# CachyOS Audit & Optimization — June 7, 2026

**System:** CachyOS, kernel 7.0.11-1-cachyos (EEVDF), Ryzen 3700X (8C/16T), RTX 3070 8GB, 16GB RAM + 15.5GB ZRAM zstd swap

**Audit commands executed via SSH:** `ssh raymond@192.168.1.111 'bash -c '"'"'...'"'"'`

## Key Findings

### Storage
- **Primary:** nvme0n1 954G btrfs — 211G used / 737G free (23%)
- **Secondary NVMe:** nvme1n1 932G (Sabrent Rocket 4.0 Plus) — UNUSED, has old Windows partitions (EFI 200MB + MSR 16M + NTFS 465G + Recovery 780M)
- **HDD:** sda 3.6T (Seagate ST4000DM000) — UNUSED, NTFS
- **Boot:** nvme0n1p1 4G vfat — 577M used (15%)

### Cleanup Savings
- Pacman cache: 8.8G → 5.2G (paccache -r -k 1, saved 3.6G)
- Yay AUR cache: 3.0G → 2.7M (yay -Scc, saved ~3G)
- NPM cache: 1.7G → 182M (npm cache clean --force)
- Gradle cache: 6.4G — untouched (no stale jars, all recent)
- Snapper: 50 → 10 snapshots (deleted 104-143, kept 144-153)
- Empty home dirs removed: Documents, Music, Videos, Public, Deb_Server, unspooled-remote

### Optimization Applied
- SSH: PasswordAuthentication disabled, PubkeyAuthentication yes, PermitRootLogin no
- Mirrors reranked: Arch top 98.5 MB/s, CachyOS top 45.1 MB/s
- System already up to date

### Gaps
1. Second NVMe + HDD completely unused (~4.5TB total)
2. No fail2ban installed
3. systemd-oomd disabled
4. No dotfiles repo
5. 193 unsafe shutdowns on nvme0n1 (SMART PASSED, 1% wear)
6. Discord app (774M) in .config — not cache, do not remove

## Reproduce

To run a similar audit on another CachyOS box:

```bash
# Phase 1: Gather
ssh user@host 'bash -c '"'"'df -h; free -h; nvidia-smi; uname -r; pacman -Q | wc -l; du -sh /var/cache/pacman/pkg/ ~/.cache/yay/ ~/.npm/ ~/.gradle/ ~/.local/share/Steam/'"'"''

# Phase 2: Clean
ssh user@host 'bash -c '"'"'sudo paccache -r -k 2 && sudo paccache -ruk0 && yay -Scc --noconfirm && npm cache clean --force && sudo snapper -c root delete 104-143'"'"''

# Phase 3: Optimize
ssh user@host 'bash -c '"'"'sudo sed -i "s/^PasswordAuthentication yes/PasswordAuthentication no/" /etc/ssh/sshd_config && sudo systemctl reload sshd'"'"''
```