FQS (Fedora Quick Start)

Fedora Quick Start is an interactive, TUI-driven post-installation script to get your fresh Fedora system set up, hardened, and ready for daily use.

If Secureblue is a bit too "hardcore" for you, but you still want a solid, secure, and performant base, this script might be enough for you.

Features

The script uses a standard Whiptail terminal interface. You just check off the features you want upfront, hit enter, and the script will handle the rest unattended.

Core System

• Updates: Performs a full system upgrade.
• Repositories: Enables RPM Fusion (Free/Non-Free) and Flathub.
• DNF Optimization: Configures dnf.conf for parallel downloads, caching, and better speed.
• Automation: Optionally sets up dnf-automatic for silent security updates.

Hardening & Privacy

• Kernel & Network: Applies Secureblue-inspired sysctl hardening, randomizes MAC addresses, and sets Firewalld to DROP.
• Hardcore Kernel Hardening Args: Applies "Hardcore" kernel hardening arguments via GRUB.
• Strict Flatpak Overrides: Revokes overly broad filesystem and device permissions globally, and installs Flatseal so you can selectively re-enable access per app.
• Secure DNS (DoT): Enables system-wide DNS-over-TLS via systemd-resolved with selectable providers (Cloudflare, Quad9, AdGuard, or Custom IPs).
• Filesystem Security: Blacklists obscure, historically vulnerable filesystems (cramfs, hfs, udf, etc.) to prevent kernel exploits via malicious media.
• Physical Security: Installs and enables usbguard and fail2ban.
• Secure Boot: Creates and enrolls custom Secure Boot keys via sbctl.
• Tor & VPNs: Easily install the Tor daemon/browser, IVPN, or Mullvad.

Gaming & Software

• Gaming: Installs Steam along with the latest Proton-GE release.
• Windows Apps: Installs WinBoat for seamless Windows app support via Podman.
• Browsers: Choose between Helium, Trivalent, Brave (auto-debloated), Chromium, or Librewolf.
• Custom Software: Prompt to install any extra DNF or Flatpak packages you need.

Developer & Quality of Life

• Dev Tools: Installs essential tools (Git, Node, Go, Python, etc.) and your choice of editor (Zed, VSCodium, or NeoVim+NvChad).
• Git/SSH: Automatically generates SSH keys and sets up your global Git config.
• Bash Prompt: Installs a clean, custom bash prompt showing Git branches and current directories.
• Hardware Tweaks: Patches Apple keyboard fn keys and adds Dracut flags for Bluetooth keyboard support during LUKS decryption.

---

Run

You can run this script with a single command without downloading it manually:

sh -c "$(curl -sS [https://raw.githubusercontent.com/vil/fqs/master/fqs](https://raw.githubusercontent.com/vil/fqs/master/fqs))"

Installation

If you prefer to clone the repository and review the code locally before running:

Clone the repository:

git clone [https://github.com/vil/fqs.git](https://github.com/vil/fqs.git) && cd fqs

Make the script executable:

chmod +x fqs

Run the script:

./fqs

Contributing

If you are a Fedora user and want to improve this, feel free to open a pull request.

Credits

Secureblue for their hardening configurations.

License

This source code is under the GNU General Public License, version 3.