• Ubuntu Server ¹⁾
• 18.04.3 LTS

• None

• http://www.ubuntu.com/download/server
• http://cdimage.ubuntu.com/releases/

• Either use the Alternate or Network installer images to avoid cloud-init stuff
• During installation, allow network autoconfig to occur, and then go back once prompted for a hostname; this will allow setting a static IPv4 address and custom DNS settings

• https://help.ubuntu.com/community/Repositories/Ubuntu
• Only universe is likely necessary
• TODO: May not even need universe on servers

sudo add-apt-repository 'universe'

sudo add-apt-repository 'multiverse'

sudo add-apt-repository 'restricted'

sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean && sync

sudo snap refresh

sudo apt install lm-sensors

• https://keybase.io
• TODO: Figure out backup script

wget -O '/tmp/keybase_amd64.deb' 'https://prerelease.keybase.io/keybase_amd64.deb' && sudo dpkg --install '/tmp/keybase_amd64.deb' && sudo apt install -f && rm '/tmp/keybase_amd64.deb' && sync && run_keybase

• See Secure Shell

• Be sure to generate/restore keys and to copy to server before disabling passwords
• See Secure Shell notes

echo 'PasswordAuthentication no' | sudo tee '/etc/ssh/ssh_config.d/custom-pubkey-only.conf' > '/dev/null' && cat '/etc/ssh/ssh_config.d/custom-pubkey-only.conf'

sudo -e '/etc/ssh/ssh_config.d/custom-pubkey-only.conf'

sudo sensors-detect --auto

sudo watch -n0.1 sensors

• Allows SSH
• Limits SSH connections
• See ufw for more notes

sudo ufw reset && sudo ufw default deny && sudo ufw logging off && sudo ufw allow 'ssh' && sudo ufw limit 'ssh' && sudo ufw enable && sudo systemctl enable 'ufw'

• Should keep old config files in-case updated package changes their config (needs tested)

sudo -e '/etc/apt/apt.conf.d/99auto-update-custom'

Dpkg::Options {
   "--force-confdef";
   "--force-confold";
}

sudo -e '/etc/systemd/system/ubuntu-up.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/apt' clean
ExecStart='/usr/bin/apt' update
ExecStart='/usr/bin/apt' full-upgrade -y
ExecStart='/usr/bin/apt' autoremove -y
ExecStartPost='/bin/sync'
ExecStartPost='/bin/systemctl' reboot

• 06:10 Kraityn
• 06:20 Alira
• 06:30 Oak
• 06:40 Hatebeat

sudo -e '/etc/systemd/system/ubuntu-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'ubuntu-up.timer' --now

[Unit]
Description=Software Package Maintenance and Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 06:10:00
Persistent=true

[Install]
WantedBy=timers.target

• Expects a drive of some kind with a XFS partition at /dev/sdb1

sudo mkdir -p '/mnt/USB' && sudo -e '/etc/fstab'

# USB
/dev/sdb1 /mnt/USB xfs rw,relatime,attr2,inode64,noquota 0 2

sudo mount '/dev/sdb1'

• TODO: Ubuntu paths

sudo -e '/etc/systemd/system/backup-external.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/backup-external.service'

[Service]
Type=oneshot
ExecStartPre='/usr/bin/sync'
ExecStart='/usr/bin/rsync' -r '/home/CHANGEME/backups' '/mnt/USB' --verbose --ignore-existing
ExecStartPost='/usr/bin/sync'

sudo -e '/etc/systemd/system/backup-external.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'backup-external.timer' --now

[Unit]
Description=Backup Backups to External Device

[Timer]
OnCalendar=*-*-* 07:00:00
Persistent=true

[Install]
WantedBy=timers.target

sudo fstrim -v --all

grep 'MHz' '/proc/cpuinfo'

watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo'

df -hT

grep -e "processor" -e "core id" -e "^$" /proc/cpuinfo

gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;'

history -cw

• Change x in x.7z to the desired archive name
• Change CHANGEME in -pCHANGEME to the desired password

7za a 'x.7z' -p'CHANGEME'