Debian Unstable - revision history

Dank at 23:56, 30 March 2019

2019-03-30T23:56:48Z

← Older revision		Revision as of 23:56, 30 March 2019
Line 1:		Line 1:
			Update 2019-03-30: wow, this page sure is out of date! My next install is going to be [[Arch]] anyway. It's been a fantastic 20 years, Debian, and I'm happy to write you a letter of recommendation.

	==Installing Sid==		==Installing Sid==
	* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].		* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].

Dank: add iptables and sysctl.conf

2011-04-05T17:00:47Z

add iptables and sysctl.conf

← Older revision		Revision as of 17:00, 5 April 2011
Line 19:		Line 19:
	** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references		** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references
	* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.		* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.
			* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
			====networking-related====
	* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.		* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.
	** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay		** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay
	* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>		* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>
	* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
	* Install openssh-server. Disable password-based authentication (use only keys).		* Install openssh-server. Disable password-based authentication (use only keys).
	** Debian already ships OpenSSH configured to use Protocol 2 only.		** Debian already ships OpenSSH configured to use Protocol 2 only.
	** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>		** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>
	** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>		** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>
			* Add <tt>iptables</tt> rules to <tt>/etc/network/interfaces</tt>
			** Filter unused RFC 1938 addresses via the RAW table and [http://ipset.netfilter.org/tips.html ipset]
			** Filter INVALID and UNKNOWN states via the INPUT table (if appropriate) (requires connection tracking)
			* Enable IPv4 and IPv6 forwarding, if appropriate, in <tt>/etc/sysctl.conf</tt>:
			** <tt>net.ipv4.ip_forward=1</tt>
			** <tt>net.ipv6.conf.all.forwarding=1</tt> (note: disables Stateless Address Autoconfiguration!)

	==Multiuser==		==Multiuser==
	* Clone my home directory from https://github.com/dankamongmen/dankhome.git		* Clone my home directory from https://github.com/dankamongmen/dankhome.git

Dank at 17:33, 25 March 2011

2011-03-25T17:33:05Z

← Older revision		Revision as of 17:33, 25 March 2011
Line 1:		Line 1:
	==Installing Sid==		==Installing Sid==
	* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].		* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].
	** These won't work from time to time, ~~especiallye~~ when base packages are being upgraded (the installer will expect a version which is no longer available)		** These won't work from time to time, especially when base packages are being upgraded (the installer will expect a version which is no longer available)
	* Prepare external firmware, if necessary		* Prepare external firmware, if necessary
	* Boot the ISO, selecting an Expert install		* Boot the ISO, selecting an Expert install
Line 21:		Line 21:
	* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.		* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.
	** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay		** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay
			* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>
	* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.		* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
	* Install openssh-server. Disable password-based authentication (use only keys).		* Install openssh-server. Disable password-based authentication (use only keys).
	** Debian already ships OpenSSH configured to use Protocol 2 only.		** Debian already ships OpenSSH configured to use Protocol 2 only.
			** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>
			** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>
	==Multiuser==		==Multiuser==
	* Clone my home directory from https://github.com/dankamongmen/dankhome.git		* Clone my home directory from https://github.com/dankamongmen/dankhome.git
Line 40:		Line 43:
	* Update the local/ symlink: <tt>ln -sf abspath local/p4</tt>		* Update the local/ symlink: <tt>ln -sf abspath local/p4</tt>
	* Set up the p4 command line utility: <tt>chmod 775 p4</tt> and <tt>mv p4 local/p4/bin</tt>		* Set up the p4 command line utility: <tt>chmod 775 p4</tt> and <tt>mv p4 local/p4/bin</tt>
			===Flash===
			* So long as there's no native 64-bit Linux client, you can either...
			** Use the GNU [http://www.gnu.org/s/gnash/ Gnash] plugin, which works kinda
			** Use the 32-bit player with nspluginwrapper, from [[Debian_Unstable#Debian_Multimedia\|Debian Multimedia]]
			===Debian Multimedia===
			* See the page at http://debian-multimedia.org/
			* Add <tt>deb http://www.debian-multimedia.org sid main non-free</tt> to <tt>/etc/apt/sources.list</tt>, and install <tt>debian-multimedia-keyring</tt>

Dank at 23:00, 10 March 2011

2011-03-10T23:00:36Z

← Older revision		Revision as of 23:00, 10 March 2011
Line 18:		Line 18:
	* Ensure LABEL or UUID directives are being used in <tt>/etc/fstab</tt>		* Ensure LABEL or UUID directives are being used in <tt>/etc/fstab</tt>
	** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references		** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references
	* Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'		* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.
			* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.
	** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay		** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay
	* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.		* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
	* ~~Remove <tt>info</tt> and install <tt>pinfo</tt>~~		* Install openssh-server. Disable password-based authentication (use only keys).
			** Debian already ships OpenSSH configured to use Protocol 2 only.
	==Multiuser==		==Multiuser==
	* Clone my home directory from https://github.com/dankamongmen/dankhome.git		* Clone my home directory from https://github.com/dankamongmen/dankhome.git
Line 30:		Line 32:
	** Install <tt>libpam-ssh</tt>, and configure it		** Install <tt>libpam-ssh</tt>, and configure it
	** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand		** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand
			* Remove <tt>info</tt> and install <tt>pinfo</tt>
	* ''FIXME'' plenty more..		* ''FIXME'' plenty more..
	==External Applications==		==External Applications==

Dank at 11:27, 4 March 2011

2011-03-04T11:27:54Z

← Older revision		Revision as of 11:27, 4 March 2011
Line 1:		Line 1:
	==Installing Sid==		==Installing Sid==
	* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].		* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].
	** These won't work from time to time, ~~especially~~ when base packages are being upgraded (the installer will expect a version which is no longer available)		** These won't work from time to time, especiallye when base packages are being upgraded (the installer will expect a version which is no longer available)
	* Prepare external firmware, if necessary		* Prepare external firmware, if necessary
	* Boot the ISO, selecting an Expert install		* Boot the ISO, selecting an Expert install
	==Post-install==		==Post-install==
			===sudo===
	* Install <tt>sudo</tt>. Edit <tt>/etc/sudoers</tt> (using <tt>visudo</tt>) to allow the sudo group to run all commands without a password:		* Install <tt>sudo</tt>. Edit <tt>/etc/sudoers</tt> (using <tt>visudo</tt>) to allow the sudo group to run all commands without a password:
	<code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>		<code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>
	* Add user account to sudo group		* Add user account to sudo group
			===debconf===
	* <tt>dpkg-reconfigure debconf</tt>, set minimum priority to Low		* <tt>dpkg-reconfigure debconf</tt>, set minimum priority to Low
	* <tt>dpkg-reconfigure -a</tt>, reconfiguring all debconf questions		* <tt>dpkg-reconfigure -a</tt>, reconfiguring all debconf questions
			===boot process===
	* Edit <tt>/etc/default/rcS</tt>, enabling FSCKFIX, VERBOSE, RAMRUN, RAMLOCK		* Edit <tt>/etc/default/rcS</tt>, enabling FSCKFIX, VERBOSE, RAMRUN, RAMLOCK
	* Edit <tt>/etc/default/grub</tt>, removing "quiet" from GRUB_CMDLINE_LINUX_DEFAULT		* Edit <tt>/etc/default/grub</tt>, removing "quiet" from GRUB_CMDLINE_LINUX_DEFAULT
	** Rerun <tt>update-grub</tt>		** Rerun <tt>update-grub</tt>
			* Ensure LABEL or UUID directives are being used in <tt>/etc/fstab</tt>
			** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references
	* Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'		* Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'
	** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay		** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay
			* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
			* Remove <tt>info</tt> and install <tt>pinfo</tt>
			==Multiuser==
	* Clone my home directory from https://github.com/dankamongmen/dankhome.git		* Clone my home directory from https://github.com/dankamongmen/dankhome.git
	* Set a color for the local machine in <tt>.pcolor</tt>		* Set a color for the local machine in <tt>.pcolor</tt>
	** This is based on the binary <tt>bin/color</tt>, and hooks to PS1 in <tt>.bashrc</tt>		** This is based on the binary <tt>bin/color</tt>, and hooks to PS1 in <tt>.bashrc</tt>
	* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
	* Remove <tt>info</tt> and install <tt>pinfo</tt>
	* Install compiz and gdm3.		* Install compiz and gdm3.
	* Install <tt>libpam-ssh</tt>, and configure it		* If SSH keys will be homed on this (hopefully local) machine...
			** Install <tt>libpam-ssh</tt>, and configure it
	** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand		** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand
	* ''FIXME'' plenty more..		* ''FIXME'' plenty more..

Dank at 10:24, 22 February 2011

2011-02-22T10:24:59Z

← Older revision		Revision as of 10:24, 22 February 2011
Line 24:		Line 24:
	** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand		** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand
	* ''FIXME'' plenty more..		* ''FIXME'' plenty more..
			==External Applications==
			===[[Perforce]]===
			* Grab the amd64 [http://www.perforce.com/perforce/downloads/linuxlist.html#linux26x86_64 Perforce binaries]
			* Unpack the P4V tarball to local/
			* Update the local/ symlink: <tt>ln -sf abspath local/p4</tt>
			* Set up the p4 command line utility: <tt>chmod 775 p4</tt> and <tt>mv p4 local/p4/bin</tt>

Dank at 01:19, 22 February 2011

2011-02-22T01:19:27Z

← Older revision		Revision as of 01:19, 22 February 2011
Line 20:		Line 20:
	* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.		* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
	* Remove <tt>info</tt> and install <tt>pinfo</tt>		* Remove <tt>info</tt> and install <tt>pinfo</tt>
			* Install compiz and gdm3.
			* Install <tt>libpam-ssh</tt>, and configure it
			** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand
	* ''FIXME'' plenty more..		* ''FIXME'' plenty more..

Dank at 00:40, 22 February 2011

2011-02-22T00:40:52Z

← Older revision		Revision as of 00:40, 22 February 2011
Line 1:		Line 1:
	==~~New Installs~~==		==Installing Sid==
			* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].
			** These won't work from time to time, especially when base packages are being upgraded (the installer will expect a version which is no longer available)
			* Prepare external firmware, if necessary
			* Boot the ISO, selecting an Expert install
			==Post-install==
	* Install <tt>sudo</tt>. Edit <tt>/etc/sudoers</tt> (using <tt>visudo</tt>) to allow the sudo group to run all commands without a password:		* Install <tt>sudo</tt>. Edit <tt>/etc/sudoers</tt> (using <tt>visudo</tt>) to allow the sudo group to run all commands without a password:
	<code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>		<code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>

Dank at 00:37, 22 February 2011

2011-02-22T00:37:20Z

← Older revision		Revision as of 00:37, 22 February 2011
Line 1:		Line 1:
	==New Installs==		==New Installs==
	* Install <tt>sudo</tt>, allow the sudo group to run all commands without a password:		* Install <tt>sudo</tt>. Edit <tt>/etc/sudoers</tt> (using <tt>visudo</tt>) to allow the sudo group to run all commands without a password:
	<code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>		<code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>
	* Add user account to sudo group		* Add user account to sudo group

Dank at 00:36, 22 February 2011

2011-02-22T00:36:41Z

← Older revision		Revision as of 00:36, 22 February 2011
Line 14:		Line 14:
	** This is based on the binary <tt>bin/color</tt>, and hooks to PS1 in <tt>.bashrc</tt>		** This is based on the binary <tt>bin/color</tt>, and hooks to PS1 in <tt>.bashrc</tt>
	* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.		* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
			* Remove <tt>info</tt> and install <tt>pinfo</tt>
	* ''FIXME'' plenty more..		* ''FIXME'' plenty more..