Get the Ubuntu Server 6.06.2 LTS Installion CD First thing to do is to download Ubuntu Server installation CD suitable for your hardware platform.
CDs can be downloaded from http://releases.ubuntu.com/
Burn the CD image to a CD-R.
Installing Ubuntu Server 6.06.2 LTS Select 'Install to Hard Disk'
After system has booted up, the Ubuntu installation system starts.
In first screen you need to select installation language:
Select your language:
Choose a keyboard layout:
Setup starts to inspect your hardware setup:
If your network doesn't have DHCP, you can configure network manually:
Insert the hostname for your system, for example 'winkle':
Insert your domain name, for example 'example.com':
Next thing to do is a disk partitioning.
I generally partition in the following manner:
Partition
Bootable
Size
FS
Mount-point
Note
1
Y
500MB
ext3
/boot
needs enough space to ensure that kernel upgrades don’t fill it
2
N
1-2x system memory, usually 2-8GB
swap
swap
may as well have a ton of it
3
N
Usualy 10% of your harddrive
xfs
/root
To separate /root file system from the root file system
4
Y
the rest
xfs
/
The reason for the partitions I do use are as follows:
/boot needs to be at the beginning of the disk to ensure compatibility with BIOSes and bootloaders; it should also be ext3 for bootloader and rescue CD purposes
/root needs to be in separate file space for security reasons
I use XFS because it seems better than JFS, ext3 and ResierFS to me.
Select your timezone.
Create a new user
Base system installation procedure starts:
Remove installation CD and reboot system:
Base system installation is finished
System will reboot Enable The root Account Ubuntu disables the root user account by default. Because we must run all the steps from this tutorial as root user, we must enable the root account now. To enable it, winkle , then runFirst update the 'apt' repositories so we can then upgrade the system. Updating 'apt' repositories Update the apt repositories so to include main , restricted ,backports, universe and multiverse . Also disable cdrom access. This is done by editing '/etc/apt/sources.list'.
# nano -w /etc/apt/sources.list
Here is example
root@server:~# cat /etc/apt/sources.list #
Now update repositories.
# apt-get update
Now the repositories are complete we can proceed with an system upgrade.
# apt-get upgrade -y
Now reboot. The reason for this is kernel image was updated and needs to take effect.
# shutdown -r now
Login as root
I nstalling MC - GNU Midnight Commander GNU Midnight Commander is a file manager for free operating systems. Being a text mode application, GNU Midnight Commander can be used locally or remotely, on the console or under X Window System. By using full screen space of the terminals, it provides an intuitive user interface to the operating system, aiming to be a useful tool for users with any level of experience, from a newbie to a guru. SSH is a protocol designed to provide remote secure access for administration purpose. OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other network-level attacks.Ubuntu does not install OpenSSH by default, therefore we do it now. Runapt-get install ssh openssh-server -y
Configure the /etc/ssh/sshd_config file
# nano -w /etc/ssh/sshd_config file
Changing the default SSH port Change the default SSH port (22) to stop the brute force attacks (most of them).
ServerKeyBits The option ServerKeyBits specifies how many bits to use in the server key. Change dafault value to 1024. These bits are used when the daemonstarts to generate its RSA key Disabling root login Disable root access login . Administrators should have to login under non privileged user name ( winkle ) first & then su to root.
# Changes to the /etc/ssh/sshd_config file
Remove sudoers entries
Sudoers file /etc/sudoers should something look like this
root@server:~# cat /etc/sudoers
Configure The Network
Installing DNS resolver
Having a local DNS cache is highly recommended, this can have a big effect on the server performance. djbdns is a replacement for BIND. It is secure, reliable, small, fast, etc etc etc. dnscache is a recursive resolver, intended to be listed in /etc/resolv.conf's "nameserver" entry. It makes DNS queries via UDP and TCP as needed. daemontools manages all the djbdns services and daemons.
First run:
# apt-get install daemontools-installer djbdns-installer -y
Then build daemontools run:
# build-daemontools
(just hit [Enter] at any questions it asks)
Then build djbdns, run:
# build-djbdns
(just hit [Enter] at any questions it asks)
Configure the dnscache program, run: # dnscache-conf dnscache dnslog /etc/dnscache Create a symlink to the dnscache program in the /service directory so svscan will start it, run: # ln -s /etc/dnscache /service Wait at least 5 seconds, then see if the dnscache service is running, run: # svstat /service/dnscache Create a new resolv.conf (pointing to ourselves as the DNS server), run: # echo "domain example.com" > /etc/resolv.conf # echo "nameserver 127.0.0.1" >> /etc/resolv.conf Test that you are able to resolve a host name on the Internet, run: # dnsip www.cnn.com NTP is a protocol designed to synchronize the clocks of computers over a network. Lots of server processes depend on the system clock for proper operation, so it is crucial to have NTP running and to select servers that are reliable and close to you from a network standpoint. ntp-update.sh, run: 1 i p149.example.comnone none 127.0.0.1 none y 1 l example-co-root@gmail.com" >> /etc/aliasesy example-co-root@gmail.com you should receive test message.32 bit extensions If you are running 64 bit Linux install the 32-bit Extensions to allow 64-bit Linux to run 32-bit applications.
apt-get install ia32-libs linux32 -y
