Debian Wheezy 7 installation guidelines » History » Version 5

ROQUE, Damien, 11/25/2014 12:38 AM

1 1 ROQUE, Damien
h1. Debian Wheezy 7 installation guidelines
2 1 ROQUE, Damien
3 5 ROQUE, Damien
The distribution GNU/Linux Debian Wheezy has been chosen for several reasons: long term support (until 2017), active community, stable packages. We consider an installation performed thanks to a Debian Live support.
4 1 ROQUE, Damien
5 1 ROQUE, Damien
During the installation process, the following partitioning is recommended:
6 1 ROQUE, Damien
* primary SWAP, 1 GB;
7 1 ROQUE, Damien
* primary ext4, /, 40 GB;
8 1 ROQUE, Damien
* secondary ext4, /home, (remaining space).
9 1 ROQUE, Damien
10 5 ROQUE, Damien
Once the installation is performed, it is assumed to realize the following operations using a root shell. If necessary, a proxy will be set through appropriate environment variables:
11 5 ROQUE, Damien
<pre>
12 5 ROQUE, Damien
export http_proxy=http://host:port
13 5 ROQUE, Damien
</pre>
14 1 ROQUE, Damien
15 5 ROQUE, Damien
h2. Additional packages installation
16 5 ROQUE, Damien
17 4 ROQUE, Damien
Edit @/etc/apt/source.list@ and add @contrib@ and @non-free@ targets in order to obtain the following.
18 1 ROQUE, Damien
19 1 ROQUE, Damien
<pre>
20 1 ROQUE, Damien
deb http://ftp.fr.debian.org/debian/ wheezy main contrib non-free
21 1 ROQUE, Damien
deb-src http://ftp.fr.debian.org/debian/ wheezy main contrib non-free
22 1 ROQUE, Damien
23 1 ROQUE, Damien
deb http://security.debian.org/ wheezy/updates main contrib non-free
24 1 ROQUE, Damien
deb-src http://security.debian.org/ wheezy/updates main contrib non-free
25 1 ROQUE, Damien
26 1 ROQUE, Damien
# wheezy-updates, previously known as 'volatile'
27 1 ROQUE, Damien
deb http://ftp.fr.debian.org/debian/ wheezy-updates main contrib non-free
28 1 ROQUE, Damien
deb-src http://ftp.fr.debian.org/debian/ wheezy-updates main contrib non-free
29 1 ROQUE, Damien
</pre>
30 1 ROQUE, Damien
31 5 ROQUE, Damien
Update the package list.
32 1 ROQUE, Damien
<pre>
33 1 ROQUE, Damien
apt-get update
34 1 ROQUE, Damien
</pre>
35 4 ROQUE, Damien
36 5 ROQUE, Damien
Install the following additional packages.
37 1 ROQUE, Damien
<pre>
38 1 ROQUE, Damien
apt-get install texlive-full texstudio auctex wireshark filezilla \
39 1 ROQUE, Damien
openssh-server vlc octave-communications subversion git thunar-vcs-plugin \
40 1 ROQUE, Damien
xfce4-goodies arandr libreoffice-l10n-fr flashplugin-nonfree evince xournal \
41 1 ROQUE, Damien
eog python-matplotlib python-scipy ctags doxygen ntpdate libpam-ldap nscd screen \
42 1 ROQUE, Damien
htop inkscape filezilla gparted sudo
43 1 ROQUE, Damien
</pre>
44 1 ROQUE, Damien
45 1 ROQUE, Damien
h2. Services configuration
46 1 ROQUE, Damien
47 1 ROQUE, Damien
h3. Sudo configuration
48 1 ROQUE, Damien
49 1 ROQUE, Damien
Any modification to the @sudo@ configuration should be performed through the following command.
50 1 ROQUE, Damien
<pre>
51 4 ROQUE, Damien
visudo
52 1 ROQUE, Damien
</pre>
53 1 ROQUE, Damien
54 5 ROQUE, Damien
Append the following line in order to preserve environment variables @http_proxy@ and @https_proxy@ through @sudo@.
55 1 ROQUE, Damien
<pre>
56 1 ROQUE, Damien
Defaults env_keep += "http_proxy https_proxy"
57 4 ROQUE, Damien
</pre>
58 4 ROQUE, Damien
59 5 ROQUE, Damien
h3. Enable LDAP authentication
60 1 ROQUE, Damien
61 5 ROQUE, Damien
In order to authenticate through the network using LDAP, it is necessary to install the following package.
62 1 ROQUE, Damien
<pre>
63 5 ROQUE, Damien
apt-get install libpam-ldap
64 3 ROQUE, Damien
</pre>
65 5 ROQUE, Damien
At the end of the installation, an interactive configuration process is triggered. It can called back using the following instruction.
66 1 ROQUE, Damien
<pre>
67 1 ROQUE, Damien
dpkg-reconfigure libpam-ldap
68 1 ROQUE, Damien
</pre>
69 1 ROQUE, Damien
70 1 ROQUE, Damien
71 5 ROQUE, Damien
Add the @ldap@ module to the first three instructions in @/etc/nsswitch.conf@ in order to obtain something like this:
72 1 ROQUE, Damien
<pre>
73 1 ROQUE, Damien
passwd:         ldap compat
74 1 ROQUE, Damien
group:          ldap compat
75 1 ROQUE, Damien
shadow:         ldap compat
76 1 ROQUE, Damien
</pre>
77 1 ROQUE, Damien
78 5 ROQUE, Damien
In case of successful login, add the following line to @/etc/pam.d/common-session@ in order to create automatically the home directory.
79 1 ROQUE, Damien
<pre>
80 1 ROQUE, Damien
session required    pam_mkhomedir.so skel=/etc/skel umask=0022
81 1 ROQUE, Damien
</pre>
82 1 ROQUE, Damien
83 5 ROQUE, Damien
Finally, restart the @nscd@ service.
84 1 ROQUE, Damien
<pre>
85 1 ROQUE, Damien
/etc/init.d/nscd restart
86 1 ROQUE, Damien
</pre>
87 1 ROQUE, Damien
88 1 ROQUE, Damien
h3. Enable NTP
89 1 ROQUE, Damien
90 5 ROQUE, Damien
In order to synchronize the real time clock through the network, install the following package.
91 1 ROQUE, Damien
<pre>
92 5 ROQUE, Damien
apt-get install ntpdate
93 1 ROQUE, Damien
</pre>
94 1 ROQUE, Damien
95 5 ROQUE, Damien
If applicable, add local NTP servers to @/etc/default/ntpdate@. Then trigger the first synchronization.
96 1 ROQUE, Damien
<pre>
97 1 ROQUE, Damien
ntpdate-debian
98 1 ROQUE, Damien
</pre>
99 5 ROQUE, Damien
100 5 ROQUE, Damien
Notice that NTP synchronization is performed at each network interface bootup.