Debian

Migrated from https://github.com/wenxin-wang/wiki/blob/master/Debian/%E5%9F%BA%E7%A1%80%E9%85%8D%E7%BD%AE.org

1. 常用软件包

sudo apt-get install -y tmux bash-completion arping
sudo apt-get install -y git ranger

2. 基础准备

# 将要使用HTTPS的源。其实后来发现有时候不需要。谁知道呢
sudo apt-get install -y apt-transport-https ca-certificates
# 不需要翻译包
echo 'Acquire::Languages "none";' | sudo tee /etc/apt/apt.conf.d/99translations

2.1. 软件源配置

2.1.1. Unstable

个人偏好。

cat /etc/apt/sources.list
# 使用TUNA unstable！
echo 'deb https://mirrors.tuna.tsinghua.edu.cn/debian/ unstable main non-free contrib' | sudo tee /etc/apt/sources.list
# 使用USTC unstable！
#echo 'deb https://mirrors.ustc.edu.cn/debian/ unstable main non-free contrib' | sudo tee /etc/apt/sources.list

2.1.2. Stable

cat <<EOF | sudo tee /etc/apt/sources.list
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ stable main non-free contrib
# deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ stable main non-free contrib

deb https://mirrors.tuna.tsinghua.edu.cn/debian-security stable-security/updates main contrib non-free
# deb-src https://mirrors.tuna.tsinghua.edu.cn/debian-security stable-security/updates main contrib non-free

# stable-updates, previously known as 'volatile'
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ stable-updates main contrib non-free
# deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ stable-updates main contrib non-free
EOF

3. 安全配置

见 Basic Security

4. 软件更新配置

sudo apt-get autoremove -y
sudo apt-get update
sudo apt-get dist-upgrade -y
sudo apt-get autoremove

4.1. 自动安装更新

sudo apt-get install -y unattended-upgrades apt-listchanges

见官方教程

下面是默认更新所有包，略危险。 如果不是unstable ，不做修改，默认只更新安全相关的包。

sudo vi /etc/apt/apt.conf.d/50unattended-upgrades

Unattended-Upgrade::Origins-Pattern {
     "n=${distro_codename}";
};
Unattended-Upgrade::Mail "root";

sudo cat /etc/apt/apt.conf.d/20auto-upgrades

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";

sudo unattended-upgrade -d

5. 时间设置

sudo ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
sudo dpkg-reconfigure -f noninteractive tzdata

## systemd似乎自带NTP
# sudo apt-get install -y ntp && sudo systemctl enable ntp && sudo systemctl start ntp