Rijk: /* /etc/crontab */

2020-01-11T15:14:26Z

/etc/crontab

New page

== Boot every day from BIOS ==
* Set wake-up time at 7:30, every day (System Configuration -> BIOS Power-On -> Set Alarm Time)

== Wake on lan ==
* Enable wake on lan (System Configuration -> Built-In Device Options -> Wake on Lan -> Follow Boot Order)

== Create bootable USB ==
* Download 64 bit image from https://www.debian.org/devel/debian-installer/
* Create bootable USB using Unetbootin

== Install base system ==
* Boot live cd and do partitioning, Debian installer hangs at partitioning
* Boot from Debian USB and install base system only

* Later i used LVM, setup lvm externally on my laptop and used this partition scheme

== LVM ==
https://www.howtoforge.com/linux_lvm

1001 27-11-2018 18:40:03 fdisk -l
1002 27-11-2018 18:40:59 pvdisplay
1003 27-11-2018 18:41:35 vgscan
1004 27-11-2018 18:41:47 vgdisplay
1005 27-11-2018 18:42:49 lvdisplay
1006 27-11-2018 18:45:04 lvcreate --name virtual_machines
1007 27-11-2018 18:46:07 lvcreate --name virtual_machines1 --size 50G paardenpad
1008 27-11-2018 18:46:11 lvdisplay
1009 27-11-2018 18:46:37 lvscan
1010 27-11-2018 18:47:42 lvrename paardenpad virtual_machines1 virtual_machines
1011 27-11-2018 18:47:45 lvscan
1012 27-11-2018 18:48:49 mkfs.ext4 /dev/paardenpad/virtual_machines
1013 27-11-2018 19:17:53 df -h

Mount via /etc/fstab

root@paardenpad:~# mount -a
root@paardenpad:~# df -h
Filesystem Size Used Avail Use% Mounted on
udev 1.9G 0 1.9G 0% /dev
tmpfs 375M 39M 337M 11% /run
/dev/mapper/paardenpad-root 30G 8.3G 20G 30% /
tmpfs 1.9G 8.0K 1.9G 1% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 1.9G 0 1.9G 0% /sys/fs/cgroup
/dev/mmcblk0p1 30G 15G 15G 52% /media/sdcard
/dev/mapper/paardenpad-var 49G 8.7G 38G 19% /var
/dev/mapper/paardenpad-rijk 147G 64G 76G 46% /home/rijk
/dev/mapper/paardenpad-miel 49G 22G 25G 48% /var/spool/burp/miels_laptop
tmpfs 375M 0 375M 0% /run/user/1000
/dev/mapper/paardenpad-virtual_machines 49G 53M 47G 1% /var/lib/libvirt/images

== Change hostname ==
root@paardenpad:/home/rijk# vim /etc/hostname
root@paardenpad:/home/rijk# vim /etc/hosts

* Change both values to paardenpad.rijkenmiel.nl

== Install utilities ==
root@ppl:~# apt-get install vim
root@ppl:~# apt-get install aptitude
root@ppl:~# aptitude install screen
root@ppl:~# aptitude install htop
root@ppl:~# aptitude install tree
root@ppl:~# aptitude install curl
root@ppl:~# aptitude install mlocate
root@ppl:~# aptitude install unzip

== Prevent hibernate on lid close ==
root@ppl:~# vim /etc/systemd/logind.conf
* Add line
HandleLidSwitch=ignore

== Install ssh server ==
root@ppl:~# aptitude install openssh-server
root@ppl:~# vim /etc/ssh/sshd_config

* Change PermitRootLogin
PermitRootLogin without-password -> PermitRootLogin no

root@ppl:~# service sshd restart

== Push key to .ssh/authorized_keys ==
rijk@ppl:~/.ssh$ cat authorized_keys

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxYiIBDAFN1MGWMjlhSy4kRviofAah/C8fK03y+9Anze8QpeKeIneQgJZAJnf02ZJSff61gL6MEIkb4NPyk
XnlAGWYH+2MCLpaY2sCz4sRAeGRYj4T1XYDE5T6oUbY9h0fAzMpsmxcl1ihK0mEIyg2qgjW0lb4zaiw1hLyPoUyRIgPWdt07CTuOdHXXfHCDReTFoO1MHoMmW8t
kCTx20BREEcSl2geyAFilnQGvN4UPTW13bnYHLE+9OFnZhf4Mj9U6ZkwOVfVaw2y5hpYSnhWy57GbVOD3lq4Ksjhc/48bssnVUbZNq6M79+y8CFgbaQLy0+DUwe
6676uoTFl2mZ rijk@rijksUreich
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPq5GIrmXSB/x0UBWzD73pFJXH7onvFQA2LCHEmkxIO7NEiWNWyJjI/bC8++XkJnAwhzK8JE+9HJGs7i5Xg
3XE7FjfRiAOwNVHCvKr/BHnFAI4hBVyc0Wwn1xZPpZUyLUA+LMHMzHRCVaVW6agHRFL7BNJHigDWL1pAM1L/zWRYBy4h55fQLFLLjMUml7dj2o4vNr1TH65Kz
c4WJF2337y0CMQacDDvPuURAr/2FU/rcEgd8NBQCLh0EQLedOk9yrHBGUkyEPEBggQZw0QmGHsogkAuSseoh1NCYsq+FxJLOP+MbBCA6ljb5LvCXuUEfea+0v
OWt+bCnbq2Z1xuFDT rijk@paardenpad

== Longer history with time ==

* Add folowing to .bashrc:

HISTSIZE=2500
HISTTIMEFORMAT="%d-%m-%Y %H:%M:%S "

== Colored prompt ==
* Change to .bashrc to .bashrc from suse:

# ~/.bashrc: executed by bash(1) for non-login shells.
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
# for examples

# If not running interactively, don't do anything
case $- in
*i*) ;;
*) return;;
esac

# don't put duplicate lines or lines starting with space in the history.
# See bash(1) for more options
HISTCONTROL=ignoreboth

# append to the history file, don't overwrite it
shopt -s histappend

# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
HISTSIZE=1000
HISTFILESIZE=2000

# check the window size after each command and, if necessary,
# update the values of LINES and COLUMNS.
shopt -s checkwinsize

# If set, the pattern "**" used in a pathname expansion context will
# match all files and zero or more directories and subdirectories.
#shopt -s globstar

# make less more friendly for non-text input files, see lesspipe(1)
#[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"

# set variable identifying the chroot you work in (used in the prompt below)
if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
debian_chroot=$(cat /etc/debian_chroot)
fi

# set a fancy prompt (non-color, unless we know we "want" color)
case "$TERM" in
xterm-color) color_prompt=yes;;
esac

# uncomment for a colored prompt, if the terminal has the capability; turned
# off by default to not distract the user: the focus in a terminal window
# should be on the output of commands, not on the prompt
#force_color_prompt=yes

if [ -n "$force_color_prompt" ]; then
if [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then
# We have color support; assume it's compliant with Ecma-48
# (ISO/IEC-6429). (Lack of such support is extremely rare, and such
# a case would tend to support setf rather than setaf.)
color_prompt=yes
else
color_prompt=
fi
fi

if [ "$color_prompt" = yes ]; then
PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
else
PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
fi
unset color_prompt force_color_prompt

# If this is an xterm set the title to user@host:dir
case "$TERM" in
xterm*|rxvt*)
PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1"
;;
*)
;;
esac

# enable color support of ls and also add handy aliases
if [ -x /usr/bin/dircolors ]; then
test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
alias ls='ls --color=auto'
#alias dir='dir --color=auto'
#alias vdir='vdir --color=auto'

#alias grep='grep --color=auto'
#alias fgrep='fgrep --color=auto'
#alias egrep='egrep --color=auto'
fi

# colored GCC warnings and errors
#export GCC_COLORS='error=01;31:warning=01;35:note=01;36:caret=01;32:locus=01:quote=01'

# some more ls aliases
#alias ll='ls -l'
#alias la='ls -A'
#alias l='ls -CF'

# Alias definitions.
# You may want to put all your additions into a separate file like
# ~/.bash_aliases, instead of adding them here directly.
# See /usr/share/doc/bash-doc/examples in the bash-doc package.

if [ -f ~/.bash_aliases ]; then
. ~/.bash_aliases
fi

# enable programmable completion features (you don't need to enable
# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
# sources /etc/bash.bashrc).
if ! shopt -oq posix; then
if [ -f /usr/share/bash-completion/bash_completion ]; then
. /usr/share/bash-completion/bash_completion
elif [ -f /etc/bash_completion ]; then
. /etc/bash_completion
fi
fi

PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* Set colors in .bashrc

Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

* For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi

* Log off and on for changes to take effect

== Banner in terminal ==
Add following line to .bashrc

hostname|figlet -f small

== Syntax on in vim ==
root@ppl:/var/log/apache2# vim /root/.vimrc
* Add line
syntax on

== NTP ==
root@ppl:~# aptitude install ntp

== Install MySQL ==

root@ppl:/home/rijk/.ssh# aptitude install mysql-server mysql-client
* Configure some options, change options to:
root@ppl:/etc/mysql# vim my.cnf

thread_concurrency = 8
query_cache_limit = 1M
query_cache_size = 64M

root@ppl:/etc/mysql# service mysql restart

== Replace MariaDB with MySQL ==
root@paardenpad:~# aptitude install mariadb-server mariadb-client
During upgrade of mysql or phpmyadmin you can remove your password temporarily:
mysql -u root -p
set password = password(' '); (without the space)
After upgrade reset it to original one using above command.

== Allow remote access to MySQL ==
Comment all lines with bind_address = 127.0.0.1 in several files in /etc/mysql. Find them with grep -r. Then reboot!

== Install Apache ==

root@ppl:~# aptitude install apache2
root@ppl:~# a2enmod userdir
root@ppl:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root

<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch
<Limit GET POST OPTIONS>
Require ip 192.168.2.0/24
</Limit>
<LimitExcept GET POST OPTIONS>
Require all granted
</LimitExcept>
</Directory>
</IfModule>

root@ppl:~# aptitude install php5 php5-mysql libapache2-mod-php5 php5-apcu

root@ppl:~# vim /etc/apache2/mods-enabled/php5.conf

* Comment stuff about userdir

<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
SetHandler application/x-httpd-php-source
# Deny access to raw php sources by default
# To re-enable it's recommended to enable access to the files
# only in specific virtual host or directory
Require all denied
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
Require all denied
</FilesMatch>

# Running PHP scripts in user directories is disabled by default
#
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
# <Directory /home/*/public_html>
# php_admin_flag engine Off
# </Directory>
#</IfModule>

Later I installed php7:
root@ppl:~# apt-get install libapache2-mod-php7.0
root@ppl:~# apt-get install php7.0-gd php7.0-mysql php7.0-curl
root@ppl:~# apt-get install php7.0-intl php7.0-mcrypt php-imagick
root@ppl:~# apt-get install php7.0-zip php7.0-xml php7.0-mbstring
root@ppl:~# apt-get install php-apcu (memory caching)

== phpMyAdmin ==
root@ppl:~# aptitude install phpmyadmin

* Limit access to local
root@ppl:/etc/apache2/conf-enabled# vim /etc/phpmyadmin/apache.conf
* Add lines to <Directory /usr/share/phpmyadmin> and to <Directory /usr/share/phpmyadmin/setup>:
<RequireAny>
Require ip 127.0.0.1
Require ip 192.168.2.0/24
</RequireAny>

Later I had to revert root password to empty to enable autoconfiguration.

== Configure https ==
root@ppl:/etc/ssl# mkdir localcerts
root@ppl:/etc/ssl/localcerts# openssl genrsa -des3 -passout pass:x -out server.pass.key 2048
root@ppl:/etc/ssl/localcerts# openssl rsa -passin pass:x -in server.pass.key -out server.key
root@ppl:/etc/ssl/localcerts# rm server.pass.key

root@ppl:/etc/ssl/localcerts# openssl req -new -key server.key -out server.csr

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:NL
State or Province Name (full name) [Some-State]:Zuid-Holland
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:PaardenPad
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:paardenpad.xs4all.nl
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

root@ppl:/etc/ssl/localcerts# openssl x509 -req -days 1095 -in server.csr -signkey server.key -out server.crt

root@ppl:/etc/ssl# a2enmod ssl
root@ppl:/etc/apache2/sites-available# cp default-ssl.conf paardendpad-ssl.conf
root@ppl:/etc/apache2/sites-available# vim paardendpad-ssl.conf

* Change lines about certificates to:
SSLCertificateFile /etc/ssl/localcerts/server.crt
SSLCertificateKeyFile /etc/ssl/localcerts/server.key

root@ppl:/etc/apache2/sites-enabled# service apache2 restart
root@ppl:/etc/apache2/sites-enabled# ln -s ../sites-available/paardendpad-ssl.conf

== Configure https with signed certificate from Versio ==

root@paardenpad:/etc/ssl/cert# openssl req -nodes -newkey rsa:2048 -keyout paardenpad_rijkenmiel_nl.key -out paardenpad_rijkenmiel_nl.csr

root@paardenpad:/etc/ssl/cert# openssl req -nodes -newkey rsa:2048 -keyout paardenpad_rijkenmiel_nl.key -out paardenpad_rijkenmiel_nl.csr
Generating a 2048 bit RSA private key
..........+++
............+++
writing new private key to 'paardenpad_rijkenmiel_nl.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:NL
State or Province Name (full name) [Some-State]:Zuid-Holland
Locality Name (eg, city) []:Leiden
Organization Name (eg, company) [Internet Widgits Pty Ltd]:PaardenPad
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:paardenpad.rijkenmiel.nl
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

* Go to versio and use content of paardenpad_rijkenmiel_nl.csr to request signed certificate
* Copy certificates to correct place:

2015:
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl.cer .
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/CA_Root.cer .
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/CA_Intermediate.cer .
root@paardenpad:/etc/ssl/cert# chown root:root *
root@paardenpad:/etc/ssl/cert# chmod 644 *

2016:
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl/paardenpad_rijkenmiel_nl.cer .
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl/TrustProviderBVDVSSLCA-G2.cer ./CA_Intermediate.cer
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl/GeoTrustGlobalCA.cer ./CA_Root.cer
root@paardenpad:/etc/ssl/cert# chown root:root *
root@paardenpad:/etc/ssl/cert# chmod 644 *

2017:
rijk@RijksReich:~/Desktop$ cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> bundle.crt
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/bundle.crt .
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl.cer .
root@paardenpad:/etc/ssl/cert# chown root:root paardenpad_rijkenmiel_nl.cer
root@paardenpad:/etc/ssl/cert# chown root:root bundle.crt
root@paardenpad:/etc/ssl/cert# vim /etc/apache2/sites-enabled/paardendpad-ssl.conf

zie https://www.namecheap.com/support/knowledgebase/article.aspx/9423//installing-a-ssl-certificate-on-apache

* change content of paardenpad-ssl.conf

root@paardenpad:/etc/apache2/sites-available# vim paardendpad-ssl.conf

* change lines about certificates:

SSLCertificateFile /etc/ssl/cert/paardenpad_rijkenmiel_nl.cer
SSLCertificateKeyFile /etc/ssl/cert/paardenpad_rijkenmiel_nl.key

SSLCertificateChainFile /etc/ssl/cert/CA_Intermediate.cer

SSLCACertificateFile /etc/ssl/cert/CA_Root.cer

2018:
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl/* .
root@paardenpad:/etc/ssl/cert# chown root:root *
root@paardenpad:/etc/ssl/cert# ls -l
total 60
-rw-rw-r-- 1 root root 1546 Oct 28 15:04 AddTrustExternalCARoot.crt
-rw-rw-r-- 1 root root 5716 Nov 3 2017 bundle.crt
-rw-r--r-- 1 root root 1984 Oct 26 2017 CA_Intermediate.cer
-rw-r--r-- 1 root root 1546 Oct 26 2017 CA_Root.cer
-rw-rw-r-- 1 root root 1984 Oct 28 15:04 COMODORSAAddTrustCA.crt
-rw-rw-r-- 1 root root 2186 Oct 28 15:04 COMODORSADomainValidationSecureServerCA.crt
-rw-r--r-- 1 root root 5631 Oct 3 2016 ejabberd.pem
-rw-rw-r-- 1 root root 2296 Oct 28 15:04 paardenpad_rijkenmiel_nl.cer
-rw-r--r-- 1 root root 1013 Oct 27 12:24 paardenpad_rijkenmiel_nl.csr
-rw-r--r-- 1 root root 1704 Oct 27 12:23 paardenpad_rijkenmiel_nl.key
-rw-r--r-- 1 root root 3126 Nov 4 2017 paardenpad_rijkenmiel_nl.p12
-rw-r--r-- 1 root root 7420 Nov 4 2017 paardenpad_rijkenmiel_nl.pem
root@paardenpad:/etc/ssl/cert# cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> bundle.crt
root@paardenpad:/etc/ssl/cert# service apache2 restart

== NFS ==
root@ppl:~# aptitude install nfs-kernel-server nfs-common
root@ppl:~# vim /etc/exports

* Add line:
/home/rijk/Documents 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@ppl:~# /etc/init.d/nfs-kernel-server sta

== Fuse / SSHFS ==

root@paardenpad:/home/rijk# aptitude install fuse sshfs

root@paardenpad:/home/rijk# lsmod | grep fuse
fuse 98304 1

== Samba ==
root@paardenpad:~# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

root@paardenpad:~# cat /etc/samba/smb.conf
[global]
netbios name = LAPTOPSERVER
workgroup = PAARDENPAD
server string = Samba %v on (%L)
encrypt passwords = Yes
name resolve order = bcast host
local master = Yes
os level = 33
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[rijk]
path = /home/rijk/Documents
guest ok = No
comment = Rijks documents
writable = Yes
[music]
path = /media/sdcard
guest ok = No
comment = Rijks music
writable = No
#[miel]
# path = /home/miel
# guest ok = No
# comment = Miels documents
# writable = Yes
#[oosterhoff]
# path = /home/oosterhoff
# guest ok = No
# comment = Shared documents
# writable = yes

root@paardenpad:/etc/samba# smbpasswd -a miel
root@paardenpad:/etc/samba# smbpasswd -a rijk
root@paardenpad:/etc/samba# service nmbd restart
root@paardenpad:/etc/samba# service smbd restart

== Userrights and groups ==
root@paardenpad:~# addgroup oosterhoff
root@paardenpad:~# usermod -g oosterhoff rijk
root@paardenpad:~# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures

== Reduce power consumption ==
* Run powertop --html as root and view results
* Put tunables into /etc/rc.local

root@ppl:/home/rijk# cat /etc/rc.local

#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

echo 'min_power' > '/sys/class/scsi_host/host0/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host1/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host2/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host3/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host4/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host5/link_power_management_policy'
echo '0' > '/proc/sys/kernel/nmi_watchdog'
echo '1500' > '/proc/sys/vm/dirty_writeback_centisecs'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:02.3/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:02.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1e.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1d.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1c.2/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1c.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:19.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:16.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:02.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:00.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:02.1/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:02.2/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:00.1/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:00.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:02:00.1/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:02:00.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1f.6/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1f.2/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1a.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1f.0/power/control'
exit 0

== Debian as Rolling release ==

root@paardenpad:~# cat /etc/apt/apt.conf.d/local

APT::Default-Release "testing";

root@paardenpad:~# cat /etc/apt/sources.list

#

# deb cdrom:[Debian GNU/Linux jessie-DI-b2 _Jessie_ - Official Snapshot amd64 NETINST Binary-1 20141003-18:31]/ jessie main

#deb cdrom:[Debian GNU/Linux jessie-DI-b2 _Jessie_ - Official Snapshot amd64 NETINST Binary-1 20141003-18:31]/ jessie main

#deb http://ftp.nl.debian.org/debian/ jessie main
#deb-src http://ftp.nl.debian.org/debian/ jessie main

#deb http://security.debian.org/ jessie/updates main
#deb-src http://security.debian.org/ jessie/updates main

# jessie-updates, previously known as 'volatile'
#deb http://ftp.nl.debian.org/debian/ jessie-updates main
#deb-src http://ftp.nl.debian.org/debian/ jessie-updates main

# jessie-backports, previously on backports.debian.org
#deb http://ftp.nl.debian.org/debian/ jessie-backports main
#deb-src http://ftp.nl.debian.org/debian/ jessie-backports main

# Debian as rolling release according to http://www.javieriparraguirre.net/debian-testing-rolling/
deb http://ftp.de.debian.org/debian/ testing main non-free contrib
deb-src http://ftp.de.debian.org/debian/ testing main non-free contrib
deb http://ftp.de.debian.org/debian/ unstable main non-free contrib
deb-src http://ftp.de.debian.org/debian/ unstable main non-free contrib
deb http://ftp.de.debian.org/debian/ experimental main non-free contrib
deb-src http://ftp.de.debian.org/debian/ experimental main non-free contrib
deb http://security.debian.org/ testing/updates main
deb-src http://security.debian.org/ testing/updates main

root@paardenpad:~# aptitude update
root@paardenpad:~# aptitude upgrade

Later I changed this to:

deb http://ftp.nl.debian.org/debian/ testing main
deb-src http://ftp.nl.debian.org/debian/ testing main

deb http://security.debian.org/ testing/updates main
deb-src http://security.debian.org/ testing/updates main

# jessie-updates, previously known as 'volatile'
deb http://ftp.nl.debian.org/debian/ testing-updates main
deb-src http://ftp.nl.debian.org/debian/ testing-updates main

# jessie-backports, previously on backports.debian.org
deb http://ftp.nl.debian.org/debian/ jessie-backports main
deb-src http://ftp.nl.debian.org/debian/ jessie-backports main

Even later, I changed this back to:

deb http://ftp.nl.debian.org/debian/ jessie main
deb-src http://ftp.nl.debian.org/debian/ jessie main

deb http://security.debian.org/ jessie/updates main
deb-src http://security.debian.org/ jessie/updates main

# jessie-updates, previously known as 'volatile'
deb http://ftp.nl.debian.org/debian/ jessie-updates main
deb-src http://ftp.nl.debian.org/debian/ jessie-updates main

# jessie-backports, previously on backports.debian.org
deb http://ftp.nl.debian.org/debian/ jessie-backports main
deb-src http://ftp.nl.debian.org/debian/ jessie-backports main

== /etc/hosts ==
root@paardenpad:~# cat /etc/hosts

127.0.0.1 localhost
127.0.1.1 paardenpad.xs4all.nl paardenpad

# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

192.168.2.30 server

== /etc/fstab ==
root@paardenpad:~# cat /etc/fstab

# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/mapper/paardenpad-root / ext4 errors=remount-ro 0 1
/dev/mapper/paardenpad-rijk /home/rijk ext4 defaults 0 2
/dev/mapper/paardenpad-miel /var/spool/burp/miels_laptop ext4 defaults 0 2
/dev/mapper/paardenpad-var /var ext4 defaults 0 2
/dev/mapper/paardenpad-virtual_machines /var/lib/libvirt/images ext4 defaults 0 2

/dev/mapper/paardenpad-swap none swap sw 0 0

/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
/dev/mmcblk0p1 /media/sdcard vfat discard,noatime,errors=remount-ro,gid=1000,uid=1000 0 2

== /etc/crontab ==
root@paardenpad:~# cat /etc/crontab

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.

SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#

*/15 * * * * root php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5 * * * * root /root/scripts/takePicture >/dev/null 2>&1
0 * * * * root /root/scripts/wakeOpenShift >/dev/null 2>&1

0 2 * * * rijk mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5 2 * * * rijk mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10 2 * * * rijk mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
14 2 * * * rijk mysqldump --lock-tables -u alcoholusage --password='peegee0uoSah' alcoholusage > /home/rijk/Documents/Backups/au.sql
20 2 * * * root /root/scripts/setUserRights
0 4 * * * root /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0 6 * * * splunk /opt/splunk/bin/splunk start
0 7 * * * splunk /opt/splunk/bin/splunk stop

0 17 * * 0 root /root/scripts/startServer
0 18 * * 0 rijk rsync -aze --delete /home/rijk/Documents/* -e ssh server:/home/rijk/Documents

== /etc/exports ==
root@paardenpad:~# cat /etc/exports
# /etc/exports: the access control list for filesystems which may be exported
# to NFS clients. See exports(5).
#
# Example for NFSv2 and NFSv3:
# /srv/homes hostname1(rw,sync,no_subtree_check) hostname2(ro,sync,no_subtree_check)
#
# Example for NFSv4:
# /srv/nfs4 gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
# /srv/nfs4/homes gss/krb5i(rw,sync,no_subtree_check)
#

/home/rijk/Documents 192.168.2.36(crossmnt,rw,no_root_squash,sync,no_subtree_check) 192.168.2.50(crossmnt,rw,no_root_squash,sync,no_subtree_check)
/media/sdcard 192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

ProBook 6550b - Revision history

Rijk: 1 revision imported

Rijk: /* /etc/crontab */

← Older revision	Revision as of 14:34, 5 January 2025
(No difference)