I compiled some post-installation things to do after installing fedora
Edit /etc/dnf/dnf.conf and add these lines:
defaultyes=True
max_parallel_downloads=20
deltarpm=False # AFAIK this is now depricated
Install dependencies
# For Workstation and Server
sudo dnf install clevis clevis-luks clevis-dracut clevis-udisks2 clevis-systemd
# For Silverblue, Kinoite, ublue etc...
sudo rpm-ostree install clevis clevis-luks clevis-dracut clevis-udisks2 clevis-systemd
Read this section from the ArchWiki article. Select these carefully.
After that store the unlock key in the TPM chip.
sudo clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"7,11"}'
If the system asks for an unlock password again just unbind the clevis key and rebind like
sudo clevis luks list -d /dev/nvme0n1p3 -s 1 # get the tpm key's slot
sudo clevis luks unbind -d /dev/nvme0n1p3 -s 1 # unbind said key
sudo clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"7,11"}' # re-bind key
# run dracut
Edit plymouth ask password
sudo systemctl edit systemd-ask-password-plymouth.service
and add
[Service]
ExecStartPre=/bin/sleep 10
After that create this dracut file
sudoedit /etc/dracut.conf.d/systemd-ask-password-plymouth.conf
With the contents:
install_items+=" /etc/systemd/system/systemd-ask-password-plymouth.service.d/override.conf "
Rebuild initrd for the initrd to contain the changes
# For Workstation
sudo dracut -f
# For Silverblue, Kinoite, ublue and other Atomics
sudo rpm-ostree initramfs --enable
Enable rpmfusion
# run in bash, not fish!
sudo dnf install https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm
sudo dnf groupupdate multimedia --setop="install_weak_deps=False" --exclude=PackageKit-gstreamer-plugin
sudo dnf groupupdate sound-and-video
# Firefox HW acceleration
sudo dnf install ffmpeg libva libva-utils
# aptX BT codec
sudo dnf install pipewire-codec-aptx
in Firefox set these 2 keys in about:config
gfx.webrender.enabled = True
media.ffmpeg.vaapi.enabled = True
I always recommend the adw-gtk3 theme. It can be installed simply by running
sudo dnf copr enable nickavem/adw-gtk3
sudo dnf install adw-gtk3
Set in in gnome-tweaks.
Important
Fedora 37+ now ships unfiltered Flathub! This step is not needed anymore I usually find Fedora's filter on flatpak annoying so just do this:
flatpak remote-delete flathub
flatpak remote-add flathub https://flathub.org/repo/flathub.flatpakrepo