Debian 11 “bullseye” 安装笔记

$ uname -a
Linux debian 5.10.0-8-amd64 #1 SMP Debian 5.10.46-4 (2021-08-03) x86_64 GNU/Linux

$ id sa
uid=1000(sa) gid=1000(sa) groups=1000(sa),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),109(netdev)

apt install sudo

usermod -a -G sudo sa
# -a=append，不改变原有附加组

#
# This file MUST be edited with the 'visudo' command as root.
#
# Please consider adding local content in /etc/sudoers.d/ instead of
# directly modifying this file.
#
# See the man page for details on how to write a sudoers file.
#
Defaults        env_reset
Defaults        mail_badpass
Defaults        secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root    ALL=(ALL:ALL) ALL

# Allow members of group sudo to execute any command
%sudo   ALL=(ALL:ALL) ALL

# See sudoers(5) for more information on "@include" directives:

@includedir /etc/sudoers.d

useradd -m -s /bin/bash -G sudo user1  #user1 为用户名
passwd user1  #为 user1 设置密码

E319: Sorry, the command is not available in this version: syntax on

sudo apt install vim

sudo passwd root

sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak
sudo vi /etc/ssh/sshd_config

# Authentication:

#LoginGraceTime 2m
#PermitRootLogin prohibit-password
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10

#PubkeyAuthentication yes

# Expect .ssh/authorized_keys2 to be disregarded by default in future.
#AuthorizedKeysFile     .ssh/authorized_keys .ssh/authorized_keys2

#PermitRootLogin prohibit-password
# 增加一句
PermitRootLogin yes

PermitRootLogin prohibit-password  #允许 root 登录，但禁止使用密码认证
可以配合使用 Pubkey 认证，默认 `PubkeyAuthentication yes`

sudo sed -i.bak "/^#PermitRootLogin/c"PermitRootLogin""yes"" /etc/ssh/sshd_config
# 或者
sudo sed -i.bak '/^#PermitRootLogin/c\PermitRootLogin yes' /etc/ssh/sshd_config

sudo systemctl restart ssh

# 编辑 grub 配置文件
sudo vi /etc/default/grub
修改 GRUB_CMDLINE_LINUX=""为 GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0"

# 直接使用 sed 编辑
sudo sed -i "/^GRUB_CMDLINE_LINUX=""/c GRUB_CMDLINE_LINUX=\"net.ifnames=0 biosdevname=0\"" /etc/default/grub
# 更新 grub 配置文件
sudo update-grub
# 然后下一节编辑配置文件并重启生效
sudo vi /etc/network/interfaces
# 将 ensxxx 修改为 eth0
# 重启系统生效
reboot

ip address
# 简写 ip a
# 或者使用 ifconfig
ifconfig

$ cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug ens33  #ens33 修改为 eth0
iface ens33 inet dhcp  #ens33 修改为 eth0

sudo vi /etc/network/interfaces
# 修改为以下内容：
iface lo inet loopback
auto lo

auto eth0
iface eth0 inet static
address 10.10.1.5
netmask 255.255.255.0
#broadcast 10.10.1.255 #可选，上述配置了掩码
#network 10.10.1.0 #可选，上述配置了掩码
gateway 10.10.1.1
#dns-domain example.com
# domain 和 search 不能共存；如果同时存在，后面出现的将会被使用。
dns-search sysin.org
dns-nameservers 10.10.1.1 8.8.8.8 #注意 debian 11 默认没有安装 resolvconf，所以需要手动在 resolv.conf 中编辑 DNS
# 或者安装 resolvconf 后，在这里配置，将自动更新 resolv.conf
sudo apt install resolvconf
# iface eth0 inet6 auto #ipv6 自动配置，不写则表示禁用了

# DHCP 配置如下：
auto eth0
iface eth0 inet dhcp

# 配置 DNS
cat /etc/resolv.conf #如果已经安装 resolvconf，不要手动编辑，直接在上述 interfaces 中编辑 dns

# 重启网络
sudo systemctl restart networking
#sudo service networking restart

auto eth0:0
iface eth0:0 inet static
    address 192.168.1.90
    netmask 255.255.255.0

auto eth0:1
iface eth0:1 inet static
    address 192.168.1.91
    netmask 255.255.255.0

route add -net 10.10.11.0/24 gw 10.10.1.1

#添加
cat >> /etc/network/interfaces <<EOF
# static routes
up ip route add 10.10.12.0/24 via 10.10.1.1 dev eth0
up ip route add 10.10.13.0/24 via 10.10.1.1 dev eth0
up ip route add 10.10.14.0/24 via 10.10.1.1 dev eth0
up ip route add 10.10.15.0/24 via 10.10.1.1 dev eth0
up ip route add 10.10.16.0/24 via 10.10.1.1 dev eth0
EOF

#重启网络
systemctl restart networking

#验证
ip route

hostnamectl set-hostname debian01 --static
# 修改为主机名 ubuntu01

sudo vi /etc/hostname
# 修改为主机名 debian01
debian01

sudo vi /etc/hosts
# 添加一行
127.0.0.1  debian01.sysin.org debian01
# 注意这里的格式，IP 后面先写 FQDN 再写主机名，与 CentOS 相同
# 先写 FQDN 后写主机名，顺序反了不影响解析，但是'hostname -f'命令无法显示 FQDN，只能显示主机名

hostname -f
# 正确显示如下
debian01.sysin.org

# 查看时区，有 CST 正确
date
# 设置
sudo timedatectl set-timezone Asia/Shanghai
# 或者使用向导选择
tzselect

# 模板使用 mirror.sjtu.edu.cn

# 备份
sudo cp /etc/apt/sources.list /etc/apt/sources.list.bak

# 比如将默认官方中国像源 ftp.cn.debian.org 替换为 mirror.sjtu.edu.cn
sudo sed -i 's/ftp.cn.debian.org/mirror.sjtu.edu.cn/' /etc/apt/sources.list
## 中国可选镜像站点如下（可能有所变化）
ftp.cn.debian.org
mirrors.163.com
mirrors.bfsu.edu.cn
mirrors.hit.edu.cn
mirror.sjtu.edu.cn （注意 mirror 没有 s）
mirrors.tuna.tsinghua.edu.cn
mirrors.ustc.edu.cn
# 可以 ping 站点名称，对比一下延迟来选择

sudo apt update #更新源
sudo apt upgrade #更新已安装的包
sudo apt dist-upgrade #升级系统
sudo apt clean && sudo apt autoclean #清理下载文件的存档

sudo apt install snmpd snmp

[Time]
#NTP=
#FallbackNTP=0.debian.pool.ntp.org 1.debian.pool.ntp.org 2.debian.pool.ntp.org 3.debian.pool.ntp.org
#RootDistanceMaxSec=5
#PollIntervalMinSec=32
#PollIntervalMaxSec=2048

NTP=ntp1.aliyun.com ntp2.aliyun.com

sudo apt install chrony

sudo systemctl enable chrony
sudo systemctl start chrony
sudo systemctl status chrony

# 查看配置文件，暂使用默认配置
cat /etc/chrony/chrony.conf

chronyc 有很多的子命令，可以输入 help 来查看
chronyc> help
    选项：
    sources [-v]    显示关于当前来源的信息
    sourcestats [-v]      显示时间同步状态（如时间偏移了多少之类）

chronyc sources -v
chronyc sourcestats -v

$ cat /etc/chrony/chrony.conf
# Welcome to the chrony configuration file. See chrony.conf(5) for more
# information about usable directives.

# Include configuration files found in /etc/chrony/conf.d.
confdir /etc/chrony/conf.d

# Use Debian vendor zone.
pool 2.debian.pool.ntp.org iburst

pool ntp.ubuntu.com        iburst maxsources 4
pool 0.ubuntu.pool.ntp.org iburst maxsources 1
pool 1.ubuntu.pool.ntp.org iburst maxsources 1
pool 2.ubuntu.pool.ntp.org iburst maxsources 2

# 查看版本
vmtoolsd -v
VMware Tools daemon, version 11.2.5.26209 (build-17337674)
# 查看运行状态
systemctl status vmtoolsd

apt install open-vm-tools

sudo apt -y install zip unzip
sudo apt -y install lrzsz
sudo apt -y install htop #已经收录
sudo apt -y install lnav
sudo apt -y install fd-find #fd 命令，已经收录，命令为 fdfind
sudo ln -s /usr/bin/fdfind /usr/local/bin/fd
sudo apt -y install ripgrep #rg 命令，已经收录
sudo apt -y install tree
#sudo apt -y install net-tools #ifconfig、netstat、route 等命令集，默认安装
#sudo apt -y install ntp ntpdate ntpstat #可选，模板仅安装 ntpdate
sudo apt -y install ntpdate
# 注意 debian 11 默认没有安装 resolvconf，所以需要手动在 resolv.conf 中编辑 DNS
# 或者安装 resolvconf 后，在这里配置，将自动更新 resolv.conf
sudo apt -y install resolvconf
# nc lsof 系统自带
# pstree
sudo apt -y install psmisc
# ncdu：NCurses Disk Usage
sudo apt -y install ncdu
# dstat 监控 CPU、磁盘和网络使用率
sudo apt -y install dstat
# 终端复用器
sudo apt -y install screen
sudo apt -y install tmux
# exa：ls 增强
sudo apt -y install exa
# duf 未收录
# procs 未收录
sudo apt -y install git
sudo apt -y install build-essential #Following command will install essential commands like gcc, make etc.

echo 'set completion-ignore-case on' >> ~/.inputrc

echo 'alias ll="ls -lahF --color=auto --time-style=long-iso"' >> ~/.bashrc

echo 'alias ll="ls -lahF --color=auto --time-style=long-iso"' >> ~/.zshrc

ls -lahF --color=auto --time-style=long-iso | awk '{k=0;s=0;for(i=0;i<=8;i++){k+=((substr($1,i+2,1)~/[rwxst]/)*2^(8-i))}j=4;for(i=4;i<=10;i+=3){s+=((substr($1,i,1)~/[stST]/)*j);j/=2}if(k){printf("%0o%0o ",s,k)}print}'

# 如果非 root 用户，请先切换到 root
sudo -i
cat > /usr/local/bin/lll <<EOF
#!/bin/bash
ls -lahF --color=auto --time-style=long-iso | awk '{k=0;s=0;for(i=0;i<=8;i++){k+=((substr(\$1,i+2,1)~/[rwxst]/)*2^(8-i))}j=4;for(i=4;i<=10;i+=3){s+=((substr(\$1,i,1)~/[stST]/)*j);j/=2}if(k){printf("%0o%0o ",s,k)}print}'
EOF
# 如果非 root 用户，无需切换 root 执行如下命令：
sudo sh -c "cat > /usr/local/bin/lll" <<EOF
#!/bin/bash
ls -lahF --color=auto --time-style=long-iso | awk '{k=0;s=0;for(i=0;i<=8;i++){k+=((substr(\$1,i+2,1)~/[rwxst]/)*2^(8-i))}j=4;for(i=4;i<=10;i+=3){s+=((substr(\$1,i,1)~/[stST]/)*j);j/=2}if(k){printf("%0o%0o ",s,k)}print}'
EOF
# 赋予执行权限：
chmod +x /usr/local/bin/lll

# Zsh
sudo apt install zsh

sudo chsh -s /bin/zsh
sudo apt install git

#通过 https://www.ipaddress.com 查询，美国地址有效
sudo sh -c "echo'199.232.96.133 raw.githubusercontent.com'>> /etc/hosts"

sudo sh -c "$(curl -fsSL https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"

sed -i '/^ZSH_THEME=.*/c ZSH_THEME="ys"' ~/.zshrc

echo 'alias ll="ls -lahF --color=auto --time-style=long-iso"' >> ~/.zshrc

git clone --depth=1 https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting

sed -i '/^plugins=.*/c plugins=(git zsh-syntax-highlighting)' ~/.zshrc

source  ~/.zshrc

sudo apt clean && sudo apt autoclean #清理下载文件的存档

rm -rf /tmp/*  # 清空临时文件夹

#比较完整的清空历史记录
#debian/ubuntu use auth.log
rm -f /var/log/auth.log.*
echo > /var/log/auth.log
#rm -f /var/log/audit/audit*
#echo > /var/log/audit/audit.log
rm -f /var/log/secure*
echo > /var/log/secure
rm -f /var/log/btmp*
echo > /var/log/btmp
echo > /var/log/lastlog
rm -f /var/log/wtmp*
echo > /var/log/wtmp
#以上需要 root，以下当前用户执行
echo > ~/.bash_history
echo > ~/.zsh_history
history -c

sudo apt update
# GNOME 3 and GNOME Classic desktop environment
sudo tasksel install desktop gnome-desktop
# 要安装 KDE 桌面环境将 以上命令中的 gnome-desktop 替换为 kde-desktop
# laptop tools (optional)
sudo tasksel install laptop
# start the graphical desktop environment by default on boot
sudo systemctl set-default graphical.target
# start desktop in console
startx

# apt -y install nftables
Reading package lists... Done
...
# systemctl enable nftables.service
Created symlink /etc/systemd/system/sysinit.target.wants/nftables.service → /lib/systemd/system/nftables.service.