Changes between Version 3 and Version 4 of install_debian
- Timestamp:
- Aug 22, 2007, 5:41:43 PM (18 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
install_debian
v3 v4 3 3 Assumptions: The server has two identically sized hard drives 4 4 5 Ideally - you should boot using a Debian installer that uses the serial 6 console. If you can't - just install the normal way. 5 Ideally - you should boot using a Debian installer that uses the serial console. If you can't - just install the normal way. 7 6 8 7 === Prepare your laptop - Screen === … … 14 13 }}} 15 14 16 * Connect your serial cable (or USB - serial cable) from your laptop to the 17 server. 18 19 You may want to check dmesg after plugging in the cable to see which device 20 is being used. You should have a line along the lines of: 21 22 usb 3-1: PL-2303 converter now attached to ttyUSB0 15 * Connect your serial cable (or USB - serial cable) from your laptop to the server. You may want to check dmesg after plugging in the cable to see which device is being used. You should have a line along the lines of: usb 3-1: PL-2303 converter now attached to ttyUSB0 23 16 24 17 * Start screen with: … … 31 24 === Install Linux === 32 25 26 ==== Initial steps ==== 27 33 28 * Put in Daniel's Serial Console debian installer and boot (note - if you don't have a serial installer, use a normal installer and a keyboard and monitor attached to the server). 34 29 35 30 * At the boot prompt hit enter to install the 2.6 kernel 36 37 ==== Initial steps ====38 31 39 32 * [Skipping easy steps] … … 91 84 * After returning to the main disk config menu, click on the LVM #1 and configure it to use ext3 and /. 92 85 * Click on the #2 lvm disk and configure it as swap 93 94 86 95 87 ==== Afer reboot ==== … … 229 221 * Configure ssh to only accept connections with auth keys (unless this is a server that should be accessible by members). Edit /etc/ssh/sshd_config. 230 222 231 223 * Uncomment and change the !ChallengeResponseAuthentication line to match the following: 232 224 233 225 {{{ … … 235 227 }}} 236 228 237 229 * Reload ssh: 238 230 239 231 {{{ … … 241 233 }}} 242 234 243 * Serial console login: If you did not use the serial console installer, then perform the following: 244 245 * Edit the /etc/inittab file. 246 247 Uncomment the line that reads: 235 * Uninstall unecesary packages: 236 237 {{{ 238 $ sudo apt-get remove --purge portmap lpr nfs-common ppp 239 }}} 240 241 * Make sure no uneeded services are running. Look through /etc/rc2.d. Move 242 from S to K any services that are not needed (e.g. rsync and inetd). 243 244 ==== Serial console login ==== 245 246 If you did not use the serial console installer, then perform the following: 247 248 * Edit the /etc/inittab file. Uncomment the line that reads: 248 249 249 250 {{{ … … 257 258 }}} 258 259 259 260 * Refresh: 260 261 261 262 {{{ … … 263 264 }}} 264 265 265 266 * Add the following lines after the timeout line in /boot/grub/menu.1st 266 267 267 268 {{{ … … 270 271 }}} 271 272 272 273 * Add the following lies to the Start Default Options 273 274 You should already have a line such as: 274 275 … … 277 278 }}} 278 279 279 280 add to it, so that your final line says: 280 281 281 282 {{{ … … 283 284 }}} 284 285 285 286 Refresh grub: 286 287 287 288 {{{ … … 289 290 }}} 290 291 291 292 * Uninstall unecesary packages: 293 294 {{{ 295 $ sudo apt-get remove --purge portmap lpr nfs-common ppp 296 }}} 297 298 * Make sure no uneeded services are running. Look through /etc/rc2.d. Move 299 from S to K any services that are not needed (e.g. rsync and inetd). 300 301 * Encrypted File system 302 303 * Install programs: 292 ==== Encrypted File system ==== 293 294 * Install programs: 304 295 305 296 {{{ … … 307 298 }}} 308 299 309 310 311 300 * Create an encrypted file system for members: 301 302 * Now, unmount the partition (make sure there is no data on it that you care about). 312 303 313 304 {{{ … … 315 306 }}} 316 307 317 308 * Create the encrypted filesystem: 318 309 319 310 {{{ … … 323 314 You will be prompted for a password. Put password in resource db! 324 315 325 316 * Add to crypttab 326 317 327 318 {{{ … … 329 320 }}} 330 321 331 322 * Start it 332 323 333 324 {{{ … … 335 326 }}} 336 327 337 328 * Create a file system on the partition: 338 329 339 330 {{{ … … 341 332 }}} 342 333 343 334 * Remove cryptdisks from the rc2.d directory - we do not want this to start automatically on boot! Instead we want to start it manually so the boot process doesn't hang waiting for a password.