# 2. Configuration de Base

## Creer un utilisateur

```bash
adduser <USER>
usermod -a -G sudo <USER>
```

## Configurer /etc/hosts

```bash
cat > /etc/hosts << 'EOF'
127.0.0.1 localhost
127.0.1.1 <FQDN> <HOSTNAME>
<IP> <FQDN> <HOSTNAME>

# IPv6
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
EOF
```

## Verifier le hostname

```bash
hostnamectl set-hostname <FQDN>
hostname -f
# Doit afficher : <FQDN>
```

## Editeur par defaut

```bash
apt install vim micro
update-alternatives --config editor
# Choisir micro ou vim
```

## Installer etckeeper

```bash
apt update && apt install etckeeper
```

## Mettre a jour les sources apt

Ubuntu 24.04 utilise le format deb822 (`/etc/apt/sources.list.d/ubuntu.sources`).
Verifier que `main universe restricted multiverse` et `backports` sont presents.

```bash
apt update && apt dist-upgrade && apt autoremove
```

## Paquets de base

```bash
apt install curl wget ntpdate apt-transport-https apt-listchanges apt-file apt-rdepends man
```

## Locale FR

```bash
apt install locales
dpkg-reconfigure locales
# Selectionner fr_FR.UTF-8
apt install task-french
```

## Debfoster

```bash
apt install debfoster
debfoster
```

### Script keeper pour etckeeper

Creer `/etc/etckeeper/pre-commit.d/35debfoster` :

```bash
#!/bin/sh
set -e
LANG=C
export LANG

shellquote() {
        sed -e "s/'/'\"'\"'/g" -e "s/^/'/" -e "s/$/'/"
}

if [ "$VCS" = git ] || [ "$VCS" = hg ] || [ "$VCS" = bzr ] || [ "$VCS" = darcs ]; then
        debfoster -q -k /etc/keepers
        chmod 600 /etc/keepers
        sed -i "1i\\# debfoster file" /etc/keepers
        sed -i "1i\\# Generated by etckeeper.  Do not edit."  /etc/keepers
        if [ "$VCS" = git ]; then
                git add keepers
        fi
fi
```

```bash
chmod 755 /etc/etckeeper/pre-commit.d/35debfoster
etckeeper commit
```

## Mises a jour automatiques

```bash
apt install unattended-upgrades
```

## Interdire le login root SSH

```bash
# Verifier dans /etc/ssh/sshd_config :
PermitRootLogin no
```

## Sudo sans mot de passe

```bash
addgroup --system sudonp
usermod -a -G sudonp <USER>
echo '%sudonp ALL=(ALL:ALL) NOPASSWD: ALL' > /etc/sudoers.d/010_sudonp
chmod 440 /etc/sudoers.d/010_sudonp
```

> **Important :** Deconnectez-vous et reconnectez-vous pour activer le groupe.

## Neofetch + MOTD

```bash
apt install neofetch
```

Creer `/etc/neofetch.conf` :

```bash
print_info() {
    info title
    info underline
    info "OS" distro
    info "Host" model
    info "Kernel" kernel
    info "Uptime" uptime
    info "Packages" packages
    info "Shell" shell
    info "CPU" cpu
    info "CPU Usage" cpu_usage
    prin "Load" "$(cat /proc/loadavg | awk '{print $1, $2, $3}')"
    info "GPU" gpu
    info "Memory" memory
    info "Disk" disk
    info "Local IP" local_ip
    info "Public IP" public_ip
    info "Users" users
    info "Locale" locale
    info cols
}

title_fqdn="on"
memory_percent="on"
memory_unit="mib"
package_managers="on"
image_backend="ascii"
cpu_temp="on"
```

Creer `/etc/update-motd.d/20-neofetch` :

```bash
#!/bin/sh
neofetch --config /etc/neofetch.conf
```

```bash
chmod 755 /etc/update-motd.d/20-neofetch
```

## Script MOTD mises a jour

```bash
apt install python3-apt
```

Creer `/etc/update-motd.d/30-updates` avec le script Python de detection des mises a jour (voir scripts/setup_motd_updates.py).

```bash
chmod 755 /etc/update-motd.d/30-updates
```

## Installer dselect

```bash
apt install dselect
```

## Ajouter un fichier de swap (4 Go)

```bash
fallocate -l 4G /swapfile
chmod 600 /swapfile
mkswap /swapfile
swapon /swapfile
echo '/swapfile swap swap defaults 0 0' >> /etc/fstab
echo 'vm.swappiness = 5' >> /etc/sysctl.conf
sysctl -p
```