WilliamsNet Wiki - User contributions [en]

Basic Debian Installation

2024-02-07T10:20:46Z

10.42.0.1: /* Proliant System Utilities */

__NOTOC__

'''NOTE''': Debian 11 (Bullseye) is out -- the instructions on this page work nicely on both '''Buster''' and '''Bullseye'''

Debian 10/11 standard install from firmware-amd64-DVD (which includes the proprietary firmware that is supposedly not included in the other install disks)

* Do a normal 'Install' option from the boot menu
** if that hangs on the network device detection, do the 'Expert Install' option from the 'Advanced' menu and select the default options
* select basic options, one partition formatting, and only the minimal software selection, but make sure the 'SSHD server' option is selected
* For a graphic workstation, select the desired desktop from the list
* select 'yes' for network mirror, using the defaults (USA/deb.debian.org)
* let it finish and reboot

== Basic system prep ==
Most of the initial configuration is now contained in a script that can be executed directly from the config server as root on the target system:

curl -s http://config/config/debian-basic-config.sh | bash -x | tee config.out
wget -qO - http://config/config/debian-basic-config.sh | bash -x | tee config.out

The contents of this script are included here for reference, though updates to the script may occur without updates to this page:

<pre>#!/bin/sh
#
# script to do the basic install of a debian headless server
#
# Assumptions:
# - this is run as root immediately after the install has completed
# - the hostname has been set as desired before this script is run
# - an administrator account 'ewilliam' was created during installation
#
# invoke using one of these commands:
#
# wget -qO http://config/config/debian-basic-config.sh | bash
# curl -s http://config/config/debian-basic-config.sh | bash
#

CONFIG=http://config/config

# first -- install all the basic necessities (some may already be there)
apt-get update
apt-get install -y net-tools zsh sudo rsync mlocate wget nfs-common psmisc
apt-get install -y aptitude sshfs git curl smartmontools vim

# the ssmtp package is not officially supported under buster
# download the package from stretch and install
#SSMTP_DEB=ssmtp_2.64-9_amd64.deb
SSMTP_DEB=ssmtp_2.64-8+b2_amd64.deb
wget http://http.us.debian.org/debian/pool/main/s/ssmtp/${SSMTP_DEB}
apt-get install -y ./${SSMTP_DEB}

# now get all the updates
apt-get -y upgrade

# make sudo passwordless for group wheel
echo "%sudo ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/91-wheel-NOPASSWD
chmod 440 /etc/sudoers.d/91-wheel-NOPASSWD
usermod -aG sudo ewilliam

# now that zsh is installed, make it the default
chsh -s /bin/zsh
chsh -s /bin/zsh ewilliam

# copy the standard zsh config files
curl -s $CONFIG/common/.zshrc -o /root/.zshrc
curl -s $CONFIG/common/.zshrc -o /home/ewilliam/.zshrc
chown ewilliam.ewilliam /home/ewilliam/.zshrc

# load ssh known_hosts from the config server
mkdir -p /root/.ssh
curl -s $CONFIG/ssh/known_hosts -o /root/.ssh/known_hosts
mkdir -p /home/ewilliam/.ssh
curl -s $CONFIG/ssh/known_hosts -o /home/ewilliam/.ssh/known_hosts
chown -R ewilliam.ewilliam /home/ewilliam/.ssh

# get backup scripts
curl -s $CONFIG/common/backup -o /etc/cron.daily/backup
curl -s $CONFIG/common/rsync_backup.sh -o /usr/local/bin/rsync_backup.sh
chmod +x /usr/local/bin/rsync_backup.sh /etc/cron.daily/backup

# configure log server
curl -s $CONFIG/common/99-remotelog.conf -o /etc/rsyslog.d/99-remotelog.conf
systemctl restart rsyslog

# enable mail to the central email server
# unlike the CentOS version of the ssmtp package, this doesn't recognize the /etc/aliases file
# to make it work, the hostname needs to be set to 'williams.localnet' and the mail server must be at 'mail'
sed -i 's/^hostname=.*$/hostname=williams.localnet/' /etc/ssmtp/ssmtp.conf

# get rid of the obnoxious political statement in the /etc/motd
echo > /etc/motd

# get the standard /etc/hosts file
curl -s $CONFIG/hosts -o /etc/hosts

# install more supporting stuff
apt-get install -y gpg apt-transport-https

# install webmin
wget -qO - https://download.webmin.com/jcameron-key.asc | sudo apt-key add -
echo "deb https://download.webmin.com/download/repository sarge contrib" | sudo tee -a /etc/apt/sources.list.d/webmin.list
apt-get update
apt-get install -y webmin

# install the host/known_hosts synchronization
curl -s $CONFIG/host_check.sh > /etc/cron.hourly/host_check
chmod +x /etc/cron.hourly/host_check

# provide a daily list of packages that need updating
curl -s $CONFIG/debian/0-apt-upgradeable -o /etc/cron.daily/0-apt-upgradable
chmod +x /etc/cron.daily/0-apt-upgradable

# install other status checks
curl -s $CONFIG/common/ssd-endurance > /etc/cron.weekly/ssd-endurance
chmod +x /etc/cron.weekly/ssd-endurance

# now reboot
reboot</pre>

== Proliant System Utilities ==
For Proliant servers, we need to install the [[HPE ProLiant System Configuration/Support|Management Component Pack (MCP)]] to manage the storage controller. A script to do this is available on the config server:
curl -s http://config/config/debian/install-mcp.sh | bash -x

[[Proliant SSA Command Examples | Here]] are some useful command examples.

== Non-Free Drivers ==
Debian's militant policy towards non-free drivers can be rather annoying. The Radeon built-in graphics controller on the motherboard for lamppost (ASUS M4A785-M) apparently needs some 'non-free' firmware, which is not detected during the install process, even though I'm using the non-free firmware installation disk image. Because the firmmware is not loaded during the install, it isn't included in the initramdisk, and therefore the device is loaded in an inoperative state. There is a firmware package available to install:
apt install firmware-amd-graphics
... but even after rebooting it doesn't load because by the time the root filesystem is mounted, the devices are already initialized. Until I find a better way, the device needs to be unloaded and reloaded after boot to enable the graphics
rmmod radeon
modprobe radeon

Similarly, some RealTek drivers need to be added:
apt install firmware-realtek

Some systems also require tigon/tg3 drivers. This one installs more than a few other packages, too ... including the amd-graphics package mentioned above.
apt install -y firmware-linux-nonfree

== Next Steps ==
The rest of the installation process is not OS-dependent and is described [[Common Post-Install|here]].

Proliant SSA Command Examples

2024-02-07T10:18:54Z

10.42.0.1: added cheat sheet for SSA commands

== Basics ==
# All commands must be run as root
# Once you use a wildcard in the target, you can't add any other target selectors (e.g. you can't show all drives on all controllers)

== Getting Help ==
The built-in help is very useful, if challenging to navigate. The basic help command is simply

ssacli help

There is help for each subcommand and area ... the complete list is at the end of the top level help text.

== Show commands ==
Show all controllers in the system -- useful to get the slot numbers of any additional controllers (the slot numbers aren't necessarily sequential from '0'.
ssacli ctrl all show

Show all drives on a single controller
ssacli ctrl slot=0 pd all show

Show details on a single drive
ssacli ctrl slot=0 pd 1I:1:1 show

== Create Logical Drives ==
This command will take all unnasigned drives and create RAID 0 logical drives for each of them
ssacli ctrl slot=0 create type=arrayr0 drives=allunassigned

To create a single logical drive, use this command
ssacli ctrl slot=0 create type=ld drives=1I:1:1

'''''NOTE''''' the order of the logical drives in the HP SSA output will determine the ordering for the SCSI device numbers in Linux, and will affect the drive letters assigned. Deleting logical drives will shift all the subsequent drive assignments up, so '''be careful'''. Using UUID tags instead of drive letters when specifying mounts is preferred for this reason. Storage systems that directly manage drives should already use a drive serial to identify and order its disks, but '''if strange stuff happens, you have been warned'''.

You will need to get the drive numbers from the show command above.

HPE ProLiant System Configuration/Support

2024-02-07T10:01:57Z

10.42.0.1: /* SmartArray P410i */

Debian has a page in their Wiki covering anecdotal reports of compatibility/support for Debian on the HP ProLiant Server family: https://wiki.debian.org/HP/ProLiant

== HPE Software Repositories ==
HPE maintains RPM and Debian repositories for their system support software -- see http://downloads.linux.hpe.com/SDR/project/mcp/

The software available through the repository includes:

{| class="wikitable"
|-
! package !! description
|-
| hp-health || HPE System Health Application and Command line Utilities (Gen9 and earlier)
|-
| hponcfg || HPE RILOE II/iLO online configuration utility
|-
| amsd || HPE Agentless Management Service (Gen10 only)
|-
| hp-ams || HPE Agentless Management Service (Gen9 and earlier)
|-
| hp-snmp-agents || Insight Management SNMP Agents for HPE ProLiant Systems (Gen9 and earlier)
|-
| hpsmh || HPE System Management Homepage (Gen9 and earlier)
|-
| hp-smh-templates || HPE System Management Homepage Templates (Gen9 and earlier)
|-
| ssacli || HPE Command Line Smart Storage Administration Utility
|-
| ssaducli || HPE Command Line Smart Storage Administration Diagnostics
|-
| ssa || HPE Array Smart Storage Administration Service
|}

=== RPM Repository ===
Cut-n-paste the following section (substituting distribution, architecture and project version) into /etc/yum.repos.d/mcp.repo on your system:

[mcp]
name=Management Component Pack
baseurl=http://downloads.linux.hpe.com/repo/mcp/dist/dist_ver/arch/project_ver
enabled=1
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/GPG-KEY-mcp

Where:
<pre> dist centos, fedora, opensuse, oracle, asianux
dist_ver [http://downloads.linux.hpe.com/SDR/repo/mcp/ Browse repo to identify supported distribution versions]
arch i386, x86_64
project_ver current, 11.30, 11.21, 11.05, 10.62, 10.50, 10.40, 10.20, 10.00, 9.30, 9.25</pre>

List the packages in the repository
yum --disablerepo="*" --enablerepo="short_repo_name" list available

Install a specific package
yum install <packagename>

=== Debian Repositories ===
Cut-n-paste the following section (substituting distribution, architecture and project version) into /etc/apt/sources.list.d/mcp.list on your system:

# HPE Management Component Pack
deb http://downloads.linux.hpe.com/SDR/repo/mcp dist/project_ver non-free

Where:
<pre> dist bionic, xenial, trusty, precise, stretch, jessie, squeeze, wheezy
project_ver current, 11.30, 11.21, 11.05, 10.80, 10.60, 10.50, 10.40, 9.50, 9.40</pre>

Install the HPE public gpg key -- instructions at http://downloads.linux.hpe.com/SDR/keys

Update the local apt indexes
apt-get update

Search for a specific package
apt-cache search <packagename> # browse debs

Install a specific package
apt-get install <packagename>

== SmartArray P410i ==
=== Smart Storage Administration ===
The ssa utility provides a nice GUI for managing the drive arrays in the DL380G7 ... but it comes with a heavy cost in terms of software that must be installed. Beyond the '''ssa''' package that must be installed, the use requires that firefox is installed and displayable from the local machine. Given that the systems do not run in graphics mode, this means that you need to make sure that the X11 DISPLAY veriable is set properly to tunnel the result back to a graphical workstation.

After installing the repository above, install the packages:
yum install -y ssa firefox xauth
... or ...
apt install -y ssa firefox-esr xauth
Be warned -- the firefox install alone grabs over 100 dependent packages ...

After installing everything, run the SSA package in local mode:
ssa -local

This will start a background process and then launch firefox pointing at that process, which listens on a random high port number. This is a very poor situation, but the tool itself is very nice and allows (as far as I can tell) do everything to configure the controller and attached disks and arrays.

For a quick status that can be put in a regular status check (cron.daily or crontab), use the '''ssacli''' command:
yum install ssacli
... or ...
apt install ssacli

Verify everything works by listing all the available controllers:
ssacli ctrl all show

The drives in each controller slot can be shown:
ssacli ctrl slot=0 pd all show

[[Proliant SSA Command Examples | Useful commands for managing drives]] provides some useful examples.

=== HPE Enterprise Support ===
The HP overview is located here: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c01677092

HPE full parts lists: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=c04396629

The full enterprise support site is located at https://support.hpe.com/hpesc/public/km/product/3883933/Product#t=Documents&sort=relevancy&layout=table&f:@kmdoclanguagecode=[cv1871440]&hpe=1

== ProLiant DL380G7 ==
HPE overview: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c02215285

HPE ProLiant DL380 G7 Server - Specifications: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c02215298

Search | HPE Support Center - Drivers for HPE ProLiant DL380 G7 Server Models : https://support.hpe.com/hpesc/public/km/product/4091567/Product#t=DriversandSoftware&sort=relevancy&layout=table

== ProLiant DL380p Gen8 ==

HPE Overview: https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c03235277

Intel CPU (Xeon E5-2640 2.5 GHz 6 core):

https://ark.intel.com/content/www/us/en/ark/products/64591/intel-xeon-processor-e52640-15m-cache-2-50-ghz-7-20-gts-intel-qpi.html

Basic Rocky Linux 8 Installation

2024-02-03T22:30:57Z

10.42.0.1: Created page with "== Rocky Linux 8 Distribution Install == Rocky Linux 8 minimal install from DVD install disk During install process: * click on 'automatically create partitions * set hostname (if known) * enable all basic network interfaces (do not rename -- it will crash the installer) == Basic system prep == Most of the initial configuration is now contained in a script that can be executed directly from the config server as root on the target system: curl -s http://config/config/..."

== Rocky Linux 8 Distribution Install ==
Rocky Linux 8 minimal install from DVD install disk
During install process:
* click on 'automatically create partitions
* set hostname (if known)
* enable all basic network interfaces (do not rename -- it will crash the installer)

== Basic system prep ==
Most of the initial configuration is now contained in a script that can be executed directly from the config server as root on the target system:

curl -s http://config/config/rocky8-basic-config.sh | bash

The contents of this script are included here for reference, though updates to the script may occur without updates to this page:

<pre>#!/bin/sh
#
# script to do the basic install of a centos7 headless server
#
# Assumptions:
# - this is run as root immediately after the install has completed
# - the hostname has been set as desired before this script is run
# - an administrator account 'ewilliam' was created during installation

CONFIG=http://config/config

# first -- install all the basic necessities (some may already be there)
yum -y install net-tools rsync zsh epel-release mlocate util-linux-user
yum -y install nfs-utils psmisc smartmontools bind-utils
yum -y update

# now disable SELinux (no comment)
sed -i 's/=enforcing/=disabled/g' /etc/selinux/config
setenforce 0

# make sudo passwordless for group wheel
echo "%wheel ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/91-wheel-NOPASSWD

# now that zsh is installed, make it the default
chsh -s /bin/zsh
chsh -s /bin/zsh ewilliam

# copy the standard zsh config files
curl -s $CONFIG/common/.zshrc -o /root/.zshrc
curl -s $CONFIG/common/.zshrc -o /home/ewilliam/.zshrc
chown ewilliam.ewilliam /home/ewilliam/.zshrc

# load ssh known_hosts from the config server
mkdir -p /root/.ssh
curl -s $CONFIG/ssh/known_hosts -o /root/.ssh/known_hosts
mkdir -p /home/ewilliam/.ssh
curl -s $CONFIG/ssh/known_hosts -o /home/ewilliam/.ssh/known_hosts
chown -R ewilliam.ewilliam /home/ewilliam/.ssh

# get backup scripts
curl -s $CONFIG/common/backup -o /etc/cron.daily/backup
curl -s $CONFIG/common/rsync_backup.sh -o /usr/local/bin/rsync_backup.sh
chmod +x /usr/local/bin/rsync_backup.sh /etc/cron.daily/backup

# configure log server
curl -s $CONFIG/common/99-remotelog.conf -o /etc/rsyslog.d/99-remotelog.conf
systemctl restart rsyslog

# enable mail to the central email server
echo "root: ewilliam@williams.localnet" >> /etc/aliases
echo "ewilliam: ewilliam@williams.localnet" >> /etc/aliases

# get the standard /etc/hosts file
curl -s $CONFIG/hosts -o /etc/hosts

# install webmin
curl -s $CONFIG/centos7/webmin.repo > /etc/yum.repos.d/webmin.repo
curl -s https://download.webmin.com/jcameron-key.asc -o /tmp/webmin-key.asc && \
rpm --import /tmp/webmin-key.asc && \
rm /tmp/webmin-key.asc
yum -y install webmin

# install the host/known_hosts synchronization
curl -s $CONFIG/host_check.sh > /etc/cron.hourly/host_check
chmod +x /etc/cron.hourly/host_check

# install other status checks
curl -s $CONFIG/common/ssd-endurance > /etc/cron.weekly/ssd-endurance
chmod +x /etc/cron.weekly/ssd-endurance

# now reboot
reboot</pre>

== Next Steps ==
The rest of the installation process is not OS-dependent and is described [[Common Post-Install|here]].

System Administration Processes

2024-02-03T22:26:14Z

10.42.0.1: /* Basic OS installation */

== Non-standard Repositories ==
* [[Centos Repos]]

== Basic OS installation ==
* [[Basic Ubuntu Installation]]
* [[Basic CentOS 7 Installation]]
* [[Basic Debian Installation]]
* [[Basic Fedora 31+ Installation]]
* [[Fedora 33 - Workstation Installation]]
* [[Basic Rocky Linux 8 Installation]]
* [[Common Post-Install]]

== System Configuration ==
* [[HPE ProLiant System Configuration/Support]]
* [[Ethernet Device Configuration]]
* [[CUDA + NVIDIA drivers]]
* [[NVIDIA Docker Runtime|Installing NVIDIA Docker Runtime]]
* [[VLAN Interfaces]]
*[[Mounting Google Drive and Dropbox]]
*[[Mounting iSCSI LUNs]]

== Application Installation ==
* [[Plex Media Server - Debian]]
* [[Docker Installation]]
* [[Ceph Storage Cluster]]
* [[Kubernetes Cluster Installation]]
* [http://www.webmin.com/download.html Webmin Installation]

== Sustainment Practices ==
* [[SSH Host Key Management]]
* [[Log Accumulator]]
* [[Benchmark commands]]
*[[Memory Testing]]

== Deprecated ==
*

Basic Debian Installation

2024-02-03T22:24:32Z

10.42.0.1: /* Basic system prep */

__NOTOC__

'''NOTE''': Debian 11 (Bullseye) is out -- the instructions on this page work nicely on both '''Buster''' and '''Bullseye'''

Debian 10/11 standard install from firmware-amd64-DVD (which includes the proprietary firmware that is supposedly not included in the other install disks)

* Do a normal 'Install' option from the boot menu
** if that hangs on the network device detection, do the 'Expert Install' option from the 'Advanced' menu and select the default options
* select basic options, one partition formatting, and only the minimal software selection, but make sure the 'SSHD server' option is selected
* For a graphic workstation, select the desired desktop from the list
* select 'yes' for network mirror, using the defaults (USA/deb.debian.org)
* let it finish and reboot

== Basic system prep ==
Most of the initial configuration is now contained in a script that can be executed directly from the config server as root on the target system:

curl -s http://config/config/debian-basic-config.sh | bash -x | tee config.out
wget -qO - http://config/config/debian-basic-config.sh | bash -x | tee config.out

The contents of this script are included here for reference, though updates to the script may occur without updates to this page:

<pre>#!/bin/sh
#
# script to do the basic install of a debian headless server
#
# Assumptions:
# - this is run as root immediately after the install has completed
# - the hostname has been set as desired before this script is run
# - an administrator account 'ewilliam' was created during installation
#
# invoke using one of these commands:
#
# wget -qO http://config/config/debian-basic-config.sh | bash
# curl -s http://config/config/debian-basic-config.sh | bash
#

CONFIG=http://config/config

# first -- install all the basic necessities (some may already be there)
apt-get update
apt-get install -y net-tools zsh sudo rsync mlocate wget nfs-common psmisc
apt-get install -y aptitude sshfs git curl smartmontools vim

# the ssmtp package is not officially supported under buster
# download the package from stretch and install
#SSMTP_DEB=ssmtp_2.64-9_amd64.deb
SSMTP_DEB=ssmtp_2.64-8+b2_amd64.deb
wget http://http.us.debian.org/debian/pool/main/s/ssmtp/${SSMTP_DEB}
apt-get install -y ./${SSMTP_DEB}

# now get all the updates
apt-get -y upgrade

# make sudo passwordless for group wheel
echo "%sudo ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/91-wheel-NOPASSWD
chmod 440 /etc/sudoers.d/91-wheel-NOPASSWD
usermod -aG sudo ewilliam

# now that zsh is installed, make it the default
chsh -s /bin/zsh
chsh -s /bin/zsh ewilliam

# copy the standard zsh config files
curl -s $CONFIG/common/.zshrc -o /root/.zshrc
curl -s $CONFIG/common/.zshrc -o /home/ewilliam/.zshrc
chown ewilliam.ewilliam /home/ewilliam/.zshrc

# load ssh known_hosts from the config server
mkdir -p /root/.ssh
curl -s $CONFIG/ssh/known_hosts -o /root/.ssh/known_hosts
mkdir -p /home/ewilliam/.ssh
curl -s $CONFIG/ssh/known_hosts -o /home/ewilliam/.ssh/known_hosts
chown -R ewilliam.ewilliam /home/ewilliam/.ssh

# get backup scripts
curl -s $CONFIG/common/backup -o /etc/cron.daily/backup
curl -s $CONFIG/common/rsync_backup.sh -o /usr/local/bin/rsync_backup.sh
chmod +x /usr/local/bin/rsync_backup.sh /etc/cron.daily/backup

# configure log server
curl -s $CONFIG/common/99-remotelog.conf -o /etc/rsyslog.d/99-remotelog.conf
systemctl restart rsyslog

# enable mail to the central email server
# unlike the CentOS version of the ssmtp package, this doesn't recognize the /etc/aliases file
# to make it work, the hostname needs to be set to 'williams.localnet' and the mail server must be at 'mail'
sed -i 's/^hostname=.*$/hostname=williams.localnet/' /etc/ssmtp/ssmtp.conf

# get rid of the obnoxious political statement in the /etc/motd
echo > /etc/motd

# get the standard /etc/hosts file
curl -s $CONFIG/hosts -o /etc/hosts

# install more supporting stuff
apt-get install -y gpg apt-transport-https

# install webmin
wget -qO - https://download.webmin.com/jcameron-key.asc | sudo apt-key add -
echo "deb https://download.webmin.com/download/repository sarge contrib" | sudo tee -a /etc/apt/sources.list.d/webmin.list
apt-get update
apt-get install -y webmin

# install the host/known_hosts synchronization
curl -s $CONFIG/host_check.sh > /etc/cron.hourly/host_check
chmod +x /etc/cron.hourly/host_check

# provide a daily list of packages that need updating
curl -s $CONFIG/debian/0-apt-upgradeable -o /etc/cron.daily/0-apt-upgradable
chmod +x /etc/cron.daily/0-apt-upgradable

# install other status checks
curl -s $CONFIG/common/ssd-endurance > /etc/cron.weekly/ssd-endurance
chmod +x /etc/cron.weekly/ssd-endurance

# now reboot
reboot</pre>

== Proliant System Utilities ==
For Proliant servers, we need to install the [[HPE ProLiant System Configuration/Support|Management Component Pack (MCP)]] to manage the storage controller. A script to do this is available on the config server:
curl -s http://config/config/debian/install-mcp.sh | bash -x

== Non-Free Drivers ==
Debian's militant policy towards non-free drivers can be rather annoying. The Radeon built-in graphics controller on the motherboard for lamppost (ASUS M4A785-M) apparently needs some 'non-free' firmware, which is not detected during the install process, even though I'm using the non-free firmware installation disk image. Because the firmmware is not loaded during the install, it isn't included in the initramdisk, and therefore the device is loaded in an inoperative state. There is a firmware package available to install:
apt install firmware-amd-graphics
... but even after rebooting it doesn't load because by the time the root filesystem is mounted, the devices are already initialized. Until I find a better way, the device needs to be unloaded and reloaded after boot to enable the graphics
rmmod radeon
modprobe radeon

Similarly, some RealTek drivers need to be added:
apt install firmware-realtek

Some systems also require tigon/tg3 drivers. This one installs more than a few other packages, too ... including the amd-graphics package mentioned above.
apt install -y firmware-linux-nonfree

== Next Steps ==
The rest of the installation process is not OS-dependent and is described [[Common Post-Install|here]].

Basic CentOS 7 Installation

2024-02-03T22:22:51Z

10.42.0.1:

== CentOS Distribution Install ==
Centos 7 minimal install from DVD install disk
During install process:
* use custom formatting
* set partition type to 'standard'
* click on 'automatically create partitions
* delete /home partition and increase size of / to fill the disk
* set hostname (if known)
* enable all basic network interfaces (do not rename -- it will crash the installer)

== Basic system prep ==
Most of the initial configuration is now contained in a script that can be executed directly from the config server as root on the target system:

curl -s http://config/config/centos7-basic-config.sh | bash

The contents of this script are included here for reference, though updates to the script may occur without updates to this page:

<pre>#!/bin/sh
#
# script to do the basic install of a centos7 headless server
#
# Assumptions:
# - this is run as root immediately after the install has completed
# - the hostname has been set as desired before this script is run
# - an administrator account 'ewilliam' was created during installation

CONFIG=http://config/config

# first -- install all the basic necessities (some may already be there)
yum -y install net-tools rsync zsh epel-release yum-cron yum-utils mlocate deltarpm
yum -y install sshfs nfs-utils ssmtp psmisc
yum -y remove firewalld postfix
yum autoremove -y NetworkManager NetworkManager-libnm
systemctl enable --now yum-cron
yum -y update

# now disable SELinux (no comment)
sed -i 's/=enforcing/=disabled/g' /etc/selinux/config
setenforce 0

# make sudo passwordless for group wheel
echo "%wheel ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/91-wheel-NOPASSWD

# now that zsh is installed, make it the default
chsh -s /bin/zsh
chsh -s /bin/zsh ewilliam

# copy the standard zsh config files
curl -s $CONFIG/centos7/.zshrc -o /root/.zshrc
curl -s $CONFIG/centos7/.zshrc -o /home/ewilliam/.zshrc
chown ewilliam.ewilliam /home/ewilliam/.zshrc

# load ssh known_hosts from the config server
mkdir -p /root/.ssh
curl -s $CONFIG/ssh/known_hosts -o /root/.ssh/known_hosts
mkdir -p /home/ewilliam/.ssh
curl -s $CONFIG/ssh/known_hosts -o /home/ewilliam/.ssh/known_hosts

# get backup scripts
curl -s $CONFIG/centos7/backup -o /etc/cron.daily/backup
curl -s $CONFIG/centos7/rsync_backup.sh -o /usr/local/bin/rsync_backup.sh
chmod +x /usr/local/bin/rsync_backup.sh

# configure log server
curl -s $CONFIG/centos7/99-remotelog.conf -o /etc/rsyslog.d/99-remotelog.conf
systemctl restart rsyslog

# enable mail to the central email server
echo "root: ewilliam@williams.localnet" >> /etc/aliases
echo "ewilliam: ewilliam@williams.localnet" >> /etc/aliases

# get the standard /etc/hosts file
curl $CONFIG/hosts -o /etc/hosts

# install the host/known_hosts synchronization
curl -s $CONFIG/host_check.sh > /etc/cron.hourly/host_check
chmod +x /etc/cron.hourly/host_check

# now reboot
reboot</pre>

== Next Steps ==
The rest of the installation process is not OS-dependent and is described [[Common Post-Install|here]].