3.6 KiB
3.6 KiB
2. Configuration de Base
Creer un utilisateur
adduser <USER>
usermod -a -G sudo <USER>
Configurer /etc/hosts
cat > /etc/hosts << 'EOF'
127.0.0.1 localhost
127.0.1.1 <FQDN> <HOSTNAME>
<IP> <FQDN> <HOSTNAME>
# IPv6
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
EOF
Verifier le hostname
hostnamectl set-hostname <FQDN>
hostname -f
# Doit afficher : <FQDN>
Editeur par defaut
apt install vim micro
update-alternatives --config editor
# Choisir micro ou vim
Installer etckeeper
apt update && apt install etckeeper
Mettre a jour les sources apt
Ubuntu 24.04 utilise le format deb822 (/etc/apt/sources.list.d/ubuntu.sources).
Verifier que main universe restricted multiverse et backports sont presents.
apt update && apt dist-upgrade && apt autoremove
Paquets de base
apt install curl wget ntpdate apt-transport-https apt-listchanges apt-file apt-rdepends man
Locale FR
apt install locales
dpkg-reconfigure locales
# Selectionner fr_FR.UTF-8
apt install task-french
Debfoster
apt install debfoster
debfoster
Script keeper pour etckeeper
Creer /etc/etckeeper/pre-commit.d/35debfoster :
#!/bin/sh
set -e
LANG=C
export LANG
shellquote() {
sed -e "s/'/'\"'\"'/g" -e "s/^/'/" -e "s/$/'/"
}
if [ "$VCS" = git ] || [ "$VCS" = hg ] || [ "$VCS" = bzr ] || [ "$VCS" = darcs ]; then
debfoster -q -k /etc/keepers
chmod 600 /etc/keepers
sed -i "1i\\# debfoster file" /etc/keepers
sed -i "1i\\# Generated by etckeeper. Do not edit." /etc/keepers
if [ "$VCS" = git ]; then
git add keepers
fi
fi
chmod 755 /etc/etckeeper/pre-commit.d/35debfoster
etckeeper commit
Mises a jour automatiques
apt install unattended-upgrades
Interdire le login root SSH
# Verifier dans /etc/ssh/sshd_config :
PermitRootLogin no
Sudo sans mot de passe
addgroup --system sudonp
usermod -a -G sudonp <USER>
echo '%sudonp ALL=(ALL:ALL) NOPASSWD: ALL' > /etc/sudoers.d/010_sudonp
chmod 440 /etc/sudoers.d/010_sudonp
Important : Deconnectez-vous et reconnectez-vous pour activer le groupe.
Neofetch + MOTD
apt install neofetch
Creer /etc/neofetch.conf :
print_info() {
info title
info underline
info "OS" distro
info "Host" model
info "Kernel" kernel
info "Uptime" uptime
info "Packages" packages
info "Shell" shell
info "CPU" cpu
info "CPU Usage" cpu_usage
prin "Load" "$(cat /proc/loadavg | awk '{print $1, $2, $3}')"
info "GPU" gpu
info "Memory" memory
info "Disk" disk
info "Local IP" local_ip
info "Public IP" public_ip
info "Users" users
info "Locale" locale
info cols
}
title_fqdn="on"
memory_percent="on"
memory_unit="mib"
package_managers="on"
image_backend="ascii"
cpu_temp="on"
Creer /etc/update-motd.d/20-neofetch :
#!/bin/sh
neofetch --config /etc/neofetch.conf
chmod 755 /etc/update-motd.d/20-neofetch
Script MOTD mises a jour
apt install python3-apt
Creer /etc/update-motd.d/30-updates avec le script Python de detection des mises a jour (voir scripts/setup_motd_updates.py).
chmod 755 /etc/update-motd.d/30-updates
Installer dselect
apt install dselect
Ajouter un fichier de swap (4 Go)
fallocate -l 4G /swapfile
chmod 600 /swapfile
mkswap /swapfile
swapon /swapfile
echo '/swapfile swap swap defaults 0 0' >> /etc/fstab
echo 'vm.swappiness = 5' >> /etc/sysctl.conf
sysctl -p