DebPostInstall: Debian And Ubuntu Server Post Install Script

Tired of tedious post-installation checklists for your Debian or Ubuntu servers? This tutorial introduces DebPostInstall, a Bash script designed to automate essential post-installation tasks, saving you time and effort. Whether you're a Linux novice or a seasoned sysadmin, DebPostInstall simplifies server setup.

This guide will walk you through using DebPostInstall to quickly configure a secure and optimized Debian-based server. Let's begin!

Table of Contents

- DebPostInstall: Your Automated Debian/Ubuntu Post-Installation Solution

• Understanding the Script's Functionality
• Automating Crucial Post-Installation Steps with DebPostInstall
• Verifying Successful Post-Installation
• Conclusion

DebPostInstall: Your Automated Debian/Ubuntu Post-Installation Solution

DebPostInstall is a concise Bash script automating key post-installation procedures on minimal Debian or Ubuntu servers. These automated tasks include:

1. Creating a new user with sudo privileges.
2. Adding a public SSH key for secure remote access.
3. Disabling password authentication and root login for enhanced security.
4. Configuring the Uncomplicated Firewall (UFW) for robust server protection.
5. Creating a swap file to boost system performance.
6. Setting the timezone and enabling time synchronization for accurate timekeeping.

While manual configuration is possible, DebPostInstall streamlines this process significantly.

Here's the script's code:

#!/usr/bin/env bash
# ------------------------------------------------------------------# Script Name:   DebPostInstall
# Description:   Automates essential post-installation tasks on Debian/Ubuntu
# Website:       [Link to GitHub Gist or similar]
# Version:       1.0
# Usage:         sudo ./debpostinstall.sh
# ------------------------------------------------------------------# System Update
echo "Updating the system..."
apt-get update && apt-get full-upgrade -y
apt-get autoremove -y && apt-get autoclean -y
# Install Essential Packages
echo "Installing necessary packages..."
apt-get install -y sudo openssh-server ufw systemd-timesyncd vim htop net-tools curl wget git
# New User Setup
read -p "Enter the new user's username: " USERNAME
# ... (rest of the script remains the same as in the original input) ...

This script is open-source and can be freely modified and distributed. Feel free to customize it to meet your specific requirements.

Understanding the Script's Functionality

The script's functionality is broken down into logical sections:

1. Shebang: #!/usr/bin/env bash specifies Bash as the interpreter.
2. System Update: Updates and upgrades packages using apt-get.
3. Package Installation: Installs essential packages like openssh-server, ufw, and others.
4. User Creation: Prompts for a username and password, creating a new user with sudo access.
5. SSH Key Addition: Prompts for a public SSH key and adds it to the authorized_keys file, ensuring secure access.
6. Security Hardening: Disables password authentication and root login for enhanced security.
7. Firewall Configuration: Configures UFW, allowing SSH access.
8. Swap File Creation: Creates a swap file based on system memory.
9. Timezone and Time Synchronization: Sets the timezone and enables time synchronization.

Each section performs a specific task, contributing to a secure and well-configured server.

Automating Crucial Post-Installation Steps with DebPostInstall

Before running the script:

1. Generate an SSH key pair on your local machine using ssh-keygen.
2. Copy the public key (id_ed25519.pub).

Next, log into your server, save the DebPostInstall script (e.g., as debpostinstall.sh), and make it executable: chmod x debpostinstall.sh.

Run the script using sudo ./debpostinstall.sh. The script will guide you through the process, prompting for the username, public SSH key, and timezone. Remember to reboot your server after completion.

Verifying Successful Post-Installation

After running the script and rebooting, verify the changes:

1. User Verification: getent passwd <username></username>
2. Sudo Access: groups <username></username>
3. SSH Key: ls -ld ~/.ssh/, ls -l ~/.ssh/authorized_keys
4. Password Authentication: grep "PasswordAuthentication no" /etc/ssh/sshd_config
5. Root Login: grep "PermitRootLogin no" /etc/ssh/sshd_config
6. UFW Status: sudo ufw status
7. Swap File: sudo swapon --show
8. /etc/fstab: grep "/swapfile" /etc/fstab
9. Timezone: timedatectl | grep "Time zone"
10. Time Synchronization: sudo systemctl status systemd-timesyncd

Conclusion

DebPostInstall simplifies Debian/Ubuntu server setup by automating crucial post-installation tasks. By using this script, you can significantly reduce the time and effort required to configure a secure and efficient server environment. Remember to customize the script to fit your specific needs and always verify the changes after running it.

The above is the detailed content of DebPostInstall: Debian And Ubuntu Server Post Install Script. For more information, please follow other related articles on the PHP Chinese website!