install.ubuntu.11.10

This likely should be a Xubuntu install from now on, so a lot of the
Xfce stuff will be installed by default.

1.) Boot the install cd and follow instructions to do the base
install.  Set up machine as desired. Fairly
self-explanatory. Partitioning should be roughly as follows, adjusted
for available disk size as appropriate (including for RAID). Disk
labels should be representative of the mount point.

Pysical Partitions:
1	1GB	/boot
2	Rest	physical volume for LVM*


* = Alternatively, do volume for encryption, containing a single LVM
partition.

- If you are doing RAID, then you want the above physical partition
  scheme across multiple drives, with each one set up for "Physical
  volume for RAID". Then you create MD devices for each pairing (same
  partition on each drive) and then define it to be whatever it is
  above, and continue on as normal from there.

- These should represent MINIMUM sizes. More is often better.

LVM Partitions
swap		2*RAM
usr_local	10GB	/usr/local
tmp		2GB	/tmp
var		5GB	/var
root		10GB	/
home		Rest	/home

(For some machines, a common area of /pub, or /shared, might be
appropriate, and should be taken out of /home)


## NOTE: All this stuff assumes that you're root, such as with "sudo -s"

2.) After machine is up, run synaptic, go to settings->repositories
make sure the following are enabled:

- main
- universe
- restricted
- multiverse
- source code

Select Download From, then choose "other" and select best server. Let
it run the speed tests and you're good.

Select other software tab and enable/add:
- partner
- partner (Source Code)
- independent
- independent (Source code)

Select updates tab and enable:
- oneric-security
- oneric-updates
- oneric-backports

(or just grab sources.list from some reasonable machine)

Select Statistics and enable:
- submit statistical information

3.) Do:
apt-get update
apt-get full-upgrade

4.) Install things:
apt-get install nmap traceroute emacs emacs-goodies-el css-mode openssh-server symlinks sysstat ifstat dstat ssmtp heirloom-mailx apg whois powertop mii-diag gif2png cups-pdf units tofrodos gcc make g++ gdb autoconf libtool automake libc6-dev samba smbfs libsane-extras xsane scribus scribus-template texlive texlive-fonts-extra texlive-latex-extra latex2html latex2rtf gnuplot gnuplot-mode thunderbird enigmail firefox tracker tracker-utils unison unison-gtk digikam kipi-plugins meld ntp brag exiv2 unrar autossh openoffice.org xmlstarlet cdrskin logjam mesa-utils okular okular-extra-backends k3b libk3b6-extracodecs libtk-gbarr-perl subversion mono-runtime monodevelop monodevelop-nunit monodevelop-versioncontrol monodoc-manual glade mono-gmcs smartmontools gstreamer0.10-ffmpeg gstreamer0.10-plugins-bad gstreamer0.10-plugins-bad-multiverse gstreamer0.10-plugins-ugly vnc4server xvnc4viewer aspell aspell-en pidgin-extprefs pidgin-plugin-pack openjdk-6-demo openjdk-6-doc openjdk-6-jre openjdk-6-jre-headless openjdk-6-jre-lib openjdk-6-jdk gqview konqueror kaffeine xine-ui xchat mpg123 sox rhythmbox openoffice.org-help-en-us kcachegrind kcachegrind-converters graphviz hfsplus normalize-audio audacity libsox-fmt-all input-utils mysql-client nant sqlite3 libmono-i18n2.0-cil libmono-microsoft8.0-cil p7zip dvdbackup dia-gnome gsfonts-x11 ubuntustudio-font-meta fontmatrix kate powertop latencytop python-pycurl python-paramiko python-setuptools regexxer apt-show-versions gdm-guest-session git-core gitk git-svn speedcrunch mp3gain vorbisgain amarok kmail libmath-round-perl krita dosbox apt-file keepassx picocom qbrew manpages-posix manpages-posix-dev manpages-dev manpages c-cpp-reference ipcalc clusterssh logcheck preload mozplugger flashplugin-installer eclipse clusterssh pssh dh-make devscripts chromium-browser chromium-codecs-ffmpeg-extra ktorrent shutter libgoo-canvas-perl gnome-web-photo portsentry sound-juicer djvulibre-bin djvulibre-plugin djvusmooth pdf2djvu usb-imagewriter iftop pidgin-skype mail-notification wireshark atop gkrellm icewm icewm-themes icewm-gnome-support xubuntu-desktop xfce4-goodies tomboy mail-notification ubuntu-restricted-extras ia32-libs libc6-i386 acroread mercurial 

5.) Set up static IP's (for machines with them)
- edit /etc/network/interfaces, and add lines like:
auto iface eth0 inet static
	address 192.168.9.1
        netmask 255.255.255.0
	gateway 192.168.9.254

ifdown eth0
ifup eth0

6.) Make ssh work:
## For an old machine, use the old keys - you did save /etc, didn't you?

## For a new machine, use the new keys generated by the distro.

- make sure to add to the firewall
ufw allow ssh

- set:
- PermitRootLogin no

- once you've set up public key auth, turn off password access. edit
    /etc/ssh/sshd_config
and set
    PasswordAuthentication no

sudo service ssh restart

7.) Turn on the firewall.

ufw enable

8.) Set up /etc/hosts.allow and /etc/hosts.deny:
- hosts.allow:
----------------
ALL: 127.0.0.1
sshd: ALL
-----------------

- hosts.deny:
----------------
ALL:ALL
-----------------

9.) Configure the bootloader
- edit /etc/default/grub
- comment out the GRUB_HIDDEN_TIMEOUT line
- set the GRUB_TIMEOUT line to 3
- set the GRUB_CMDLINE_LINUX_DEFAULT to "nosplash"
- sudo update-grub

10.) Install proprietary things (Medibuntu)
From: https://help.ubuntu.com/community/Medibuntu

sudo wget --output-document=/etc/apt/sources.list.d/medibuntu.list http://www.medibuntu.org/sources.list.d/$(lsb_release -cs).list
sudo chmod a+r /etc/apt/sources.list.d/medibuntu.list 
sudo apt-get update
sudo apt-get --yes --allow-unauthenticated install medibuntu-keyring 
sudo apt-get update
sudo apt-get install libdvdcss2 non-free-codecs googleearth-package app-install-data-medibuntu apport-hooks-medibuntu 

11.) latex
- cd /usr/share/texmf/tex/latex
- sudo cp -a ~/system_stuff/latex/local .
- sudo chown -R root:root local
- then run texconfig and select "rehash"
- Also, set the paper to US

12.) ntpd (for fixed machines only, for mobile, the default is fine)
TODO - FIX THIS - we have no NTP server for now
## for server:
- add ntpd to hosts.allow list
ntpd: 192.168.9.0/24

## for server, make sure to add to ufw
ufw allow ntp

## for client
- edit /etc/ntpd.conf and comment out the line:
server ntp.ubuntu.com
- and add the line:
server 192.168.9.98 (this was daisy, should now be loki..)

13.) cups
- sudo system-config-printer
- add printers as appropriate
- Under Server->Settings select:
    Show printers shared by other systems
- For servers, under "Server Settings", select:
    Show printers shared by other systems
- make sure to enable it in the ufw
    ufw allow ipp

14.) Set up samba:

- Servers
    cd /etc/samba
    mv smb.conf smb.conf.old
    cp ~/system_stuff/samba/smb.conf.machine_name ./smb.conf
    update-rc.d smbd defaults
    update-rc.d nmbd defaults
    service smbd start
    service nmbd start

- make sure to add ufw rules for it
    ufw allow netbios-ns
    ufw allow netbios-dgm
    ufw allow netbios-ssn
    ufw allow microsoft-ds

- Other machines
  - Remember to turn it off on places you don't want it.
    echo "manual" | sudo tee /etc/init/smbd.override
    echo "manual" | sudo tee /etc/init/nmbd.override
    service smbd stop
    service nmbd stop

15.) Set up ssmtp
    cd /etc/ssmtp
    mv ssmtp.conf ssmtp.conf.old
    cp ~/system_stuff/ssmtp/ssmtp.conf .
    chmod a+r ssmtp.conf

16.) Set up apache (if applicable)

apt-get install apache2 php5 php5-cli php-pear php-db php5-mysql php5-mcrypt mysql-server

- edit /etc/apache2/ports.conf and change:

Listen 80

- to 

Listen 127.0.0.1:80

- and

Listen *:443

- to

Listen 127.0.0.1:443

- enable the userdir and rewrite modules

a2enmod userdir
a2enmod rewrite

sudo service apache2 restart

- for dev machines, you may not want it to start at boot
update-rc.d -f apache2 remove
update-rc.d -f mysql remove

17.) Add podget to my cron (one machine only)
TODO - port over. Stuff is in .hpodder. 
crontab -e

then make it look like:

  0 6   *   *   *    /home/matt/bin/hpodder > /dev/null

so it will run every morning at 6am and log to nowhere

18.) set up rsnapshot (on appropriate machines)
apt-get install rsnapshot

cd /etc/
mv rsnapshot.conf rsnapshot.conf.old
cp ~/system_stuff/rsnapshot/rsnapshot.conf .
chmod a+r rsnapshot.conf

- edit /etc/cron.d/rsnapshot and set the stuff to work like:
# min hour   day month week    
0 */4         * * *           root    /usr/bin/rsnapshot hourly
30 3          * * *           root    /usr/bin/rsnapshot daily
0  3          * * 1           root    /usr/bin/rsnapshot weekly
30 2          1 * *           root    /usr/bin/rsnapshot monthly

19.) /etc/hosts
- add hosts to /etc/hosts as appropriate

20.) Remove gdm so X doesn't start (servers only)
update-rc.d gdm disable

21.) Set up CDEmu ppa
- Add the CDEmu repository
sudo add-apt-repository ppa:cdemu/ppa 

sudo apt-get update
sudo apt-get dist-upgrade
sudo apt-get install gcdemu cdemu-client

22.) Remove ubuntu one:

sudo apt-get purge ubuntuone-client

23.) Removed

24.) Set up email backups (case only)

crontab -e

then make it look like:

 0 1   2   *   *    /home/matt/bin/backup_email > /dev/null

so it will on the second of the month at 1am and log to nowhere

25.) Removed

26.) Set up sensors (if not set up automagically) for case

- For case / Gigabyte X48-DQ6 board
- add the following to /etc/modules:
it87
coretemp

(For new machines, this is accomplished by running sensors-detect and following prompts)

# FIXME - edit the conf file to fix scaling, etc.

27.) Removed

28.) Make tcl not ugly

sudo update-alternatives --config wish

and then set for wish8.5

29.) Fix volume hotkeys for hiro

sudo cp /sys/devices/platform/thinkpad_acpi/hotkey_all_mask /sys/devices/platform/thinkpad_acpi/hotkey_mask

30.) Set up logcheck
- edit /etc/cron.d/logcheck and set it to @daily and not every 2 hours

31.) Set up portsentry (which actually doesn't work for stuff running
firewalls...)

- edit /etc/default/portsentry and set it to atcp/audp mode
sudo service portsentry restart

32.) Set up log monitoring
TODO - finish this

33.) Removed

34.) Removed

35.) Install d stuff:

sudo apt-get install gdc-4.6 libphobos2-4.6-dev libwxgtk2.8-dev libsqlite3-dev codeblocks astyle

36.) Install hpodder build dependencies (deprecated, if ported over to
a different podcatcher):

apt-get install haskell-compiler libghc6-configfile-dev libghc6-hdbc-dev libghc6-hdbc-sqlite3-dev libghc6-haxml-dev libghc6-missingh-dev libghc6-hslogger-dev libghc6-mtl-dev libghc6-network-dev libghc-parsec-dev

37.) Install qbrew build dependencies:

apt-get install qt4-qmake libqt4-dev qt4-designer

38.) Install virtualbox bleeding edge
echo "deb http://download.virtualbox.org/virtualbox/debian oneiric contrib non-free" | sudo tee /etc/apt/sources.list.d/virtualbox.list
sudo chmod a+r /etc/apt/sources.list.d/virtualbox.list

wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -
sudo apt-get update
sudo apt-get install virtualbox-4.1

47.) Remove the Airport express pulseaudio module (because it's broken)

sudo apt-get remove pulseaudio-module-raop

48.) Install mate

echo deb http://tridex.net/repo/ubuntu/ oneiric main | sudo tee /etc/apt/sources.list.d/mate-oneiric.list
sudo chmod a+r /etc/apt/sources.list.d/mate-oneiric.list
sudo apt-get update
sudo apt-get install mate-archive-keyring
sudo apt-get update
sudo apt-get full-upgrade
sudo apt-get install mate-desktop-environment mate-conf-editor

49.) Install tf101 support (mtpfs)

sudo apt-get install mtpfs mtp-tools
sudo mkdir /media/transformer
sudo mtpfs -o allow_other /media/transformer
sudo umount /media/transformer

=== Games ===

1.) Install openxcom supporting stuff so we can build it:

sudo apt-get install libsdl-gfx1.2-dev libyaml-dev 

2.) Add GetDeb games repo (PlayDeb)
wget -q -O - http://archive.getdeb.net/getdeb-archive.key | sudo apt-key add -
sudo add-apt-repository "deb http://archive.getdeb.net/ubuntu oneric-getdeb games"

and install a bunch of stuff from there (not all of this may work, the
repo seems a little ill-maintained at this time)

sudo apt-get update
sudo apt-get install warzone2100 enemy-territory smokinguns bloodfrontier bombic ufoai hedgewars

I had gotten this to do FreeOrion, but that's apparently not here...

3.) Install some games:
TODO - update with more? OpenTycoon, etc?
apt-get install boswars freecol lincity-ng warzone2100 freeciv-sound-standard freeciv-client-gtk scummvm beneath-a-steel-sky flight-of-the-amazon-queen fluidsynth

4.) Add PlayOnLinux

echo "deb http://deb.playonlinux.com/ oneric main" | \
     sudo tee -a /etc/apt/sources.list.d/playonlinux-oneric.list
sudo chmod a+r /etc/apt/sources.list.d/playonlinux-oneric.list

sudo apt-get update
sudo apt-get install playonlinux

5.) Install updated wine

sudo apt-add-repository ppa:ubuntu-wine/ppa

sudo apt-get update
sudo apt-get full-upgrade