pi:raspbian
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
pi:raspbian [2020-05-18 14:35] – formatting gabriel | pi:raspbian [2020-05-19 09:39] (current) – [Raspbian] updating overview gabriel | ||
---|---|---|---|
Line 1: | Line 1: | ||
====== Raspbian ====== | ====== Raspbian ====== | ||
- | This page documents | + | Documentation for my local Raspberry Pi 3 B+ config. |
- | ===== Disable automatic resizing of root partition | + | ===== Before first boot ===== |
- | By default Raspbian attempts to grow the root partition of your system on first boot to fill your entire SD card. | + | By default Raspbian attempts to grow the root partition of your system on first boot to fill your entire SD card. To disable this option do the following |
- | To disable this option do the following. | + | |
- | * Remove custom init script and quiet from / | + | * Remove custom init script and quiet from '' |
- | * Remove / | + | * Remove |
===== After first boot ===== | ===== After first boot ===== | ||
Line 24: | Line 23: | ||
==== Disble IPv6 ==== | ==== Disble IPv6 ==== | ||
- | Add the following to / | + | Add the following to '' |
< | < | ||
Line 33: | Line 32: | ||
==== Configure static IP address ==== | ==== Configure static IP address ==== | ||
- | Edit / | + | Edit '' |
< | < | ||
Line 43: | Line 42: | ||
</ | </ | ||
- | Add our local domain to the default search path configured by resolvconf. | + | Add our local domain to the default search path configured by '' |
< | < | ||
Line 60: | Line 59: | ||
==== User configuration ==== | ==== User configuration ==== | ||
- | Add local user | + | The following user modifications are made. |
+ | |||
+ | === local user === | ||
+ | |||
+ | Add local user: | ||
< | < | ||
Line 68: | Line 71: | ||
</ | </ | ||
- | Disable pi user | + | === pi === |
+ | |||
+ | Disable pi user: | ||
< | < | ||
Line 74: | Line 79: | ||
</ | </ | ||
- | Set root password | + | === root === |
+ | |||
+ | Now set root password. | ||
+ | |||
+ | === ansible === | ||
+ | |||
+ | Add ansible user: | ||
+ | |||
+ | < | ||
+ | groupadd -g 1111 ansible | ||
+ | useradd -u 1111 -c " | ||
+ | usermod -p ' | ||
+ | </ | ||
+ | |||
+ | Configure the following sudo rule for ansible: | ||
+ | |||
+ | < | ||
+ | # Ansible control user | ||
+ | ansible ALL=(ALL) NOPASSWD: | ||
+ | </ | ||
+ | |||
+ | Copy SSH keys for Ansible user. | ||
==== Sudoers config ==== | ==== Sudoers config ==== | ||
- | Set timestamp_timeout=NN to more useful timeout value. | + | Set '' |
==== Grow root partition ==== | ==== Grow root partition ==== | ||
- | Use parted and resize2fs to manually set root filesystem size. | + | Use '' |
< | < | ||
Line 97: | Line 123: | ||
==== raspi-config ==== | ==== raspi-config ==== | ||
- | Run the raspi-config tool and set the following options. | + | Run the '' |
* **2 Network Options** -> Hostname -> Set hostname | * **2 Network Options** -> Hostname -> Set hostname | ||
Line 113: | Line 139: | ||
==== Additional hardware configuration via config.txt ==== | ==== Additional hardware configuration via config.txt ==== | ||
- | These settings involve manual configuration of / | + | These settings involve manual configuration of '' |
=== Disable unneeded networking === | === Disable unneeded networking === | ||
Line 146: | Line 172: | ||
< | < | ||
cat " | cat " | ||
- | cd / | + | rm -fv / |
dpkg-reconfigure openssh-server | dpkg-reconfigure openssh-server | ||
</ | </ | ||
- | + | ==== Packages | |
- | ===== [Old] Raspian Jessie Lite instructions | + | |
- | + | ||
- | * Add OpenSSH authorized_keys for root user | + | |
- | * Remove all key types except rsa and ed25519 from sshd_config | + | |
- | * Remove all default keys and regenerate | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * Make '' | + | |
- | * Set static IP address for host by editing ''/ | + | |
< | < | ||
- | # See dhcpcd.conf(5) for details. | + | vim |
- | interface eth0 | + | ntp |
- | static ip_address=$IP/ | + | isc-dhcp-server |
- | static routers=$ROUTER | + | bind9 |
+ | dnsutils | ||
+ | whois | ||
+ | fping | ||
+ | git | ||
+ | tmux | ||
+ | mksh | ||
+ | zsh | ||
</ | </ | ||
- | * Set '' | ||
- | < | + | ==== Services ==== |
- | # Configuration for resolvconf(8) | + | |
- | # See resolvconf.conf(5) for details | + | |
- | resolv_conf=/ | + | Service modification |
- | # If you run a local name server, you should uncomment the below line and | + | |
- | # configure your subscribers configuration files below. | + | |
- | search_domains=in.quay.net | + | |
- | # BUG WORKAROUND: space separated lists of DNS servers are not currently working | + | |
- | name_servers=$NS1 | + | |
- | name_servers_append=$NS2 | + | |
- | + | ||
- | # Mirror the Debian package defaults for the below resolvers | + | |
- | # so that resolvconf integrates seemlessly. | + | |
- | dnsmasq_resolv=/ | + | |
- | pdnsd_conf=/ | + | |
- | unbound_conf=/ | + | |
- | </ | + | |
- | + | ||
- | * Remove pi default user | + | |
- | * Remove pi group | + | |
- | * Add new default user and group | + | |
- | * Add sudoers entry for user | + | |
- | * Set password | + | |
- | * Update ntp config; '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * '' | + | |
- | * Set timezone to Toronto: '' | + | |
- | * Remove MOTD text ''> | + | |
- | * Install git and needrestart | + | |
- | + | ||
- | Raspbian appears to have issues with managing network dependencies during boot. This script ensures that BIND, dhcpd, and NTP start up correctly after the network interface is properly set up. It is run via ''/ | + | |
< | < | ||
- | # | + | systemctl disable apt-daily-upgrade.timer |
- | + | systemctl disable apt-daily.timer | |
- | until fping -qc 3 8.8.8.8 > /dev/null 2>& | + | |
- | echo " | + | |
- | done | + | |
- | + | ||
- | for daemon in isc-dhcp-server bind9; do | + | |
- | echo " | + | |
- | service $daemon restart | + | |
- | done | + | |
- | + | ||
- | echo " | + | |
- | service ntp stop | + | |
- | ntpdate -s 0.ca.pool.ntp.org | + | |
- | service ntp start | + | |
</ | </ | ||
- | ==== Service management under systemd | + | ===== See also ===== |
- | * Add service to systemd init process: '' | + | * [[quay:dns|Local DNS configuration]] |
- | * List all services: '' | + | * [[quay:ntp|Local time service]] |
- | + | * [[quay:dhcp|Local DHCP service]] | |
- | ==== Disable WiFi completely ==== | + | |
- | + | ||
- | Blacklist the driver by creating a file in ''/ | + | |
- | + | ||
- | < | + | |
- | blacklist brcmfmac | + | |
- | blacklist brcmutil | + | |
- | </ | + |
pi/raspbian.txt · Last modified: 2020-05-19 09:39 by gabriel