28 | | * Plug in monitor and keyboard |
29 | | * Boot machine while USB stick is inserted (or while a network cable is plugged directly into the PXE boot machine) |
30 | | * Enter Bios/Setup. Specify that Bios should output to serial console and make our [wiki:bios_changes standard bios changes] |
31 | | * Ensure that server skips errors like no keyboard attached |
32 | | * Reboot and select Boot Options and choose to boot to USB stick (or network) |
33 | | * Choose Expert install |
34 | | * For DNS servers, use: |
35 | | {{{ |
36 | | Telehouse: 209.51.163.29 209.51.169.83 |
37 | | XO: 209.234.253.168 |
38 | | }}} |
39 | | * When prompted for component to use, include all of them to be safe (but be sure to include the SSH server one) |
40 | | * When given the option - choose to continue your installation via ssh - this will give you the ability to easily set and record pass phrases |
41 | | === Drive partioning/Disk setup === |
| 19 | Note: If you are installing Debian on a machine already running Microsoft Windows, you might be able to skip this step by installing the Debian windows installer from the [http://www.goodbye-windows.com/ goodbye windows web site]. |
55 | | Since we are using disks at are 2TB or bigger, we need to ensure that the partitions are created properly. Open a new ssh session and choose to switch to console. |
56 | | {{{ |
57 | | parted /dev/sda -- mklabel gpt |
58 | | parted /dev/sda -- unit s mkpart biosboot 8192 16383 |
59 | | parted /dev/sda -- set 1 bios_grub on |
60 | | parted /dev/sda -- unit s mkpart boot 16384 1015807 |
61 | | parted /dev/sda -- set 2 raid on |
62 | | parted /dev/sda -- unit s mkpart pv 1015808 -1 |
63 | | parted /dev/sda -- set 3 raid on |
64 | | |
65 | | parted /dev/sdb -- mklabel gpt |
66 | | parted /dev/sdb -- unit s mkpart biosboot 8192 16383 |
67 | | parted /dev/sdb -- set 1 bios_grub on |
68 | | parted /dev/sdb -- unit s mkpart boot 16384 1015807 |
69 | | parted /dev/sdb -- set 2 raid on |
70 | | parted /dev/sdb -- unit s mkpart pv 1015808 -1 |
71 | | parted /dev/sdb -- set 3 raid on |
72 | | }}} |
73 | | |
74 | | When done, type: |
75 | | |
76 | | {{{ |
77 | | parted /dev/sda -- unit s p |
78 | | parted /dev/sdb -- unit s p |
79 | | }}} |
80 | | |
81 | | And you should get: |
82 | | |
83 | | {{{ |
84 | | 0 sittingbull:~# parted /dev/sda unit s p |
85 | | Model: ATA Hitachi HUA72303 (scsi) |
86 | | Disk /dev/sda: 5860533168s |
87 | | Sector size (logical/physical): 512B/512B |
88 | | Partition Table: gpt |
89 | | |
90 | | Number Start End Size File system Name Flags |
91 | | 1 8192s 16383s 8192s biosboot bios_grub |
92 | | 2 16384s 1015807s 999424s boot raid |
93 | | 3 1015808s 5860533134s 5859517327s pv |
94 | | |
95 | | 0 sittingbull:~# |
96 | | }}} |
97 | | |
98 | | You should be able to return to the graphical installer to do the rest. |
99 | | |
100 | | For the record - here's how you can do it by hand: |
101 | | |
102 | | RAID: |
103 | | |
104 | | {{{ |
105 | | mdadm --create --raid-devices=4 --level=1 --metadata=1.0 --verbose /dev/md0 /dev/sda2 /dev/sdb2 /dev/sdc2 /dev/sdd2 |
106 | | mdadm --create --raid-devices=4 --level=10 --metadata=1.0 --verbose /dev/md1 /dev/sda3 /dev/sdb3 /dev/sdc3 /dev/sdd3 |
107 | | }}} |
108 | | |
109 | | Now cryptsetup: |
110 | | |
111 | | {{{ |
112 | | anna-install cryptsetup-udeb |
113 | | cryptsetup luksFormat /dev/md1 |
114 | | cryptsetup luksOpen /dev/md1 md1_crypt |
115 | | |
116 | | pvcreate /dev/mapper/md1_crypt |
117 | | vgcreate vg_nameofserver0 /dev/mapper/md1_crypt |
118 | | lvcreate --name swap --size 1GB vg_nameofserver0 |
119 | | etc. |
120 | | }}} |
121 | | |
122 | | Choose manual partition in the Debian Installer. Then: |
123 | | |
124 | | * Choose "Congifure software RAID" (skip step if one disk system) |
125 | | * Choose "Create MD Device" |
126 | | * Choose RAID1 |
127 | | * Number of active devices: 4 |
128 | | * Number of spare devices: 0 |
129 | | * Now select the second partition on each device. |
130 | | * Click Continue. Repeat for third partition on each device but select RAID10 instead of RAID1. |
131 | | * When you are done, click Finish. Now you are back at the partition menu. |
132 | | * Scroll down to the raid devices (or apply straight to your partitions if it's a one disk system). Modify the 512 MB RAID device: Filesystem: ext3, mount on /boot |
133 | | * Encrypt the larger, remaining device. Save passphrase in [wiki:keyringer]. |
134 | | * Choose "Congifure LVM" (selecting the device encrypted in the previous step) |
135 | | * Create a volume group called `vg_`''nameofserver''`0` |
136 | | * Create logical volumes in this volume group based on your needs. Suggestions: 3GB for /, 1GB swap. |
137 | | |
138 | | === Last steps === |
139 | | |
140 | | * After returning to the main disk config menu, click on each logical volume that you create and specify how it should be formatted and mounted. |
141 | | * Enter root password. Save in [wiki:keyringer]. |
142 | | * Do not install the server package or the base package - deselect all of them. |