Debian Sarge System Build                                                           page 1 of 3

New system builds for Debian:

First all systems will be built with the most current Debian installer. This isn't the
revision of Debian that is installed, just the installer's revision. All installs are to use the
Sarge branch. During the initial phase, the machine is not be on the network.

    1. Boot machine with Debian installer cd.
    2. Select English as the Default Language
    3. Select US as the Country
    4. Select American English as the Keyboard Layout
    5. System will detect hardware, install extra drivers if necessary
    6. Enter IP address
    7. Enter Netmask
    8. Enter Gateway
    9. Enter Nameservers
    10. Enter Hostname of machine
    11. Enter Domain Name
    12. Modules for drives will be autodetected and partitioner will start.
    13. By default all partition tables will be created as follows, unless requested by
        customer otherwise: 1 swap partition that is 2xRAM, 1 root (/) partition that is
        formatted ext3 and the remainder of drive. Both partitions should be created as
        primary partitions.
    14. System will format partitions, and install base system off cd.
    15. Install grub as the boot loader.

After bootloader is installed, system will prompt to reboot, at this time the CD is to be
removed, and system rebooted. Upon reboot, you will be prompted for the following,
complete before connecting Network.
   1. From the Welcome Screen Click ok to get started.
   2. Choose NO when prompted if the Hardware clock is set to GMT
   3. Select the timezone that the machine will reside. By default, all machine will use
       Eastern (GMT-5 or New York Time) unless customer request otherwise.
   4. Type the root password, press enter, then type again to confirm, and press enter
   5. Do not add an additional user, instead select cancel, and proceed to the apt source
       setup
   6. Select either the ftp.egr.msu.edu mirror for your apt sources, or if the machine is
       intel based, you can use the mirror.mis.net mirror server. The username and
       password for the mis.net server will not be documented in this baseline.
   7. Before continuing, you will have to connect the network cable.
   8. Press enter when asked for proxy info, leaving it blank
   9. Apt will download a package list from selected server, it will then ask if you want

Revision 1.2                          DS Install Baseline          Last modification 11/17/04

Debian Sarge System Build                                                       page 2 of 3

       to add another source, choose no.
   10. Choose yes to security updates from security.debian.org
   11. Again, leave the proxy info blank.
   12. The system will download a list of available updates.
   13. Choose Finish configuring base system
   14. Choose OK to exit to the system

All the initial setup is complete. Now the security of the server needs to be tightened
before we have the machine up for the customer, and the remainder of the base packages
need to be installed and upgraded

   1. Login as root
   2. Run dselect, choose update and then select. From the select screen, do not select
       any additional packages, just press enter, then choose install. This will complete
       the installation of all the normal development utilities and tools in a base system.
       It will also upgrade any programs that have already been installed from the
       installation CD.
   3. Accept the default selection to only allow SSH2 when prompted. Accept default
       configuration values for SSH.
   4. When prompted for exim's configuration, choose Local Delivery Only.
   5. Leave the postmaster info blank and choose OK
   6. Choose OK to continue on the keymap info screen.
   7. Choose Don't touch Keymap.
   8. If a kernel-image is being installed, you will have to acknowledge the info
       message by pressing enter after it installs, this is a reminder to reboot after
       installation.
   9. After update/install is complete, press enter to erase the temp deb files that were
       used for installation, and enter again to return to dselect.
   10. Choose exit
   11. Before rebooting, remove the following symlinks:
       In the /etc/rcS.d directory:
                S43portmap
                S45portmap
       In the /etc/rc2.d and /etc/rc3.d directories:
                S14ppp
                S18portmap
                S20exim4
                S20inetd
                S20lpd
                S21nfs-common
       These are just symlinks that link to the real init program in /etc/init.d

Revision 1.2                       DS Install Baseline          Last modification 11/17/04

Debian Sarge System Build                                                          page 3 of 3

    12. Reboot machine
    13. Login as root, verify that only ssh is running, as that is all we install as a service
        by default. See the baseline on Sendmail, Apache, or Bind for additional service
        setups

Also is a link to a selections file that contains all programs that are installed in a base
install.




Revision 1.2                         DS Install Baseline           Last modification 11/17/04