Initial Debian Installation
This is just to get the system running. The kernel will be
recompiled later.
- Start with Debian Woody installation CDs. Boot from CD 1.
- At the
boot: menu on the welcome page, type bf24 to use kernel 2.4.
- Partition the drives. Do without a swap partition (we're going to make one later using LVM).
- Partitions on
/dev/hda, intialised as ext3. (We'll deal with /dev/hdb later.)
-
/dev/hda2 (the big partition) as the root partition
-
/dev/hda1 (the small partition) as /boot
- Additional kernel modules
- Network (we need this in order to do the rest of the install). Enter the values provided by your ISP.
- Base system: accept defaults
- Make system bootable
-
/dev/hda: Install LILO in the MBR
- Reboot the system (remove the CD before selecting
<Yes>)
- If it asks you about keymaps, choose
Select Keymap from Arch List, then select your keyboard (in the UK, choose QWERTY then British then Standard).
- Time zone configuration
- Hardware clock is set to GMT
- Geographical area (set as appropriate for your region)
- Password setup
- Enable md5 passwords
- Enable shadow passwords
- Create root user
- Create normal user for yourself.
- Remove PCMCIA packages
- Don't use PPP connection to install the system
- Apt configuration
- Use the CDROM default, and scan each of the Debian CDs, one by one.
- Accept the default to use
http://security.debian.org/.
(If the install gets interrupted at this point, when you reboot, base configuration will start again and you will be asked same question about the apt source. If you choose cdrom, you will have to scan all cd's once more. To aviod this, choose edit files by hand instead, uncomment existing deb cd-rom entries, save and exit editor.)
- Don't run
tasksel.
- Don't run
dselect.
- Accept defaults except for:
- Configuring locales: pick an appropriate locale for your location, and use it as the default locale. (For the UK, use
en_GB ISO-8859-1.)
- When
exim asks for configuration, select Local delivery only. (We're going to replace exim in a moment.) Have mail for root delivered to your normal user account.
- Erase any previously downloaded
.deb files? Yes.
- Log in at the
login: prompt.
- Type
su and enter the root password.
-
apt-get install procmail traceroute ssh screen zsh bzip2 netcat jed vim sudo libncurses5-dev less gcc g++ make wget
- Accept the defaults for ssh.
- Add yourself to
/etc/sudoers:
-
visudo (or, if you hate vi, EDITOR=jed visudo)
- Add a line like this to give yourself full
sudo privileges (e.g. if your username is fred):
- Turn off automatic fsck for all partitions:
-
sudo tune2fs -i 0 -c 0 /dev/hda1
-
sudo tune2fs -i 0 -c 0 /dev/hda2
- Security: disabling all inetd services
- For security reasons, we recommend disabling all inetd services, by commenting out everything in
/etc/inetd.conf file. After modifying it, tell inetd to reload it sudo killall -HUP inetd
- For some reason,
localeconf doesn't fully install.
-
sudo apt-get install localeconf to make sure it's installed. Answer yes to replace existing locale conguration files question.
- If it was already installed and configured,
sudo dpkg-reconfigure localeconf to make sure it's configured correctly.
- Select an appropriate locale (for the UK,
en_GB ISO-8859-1). Set it as the system default locale.
- Uninstall things we'll never use (especially insecure services)
-
sudo apt-get --purge remove at ppp pppconfig pppoe pppoeconf
to top