• Ubuntu Server ¹⁾
• 23.04

• None

• http://www.ubuntu.com/download/server
• http://cdimage.ubuntu.com/releases/

• N/A

• https://help.ubuntu.com/community/Repositories/Ubuntu
• Only universe is likely needed
• As of 2023/05/04, none of this is necessary

sudo add-apt-repository 'universe'

sudo add-apt-repository 'multiverse'

sudo add-apt-repository 'restricted'

• https://keybase.io/
• https://prerelease.keybase.io/
• This is only the signing key, see Keybase for client installation

wget -O '/tmp/code_signing_key.asc' 'https://keybase.io/docs/server_security/code_signing_key.asc' && sudo mv '/tmp/code_signing_key.asc' '/etc/apt/trusted.gpg.d/keybase.asc' && sync

sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean && sync

sudo fwupdmgr refresh --force && sudo fwupdmgr update --verbose && sync

sudo snap refresh

• https://keybase.io
• TODO: Figure out backup script

rm -Rf '/tmp/keybase_amd64.deb' && wget -O '/tmp/keybase_amd64.deb' 'https://prerelease.keybase.io/keybase_amd64.deb' && sudo apt install '/tmp/keybase_amd64.deb' && rm '/tmp/keybase_amd64.deb' && sync && run_keybase

echo 'vm.swappiness = 0' | sudo tee '/etc/sysctl.d/99-swappiness.conf' > '/dev/null' && cat '/etc/sysctl.d/99-swappiness.conf'

sysctl 'vm.swappiness'

cat '/proc/sys/vm/swappiness'

• More Kernel Parameters
• Add options in GRUB_CMDLINE_LINUX_DEFAULT=

sudo -e '/etc/default/grub' && sudo update-grub

acpi_osi=Linux

pci=pcie_bus_perf,realloc,pcie_scan_all,big_root_window

processor.ignore_ppc=1

intel_pstate=enable

sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

• XFS - ArchWiki
• This is only necessary if XFS is being used on any persistent drives such as a NAS, and requires xfsprogs to be installed

sudo apt install 'xfsprogs'

sudo systemctl enable 'xfs_scrub_all.timer' --now && sudo systemctl start 'xfs_scrub_all' && sync && sudo systemctl status 'xfs_scrub_all' -l

• System time - ArchWiki
• Set RTC to UTC
• Needed if Windows is installed first
• Windows should also be set to UTC

sudo timedatectl set-local-rtc '0'

timedatectl | grep local

• See Client notes to generate/restore public key
• See Server notes to force public key auth and to further secure the OpenSSH server

sudo apt install lm-sensors

sudo sensors-detect --auto

sudo watch --interval '0.5' sensors

• Allows SSH
• Does not limit SSH ²⁾
• See ufw for more notes

sudo ufw reset && sudo ufw default deny && sudo ufw logging off && sudo ufw allow 'ssh' && sudo ufw enable && sudo systemctl enable 'ufw'

• Should keep old config files in-case updated package changes their config (needs tested)
• 2023/05/04: Not sure if this is needed still?

sudo -e '/etc/apt/apt.conf.d/99auto-update-custom'

Dpkg::Options {
   "--force-confdef";
   "--force-confold";
}

• 2023/05/04: snap refresh needs tested

sudo -e '/etc/systemd/system/ubuntu-up.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/apt' clean
ExecStart='/usr/bin/apt' update
ExecStart='/usr/bin/apt' full-upgrade -y
ExecStart='/usr/bin/apt' autoremove -y
ExecStart='/usr/bin/snap' refresh
ExecStartPost='/usr/bin/sync'
ExecStartPost='/usr/bin/systemctl' reboot

• 03:00 Oak

sudo -e '/etc/systemd/system/ubuntu-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'ubuntu-up.timer' --now

[Unit]
Description=Software Package Maintenance and Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 03:00:00
Persistent=true

[Install]
WantedBy=timers.target

• 2023/05/04: This hasn't been used for years and likely needs re-factored

• Expects a drive of some kind with a XFS partition at /dev/sdb1

sudo mkdir -p '/mnt/USB' && sudo -e '/etc/fstab'

# USB
/dev/sdb1 /mnt/USB xfs rw,relatime,attr2,inode64,noquota 0 2

sudo mount '/dev/sdb1'

sudo -e '/etc/systemd/system/backup-external.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/backup-external.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/sync'
ExecStart='/usr/bin/rsync' -r '/home/CHANGEME/backups' '/mnt/USB' --verbose --ignore-existing
ExecStartPost='/usr/bin/sync'

sudo -e '/etc/systemd/system/backup-external.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'backup-external.timer' --now

[Unit]
Description=Backup Backups to External Device

[Timer]
OnCalendar=*-*-* 07:00:00
Persistent=true

[Install]
WantedBy=timers.target

• See misc_linux