Installation guides for system administration software on Debian GNU/Linux (backup, security, …)
Rootkit Hunter is, as its name describe, a rootkits detection tool. It can detect if a system has been compromised. It is a required tool for checking a system health. This guide describe how to configure rkhunter on Debian.
DFind is the vulnerability scanner generating the “w00tw00t.at.ISC.SANS.DFind” HTTP requests found in Web servers logs. This guide setup some iptables rules blocking these requests. A better method is to use fail2ban to block the sources of these requests.
This post describe a simple way to block all access to a network port on Debian, except for specified IP addresses.
PeerGuardian is a firewall for Peer to Peer software (i.e. BitTorrent) blocking bad peers.
The /tmp folder can be used to compromise the system security. A simple way to prevent this issue is to prevent the execution of scripts stored in this path. This guide describe how to do this.
sf-downloader is a script created to ease the download of software’s latest versions (from sourceforge.net initially). It find the correct download link for the software, and then download it and, if needed, extract it. This guide describe its installation on Debian.
biapy-updater is a Bash script designed to automate keep up-to-date tools provided by this site. It is a wrapper around wget to only replace the checked tool if a newest version is available. This guide describe how to install it on Debian.
After a hardware change (either network interface or motherboard), the network interfaces can be missing. This guide describe how to fix this issue.
Liquid Prompt is an adaptive prompt for Bash and Zsh. This guide ease its installation on Debian.
This howto describes how to reinitialize the state of a USB device without unplugging it. It does not work for USB devices not listed by “lsusb” command.
In some cases, i can be needed to reset a PCI device without restarting the system. This guide describe how to reset a PCI device from command line.
By default, Ext 3 & 4 filesystems reserve 5% of available disk space for special processes (root user, syslog, fragmentation avoidance, etc.). On big partitions, it amount to quite a lot of lost space. This howto describe how to get back this disk space.
For system administrator frequently cloning Debian GNU/Linux virtual hosts, this guide ease the modification of the system hostname.
By default, a SSH session close in case of network disconnection, killing automatically any and all software currently running. This guide use the “byobu” software render SSH sessions persistent during disconnections.
NTP (acronym of Network Time Protocol) is a communication protocol conceived to synchronize computer clocks worldwide to the International Atomic Time (TAI).
Vim (for Vi Improved) is a screen-oriented text editor originally created for the Unix operating system. This guide install a configured Vim as the default system editor.
By default, system emails are sent to the local root account. These emails can provide alerts and tips on the system health. This guide help you setup a redirection to an external email address (sysadmin’s one) for these emails.
The Debian security team provides regular security fixes in a dedicated software repository. It is enabled by default. This guide move the security repository configuration from APT main repository configuration to a satellite file.
Seafile is a self-hosted alternative to Dropbox. This guide describe how to install the Seafile command-line client as a service on Debian.
The default Debian installation only provide software from the “main” repository. In order to have access to all Debian software, contrib and non-free repositories must be configured. This howto describe an automated process to enable the contrib and non-free repositories in Apt.
The Debian-Updates repositories provides fresher versions of packages available in mainstream Debian, one of which is the well-known ClamAV. This howto describe an automated process to enable these repositories in Apt.
acme.sh is a handy command line client for managing and using SSL certificates provided by Let’s Encrypt.
ClamAV is a free software antivirus particularly suited to scan e-mails during their SMTP server processing. This howto helps you install the latest version of ClamAV on Debian.