User Tools

Site Tools


distros:ubuntu_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
distros:ubuntu_server [2019/06/03 20:40] – [Timer] Sean Rhonedistros:ubuntu_server [2020/06/12 03:03] Sean Rhone
Line 2: Line 2:
  
   * Ubuntu Server ((http://www.ubuntu.com/server))   * Ubuntu Server ((http://www.ubuntu.com/server))
-  * 18.04.1 LTS+  * 20.04 LTS 
 + 
 +====== Known Issues ====== 
 + 
 +  * None
  
 ====== Download ====== ====== Download ======
Line 11: Line 15:
 ====== Installation Notes ====== ====== Installation Notes ======
  
-  * :!: Either use the Alternate or Network installer images to avoid cloud-init stuff 
   * During installation, allow network autoconfig to occur, and then go back once prompted for a hostname; this will allow setting a static IPv4 address and custom DNS settings   * During installation, allow network autoconfig to occur, and then go back once prompted for a hostname; this will allow setting a static IPv4 address and custom DNS settings
  
-====== Software ====== +====== Repositories ======
- +
-===== Repositories =====+
  
-=== Additional Ubuntu ===+===== Additional Ubuntu =====
  
   * https://help.ubuntu.com/community/Repositories/Ubuntu   * https://help.ubuntu.com/community/Repositories/Ubuntu
Line 29: Line 30:
  
   sudo add-apt-repository 'restricted'   sudo add-apt-repository 'restricted'
 +
 +====== Software ======
  
 ===== Update ===== ===== Update =====
 +
 +==== System ====
  
 **** ****
Line 36: Line 41:
   sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean && sync   sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean && sync
  
-===== CPU Microcode ===== +==== Snaps ====
- +
-==== Intel ====+
  
 **** ****
  
-  intel-microcode+  sudo snap refresh
  
-==== AMD ====+===== General =====
  
-  * Kraityn can't use this ((AMD Athlon(tm) 64 X2 Dual Core Processor 5600+)) +==== Bare-metal ====
-  * TODO Oak ((AMD Phenom(tm) II X4 965 Processor))+
  
-  amd64-microcode+****
  
-====== Settings ======+  sudo apt install lm-sensors
  
-===== Cloud-Init =====+===== Keybase =====
  
-  * https://cloudinit.readthedocs.io/en/latest/topics/boot.html#generator +  * https://keybase.io 
-  * This disabled Cloud-Init +  * TODOFigure out backup script
-  * :!Can avoid this by using the Alternative or Network installer images to install instead of the default image+
  
-  sudo touch '/etc/cloud/cloud-init.disabled'+  wget -O '/tmp/keybase_amd64.deb' 'https://prerelease.keybase.io/keybase_amd64.deb' && sudo dpkg --install '/tmp/keybase_amd64.deb' && sudo apt install -f && rm '/tmp/keybase_amd64.deb&& sync && run_keybase
  
-===== systemd-networkd =====+====== Settings ======
  
-  * This prevents the 2-minute start-up delay that happens for some unknown reason +===== OpenSSH =====
-  * :!: This would theoretically pose a potential problem if there really is no internet connectivity ((But then again, I'm not sure what would happen without the mask even without an internet connection))+
  
-  sudo systemctl mask 'systemd-networkd-wait-online.service' --now+  * See [[clients:secure_shell|OpenSSH Client]] notes to generate/restore public key 
 +  * See [[servers:secure_shell|OpenSSH Server]] notes to force public key auth and to further secure the OpenSSH server
  
-===== Secure Shell =====+===== Sensors =====
  
-  * See [[Clients:Secure Shell]]+==== Detect ====
  
-===== Timezone =====+****
  
-  * Show list of available timezones with ''timedatectl''+  sudo sensors-detect --auto
  
-  sudo timedatectl set-timezone 'America/New_York'+==== Watch ====
  
-===== TRIM ===== +****
- +
-==== Swap ==== +
- +
-  Add ''discard'' after ''defaults'' for the ''swap'' mountpoint ((defaults,discard)) +
- +
-  sudo -e '/etc/fstab' +
- +
-  ,discard +
- +
-==== Service ==== +
- +
-  ''fstrim.timer'' is already enabled out-the-box, but this is useful for historical purposes +
-  TODO: Verify+
  
-  sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l+  sudo watch -n0.1 sensors
  
 ===== Uncomplicated Firewall ===== ===== Uncomplicated Firewall =====
  
   * Allows SSH   * Allows SSH
 +  * :!: Does not limit SSH ((this caused issues; better to just secure SSH))
 +  * See [[notes:ufw|ufw]] for more notes
  
   sudo ufw reset && sudo ufw default deny && sudo ufw logging off && sudo ufw allow 'ssh' && sudo ufw enable && sudo systemctl enable 'ufw'   sudo ufw reset && sudo ufw default deny && sudo ufw logging off && sudo ufw allow 'ssh' && sudo ufw enable && sudo systemctl enable 'ufw'
/var/www/wiki/data/pages/distros/ubuntu_server.txt · Last modified: 2024/02/07 09:22 by Sean Rhone