Complete Debian Sarge 3.1 server

This How - To in its first version, has

Apache2, Postfix, MySQL 5.x, Dovecot, SpamAssassin, proftp, and Bind (Chroot)
all on a stable Debian server installed from a NetInstall CD, and with
Backports enabled (Selective)

Installing Debian

Be sure to enter linux26 to install the 2.6
version of the Kernel.

 Select the language you want to
use.

 Select your country.

Select your Keyboard
layout

 choose the name you want for
your server.

Here you put your domain name. In my
case is go2linx.org

Select to manually set the
partition.

 

Confirm that you are going to work on that
Disk.

Select Free space

/>{mospagebreak}

Create a new partition.

Select a 512 MB, or 1 Gig anything
you want for swap.

 Select, primary
partition.

Select the begining or the this or
the end.

Select swap.

Now on the same way choose the rest
of the disk, for an ext3 partition, mounted on root, as follows.

{mospagebreak}

 

On the next screen you will have to adjust
your time zone, clock, and your root password and also create a new user. (I
am not showing them here)

On this one you can choose to scan a new disk,
I have none so I choosed no.

On the next one you should choose to
configure an apt source according your needs.

Choose http, and the mirror nearest
you.

If you are connected to the Internet across
a proxy put the info here.

After the server will connect to the
Internet and get some packages (This may take time, depending your Internet
speed conection)

Now select to install nothing as, we are going to do
all manually, later. 

Also Choose no email
configuration.

 

Now you are Done with the
installation

Now lets start with the installation
of all the packages needed to have our Complete Debian
Server.

 {mospagebreak}

Install DNS (BIND Chrooted)

First get the software
apt-get install
bind9
/etc/init.d/bind9 stop
Now edit with your favorite editor the
file /etc/default/bind9
vi /etc/default/bind9
And make sure it looks
like this, so the daemon will run as the bind user, and in the jail of
/var/lib/named/.

align="center">

OPTIONS="-u bind -t /var/lib/named/"

This will make Bind to
run jailed in the directory /var/lib/named

Now recreate the
directory structure under the /var/lib/named/, for the daemon to find the
needed files

mkdir -p /var/lib/named/etc
mkdir
/var/lib/named/dev
mkdir -p /var/lib/named/var/cache/bind
mkdir -p
/var/lib/named/var/run/bind/run

(We use mkdir -p in order to create
the parents directories as needed)

Now copy the configurations
files of bind from /etc/ to /var/lib/named/etc/

mv /etc/bind
/var/lib/named/etc
ln -s /var/lib/named/etc/bind /etc/bind

The
last line makes a sym link from the original configuration directory to the
resently created, so future upgrades to the software like when you run
(apt-get upgrade) could find the files where they are supposed to be. (or at
lease the symlinks)

Now create some devices on our
/var/lib/named/dev/ directory.

mknod /var/lib/named/dev/null c 1
3
mknod /var/lib/named/dev/random c 1 8
chmod 666
/var/lib/named/dev/null /var/lib/named/dev/random

Assign the right
ownership to the directories.

chown -R bind:bind
/var/lib/named/var/*
chown -R bind:bind /var/lib/named/etc/bind
/>We also need to modify the syslog, in order to have all logs send to the
jailed directory, look at the BOLDED
line in the file,
that makes syslog listen in another socket, and make it able to get the
messages from the CHROOTED Bind.

align="center">

#! /bin/sh # /etc/init.d/sysklogd: start the system log daemon. PATH=/bin:/usr/bin:/sbin:/usr/sbin />pidfile=/var/run/syslogd.pid binpath=/sbin/syslogd test -x $binpath || exit 0 # Options for start/restart the daemons # For remote UDP logging use SYSLOGD="-r" # />SYSLOGD="-a /var/lib/named/dev/log" />create_xconsole() { if [ ! -e /dev/xconsole ]; then mknod -m 640 /dev/xconsole p else chmod 0640 /dev/xconsole fi chown root:adm /dev/xconsole } /> running() { # No pidfile, probably no daemon present /> # if [ ! -f $pidfile ] then return 1 /> fi pid=`cat $pidfile` # No pid, probably no daemon present # if [ -z "$pid" ] then return 1 fi if [ ! -d /proc/$pid ] then return 1 fi cmd=`cat /proc/$pid/cmdline | tr "\000" "\n"|head -n 1` # No syslogd? # if [ "$cmd" != # "$binpath" ] then return 1 fi # /> return 0 } case "$1" in # start) echo -n "Starting system log daemon: syslogd" # /> create_xconsole start-stop-daemon --start --quiet --exec # $binpath -- $SYSLOGD echo "." ;; stop) # /> echo -n "Stopping system log daemon: syslogd" # start-stop-daemon --stop --quiet --exec $binpath --pidfile $pidfile # echo "." ;; reload|force-reload) echo -n # "Reloading system log daemon: syslogd" start-stop-daemon # --stop --quiet --signal 1 --exec $binpath --pidfile $pidfile echo # "." ;; restart) echo -n "Restarting # system log daemon: syslogd" start-stop-daemon --stop --quiet # --exec $binpath --pidfile $pidfile sleep 1 # start-stop-daemon --start --quiet --exec $binpath -- $SYSLOGD echo # "." ;; reload-or-restart) if running # /> then echo -n "Reloading system log daemon: # syslogd" start-stop-daemon --stop --quiet --signal 1 # --exec $binpath --pidfile $pidfile else echo -n # "Restarting system log daemon: syslogd" # start-stop-daemon --start --quiet --exec $binpath -- $SYSLOGD fi # /> echo "." ;; *) echo "Usage: # /etc/init.d/sysklogd # {start|stop|reload|restart|force-reload|reload-or-restart}" # exit 1 esac exit 0

# />Finally, restart syslog, and start bind
/etc/init.d/sysklogd
# restart
/etc/init.d/bind9 start

# />

 

Installing backports

We will need
# to install backports to be able to download the latest available MySQL
# server for Debian, we are doing this because some aplications like ( # href="http://www.vtiger.com/" target="_blank">VTiger ) does not run with
# MySQL 4.x which comes with Debian 3.1 Sarge.

First, change to root # />
$su -

Then edit with your favorite text editor, (I use
# vi)

#vi /etc/apt/get/sources.lst

Mine looks this way,
# maybe yours look different.

# align="center">

#deb file:///cdrom/ sarge main #deb # cdrom:[Debian GNU/Linux 3.1 r3 _Sarge_ - Official i386 Binary-1 (20060904)]/ # unstable contrib main deb http://mirrors.kernel.org/debian/ # stable main deb-src http://mirrors.kernel.org/debian/ stable main # /> deb http://security.debian.org/ stable/updates main contrib # /># Backports deb http://www.backports.org/debian/ sarge-backports main #

(Each line starting with "deb"
# indicates where the .deb packages could be found, and other info also.) # />
That is all, but if you want to use backports only for selected
# packages, and not for all.

Edit or create the file
# /etc/apt/preferences

#vi /etc/apt/preferences

# border="1" align="center">