| 5 | | boot from a CD, choose the ubuntu 'server' install. |
| 6 | | |
| 7 | | select partitioning along the lines proposed in [wiki:"Configured Workstations"]. (you'll set up `/tmp` later). |
| 8 | | |
| 9 | | put a copy of the CAL archive signing key onto the machine in a reasonable place and import it into the apt keyring: |
| 10 | | |
| 11 | | {{{ |
| 12 | | [caladmin@metis ~]$ sudo apt-key add /tmp/archive-signing-key.gpg |
| 13 | | OK |
| 14 | | [caladmin@metis ~]$ |
| 15 | | }}} |
| 16 | | |
| 17 | | install `openssh-server`, and change PasswordAuthentication to no in `/etc/ssh/sshd_config` |
| 18 | | |
| 19 | | put in place the official [source:trunk/configured-workstations/etc/apt/sources.list sources.list] |
| 20 | | |
| 21 | | `apt-get install cal-configured-workstation` |
| 22 | | |
| 23 | | things i still need to streamline: |
| 24 | | |
| 25 | | * network configuration: uses DHCP, but should use astro.columbia.edu as the default domain: use resolvconf? |
| 26 | | * need to create krb5 keytab on each new host |
| 27 | | * preseed debconf with standard answers |
| 28 | | * transfer and/or compare standard configuration files after everything is done |
| 29 | | * adding remote mount points in /etc/fstab (and /tmp as a tmpfs) |
| 30 | | * kicking ipsec to function before trying to mount the remote filesystem |
| 31 | | * configuring /etc/racoon/racoon.conf with proper hostname (is this a generic problem that i'll face again later?) |
| 32 | | * putting in a setkey.conf that should work at boot. |
| 33 | | * configuring shorewall |
| 34 | | * configuring logcheck |
| 35 | | * configuring the root mail alias to point somewhere |
| 36 | | * pam-console for audio and plugdev groups |
| | 6 | We probably need more info here... |
