pi:raspbian
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
pi:raspbian [2020-05-18 13:24] – raspi-config steps gabriel | pi:raspbian [2020-05-18 21:31] – adding tmux and alternative shells gabriel | ||
---|---|---|---|
Line 3: | Line 3: | ||
This page documents my local Raspberry Pi config for a Raspberry Pi 3 running Raspbian. | This page documents my local Raspberry Pi config for a Raspberry Pi 3 running Raspbian. | ||
- | * Disable auto resizing of root partition on boot | + | ===== Before first boot ===== |
- | * Disable quiet boot | + | |
- | * Configure static IP address | + | |
- | * Modify OpenSSH configuration | + | |
- | * Add user | + | |
- | ===== Disable automatic resizing of root partition | + | By default Raspbian attempts to grow the root partition |
- | By default Raspbian attempts to grow the root partition of your system on first boot to fill your entire SD card. | + | |
- | To disable this option do the following. | + | * Remove |
- | + | ||
- | | + | |
- | * Remove / | + | |
===== After first boot ===== | ===== After first boot ===== | ||
The following steps should be completed after first boot to configure the Pi for remote management. | The following steps should be completed after first boot to configure the Pi for remote management. | ||
+ | |||
+ | ==== Set vim as the default editor ==== | ||
+ | |||
+ | < | ||
+ | apt install vim | ||
+ | update-alternatives --set editor / | ||
+ | </ | ||
+ | |||
+ | ==== Disble IPv6 ==== | ||
+ | |||
+ | Add the following to ''/ | ||
+ | |||
+ | < | ||
+ | # disable IPv6 | ||
+ | net.ipv6.conf.all.disable_ipv6=1 | ||
+ | </ | ||
==== Configure static IP address ==== | ==== Configure static IP address ==== | ||
- | Edit / | + | Edit '' |
- | ==== Set OpenSSH | + | < |
+ | # Static eth0 configuration | ||
+ | interface eth0 | ||
+ | static ip_address=10.77.3.6/ | ||
+ | static routers=10.77.3.1 | ||
+ | static domain_name_servers=10.77.3.4 10.77.3.5 | ||
+ | </ | ||
+ | |||
+ | Add our local domain | ||
+ | |||
+ | < | ||
+ | echo " | ||
+ | </ | ||
+ | |||
+ | ==== Configure OpenSSHD | ||
+ | |||
+ | Set to run on boot. | ||
< | < | ||
Line 34: | Line 59: | ||
==== User configuration ==== | ==== User configuration ==== | ||
- | Add local user | + | The following user modifications are made. |
+ | |||
+ | === local user === | ||
+ | |||
+ | Add local user: | ||
< | < | ||
Line 42: | Line 71: | ||
</ | </ | ||
- | Disable pi user | + | === pi === |
+ | |||
+ | Disable pi user: | ||
< | < | ||
Line 48: | Line 79: | ||
</ | </ | ||
- | Set root password | + | === root === |
+ | |||
+ | Now set root password. | ||
+ | |||
+ | === ansible === | ||
+ | |||
+ | Add ansible user: | ||
+ | |||
+ | < | ||
+ | groupadd -g 1111 ansible | ||
+ | useradd -u 1111 -c " | ||
+ | usermod -p ' | ||
+ | </ | ||
+ | |||
+ | Configure the following sudo rule for ansible: | ||
+ | |||
+ | < | ||
+ | # Ansible control user | ||
+ | ansible ALL=(ALL) NOPASSWD: | ||
+ | </ | ||
+ | |||
+ | Copy SSH keys for Ansible user. | ||
+ | |||
+ | ==== Sudoers config ==== | ||
+ | |||
+ | Set '' | ||
==== Grow root partition ==== | ==== Grow root partition ==== | ||
- | Use parted and resize2fs to manually set root filesystem size. | + | Use '' |
< | < | ||
Line 67: | Line 123: | ||
==== raspi-config ==== | ==== raspi-config ==== | ||
- | Run the raspi-config tool and set the following options. | + | Run the '' |
* **2 Network Options** -> Hostname -> Set hostname | * **2 Network Options** -> Hostname -> Set hostname | ||
Line 81: | Line 137: | ||
* **A3 Memory Split** -> 16 | * **A3 Memory Split** -> 16 | ||
- | ===== Old: Raspian Jessie Lite instructions ===== | + | ==== Additional hardware configuration via config.txt |
+ | |||
+ | These settings involve manual configuration of ''/ | ||
+ | |||
+ | === Disable unneeded networking === | ||
+ | |||
+ | < | ||
+ | # disable WiFi | ||
+ | dtoverlay=disable-wifi | ||
+ | |||
+ | # disable Bluetooth | ||
+ | dtoverlay=disable-bt | ||
+ | </ | ||
+ | |||
+ | Disable modem service per boot overlays doc: | ||
+ | |||
+ | < | ||
+ | systemctl disable hciuart | ||
+ | </ | ||
+ | |||
+ | === Disable audio driver === | ||
+ | |||
+ | Comment out the audio driver: | ||
+ | |||
+ | < | ||
+ | # Enable audio (loads snd_bcm2835) | ||
+ | # | ||
+ | </ | ||
+ | |||
+ | ==== Configure OpenSSH server ==== | ||
+ | |||
+ | Disable all keys except ed25519. | ||
+ | |||
+ | < | ||
+ | cat " | ||
+ | rm -fv / | ||
+ | dpkg-reconfigure openssh-server | ||
+ | </ | ||
+ | |||
+ | ==== Packages ==== | ||
+ | |||
+ | < | ||
+ | vim | ||
+ | ntp | ||
+ | isc-dhcp-server | ||
+ | bind9 | ||
+ | dnsutils | ||
+ | whois | ||
+ | fping | ||
+ | git | ||
+ | tmux | ||
+ | mksh | ||
+ | zsh | ||
+ | </ | ||
+ | |||
+ | |||
+ | ==== Services ==== | ||
+ | |||
+ | Service modification | ||
+ | |||
+ | < | ||
+ | systemctl disable apt-daily-upgrade.timer | ||
+ | systemctl disable apt-daily.timer | ||
+ | </ | ||
+ | |||
+ | ===== See also ===== | ||
+ | |||
+ | * [[quay: | ||
+ | * [[quay: | ||
+ | * [[quay: | ||
+ | |||
+ | ---- | ||
+ | |||
+ | //This section contains old instructions for Raspian 8 and will be deprecated in the future.// | ||
+ | |||
+ | ===== [Old] Raspian Jessie Lite instructions ===== | ||
* Add OpenSSH authorized_keys for root user | * Add OpenSSH authorized_keys for root user | ||
Line 160: | Line 291: | ||
</ | </ | ||
- | ====== Service management under systemd | + | ==== Service management under systemd ==== |
* Add service to systemd init process: '' | * Add service to systemd init process: '' | ||
* List all services: '' | * List all services: '' | ||
- | ====== Disable WiFi completely | + | ==== Disable WiFi completely ==== |
Blacklist the driver by creating a file in ''/ | Blacklist the driver by creating a file in ''/ |
pi/raspbian.txt · Last modified: 2020-05-19 09:39 by gabriel