Changes between Version 12 and Version 13 of install_debian_extras

Timestamp:

May 20, 2008, 5:17:44 PM (18 years ago)

Author:

Jamie McClelland

Comment:

--

install_debian_extras

@@ -2 +2 @@
 = Installing Extras =
 
-== Syn Cookies ==
+Many of these commands can be automatically run using our [wiki:server_overview automated directives tool].
 
- * Enable syncookies:
 {{{
-echo 1 > /proc/sys/net/ipv4/tcp_syncookies
-}}}
- * Preserve syncookies on reboot:
-{{{
-echo 'net.ipv4.tcp_syncookies=1' >> /etc/sysctl.conf
+scripts/execute-directive root@server ssh-root-keys
+scripts/execute-directive root@server add-empty-authorized-keys
+scripts/execute-directive root@server enable-syn-cookies
+scripts/execute-directive root@server aptitude-dist-upgrade
+scripts/execute-directive root@server base-required-packages
+scripts/execute-directive root@server bash-fix-root
+scripts/execute-directive root@server bash-fix-skel
+scripts/execute-directive root@server ssh-key-only-login
 }}}
 
-== Install and configure mandatory packages ==
-
- * Login as root and install the following packages (if you plan to install postfix, replace esmtp-run with postfix)
-{{{
-# aptitude install ssh ntp less emacs21-nox cron-apt iproute mailx esmtp-run locales lsof psmisc screen
-}}}
- * Configure locales to use en_US.UTF-8 (run dpkg-reconfigure locales if necessary)
- * If you installed esmtp-run, edit /etc/esmtprc, configure to send email via our bulk.mayfirst.org server (which relays all mail from our IP range):
-{{{
-hostname=bulk.mayfirst.org
-}}}
- * Configure cron-apt:
-{{{
-echo 'MAILON="upgrade"' >> /etc/cron-apt/config
-}}}
- * Upload the [wiki:mfpl_admin_public_ssh_keys mayfirst public keys] to:
-{{{
-/root/.ssh/authorized_keys
-}}}
- * Configure ssh to only accept connections with auth keys (unless this is a server that should be accessible by members). Edit /etc/ssh/sshd_config and uncomment/change these lines:
-{{{
-PasswordAuthentication no
-ChallengeResponseAuthentication no
-}}}
- * Reload ssh:
-{{{
-# /etc/init.d/ssh reload
-}}}
-
-== Fix Bash ==
-
- * Overwrite /root/.bashrc with:
-{{{
-# ~/.bashrc: executed by bash(1) for non-login shells.
-
-export PS1='$? \h:\w\$ '
-umask 022
-
-# You may uncomment the following lines if you want `ls' to be colorized:
-# export LS_OPTIONS='--color=auto'
-# eval "`dircolors`"
-# alias ls='ls $LS_OPTIONS'
-# alias ll='ls $LS_OPTIONS -l'
-# alias l='ls $LS_OPTIONS -lA'
-#
-# Some more alias to avoid making mistakes:
-alias rm='rm -i'
-alias cp='cp -i'
-alias mv='mv -i'
-}}}
- * Modify the following lines in /etc/skel/.bashrc
-{{{
-PS1='$? ${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
-    ;;
-*)
-PS1='$? ${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
-}}}
- * Add a .ssh directory and empty authorized_keys file in /etc/skel:
-{{{
-mkdir /etc/skel/.ssh
-touch /etc/skel/.ssh/authorized_keys
-}}}
 
 == smartmontools (not for domU's) ==