Virmach Ubuntu Install Issue/Questions

dtoker

Hello all! Question to users of Virmach, their Ubuntu templates are seriously outdated 16.04 is reaching EOL this April. Can we simply install 16.04 then upgrade it to 18.04? Is the process of doing that smooth/problem free? Appreciate if anyone could share how they go about it.

Are there any plans you heard of that they will be offering 18.04/20.04 soon? Honestly a lot disappointed this is the only provider been with that has this out of date template.

corbpie

You need to install the newer versions via ISO, which are pre-loaded.

dtoker

@corbpie Thanks a bunch found it its under server details instead.

dtoker

After mounting the Ubuntu 20.04 ISO cannot login with the provided passwords. :-( Do I need to reset the password somewhere?

JabJab

After mounting ISO you set boot order to CD first and proceed to install* Ubuntu via VNC.
This is not 'template', this is 'Live CD install ISO'.

[*] default install is like Windows install few years ago. Next, next, next, login data, next, next, next, done.

pullangcubo

Now that we're in this topic, and also as means to add something to this thread: what are the things that you do to set up your VPS after reinstalling its OS via the ISO route?

yoursunny

@pullangcubo said:
what are the things that you do to set up your VPS after reinstalling its OS via the ISO route?

Some notes for my recent ISO setup on Virmach.
I use Debian 10 and Ubuntu 20 only.

Partition

(total disk is 45GB)

• 9GB at /
• 1GB swap
• remaining at /home

Base Configuration

Prevent unnecessary packages:

echo 'APT::Install-Recommends "no";
APT::Install-Suggests "no";' >/etc/apt/apt.conf.d/80recommends

Change nameserver and prevent SolusVM / Virtualizor overwriting them:

echo 'nameserver 8.8.8.8
nameserver 1.1.1.1' >/etc/resolv.conf
chattr +i /etc/resolv.conf

Require SSH key authentication:

• For Debian: public key was inserted during first connection via ssh-copy-id
• For Ubuntu: public key was retrieved from GitHub during installation

sed -i -E '/^#?PasswordAuthentication\b/ s|.*|PasswordAuthentication no|' /etc/ssh/sshd_config

Prevent logs filling up disk:

sed -i -E '/^#?SystemMaxUse=/ s|.*|SystemMaxUse=50M|' /etc/systemd/journald.conf

Update and install packages:

apt update
apt purge nano
apt install curl git htop jq net-tools screen sudo tcpdump traceroute ufw vim

Make my user sudoer:

• This is for Debian only. Commands up to this one were executed in su context.
• In Ubuntu: my user is already sudoer. Previous commands were executed with sudo.

/usr/sbin/usermod -a -G sudo sunny

Skip password during sudo:

sudo visudo
  %sudo   ALL=(ALL:ALL) NOPASSWD: ALL

IPv6

https://tunnelbroker.net
Example Configurations - Debian/Ubuntu

Since Virmach is IPv4 primary service, prefer IPv4:

sudo vi /etc/gai.conf
  precedence ::ffff:0:0/96  100

Firewall

Since 2021-Jan, I started deploying firewall as part of standard setup for all KVM servers. However, this breaks UDP traceroute.

sudo ufw allow 22/tcp
sudo ufw enable
sudo ufw deny out 25/tcp

# TunnelBroker (change to the tunnel server IPv4 address)
sudo ufw allow from 64.62.134.130 proto ipv6

# more entries for each service

# increase UDP timeout in firewall
(
  echo
  echo '# yoursunny custom'
  echo 'net/netfilter/nf_conntrack_udp_timeout=600'
) | sudo tee -a /etc/ufw/sysctl.conf

yoursunny

(accidentally posted duplicate)

AlwaysSkint

@yoursunny said: Prevent logs filling up disk:

sed -i -E '/^#?SystemMaxUse=/ s|.*|SystemMaxUse=50M|' /etc/systemd/journald.conf

Now that's a useful snippet.

Amazing what you can come up with when you put you mind to it, instead of push-up crap!

saibal

@yoursunny said:
Debian install - the non-template way

@FAT32 Please make this sticky. Would help a lot of users.