Debian Unstable

(3 intermediate revisions by the same user not shown)

Line 1:

Update 2019-03-30: wow, this page sure is out of date! My next install is going to be [[Arch]] anyway. It's been a fantastic 20 years, Debian, and I'm happy to write you a letter of recommendation.

==Installing Sid==

* Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].

** These won't work from time to time, ~~especiallye~~ when base packages are being upgraded (the installer will expect a version which is no longer available)

** These won't work from time to time, especially when base packages are being upgraded (the installer will expect a version which is no longer available)

* Prepare external firmware, if necessary

* Boot the ISO, selecting an Expert install

Line 18:

Line 20:

* Ensure LABEL or UUID directives are being used in <tt>/etc/fstab</tt>

** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references

* Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'

* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.

* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.

====networking-related====

* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.

** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay

* Install <tt>~~mingetty~~</tt>~~. Open~~ <tt>/etc/~~inittab~~</tt> and ~~convert 'getty 38400' to 'mingetty'~~.

* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>

* ~~Remove~~ <tt>~~info~~</tt> ~~and install~~ <tt>~~pinfo~~</tt>

* Install openssh-server. Disable password-based authentication (use only keys).

** Debian already ships OpenSSH configured to use Protocol 2 only.

** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>

** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>

* Add <tt>iptables</tt> rules to <tt>/etc/network/interfaces</tt>

** Filter unused RFC 1938 addresses via the RAW table and [http://ipset.netfilter.org/tips.html ipset]

** Filter INVALID and UNKNOWN states via the INPUT table (if appropriate) (requires connection tracking)

* Enable IPv4 and IPv6 forwarding, if appropriate, in <tt>/etc/sysctl.conf</tt>:

** <tt>net.ipv4.ip_forward=1</tt>

** <tt>net.ipv6.conf.all.forwarding=1</tt> (note: disables Stateless Address Autoconfiguration!)

==Multiuser==

* Clone my home directory from https://github.com/dankamongmen/dankhome.git

Line 30:

Line 45:

** Install <tt>libpam-ssh</tt>, and configure it

** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand

* Remove <tt>info</tt> and install <tt>pinfo</tt>

* ''FIXME'' plenty more..

==External Applications==

Line 37:

Line 53:

* Update the local/ symlink: <tt>ln -sf abspath local/p4</tt>

* Set up the p4 command line utility: <tt>chmod 775 p4</tt> and <tt>mv p4 local/p4/bin</tt>

===Flash===

* So long as there's no native 64-bit Linux client, you can either...

** Use the GNU [http://www.gnu.org/s/gnash/ Gnash] plugin, which works kinda

** Use the 32-bit player with nspluginwrapper, from [[Debian_Unstable#Debian_Multimedia|Debian Multimedia]]

===Debian Multimedia===

* See the page at http://debian-multimedia.org/

* Add <tt>deb http://www.debian-multimedia.org sid main non-free</tt> to <tt>/etc/apt/sources.list</tt>, and install <tt>debian-multimedia-keyring</tt>

Debian Unstable: Difference between revisions

Dank (talk | contribs)

@@ Line 1: / Line 1: @@
+Update 2019-03-30: wow, this page sure is out of date! My next install is going to be [[Arch]] anyway. It's been a fantastic 20 years, Debian, and I'm happy to write you a letter of recommendation.
 ==Installing Sid==
 * Acquire the [http://www.debian.org/devel/debian-installer/ daily businesscard ISO].
-** These won't work from time to time, especiallye when base packages are being upgraded (the installer will expect a version which is no longer available)
+** These won't work from time to time, especially when base packages are being upgraded (the installer will expect a version which is no longer available)
 * Prepare external firmware, if necessary
 * Boot the ISO, selecting an Expert install
@@ Line 18: / Line 20: @@
 * Ensure LABEL or UUID directives are being used in <tt>/etc/fstab</tt>
 ** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references
-* Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'
+* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.
+* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
+====networking-related====
+* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.
 ** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay
-* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
+* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>
-* Remove <tt>info</tt> and install <tt>pinfo</tt>
+* Install openssh-server. Disable password-based authentication (use only keys).
+** Debian already ships OpenSSH configured to use Protocol 2 only.
+** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>
+** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>
+* Add <tt>iptables</tt> rules to <tt>/etc/network/interfaces</tt>
+** Filter unused RFC 1938 addresses via the RAW table and [http://ipset.netfilter.org/tips.html ipset]
+** Filter INVALID and UNKNOWN states via the INPUT table (if appropriate) (requires connection tracking)
+* Enable IPv4 and IPv6 forwarding, if appropriate, in <tt>/etc/sysctl.conf</tt>:
+** <tt>net.ipv4.ip_forward=1</tt>
+** <tt>net.ipv6.conf.all.forwarding=1</tt> (note: disables Stateless Address Autoconfiguration!)
 ==Multiuser==
 * Clone my home directory from https://github.com/dankamongmen/dankhome.git
@@ Line 30: / Line 45: @@
 ** Install <tt>libpam-ssh</tt>, and configure it
 ** Recently, this can be done entirely inside of debconf -- no editing of PAM configs by hand
+* Remove <tt>info</tt> and install <tt>pinfo</tt>
 * ''FIXME'' plenty more..
 ==External Applications==
@@ Line 37: / Line 53: @@
 * Update the local/ symlink: <tt>ln -sf abspath local/p4</tt>
 * Set up the p4 command line utility: <tt>chmod 775 p4</tt> and <tt>mv p4 local/p4/bin</tt>
+===Flash===
+* So long as there's no native 64-bit Linux client, you can either...
+** Use the GNU [http://www.gnu.org/s/gnash/ Gnash] plugin, which works kinda
+** Use the 32-bit player with nspluginwrapper, from [[Debian_Unstable#Debian_Multimedia|Debian Multimedia]]
+===Debian Multimedia===
+* See the page at http://debian-multimedia.org/
+* Add <tt>deb http://www.debian-multimedia.org sid main non-free</tt> to <tt>/etc/apt/sources.list</tt>, and install <tt>debian-multimedia-keyring</tt>