View source for Debian Unstable

Update 2019-03-30: wow, this page sure is out of date! My next install is going to be [[Arch]] anyway. It's been a fantastic 20 years, Debian, and I'm happy to write you a letter of recommendation.

==Installing Sid==
* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].
** These won't work from time to time, especially when base packages are being upgraded (the installer will expect a version which is no longer available)
* Prepare external firmware, if necessary
* Boot the ISO, selecting an Expert install
==Post-install==
===sudo===
* Install <tt>sudo</tt>. Edit <tt>/etc/sudoers</tt> (using <tt>visudo</tt>) to allow the sudo group to run all commands without a password:
<code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>
* Add user account to sudo group
===debconf===
* <tt>dpkg-reconfigure debconf</tt>, set minimum priority to Low
* <tt>dpkg-reconfigure -a</tt>, reconfiguring all debconf questions
===boot process===
* Edit <tt>/etc/default/rcS</tt>, enabling FSCKFIX, VERBOSE, RAMRUN, RAMLOCK
* Edit <tt>/etc/default/grub</tt>, removing "quiet" from GRUB_CMDLINE_LINUX_DEFAULT
** Rerun <tt>update-grub</tt>
* Ensure LABEL or UUID directives are being used in <tt>/etc/fstab</tt>
** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references
* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.
* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
====networking-related====
* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.
** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay
* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>
* Install openssh-server. Disable password-based authentication (use only keys).
** Debian already ships OpenSSH configured to use Protocol 2 only.
** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>
** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>
* Add <tt>iptables</tt> rules to <tt>/etc/network/interfaces</tt>
** Filter unused RFC 1938 addresses via the RAW table and [http://ipset.netfilter.org/tips.html ipset]
** Filter INVALID and UNKNOWN states via the INPUT table (if appropriate) (requires connection tracking)
* Enable IPv4 and IPv6 forwarding, if appropriate, in <tt>/etc/sysctl.conf</tt>:
** <tt>net.ipv4.ip_forward=1</tt>
** <tt>net.ipv6.conf.all.forwarding=1</tt> (note: disables Stateless Address Autoconfiguration!)

==Multiuser==
* Clone my home directory from https://github.com/dankamongmen/dankhome.git
* Set a color for the local machine in <tt>.pcolor</tt>
** This is based on the binary <tt>bin/color</tt>, and hooks to PS1 in <tt>.bashrc</tt>
* Install compiz and gdm3.
* If SSH keys will be homed on this (hopefully local) machine...
** Install <tt>libpam-ssh</tt>, and configure it
** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand
* Remove <tt>info</tt> and install <tt>pinfo</tt>
* ''FIXME'' plenty more..
==External Applications==
===[[Perforce]]===
* Grab the amd64 [http://www.perforce.com/perforce/downloads/linuxlist.html#linux26x86_64 Perforce binaries]
* Unpack the P4V tarball to local/
* Update the local/ symlink: <tt>ln -sf abspath local/p4</tt> 
* Set up the p4 command line utility: <tt>chmod 775 p4</tt> and <tt>mv p4 local/p4/bin</tt>
===Flash===
* So long as there's no native 64-bit Linux client, you can either...
** Use the GNU [http://www.gnu.org/s/gnash/ Gnash] plugin, which works kinda
** Use the 32-bit player with nspluginwrapper, from [[Debian_Unstable#Debian_Multimedia|Debian Multimedia]]
===Debian Multimedia===
* See the page at http://debian-multimedia.org/
* Add <tt>deb http://www.debian-multimedia.org sid main non-free</tt> to <tt>/etc/apt/sources.list</tt>, and install <tt>debian-multimedia-keyring</tt>