| 1 | # install Squeeze |
|---|
| 2 | # Configure each drive with a 1G partition and a rest-of-the-space partition, as RAID |
|---|
| 3 | # Create a RAID1 for the 1G partitions |
|---|
| 4 | # Create a RAID1 for each pair of rest-of-the-space partitions |
|---|
| 5 | # Create an ext3 /boot on the 1G RAID1 |
|---|
| 6 | # Create an LVM volume group named after the machine's short hostname |
|---|
| 7 | # Create an LV called "swap" that is the same size as the machine's physical RAM |
|---|
| 8 | # Create an LV called "root" that is 50G ext4 |
|---|
| 9 | |
|---|
| 10 | # download Debathena archive key, verify |
|---|
| 11 | (aptitude install debian-keyring && |
|---|
| 12 | cd /tmp && |
|---|
| 13 | wget http://debathena.mit.edu/apt/debathena-archive.asc && |
|---|
| 14 | kcr_fingerprint=$(gpg --keyring /usr/share/keyrings/debian-keyring.gpg --no-default-keyring --list-keys --with-colons kcr@debian.org | grep ^pub | cut -f 5 -d :) && |
|---|
| 15 | gpg --primary-keyring /tmp/debathena.gpg --no-default-keyring --import debathena-archive.asc && |
|---|
| 16 | gpg --primary-keyring /tmp/debathena.gpg --no-default-keyring --refresh-keys && |
|---|
| 17 | gpg --primary-keyring /tmp/debathena.gpg --no-default-keyring --keyring /usr/share/keyrings/debian-keyring.gpg --check-sigs --with-colons debathena@mit.edu | grep '^sig:!' | cut -d: -f5 | grep -q $kcr_fingerprint && |
|---|
| 18 | gpg --primary-keyring /tmp/debathena.gpg --no-default-keyring --export debathena@mit.edu | apt-key adv --import) |
|---|
| 19 | |
|---|
| 20 | # add Debathena repos to etc/apt/sources.list.d |
|---|
| 21 | cat <<EOF > /etc/apt/sources.list.d/debathena.list |
|---|
| 22 | deb http://debathena.mit.edu/apt squeeze debathena debathena-config debathena-system openafs |
|---|
| 23 | deb-src http://debathena.mit.edu/apt squeeze debathena debathena-config debathena-system openafs |
|---|
| 24 | EOF |
|---|
| 25 | |
|---|
| 26 | # add scripts repos to /etc/apt/sources.list.d |
|---|
| 27 | cat <<EOF > /etc/apt/sources.list.d/scripts.list |
|---|
| 28 | deb http://web.mit.edu/scripts/apt stable main |
|---|
| 29 | deb-src http://web.mit.edu/scripts/apt stable main |
|---|
| 30 | EOF |
|---|
| 31 | |
|---|
| 32 | # add scripts apt repo key |
|---|
| 33 | |
|---|
| 34 | # install ~/.k5login |
|---|
| 35 | # clone the xen config (/etc/xen) |
|---|
| 36 | git clone -b squeeze ssh://scripts@scripts.mit.edu/mit/scripts/git/xen.git /etc/xen |
|---|
| 37 | |
|---|
| 38 | # Install scripts-vm-host |
|---|
| 39 | aptitude update |
|---|
| 40 | aptitude install scripts-vm-host |
|---|
| 41 | |
|---|
| 42 | # install host keytab |
|---|
| 43 | cp $keytab /etc/krb5.keytab |
|---|
| 44 | k5srvutil change |
|---|
| 45 | k5srvutil delold |
|---|
| 46 | |
|---|
| 47 | # Configure exim4 to use smarthost (outgoing.mit.edu), no local mail |
|---|
| 48 | dpkg-reconfigure exim4-config |
|---|
