1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
Profiles:
* Fix make xfce4-session.xml tweak idempotent
* Tweak XScreenSaver to enable only unicode-screensaver by default,
and append "-background black -foreground white"
* capture and declare preseeding values from install session w/ disk
wiping not interrupted
* Create new package for strong Debian branding with rebranding hooks
* what about addressbooks?
* Include gpa?
* Fix force-remove calendar-timezones when upgrading iceowl-extension.
Thanks to Erik Josefsson.
* Maybe add aptitude snippet inspired by
<https://lists.debian.org/543FF3BD.1020609@zen.co.uk>
* Maybe add automx to groupware profile.
Profiles, for Jessie and newer:
* Check against debian-security-support
Deployment:
* test that auto-updating security fixes actually works
* simple mailinglist subscription
* Document maintenance (passwords change, crypto key revocation, etc.)
* Document simple backup routines (using e.g. 2GB USB stick)
* Document host rename (and LVM volume too, if safe when encrypted)
* Document use of certificate-based wifi authentication
* Document workaround to ugly hostname:
* When standing on menu option "auto" hit TAB (not ENTER), delete
"priority=critical", and hit ENTER.
Deployment, for Lenovo Edge E145:
* Use unofficial firmware installer (to simplify post-install tuning)
* Document laptop preparation for smoothest possible user install:
* Disable secure boot
* use only legacy BIOS mode (avoid UEFI)
* enable usb boot support
* disable Wake On LAN
* disable LAN Option ROM
* Exclude any boot devices but internal disk and USB HDD
* Delete any existing UEFI boot devices
* boot from usb (via F12), install past disk erasure, switch off
* Document post-install tuning:
* sudo aptitude install firmware-linux firmware-realtek broadcom-sta-dkms
* Test (i.e. compare thoroughly differences with) alternate install:
* install base system (not automated)...
+ hit enter on root passwords (to switch to sudo-based admin)
+ provide manual mirror: deb.debian.org
+ enable popcon
+ deselect all tasks
* manually download, verify, and execute script.sh:
wget http://parl.debian.net/desktop/script.sh
wget http://parl.debian.net/SHA512SUMS
wget http://parl.debian.net/SHA512SUMS.sig
aptitude install debian-keyring
gpgv --keyring /usr/share/keyrings/debian-keyring.gpg SHA512SUMS.sig
ln -s . desktop
sha512sum -c SHA512SUMS desktop/script.sh
sudo sh script.sh
Bugs (report to Debian and track here until fixed in stable):
* Lots of core packages should be apt-mark'ed as auto-installed
* root shell should use skel files (with "dmesg n" added?)
* documented use of TAB at install screen unusable with UEFI
* documented use of "d-i partman-auto/method string crypto" is ignored
(or maybe just needs _all_ vars included, from uninterrupted wipe)
* task-xfce-desktop should recommend xfce4-session (not xfce4)
- or xfce4 should only recommend (not depend on) packages like orage
|
