Get latest macos installer

softwareupdate --list-full-installers

softwareupdate --fetch-full-installer --full-installer-version VERSION

Create macos bootable usb

sudo '/Applications/Install macOS Sequoia.app/Contents/Resources/createinstallmedia' --volume /Volumes/Untitled --nointeraction

Install macos updates

softwareupdate --list

softwareupdate --all --install --force

Command line tools for xcode

xcode-select --install

Install homebrew

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

Homebrew taps

brew tap homebrew/cask

brew tap miccal/miccal

Homebrew installs

HOMEBREW_CASK_OPTS="--no-quarantine" brew install m-little-snitch

cd "$(brew --caskroom)"; rm -r m-little-snitch; cd

HOMEBREW_CASK_OPTS="--no-quarantine" brew install bash curl git pass pinentry-mac vim m-dropbox m-keepingyouawake m-pearcleaner m-rectangle-pro

cd "$(brew --caskroom)"; rm -r m-dropbox; cd

HOMEBREW_CASK_OPTS="--no-quarantine" brew install m-mactex

HOMEBREW_CASK_OPTS="--no-quarantine" brew install aspell gh gnuplot jupyterlab mas pdftoipe pwgen rsync transmission-cli m-apparency m-etrecheckpro m-google-chrome m-ipe m-launchcontrol m-libreoffice m-mathpix-snipping-tool m-microsoft-outlook m-microsoft-teams m-mpv m-obs m-omnidisksweeper m-onedrive m-processspy m-proxyman m-sagemath m-slack m-suspicious-package m-tex-live-utility m-texshop m-textbuddy m-tor-browser m-vmware-horizon-client m-wolfram-engine m-zoomus

Homebrew maintenance

brew update && brew outdated --greedy --verbose && brew upgrade --dry-run && brew cleanup -s && rm -r -f "$(brew --cache)"

brew deps --installed --tree

brew deps --installed --graph

Set homebrew bash as default

List current shells:

cat /etc/shells

Add homebrew bash:

sudo vim /etc/shells

Add to last line for Intel:

/usr/local/bin/bash

or for Arm:

/opt/homebrew/bin/bash

Check list:

cat /etc/shells

Set default shell for Intel:

chsh -s /usr/local/bin/bash NAME

or for Arm:

chsh -s /opt/homebrew/bin/bash NAME

Symlinks

ln -s ~/Library/CloudStorage/Dropbox/.homebrew_github_api_token ~/.homebrew_github_api_token

ln -s ~/Library/CloudStorage/Dropbox/.password-store ~/.password-store

Pass

pass init GPGID

pass insert -m NAME

pass generate -f -n GEN LENGTH

pass NAME

pass remove NAME

pass edit NAME

Gpg

gpg --full-generate-key

gpg --export GPGID > ~/Library/CloudStorage/Dropbox/.public.key

gpg --export-secret-key GPGID > ~/Library/CloudStorage/Dropbox/.private.key

gpg --import ~/Library/CloudStorage/Dropbox/.public.key

gpg --allow-secret-key-import --import ~/Library/CloudStorage/Dropbox/.private.key

gpg --list-keys --keyid-format short

gpg --list-secret-keys --keyid-format long

gpg --armor --export GPGID

gpg --edit-key GPGID

trust

If gpg: WARNING: unsafe permissions on homedir '~/.gnupg' is shown, run

chmod 700 ~/.gnupg

Gpg-agent

Create configuration file:

cd ~/.gnupg; touch gpg-agent.conf; textedit gpg-agent.conf

Add the following lines:

default-cache-ttl 0
max-cache-ttl 0

Reload gpg-agent:

gpgconf --kill gpg-agent; gpgconf --launch gpg-agent

Add pinentry-mac:

echo "pinentry-program $(which pinentry-mac)" >> ~/.gnupg/gpg-agent.conf

Note that for Intel:

|-> which pinentry-mac
/usr/local/bin/pinentry-mac

while for Arm:

|-> which pinentry-mac
/opt/homebrew/bin/pinentry-mac

Git setup

git config --global user.email "[email protected]"

git config --global user.name "miccal"

git config --global user.signingKey 'Miccal Matthews <[email protected]>'

git config --global commit.gpgSign true

git config --global gpg.program $(which gpg)

Note that for Intel:

|-> which gpg
/usr/local/bin/gpg

while for Arm:

|-> which gpg
/opt/homebrew/bin/gpg

Show/hide hidden files

defaults write com.apple.finder AppleShowAllFiles TRUE; killall Finder

defaults write com.apple.finder AppleShowAllFiles FALSE; killall Finder

Filevault

List enabled users:

sudo fdesetup list

Remove Guest user:

sudo fdesetup remove -user Guest