Virmach Ubuntu Install Issue/Questions

Comments

• corbpie Member

  February 2021

  You need to install the newer versions via ISO, which are pre-loaded.

  Thanked by 1dtoker
• dtoker Member

  February 2021

  @corbpie Thanks a bunch found it its under server details instead.
• dtoker Member

  February 2021

  After mounting the Ubuntu 20.04 ISO cannot login with the provided passwords. :-( Do I need to reset the password somewhere?
• JabJab Veteran

  February 2021 edited February 2021

  After mounting ISO you set boot order to CD first and proceed to install* Ubuntu via VNC.
  This is not 'template', this is 'Live CD install ISO'.

  [*] default install is like Windows install few years ago. Next, next, next, login data, next, next, next, done.
• pullangcubo Member

  February 2021

  Now that we're in this topic, and also as means to add something to this thread: what are the things that you do to set up your VPS after reinstalling its OS via the ISO route?
• yoursunny Member, IPv6 Advocate

  February 2021

  @pullangcubo said:
  what are the things that you do to set up your VPS after reinstalling its OS via the ISO route?

  Some notes for my recent ISO setup on Virmach.
  I use Debian 10 and Ubuntu 20 only.

  Partition

  (total disk is 45GB)

  • 9GB at /
  • 1GB swap
  • remaining at /home

  Base Configuration

  Prevent unnecessary packages:

  echo 'APT::Install-Recommends "no";
  APT::Install-Suggests "no";' >/etc/apt/apt.conf.d/80recommends
  

  Change nameserver and prevent SolusVM / Virtualizor overwriting them:

  echo 'nameserver 8.8.8.8
  nameserver 1.1.1.1' >/etc/resolv.conf
  chattr +i /etc/resolv.conf
  

  Require SSH key authentication:

  • For Debian: public key was inserted during first connection via ssh-copy-id
  • For Ubuntu: public key was retrieved from GitHub during installation

  sed -i -E '/^#?PasswordAuthentication\b/ s|.*|PasswordAuthentication no|' /etc/ssh/sshd_config
  

  Prevent logs filling up disk:

  sed -i -E '/^#?SystemMaxUse=/ s|.*|SystemMaxUse=50M|' /etc/systemd/journald.conf
  

  Update and install packages:

  apt update
  apt purge nano
  apt install curl git htop jq net-tools screen sudo tcpdump traceroute ufw vim
  

  Make my user sudoer:

  • This is for Debian only. Commands up to this one were executed in su context.
  • In Ubuntu: my user is already sudoer. Previous commands were executed with sudo.

  /usr/sbin/usermod -a -G sudo sunny
  

  Skip password during sudo:

  sudo visudo
    %sudo   ALL=(ALL:ALL) NOPASSWD: ALL
  

  IPv6

  https://tunnelbroker.net
  Example Configurations - Debian/Ubuntu

  Since Virmach is IPv4 primary service, prefer IPv4:

  sudo vi /etc/gai.conf
    precedence ::ffff:0:0/96  100
  

  Firewall

  Since 2021-Jan, I started deploying firewall as part of standard setup for all KVM servers. However, this breaks UDP traceroute.

  sudo ufw allow 22/tcp
  sudo ufw enable
  sudo ufw deny out 25/tcp
  
  # TunnelBroker (change to the tunnel server IPv4 address)
  sudo ufw allow from 64.62.134.130 proto ipv6
  
  # more entries for each service
  
  # increase UDP timeout in firewall
  (
    echo
    echo '# yoursunny custom'
    echo 'net/netfilter/nf_conntrack_udp_timeout=600'
  ) | sudo tee -a /etc/ufw/sysctl.conf
  

  Thanked by 3pullangcubo dtoker VayVayKa
• yoursunny Member, IPv6 Advocate

  February 2021 edited February 2021

  (accidentally posted duplicate)
• AlwaysSkint Member

  February 2021 edited February 2021

  @yoursunny said: Prevent logs filling up disk:

  sed -i -E '/^#?SystemMaxUse=/ s|.*|SystemMaxUse=50M|' /etc/systemd/journald.conf

  Now that's a useful snippet.

  Amazing what you can come up with when you put you mind to it, instead of push-up crap!
• saibal Member

  February 2021

  @yoursunny said:
  Debian install - the non-template way

  @FAT32 Please make this sticky. Would help a lot of users.

  Thanked by 1dtoker