ProBook 6550b

From Geitenpad
Revision as of 15:14, 11 January 2020 by Rijk (talk | contribs) (→/etc/crontab)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Boot every day from BIOS

  • Set wake-up time at 7:30, every day (System Configuration -> BIOS Power-On -> Set Alarm Time)

Wake on lan

  • Enable wake on lan (System Configuration -> Built-In Device Options -> Wake on Lan -> Follow Boot Order)

Create bootable USB

Install base system

  • Boot live cd and do partitioning, Debian installer hangs at partitioning
  • Boot from Debian USB and install base system only
  • Later i used LVM, setup lvm externally on my laptop and used this partition scheme

LVM

https://www.howtoforge.com/linux_lvm 

1001  27-11-2018 18:40:03 fdisk -l
1002  27-11-2018 18:40:59 pvdisplay
1003  27-11-2018 18:41:35 vgscan
1004  27-11-2018 18:41:47 vgdisplay
1005  27-11-2018 18:42:49 lvdisplay
1006  27-11-2018 18:45:04 lvcreate --name virtual_machines
1007  27-11-2018 18:46:07 lvcreate --name virtual_machines1 --size 50G paardenpad
1008  27-11-2018 18:46:11 lvdisplay
1009  27-11-2018 18:46:37 lvscan
1010  27-11-2018 18:47:42 lvrename paardenpad virtual_machines1 virtual_machines
1011  27-11-2018 18:47:45 lvscan
1012  27-11-2018 18:48:49 mkfs.ext4 /dev/paardenpad/virtual_machines
1013  27-11-2018 19:17:53 df -h

Mount via /etc/fstab 

root@paardenpad:~# mount -a
root@paardenpad:~# df -h
Filesystem                               Size  Used Avail Use% Mounted on
udev                                     1.9G     0  1.9G   0% /dev
tmpfs                                    375M   39M  337M  11% /run
/dev/mapper/paardenpad-root               30G  8.3G   20G  30% /
tmpfs                                    1.9G  8.0K  1.9G   1% /dev/shm
tmpfs                                    5.0M     0  5.0M   0% /run/lock
tmpfs                                    1.9G     0  1.9G   0% /sys/fs/cgroup
/dev/mmcblk0p1                            30G   15G   15G  52% /media/sdcard
/dev/mapper/paardenpad-var                49G  8.7G   38G  19% /var
/dev/mapper/paardenpad-rijk              147G   64G   76G  46% /home/rijk
/dev/mapper/paardenpad-miel               49G   22G   25G  48% /var/spool/burp/miels_laptop
tmpfs                                    375M     0  375M   0% /run/user/1000
/dev/mapper/paardenpad-virtual_machines   49G   53M   47G   1% /var/lib/libvirt/images

Change hostname

root@paardenpad:/home/rijk# vim /etc/hostname
root@paardenpad:/home/rijk# vim /etc/hosts
  • Change both values to paardenpad.rijkenmiel.nl

Install utilities

root@ppl:~# apt-get install vim
root@ppl:~# apt-get install aptitude
root@ppl:~# aptitude install screen
root@ppl:~# aptitude install htop
root@ppl:~# aptitude install tree
root@ppl:~# aptitude install curl
root@ppl:~# aptitude install mlocate
root@ppl:~# aptitude install unzip

Prevent hibernate on lid close

root@ppl:~# vim /etc/systemd/logind.conf
  • Add line
HandleLidSwitch=ignore

Install ssh server

root@ppl:~# aptitude install openssh-server
root@ppl:~# vim /etc/ssh/sshd_config
  • Change PermitRootLogin
PermitRootLogin without-password -> PermitRootLogin no

root@ppl:~# service sshd restart

Push key to .ssh/authorized_keys

rijk@ppl:~/.ssh$ cat authorized_keys 

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxYiIBDAFN1MGWMjlhSy4kRviofAah/C8fK03y+9Anze8QpeKeIneQgJZAJnf02ZJSff61gL6MEIkb4NPyk
XnlAGWYH+2MCLpaY2sCz4sRAeGRYj4T1XYDE5T6oUbY9h0fAzMpsmxcl1ihK0mEIyg2qgjW0lb4zaiw1hLyPoUyRIgPWdt07CTuOdHXXfHCDReTFoO1MHoMmW8t
kCTx20BREEcSl2geyAFilnQGvN4UPTW13bnYHLE+9OFnZhf4Mj9U6ZkwOVfVaw2y5hpYSnhWy57GbVOD3lq4Ksjhc/48bssnVUbZNq6M79+y8CFgbaQLy0+DUwe
6676uoTFl2mZ rijk@rijksUreich
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPq5GIrmXSB/x0UBWzD73pFJXH7onvFQA2LCHEmkxIO7NEiWNWyJjI/bC8++XkJnAwhzK8JE+9HJGs7i5Xg
3XE7FjfRiAOwNVHCvKr/BHnFAI4hBVyc0Wwn1xZPpZUyLUA+LMHMzHRCVaVW6agHRFL7BNJHigDWL1pAM1L/zWRYBy4h55fQLFLLjMUml7dj2o4vNr1TH65Kz
c4WJF2337y0CMQacDDvPuURAr/2FU/rcEgd8NBQCLh0EQLedOk9yrHBGUkyEPEBggQZw0QmGHsogkAuSseoh1NCYsq+FxJLOP+MbBCA6ljb5LvCXuUEfea+0v
OWt+bCnbq2Z1xuFDT rijk@paardenpad

Longer history with time

  • Add folowing to .bashrc:
HISTSIZE=2500
HISTTIMEFORMAT="%d-%m-%Y %H:%M:%S "

Colored prompt

  • Change to .bashrc to .bashrc from suse:
# ~/.bashrc: executed by bash(1) for non-login shells.
# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
# for examples 

# If not running interactively, don't do anything
case $- in
   *i*) ;;
     *) return;;
esac

# don't put duplicate lines or lines starting with space in the history.
# See bash(1) for more options
HISTCONTROL=ignoreboth

# append to the history file, don't overwrite it
shopt -s histappend

# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
HISTSIZE=1000
HISTFILESIZE=2000

# check the window size after each command and, if necessary,
# update the values of LINES and COLUMNS.
shopt -s checkwinsize

# If set, the pattern "**" used in a pathname expansion context will
# match all files and zero or more directories and subdirectories.
#shopt -s globstar

# make less more friendly for non-text input files, see lesspipe(1)
#[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"

# set variable identifying the chroot you work in (used in the prompt below)
if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
    debian_chroot=$(cat /etc/debian_chroot)
fi

# set a fancy prompt (non-color, unless we know we "want" color)
case "$TERM" in
   xterm-color) color_prompt=yes;;
esac

# uncomment for a colored prompt, if the terminal has the capability; turned
# off by default to not distract the user: the focus in a terminal window
# should be on the output of commands, not on the prompt
#force_color_prompt=yes

if [ -n "$force_color_prompt" ]; then
   if [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then
	# We have color support; assume it's compliant with Ecma-48
	# (ISO/IEC-6429). (Lack of such support is extremely rare, and such
	# a case would tend to support setf rather than setaf.)
	color_prompt=yes
    else
	color_prompt=
   fi
fi

if [ "$color_prompt" = yes ]; then
   PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
else
   PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
fi
unset color_prompt force_color_prompt

# If this is an xterm set the title to user@host:dir
case "$TERM" in
xterm*|rxvt*)
   PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1"
   ;;
*)
   ;;
esac

# enable color support of ls and also add handy aliases
if [ -x /usr/bin/dircolors ]; then
   test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
   alias ls='ls --color=auto'
   #alias dir='dir --color=auto'
   #alias vdir='vdir --color=auto'

   #alias grep='grep --color=auto'
   #alias fgrep='fgrep --color=auto'
   #alias egrep='egrep --color=auto'
fi

# colored GCC warnings and errors
#export GCC_COLORS='error=01;31:warning=01;35:note=01;36:caret=01;32:locus=01:quote=01'

# some more ls aliases
#alias ll='ls -l'
#alias la='ls -A'
#alias l='ls -CF'

# Alias definitions.
# You may want to put all your additions into a separate file like
# ~/.bash_aliases, instead of adding them here directly.
# See /usr/share/doc/bash-doc/examples in the bash-doc package.

if [ -f ~/.bash_aliases ]; then
    . ~/.bash_aliases
fi

# enable programmable completion features (you don't need to enable
# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
# sources /etc/bash.bashrc).
if ! shopt -oq posix; then
  if [ -f /usr/share/bash-completion/bash_completion ]; then
   . /usr/share/bash-completion/bash_completion
 elif [ -f /etc/bash_completion ]; then
   . /etc/bash_completion
 fi
fi

PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
  • Set colors in .bashrc
Root: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
User: PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
  • For user add file .bash_profile:
rijk@paardenpad:~$ cat .bash_profile 
# include .bashrc if it exists
if [ -f ~/.bashrc ]; then
   . ~/.bashrc
fi
  • Log off and on for changes to take effect

Add following line to .bashrc 

hostname|figlet -f small

Syntax on in vim

root@ppl:/var/log/apache2# vim /root/.vimrc
  • Add line
syntax on

NTP

root@ppl:~# aptitude install ntp

Install MySQL

root@ppl:/home/rijk/.ssh# aptitude install mysql-server mysql-client
  • Configure some options, change options to:
root@ppl:/etc/mysql# vim my.cnf 

thread_concurrency     = 8
query_cache_limit       = 1M
query_cache_size        = 64M

root@ppl:/etc/mysql# service mysql restart

Replace MariaDB with MySQL

root@paardenpad:~# aptitude install mariadb-server mariadb-client

During upgrade of mysql or phpmyadmin you can remove your password temporarily: 

mysql -u root -p
set password = password(' '); (without the space)

After upgrade reset it to original one using above command.

Allow remote access to MySQL

Comment all lines with bind_address = 127.0.0.1 in several files in /etc/mysql. Find them with grep -r. Then reboot!

Install Apache

root@ppl:~# aptitude install apache2
root@ppl:~# a2enmod userdir
root@ppl:~# vim /etc/apache2/mods-enabled/userdir.conf

<IfModule mod_userdir.c>
       UserDir public_html
       UserDir disabled root

       <Directory /home/*/public_html>
               AllowOverride All
               Options MultiViews Indexes SymLinksIfOwnerMatch
               <Limit GET POST OPTIONS>
                       Require ip 192.168.2.0/24
               </Limit>
               <LimitExcept GET POST OPTIONS>
                      Require all granted
               </LimitExcept>
       </Directory>
</IfModule>

root@ppl:~# aptitude install php5 php5-mysql libapache2-mod-php5 php5-apcu

root@ppl:~# vim /etc/apache2/mods-enabled/php5.conf
  • Comment stuff about userdir
<FilesMatch ".+\.ph(p[345]?|t|tml)$">
   SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch ".+\.phps$">
   SetHandler application/x-httpd-php-source
   # Deny access to raw php sources by default
   # To re-enable it's recommended to enable access to the files
   # only in specific virtual host or directory
   Require all denied
</FilesMatch>
# Deny access to files without filename (e.g. '.php')
<FilesMatch "^\.ph(p[345]?|t|tml|ps)$">
   Require all denied
</FilesMatch>

# Running PHP scripts in user directories is disabled by default
# 
# To re-enable PHP in user directories comment the following lines
# (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it
# prevents .htaccess files from disabling it.
#<IfModule mod_userdir.c>
#    <Directory /home/*/public_html>
#        php_admin_flag engine Off
#    </Directory>
#</IfModule>

Later I installed php7: 

root@ppl:~# apt-get install libapache2-mod-php7.0
root@ppl:~# apt-get install php7.0-gd php7.0-mysql php7.0-curl
root@ppl:~# apt-get install php7.0-intl php7.0-mcrypt php-imagick
root@ppl:~# apt-get install php7.0-zip php7.0-xml php7.0-mbstring
root@ppl:~# apt-get install php-apcu (memory caching)

phpMyAdmin

root@ppl:~# aptitude install phpmyadmin
  • Limit access to local
root@ppl:/etc/apache2/conf-enabled# vim /etc/phpmyadmin/apache.conf
  • Add lines to <Directory /usr/share/phpmyadmin> and to <Directory /usr/share/phpmyadmin/setup>:
<RequireAny>
   Require ip 127.0.0.1
   Require ip 192.168.2.0/24
</RequireAny>

Later I had to revert root password to empty to enable autoconfiguration.

Configure https

root@ppl:/etc/ssl# mkdir localcerts
root@ppl:/etc/ssl/localcerts# openssl genrsa -des3 -passout pass:x -out server.pass.key 2048
root@ppl:/etc/ssl/localcerts# openssl rsa -passin pass:x -in server.pass.key -out server.key
root@ppl:/etc/ssl/localcerts# rm server.pass.key

root@ppl:/etc/ssl/localcerts# openssl req -new -key server.key -out server.csr

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:NL
State or Province Name (full name) [Some-State]:Zuid-Holland
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:PaardenPad
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:paardenpad.xs4all.nl
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

root@ppl:/etc/ssl/localcerts# openssl x509 -req -days 1095 -in server.csr -signkey server.key -out server.crt

root@ppl:/etc/ssl# a2enmod ssl
root@ppl:/etc/apache2/sites-available# cp default-ssl.conf paardendpad-ssl.conf
root@ppl:/etc/apache2/sites-available# vim paardendpad-ssl.conf
  • Change lines about certificates to:
SSLCertificateFile      /etc/ssl/localcerts/server.crt
SSLCertificateKeyFile /etc/ssl/localcerts/server.key

root@ppl:/etc/apache2/sites-enabled# service apache2 restart
root@ppl:/etc/apache2/sites-enabled# ln -s ../sites-available/paardendpad-ssl.conf

Configure https with signed certificate from Versio

root@paardenpad:/etc/ssl/cert# openssl req -nodes -newkey rsa:2048 -keyout paardenpad_rijkenmiel_nl.key -out paardenpad_rijkenmiel_nl.csr

root@paardenpad:/etc/ssl/cert# openssl req -nodes -newkey rsa:2048 -keyout paardenpad_rijkenmiel_nl.key -out paardenpad_rijkenmiel_nl.csr
Generating a 2048 bit RSA private key
..........+++
............+++
writing new private key to 'paardenpad_rijkenmiel_nl.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:NL
State or Province Name (full name) [Some-State]:Zuid-Holland
Locality Name (eg, city) []:Leiden
Organization Name (eg, company) [Internet Widgits Pty Ltd]:PaardenPad
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:paardenpad.rijkenmiel.nl
Email Address []: 

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
  • Go to versio and use content of paardenpad_rijkenmiel_nl.csr to request signed certificate
  • Copy certificates to correct place:

2015: 

root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl.cer .
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/CA_Root.cer .
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/CA_Intermediate.cer .
root@paardenpad:/etc/ssl/cert# chown root:root *
root@paardenpad:/etc/ssl/cert# chmod 644 *

2016: 

root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl/paardenpad_rijkenmiel_nl.cer .
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl/TrustProviderBVDVSSLCA-G2.cer ./CA_Intermediate.cer
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl/GeoTrustGlobalCA.cer ./CA_Root.cer
root@paardenpad:/etc/ssl/cert# chown root:root *
root@paardenpad:/etc/ssl/cert# chmod 644 *

2017: 

rijk@RijksReich:~/Desktop$ cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> bundle.crt
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/bundle.crt .
root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl.cer .
root@paardenpad:/etc/ssl/cert# chown root:root paardenpad_rijkenmiel_nl.cer
root@paardenpad:/etc/ssl/cert# chown root:root bundle.crt 
root@paardenpad:/etc/ssl/cert# vim /etc/apache2/sites-enabled/paardendpad-ssl.conf

zie https://www.namecheap.com/support/knowledgebase/article.aspx/9423//installing-a-ssl-certificate-on-apache
  • change content of paardenpad-ssl.conf
root@paardenpad:/etc/apache2/sites-available# vim paardendpad-ssl.conf
  • change lines about certificates:
SSLCertificateFile      /etc/ssl/cert/paardenpad_rijkenmiel_nl.cer
SSLCertificateKeyFile /etc/ssl/cert/paardenpad_rijkenmiel_nl.key

SSLCertificateChainFile /etc/ssl/cert/CA_Intermediate.cer

SSLCACertificateFile /etc/ssl/cert/CA_Root.cer

2018: 

root@paardenpad:/etc/ssl/cert# mv /home/rijk/Documents/paardenpad_rijkenmiel_nl/* .
root@paardenpad:/etc/ssl/cert# chown root:root *
root@paardenpad:/etc/ssl/cert# ls -l
total 60
-rw-rw-r-- 1 root root 1546 Oct 28 15:04 AddTrustExternalCARoot.crt
-rw-rw-r-- 1 root root 5716 Nov  3  2017 bundle.crt
-rw-r--r-- 1 root root 1984 Oct 26  2017 CA_Intermediate.cer
-rw-r--r-- 1 root root 1546 Oct 26  2017 CA_Root.cer
-rw-rw-r-- 1 root root 1984 Oct 28 15:04 COMODORSAAddTrustCA.crt
-rw-rw-r-- 1 root root 2186 Oct 28 15:04 COMODORSADomainValidationSecureServerCA.crt
-rw-r--r-- 1 root root 5631 Oct  3  2016 ejabberd.pem
-rw-rw-r-- 1 root root 2296 Oct 28 15:04 paardenpad_rijkenmiel_nl.cer
-rw-r--r-- 1 root root 1013 Oct 27 12:24 paardenpad_rijkenmiel_nl.csr
-rw-r--r-- 1 root root 1704 Oct 27 12:23 paardenpad_rijkenmiel_nl.key
-rw-r--r-- 1 root root 3126 Nov  4  2017 paardenpad_rijkenmiel_nl.p12
-rw-r--r-- 1 root root 7420 Nov  4  2017 paardenpad_rijkenmiel_nl.pem
root@paardenpad:/etc/ssl/cert# cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> bundle.crt
root@paardenpad:/etc/ssl/cert# service apache2 restart

NFS

root@ppl:~# aptitude install nfs-kernel-server nfs-common
root@ppl:~# vim /etc/exports
  • Add line:
/home/rijk/Documents	192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)

root@ppl:~# /etc/init.d/nfs-kernel-server sta

Fuse / SSHFS

root@paardenpad:/home/rijk# aptitude install fuse sshfs

root@paardenpad:/home/rijk# lsmod | grep fuse
fuse                   98304  1

Samba

root@paardenpad:~# aptitude install samba
root@paardenpad:/etc/samba# mv smb.conf smb.conf.org

root@paardenpad:/etc/samba# vim smb.conf

root@paardenpad:~# cat /etc/samba/smb.conf
[global]
       netbios name = LAPTOPSERVER
       workgroup = PAARDENPAD
       server string = Samba %v on (%L)
       encrypt passwords = Yes
       name resolve order = bcast host
       local master = Yes
       os level = 33
       load printers = no
       printing = bsd
       printcap name = /dev/null
       disable spoolss = yes
[rijk]
      path = /home/rijk/Documents
      guest ok = No
      comment = Rijks documents
      writable = Yes
[music]
      path = /media/sdcard
      guest ok = No
      comment = Rijks music
      writable = No
#[miel]
#        path = /home/miel
#        guest ok = No
#        comment = Miels documents
#        writable = Yes
#[oosterhoff]
#        path = /home/oosterhoff
#        guest ok = No
#        comment = Shared documents
#        writable = yes

root@paardenpad:/etc/samba# smbpasswd -a miel
root@paardenpad:/etc/samba# smbpasswd -a rijk
root@paardenpad:/etc/samba# service nmbd restart
root@paardenpad:/etc/samba# service smbd restart

Userrights and groups

root@paardenpad:~# addgroup oosterhoff
root@paardenpad:~# usermod -g oosterhoff rijk
root@paardenpad:~# usermod -g oosterhoff miel

root@paardenpad:~/scripts# vim setUserRights

#!/bin/bash
chown -R rijk:oosterhoff /home/rijk
chmod -R 755 /home/rijk/*
chmod -R 775 /home/rijk/Documents/Pictures

Reduce power consumption

  • Run powertop --html as root and view results
  • Put tunables into /etc/rc.local
root@ppl:/home/rijk# cat /etc/rc.local 

#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

echo 'min_power' > '/sys/class/scsi_host/host0/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host1/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host2/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host3/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host4/link_power_management_policy'
echo 'min_power' > '/sys/class/scsi_host/host5/link_power_management_policy'
echo '0' > '/proc/sys/kernel/nmi_watchdog'
echo '1500' > '/proc/sys/vm/dirty_writeback_centisecs'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:02.3/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:02.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1e.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1d.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1c.2/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1c.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:19.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:16.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:02.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:00.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:02.1/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:02.2/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:00.1/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:ff:00.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:02:00.1/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:02:00.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1f.6/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1f.2/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1a.0/power/control'
echo 'auto' > '/sys/bus/pci/devices/0000:00:1f.0/power/control'
exit 0

Debian as Rolling release

root@paardenpad:~# cat /etc/apt/apt.conf.d/local

APT::Default-Release "testing";

root@paardenpad:~# cat /etc/apt/sources.list

# 

# deb cdrom:[Debian GNU/Linux jessie-DI-b2 _Jessie_ - Official Snapshot amd64 NETINST Binary-1 20141003-18:31]/ jessie main

#deb cdrom:[Debian GNU/Linux jessie-DI-b2 _Jessie_ - Official Snapshot amd64 NETINST Binary-1 20141003-18:31]/ jessie main 

#deb http://ftp.nl.debian.org/debian/ jessie main
#deb-src http://ftp.nl.debian.org/debian/ jessie main

#deb http://security.debian.org/ jessie/updates main
#deb-src http://security.debian.org/ jessie/updates main

# jessie-updates, previously known as 'volatile'
#deb http://ftp.nl.debian.org/debian/ jessie-updates main
#deb-src http://ftp.nl.debian.org/debian/ jessie-updates main

# jessie-backports, previously on backports.debian.org
#deb http://ftp.nl.debian.org/debian/ jessie-backports main
#deb-src http://ftp.nl.debian.org/debian/ jessie-backports main

# Debian as rolling release according to http://www.javieriparraguirre.net/debian-testing-rolling/
deb http://ftp.de.debian.org/debian/ testing main non-free contrib
deb-src http://ftp.de.debian.org/debian/ testing main non-free contrib
deb http://ftp.de.debian.org/debian/ unstable main non-free contrib
deb-src http://ftp.de.debian.org/debian/ unstable main non-free contrib
deb http://ftp.de.debian.org/debian/ experimental main non-free contrib
deb-src http://ftp.de.debian.org/debian/ experimental main non-free contrib
deb http://security.debian.org/ testing/updates main
deb-src http://security.debian.org/ testing/updates main

root@paardenpad:~# aptitude update
root@paardenpad:~# aptitude upgrade

Later I changed this to: 

deb http://ftp.nl.debian.org/debian/ testing main
deb-src http://ftp.nl.debian.org/debian/ testing main

deb http://security.debian.org/ testing/updates main
deb-src http://security.debian.org/ testing/updates main

# jessie-updates, previously known as 'volatile'
deb http://ftp.nl.debian.org/debian/ testing-updates main
deb-src http://ftp.nl.debian.org/debian/ testing-updates main

# jessie-backports, previously on backports.debian.org
deb http://ftp.nl.debian.org/debian/ jessie-backports main
deb-src http://ftp.nl.debian.org/debian/ jessie-backports main

Even later, I changed this back to: 

deb http://ftp.nl.debian.org/debian/ jessie main
deb-src http://ftp.nl.debian.org/debian/ jessie main

deb http://security.debian.org/ jessie/updates main
deb-src http://security.debian.org/ jessie/updates main

# jessie-updates, previously known as 'volatile'
deb http://ftp.nl.debian.org/debian/ jessie-updates main
deb-src http://ftp.nl.debian.org/debian/ jessie-updates main

# jessie-backports, previously on backports.debian.org
deb http://ftp.nl.debian.org/debian/ jessie-backports main
deb-src http://ftp.nl.debian.org/debian/ jessie-backports main

/etc/hosts

root@paardenpad:~# cat /etc/hosts

127.0.0.1	localhost
127.0.1.1	paardenpad.xs4all.nl	paardenpad

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

192.168.2.30 server

/etc/fstab

root@paardenpad:~# cat /etc/fstab 

# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system>                          <mount point>               <type> <options>      <dump>  <pass>
/dev/mapper/paardenpad-root              /                            ext4  errors=remount-ro 0       1
/dev/mapper/paardenpad-rijk              /home/rijk                   ext4  defaults          0       2
/dev/mapper/paardenpad-miel              /var/spool/burp/miels_laptop ext4  defaults          0       2
/dev/mapper/paardenpad-var               /var                         ext4  defaults          0       2
/dev/mapper/paardenpad-virtual_machines  /var/lib/libvirt/images      ext4  defaults          0       2

/dev/mapper/paardenpad-swap none            swap    sw              0       0

/dev/sr0        /media/cdrom0   udf,iso9660 user,noauto     0       0
/dev/mmcblk0p1 /media/sdcard   vfat    discard,noatime,errors=remount-ro,gid=1000,uid=1000       0       2

/etc/crontab

root@paardenpad:~# cat /etc/crontab 

# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.

SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# m   h  dom mon dow user    command
17    *  *   *   *   root    cd / && run-parts --report /etc/cron.hourly
25    6  *   *   *   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47    6  *   *   7   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52    6  1   *   *   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
# 
 
*/15  *  *   *   *   root    php -f /var/www/owncloud/cron.php >/dev/null 2>&1
*/5   *  *   *   *   root    /root/scripts/takePicture >/dev/null 2>&1
0     *  *   *   *   root    /root/scripts/wakeOpenShift >/dev/null 2>&1

0     2  *   *   *   rijk    mysqldump --lock-tables -u owncloud --password='owndropagua' owncloud > /home/rijk/Documents/Backups/oc.sql
5     2  *   *   *   rijk    mysqldump --lock-tables -u rainloop --password='mdswawdez$%' rainloop > /home/rijk/Documents/Backups/rl.sql
10    2  *   *   *   rijk    mysqldump --lock-tables -u mediawiki --password='twiamfhhh' mediawiki > /home/rijk/Documents/Backups/mw.sql
14    2  *   *   *   rijk    mysqldump --lock-tables -u alcoholusage --password='peegee0uoSah' alcoholusage > /home/rijk/Documents/Backups/au.sql
20    2  *   *   *   root    /root/scripts/setUserRights
0     4  *   *   *   root    /root/scripts/preCacheSFPG.py >> /var/log/preCacheSFPG.log
0     6  *   *   *   splunk  /opt/splunk/bin/splunk start
0     7  *   *   *   splunk  /opt/splunk/bin/splunk stop

0     17 *   *   0   root    /root/scripts/startServer
0     18 *   *   0   rijk    rsync -aze --delete /home/rijk/Documents/* -e ssh server:/home/rijk/Documents

/etc/exports

root@paardenpad:~# cat /etc/exports 
# /etc/exports: the access control list for filesystems which may be exported
#		to NFS clients.  See exports(5).
#
# Example for NFSv2 and NFSv3:
# /srv/homes       hostname1(rw,sync,no_subtree_check) hostname2(ro,sync,no_subtree_check)
#
# Example for NFSv4:
# /srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
# /srv/nfs4/homes  gss/krb5i(rw,sync,no_subtree_check)
#

/home/rijk/Documents    192.168.2.36(crossmnt,rw,no_root_squash,sync,no_subtree_check) 192.168.2.50(crossmnt,rw,no_root_squash,sync,no_subtree_check)
/media/sdcard           192.168.2.0/24(crossmnt,rw,no_root_squash,sync,no_subtree_check)
Retrieved from "https://mediawiki.geitenpad.rijkenmiel.nl/index.php?title=ProBook_6550b&oldid=104"