Debian Unstable

(8 intermediate revisions by the same user not shown)

Line 1:

==~~New Installs~~==

Update 2019-03-30: wow, this page sure is out of date! My next install is going to be [[Arch]] anyway. It's been a fantastic 20 years, Debian, and I'm happy to write you a letter of recommendation.

* Install <tt>sudo</tt>, allow the sudo group to run all commands without a password:

==Installing Sid==

* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].

** These won't work from time to time, especially when base packages are being upgraded (the installer will expect a version which is no longer available)

* Prepare external firmware, if necessary

* Boot the ISO, selecting an Expert install

==Post-install==

===sudo===

* Install <tt>sudo</tt>. Edit <tt>/etc/sudoers</tt> (using <tt>visudo</tt>) to allow the sudo group to run all commands without a password:

<code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>

* Add user account to sudo group

===debconf===

* <tt>dpkg-reconfigure debconf</tt>, set minimum priority to Low

* <tt>dpkg-reconfigure -a</tt>, reconfiguring all debconf questions

===boot process===

* Edit <tt>/etc/default/rcS</tt>, enabling FSCKFIX, VERBOSE, RAMRUN, RAMLOCK

* Edit <tt>/etc/default/grub</tt>, removing "quiet" from GRUB_CMDLINE_LINUX_DEFAULT

** Rerun <tt>update-grub</tt>

* Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'

* Ensure LABEL or UUID directives are being used in <tt>/etc/fstab</tt>

** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references

* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.

* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.

====networking-related====

* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.

** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay

* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>

* Install openssh-server. Disable password-based authentication (use only keys).

** Debian already ships OpenSSH configured to use Protocol 2 only.

** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>

** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>

* Add <tt>iptables</tt> rules to <tt>/etc/network/interfaces</tt>

** Filter unused RFC 1938 addresses via the RAW table and [http://ipset.netfilter.org/tips.html ipset]

** Filter INVALID and UNKNOWN states via the INPUT table (if appropriate) (requires connection tracking)

* Enable IPv4 and IPv6 forwarding, if appropriate, in <tt>/etc/sysctl.conf</tt>:

** <tt>net.ipv4.ip_forward=1</tt>

** <tt>net.ipv6.conf.all.forwarding=1</tt> (note: disables Stateless Address Autoconfiguration!)

==Multiuser==

* Clone my home directory from https://github.com/dankamongmen/dankhome.git

* Set a color for the local machine in <tt>.pcolor</tt>

** This is based on the binary <tt>bin/color</tt>, and hooks to PS1 in <tt>.bashrc</tt>

* Install ~~<tt>mingetty</tt>~~. ~~Open~~ <tt>~~/etc/inittab~~</tt> and ~~convert 'getty 38400' to 'mingetty'.~~

* Install compiz and gdm3.

* If SSH keys will be homed on this (hopefully local) machine...

** Install <tt>libpam-ssh</tt>, and configure it

** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand

* Remove <tt>info</tt> and install <tt>pinfo</tt>

* ''FIXME'' plenty more..

==External Applications==

===[[Perforce]]===

* Grab the amd64 [http://www.perforce.com/perforce/downloads/linuxlist.html#linux26x86_64 Perforce binaries]

* Unpack the P4V tarball to local/

* Update the local/ symlink: <tt>ln -sf abspath local/p4</tt>

* Set up the p4 command line utility: <tt>chmod 775 p4</tt> and <tt>mv p4 local/p4/bin</tt>

===Flash===

* So long as there's no native 64-bit Linux client, you can either...

** Use the GNU [http://www.gnu.org/s/gnash/ Gnash] plugin, which works kinda

** Use the 32-bit player with nspluginwrapper, from [[Debian_Unstable#Debian_Multimedia|Debian Multimedia]]

===Debian Multimedia===

* See the page at http://debian-multimedia.org/

* Add <tt>deb http://www.debian-multimedia.org sid main non-free</tt> to <tt>/etc/apt/sources.list</tt>, and install <tt>debian-multimedia-keyring</tt>

Debian Unstable: Difference between revisions

Dank (talk | contribs)

@@ Line 1: / Line 1: @@
-==New Installs==
+Update 2019-03-30: wow, this page sure is out of date! My next install is going to be [[Arch]] anyway. It's been a fantastic 20 years, Debian, and I'm happy to write you a letter of recommendation.
-* Install <tt>sudo</tt>, allow the sudo group to run all commands without a password:
+==Installing Sid==
+* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].
+** These won't work from time to time, especially when base packages are being upgraded (the installer will expect a version which is no longer available)
+* Prepare external firmware, if necessary
+* Boot the ISO, selecting an Expert install
+==Post-install==
+===sudo===
+* Install <tt>sudo</tt>. Edit <tt>/etc/sudoers</tt> (using <tt>visudo</tt>) to allow the sudo group to run all commands without a password:
 <code>%sudo ALL=(ALL:ALL) NOPASSWD:ALL</code>
 * Add user account to sudo group
+===debconf===
 * <tt>dpkg-reconfigure debconf</tt>, set minimum priority to Low
 * <tt>dpkg-reconfigure -a</tt>, reconfiguring all debconf questions
+===boot process===
 * Edit <tt>/etc/default/rcS</tt>, enabling FSCKFIX, VERBOSE, RAMRUN, RAMLOCK
 * Edit <tt>/etc/default/grub</tt>, removing "quiet" from GRUB_CMDLINE_LINUX_DEFAULT
 ** Rerun <tt>update-grub</tt>
-* Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'
+* Ensure LABEL or UUID directives are being used in <tt>/etc/fstab</tt>
+** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references
+* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.
+* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
+====networking-related====
+* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.
 ** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay
+* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>
+* Install openssh-server. Disable password-based authentication (use only keys).
+** Debian already ships OpenSSH configured to use Protocol 2 only.
+** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>
+** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>
+* Add <tt>iptables</tt> rules to <tt>/etc/network/interfaces</tt>
+** Filter unused RFC 1938 addresses via the RAW table and [http://ipset.netfilter.org/tips.html ipset]
+** Filter INVALID and UNKNOWN states via the INPUT table (if appropriate) (requires connection tracking)
+* Enable IPv4 and IPv6 forwarding, if appropriate, in <tt>/etc/sysctl.conf</tt>:
+** <tt>net.ipv4.ip_forward=1</tt>
+** <tt>net.ipv6.conf.all.forwarding=1</tt> (note: disables Stateless Address Autoconfiguration!)
+==Multiuser==
 * Clone my home directory from https://github.com/dankamongmen/dankhome.git
 * Set a color for the local machine in <tt>.pcolor</tt>
 ** This is based on the binary <tt>bin/color</tt>, and hooks to PS1 in <tt>.bashrc</tt>
-* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
+* Install compiz and gdm3.
+* If SSH keys will be homed on this (hopefully local) machine...
+** Install <tt>libpam-ssh</tt>, and configure it
+** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand
 * Remove <tt>info</tt> and install <tt>pinfo</tt>
 * ''FIXME'' plenty more..
+==External Applications==
+===[[Perforce]]===
+* Grab the amd64 [http://www.perforce.com/perforce/downloads/linuxlist.html#linux26x86_64 Perforce binaries]
+* Unpack the P4V tarball to local/
+* Update the local/ symlink: <tt>ln -sf abspath local/p4</tt>
+* Set up the p4 command line utility: <tt>chmod 775 p4</tt> and <tt>mv p4 local/p4/bin</tt>
+===Flash===
+* So long as there's no native 64-bit Linux client, you can either...
+** Use the GNU [http://www.gnu.org/s/gnash/ Gnash] plugin, which works kinda
+** Use the 32-bit player with nspluginwrapper, from [[Debian_Unstable#Debian_Multimedia|Debian Multimedia]]
+===Debian Multimedia===
+* See the page at http://debian-multimedia.org/
+* Add <tt>deb http://www.debian-multimedia.org sid main non-free</tt> to <tt>/etc/apt/sources.list</tt>, and install <tt>debian-multimedia-keyring</tt>