211 lines
3.6 KiB
Markdown
211 lines
3.6 KiB
Markdown
# 2. Configuration de Base
|
|
|
|
## Creer un utilisateur
|
|
|
|
```bash
|
|
adduser <USER>
|
|
usermod -a -G sudo <USER>
|
|
```
|
|
|
|
## Configurer /etc/hosts
|
|
|
|
```bash
|
|
cat > /etc/hosts << 'EOF'
|
|
127.0.0.1 localhost
|
|
127.0.1.1 <FQDN> <HOSTNAME>
|
|
<IP> <FQDN> <HOSTNAME>
|
|
|
|
# IPv6
|
|
::1 localhost ip6-localhost ip6-loopback
|
|
ff02::1 ip6-allnodes
|
|
ff02::2 ip6-allrouters
|
|
EOF
|
|
```
|
|
|
|
## Verifier le hostname
|
|
|
|
```bash
|
|
hostnamectl set-hostname <FQDN>
|
|
hostname -f
|
|
# Doit afficher : <FQDN>
|
|
```
|
|
|
|
## Editeur par defaut
|
|
|
|
```bash
|
|
apt install vim micro
|
|
update-alternatives --config editor
|
|
# Choisir micro ou vim
|
|
```
|
|
|
|
## Installer etckeeper
|
|
|
|
```bash
|
|
apt update && apt install etckeeper
|
|
```
|
|
|
|
## Mettre a jour les sources apt
|
|
|
|
Ubuntu 24.04 utilise le format deb822 (`/etc/apt/sources.list.d/ubuntu.sources`).
|
|
Verifier que `main universe restricted multiverse` et `backports` sont presents.
|
|
|
|
```bash
|
|
apt update && apt dist-upgrade && apt autoremove
|
|
```
|
|
|
|
## Paquets de base
|
|
|
|
```bash
|
|
apt install curl wget ntpdate apt-transport-https apt-listchanges apt-file apt-rdepends man
|
|
```
|
|
|
|
## Locale FR
|
|
|
|
```bash
|
|
apt install locales
|
|
dpkg-reconfigure locales
|
|
# Selectionner fr_FR.UTF-8
|
|
apt install task-french
|
|
```
|
|
|
|
## Debfoster
|
|
|
|
```bash
|
|
apt install debfoster
|
|
debfoster
|
|
```
|
|
|
|
### Script keeper pour etckeeper
|
|
|
|
Creer `/etc/etckeeper/pre-commit.d/35debfoster` :
|
|
|
|
```bash
|
|
#!/bin/sh
|
|
set -e
|
|
LANG=C
|
|
export LANG
|
|
|
|
shellquote() {
|
|
sed -e "s/'/'\"'\"'/g" -e "s/^/'/" -e "s/$/'/"
|
|
}
|
|
|
|
if [ "$VCS" = git ] || [ "$VCS" = hg ] || [ "$VCS" = bzr ] || [ "$VCS" = darcs ]; then
|
|
debfoster -q -k /etc/keepers
|
|
chmod 600 /etc/keepers
|
|
sed -i "1i\\# debfoster file" /etc/keepers
|
|
sed -i "1i\\# Generated by etckeeper. Do not edit." /etc/keepers
|
|
if [ "$VCS" = git ]; then
|
|
git add keepers
|
|
fi
|
|
fi
|
|
```
|
|
|
|
```bash
|
|
chmod 755 /etc/etckeeper/pre-commit.d/35debfoster
|
|
etckeeper commit
|
|
```
|
|
|
|
## Mises a jour automatiques
|
|
|
|
```bash
|
|
apt install unattended-upgrades
|
|
```
|
|
|
|
## Interdire le login root SSH
|
|
|
|
```bash
|
|
# Verifier dans /etc/ssh/sshd_config :
|
|
PermitRootLogin no
|
|
```
|
|
|
|
## Sudo sans mot de passe
|
|
|
|
```bash
|
|
addgroup --system sudonp
|
|
usermod -a -G sudonp <USER>
|
|
echo '%sudonp ALL=(ALL:ALL) NOPASSWD: ALL' > /etc/sudoers.d/010_sudonp
|
|
chmod 440 /etc/sudoers.d/010_sudonp
|
|
```
|
|
|
|
> **Important :** Deconnectez-vous et reconnectez-vous pour activer le groupe.
|
|
|
|
## Neofetch + MOTD
|
|
|
|
```bash
|
|
apt install neofetch
|
|
```
|
|
|
|
Creer `/etc/neofetch.conf` :
|
|
|
|
```bash
|
|
print_info() {
|
|
info title
|
|
info underline
|
|
info "OS" distro
|
|
info "Host" model
|
|
info "Kernel" kernel
|
|
info "Uptime" uptime
|
|
info "Packages" packages
|
|
info "Shell" shell
|
|
info "CPU" cpu
|
|
info "CPU Usage" cpu_usage
|
|
prin "Load" "$(cat /proc/loadavg | awk '{print $1, $2, $3}')"
|
|
info "GPU" gpu
|
|
info "Memory" memory
|
|
info "Disk" disk
|
|
info "Local IP" local_ip
|
|
info "Public IP" public_ip
|
|
info "Users" users
|
|
info "Locale" locale
|
|
info cols
|
|
}
|
|
|
|
title_fqdn="on"
|
|
memory_percent="on"
|
|
memory_unit="mib"
|
|
package_managers="on"
|
|
image_backend="ascii"
|
|
cpu_temp="on"
|
|
```
|
|
|
|
Creer `/etc/update-motd.d/20-neofetch` :
|
|
|
|
```bash
|
|
#!/bin/sh
|
|
neofetch --config /etc/neofetch.conf
|
|
```
|
|
|
|
```bash
|
|
chmod 755 /etc/update-motd.d/20-neofetch
|
|
```
|
|
|
|
## Script MOTD mises a jour
|
|
|
|
```bash
|
|
apt install python3-apt
|
|
```
|
|
|
|
Creer `/etc/update-motd.d/30-updates` avec le script Python de detection des mises a jour (voir scripts/setup_motd_updates.py).
|
|
|
|
```bash
|
|
chmod 755 /etc/update-motd.d/30-updates
|
|
```
|
|
|
|
## Installer dselect
|
|
|
|
```bash
|
|
apt install dselect
|
|
```
|
|
|
|
## Ajouter un fichier de swap (4 Go)
|
|
|
|
```bash
|
|
fallocate -l 4G /swapfile
|
|
chmod 600 /swapfile
|
|
mkswap /swapfile
|
|
swapon /swapfile
|
|
echo '/swapfile swap swap defaults 0 0' >> /etc/fstab
|
|
echo 'vm.swappiness = 5' >> /etc/sysctl.conf
|
|
sysctl -p
|
|
```
|