Aim of this repo is to keep track of various Linux Debian settings files, shell scripts, and more.

Various tools are used to help reach that goal, for example the cloud-based IDE Codeanywhere with which it is possible to ssh to the server, and also the IDE Visual Studio Code for easily editing Markdown (with the Markdown All in One extension from Yu Zhang). Therefore Powershell will also be used and customized, for example for adding useful aliases and functions.

Table of Contents:

• 1. Aim of this repo
• 2. Debian
  • 2.1. Automatic security updates
  • 2.2. Automating back-up processes
  • 2.3. Automating monitoring
    • Installed packages
    • Configuration files integrity
  • 2.4. Reinstallation procedure
• 3. Other interesting Linux distributions
  • 3.1. Alpine Linux
• 4. Useful commands / Miscellaneous

The aim of the corresponding Linux Debian machine should be to try to reach and maintain a good security level, for example by:

1. automating security updates of the Linux Debian OS (eventually with e-mail reports to root)
2. automating back-up processes of the Filesystem, or at least first of the /home directory
3. automating monitoring
   • of installed packages: how many packages are installed, when have they been installed and updated last, have they already been scanned / parsed by automated security monitoring tools, are they mandatory / required for the operational purpose of the server, or are they mandatory dependency of such packages
   • of configuration files:

see: https://wiki.debian.org/UnattendedUpgrades

Getting advised about security problems:

https://lists.debian.org/debian-security-announce/

#Installing required packages
~$ apt-get install unattended-upgrades apt-listchanges

#Symlinking config files into home directory, for easier Git tracking
#and back-up
~$ mkdir etc/
~$ mkdir etc/apt/
~$ mkdir etc/apt/apt.conf.d/

#50unattended-upgrades
~$ sudo mv /etc/apt/apt.conf.d/50unattended-upgrades etc/apt/apt.conf.d/
~$ sudo ln -s ~/debian-setup/etc/apt/apt.conf.d/50unattended-upgrades /etc/apt/apt.conf.d/50unattended-upgrades

#20auto-upgrades
~$ sudo dpkg-reconfigure -plow unattended-upgrades
~$ sudo mv /etc/apt/apt.conf.d/20auto-upgrades etc/apt/apt.conf.d/
~$ sudo ln -s ~/debian-setup/etc/apt/apt.conf.d/20auto-upgrades /etc/apt/apt.conf.d/20auto-upgrades

#100update
#see check_config.sh

The private Github repository "debian-setup" will also probably be used to analyse the needs and elaborate a global back-up strategy.

A private Github repository will be used to monitor installed packages, and changes made to the installed packages, for example through automatic updates.

Could be achieved with a bash shell script. see: check_config.sh

see: https://github.com/thomashuber/debian-setup-private

https://alpinelinux.org/

"Alpine Linux is a security-oriented, lightweight Linux distribution based on musl libc and busybox."