User Tools

Site Tools


sysadminery:linux_boilerplate

install

  1. make your password something terrible like “temp” - terminal emulators accept keypresses for weird-ass symbols pretty well, but most things don't cooperate with password managers.
  2. apt-get install sudo
  3. usermod -a -G sudo adam
  4. find /etc/ssh/sshd_config, set PasswordAuthentication to yes
  5. sudo service ssh restart
  6. login as ssh, fix passwords (for both self and root!)
  7. setup pubkey login
  8. sudo apt-get install vim
  9. dotnet consideration: on debian12 there's /etc/profile. On some systems there may only be ~/.bash_profile. debian 12 for example says that if it finds that it'll override /etc/profile and ~/.profile If you're using dotnet, you want to turn off MS spyware (as best you're able). Add this line: export DOTNET_CLI_TELEMETRY_OPTOUT=1

create a user

sudo useradd -m -s /bin/bash [username]; passwd [username]

  • -m is for “Make a home directory, obviously, dafuq is wrong with you”
  • -s is for “Shell should be the following”, there's a default you can set in some file somewhere

if you fucked up and missed the -s: chsh -s /bin/bash. fuck knows what chsh without -s is for.

cooperate with nas

  1. at time of writing, my nasbox follows the file access/organization strategy of “heap (none)”. so there's /mnt/pool1/exchange, mode 775, owned by group 1024: exchangers.
  2. groupadd -g 1024 exchangers
    usermod -a -G exchangers adam
  3. you'll need some kind of program to mount NFS shares. on debian 11, apt-get install nfs-common
  4. make the target directory. I've been using /srv/gusion.
  5. now you can edit /etc/fstab:
    gusion.lan:/mnt/pool1/exchange	/srv/gusion	nfs	defaults	0	0
  6. sudo mount -a

join the wireguarden

kodi

  1. install it. it's in apt.
  2. once you've mounted gusion, just go to videos and add a source.
  3. enable remote: settings → services → control (you can be in “standard”)
    1. set your username, and password, port if you like
    2. turn it on. it loves to turn itself back off :')
    3. android remotes don't have to be explicit peers.
  4. enable deletion: be “Advanced”; settings → media → general → Allow file renaming and deletion

raspberry pi

BEFORE FIRST BOOT

mount the boot partition.

1) make yourself a user

echo "myuser:$(echo 'mypassword' | openssl passwd -6 -stdin)" > userconf

2) enable ssh

touch ssh

yes, that's all. really. blank file.

3) if you want wifi:

make wpa_supplicant.conf.

if it's wpa3/wpa2 mixed:

ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
update_config=1
country=US

network={
   ssid="Your network name/SSID"
   psk="Your WPA security key"
   key_mgmt=WPA-PSK-SHA256
   ieee80211w=2
}

if it's just wpa2, remove the ieee80211w=2 line

sysadminery/linux_boilerplate.txt · Last modified: 2024/12/04 03:23 by adam