Wild Tech ‘Garden’
  • Blog
  • Docs
  • News
  • About
  • GitLab
  • RSS
  • Sysadmin & DevOps
    • XCA Private SSL
    • Pi Unbound: The Gift of DoT
    • Real SystemD Timers
    • PowerShell PowerShell: Adding Privileges to a User
  • Windows Windows and Linux
    • Ubuntu Ubuntu cloud images on Hyper-V
    • Windows 7 Physical to Hyper-V Virtual Machine
    • Linux Linux and Windows — Linux focused
      • Linux and Windows — Common Setup
      • QEMU Windows in a Libvirt KVM VM
      • Windows with Linux VM
    • Windows Windows-centric Linux & Windows
      • Windows preparation for Linux & Windows
      • Base Install of Windows 10
      • Windows 10 Pro, first steps post-install
      • Windows 10 Pro: tweaks and recommendations
  • Making the postmodern web
    • Making the postmodern web presentation
    • Resources for making the postmodern web
  • Public Pi backyard camera
    • Upload backyard camera captures
    • Serve from local server
    • Serve from remote web server
    • Serve from Google Drive
    • Serve from Microsoft OneDrive
    • Streaming backyard camera
  • Alpine Linux Alpine Linux as a server
    • Alpine Linux server install
      • Choose install type
      • Alpine semi-data install
      • Use modified install procedure
      • Commit LBU (stores changes)
      • Create ‘sys’ aks classic install
      • Reboot
    • Download and verify media
    • Partition media using command line (CLI)
    • Install on Raspberry Pi
      • Creating initial install media
      • Obtain and verify install tarball
      • Prepare SD card
      • Pre-boot tweaks
    • Important post-install configuration
      • Add boot entropy (headless)
      • Add Non-root admin
      • Make SSH only public key
      • Add Pre-mount FS check
      • Add Non-root admin
    • Kernel and hardware notes
      • Kernel parameters for Alpine
      • Hardware-specific tweaks and config
    • Suggested tweaks
      • Suggested tweaks
      • Enhanced shell prompt
      • Add Terminal multiplexor
      • Enhanced shell prompt
    • HOWTOs
      • Add etckeeper
      • Add manpages
      • Add nano as default
      • Etckeeper git remote
      • iPXE netboot Alpine
      • Restic rest-server host
    • Developing Alpine Linux
      • Modifying Alpine install images
  • Arm Arm Development
    • Arm Libvirt/KVM virtualization
      • ARM Virtualization Main
      • Old-school manual ARM for Libvirt/KVM
      • UEFI manual ARM for Libvirt/KVM
      • Old-school automated ARM for Libvirt/KVM
      • UEFI automated ARM for Libvirt/KVM
    • Fast x86 builds of armel software
  • Automating personal cloud
    • Bare-metal cloud-init
  • Alpine Linux as a server
  • Apr 29, 2022

Important post-install configuration

Overview

The following are not part of the base install, but either can be essential to system function (like adding boot entropy for some headless systems like the Raspberry Pi) or are widely accepted best practices (like creating a non-root admin user and limiting time spent as root).

  • For headless systems, add boot entropy

    Some systems might take an excessively long time to boot when no peripherals are attached. In those cases, add the rng-tools package.

  • Create a non-root admin user

    Best practise needs a user that is not root.

  • Configure SSH to only allow pubkey logins

    Disallowing SSH login with only a username and password is a well known security best practise, therefore we implement it.

  • Add pre-mount filesystem check

    Where possible it is a best practise to safely check your filesystems before mounting them. Here we add the needed packages.

  • Use encrypted LBU

    Unless you need headless, or unattended reboots or power up, it is highly recommended to use an encrypted configuration backup.

  • ›
  • Documentation ›
  • Alpine Linux as a server ›
  • Post-instal config
  • Feb 11, 2024
  • 4:06 pm
  • Daniel F. Dickinson

  • Creating initial install media Pre-boot tweaks
  • Important post-install configuration Add boot entropy (headless)

Theme

Perplex logo

Apache 2.0 license

Content

Creative Commons 4.0 logo

unless noted otherwise.

Generated by

Hugo logo

Apache 2.0 license

Deployed On

OVHcloud

Contact

Contact Form
Report Issue

Legal Matters

Accessibility
Privacy
Licenses