Basic Debian Installation - Revision history

10.0.0.10: /* Basic system prep */

2024-09-15T10:14:44Z

Basic system prep

← Older revision		Revision as of 10:14, 15 September 2024
Line 85:		Line 85:
	# to make it work, the hostname needs to be set to 'williams.localnet' and the mail server must be at 'mail'		# to make it work, the hostname needs to be set to 'williams.localnet' and the mail server must be at 'mail'
	sed -i 's/^hostname=.*$/hostname=williams.localnet/' /etc/ssmtp/ssmtp.conf		sed -i 's/^hostname=.*$/hostname=williams.localnet/' /etc/ssmtp/ssmtp.conf
			sed -i 's/^#rewriteDomain=.*$/rewriteDomain=williams.localnet/' /etc/ssmtp/ssmtp.conf

	# get rid of the obnoxious political statement in the /etc/motd		# get rid of the obnoxious political statement in the /etc/motd

DrEdWilliams: added HP watchdog timer fix

2024-02-10T16:49:18Z

added HP watchdog timer fix

← Older revision		Revision as of 16:49, 10 February 2024
Line 121:		Line 121:

	[[Proliant SSA Command Examples \| Here]] are some useful command examples.		[[Proliant SSA Command Examples \| Here]] are some useful command examples.

			== Proliant iLO Watchdog Timer ==
			There appears to be an issue during boot with the watchdog timer that ends up in a deadlock waiting for a response from iLO. It has happened now on most of the HP servers running Debian. Thanks to a rather in-depth analysis and testing [[ https://www.claudiokuenzler.com/blog/1125/debian-11-bullseye-boot-freeze-kernel-panic-hp-proliant-dl380 \| here ]], the problem seems to be the hpwdt module. According to the article, it has been blacklisted in most other distros already. The script below creates the blacklist entry and rebuilds the initramfs images:

			#!/bin/bash
			#
			# blacklist the HP iLO watchdog timer module (hpwdt) to avoid boot freezes under debian
			#
			echo "blacklist hpwdt" >> /etc/modprobe.d/blacklist-hp.conf
			update-initramfs -k all -u
			update-grub

			This script is available on the config server:
			curl -s http://config/config/debian/fix-hpwdt.sh \| bash -x

	== Non-Free Drivers ==		== Non-Free Drivers ==

DrEdWilliams: remove webmin, fix known_hosts load, updated for Debian 12

2024-02-10T16:41:01Z

remove webmin, fix known_hosts load, updated for Debian 12

← Older revision		Revision as of 16:41, 10 February 2024
Line 1:		Line 1:
	__NOTOC__		__NOTOC__

	'''NOTE''': ~~Debian 11 (Bullseye) is out -- the~~ instructions on this page work ~~nicely~~ on ~~both~~ '''Buster''' and '''~~Bullseye~~'''		'''NOTE''': The instructions on this page have been tested and appear to work properly on Debian 10 ('''Buster'''), Debian 11 ('''Bullseye'''), and Debian 12 ('''Bookworm''').

	Debian 10/11 ~~standard install from~~ firmware-amd64-DVD (which includes the proprietary firmware that is supposedly not included in the other install disks)		Debian standard install from distributed ISO images:
			* Debian 10/11 - ''firmware-amd64-DVD'' (which includes the proprietary firmware that is supposedly not included in the other install disks)
			* Debian 12 - select the full or network standard media - they have appeared to include the extra firmware in the primary install images

			Basic instructions for all versions:
	* Do a normal 'Install' option from the boot menu		* Do a normal 'Install' option from the boot menu
	** if that hangs on the network device detection, do the 'Expert Install' option from the 'Advanced' menu and select the default options		** if that hangs on the network device detection, do the 'Expert Install' option from the 'Advanced' menu and select the default options
Line 52:		Line 55:
	apt-get -y upgrade		apt-get -y upgrade

	# make sudo passwordless for group ~~wheel~~		# make sudo passwordless for group sudo
	echo "%sudo ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/91-wheel-NOPASSWD		echo "%sudo ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/91-wheel-NOPASSWD
	chmod 440 /etc/sudoers.d/91-wheel-NOPASSWD		chmod 440 /etc/sudoers.d/91-wheel-NOPASSWD
Line 67:		Line 70:

	# load ssh known_hosts from the config server		# load ssh known_hosts from the config server
	~~mkdir -p /root/.ssh~~		curl -s http://config/config/ssh/known_hosts -o /etc/ssh/ssh_known_hosts
	curl -s ~~$CONFIG~~/~~ssh~~/~~known_hosts -o~~ /~~root/.ssh/known_hosts~~
	~~mkdir -p /home/ewilliam/.ssh~~
	~~curl -s $CONFIG~~/ssh/known_hosts -o /~~home~~/~~ewilliam/.~~ssh/~~known_hosts~~
	~~chown -R ewilliam.ewilliam /home/ewilliam/.ssh~~

	# get backup scripts		# get backup scripts

10.42.0.1: /* Proliant System Utilities */

2024-02-07T10:20:46Z

Proliant System Utilities

← Older revision		Revision as of 10:20, 7 February 2024
Line 120:		Line 120:
	For Proliant servers, we need to install the [[HPE ProLiant System Configuration/Support\|Management Component Pack (MCP)]] to manage the storage controller. A script to do this is available on the config server:		For Proliant servers, we need to install the [[HPE ProLiant System Configuration/Support\|Management Component Pack (MCP)]] to manage the storage controller. A script to do this is available on the config server:
	curl -s http://config/config/debian/install-mcp.sh \| bash -x		curl -s http://config/config/debian/install-mcp.sh \| bash -x

			[[Proliant SSA Command Examples \| Here]] are some useful command examples.

	== Non-Free Drivers ==		== Non-Free Drivers ==

10.42.0.1: /* Basic system prep */

2024-02-03T22:24:32Z

Basic system prep

← Older revision		Revision as of 22:24, 3 February 2024
Line 95:		Line 95:
	# install more supporting stuff		# install more supporting stuff
	apt-get install -y gpg apt-transport-https		apt-get install -y gpg apt-transport-https

	~~# install metricbeat, using the standard config file on the config server~~
	~~#wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch \| sudo apt-key add -~~
	~~#echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" \| sudo tee -a /etc/apt/sources.list.d/elastic-7.x.list~~
	~~#apt-get install -y metricbeat~~
	~~#curl -s $CONFIG/common/metricbeat.yml -o /etc/metricbeat/metricbeat.yml~~
	~~#chmod 640 /etc/metricbeat/metricbeat.yml~~
	~~#sudo systemctl enable --now metricbeat~~

	# install webmin		# install webmin

DrEdWilliams: /* Configure shared filesystem access */

2021-11-25T12:53:08Z

Configure shared filesystem access

@@ Line 128: / Line 128: @@
 For Proliant servers, we need to install the [[HPE ProLiant System Configuration/Support|Management Component Pack (MCP)]] to manage the storage controller.  A script to do this is available on the config server:
   curl -s http://config/config/debian/install-mcp.sh | bash -x
 == Non-Free Drivers ==
@@ Line 164: / Line 142: @@
   apt install -y firmware-linux-nonfree
-== Final Configuration ==
+== Next Steps ==
-The only remaining task is to load the ssh credentials for '''root''' and any user accounts.  This is done by running the following command from each user account (assuming aslan is the reference source):
+The rest of the installation process is not OS-dependent and is described [[Common Post-Install|here]].

DrEdWilliams: /* Configure shared filesystem access */

2021-11-25T12:47:35Z

Configure shared filesystem access

← Older revision		Revision as of 12:47, 25 November 2021
Line 139:		Line 139:
	storage1:/files /files nfs4 soft 0 0		storage1:/files /files nfs4 soft 0 0
	storage1:/backup/systems/<hostname>/current /backup nfs4 soft 0 0		storage1:/backup/systems/<hostname>/current /backup nfs4 soft 0 0
			pro6:/work /work nfs4 soft 0 0

	make the mount points:		make the mount points:
	mkdir /files		mkdir /files
	mkdir /backup		mkdir /backup
			mkdir /work

	mount the filesystems:		mount the filesystems:
	mount /files		mount /files
	mount /backup		mount /backup
			mount /work

	== Non-Free Drivers ==		== Non-Free Drivers ==

DrEdWilliams: /* Configure shared filesystem access */

2021-11-25T12:46:10Z

Configure shared filesystem access

← Older revision		Revision as of 12:46, 25 November 2021
Line 130:		Line 130:

	== Configure shared filesystem access ==		== Configure shared filesystem access ==
	add ~~these~~ lines to the bottom of /etc/fstab		There are three shared filesystems available depending on the needs of the system:

			* <code>/files</code> - the main administrative and media file share
			* <code>/backup</code> - backup location for all systems & data
			* <code>/work</code> - technical working space

			To access these fulesystems, add the appropriate lines to the bottom of <code>/etc/fstab</code>
	storage1:/files /files nfs4 soft 0 0		storage1:/files /files nfs4 soft 0 0
	storage1:/backup/systems/<hostname>/current /backup nfs4 soft 0 0		storage1:/backup/systems/<hostname>/current /backup nfs4 soft 0 0

DrEdWilliams: /* Non-Free Drivers */

2021-09-29T02:35:20Z

Non-Free Drivers

← Older revision		Revision as of 02:35, 29 September 2021
Line 151:		Line 151:
	Similarly, some RealTek drivers need to be added:		Similarly, some RealTek drivers need to be added:
	apt install firmware-realtek		apt install firmware-realtek

			Some systems also require tigon/tg3 drivers. This one installs more than a few other packages, too ... including the amd-graphics package mentioned above.
			apt install -y firmware-linux-nonfree

	== Final Configuration ==		== Final Configuration ==

DrEdWilliams at 15:42, 26 September 2021

2021-09-26T15:42:59Z

← Older revision		Revision as of 15:42, 26 September 2021
Line 3:		Line 3:
	'''NOTE''': Debian 11 (Bullseye) is out -- the instructions on this page work nicely on both '''Buster''' and '''Bullseye'''		'''NOTE''': Debian 11 (Bullseye) is out -- the instructions on this page work nicely on both '''Buster''' and '''Bullseye'''

	Debian 10 ~~"Buster"~~ standard install from firmware-amd64-DVD (which includes the proprietary firmware that is supposedly not included in the other install disks)		Debian 10/11 standard install from firmware-amd64-DVD (which includes the proprietary firmware that is supposedly not included in the other install disks)

	* Do a normal 'Install' option from the boot menu		* Do a normal 'Install' option from the boot menu