Geitenpad - User contributions [en]

GPK

2025-12-23T10:17:08Z

Rijk: /* Configureer soundcard */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Set hostname ==

cat /etc/hostname
gpk

== Configureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

De naam van de client wordt gezet in snapweb op de snapserver.

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 2
Create service to set volume on 100%
sudo cat /etc/systemd/system/usb-volume.service

[Unit]
Description=Set USB DAC volume to 100%
After=multi-user.target sound.target
Wants=multi-user.target

[Service]
Type=oneshot
ExecStartPre=/bin/sleep 10
ExecStart=/usr/bin/amixer -c 2 sset 'PCM' 100%

[Install]
WantedBy=multi-user.target

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-22T18:11:25Z

Rijk: /* Configureer soundcard */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Set hostname ==

cat /etc/hostname
gpk

== Configureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

De naam van de client wordt gezet in snapweb op de snapserver.

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 2

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-22T17:59:41Z

Rijk: /* Configureer soundcard */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Set hostname ==

cat /etc/hostname
gpk

== Configureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

De naam van de client wordt gezet in snapweb op de snapserver.

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 2
Run alsamixer and set volume 100%, quit and save:
sudo alsactl store

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-22T17:36:32Z

Rijk: /* Configureer soundcard */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Set hostname ==

cat /etc/hostname
gpk

== Configureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

De naam van de client wordt gezet in snapweb op de snapserver.

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 2

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

Main Page

2025-12-22T17:35:52Z

Rijk: /* Geitenpad */

== Geitenpad ==
* [[Olimex-A20]]
* [[Olimex-A10]]
* [[ProBook 6550b]]
* [[Lenovo U410]]
* [[Precision 7540]]
* [[Luke]]
* [[Dell Optiplex]]
* [[GPK]]
* [[Upload]]
* [[SFPG]]
* [[Webcam]]
* [[Nextcloud]]
* [[Mediawiki]]
* [[Wordpress]]
* [[Splunk]]
* [[Davmail]]
* [[Prosody]]
* [[Openfire]]
* [[Ejabberd]]
* [[Watcher]]
* [[Tomcat]]
* [[Churchserviceplanner]]
* [[FTP]]
* [[Node]]
* [[Duplicati]]
* [[KVM]]
* [[Docker]]
* [[Syncthing]]
* [[LandisPlusGyr]]
* [[Wireguard]]

== Other domains ==
* [[Iemhof]]

== Linux ==
* [[Grub]]
* [[VNC over SSH]]
* [[Port forwarding]]
* [[Backup to server]]
* [[Startup files on Ubuntu]]
* [[Bash]]
* [[Vimrc]]
* [[init.d Java script]]
* [[Change IntelliJ desktop file]]
* [[Stop bluetooth at boot]]
* [[Xfce4 panel colors]]
* [[Show all gnome startup programs]]
* [[Url to network disks]]
* [[journalctl]]
* [[fsck]]
* [[Autostart Eddie]]
* [[Access encrypted home]]
* [[Unlimited history]]
* [[Xscreensaver does not find images]]
* [[Font size Gnome top panel]]
* [[DRM removal from Kobo books]]
* [[Gnome screenshots to Desktop]]
* [[Gnome Desktop item in sidebar van Nautilus]]
* [[Screan tearing on Firefox]]
* [[Keep htop settings]]
* [[LVM]]
* [[Restore from chroot]]
* [[Dnsmasq in Networkmanager]]
* [[Gnome alt-tab]]
* [[Xscreensaver]]
* [[KDE]]
* [[PC sluit langzaam af]]
* [[Native dialogs on KDE for Firefox and Thunderbird]]
* [[KeepassXC]]

== Development ==
* [[IntelliJ, Xdebug and Apache]]
* [[IntelliJ remove 'show in EasyTAG']]
* [[PHPStorm, Xdebug]]

== Android ==
* [[Fairphone 3]]
* [[Download paid apk's]]

== Windows ==
* [[Remote desktop via Putty]]
* [[Interne webpagina's via Putty]]

== Laptops ==
* [[Miels Yoga Slim]]
* [[Rijks Mobile Precision 7540]]
* [[Thinkpad P16V]]

PPK

2025-12-22T17:35:26Z

Rijk: Rijk moved page PPK to GPK

#REDIRECT [[GPK]]

GPK

2025-12-22T17:35:26Z

Rijk: Rijk moved page PPK to GPK

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Set hostname ==

cat /etc/hostname
gpk

== Configureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

De naam van de client wordt gezet in snapweb op de snapserver.

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-20T18:27:01Z

Rijk: /* Configureer snapclient */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Set hostname ==

cat /etc/hostname
gpk

== Configureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

De naam van de client wordt gezet in snapweb op de snapserver.

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-20T18:22:23Z

Rijk: /* Configigureer snapclient */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Set hostname ==

cat /etc/hostname
gpk

== Configureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-20T18:22:08Z

Rijk: /* Configigureer snapclient */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Set hostname ==

cat /etc/hostname
gpk

== Configigureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-20T18:07:16Z

Rijk: /* Configureer snapcast (niet meer, alleen client) */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Configigureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-20T18:07:01Z

Rijk: /* Install raspotify (niet meer, alleen client) */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Configureer snapcast (niet meer, alleen client) ==
sudo vim /etc/snapserver.conf
voeg stream toe:
stream = librespot:///librespot?name=PaardenSnap&username=r.oosterhoff@rijkenmiel.nl&password=uiM9hXZsgDWUg6&devicename=PaardenSnap (Keuken)&bitrate=320&normalize=true&autoplay=true

copy snapweb van package gedownload package van https://packages.debian.org/nl/source/bullseye/snapcast naar /usr/share/snapserver/snapweb
zet dit pad ook in /etc/snapserver.conf

== Configigureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-20T18:06:47Z

Rijk: /* Install utilities */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
sudo apt install vim screen locate snapclient

== Install raspotify (niet meer, alleen client) ==
Handmatig van https://github.com/dtcooper/raspotify

Dit is alleen om librespot op het systeem te krijgen dus daarna
sudo systemctl disable raspotify

== Configureer snapcast (niet meer, alleen client) ==
sudo vim /etc/snapserver.conf
voeg stream toe:
stream = librespot:///librespot?name=PaardenSnap&username=r.oosterhoff@rijkenmiel.nl&password=uiM9hXZsgDWUg6&devicename=PaardenSnap (Keuken)&bitrate=320&normalize=true&autoplay=true

copy snapweb van package gedownload package van https://packages.debian.org/nl/source/bullseye/snapcast naar /usr/share/snapserver/snapweb
zet dit pad ook in /etc/snapserver.conf

== Configigureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-11T12:00:37Z

Rijk: /* Configigureer snapclient */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
# sudo apt install vim screen locate snapserver snapclient
sudo apt install vim screen locate snapclient

== Install raspotify (niet meer, alleen client) ==
Handmatig van https://github.com/dtcooper/raspotify

Dit is alleen om librespot op het systeem te krijgen dus daarna
sudo systemctl disable raspotify

== Configureer snapcast (niet meer, alleen client) ==
sudo vim /etc/snapserver.conf
voeg stream toe:
stream = librespot:///librespot?name=PaardenSnap&username=r.oosterhoff@rijkenmiel.nl&password=uiM9hXZsgDWUg6&devicename=PaardenSnap (Keuken)&bitrate=320&normalize=true&autoplay=true

copy snapweb van package gedownload package van https://packages.debian.org/nl/source/bullseye/snapcast naar /usr/share/snapserver/snapweb
zet dit pad ook in /etc/snapserver.conf

== Configigureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.156"

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

GPK

2025-12-11T10:36:41Z

Rijk: /* Install utilities */

== Ref ==
https://oyvn.no/multi-room-audio-with-snapcast

== Install ==
* Gebruik Raspberry Pi Imager to write image
* Update

== Install utilities ==
# sudo apt install vim screen locate snapserver snapclient
sudo apt install vim screen locate snapclient

== Install raspotify (niet meer, alleen client) ==
Handmatig van https://github.com/dtcooper/raspotify

Dit is alleen om librespot op het systeem te krijgen dus daarna
sudo systemctl disable raspotify

== Configureer snapcast (niet meer, alleen client) ==
sudo vim /etc/snapserver.conf
voeg stream toe:
stream = librespot:///librespot?name=PaardenSnap&username=r.oosterhoff@rijkenmiel.nl&password=uiM9hXZsgDWUg6&devicename=PaardenSnap (Keuken)&bitrate=320&normalize=true&autoplay=true

copy snapweb van package gedownload package van https://packages.debian.org/nl/source/bullseye/snapcast naar /usr/share/snapserver/snapweb
zet dit pad ook in /etc/snapserver.conf

== Configigureer snapclient ==

sudo vim /etc/default/snapclient

SNAPCLIENT_OPTS="-h 192.168.2.70"

== Configureer soundcard ==
Bekijk lijst met cards
aplay -l
Verander 1 regel in /usr/share/alsa/alsa.conf
defaults.pcm.card 1

== Disable graphic login ==

sudo raspi-config

Kies boot option menu en set boot option

KDE

2025-12-04T12:43:08Z

Rijk: /* Mouse scroll */

=== Mouse scroll ===
Plug usb connector uit en in

=== Wayland icon ===
Wanneer een app het wayland icon toont moet de desktop filename in sync zijn met de application properties. Je kunt de desktop file hernoemen of rechter muisknop op de title bar->more actions->special application settings->add property->Desktop file name. Zorg dat deze overeenkomt met de filename.

=== 4K / HiDpi ===

* Go into "System Settings". Under "Display and Monitor" click "Scale Display". Drag the "Scale" slider to an appropriate amount. Log out and then back in
* If your cursor needs resizing you can do so in "System Settings". Under "Workspace Theme", select "Cursor Theme" and then adjust the size on the bottom right hand side
* Create following file:
cat .config/plasma-workspace/env/hidpi.sh
export PLASMA_USE_QT_SCALING=1
* Add to /etc/environment
GDK_SCALE=2
GDK_DPI_SCALE=0.5

==== Login: ====
* Create the following file: /etc/sddm.conf.d/hidpi.conf

[Wayland]
EnableHiDPI=true

[X11]
EnableHiDPI=true

=== Hide window decorations on maximize ===

kwriteconfig5 --file kwinrc --group Windows --key BorderlessMaximizedWindows true
dbus org.kde.KWin /KWin reconfigure

=== Unix select paste not working ===

Edit $HOME/.config/plasma-org.kde.plasma.desktop-appletsrc

[ActionPlugins][0]
MiddleButton;NoModifier=org.kde.paste

=== Wacom tablet offset ===

in ~/.profile set:
QT_XCB_TABLET_LEGACY_COORDINATES=1

=== Windows key to overview ===
https://develmonk.com/2024/03/23/kde-can-have-meta-super-key-blow-up-the-screen-just-like-gnome/
kwriteconfig6 --file kwinrc --group ModifierOnlyShortcuts --key Meta "org.kde.kglobalaccel,/component/kwin,,invokeShortcut,Overview"
qdbus org.kde.KWin /KWin reconfigure

Set two parameters:
I found out the meta-only modifier is one thing that needed to be set in $HOME/.config/kwinrc, but also the Overview=Meta config in $HOME/.config/kglobalshortcutsrc – so there’s two places where it needs to be set. You’re supposed to be able to add /KWin reconfigure to the end to make it work immediately (reloads kwin config), but I’ve only been able to get it to work by killing sddm and logging back in. But hey, thanks so much for pointing me in the right direction!

=== Reset Kde ===

https://forum.manjaro.org/t/how-reset-all-kde-settings/21518/2

Logout from KDE and run:
cd ~/
rm -rf .kde
rm -rf .cache/plasmashell*
rm -rf .cache/org.kde.dirmodel-qml.kcache
rm -rf .cache/kioexec/ .cache/krunner/ .cache/ksycoca5*
rm -rf .cache/krunnerbookmarkrunnerfirefoxdbfile.sqlite
rm -f .config/plasma*
rm -rf .config/kde*
cd .local/
rm -rf kate/ kded5/ klipper/ knewstuff3/ kscreen/ konsole/ kwalletd/ ksysguard/ kmail2/ kcookiejar/ kactivitymanagerd/
cd share/
rm -rf dolphin kate kcookiejar kded5 keyrings klipper kmail2 knewstuff3 konsole kscreen ksysguard kwalletd kxmlgui5 plasma_engine_comic plasma plasma_notes org.kde.gwenview
cd ~/.config/
rm -rf akonadi* KDE kconf_updaterc baloo* dolphinrc drkonqirc gwenviewrc kmail2rc k*rc katemetainfos

It wipes config of all software, but help

=== Overview windows shortcut ===

kwriteconfig5 --file kwinrc --group ModifierOnlyShortcuts --key Meta "org.kde.kglobalaccel,/component/kwin,,invokeShortcut,Overview"
qdbus org.kde.KWin /KWin reconfigure

https://askubuntu.com/questions/1391793/kde-5-24-overview-launch-key

=== Editing KDE Calendar single line ===
sudo vim /usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/DigitalClock.qml

Change line 57:
// if the date/timezone cannot be fit with the smallest font to its designated space
readonly property bool oneLineMode: plasmoid.formFactor == PlasmaCore.Types.Horizontal &&
main.height <= 2 * theme.smallestFont.pixelSize &&
(main.showDate || timezoneLabel.visible)
To:
// if the date/timezone cannot be fit with the smallest font to its designated space
readonly property bool oneLineMode: true

Olimex-A20

2025-12-02T16:01:46Z

Rijk: /* Snapcast */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: wget vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* add non-free to sources list:
root@olimex:~# cat /etc/apt/sources.list
deb http://deb.debian.org/debian trixie main contrib non-free
deb-src http://deb.debian.org/debian trixie main contrib non-free

deb http://deb.debian.org/debian trixie-updates main contrib non-free
deb-src http://deb.debian.org/debian trixie-updates main contrib non-free

deb http://security.debian.org/debian-security trixie-security main contrib non-free
deb-src http://security.debian.org/debian-security trixie-security main contrib non-free
* Install driver:
wget https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/plain/rt2870.bin
root@olimex:~# cp rt2870.bin /lib/firmware/
root@olimex:~# chmod 644 /lib/firmware/rt2870.bin
root@olimex:~# chown root:root /lib/firmware/rt2870.bin
* apt install -y iwd iproute2
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* Add olimext to netdev group
root@olimex:~# groupadd netdev
root@olimex:~# usermod -aG netdev olimex
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>
* systemctl --now enable iwd
* systemctl restart iwd
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network

== Snapcast ==
* apt install snapclient
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-02T12:07:23Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: wget vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* add non-free to sources list:
root@olimex:~# cat /etc/apt/sources.list
deb http://deb.debian.org/debian trixie main contrib non-free
deb-src http://deb.debian.org/debian trixie main contrib non-free

deb http://deb.debian.org/debian trixie-updates main contrib non-free
deb-src http://deb.debian.org/debian trixie-updates main contrib non-free

deb http://security.debian.org/debian-security trixie-security main contrib non-free
deb-src http://security.debian.org/debian-security trixie-security main contrib non-free
* Install driver:
wget https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/plain/rt2870.bin
root@olimex:~# cp rt2870.bin /lib/firmware/
root@olimex:~# chmod 644 /lib/firmware/rt2870.bin
root@olimex:~# chown root:root /lib/firmware/rt2870.bin
* apt install -y iwd iproute2
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* Add olimext to netdev group
root@olimex:~# groupadd netdev
root@olimex:~# usermod -aG netdev olimex
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>
* systemctl --now enable iwd
* systemctl restart iwd
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-02T12:05:39Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: wget vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* add non-free to sources list:
root@olimex:~# cat /etc/apt/sources.list
deb http://deb.debian.org/debian trixie main contrib non-free
deb-src http://deb.debian.org/debian trixie main contrib non-free

deb http://deb.debian.org/debian trixie-updates main contrib non-free
deb-src http://deb.debian.org/debian trixie-updates main contrib non-free

deb http://security.debian.org/debian-security trixie-security main contrib non-free
deb-src http://security.debian.org/debian-security trixie-security main contrib non-free
* Install driver:
wget https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/plain/rt2870.bin
root@olimex:~# cp rt2870.bin /lib/firmware/
root@olimex:~# chmod 644 /lib/firmware/rt2870.bin
root@olimex:~# chown root:root /lib/firmware/rt2870.bin
* apt install -y iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* Add olimext to netdev group
root@olimex:~# groupadd netdev
root@olimex:~# usermod -aG netdev olimex
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>
* systemctl --now enable iwd
* systemctl restart iwd
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-02T11:59:43Z

Rijk:

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: wget vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* add non-free to sources list:
root@olimex:~# cat /etc/apt/sources.list
deb http://deb.debian.org/debian trixie main contrib non-free
deb-src http://deb.debian.org/debian trixie main contrib non-free

deb http://deb.debian.org/debian trixie-updates main contrib non-free
deb-src http://deb.debian.org/debian trixie-updates main contrib non-free

deb http://security.debian.org/debian-security trixie-security main contrib non-free
deb-src http://security.debian.org/debian-security trixie-security main contrib non-free
* Install driver:
wget https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/plain/rt2870.bin
root@olimex:~# cp rt2870.bin /lib/firmware/
root@olimex:~# chmod 644 /lib/firmware/rt2870.bin
root@olimex:~# chown root:root /lib/firmware/rt2870.bin
* apt install -y iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* Add olimext to netdev group
root@olimex:~# groupadd netdev
root@olimex:~# usermod -aG netdev olimex
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>
* systemctl --now enable iwd
* systemctl restart iwd
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-02T11:57:34Z

Rijk:

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: wget vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* add non-free to sources list:
root@olimex:~# cat /etc/apt/sources.list
deb http://deb.debian.org/debian trixie main contrib non-free
deb-src http://deb.debian.org/debian trixie main contrib non-free

deb http://deb.debian.org/debian trixie-updates main contrib non-free
deb-src http://deb.debian.org/debian trixie-updates main contrib non-free

deb http://security.debian.org/debian-security trixie-security main contrib non-free
deb-src http://security.debian.org/debian-security trixie-security main contrib non-free

* apt install -y iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* Add olimext to netdev group
root@olimex:~# groupadd netdev
root@olimex:~# usermod -aG netdev olimex
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>
* systemctl --now enable iwd
* systemctl restart iwd
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-02T11:57:20Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* add non-free to sources list:
root@olimex:~# cat /etc/apt/sources.list
deb http://deb.debian.org/debian trixie main contrib non-free
deb-src http://deb.debian.org/debian trixie main contrib non-free

deb http://deb.debian.org/debian trixie-updates main contrib non-free
deb-src http://deb.debian.org/debian trixie-updates main contrib non-free

deb http://security.debian.org/debian-security trixie-security main contrib non-free
deb-src http://security.debian.org/debian-security trixie-security main contrib non-free

* apt install -y iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* Add olimext to netdev group
root@olimex:~# groupadd netdev
root@olimex:~# usermod -aG netdev olimex
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>
* systemctl --now enable iwd
* systemctl restart iwd
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:50:50Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* apt install -y iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* Add olimext to netdev group
root@olimex:~# groupadd netdev
root@olimex:~# usermod -aG netdev olimex
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>
* systemctl --now enable iwd
* systemctl restart iwd
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:48:38Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* apt install -y iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* Add olimext to netdev group
root@olimex:~# groupadd netdev
root@olimex:~# usermod -aG netdev olimex
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>
* systemctl --now enable iwd
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:45:55Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* apt install -y iwd
* create config file:
root@olimex:~# cat /etc/dbus-1/system.d/iwd.conf
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>


<policy group="netdev">
<allow send_destination="net.connman.iwd"/>
</policy>


<policy user="root">
<allow own="net.connman.iwd"/>
<allow send_destination="net.connman.iwd"/>
</policy>

</busconfig>

* systemctl --now enable iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:24:45Z

Rijk: /* Installation */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex
* Add user olimex
root@debian:~# adduser olimex
New password:
Retype new password:
passwd: password updated successfully
Changing the user information for olimex
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* apt install -y iwd
* systemctl --now enable iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:22:38Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* apt install -y iwd
* systemctl --now enable iwd
* vim /etc/iwd/main.conf to enable networking
EnableNetworkConfiguration=true
* systemctl restart iwd
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:19:30Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* apt install -y iwd
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:18:18Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* apt install -y iwd
[General]
EnableNetworkConfiguration=true
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:17:57Z

Rijk: /* Wifi */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* apt install iwd vim
[General]
EnableNetworkConfiguration=true
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:08:43Z

Rijk: /* Installation */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* Change password (passwd) for root
* Install utilities: vim htop usbutils screen locate
* Change hostname (/etc/hostname) to olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* systemctl --now disable wpa_supplicant
* systemctl --now disable NetworkManager
* apt install iwd vim
[General]
EnableNetworkConfiguration=true
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T19:07:08Z

Rijk: /* Als snapcast client */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* change password (passwd) for root
* change hostname (/etc/hostname) to olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* systemctl --now disable wpa_supplicant
* systemctl --now disable NetworkManager
* apt install iwd vim
[General]
EnableNetworkConfiguration=true
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T18:57:51Z

Rijk: /* Installation */

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh, user root, passwd is in filename.
* change password (passwd) for root

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* systemctl --now disable wpa_supplicant
* systemctl --now disable NetworkManager
* apt install iwd vim
[General]
EnableNetworkConfiguration=true
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T18:54:45Z

Rijk:

= Type =

'''A20-OLinuXino-MICRO'''

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh and olimex/olimex, upgrade to root.
* dpkg-reconfigure keyboard-configuration
* dpkg-reconfigure console-setup
* change password (passwd) for root,olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* systemctl --now disable wpa_supplicant
* systemctl --now disable NetworkManager
* apt install iwd vim
[General]
EnableNetworkConfiguration=true
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T16:29:32Z

Rijk: /* Als snapcast client */

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/a20_olinuxino_micro.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh and olimex/olimex, upgrade to root.
* dpkg-reconfigure keyboard-configuration
* dpkg-reconfigure console-setup
* change password (passwd) for root,olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* systemctl --now disable wpa_supplicant
* systemctl --now disable NetworkManager
* apt install iwd vim
[General]
EnableNetworkConfiguration=true
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Olimex-A20

2025-12-01T12:56:28Z

Rijk: /* Als snapcast client */

= Als snapcast client =

== Installation ==
* Download Debian image (https://sd-card-images.johang.se/boards/olinuxino_lime2.html -> follow instructions).
* Boot from card with HDMI and Network connected.
* No partition enlargement necessary.
* Connect with ssh and olimex/olimex, upgrade to root.
* dpkg-reconfigure keyboard-configuration
* dpkg-reconfigure console-setup
* change password (passwd) for root,olimex

== Wifi ==
https://wiki.debian.org/WiFi/HowToUse#IWCtl
* export wlan0=wlx00e1b0860271
* export ssid=Geitenpad
* systemctl --now disable wpa_supplicant
* systemctl --now disable NetworkManager
* apt install iwd vim
[General]
EnableNetworkConfiguration=true
* systemctl --now enable iwd
* vim /etc/iwd/main.conf
* service iwd restart
* exit to olimex !!!
* iwctl (configure, type help for commands)
* reboot, unplug wired network
* systemctl enable --now systemd-resolved
* ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
* reboot

== Snapcast ==
* apt install mlocate snapserver snapclient
* systemctl --now disable snapserver
* vim /etc/default/snapclient
SNAPCLIENT_OPTS="-h 192.168.2.70"

= Verouderd, als server =

== Burn card ==
* Download image: https://drive.google.com/file/d/0B-bAEPML8fwlX2tYS2FmNXV5OUU/edit?usp=sharing 
* Burn it to the card:
rijk@rijksUreich:~$ dd bs=4M oflag=sync if=A20_debian_kernel_3_4_LAN_USBx2_Cards_LCD_HDMI_SATA_TS_X_GPIO_OTG_MIC_Video_accel_release7.img of=/dev/mmcblk0

== Enlarge root partition ==

I use an 8GB card but the image is only 4GB, in order to use everything I have to enlarge the partition.
* Put Card in cardreader of my laptop
rijk@rijksUreich:~$ cfdisk -Ps /dev/mmcblk0

Partition Table for /dev/mmcblk0
First Last
# Type Sector Sector Offset Length Filesystem Type (ID) Flag
Pri/Log 0 2047 0# 2048 Free Space None
1 Primary 2048 34815 0 32768 Linux (83) None
2 Primary 34816 7774207 0 7739392 Linux (83) None
Pri/Log 7774208 15644671 0 7870464 Free Space None

rijk@rijksUreich:~$ sudo cfdisk /dev/mmcblk0

* Remove Partition 2 and create new one with filesystem 83
* Boot from disk and run

root@a20-OLinuXino:~# resize2fs /dev/mmcblk0p2

Later with debian 8 Olimex provided a script:
resize_sd.sh /dev/mmcblk0 2

== Start network on eth0 ==
root@a20-OLinuXino:~# dhclient eth0
== Install vim ==
root@a20-OLinuXino:~# aptitude install vim

== Start eth0 on boot ==

root@a20-OLinuXino:~# vim /etc/network/interfaces

* Add lines:
auto eth0
allow-hotplug eth0
iface eth0 inet dhcp

== Install MySQL ==

root@a20-OLinuXino:~# aptitude install mysql-server mysql-client

*Configure caching:

root@paardenpad:/etc/mysql/conf.d# vim paardenpad.cnf

[mysqld]
max_connections=500
key_buffer_size=384M
max_allowed_packet=16M
table_cache=256
sort_buffer_size=2M
read_buffer_size=2M
join_buffer_size=2M 
# if you are performing GROUP BY or ORDER BY queries on tables that
# are much larger than your available memory, you should increase
# the value of read_rnd_buffer_size to speed up the reading of rows
# following sorting operations.
# but: change the session variable only from within those clients
# that need to run large queries
read_rnd_buffer_size=2M 
max_heap_table_size=256M
tmp_table_size=256M 
myisam_sort_buffer_size=64M 
# increase until threads_created doesnt grow anymore
thread_cache=256 
query_cache_type=1
query_cache_limit=1M
query_cache_size=32M 
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=4

== Install Apache ==

root@a20-OLinuXino:~# aptitude install apache2
root@a20-OLinuXino:~# aptitude install apache2-threaded-dev debhelper cdbs dpatch libtool

root@a20-OLinuXino:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

root@a20-OLinuXino:/root/build# apt-get -b source libapache-mod-fastcgi
root@a20-OLinuXino:/root/build# dpkg -i libapache2-mod-fastcgi_2.4.7~0910052141-1_armhf.deb
root@a20-OLinuXino:/root/build# a2enmod fastcgi actions
root@a20-OLinuXino:/var/www/fastcgi# chown www-data:www-data /var/www/fastcgi

root@a20-OLinuXino:/var/www/fastcgi# vim /etc/apache2/mods-available/fastcgi.conf

<IfModule mod_fastcgi.c>
AddHandler fastcgi-script .fcgi
#FastCgiWrapper /usr/lib/apache2/suexec
FastCgiIpcDir /var/lib/apache2/fastcgi
Alias /php5.fastcgi /var/www/fastcgi/php5.fastcgi
AddHandler php-script .php
FastCGIExternalServer /var/www/fastcgi/php5.fastcgi -socket /var/run/php5-fpm.sock
Action php-script /php5.fastcgi virtual
</IfModule>

== Install PHP ==
root@a20-OLinuXino:~# aptitude install php5 php5-mysql libapache2-mod-php5

root@a20-OLinuXino:~# vim /etc/apache2/mods-available/php5.conf

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Order Deny,Allow
Deny from all
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Order Deny,Allow
Deny from all
</FilesMatch> 
# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_value engine Off
# </Directory>
#</IfModule>

== Install phpMyAdmin ==
root@a20-OLinuXino:/var/www# aptitude install phpmyadmin

* Deny external access
root@paardenpad:/etc/apache2/conf.d# vim phpmyadmin.conf

* Add lines:
Order Allow,Deny
Allow from 127.0.0.1
Allow from 192.168.2.0/24

== Install Apc ==
root@a20-OLinuXino:/var/www# apt-get install php-apc

root@a20-OLinuXino:~# vim /etc/php5/conf.d/20-apc.ini

extension=apc.so 
apc.enabled=1
apc.shm_size=128M
apc.ttl=3600
apc.user_ttl=7200
apc.gc_ttl=3600
apc.max_file_size=1M
apc.stat=0

== Install Tomcat ==
root@a20-OLinuXino:/var/www# apt-get install tomcat7
root@a20-OLinuXino:/var/www# aptitude install tomcat7-admin

* Add roles manager-gui and admin-gui to user tomcat /etc/tomcat7/tomcat-users.xml

== Remove xscreensaver from autostart in LXDE ==
root@a20-OLinuXino:~# vim /etc/xdg/lxsession/LXDE/autostart

* Remove line with xscreensaver.

== Disable graphical login ==
root@a20-OLinuXino:~# rm /etc/rc2.d/S01slim

root@a20-OLinuXino:/etc/rc2.d# vim /etc/rc.local

* comment line:
chmod 777 /dev/disp /dev/cedar_dev /dev/ump /dev/mali

Later with Debian 8 change line in /etc/X11/default-display-manager
/usr/sbin/lightdm
to
/usr/bin/true

root@A20-OLinuXino:~# vim /etc/X11/default-display-manager

== Move /var to ssd ==

* Create partition on ssd using GParted
root@a20-OLinuXino:~# mount /dev/sda1 /mnt/sd
root@a20-OLinuXino:~# rsync -aHAX /var/ /mnt/sd

* Shutdown and remove contents of /var from sdcard

== Remove user olimex ==
root@a20-OLinuXino:~# userdel -r olimex

== Push public key to olimex ==
rijk@rijksUreich:~$ cat .ssh/id_rsa.pub | ssh olimex 'cat >> .ssh/authorized_keys'

== Change root password ==
root@a20-OLinuXino:/home/rijk# passwd

== Prevent root login over ssh ==
root@a20-OLinuXino:/home/rijk# vim /etc/ssh/sshd_config

set value for PermitRootLogin: PermitRootLogin no

== Setup nfs server ==
root@a20-OLinuXino:/home/rijk# aptitude install nfs-kernel-server nfs-common

root@a20-OLinuXino:/home/rijk# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@a20-OLinuXino:/home/rijk# /etc/init.d/nfs-kernel-server start

== Setup userdir for apache ==
rijk@a20-OLinuXino:~$ mkdir public_html

* Copy content with Nautilus

== Sync documents from server to olimex ==
rijk@paardenpad:~> rsync -aze /home/rijk/Documents/* -e ssh olimex:/home/rijk/Documents

== Configure https (https://wiki.debian.org/Self-Signed_Certificate) ==
root@a20-OLinuXino:/etc/ssl/localcerts# openssl req -new -x509 -days 1095 -nodes -out /etc/ssl/localcerts/paardenpad.pem -keyout /etc/ssl/localcerts/paardenpad.key
root@a20-OLinuXino:/etc/ssl/localcerts# chmod 600 /etc/ssl/localcerts/paardenpad.*
root@a20-OLinuXino:/etc/apache2/sites-available# a2enmod ssl
root@a20-OLinuXino:/etc/apache2/sites-available# cp default-ssl paardenpad-ssl

vim paardenpad-ssl

* Add lines:

NameVirtualHost *:443
SSLCertificateFile /etc/ssl/localcerts/paardenpad.pem
SSLCertificateKeyFile /etc/ssl/localcerts/paardenpad.key

root@a20-OLinuXino:/etc/apache2/sites-available# a2ensite paardenpad-ssl

== Change hostname ==
root@a20-OLinuXino:/home/rijk# vim /etc/hostname
root@a20-OLinuXino:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.xs4all.nl

== Limit access to apache applications and modules ==
root@paardenpad:/etc/apache2/mods-available# vim userdir.conf

root@paardenpad:/etc/phpmyadmin# vim apache.conf

* Change access to:
Allow from 192.168.2.0/24

== Locale ==
root@paardenpad:/home/rijk# dpkg-reconfigure locales

* Choose NL-UTF-8

root@paardenpad:/home/rijk# dpkg-reconfigure tzdata

* Choose Amsterdam

== Install Sendmail ==
root@paardenpad:/var/www/upload# apt-get install sendmail

== Colored prompt ==
* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

== Install DenyHosts ==

root@paardenpad:/home/rijk# aptitude install denyhosts

* Configure in /etc/denyhosts.conf

== Install Mutt ==

root@paardenpad:/var/log# aptitude install mutt

== Install gtkterm ==
root@a20:~# aptitude install intltool gcc libvte-2.90-dev libvte-dev libgtk-3-dev libgtk2.0-dev
root@a20Lime:~# git clone https://github.com/jiankangshiye/gtkterm
root@a20Lime:~# cd gtkterm
root@a20:~# ./autogen
root@a20:~# ./configure
root@a20:~# make
root@a20:~# make install

== Disable mail messages by cron ==

Add ''>/dev/null 2>&1'' to cronjob. E.g.

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root fswebcam -r 1920x540 --jpeg 85 -D 3 /var/www/webcam/photo0.jpg >/dev/null 2>&1

== Install Samba ==

root@paardenpad:/var/log# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

[global]
netbios name = SAMBASERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[miel]
path = /home/miel
guest ok = No
comment = Miels documents
writable = Yes
[oosterhoff]
path = /home/oosterhoff
guest ok = No
comment = Shared documents
writable = yes

root@paardenpad:/etc/samba# pdbedit -a -u rijk
root@paardenpad:/etc/samba# pdbedit -a -u miel
root@paardenpad:/etc/samba# pdbedit -a -u oosterhoff

== Disabling / Enabling services ==

root@paardenpad:/etc/rc5.d# update-rc.d samba remove
root@paardenpad:/etc/rc5.d# update-rc.d samba defaults

== Install NFS ==
root@paardenpad:/#aptitude install nfs-kernel-server nfs-common

root@paardenpad:/etc/init.d# vim /etc/exports

* Add line

/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

== Userrights and groups ==

root@paardenpad:/etc/rc5.d# addgroup oosterhoff
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff rijk
root@paardenpad:/etc/rc5.d# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures
chown -R miel:users /home/miel
chmod -R 755 /home/miel/*
chmod -R 775 /home/oosterhoff/

root@paardenpad:~/scripts# mkdir /home/oosterhoff
root@paardenpad:~/scripts# chown rijk:oosterhoff /home/oosterhoff
root@paardenpad:~/scripts# ./setUserRights

== Push ssh key on server ==

rijk@paardenpad:~/.ssh$ ssh-keygen -t rsa

* Alle enters, no passphrase

rijk@paardenpad:~/.ssh$ ssh-copy-id rijk@server

== /etc/hosts ==

root@paardenpad:/home/rijk/.ssh# cat /etc/hosts

127.0.0.1 localhost paardenpad.xs4all.nl
192.168.2.20 server

== /etc/crontab ==

root@paardenpad:~/scripts# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do. 
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin 
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
15 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

== /etc/fstab ==

root@paardenpad:/home/rijk# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/root / ext4 noatime,errors=remount-ro 0 1
tmpfs /run/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /var/tmp tmpfs defaults 0 0 
#/dev/sda1 /var ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda2 /home/rijk ext4 noatime,discard,errors=remount-ro 0 2
#/dev/sda3 /home/miel ext4 noatime,discard,errors=remount-ro 0 2

Iemhof

2025-11-22T19:30:39Z

Rijk: /* Call pp for ip (uitgezet backup op Stack) */

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Enable autologin ==
root@iemhof:~# cat /etc/lightdm/lightdm.conf
#
# General configuration
#
# start-default-seat = True to always start one seat if none are defined in the configuration
# greeter-user = User to run greeter as
# minimum-display-number = Minimum display number to use for X servers
...
autologin-user=janarie
autologin-user-timeout=0
...
#listen-address=
#width=1024
#height=768
#depth=8

== Call pp for ip ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://phone-home.geitenpad.rijkenmiel.nl/ | xargs -i curl --data "username=iemhof&password=oongeez4noch9dahl4AhPhequ&ip={}" https://phone-home.geitenpad.rijkenmiel.nl/post.php

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# apt install apt-transport-https ca-certificates curl gpg
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker.gpg
root@iemhof:~# echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/debian trixie stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
root@iemhof:~# apt update
root@iemhof:~# apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Build container:
root@iemhof:~/git/iemhof/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:~/git/iemhof/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-22T19:15:24Z

Rijk: /* Remove Berend */

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Enable autologin ==
root@iemhof:~# cat /etc/lightdm/lightdm.conf
#
# General configuration
#
# start-default-seat = True to always start one seat if none are defined in the configuration
# greeter-user = User to run greeter as
# minimum-display-number = Minimum display number to use for X servers
...
autologin-user=janarie
autologin-user-timeout=0
...
#listen-address=
#width=1024
#height=768
#depth=8

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# apt install apt-transport-https ca-certificates curl gpg
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker.gpg
root@iemhof:~# echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/debian trixie stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
root@iemhof:~# apt update
root@iemhof:~# apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Build container:
root@iemhof:~/git/iemhof/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:~/git/iemhof/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-22T19:15:04Z

Rijk: /* Samba */

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Enable autologin ==
root@iemhof:~# cat /etc/lightdm/lightdm.conf
#
# General configuration
#
# start-default-seat = True to always start one seat if none are defined in the configuration
# greeter-user = User to run greeter as
# minimum-display-number = Minimum display number to use for X servers
...
autologin-user=janarie
autologin-user-timeout=0
...
#listen-address=
#width=1024
#height=768
#depth=8

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# apt install apt-transport-https ca-certificates curl gpg
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker.gpg
root@iemhof:~# echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/debian trixie stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
root@iemhof:~# apt update
root@iemhof:~# apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Build container:
root@iemhof:~/git/iemhof/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:~/git/iemhof/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-22T19:14:13Z

Rijk: /* Enable autologin */

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Enable autologin ==
root@iemhof:~# cat /etc/lightdm/lightdm.conf
#
# General configuration
#
# start-default-seat = True to always start one seat if none are defined in the configuration
# greeter-user = User to run greeter as
# minimum-display-number = Minimum display number to use for X servers
...
autologin-user=janarie
autologin-user-timeout=0
...
#listen-address=
#width=1024
#height=768
#depth=8

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# apt install apt-transport-https ca-certificates curl gpg
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker.gpg
root@iemhof:~# echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/debian trixie stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
root@iemhof:~# apt update
root@iemhof:~# apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Build container:
root@iemhof:~/git/iemhof/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:~/git/iemhof/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-22T18:58:23Z

Rijk: /* Disable integrated devices */

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Enable autologin ==
root@iemhof:~# cat /etc/lightdm/lightdm.conf
#
# General configuration
#
# start-default-seat = True to always start one seat if none are defined in the configuration
# greeter-user = User to run greeter as
# minimum-display-number = Minimum display number to use for X servers
...
autologin-user = mythtv
autologin-user-timeout = 10
...
#listen-address=
#width=1024
#height=768
#depth=8

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# apt install apt-transport-https ca-certificates curl gpg
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker.gpg
root@iemhof:~# echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/debian trixie stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
root@iemhof:~# apt update
root@iemhof:~# apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Build container:
root@iemhof:~/git/iemhof/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:~/git/iemhof/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-22T18:52:45Z

Rijk: /* Install landisplusgyr */

== Disable integrated devices ==
In BIOS disable bluetooth, wifi and camera

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Enable autologin ==
root@iemhof:~# cat /etc/lightdm/lightdm.conf
#
# General configuration
#
# start-default-seat = True to always start one seat if none are defined in the configuration
# greeter-user = User to run greeter as
# minimum-display-number = Minimum display number to use for X servers
...
autologin-user = mythtv
autologin-user-timeout = 10
...
#listen-address=
#width=1024
#height=768
#depth=8

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# apt install apt-transport-https ca-certificates curl gpg
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker.gpg
root@iemhof:~# echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/debian trixie stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
root@iemhof:~# apt update
root@iemhof:~# apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Build container:
root@iemhof:~/git/iemhof/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:~/git/iemhof/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Nextcloud

2025-11-19T20:10:42Z

Rijk: /* Upgrade Docker */

== ProBook 6550b ==

root@paardenpad:/root# wget https://download.nextcloud.com/server/releases/nextcloud-12.0.3.zip
root@paardenpad:/root# unzip nextcloud-12.0.3.zip
root@paardenpad:/root# mv nextclou* /var/www/html/

root@paardenpad:/var/www/html# chown -R www-data:www-data nextclou*

Change some settings recommended by nextcloud
root@paardenpad:/var/www/html# a2enmod rewrite headers env dir mime
root@paardenpad:/var/www/html# systemctl restart apache2

Add some settings recommended by nextcloud
root@paardenpad:/var/www/html# vim /etc/php/7.0/apache2/php.ini

Export calendars and users can be arranged from owncloud, show link and add ?export

== After update to 15.05 some extra configs ==

https://help.nextcloud.com/t/your-web-server-is-not-properly-set-up-to-resolve-ocm-provider/48530/15
I dropped the following into the end of my /etc/apache2.conf file and all good now.

Redirect 301 /ocm-provider/ /nextcloud/ocm-provider/
Redirect 301 /ocs-provider/ /nextcloud/ocs-provider/
Redirect 301 /.well-known/carddav /nextcloud/remote.php/dav
Redirect 301 /.well-known/caldav /nextcloud/remote.php/dav

Thanks guys!

== Add more icons to topbar ==

root@paardenpad:/var/www/html/nextcloud/core/js# vim js.js

change percentage (0.33) to higher value e.g.:

var resizeMenu = function() {
var appList = $('#appmenu li');
var rightHeaderWidth = $('.header-right').outerWidth();
var headerWidth = $('header').outerWidth();
var usePercentualAppMenuLimit = 0.66;

== Disable music app for groups ==
https://github.com/owncloud/music/issues/604

Anyway, if you really need this feature on your installation, it's rather simple to enable it. Just modify the file apps/music/appinfo/info.xml and completely remove the block

<nowiki>
<types>

<filesystem/>
</types>
</nowiki>

== Upgrade Docker ==
* Update versie (max 1 minor) in Dockerfile
* Run `docker-compose up --build`
* Haal Traefik een keer uit het netwerk en voeg het toe met het scriptje in GeitenpadBase
* Kijk in admin settings of er iets moet gebeuren.
* Als je een occ commando moet runnen is dit het eenvoudigst om via portainer in te loggen op commandline met user 33 en dan het commando uit te voeren. Anders kan dit door een shell te openen met `docker exec -it --user 33 nextcloud_nextcloud_1 /bin/bash'
* Als ie niet wil starten gebruik docker compose ipv docker-compose

== Warning: The `Strict-Transport-Security` HTTP header is not set ==

HTTP headers
Some headers are not set correctly on your instance - The `Strict-Transport-Security` HTTP header is not set (should be at least `15552000` seconds). For enhanced security, it is recommended to enable HSTS.

Add this:

Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"

under the <IfModule mod_env.c> section of the .htaccess in your root Nextcloud folder.

Iemhof

2025-11-17T10:24:28Z

Rijk: /* Add Docker */

== Disable integrated devices ==
In BIOS disable bluetooth, wifi and camera

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Enable autologin ==
root@iemhof:~# cat /etc/lightdm/lightdm.conf
#
# General configuration
#
# start-default-seat = True to always start one seat if none are defined in the configuration
# greeter-user = User to run greeter as
# minimum-display-number = Minimum display number to use for X servers
...
autologin-user = mythtv
autologin-user-timeout = 10
...
#listen-address=
#width=1024
#height=768
#depth=8

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# apt install apt-transport-https ca-certificates curl gpg
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker.gpg
root@iemhof:~# echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/debian trixie stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
root@iemhof:~# apt update
root@iemhof:~# apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Copy jar, applications.properties and dockerfile to /home/rijk/landisplusgyr on iemhof
root@iemhof:/home/rijk/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:/home/rijk/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-11T13:14:15Z

Rijk: /* Install utilities */

== Disable integrated devices ==
In BIOS disable bluetooth, wifi and camera

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Enable autologin ==
root@iemhof:~# cat /etc/lightdm/lightdm.conf
#
# General configuration
#
# start-default-seat = True to always start one seat if none are defined in the configuration
# greeter-user = User to run greeter as
# minimum-display-number = Minimum display number to use for X servers
...
autologin-user = mythtv
autologin-user-timeout = 10
...
#listen-address=
#width=1024
#height=768
#depth=8

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# sudo apt-get install apt-transport-https ca-certificates curl gnupg2 software-properties-common
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
root@iemhof:~# add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/debian \
$(lsb_release -cs) \
stable"
root@iemhof:~# apt update
root@iemhof:~# apt-get install docker-ce docker-ce-cli containerd.io

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Copy jar, applications.properties and dockerfile to /home/rijk/landisplusgyr on iemhof
root@iemhof:/home/rijk/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:/home/rijk/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-11T13:07:50Z

Rijk: /* Install base system */

== Disable integrated devices ==
In BIOS disable bluetooth, wifi and camera

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Edit boot order ==
Set Debian on top:

root@iemhof:~# efibootmgr -o 0003,0000,2001,3000
BootCurrent: 0003
Timeout: 0 seconds
BootOrder: 0003,0000,2001,3000
Boot0000* Windows Boot Manager HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)RC
Boot0003* debian HD(1,GPT,c496420a-e785-49da-add5-12d97b134f02,0x800,0x1e8000)/File(\EFI\debian\shimx64.efi)
Boot2001* EFI USB Device RC
Boot3000* Internal Hard Disk or Solid State Disk RC

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# sudo apt-get install apt-transport-https ca-certificates curl gnupg2 software-properties-common
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
root@iemhof:~# add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/debian \
$(lsb_release -cs) \
stable"
root@iemhof:~# apt update
root@iemhof:~# apt-get install docker-ce docker-ce-cli containerd.io

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Copy jar, applications.properties and dockerfile to /home/rijk/landisplusgyr on iemhof
root@iemhof:/home/rijk/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:/home/rijk/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-11T13:05:20Z

Rijk:

== Disable integrated devices ==
In BIOS disable bluetooth, wifi and camera

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie. Choose xfce desktop and common system utilities

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# sudo apt-get install apt-transport-https ca-certificates curl gnupg2 software-properties-common
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
root@iemhof:~# add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/debian \
$(lsb_release -cs) \
stable"
root@iemhof:~# apt update
root@iemhof:~# apt-get install docker-ce docker-ce-cli containerd.io

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Copy jar, applications.properties and dockerfile to /home/rijk/landisplusgyr on iemhof
root@iemhof:/home/rijk/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:/home/rijk/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-11T13:03:47Z

Rijk:

== Disable integrated devices ==
In BIOS disable bluetooth, wifi and camera

== Setup LVM ==
Create pv
pvcreate /dev/nvme0n1p3
Create vg iemhof and add nvme0n1p3
vgcreate iemhof /dev/nvme0n1p3
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm with user janarie

== Install utilities ==
root@iemhof:~# apt install vim screen htop tree curl unzip locate

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# sudo apt-get install apt-transport-https ca-certificates curl gnupg2 software-properties-common
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
root@iemhof:~# add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/debian \
$(lsb_release -cs) \
stable"
root@iemhof:~# apt update
root@iemhof:~# apt-get install docker-ce docker-ce-cli containerd.io

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Copy jar, applications.properties and dockerfile to /home/rijk/landisplusgyr on iemhof
root@iemhof:/home/rijk/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:/home/rijk/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-11T11:02:57Z

Rijk: /* Install base system */

== Disable integrated devices ==
In BIOS disable bluetooth, wifi and camera

== Setup LVM ==
Create Large partition 600G while booted Linux Mint from USB
Create pv
pvcreate /dev/sda5
Create vg iemhof and add sda5
vgcreate iemhof /dev/sda5
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 13 Trixie using lvm

== Add some users ==
root@iemhof:~# adduser janarie
pw: JAvB5282

root@iemhof:~# adduser anneke
pw: AJCdR1959!

== Install utilities ==
root@iemhof:~# apt install vim screen htop aptitude tree curl mlocate unzip ntp openssh-server

== Prevent hibernate on lid close ==
root@iemhof:~# vim /etc/systemd/logind.conf
* Add line
HandleLidSwitch=ignore

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# sudo apt-get install apt-transport-https ca-certificates curl gnupg2 software-properties-common
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
root@iemhof:~# add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/debian \
$(lsb_release -cs) \
stable"
root@iemhof:~# apt update
root@iemhof:~# apt-get install docker-ce docker-ce-cli containerd.io

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Copy jar, applications.properties and dockerfile to /home/rijk/landisplusgyr on iemhof
root@iemhof:/home/rijk/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:/home/rijk/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a

Iemhof

2025-11-11T11:01:45Z

Rijk: /* Setup LVM */

== Disable integrated devices ==
In BIOS disable bluetooth, wifi and camera

== Setup LVM ==
Create Large partition 600G while booted Linux Mint from USB
Create pv
pvcreate /dev/sda5
Create vg iemhof and add sda5
vgcreate iemhof /dev/sda5
Create lvs
lvcreate --name root --size 35G iemhof
lvcreate --name var --size 50G iemhof
lvcreate --name janarie --size 50G iemhof
lvcreate --name nc-data --size 650G iemhof
lvcreate --name swap --size 16G iemhof

== Install base system ==
Install Debian 10 Buster using lvm

== Add some users ==
root@iemhof:~# adduser janarie
pw: JAvB5282

root@iemhof:~# adduser anneke
pw: AJCdR1959!

== Install utilities ==
root@iemhof:~# apt install vim screen htop aptitude tree curl mlocate unzip ntp openssh-server

== Prevent hibernate on lid close ==
root@iemhof:~# vim /etc/systemd/logind.conf
* Add line
HandleLidSwitch=ignore

== Call pp for ip (uitgezet backup op Stack) ==
root@paardenpad:/var/www/html/ip# ls -l
total 8
-rw-r--r-- 1 www-data www-data 0 Aug 9 16:13 iemhof_ip
-rw-r--r-- 1 www-data www-data 39 Jul 12 12:38 index.php
-rw-r--r-- 1 www-data www-data 350 Aug 9 16:14 post.php
root@paardenpad:/var/www/html/ip# cat index.php
<?php echo $_SERVER['REMOTE_ADDR']; ?>
root@paardenpad:/var/www/html/ip# cat post.php
<?php

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['ip'])) {

if(isIemhof($_POST)) {
writeIemhof($_POST);
}

}

function isIemhof($POST) {
return $POST['username'] == 'iemhof' && $POST['password'] == 'qui2Niab';
}

function writeIemhof($POST) {
file_put_contents(iemhof_ip, $POST['ip']);
}

?>

Set following script into cronjob
root@iemhof:~/scripts# cat phoneHome
#!/bin/bash
curl https://paardenpad.rijkenmiel.nl/ip/ | xargs -i curl --data "username=iemhof&password=qui2Niab&ip={}" https://paardenpad.rijkenmiel.nl/ip/post.php
root@iemhof:~/scripts#

Add line to /etc/crontab:
0 7 * * * root /root/scripts/phoneHome

== Backup Nextcloud ==

BackupNCIemhof.sh (/root/scripts/backupNc in cron)

#!/bin/bash

WORK_DIR="/root"
BACKUP_FILE="nc_iemhof.sql"
STACK_SERVER="rijkierijk.stackstorage.com"
STACK_USER="janarie@rijkierijk.stackstorage.com"
export SSHPASS='SJMebb6AQFkDODSm'

echo `date`

cd $WORK_DIR
mysqldump --lock-tables -u nextcloud --password='Md8NqM1MbVY31hHX' -h 127.0.0.1 -P 3310 nextcloud > $WORK_DIR/$BACKUP_FILE

sshpass -e sftp -oBatchMode=no -b - $STACK_USER@$STACK_SERVER << !
put nc_iemhof.sql
bye
!

rm -rf $BACKUP_FILE

== Add Docker ==
root@iemhof:~# sudo apt-get install apt-transport-https ca-certificates curl gnupg2 software-properties-common
root@iemhof:~# curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add -
root@iemhof:~# add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/debian \
$(lsb_release -cs) \
stable"
root@iemhof:~# apt update
root@iemhof:~# apt-get install docker-ce docker-ce-cli containerd.io

== Install landisplusgyr ==
root@iemhof:~# usermod -a -G dialout janarie
Copy jar, applications.properties and dockerfile to /home/rijk/landisplusgyr on iemhof
root@iemhof:/home/rijk/landisplusgyr# docker build . -t landisplusgyr
Run container:
root@iemhof:/home/rijk/landisplusgyr# docker run -p 8090:8080 -v /home/janarie/landisplusgyr/:/landisplusgyr/ --device=/dev/ttyUSB0 --restart always landisplusgyr
Create cleanup job in crontab:
0 0 1 * * janarie mv /home/janarie/landisplusgyr/landisplusgyr_electricity.csv /home/janarie/landisplusgyr/landisplusgyr_electricity_$(date +\%Y\%m\%d).csv

== Samba ==
root@iemhof:~# apt install samba
root@iemhof:/etc/samba# mv smb.conf smb.conf.org

root@iemhof:/etc/samba# vim smb.conf

root@iemhof:/etc/samba# cat smb.conf
[global]
netbios name = SERVER
workgroup = IEMHOF
server string = %v on %L
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[janarie]
path = /home/janarie
guest ok = No
comment = Jan Aries documents
writable = Yes
[anneke]
path = /home/anneke
guest ok = No
comment = Annekes documents
writable = Yes
[vanberkum]
path = /home/vanberkum
guest ok = No
comment = Shared documents
writable = yes

root@iemhof:/etc/samba# smbpasswd -a janarie
root@iemhof:/etc/samba# smbpasswd -a anneke
root@iemhof:/home# mkdir vanberkum
root@iemhof:/home# groupadd vanberkum
root@iemhof:/home# adduser anneke vanberkum
root@iemhof:/home# adduser janarie vanberkum
root@iemhof:/home# chown janarie:vanberkum vanberkum/
root@iemhof:/home# systemctl restart smbd
root@iemhof:/home# systemctl restart nmbd

== Give the complete disk to Jan Arie ==
List current partitions
root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux

Create partion
root@iemhof:~# fdisk /dev/sda
Add partition with n

root@iemhof:~# fdisk -l
Disk /dev/sda: 931.5 GiB, 1000204886016 bytes, 1953525168 sectors
Disk model: WDC WD10SPZX-21Z
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x7bb20f4f

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 1918363647 1918361600 914.8G 5 Extended
/dev/sda2 1918363648 1953523711 35160064 16.8G 82 Linux swap / Solaris
/dev/sda5 4096 1228804095 1228800000 586G 83 Linux
/dev/sda6 1228806144 1918363647 689557504 328.8G 83 Linux

Change partition type to lvm
root@iemhof:~# fdisk /dev/sda

Welcome to fdisk (util-linux 2.33.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Command (m for help): t
Partition number (1,2,5,6, default 6): 6
Hex code (type L to list all codes): 8e

Changed type of partition 'Linux' to 'Linux LVM'.

Command (m for help): w
The partition table has been altered.
Syncing disks.

Reload partion table
partprobe

Create physical volume
root@iemhof:~# pvcreate /dev/sda6
Physical volume "/dev/sda6" successfully created.

Add /dev/sda6 to volume group
root@iemhof:~# vgextend iemhof /dev/sda6
Volume group "iemhof" successfully extended

Add space to lv van Jan Arie
root@iemhof:~# lvextend -L+329G /dev/iemhof/ja
Size of logical volume iemhof/ja changed from 100.00 GiB (25600 extents) to 429.00 GiB (109824 extents).
Logical volume iemhof/ja successfully resized.

Resize filesystem
root@iemhof:~# resize2fs /dev/iemhof/ja
resize2fs 1.44.5 (15-Dec-2018)
Filesystem at /dev/iemhof/ja is mounted on /home/janarie; on-line resizing required
old_desc_blocks = 13, new_desc_blocks = 54
The filesystem on /dev/iemhof/ja is now 112459776 (4k) blocks long.

== Remove extra space from Jan Arie ==

Stop landisplusgyr
root@iemhof:/home/janarie/landisplusgyr# docker container stop 66

Unmount janarie
root@iemhof:~# umount -l /home/janarie/

Remove janarie from fstab
root@iemhof:~# vim /etc/fstab

Remount everything
root@iemhof:~# mount -a

Disable lv ja
root@iemhof:~# !536
lvchange -an /dev/mapper/iemhof-ja

Remove lv ja
root@iemhof:~# lvremove /dev/iemhof/ja
Logical volume "ja" successfully removed

Remove lv vms
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vms
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/
a root var vb
root@iemhof:~# lvremove /dev/iemhof/vms
Logical volume "vms" successfully removed

Remove /dev/sda6 from iemhof
root@iemhof:~# vgreduce iemhof /dev/sda6
Removed "/dev/sda6" from volume group "iemhof"

Recreate lv ja
root@iemhof:~# lvcreate --name ja --size 10G iemhof
Logical volume "ja" created.

Create filesystem
root@iemhof:~# mkfs.ext4 /dev/iemhof/ja
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 26214400 4k blocks and 6553600 inodes
Filesystem UUID: 3319f0a9-cc02-44e4-b4f5-583ab2a44777
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632,
2654208, 4096000, 7962624, 11239424, 20480000, 23887872

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information: done

Mount ja to /home/janarie
root@iemhof:~# mount /dev/iemhof/ja /home/janarie/
root@iemhof:~# vim /etc/fstab
root@iemhof:~# mount -a

Copy landisplusgyr files back to /home/janarie/landisplusgyr

Start docker container landisplusgyr
root@iemhof:/home/janarie# docker container start 66

== Remove Berend ==
root@iemhof:/home/janarie/landisplusgyr# deluser berend --remove-home
Looking for files to backup/remove ...
Removing files ...
Removing user `berend' ...
Warning: group `berend' has no more members.
Done.

== Remove Anneke completely, lv etc ==

Remove samba user
root@iemhof:/home/janarie/landisplusgyr# smbpasswd -x anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/samba/smb.conf

Unmount anneke
root@iemhof:/home/janarie/landisplusgyr# umount /home/anneke
root@iemhof:/home/janarie/landisplusgyr# vim /etc/fstab

Remove user anneke
root@iemhof:/home/janarie/landisplusgyr# deluser anneke --remove-home

Remove lv a
root@iemhof:/home/janarie/landisplusgyr# lvchange -an /dev/mapper/iemhof-a
root@iemhof:/home/janarie/landisplusgyr# lvremove /dev/iemhof/a
Logical volume "a" successfully removed

== Remove VanBerkum ==
root@iemhof:~# umount /home/vanberkum/
root@iemhof:~# lvchange -an /dev/mapper/iemhof-v
iemhof-var iemhof-vb
root@iemhof:~# lvchange -an /dev/mapper/iemhof-vb
root@iemhof:~# lvremove /dev/iemhof/
ja root var
root@iemhof:~# lvremove /dev/mapper/
control iemhof-ja iemhof-root iemhof-var
root@iemhof:~# lvremove /dev/mapper/iemhof-vb
Logical volume "vb" successfully removed

== Create lv nc-data and mount on /var/nc-data

root@iemhof:~# lvcreate --name nc-data --size 600G iemhof
Logical volume "nc-data" created.
root@iemhof:~# mkdir /var/nc-data
root@iemhof:~# mkfs.ext4 /dev/iemhof/nc-data
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done
Creating filesystem with 157286400 4k blocks and 39321600 inodes
Filesystem UUID: 5fe9826f-62c0-4a1f-a9e6-020b4012a104
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968,
102400000

Allocating group tables: done
Writing inode tables: done
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done

root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /dev/mapper/iemhof-
iemhof-ja iemhof-nc--data iemhof-root iemhof-var
root@iemhof:~# ls /dev/mapper/iemhof-nc--data
root@iemhof:~# vim /etc/fstab
root@iemhof:~# ls /var/
backups cache lib local lock log lost+found mail nc-data opt run spool tmp
root@iemhof:~# mount -a