Le Quotidien Shaarli

Tous les liens d'un jour sur une page.

July 13, 2022

checklist ubuntu 22
sudo apt update && sudo apt upgrade && sudo apt full-upgrade -y
sudo apt install software-properties-common apt-transport-https -y
sudo apt install zram-config htop btrfs-compsize pigz progress ncdu gparted gpart mtools udftools firejail sshfs sshpass rclone-browser iotop nethogs p7zip-rar zstd filezilla gcc curl

sudo apt-get install build-essential linux-headers-`uname -r` dkms

sudo add-apt-repository ppa:mozillateam/firefox-next -y
sudo apt-get update
sudo snap disable firefox
sudo snap remove --purge firefox
sudo apt autoremove firefox -y
sudo nano /etc/apt/preferences.d/99-mozillateamppa
sudo apt autoremove firefox -y
sudo apt install firefox -y
firefox --version

sudo nano /etc/bash.bashrc

sudo nano /etc/fstab
aux deux points de montage btrfs (/ et /home) ajout de:
oatime,nodiratime,compress-force=zstd
ajout de:
tmpfs /tmp tmpfs defaults,mode=1777,nosuid,size=4196M 0 0
tmpfs /var/tmp tmpfs defaults,mode=1777,nosuid,size=4196M 0 0

sudo bash -c 'echo "vm.swappiness=1" >> /etc/sysctl.conf'

sudo btrfs filesystem defragment -r -v -czstd /

sudo apt install --install-recommends printer-driver-all printer-driver-oki

sudo apt purge wine*
wget -nc https://dl.winehq.org/wine-builds/winehq.key
sudo apt-key add winehq.key
sudo add-apt-repository 'deb https://dl.winehq.org/wine-builds/ubuntu/ jammy main'
sudo apt install --install-recommends winehq-staging winetricks
WINEPREFIX=~/.wine WINEARCH=win32 wineboot    # Préparation du préfixe 32 bits
WINEPREFIX=~/.wine64 WINEARCH=win64 wineboot  # Préparation du préfixe 64 bits

sudo adduser $USER vboxsf
sudo mkdir -p /media/partage
sudo mount -t vboxsf partage /media/partage

Paramètres/Confidentialité/Ecran/Verouillage auto

sudo curl "https://sebsauvage.net/wiki/doku.php?do=export_code&id=dns-blocklist&codeblock=0"; -o /etc/cron.weekly/hosts-update
sudo chmod +x /etc/cron.weekly/hosts-update
sudo /etc/cron.weekly/hosts-update

sudo apt autoremove --purge
sudo apt autoclean


sudo apt install openssh-server fail2ban
sudo bash -c 'echo "Port 22222" >> /etc/ssh/sshd_config.d/custom.conf'
sudo service ssh restart
sudo nano /etc/fail2ban/jail.local:
[sshd]
enabled = true
port = 22222
filter = sshd
logpath = %(sshd_log)s
backend = %(sshd_backend)s
maxretry = 4
bantime = 86400

sudo service fail2ban restart
sudo ufw allow in 22222/tcp
sudo ufw enable