Debian Wheezy 7 installation guidelines » History » Version 5

Version 4 (ROQUE, Damien, 11/23/2014 09:51 PM) → Version 5/6 (ROQUE, Damien, 11/25/2014 12:38 AM)

h1. Debian Wheezy 7 installation guidelines

The distribution GNU/Linux Debian Wheezy has been chosen for several reasons: long term support (until 2017), active community, stable packages. We consider an installation performed thanks to a Debian Live support. Once the installation is performed, it is assumed to realize the following operations using a root shell.

h2. Partitioning

During the installation process, the following partitioning is recommended:
* primary SWAP, 1 GB;
* primary ext4, /, 40 GB;
* secondary ext4, /home, (remaining space).

Once the installation is performed, it is assumed to realize the following operations using a root shell. If necessary, a proxy will be set through appropriate environment variables:
<pre>
export http_proxy=http://host:port
</pre>

h2. Additional packages Packages installation

Edit @/etc/apt/source.list@ and add @contrib@ and @non-free@ targets in order to obtain the following.

<pre>
deb http://ftp.fr.debian.org/debian/ wheezy main contrib non-free
deb-src http://ftp.fr.debian.org/debian/ wheezy main contrib non-free

deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free

# wheezy-updates, previously known as 'volatile'
deb http://ftp.fr.debian.org/debian/ wheezy-updates main contrib non-free
deb-src http://ftp.fr.debian.org/debian/ wheezy-updates main contrib non-free
</pre>

Update If needed, configure an HTTP proxy.

<pre>
export http_proxy=http://host:port
</pre>

Then, update
the package list.


<pre>
apt-get update
</pre>

Install Complete the installation with the following additional packages.
command.

<pre>
apt-get install texlive-full texstudio auctex wireshark filezilla \
openssh-server vlc octave-communications subversion git thunar-vcs-plugin \
xfce4-goodies arandr libreoffice-l10n-fr flashplugin-nonfree evince xournal \
eog python-matplotlib python-scipy ctags doxygen ntpdate libpam-ldap nscd screen \
htop inkscape filezilla gparted sudo
</pre>

h2. Services configuration

h3. Sudo configuration

Any modification to the @sudo@ configuration should be performed through the following command.
<pre>
visudo
</pre>

Append the following line in order to preserve environment variables @http_proxy@ and @https_proxy@ through @sudo@.


<pre>
Defaults env_keep += "http_proxy https_proxy"
</pre>

h3. Enable LDAP authentication

In order


If one wants
to authenticate through the network using LDAP, it give administrator rights to an user, a easy way to proceed is necessary to install add him to the following package. @sudo@ group.
<pre>
apt-get install libpam-ldap adduser <login> sudo
</pre>
At the end of the installation, an interactive configuration process is triggered. It can called back using the following instruction.


h3. Enable LDAP authentication

<pre>
dpkg-reconfigure libpam-ldap
</pre>

Add the @ldap@ module to the first three instructions in @/etc/nsswitch.conf@ in order to obtain something like this:


<pre>

sudo nano /etc/nsswitch.conf
</pre>

<pre>
passwd: ldap compat
group: ldap compat
shadow: ldap compat
</pre>

In case of successful login, add the following line to @/etc/pam.d/common-session@ in order to create automatically the home directory. <pre>
sudo nano /etc/pam.d/common-session
</pre>

<pre>
session required pam_mkhomedir.so skel=/etc/skel umask=0022
</pre>

Finally, restart the @nscd@ service.
<pre>
/etc/init.d/nscd restart
</pre>

h3. Enable NTP

In order to synchronize the real time clock through the network, install the following package.
<pre>
apt-get install ntpdate nano /etc/default/ntpdate
</pre>

If applicable, add local NTP servers to @/etc/default/ntpdate@. Then trigger the first synchronization.
<pre>
ntpdate-debian
</pre>

Notice that NTP synchronization is performed at each network interface bootup.