• Ubuntu Server ¹⁾
• 18.04.1 LTS

• http://www.ubuntu.com/download/server
• http://cdimage.ubuntu.com/releases/

• Either use the Alternate or Network installer images to avoid cloud-init stuff
• During installation, allow network autoconfig to occur, and then go back once prompted for a hostname; this will allow setting a static IPv4 address and custom DNS settings

• https://help.ubuntu.com/community/Repositories/Ubuntu
• Only universe is likely necessary
• TODO: May not even need universe on servers

sudo add-apt-repository 'universe'

sudo add-apt-repository 'multiverse'

sudo add-apt-repository 'restricted'

sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean && sync

intel-microcode

• Kraityn can't use this ²⁾
• TODO Oak ³⁾

amd64-microcode

• https://cloudinit.readthedocs.io/en/latest/topics/boot.html#generator
• This disabled Cloud-Init
• Can avoid this by using the Alternative or Network installer images to install instead of the default image

sudo touch '/etc/cloud/cloud-init.disabled'

• This prevents the 2-minute start-up delay that happens for some unknown reason
• This would theoretically pose a potential problem if there really is no internet connectivity ⁴⁾

sudo systemctl mask 'systemd-networkd-wait-online.service' --now

• See Secure Shell

• Show list of available timezones with timedatectl

sudo timedatectl set-timezone 'America/New_York'

• Add discard after defaults for the swap mountpoint ⁵⁾

sudo -e '/etc/fstab'

,discard

• fstrim.timer is already enabled out-the-box, but this is useful for historical purposes
• TODO: Verify

sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l

• Allows SSH

sudo ufw reset && sudo ufw default deny && sudo ufw logging off && sudo ufw allow 'ssh' && sudo ufw enable && sudo systemctl enable 'ufw'

• Should keep old config files in-case updated package changes their config (needs tested)

sudo -e '/etc/apt/apt.conf.d/99auto-update-custom'

Dpkg::Options {
   "--force-confdef";
   "--force-confold";
}

sudo -e '/etc/systemd/system/ubuntu-up.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/apt' clean
ExecStart='/usr/bin/apt' update
ExecStart='/usr/bin/apt' full-upgrade -y
ExecStart='/usr/bin/apt' autoremove -y
ExecStartPost='/bin/sync'
ExecStartPost='/bin/systemctl' reboot

• 06:10 Kraityn
• 06:20 Alira
• 06:30 Oak

sudo -e '/etc/systemd/system/ubuntu-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'ubuntu-up.timer' --now

[Unit]
Description=Software Package Maintenance and Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 06:10:00
Persistent=true

[Install]
WantedBy=timers.target

• Expects a drive of some kind with a XFS partition at /dev/sdb1

sudo mkdir -p '/mnt/USB' && sudo -e '/etc/fstab'

# USB
/dev/sdb1 /mnt/USB xfs rw,relatime,attr2,inode64,noquota 0 2

sudo mount '/dev/sdb1'

• TODO: Ubuntu paths

sudo -e '/etc/systemd/system/backup-external.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/backup-external.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/sync'
ExecStart='/usr/bin/rsync' -r '/home/CHANGEME/backups' '/mnt/USB' --verbose --ignore-existing
ExecStartPost='/usr/bin/sync'

sudo -e '/etc/systemd/system/backup-external.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'backup-external.timer' --now

[Unit]
Description=Backup Backups to External Device

[Timer]
OnCalendar=*-*-* 07:00:00
Persistent=true

[Install]
WantedBy=timers.target

sudo fstrim -v --all

grep 'MHz' '/proc/cpuinfo'

watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo'

df -hT

grep -e "processor" -e "core id" -e "^$" /proc/cpuinfo

gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;'

history -cw

• Change x in x.7z to the desired archive name
• Change CHANGEME in -pCHANGEME to the desired password

7za a 'x.7z' -p'CHANGEME'