FirstBoot
From TrustixWiki
[edit]
First Boot Into Trustix
These are just a few notes that I have made for things to do after I first install Trustix. I have worked with BSD and linux for many years now and am very impressed with Trustix. By default, nothing is turned on - not even sshd! So, here are a few pointers to get you moving.
- On the console, login as root (or the user you created during the install and su to root).
- Add any users you want to (adduser blah)
- Edit /etc/group and add users that need su access to the "root" group. Also, I noticed that users don't automatically get added to the "users" group (even though it is specified in /etc/default/useradd) so you might want to add them while you're there (usermod -G groupname username).
- chkconfig --list - check what services are installed. By default hardly anything will be running and nothing that accepts an external connection. Start what you need to.
- At the least, you will probably want to start sshd by default so you can login remotely. chkconfig sshd on will get that going on the next reboot. (note however that root logins are disabled in /etc/ssh/sshd_config). Type service sshd start to start the ssh daemon right away (no need to reboot :)
- Edit /etc/inittab and comment out the CTRL+ALT+DEL line. Or do something like change it to "echo Login to reboot".
- SWUP - this is a really great package manager that actually works! Great stuff! To get it going, have a look at /etc/swup/swup.conf and check it is going to contact the correct servers. Next, install the appropriate keys (they are listed in swup.conf).
- For 2.1 swup --import-key /usr/share/tsl-gpgkeys-horizon/trustix-horizon.pub.gpg and swup --import-key /usr/share/tsl-gpgkeys-horizon/trustix-horizon-contrib.pub.gpg should be adequate for most.
- For 2.2 swup --import-key /usr/share/tsl-gpgkeys-sunchild/trustix-sunchild.pub.gpg and swup --import-key /usr/share/tsl-gpgkeys-sunchild/trustix-sunchild-contrib.pub.gpg should do the trick. (For my Trustix 2.2, i had to import all four keys.)
- For 3.0 swup --import-key /usr/share/tsl-gpgkeys/trustix-gpgkey-contrib.pub.gpg (TSL Community-3). You should not have to import the main TSL key.
- Reboot - just to make sure everything starts up ok.
