+
Notes on how i install a debian server with rootless docker and network-manager with an zsh setup
+
+
+
A perfect debian 12 install with docker and zsh!
+
+
+
+ #
+
+
+
+
+
+
Prerequisites
+
+
+
+ #
+
+
+
+
we first need to get the iso i’m gonna go with debian 12 bookworm and you can
+ofc install this on hardware but i’m gonna install it on a vm
+
+
+
Installation
+
+
+
+ #
+
+
+
+
+
+
vm
+
+
+
+ #
+
+
+
+
I will use a vm to setup the debian setup you can ofc install this
+on hardware if you want but for ease of install i will use a vm and
+the software i use to do that is QEMU/KVM.
+
+- firmware: UEFI
+- cpu: 1 Socket, 6 Cores and 1 Thread.
+- ram: 8192MiB
+- gpu: virtio(2d)
+- hdd: 100GB
+
+
+
+
Debian Installer
+
+
+
+ #
+
+
+
+
I will walk you through the installer from domain
+to manually partitioning disks
+
+
+
Domain
+
+
+
+ #
+
+
+
+
You now need to enter your hostname like debian-server or smth like that and for
+domain normally you can skip this but if you have setup pfsense or opnsense than
+you can enter the domain after the first dot so for me that would be home.arpa (the default).
+
+
+
Partitioning
+
+
+
+ #
+
+
+
+
You need to choose guided remove swap cus we are gonna zram then remove root an readd it with xfs/btrfs
+if using an ssd if not you can use ext4 it will give an warning after continueing cus there is no swap
+but you can just ignore that by hitting no and then continue with the install.
+
+
+
Mirrors
+
+
+
+ #
+
+
+
+
You should choose the default (deb.debian.org) if you don’t know which to choose.
+
+
+
Desktop Selection
+
+
+
+ #
+
+
+
+
Untick all but ‘Debian desktop environment’, ‘standard utils’ and enable ‘SSH server’.
+
+
+
Finnish!
+
+
+
+ #
+
+
+
+
It should now be installed.
+
+
+
Setting up
+
+
+
+ #
+
+
+
+
+
+
Sudo
+
+
+
+ #
+
+
+
+
We now need to go to tty2 (ctrl + alt + f2) then login with root cus we need to add our user to the sudoers group
+and we do that with:
+
/usr/sbin/usermod -aG sudo user
+
then we exit root (ctrl + d) and login with our user and we should now be in the sudoers file!
+
+
+
SSH
+
+
+
+ #
+
+
+
+
Now we need to setup an ssh connection we do that with first enabling the service:
+
sudo systemctl enable --now ssh
+
We need to check for what ip to connect too with ip a:
+
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
+ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+ inet 127.0.0.1/8 scope host lo
+ valid_lft forever preferred_lft forever
+ inet6 ::1/128 scope host noprefixroute
+ valid_lft forever preferred_lft forever
+2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
+ link/ether 52:54:00:09:75:ef brd ff:ff:ff:ff:ff:ff
+ inet 192.168.122.221/24 brd 192.168.122.255 scope global dynamic noprefixroute enp1s0
+ valid_lft 2798sec preferred_lft 2798sec
+ inet6 fe80::5054:ff:fe09:75ef/64 scope link noprefixroute
+ valid_lft forever preferred_lft forever
+
And in 2. inet 192.168.122.221 is the ip we need to connect too.
+
+
+
Refreshing Mirrors (and fixing kitty)
+
+
+
+ #
+
+
+
+
We now need to fix kitty cus if you may have noticed the ssh connection is acting up
+this is kitty to fix that we need to do this
+
sudo apt update && sudo apt upgrade -y && sudo apt install kitty -y
+sudo apt remove gdm -y
+
And then reconnect with the ssh session.
+
+
+
Installing Required Packages
+
+
+
+ #
+
+
+
+
We will now install all the required packages for this server install:
+
sudo apt install cargo fuse-overlayfs slirp4netns neovim git curl zsh neofetch dust make cmake rustc btop uidmap dbus-user-session -y
+
For Mcfly:
+
curl -LSfs https://raw.githubusercontent.com/cantino/mcfly/master/ci/install.sh | sudo sh -s -- --git cantino/mcfly
+
For eza:
+
sudo mkdir -p /etc/apt/keyrings
+wget -qO- https://raw.githubusercontent.com/eza-community/eza/main/deb.asc | sudo gpg --dearmor -o /etc/apt/keyrings/gierens.gpg
+echo "deb [signed-by=/etc/apt/keyrings/gierens.gpg] http://deb.gierens.de stable main" | sudo tee /etc/apt/sources.list.d/gierens.list
+sudo chmod 644 /etc/apt/keyrings/gierens.gpg /etc/apt/sources.list.d/gierens.list
+sudo apt update && sudo apt install -y eza
+
And for dust:
+
curl -LSfs "https://objects.githubusercontent.com/github-production-release-asset-2e65be/125563061/dbaf86ba-0a32-4f0d-abca-61197ec0ce0d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240402%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240402T133137Z&X-Amz-Expires=300&X-Amz-Signature=d68092527396ef57f3c4c0634616386a1a59e2f7a50b850e64202bbb14f1d471&X-Amz-SignedHeaders=host&actor_id=46651680&key_id=0&repo_id=125563061&response-content-disposition=attachment%3B%20filename%3Ddu-dust_1.0.0-1_amd64.deb&response-content-type=application%2Foctet-stream" -o dust.deb
+sudo dpkg -i dust.deb && rm dust.deb
+
+
+
Setting up zsh (will be done later)
+
+
+
+ #
+
+
+
+
+
+
Setting up docker with a website!
+
+
+
+ #
+
+
+
+
We are now gonna setup docker with a
+ website
+
+
+
Docker Install
+
+
+
+ #
+
+
+
+
We need to add some lines to /etc/sysctl.conf:
+
sudo /bin/su -c "echo 'net.ipv4.ip_unprivileged_port_start=0' >> /etc/sysctl.conf"
+sudo /bin/su -c "echo 'kernel.unprivileged_userns_clone=1' >> /etc/sysctl.conf"
+sudo /bin/su -c "echo 'vm.max_map_count=262144' >> /etc/sysctl.conf"
+sudo sysctl --system
+
It’s now time to install docker!
+we first need to add the docker keyrings and you can do that with this:
+
sudo apt-get update
+sudo install -m 0755 -d /etc/apt/keyrings
+sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
+sudo chmod a+r /etc/apt/keyrings/docker.asc
+
after that is done we need to add the repo to our sources:
+
echo \
+ "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian \
+ $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
+ sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+sudo apt update
+
we can now finally install docker with uptodate versions:
+
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
+
now that docker is installed we ofc need to test it first to check if it is installed
+correctly or not and you can do that with this:
+
sudo docker run hello-world
+
if it worked then docker is installed correctly!
+
+
+
Setting up rootless for docker
+
+
+
+ #
+
+
+
+
now that we have docker installed we don’t want to run everything with root and
+want to run it securily with our user in rootless mode to do that we need to run
+this simple script from docker themselfs:
+
sudo systemctl disable --now docker.service docker.socket
+dockerd-rootless-setuptool.sh install
+systemctl --user enable --now docker
+
and again to check if it’s installed correctly we can run this command:
+
+
+
Setting up nginx
+
+
+
+ #
+
+
+
+
Now that docker is installed and working we now need to add some folder for them
+where to place the containers and such and to do that we just need to add these:
+
mkdir ~/docker && cd ~/docker
+
For setting up a site with nginx just clone my git repo for a docker container with nginx:
+
git clone https://git.kaleyfischer.xyz/DRAGONTOS/nginx-docker && cd nginx-docker
+
Now that we are in the nginx-docker container we need to build the container
+
+
+
+
+ 
+ 
+
+
+