMe power mgmt
- thermald — thermal throttling at 85°C/95°C
- laptop_mode=5 — disk write aggregation
- Conservation mode — battery charging limit
- USBGuard — block unknown devices, policy-based
- ClamAV — on-access scanning for /home
- Immutable passwd/shadow — chattr +i
- Blacklisted modules — uvcvideo, firewire, floppy, parport, joydev
- Sysctl hardening — kptr_restrict, dmesg_restrict, ptrace_scope
- BBR — TCP congestion control
- fq_codel — queue discipline
- Randomized MAC — privacy
- WiFi powersave 3 — balance performance/battery
- Triple buffering + VRR — smooth rendering
- Animations off — reduce latency
- Hot corners off — disable CPU wakeups
- Flat acceleration — raw mouse input
- VS Code — custom settings, code-runner
- Build tools — gcc, cmake, meson, python
- Wine/Proton — 32-bit support, dxvk
- GameMode — renice -10, pin cores, performance governor
- journald — volatile storage, no compression
- printk=3 — minimal kernel logs
- preload — adaptive prefetch
| Component | Model |
|---|---|
| Laptop | LOQ-15IAX9 |
| CPU | Intel Core i5-12450HX (8 cores) |
| GPU | NVIDIA RTX 2050 Laptop |
| RAM | 16GB DDR5 |
| Storage | NVMe SSD |
| Audio | Realtek ALC3287 |
| WiFi | Intel AX201 |
Use at your own risk.
These configurations modify system behavior (kernel, GRUB, modules).
Always backup your data before applying.
Tested only on Ubuntu/Debian-based distros.
# 1
sudo apt install safeeyes
# 2
# ~/.config/safeeyes/safeeyes.json
{
"allow_postpone": false,
"long_break_duration": 600,
"long_break_interval": 90,
"long_breaks": [
{
"name": "\u0421\u043b\u0430\u0431\u043e 10\u043c\u0438\u043d?\u0412\u041e\u041b\u042f\u2014\u041d\u041e\u041b\u042c.\u0412\u0421\u0422\u0410\u041d\u042c \u0418 \u0414\u0412\u0418\u0413\u0410\u0419\u0421\u042f!\u0422\u042b-\u0412\u041e\u0418\u041d,\u0430 \u043d\u0435 \u041e\u0412\u041e\u0429!"
}
],
"meta": {
"config_version": "6.0.3"
},
"persist_state": false,
"plugins": [
{
"enabled": false,
"id": "donotdisturb",
"settings": {
"skip_break_windows": "",
"take_break_windows": "",
"unfullscreen": true,
"while_on_battery": false
},
"version": "0.0.2"
},
{
"enabled": false,
"id": "notification",
"version": "0.0.1"
},
{
"enabled": false,
"id": "audiblealert",
"settings": {
"post_break_alert": true,
"pre_break_alert": true
},
"version": "0.0.3"
},
{
"enabled": true,
"id": "trayicon",
"settings": {
"allow_disabling": false,
"disable_options": [
{
"time": 30,
"unit": "minute"
},
{
"time": 1,
"unit": "hour"
},
{
"time": 2,
"unit": "hour"
},
{
"time": 3,
"unit": "hour"
}
],
"show_time_in_tray": false
},
"version": "0.0.3"
},
{
"enabled": false,
"id": "smartpause",
"settings": {
"idle_time": 5,
"interpret_idle_as_break": false,
"postpone_if_active": false
},
"version": "0.0.3"
},
{
"enabled": true,
"id": "screensaver",
"settings": {
"command": "",
"min_seconds": 0.0
},
"version": "0.0.2"
},
{
"enabled": false,
"id": "healthstats",
"settings": {
"statistics_reset_cron": "0 0 * * *"
},
"version": "0.0.3"
},
{
"enabled": true,
"id": "mediacontrol",
"version": "0.0.1"
}
],
"postpone_duration": 5,
"pre_break_warning_time": 1,
"random_order": false,
"rpc_port": 7200,
"short_break_duration": 120,
"short_break_interval": 30,
"short_breaks": [
{
"name": "\u0421\u043b\u0430\u0431\u043e \u043d\u0430 120\u0441\u0435\u043a?\u0422\u042b\u2014\u0420\u0410\u0411 \u043f\u0438\u043a\u0441\u0435\u043b\u0435\u0439.\u0421\u041c\u041e\u0422\u0420\u0418 \u0412\u0414\u0410\u041b\u042c \u0438\u043b\u0438 \u041e\u0421\u041b\u0415\u041f\u041d\u0415\u0428\u042c!"
}
],
"shortcut_disable_time": 0,
"shortcut_postpone": 0,
"shortcut_skip": 0,
"strict_break": true,
"use_rpc_server": false
}{
// === WORKBENCH & UI (Интерфейс) ===
"workbench.colorTheme" : "Kanagawa",
"workbench.preferredDarkColorTheme" : "Kanagawa",
"workbench.preferredHighContrastColorTheme" : "Kanagawa",
"workbench.iconTheme" : "material-icon-theme",
"workbench.startupEditor" : "none",
"workbench.editor.empty.hint" : "hidden",
"workbench.editor.enablePreview" : false,
"workbench.layoutControl.enabled" : false,
"workbench.browser.showInTitleBar" : false,
"workbench.secondarySideBar.defaultVisibility" : "hidden",
"workbench.list.smoothScrolling" : true,
"window.commandCenter" : false,
"window.menuBarVisibility" : "compact",
"window.title" : "${folderName} / ${dirty}${activeEditorShort}",
"chat.commandCenter.enabled" : false,
"chat.titleBar.signIn.enabled" : false,
"chat.titleBar.openInAgentsWindow.enabled" : false,
"breadcrumbs.enabled" : false,
// === EDITOR: TYPOGRAPHY (Шрифты и текст) ===
"editor.fontFamily" : "Fira Code SemiBold, monospace",
"editor.fontWeight" : "600",
"editor.fontSize" : 15,
"editor.lineHeight" : 2,
"editor.letterSpacing" : 1,
"editor.fontLigatures" : false,
// === EDITOR: VISUALS & UX (Отображение и скролл) ===
"editor.lineNumbers" : "on",
"editor.cursorStyle" : "line-thin",
"editor.cursorBlinking" : "smooth",
"editor.cursorSmoothCaretAnimation" : "on",
"editor.smoothScrolling" : true,
"editor.minimap.enabled" : false,
"editor.glyphMargin" : false,
"editor.folding" : false,
"editor.stickyScroll.enabled" : false,
"editor.renderLineHighlight" : "all",
"editor.renderWhitespace" : "selection",
"editor.bracketPairColorization.enabled" : true,
"editor.guides.bracketPairs" : "active",
"editor.guides.indentation" : false,
"editor.unicodeHighlight.invisibleCharacters" : true,
"editor.unicodeHighlight.ambiguousCharacters" : true,
"editor.stablePeek" : true,
// === EDITOR: INTELLISENSE (Подсказки) ===
"editor.hover.delay" : 1000,
"editor.hover.sticky" : false,
"editor.acceptSuggestionOnEnter" : "smart",
"editor.parameterHints.enabled" : false,
"editor.parameterHints.cycle" : false,
// === TERMINAL (Терминал) ===
"terminal.integrated.fontFamily" : "Fira Code SemiBold, monospace",
"terminal.integrated.fontSize" : 12,
"terminal.integrated.cursorStyle" : "line",
"terminal.integrated.smoothScrolling" : true,
"terminal.integrated.stickyScroll.enabled" : false,
// === FILES & EXPLORER (Файлы и дерево) ===
"files.autoSave" : "afterDelay",
"files.trimTrailingWhitespace" : true,
"explorer.confirmDelete" : true,
"explorer.confirmDragAndDrop" : true,
// === SYSTEM & SECURITY (Система) ===
"security.workspace.trust.untrustedFiles" : "open",
"update.showReleaseNotes" : false,
// === LANGUAGE: C++ ===
"[cpp]": {
"editor.wordBasedSuggestions" : "off",
"editor.semanticHighlighting.enabled" : true,
"editor.stickyScroll.defaultModel" : "foldingProviderModel",
"editor.suggest.insertMode" : "replace"
}
}# 1
# Change battery mode
Fn + Q
# 2
# CONSERVATION MODE
sudo sh -c 'echo 1 > /sys/bus/platform/drivers/ideapad_acpi/VPC2004:00/conservation_mode'# 1
sudo mkdir -p /etc/apt/keyrings
wget -qO - https://dl.xanmod.org/archive.key | sudo gpg --dearmor -vo /etc/apt/keyrings/xanmod-archive-keyring.gpg
# 2
echo "deb [signed-by=/etc/apt/keyrings/xanmod-archive-keyring.gpg] http://deb.xanmod.org $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/xanmod-release.list
# 3
sudo apt update && sudo apt install linux-xanmod-lts-x64v3# 1
sudo sh -c 'echo performance > /sys/devices/system/cpu/cpu*/cpufreq/scaling_governor'
# 2
sudo sh -c 'echo performance > /sys/devices/system/cpu/cpu*/cpufreq/energy_performance_preference'# 1
# /etc/sysctl.d/realtime-lowlatency.conf
# --- CPU & Scheduler ---
# Use schedutil for adaptive frequency scaling with low latency
kernel.sched_latency_ns = 8000000
kernel.sched_min_granularity_ns = 2000000
kernel.sched_wakeup_granularity_ns = 6000000
kernel.sched_migration_cost_ns = 5000000
kernel.sched_child_runs_first = 0
kernel.sched_autogroup_enabled = 0
kernel.sched_rt_runtime_us = -1
kernel.sched_pelt_multiplier = 1
kernel.sched_rt_period_us = 1000000
kernel.sched_cfs_bandwidth_slice_us= 3000
kernel.sched_util_clamp_min = 100
kernel.core_pattern = /dev/null
kernel.printk = 3 3 3 3
# --- Security & Stealth ---
# Hardening the kernel against exploits and forensics
kernel.kexec_load_disabled = 1
kernel.pid_max = 4194304
kernel.kptr_restrict = 2
kernel.yama.ptrace_scope = 1
kernel.dmesg_restrict = 1
kernel.unprivileged_bpf_disabled = 1
kernel.unprivileged_userns_clone = 1
kernel.randomize_va_space = 2
kernel.perf_event_paranoid = 2
fs.suid_dumpable = 0
net.core.bpf_jit_harden = 2
# --- Memory & Virtualization ---
vm.mmap_min_addr = 65536
vm.swappiness = 10
vm.max_map_count = 2097152
vm.vfs_cache_pressure = 30
# --- Laptop & SSD Optimization ---
# Optimizing disk I/O for SSD life and battery power
vm.laptop_mode = 5
vm.dirty_ratio = 10
vm.dirty_background_ratio = 5
vm.dirty_expire_centisecs = 1000
vm.dirty_writeback_centisecs = 1000
# --- Filesystem Protection ---
fs.protected_fifos = 1
fs.protected_hardlinks = 1
fs.protected_regular = 2
fs.protected_symlinks = 1
fs.inotify.max_user_watches = 1048576
# --- Networking (BBR + Low Latency) ---
# High-speed networking with minimum bufferbloat
net.core.default_qdisc = fq
net.ipv4.tcp_congestion_control = bbr
net.core.netdev_max_backlog = 10000
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.core.busy_poll = 50
net.core.busy_read = 50
net.ipv4.tcp_fastopen = 3
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_keepalive_time = 600
net.ipv4.conf.all.rp_filter = 2
net.ipv4.conf.default.rp_filter = 2
net.ipv6.conf.all.use_tempaddr = 2
net.ipv6.conf.default.use_tempaddr = 2
# 2
sudo sysctl --system# 1
# /etc/fstab
# <file system> <mount point> <type> <options> <dump> <pass>
# EFI System Partition
/dev/disk/by-uuid/{YOUR UUID} /boot/efi vfat defaults 0 1
# Root Partition (SSD Optimized)
UUID={YOUR UUID} / ext4 defaults,noatime,data=writeback,journal_ioprio=0,nobarrier,commit=60,errors=remount-ro 0 1
# Swap File (Low priority to keep it as a last resort)
/swapfile none swap sw,pri=1 0 0
# Memory Resident File Systems (Fast & Stealthy)
tmpfs /tmp tmpfs defaults,noatime,mode=1777,size=10G,nosuid,nodev 0 0
tmpfs /var/log tmpfs defaults,noatime,mode=0755,size=256M,nosuid,nodev 0 0
tmpfs /var/tmp tmpfs defaults,noatime,mode=1777,size=1G,nosuid,nodev 0 0# 1
# /etc/systemd/system/fstrim.service.d/override.conf
[Service]
ExecStart=
ExecStart=/sbin/fstrim --all
# --- Stealth Mode (No Logs) ---
StandardOutput=null
StandardError=null
# --- Latency Optimization ---
Nice=19
IOSchedulingClass=3
CPUSchedulingPolicy=idle
# 2
# /etc/systemd/system/fstrim.timer.d/override.conf
[Timer]
OnCalendar=
OnCalendar=daily
AccuracySec=1h
Persistent=true
WakeSystem=false
# 3
sudo systemctl enable --now fstrim
sudo systemctl enable --now fstrim.timer# 1
# /etc/default/grub
GRUB_DEFAULT=0
GRUB_TIMEOUT=3
GRUB_DISTRIBUTOR="Ubuntu realtime-lowlatency"
GRUB_TERMINAL=console
GRUB_COLOR_NORMAL="white/black"
GRUB_COLOR_HIGHLIGHT="black/white"
GRUB_CMDLINE_LINUX=""
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash fbcon=nodefer vsyscall=none pti=on slab_nomerge page_alloc.shuffle=1 mitigations=auto threadirqs rcutree.use_softirq=0 rcutree.kthread_prio=1 skew_tick=1 tsx=off preempt=full intel_pstate=active intel_pstate.hwp_only=1 nouveau.modeset=0 nvidia-drm.modeset=1 i915.fastboot=1 transparent_hugepage=madvise mem_sleep_default=deep zswap.enabled=1 zswap.compressor=zstd zswap.zpool=zsmalloc nvme_core.default_ps_max_latency_us=3000 nvme_core.io_timeout=255 nvme_core.admin_timeout=60 nvme.use_threaded_interrupts=1 nosoftlockup nowatchdog nmi_watchdog=0 audit=0 printk.time=0 loglevel=0 systemd.show_status=0"
# 2
sudo update-grub# 1
# /etc/modprobe.d/blacklist-optimized.conf
# --- Graphics & Framebuffers ---
# Disable open-source Nouveau to prevent conflicts with proprietary NVIDIA driver
blacklist nouveau
options nouveau modeset=0
# Disable legacy framebuffer drivers for old/non-existent GPUs
blacklist nvidiafb
blacklist rivafb
blacklist radeonfb
blacklist aty128fb
blacklist atyfb
blacklist cirrusfb
blacklist cyber2000fb
blacklist cyblafb
blacklist gx1fb
blacklist hgafb
blacklist i810fb
blacklist intelfb
blacklist kyrofb
blacklist lxfb
blacklist matroxfb_base
blacklist neofb
blacklist pm2fb
blacklist s1d13xxxfb
blacklist savagefb
blacklist sisfb
blacklist sstfb
blacklist tdfxfb
blacklist tridentfb
blacklist vesafb
blacklist vfb
blacklist viafb
blacklist vt8623fb
blacklist udlfb
# --- Multimedia & Privacy (Camera/Audio) ---
# Disable webcam (uvcvideo) - Remove this line if you need your camera
blacklist uvcvideo
# Disable legacy PC speaker (beep)
blacklist snd_pcsp
options pcspkr off
# Disable ancient/obsolete sound architectures and cards
blacklist sound
blacklist soundcard
blacklist sequencer
blacklist snd_intel8x0m
blacklist ac97
blacklist ac97_codec
blacklist snd_aw2
blacklist emu10k1
blacklist maestro3
blacklist mpu401
blacklist opl3
blacklist sb
blacklist sb_lib
blacklist ymfpci
# --- Input Devices ---
# Disable generic USB mouse/kb drivers to force specialized HID drivers (reduces overhead)
blacklist usbmouse
blacklist usbkbd
# Disable legacy joystick support (Remove joydev if you plan to use a controller)
blacklist joydev
# Disable MIDI support for legacy hardware
blacklist usb-midi
blacklist v_midi
# Prevent logging of all input events (Security/Performance)
blacklist evbug
# --- Legacy Hardware & Ports ---
# Disable Floppy disk controller
options floppy index=0
blacklist floppy
# Disable Parallel/Printer ports
blacklist parport
blacklist parport_pc
blacklist ppdev
blacklist lp
# Disable FireWire (IEEE 1394)
blacklist firewire_ohci
blacklist firewire_core
blacklist firewire_sbp2
blacklist ohci1394
blacklist ieee1394
# --- Obsolete Network & Storage Drivers ---
# Disable 10/100 Ethernet and ancient wireless cards
blacklist e100
blacklist 8139cp
blacklist 8139too
blacklist b43
blacklist b43legacy
blacklist ssb
# Disable legacy PATA/IDE and SCSI RAID controllers
blacklist pata_acpi
blacklist pata_amd
blacklist ide_pci_generic
blacklist megaraid_sas
blacklist qla2xxx
blacklist mptsas
# --- Miscellaneous ---
# Disable specific hardware debugging/crypto not needed for standard boot
blacklist hfi1
blacklist blowfish
blacklist amd76x_edac
# 2
# /etc/modprobe.d/nvidia.conf
# --- Видеопамять и гибернация ---
# Сохранять видеопамять при переходе в сон (убирает артефакты и падение приложений)
options nvidia NVreg_PreserveVideoMemoryAllocations=1
# ИСПРАВЛЕНО: перенесено в /var/tmp. Папка /tmp полностью очищается при перезагрузке,
# из-за чего прошлые конфиги ломали режим сна (так как папка /tmp/nvidia исчезала).
options nvidia NVreg_TemporaryFilePath=/var/tmp
# --- Максимум производительности шины CPU-GPU ---
# Использовать PAT (Page Attribute Table) — дает бритвенную четкость и скорость передачи текстур
options nvidia NVreg_UsePageAttributeTable=1
# Включить Message Signaled Interrupts — критически снижает инпут-лаг и задержки по HDMI
options nvidia NVreg_EnableMSI=1
# Асинхронные операции с памятью для параллельной обработки кадров
options nvidia NVreg_EnableStreamMemOPs=1
# Отключить нефизическую для ноута шину NvLink (высвобождает ресурсы CPU)
options nvidia NVreg_NvLinkDisable=1
# Включение сопроцессора GSP (убирает микрофризы интерфейса, разгружает CPU)
options nvidia NVreg_EnableGpuFirmware=1
# --- Настройка HDMI, герцовки и питания ---
# PowerMizerEnable=0x1 - контроль частот активен
# GpuPowerMizerMode=0x3 - Адаптивный режим (холодный в браузере, мощный в задачах)
# EnableBrightnessControl=1 - контроль яркости экрана ноутбука
# RMEdgeIntrCheck=0 - отключение проверки прерываний панели (убирает статтеринг на внешнем мониторе)
options nvidia NVreg_RegistryDwords="PowerMizerEnable=0x1;GpuPowerMizerMode=0x3;EnableBrightnessControl=1;RMEdgeIntrCheck=0"
# --- Права доступа к устройствам (стандарт Ubuntu/Debian) ---
options nvidia NVreg_DeviceFileUID=0
options nvidia NVreg_DeviceFileGID=44
options nvidia NVreg_DeviceFileMode=0660
# 3
# /etc/modprobe.d/usbhid.conf
# --- USB HID Latency Optimizations ---
# Set mouse polling rate to 1000Hz (1ms interval) for lower input lag
options usbhid mousepoll=1
# Set joystick/gamepad polling rate to 1000Hz
options usbhid jspoll=1
# Set keyboard polling rate to 1000Hz
options usbhid kbpoll=1
# Increase timeout to 200ms to prevent lag when waking up wireless devices
options usbhid timeout=200
# 4
sudo update-initramfs -u -k all# 1
# /etc/X11/xorg.conf.d/10-nvidia.conf
Section "Device"
Identifier "Nvidia Card"
VendorName "NVIDIA Corporation"
Option "NoLogo" "1"
Option "Coolbits" "31"
Option "TripleBuffer" "true"
Option "AllowEmptyInitialConfiguration" "true"
Option "HWCursor" "true"
EndSection
Section "Screen"
Identifier "Screen0"
Device "Nvidia Card"
Option "metamodes" "nvidia-auto-select +0+0 {ForceCompositionPipeline=Off, ForceFullCompositionPipeline=Off}"
Option "AllowIndirectGLXProtocol" "off"
EndSection
Section "Extensions"
Option "Composite" "Enable"
EndSection# 1
# /etc/environment
# --- System Paths ---
PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin"
# --- OpenMP & Parallelism (Intel Thread Director Adaptive Optimization) ---
OMP_STACKSIZE=8M
OMP_DYNAMIC=true
OMP_WAIT_POLICY=passive
OMP_NESTED=false
# --- Memory & Network (Extreme Performance) ---
GLIBC_TUNABLES="glibc.malloc.trim_threshold=262144:glibc.malloc.mmap_threshold=262144:glibc.malloc.mmap_max=32768:glibc.malloc.arena_max=4"
IONICE_CLASS=best-effort
IONICE_LEVEL=2
VM_OVERCOMMIT_MEMORY=1
RES_OPTIONS="timeout:1 attempts:3 rotate ndots:1"
NETWORK_BUFFER_SIZE=32768
TCP_QUICKACK=1
PYTHONOPTIMIZE=1
# --- Java & Tools ---
_JAVA_OPTIONS="-XX:+UseG1GC -XX:MaxGCPauseMillis=100"
JAVA_TOOL_OPTIONS="-Xms512m -Xmx2g"
# --- NVIDIA (Ultra Low Latency & Stealth) ---
__GLX_VENDOR_LIBRARY_NAME=nvidia
__GL_PRIORITY=HIGH
__GL_GPU_MEMORY_ALLOCATION=100
__GL_ASYNC_FLIP=1
__GL_ALLOW_UNOFFICIAL_PROTOCOL=0
__GL_MaxFramesAllowed=1
__GL_SYNC_TO_VBLANK=0
__GL_VR_ALLOWED=1
__GLX_DRISW=0
__GL_GSYNC_ALLOWED=1
__GL_YIELD=USLEEP
__GL_OPTIMIZE_FOR_LATENCY=1
__GL_LOG_VERBOSE=0
__GL_DEBUG_LEVEL=0
__GL_SHADER_DISK_CACHE=1
__GL_SHADER_DISK_CACHE_PATH="/home/{YOUR USER}/.nvidia-shader-cache"
__GL_SHADER_DISK_CACHE_COMPRESS=1
# --- Mesa & Vulkan (Zero Overhead) ---
MESA_DEBUG=0
MESA_NO_ERROR=1
MESA_GLSL_CACHE_DISABLE=0
MESA_GLTHREAD=1
MESA_SHADER_CACHE_DIR="/home/{YOUR USER}/.mesa_shader_cache"
VK_DRIVER_FRAMETIME_ENABLE=0
vulkan_enable_validation=0
VK_SHADER_CACHE_DISABLE=0
VK_EXT_swapchain_maintenance1=1
VK_PRESENT_MODE=mailbox
# --- Wayland & Compositor ---
GBM_BACKEND=nvidia-drm
WLR_NO_HARDWARE_CURSOR=1
WLR_RENDER_MODE=mailbox
EGL_PLATFORM=wayland
# --- DXVK & Video (Silent & Fast) ---
DXVK_LOG_LEVEL=none
DXVK_STATE_CACHE=1
DXVK_SHADER_DISK_CACHE_PATH="/home/{YOUR USER}/.dxvk-cache"
VDPAU_LOG_LEVEL=0
LIBVA_MESSAGING_LEVEL=0
CUDA_CACHE_PATH="/home/{YOUR USER}/.cuda-cache"
CUDA_LAUNCH_BLOCKING=0
# --- Intel (Efficiency & Hardware Scalability) ---
INTEL_DEBUG=null
INTEL_PERFORMANCE_MODE=1
INTEL_LOW_POWER_ENCODE=1
INTEL_ENABLE_GFX_CLKGATING=1
INTEL_ENABLE_NEW_SCHED=1
INTEL_ENABLE_SSBO=1
INTEL_COMPUTE_SHADER=1
INTEL_HW_BLIT=1
INTEL_COMPRESSION_RENDER_TARGET=1
INTEL_FAST_CLEAR=1
# --- Chromium (Wayland Native + HW Overlays + No Logs) ---
CHROMIUM_FLAGS="--ozone-platform-hint=wayland --enable-gpu-rasterization --enable-zero-copy --enable-native-gpu-memory-buffers --enable-hardware-overlays --enable-features=Vulkan,VulkanFromANGLE,DefaultAngleVulkan,RunVideoAcceleratorOnGpuProcess --ignore-gpu-blocklist --log-level=3 --no-report-upload --disable-logging --disable-breakpad"
# --- GTK, GDK & UI (Minimal Overhead) ---
GTK_ENABLE_ANIMATIONS=0
GDK_BACKEND=wayland
GDK_USE_COMPOSITING=0
GDK_DEBUG=none
NO_AT_BRIDGE=1
# --- SDL & QT ---
SDL_VIDEODRIVER=wayland,x11
QT_QPA_PLATFORM=wayland
QT_LOGGING_RULES="*.debug=false;*.info=false;*.warning=false"
QT_QUICK_NO_ANIMATION=1
QT_OPENGL_NO_ERROR_CHECK=1
# --- Audio & Pipewire (Low Latency Stable) ---
PIPEWIRE_DEBUG=0
PIPEWIRE_ENABLE_3D=1
PIPEWIRE_DISABLE_LATENCY_SMOOTHING=0
PIPEWIRE_CPU_PRIORITY=high
# --- Wine & Steam (Pure Silent) ---
WINEDEBUG=-all
PROTON_LOG=0
STEAM_VERBOSE=0
STEAM_DEBUG=0# --- 1. Rendering & Efficiency ---
# Triple buffering for smoothness
gsettings set org.gnome.mutter experimental-features "['triple-buffering']"
# --- 2. Power Management (Battery Life Optimization) ---
# Automatically trigger power-saver profile when battery is low
gsettings set org.gnome.settings-daemon.plugins.power power-saver-profile-on-low-battery true
# On Battery: Set screen dimming/blanking and suspend after 15 minutes (900 seconds)
gsettings set org.gnome.settings-daemon.plugins.power sleep-inactive-battery-timeout 900
gsettings set org.gnome.settings-daemon.plugins.power sleep-inactive-battery-type 'suspend'
# On AC Power: Never automatically suspend
gsettings set org.gnome.settings-daemon.plugins.power sleep-inactive-ac-type 'nothing'
# --- 3. Interface & UI (Reducing Resource Usage) ---
# Disable animations to save CPU/GPU cycles (crucial for battery and responsiveness)
gsettings set org.gnome.desktop.interface enable-animations false
# Disable window snapping, dynamic workspaces, and hot corners to keep the environment lean
gsettings set org.gnome.mutter edge-tiling false
gsettings set org.gnome.mutter dynamic-workspaces false
gsettings set org.gnome.desktop.interface enable-hot-corners false
# --- 4. Background Processes (Reducing CPU Wakeups) ---
# Disable external search providers and indexing (major battery drainers)
gsettings set org.gnome.desktop.search-providers disable-external true
gsettings set org.gnome.desktop.search-providers disabled "['org.gnome.Contacts.desktop', 'org.gnome.Documents.desktop', 'org.gnome.Nautilus.desktop']"
# Stop automatic update downloads to save Wi-Fi power and background CPU usage
gsettings set org.gnome.software download-updates false
# Disable technical problem reporting (whoopsie/telemetry) to minimize background noise
gsettings set org.gnome.desktop.privacy report-technical-problems false
# --- 5. Peripherals & Accessibility ---
# Mouse: Flat acceleration profile for raw, predictable input
gsettings set org.gnome.desktop.peripherals.mouse accel-profile 'flat'
gsettings set org.gnome.desktop.peripherals.mouse speed 0
# Keyboard: Faster typing response with reduced delay and high repeat rate
gsettings set org.gnome.desktop.peripherals.keyboard delay 300
gsettings set org.gnome.desktop.peripherals.keyboard repeat-interval 30# 1
# /etc/apt/apt.conf.d/99-optimized
APT::Get::Assume-Yes "false";
APT::Get::Quiet "true";
APT::Acquire::Retries "3";
Acquire::By-Hash "yes";
Acquire::Check-Valid-Until "true";
Dir::Cache::archives "/var/cache/apt/archives";
Dir::Cache::pkgcache "/var/cache/apt/pkgcache.bin";
Dir::Cache::srcpkgcache "/var/cache/apt/srcpkgcache.bin";
APT::Install-Recommends "false";
APT::Install-Suggests "false";
DPKg::Options {
"--force-confdef";
"--force-confold";
}
APT::Periodic::Update-Package-Lists "0";
APT::Periodic::Download-Upgradeable-Packages "0";
APT::Periodic::AutocleanInterval "0";
APT::Periodic::Unattended-Upgrade "0";
APT::Periodic::Verbose "0";
Dir::Log "/dev/null";
Dir::Log::Terminal "/dev/null";# 1
sudo apt update && sudo apt install rtirq-init
sudo systemctl enable --now rtirq
# 2
# /etc/default/rtirq
# --- Priority List ---
RTIRQ_NAME_LIST="xhci nvme snd"
RTIRQ_HIGH_LIST="xhci nvme"
# --- Priority Settings ---
RTIRQ_PRIO_HIGH=85
RTIRQ_PRIO_DECR=5
RTIRQ_PRIO_LOW=60
RTIRQ_RESET_ALL=0
RTIRQ_SCHED="fifo"
RTIRQ_SPREAD=1
# --- CPU Affinity ---
RTIRQ_CPUS=""
IRQBALANCE_BANNED_CPUS=""
# --- Real-Time Clocks ---
RTIRQ_NON_THREADED="rtc0"
# --- Stealth & Performance ---
RTIRQ_DELAY=5
RTIRQ_CHECK_INTERVAL=3
RTIRQ_DEBUG=0
RTIRQ_VERBOSE=0# 1
sudo apt update && sudo apt install thermald
sudo systemctl enable --now thermald
# 2
# /etc/thermald/thermal-conf.xml
<?xml version="1.0"?>
<ThermalConfiguration>
<Platform>
<Name>Lenovo LOQ Custom Performance</Name>
<ThermalZones>
<ThermalZone>
<Type>cpu</Type>
<TripPoints>
<TripPoint>
<Type>passive</Type>
<Temperature>85000</Temperature>
<ControlType>PARALLEL</ControlType>
<CoolingDeviceBind>
<Type>intel_pstate</Type>
</CoolingDeviceBind>
</TripPoint>
<TripPoint>
<Type>passive</Type>
<Temperature>95000</Temperature>
<ControlType>PARALLEL</ControlType>
<CoolingDeviceBind>
<Type>rapl_controller</Type>
</CoolingDeviceBind>
</TripPoint>
<TripPoint>
<Type>critical</Type>
<Temperature>105000</Temperature>
<Control>shutdown</Control>
</TripPoint>
</TripPoints>
</ThermalZone>
</ThermalZones>
</Platform>
</ThermalConfiguration># 1
sudo apt update && sudo apt install tlp tlp-rdw
sudo systemctl enable --now tlp
# 2
# /etc/tlp.conf
# ------------------------------------------------------------------------------
# TLP Configuration - Optimized for LOQ Low-Latency & Battery Life
# ------------------------------------------------------------------------------
TLP_ENABLE = 1
TLP_DEFAULT_MODE = AC
TLP_PERSISTENT_DEFAULT = 0
# --- CPU Management ---
CPU_SCALING_GOVERNOR_ON_AC = performance
CPU_SCALING_GOVERNOR_ON_BAT = powersave
CPU_SCALING_MIN_FREQ_ON_AC = 0
CPU_SCALING_MAX_FREQ_ON_AC = 0
CPU_SCALING_MIN_FREQ_ON_BAT = 800000
CPU_SCALING_MAX_FREQ_ON_BAT = 0
CPU_BOOST_ON_AC = 1
CPU_BOOST_ON_BAT = 0
CPU_ENERGY_PERF_POLICY_ON_AC = performance
CPU_ENERGY_PERF_POLICY_ON_BAT = balance_power
CPU_MAX_PERF_ON_BAT = 30
# --- GPU Management (NVIDIA/Radeon) ---
NVIDIA_DYNAMIC_POWERMGMT_ON_AC = 0
NVIDIA_DYNAMIC_POWERMGMT_ON_BAT = 1
# --- Storage & PCIe ---
PCIE_ASPM_ON_AC = performance
PCIE_ASPM_ON_BAT = powersave
# --- Connectivity ---
DEVICES_TO_DISABLE_ON_STARTUP = "bluetooth"
DEVICES_TO_DISABLE_ON_BAT = "bluetooth"
# --- Battery Care ---
BATT_CONSERVATION_MODE = 1
RESTORE_THRESHOLDS_ON_AC = 1
# --- Platform & Sound ---
SOUND_POWER_SAVE_ON_AC = 0
SOUND_POWER_SAVE_ON_BAT = 1
SOUND_POWER_SAVE_TIMEOUT = 60
PLATFORM_PROFILE_ON_AC = performance
PLATFORM_PROFILE_ON_BAT = balanced# 1
sudo apt update && sudo apt install zram-tools
sudo systemctl enable --now zramswap
# 2
# /etc/default/zramswap
ENABLED=true
PERCENTAGE=50
ALGO=zstd
BLOCKSIZE=512K
AUTOSTART=true
LOGGING=false
PRIORITY=100
MAX_DEVICES=1
COMP_STREAMS=6
MEM_LIMIT=0
WRITEBACK_THRESHOLD=0# 1
sudo apt update && sudo apt install preload
sudo systemctl enable --now preload
# 2
# /etc/preload.conf
[model]
cycle = 30
usecorrelation = true
minsize = 50000
memtotal = 80
memfree = 20
memcached = 30
[system]
doscan = true
dopredict = true
autosave = 3600
mapprefix = /usr/;/lib/;/var/cache/;!/dev
exeprefix = !/usr/sbin/;!/usr/local/sbin/;/usr/bin/;/usr/local/bin/
processes = 50
sortstrategy = 0
debug = false# 1
# /etc/NetworkManager/NetworkManager.conf
[main]
plugins=ifupdown,keyfile
connectivity-check=no
[ifupdown]
managed=false
[device]
wifi.scan-rand-mac-address=yes
wifi.powersave=2
[connection]
wifi.cloned-mac-address=random
ethernet.cloned-mac-address=random
ipv4.dhcp-timeout=10
# 2
sudo systemctl restart NetworkManager# 1
sudo update && sudo apt install pipewire pipewire-pulse pipewire-audio-client-libraries wireplumber libspa-0.2-bluetooth
# 2
# /home/{YOUR USER}/.config/pipewire/pipewire.conf
context.properties = {
log.level = 0
core.daemon = true
core.name = pipewire-0
default.clock.rate = 48000
default.clock.allowed-rates = [ 44100 48000 88200 96000 192000 ]
default.clock.quantum = 256
default.clock.min-quantum = 128
default.clock.max-quantum = 1024
default.clock.quantum-limit = 8192
clock.power-of-two-quantum = true
link.max-buffers = 16
mem.allow-mlock = true
module.x11.bell = false
module.access = true
module.jackdbus-detect = true
}
context.spa-libs = {
audio.convert.* = audioconvert/libspa-audioconvert
avb.* = avb/libspa-avb
api.alsa.* = alsa/libspa-alsa
api.vulkan.* = vulkan/libspa-vulkan
api.jack.* = jack/libspa-jack
support.* = support/libspa-support
}
context.modules = [
{ name = libpipewire-module-rt
args = { nice.level = -7 rt.prio = 70 }
flags = [ ifexists nofail ]
}
{ name = libpipewire-module-rtkit
flags = [ ifexists nofail ]
}
{ name = libpipewire-module-protocol-native }
{ name = libpipewire-module-profiler }
{ name = libpipewire-module-metadata }
{ name = libpipewire-module-spa-device-factory }
{ name = libpipewire-module-spa-node-factory }
{ name = libpipewire-module-client-node }
{ name = libpipewire-module-client-device }
{ name = libpipewire-module-portal flags = [ ifexists nofail ] }
{ name = libpipewire-module-access condition = [ { module.access = true } ] }
{ name = libpipewire-module-adapter }
{ name = libpipewire-module-link-factory }
{ name = libpipewire-module-session-manager }
{ name = libpipewire-module-x11-bell flags = [ ifexists nofail ] condition = [ { module.x11.bell = true } ] }
{ name = libpipewire-module-jackdbus-detect flags = [ ifexists nofail ] condition = [ { module.jackdbus-detect = true } ] }
]
context.objects = [
{ factory = spa-node-factory
args = {
factory.name = api.alsa.pcm.sink
node.name = HighQuality-Sink
node.description = "ALSA Output (Low-Latency)"
audio.format = "S32LE"
audio.rate = 48000
audio.channels = 2
resample.quality = 15
channelmix.normalize = false
channelmix.upmix = false
channelmix.upmix-method = psd
node.latency = 256/48000
node.pause-on-idle = false
api.alsa.headroom = 256
api.alsa.period-size = 128
api.alsa.disable-batch = true
api.alsa.bypass-plugins = true
priority.session = 1000
priority.driver = 1000
session.suspend-timeout-seconds = 0
}
}
{ factory = spa-node-factory
args = {
factory.name = api.alsa.pcm.source
node.name = HighQuality-Source
node.description = "ALSA Input (Low-Latency)"
audio.format = "S32LE"
audio.rate = 48000
audio.channels = 2
resample.quality = 15
node.latency = 256/48000
node.pause-on-idle = false
api.alsa.headroom = 256
api.alsa.period-size = 128
api.alsa.disable-batch = true
api.alsa.bypass-plugins = true
priority.session = 1000
priority.driver = 1000
session.suspend-timeout-seconds = 0
}
}
]
alsa.properties = {
alsa.access = [ MMAP_INTERLEAVED MMAP_NONINTERLEAVED ]
alsa.format = [ "S32LE" "F32LE" ]
alsa.rate = { min=48000 max=48000 }
alsa.channels = { min=2 max=2 }
alsa.period-bytes = { min=1024 max=65536 }
alsa.buffer-bytes = { min=4096 max=131072 }
alsa.volume-method = "physical"
}
stream.properties = {
node.latency = 256/48000
resample.quality = 15
dither.method = "shibata"
}
pulse.properties = {
server.address = ["unix:native"]
vm.overrides = { pulse.min.quantum = 128/48000 }
}
pulse.cmd = [
{ cmd = "load-module" args = "module-always-sink" flags = [] }
]
pulse.rules = [
{ matches = [] actions = {} }
]
# 3
# /home/{YOUR USER}/.config/pipewire/pipewire-pulse.conf
context.properties = {
log.level = 0
default.clock.rate = 48000
default.clock.quantum = 256
default.clock.min-quantum = 128
default.clock.max-quantum = 1024
default.clock.quantum-limit = 8192
clock.power-of-two-quantum = true
link.max-buffers = 16
mem.allow-mlock = true
}
context.spa-libs = {
audio.convert.* = audioconvert/libspa-audioconvert
support.* = support/libspa-support
}
context.modules = [
{ name = libpipewire-module-rt
args = { nice.level = -7 rt.prio = 70 }
flags = [ ifexists nofail ]
}
{ name = libpipewire-module-rtkit
flags = [ ifexists nofail ]
}
{ name = libpipewire-module-protocol-native }
{ name = libpipewire-module-client-node }
{ name = libpipewire-module-adapter }
{ name = libpipewire-module-metadata }
{ name = libpipewire-module-protocol-pulse }
]
context.exec = []
pulse.cmd = [
{ cmd = "load-module" args = "module-always-sink" flags = [] }
]
stream.properties = {
node.latency = 256/48000
resample.quality = 15
channelmix.normalize = false
channelmix.upmix = false
channelmix.upmix-method = psd
audio.format = "S32LE"
dither.method = "shibata"
}
pulse.properties = {
server.address = ["unix:native"]
pulse.default.format = "S32LE"
vm.overrides = { pulse.min.quantum = 128/48000 }
}
pulse.rules = [
{ matches = [] actions = {} }
]
# 4
# /home/{YOUR USER}/.config/pipewire/client.conf
context.properties = {
log.level = 0
}
context.spa-libs = {
audio.convert.* = audioconvert/libspa-audioconvert
api.alsa.* = alsa/libspa-alsa
support.* = support/libspa-support
}
context.modules = [
{ name = libpipewire-module-protocol-native }
{ name = libpipewire-module-client-node }
{ name = libpipewire-module-client-device }
{ name = libpipewire-module-adapter }
{ name = libpipewire-module-metadata }
{ name = libpipewire-module-session-manager }
]
stream.properties = {
audio.format = "S32LE"
audio.rate = 48000
node.latency = 256/48000
resample.quality = 15
dither.method = "shibata"
channelmix.normalize = false
channelmix.mix-lfe = true
channelmix.upmix = false
channelmix.upmix-method = psd
}
# 5
# /home/{YOUR USER}/.config/pipewire/client-rt.conf
context.properties = {
log.level = 0
default.clock.rate = 48000
default.clock.allowed-rates = [ 44100 48000 88200 96000 192000 ]
default.clock.quantum = 256
default.clock.min-quantum = 128
default.clock.max-quantum = 1024
default.clock.quantum-limit = 8192
clock.power-of-two-quantum = true
link.max-buffers = 16
mem.allow-mlock = true
}
context.spa-libs = {
audio.convert.* = audioconvert/libspa-audioconvert
api.alsa.* = alsa/libspa-alsa
support.* = support/libspa-support
}
context.modules = [
{ name = libpipewire-module-rt
args = { nice.level = -7 rt.prio = 70 }
flags = [ ifexists nofail ]
}
{ name = libpipewire-module-rtkit
flags = [ ifexists nofail ]
}
{ name = libpipewire-module-protocol-native }
{ name = libpipewire-module-client-node }
{ name = libpipewire-module-client-device }
{ name = libpipewire-module-adapter }
{ name = libpipewire-module-metadata }
{ name = libpipewire-module-session-manager }
]
stream.properties = {
node.latency = 256/48000
resample.quality = 15
dither.method = "shibata"
channelmix.normalize = false
channelmix.mix-lfe = true
channelmix.upmix = false
channelmix.upmix-method = psd
audio.format = "S32LE"
audio.rate = 48000
}
alsa.properties = {
alsa.access = [ MMAP_INTERLEAVED MMAP_NONINTERLEAVED ]
alsa.format = [ "S32LE" "F32LE" ]
alsa.rate = { min=48000 max=48000 }
alsa.channels = { min=2 max=2 }
alsa.period-bytes = { min=1024 max=65536 }
alsa.buffer-bytes = { min=4096 max=131072 }
alsa.volume-method = "physical"
}
# 6
# /home/{YOUR USER}/.config/pipewire/jack.conf
context.properties = {
log.level = 0
default.clock.rate = 48000
default.clock.quantum = 256
default.clock.min-quantum = 128
default.clock.max-quantum = 1024
default.clock.quantum-limit = 8192
clock.power-of-two-quantum = true
link.max-buffers = 16
mem.allow-mlock = true
}
context.spa-libs = {
audio.convert.* = audioconvert/libspa-audioconvert
support.* = support/libspa-support
}
context.modules = [
{ name = libpipewire-module-rt
args = { nice.level = -7 rt.prio = 70 }
flags = [ ifexists nofail ]
}
{ name = libpipewire-module-rtkit
flags = [ ifexists nofail ]
}
{ name = libpipewire-module-protocol-native }
{ name = libpipewire-module-client-node }
{ name = libpipewire-module-metadata }
]
stream.properties = {
audio.format = "S32LE"
audio.rate = 48000
node.latency = 256/48000
resample.quality = 15
dither.method = "shibata"
channelmix.normalize = false
channelmix.mix-lfe = true
channelmix.upmix = false
channelmix.upmix-method = psd
}
jack.properties = {
node.latency = 256/48000
node.rate = 48000
node.quantum = 256
node.lock-quantum = true
jack.self-connect-mode = allow
jack.merge-monitor = false
resample.quality = 15
dither.method = "shibata"
}
# 7
# /home/{YOUR USER}/.config/wireplumber/wireplumber.conf.d/50-alsa-lowlatency.conf
monitor.alsa.rules = [
{
matches = [
{
device.name = "~alsa_card.*"
}
]
actions = {
update-props = {
audio.format = "S32LE"
audio.rate = 48000
audio.channels = 2
audio.position = [ FL FR ]
resample.quality = 15
channelmix.normalize = false
channelmix.upmix = false
channelmix.mix-lfe = false
api.alsa.period-size = 128
api.alsa.headroom = 256
api.alsa.disable-batch = true
api.alsa.bypass-plugins = true
session.suspend-timeout-seconds = 0
priority.session = 1000
priority.driver = 1000
}
}
}
]
# 8
systemctl --user restart pipewire.service pipewire-pulse.service wireplumber.service# 1
# /etc/pulse/daemon.conf
high-priority = yes
nice-level = 0
realtime-scheduling = yes
realtime-priority = 5
exit-idle-time = 20
resample-method = speex-float-10
avoid-resampling = yes
enable-remixing = no
default-sample-format = s32le
default-sample-rate = 48000
alternate-sample-rate = 44100
default-sample-channels = 2
default-channel-map = front-left,front-right
default-fragments = 8
default-fragment-size-msec = 64
flat-volumes = no
enable-deferred-volume = yes
deferred-volume-safety-margin-usec = 1000
log-target = null# 1
# /home/{YOUR USER}/.config/dxvk/dxvk.conf
# --- DXGI (Latency & Display) ---
dxgi.maxFrameLatency = 1
dxgi.syncInterval = 0
dxgi.numBackBuffers = 3
dxgi.tearFree = auto
dxgi.hardwareCursor = True
dxgi.deferSurfaceRelease = True
dxgi.nvapiHack = False
dxgi.enableHDR = False
# --- D3D11 (Performance & Precision) ---
d3d11.dcSingleUseMode = auto
d3d11.relaxedBarriers = True
d3d11.allowMapFlagNoWait = True
d3d11.strictDivision = False
d3d11.samplerAnisotropy = 8
d3d11.maxTessFactor = 12
d3d11.disableTearing = auto
d3d11.invariantPosition = True
# --- D3D9 (Legacy & Compatibility) ---
d3d9.presentInterval = 0
d3d9.maxFrameLatency = 1
d3d9.evictManagedOnUnlock = auto
d3d9.supportDFFormats = True
d3d9.supportX4R4G4B4 = True
d3d9.supportD32 = True
d3d9.allowDoNotWait = True
d3d9.longMad = False
# --- Shader Cache (No Stutters) ---
dxvk.shaderCache = True
dxvk.shaderCachePath = /home/{YOUR USER}/.dxvk-cache
dxvk.numCompilerThreads = 0
# --- Stealth (No Logs / No HUD) ---
d3d9.hud = 0
d3d11.hud = 0
dxgi.hud = 0
d3d9.debug = False
d3d11.debug = False
dxgi.debug = False
d3d11.apitraceMode = False# 1
sudo apt update && sudo apt install vkbasalt
# 2
# /home/{YOUR USER}/.config/vkBasalt/vkBasalt.conf
# --- General Settings & Effects Pipeline ---
[general]
effects = smaa:lut:vibrance:cas
output_resolution = 0 0
# --- Contrast Adaptive Sharpening (AMD CAS - Идеальная чёткость) ---
[cas]
enabled = true
sharpness = 0.4
# --- Color & LUT (3D Lookup Table) ---
[lut]
enabled = true
lut_path = /home/{YOUR USER}/.config/vkBasalt/luts/lut.cube
intensity = 0.6
# --- Color Vibrance ---
[vibrance]
enabled = true
amount = 0.25
# --- Subpixel Morphological Anti-Aliasing (Качественное сглаживание) ---
[smaa]
enabled = true
smaa_type = smaa_1x
smaa_threshold = 0.05
smaa_max_search_steps = 32
# --- Disabled Filters (Unused / Performance Waste) ---
[clarity]
enabled = false
[fxaa]
enabled = false
[sharpen]
enabled = false
[tonemap]
enabled = false
[denoise]
enabled = false
# 3
# /home/{YOUR USER}/.config/vkBasalt/luts/lut.cube
Download LUTs from the Internet# Protection when creating a new user
sudo chattr +i /etc/passwd
sudo chattr +i /etc/shadow# 1
sudo apt update && sudo apt install usbguard
sudo systemctl enable --now usbguard
sudo usbguard generate-policy | sudo tee /etc/usbguard/rules.conf
# 2
# /etc/usbguard/usbguard-daemon.conf
# --- Основные правила и пути ---
RuleFile=/etc/usbguard/rules.conf
RuleFolder=/etc/usbguard/rules.d/
# Стратегия по умолчанию для неизвестных устройств: Намертво Блокировать
ImplicitPolicyTarget=block
# Безопасный старт: доверяем устройствам, подключенным ДО включения ПК
PresentDevicePolicy=keep
PresentControllerPolicy=keep
# Жесткий контроль: любое устройство, воткнутое ПОСЛЕ старта ПК, летит под фильтр
InsertedDevicePolicy=apply-policy
# --- Конфиденциальность и права ---
AuthorizedDefault=none
RestoreControllerDeviceState=false
HidePII=true
# Доступ к управлению USBGuard — строго для root
IPCAllowedUsers=root
IPCAllowedGroups=root
IPCAccessControlFiles=/etc/usbguard/IPCAccessControl.d/
# --- Движок и бэкенд ---
DeviceRulesWithPort=false
DeviceManagerBackend=uevent
# Stealth-режим: Ноль дискового ввода-вывода на логи аудита
AuditBackend=FileAudit
AuditFilePath=/dev/null
# 3
sudo systemctl restart usbguard# 1
sudo apt update && sudo apt install clamav clamav-daemon
# 2
# /etc/clamav/clamd.conf
# --- Настройки сокета и прав ---
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket true
LocalSocketGroup clamav
LocalSocketMode 660
User clamav
# --- Мониторинг в реальном времени (On-Access) ---
OnAccessIncludePath /home/{YOUR USER}
OnAccessExcludeUname clamav
OnAccessPrevention false
OnAccessMaxFileSize 300M
OnAccessMaxThreads 4
# --- Производительность и ресурсы ---
MaxThreads 4
MaxConnectionQueueLength 15
ReadTimeout 180
SelfCheck 3600
ExitOnOOM false
ForceToDisk false
# --- What to scan ---
ScanELF true
ScanPE true
ScanPDF true
ScanHTML true
ScanXMLDOCS true
ScanSWF true
DetectPUA true
AlgorithmicDetection true
# --- Лимиты безопасности движка ---
MaxScanSize 500M
MaxFileSize 100M
StreamMaxLength 30M
MaxRecursion 10
MaxFiles 5000
# --- Полный Stealth: Ноль дисковых логов ---
LogSyslog false
LogVerbose false
LogRotate false
LogTime false
LogClean false
Debug false
# --- Базы данных ---
DatabaseDirectory /var/lib/clamav
OfficialDatabaseOnly true
Bytecode true
BytecodeSecurity TrustSigned
# 3
# /etc/clamav/freshclam.conf
DatabaseOwner clamav
DatabaseDirectory /var/lib/clamav
# --- Полный Stealth: Ноль дисковых логов ---
LogVerbose false
LogSyslog false
LogTime false
LogFileMaxSize 0
# --- Настройки обновлений ---
Checks 6
DatabaseMirror database.clamav.net
MaxAttempts 5
ScriptedUpdates yes
CompressLocalDatabase yes
Bytecode true
# --- Сетевые таймауты ---
ConnectTimeout 30
ReceiveTimeout 60
# --- Сигнал демону (указываем правильный конфиг) ---
NotifyClamd /etc/clamav/clamd.conf
Foreground false
Debug false# 1
# /etc/systemd/journald.conf
[Journal]
Storage=volatile
RuntimeMaxUse=64M
MaxRetentionSec=2h
Compress=no
ForwardToSyslog=no
ForwardToConsole=no
ForwardToKMsg=no
ForwardToWall=no
SyncIntervalSec=0
RateLimitIntervalSec=0
RateLimitBurst=0
Seal=no
# 2
sudo systemctl restart systemd-journald# 1
sudo apt update && sudo apt install gamemode
# 2
# /etc/gamemode.ini
[general]
reaper_freq = 5
desiredgov = performance
defaultgov = powersave
softrealtime = on
renice = -10
inhibit_screensaver = 1
[cpu]
# Отключаем парковку для мгновенного отклика
park_cores = no
# Отключаем pin_cores, чтобы планировщик ядра сам распределял потоки по P и E ядрам
pin_cores = no
[gpu]
# Разрешаем управление питанием через NVML
apply_gpu_optimisations = accept-responsibility
# Убираем жесткий powermizer, оставляем GPU на откуп драйверу в режиме Perf
nv_powermizer_mode = 0
[sch]
# Включаем принудительное переключение планировщика для игровых потоков
timeout = 5
[logging]
verbose = false
logfile = /dev/null# 1
# --- SYSTEM ARCHITECTURE & FLATPAK SETTINGS ---
# Enable 32-bit support (Essential for Wine/Steam) and setup Flatpak
sudo dpkg --add-architecture i386
sudo apt update
# Install Flatpak and GNOME Software integration
sudo apt install -y flatpak gnome-software-plugin-flatpak gnome-software
# Add Flathub repository and Flatseal (GUI for managing Flatpak permissions)
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
flatpak install -y flathub com.github.tchx84.Flatseal
# 2
# --- PERFORMANCE & KERNEL TOOLS ---
# Low-latency kernels, thermal management, and power optimization
sudo apt install -y \
fwupd linux-lowlatency linux-headers-lowlatency \
rtirq-init tuned tuned-utils thermald auto-cpufreq \
zram-tools tlp tlp-rdw
# 3
# --- GRAPHICS & MESA DRIVERS ---
# Vulkan drivers, hardware acceleration (VA-API/VDPAU), and visual enhancers
sudo apt install -y \
mesa-vulkan-drivers mesa-vulkan-drivers:i386 \
mesa-va-drivers mesa-vdpau-drivers mesa-utils \
vulkan-tools vkbasalt libvulkan1 libvulkan1:i386 \
libvulkan-dev libvulkan-dev:i386 libvdpau-va-gl1 libva2 libvdpau1
# 4
# --- DEVELOPMENT ENVIRONMENT ---
# Compilers, build systems, and Python environment
sudo apt install -y \
build-essential meson ninja-build pkg-config make cmake \
python3 python3-pip python3-venv python3-dev python3-tk \
libglib2.0-dev libudev-dev libssl-dev libcap-dev libavif-dev libpixman-1-dev
# 5
# --- MULTIMEDIA & AUDIO DEV ---
# PipeWire, ALSA, and PulseAudio development headers for low-latency audio
sudo apt install -y \
libpipewire-0.3-dev libspa-0.2-dev libpulse-dev \
libjack-jackd2-dev libsndfile1-dev libasound2-dev \
libasound2-plugins:i386 pulseaudio-utils ffmpeg vlc
# 6
# --- GAMING & WINE COMPATIBILITY ---
# Comprehensive 32-bit and 64-bit libraries for running Windows apps/games
sudo apt install -y \
wine wine64 wine32 winetricks \
lib32gcc-s1 lib32stdc++6 libc6:i386 lib32z1 lib32ncurses6 lib32tinfo6 \
libbz2-1.0:i386 libssl3:i386 libsdl2-dev libsdl2-2.0-0:i386 libudev1:i386 \
libgl1:i386 libglx-mesa0:i386 libx11-dev libx11-6:i386 \
libxext6:i386 libxrandr2:i386 libxss1:i386 libxcursor1:i386 \
libfontconfig1:i386 libfreetype6:i386 libjack-jackd2-0 libjack-jackd2-0:i386 \
libv4l-0:i386 libgtk2.0-0:i386 libxcomposite-dev libxdamage-dev \
libxfixes-dev libxrandr-dev libxcursor-dev libxrender-dev \
libxxf86vm-dev libxtst-dev libxres-dev libxmu-dev \
libwayland-dev libdrm-dev
# 7
# --- SYSTEM UTILITIES & GUI ---
# Tools for system monitoring, cleaning, and UI customization
sudo apt install -y \
inxi htop git curl zip unzip p7zip-full tar xvfb \
gnome-shell-extension-manager gnome-tweaks gnome-screenshot gnome-color-manager \
ufw stacer synaptic