And Configuring The Rest Of The System
Enable root user
Now I can login
with the username and password I entered above. First I enable the root user
for ease of installation. You can disable it later if you want.
Now we are logged
in as root user.
Because the Ubuntu
installer has configured our system to get its network settings via DHCP, we
have to change that now because a server should have a static IP address. Edit
and adjust it to your needs (in this example setup I will use the IP address
# This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5).
# The loopback network interface auto lo iface lo inet loopback
# This is a list of hotpluggable network interfaces. # They will be activated automatically by the hotplug subsystem. mapping hotplug script grep map eth0
deb http://de.archive.ubuntu.com/ubuntu hoary main restricted deb-src http://de.archive.ubuntu.com/ubuntu hoary main restricted
## Major bug fix updates produced after the final release of the ## distribution. deb http://de.archive.ubuntu.com/ubuntu hoary-updates main restricted deb-src http://de.archive.ubuntu.com/ubuntu hoary-updates main restricted
## Uncomment the following two lines to add software from the 'universe' ## repository. ## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu ## team, and may not be under a free licence. Please satisfy yourself as to ## your rights to use the software. Also, please note that software in ## universe WILL NOT receive any review or updates from the Ubuntu security ## team. deb http://de.archive.ubuntu.com/ubuntu hoary universe deb-src http://de.archive.ubuntu.com/ubuntu hoary universe
deb http://security.ubuntu.com/ubuntu hoary-security main restricted deb-src http://security.ubuntu.com/ubuntu hoary-security main restricted
deb http://security.ubuntu.com/ubuntu hoary-security universe deb-src http://security.ubuntu.com/ubuntu hoary-security universe
apt-get install ssh
Now let's install
some software we need later on and remove some packages that we do not need:
apt-get install fetchmail
unzip zip libarchive-zip-perl zlib1g-dev libpopt-dev nmap openssl lynx gcc flex
make ncftp libdb4.3-dev
For security reasons
we want to run BIND chrooted so we have to do the following steps:
Edit the file /etc/default/bind9
so that the daemon
will run as the unprivileged user 'bind',
chrooted to /var/lib/named.
Modify the line: OPTS="-u
so that it reads OPTIONS="-u bind
We need to modify
the startup script /etc/init.d/sysklogd
of sysklogd so that we
can still get important messages logged to the system logs. Modify the line:
so that it reads: SYSLOGD="-u syslog -a /var/lib/named/dev/log":
#! /bin/sh # /etc/init.d/sysklogd: start the system log daemon.