Editing Ubuntu 10

= Installation =

IMPORTANT NOTE: When booting the computer you are running, make sure to write down the graphics card that is displayed. This will be needed for a later step.

== Installation i386 (32-bit) ==
* Download and burn the latest Ubuntu Server-Edition LTS ISO for i386 (8.04.3 used for these instructions)
* Boot from CD

== Installation x86_64 (64-bit) ==
* Download and burn the latest Ubuntu Server-Edition LTS ISO for x86_64 (amd64) (10.04 used for these instructions)
* Boot from CD

== Installation (both 32 and 64 bit) ==
# Select "English"
# Select "Install Ubuntu Server"
# Select "English"
# Select "United States"
# Detect keyboard layout -> NO
# Select "USA"
# Select "USA"
# !!! It will now attempt to use DHCP.. cancel this or select "Go Back" on the following screen
# Select "Configure network manually"
## Enter the IP address of the workstation. Ex: 10.20.3.15 (If unsure, use NSlookup)
## Enter the Netmask of "255.255.255.0"
## Enter the Gateway of "10.20.3.1"
## Enter the Nameservers "10.20.70.16 10.20.70.17"
# Hostname: Set the FQDN of the machine as the hostname. Ex: clarke.cs.transy.edu
# Select "Eastern" time zone

=== Partitioning (Single Disk) ===
* Select the "Manual" method
* Use the arrow keys to highlight the disk (usually sda) and press enter
* Confirm the dialog to create a new empty partition table.
* Select the "FREE SPACE" and press enter.
* Create the following partitions:
** (All of the computer's space except 2 GB), primary, mountpoint: /, use as: ext3, options: bootable
** 2 GB, logical, use as: swap
* Select "Finish Partitioning" and write the changes to disk

=== Partitioning (Software RAID 1) ===

==For Systems where RAID has been set up==
* Select the "Manual" method
* Use the arrow keys to highlight the large RAID disk 
* Change type to Ext3
* Mount Point is /
* Format the drive.
* Make RAID 0 bootable
* Check to make sure the small RAID disk is set to swap.
* When partitioning, the manager will ask about booting if a RAID becomes degraded. Hit yes.

==For New Systems==
* Select the "Manual" method
* Use the arrow keys to highlight each disk and press enter
* Confirm the dialog to create a new empty partition table on both drives.
* Select the "FREE SPACE" on each drive and create a (TotalSize - 2gb) primary partition (at the Beginning)
* Select Use as: Physical volume for RAID
* Select "Done setting up partition"
* Select the "FREE SPACE" below the partition you just created
* Use the remaining space on that first drive for another primary partition (at the Beginning)
* Select Use as: Physical volume for RAID
* REPEAT for second drive
* Select "Configure software RAID" at the top
* Confirm the changes (which have to be committed before configuring RAID)
* Select "Create MD Device"
* Select "RAID1"
* Number of active devices: 2
* Number of spare devices: 0
* Select /dev/sda1 and /dev/sdb1 then continue
* Create a second MD Device with /dev/sda2 and /dev/sdb2 just as the previous 5 steps
* Select "Finish"
* In the partitioner, select the first RAID device and Use as: ext3, Mount point: /
* Lastly, select the second RAID device and Use as: swap area then select "Finish partitioning and write changes" to disk at the bottom.

=== Finish Up ===
* Do not encrypt Home.
* Select "No configuration" for the mail server.
* Full name for new user: lab
* Username for your account: lab
* Password: qazzaq (this user will be deleted later)
* Verify Password
* Leave the HTTP proxy box empty and select "Continue"
* Note: If it freezes "Scanning the mirror" unplug and replug the ethernet cable once.
* Select "No" when prompted about encryption
* Select "No Automatic Updates" when prompted about updates.
* Software to install: Select "OpenSSH server" and select "Continue"
* The system will finish configuring and ask you to "Continue" before it reboots.

= Configuration =
* This section is done via SSH as a convenience for installing multiple systems.. but can be done from the keyboard. Note that if the system has been SSHed before the install of the new system, the SSH will report that there is a risk of a man in the middle attack. If this happens:
* Edit /root/.ssh/known_hosts
* Delete the line that SSH is complaining about (listed in the error message).



* ssh lab@ipaddress
* sudo su -
* passwd root (set the current root password)
* exit
* exit

* ssh root@ipaddress
* userdel lab
* rm -rf /home/lab
* Add the following to /etc/apt/sources.list:
* 64-bit:
<code><pre>
deb http://babbage.cs.transy.edu/ubuntu-amd64/ lucid main restricted universe multiverse
deb http://babbage.cs.transy.edu/ubuntu-amd64/ lucid-updates main restricted universe multiverse
deb http://babbage.cs.transy.edu/ubuntu-amd64/ lucid-security main restricted universe multiverse

#deb http://babbage.cs.transy.edu/ubuntu-amd64/ lucid-backports main restricted universe multiverse
#deb http://babbage.cs.transy.edu/ubuntu-amd64/ lucid-proposed main restricted universe multiverse
</pre></code>
* apt-get update
* apt-get upgrade
* apt-get dist-upgrade

=== Switch to Generic Kernel ===
* Since the Ubuntu kernels have virtualization built in which is not compatible with nvidia drivers. Even after this is resolved, it is still nice to run the official kernel.org generic sources. Very compatible.
* ls /boot
* apt-get install linux-image-generic linux-doc linux-source-2.6.XX (replace XX with the LATEST kernel sub-version output from ls /boot)
* apt-get remove linux-image-2.6.XX-YY-server --purge (again XX from ls /boot)

* REBOOT!

* ssh root@HOST.cs.transy.edu

=== Configuring LDAP Authentication ===

* First we need to get GDM (the graphical login) and its dependencies installed so..
* apt-get install gdm
* apt-get install auth-client-config libpam-ldap libnss-ldap ldap-auth-client ldap-auth-config
** LDAP server Uniform Resource Identifier: ldap://10.20.3.8
** Distinguished name of the search base: dc=cs,dc=transy,dc=edu
** LDAP version to use: 3
** Make local root Database admin: NO
** Does the LDAP database require login?: NO

* Edit /etc/ldap.conf and change the following values:
** host 10.20.3.8
** base dc=cs,dc=transy,dc=edu
** uri ldap://10.20.3.8
** bind_policy soft

* Edit /etc/ldap/ldap.conf
** BASE dc=cs,dc=transy,dc=edu
** URI ldap://10.20.3.8

* Edit /etc/auth-client-config/profile.d/transy
<code><pre>
[transy]
nss_passwd=passwd: ldap files
nss_group=group: ldap files
nss_shadow=shadow: ldap files
nss_netgroup=netgroup: ldap files
pam_auth=auth       required     pam_env.so
        auth       sufficient   pam_unix.so likeauth nullok
        auth       sufficient   pam_ldap.so use_first_pass
        auth       required     pam_deny.so
pam_account=account    sufficient   pam_unix.so
        account    sufficient   pam_ldap.so
        account    required     pam_deny.so
pam_password=password   sufficient   pam_unix.so nullok md5 shadow use_authtok
        password   sufficient   pam_ldap.so use_first_pass
        password   required     pam_deny.so
pam_session=session    required     pam_limits.so
        session    required     pam_unix.so
        session    optional     pam_ldap.so

</pre></code>

* auth-client-config -a -p transy
* Add the following line near the very top of /etc/pam.d/gdm AND /etc/pam.d/login
<code><pre>
auth    optional        pam_group.so
</pre></code>

* Add the following to the BOTTOM of /etc/security/group.conf:
<code><pre>
# This will force all users that logon into these groups
login;*;*;Al0000-2400;cdrom,floppy,plugdev,audio,dip
kdm;*;*;Al0000-2400;cdrom,floppy,plugdev,audio,dip,video
gdm;*;*;Al0000-2400;cdrom,floppy,plugdev,audio,dip,video
</pre></code>

* Test LDAP authentication - if "id USERNAME" returns with info about the user... all is good.
<code><pre>
root@clarke:~# id kmoorman
uid=1129(kmoorman) gid=110(faculty) groups=110(faculty),800(camp),2100(linux)
</pre></code>

=== Filesystems ===
* apt-get install nfs-common
* mkdir /classes
* mkdir /labdata
* Edit /etc/fstab
Add: 
<code><pre>

# NFS Filesystems
10.20.3.8:/data/exportfs/home           /home           nfs     defaults,rw
10.20.3.8:/data/exportfs/classes        /classes        nfs     defaults,rw
10.20.3.8:/data/exportfs/labdata        /labdata        nfs     defaults,rw
</pre></code>

*Log-in to Babbage
* edit /etc/exports
* exportfs -a
* exit
* ssh root@IP
* mount -a
* Ensure the NFS filesystems loaded with "ls /home" "ls /classes" "ls /labdata"

=== Install Software ===

* scp 10.20.3.8:/root/keep/jdk* .
<code>
apt-get install amarok mplayer firefox thunderbird blackbox fluxbox gimp blender vim emacs xemacs21 nano gedit nedit jedit gcc php5 perl ruby python audacity pidgin gdb xfce4 vlc openoffice.org hpijs cupsys swi-prolog htop screen kdm mutt eclipse libglui-dev libglui2c2 libxi-dev libxmu-dev libglut3-dev libglut3 spim tk make ant xorg k3b kubuntu-desktop ubuntu-desktop mesa-utils nfs-common ffmpeg flashplugin-nonfree mozilla-plugin-vlc alsa-utils lbreakout2 subversion subversion-tools patch libsvn-perl libsvn-ruby python-subversion g++ gcc build-essential libglui-dev libglui2c2 libxi-dev libxmu-dev mysql-client lynx kompozer kompozer-dev lbreakout2 csh xlockmore mesa-utils
</code>

* Dialog from above command:
** Default display manager: choose "gdm"
** No configuration.

=== Install Java ===

* add-apt-repository "deb http://archive.canonical.com/ubuntu lucid partner"
* apt-get update
* apt-get install sun-java6-jre sun-java6-plugin sun-java6-fonts

=== Graphics Drivers ===
WARNING: Instructions for installing the graphics drivers has NOT been tested.
*glxinfo
* Write down graphics card as found from the glxinfo command. It may take some scrolling to find.
==== Nvidia ====
* mkdir /root/video_driver
* cd /root/video_driver
* Download the appropriate installer from [http://www.nvidia.com] (based on GPU and architecture)
** Be sure to place (and keep it in case of kernel upgrade) in /root/video_driver
* /etc/init.d/gdm stop
* chmod +x NVIDIA-Linux-x86-185.18.36-pkg1.run 
* ./NVIDIA-Linux-x86-185.18.36-pkg1.run
* Accept the license
* Attempt to download a module, but you will most likely have to have it compile one.
* At the end of installation, allow the installer to run "nvidia-xconfig"
* echo "nvidia" >> /etc/modules
* modprobe nvidia
* /etc/init.d/gdm start
Northbridge (A)
<code><pre>
Which series NVidia driver???
GeForce2 MX 100/200 -> 96 series
GeForce4 MX -> 96 series
GeForce FX -> latest
GeForce 6000/7000/8000 -> latest
</pre></code>

==== ATI ====
* mkdir /root/video_driver
* cd /root/video_driver
* wget appropriate binary driver from ATI.com
* apt-get install dpkg-dev debhelper dkms build-essential cdbs fakeroot
* Temporary Workaround: libstc++5 no longer exists in terminal. Instead, go to http://packages.debian.org/stable/base/libstdc++5 and download what you need through the GUI.
* chmod +x ./ati*
* ./ati-driver-installer-8.443.1-x86.x86_64.run --buildpkg Ubuntu/<version> 
** You can replace <version> in the above with the codename for the version of Ubuntu you are running (gutsy, hardy, intrepid).

* dpkg -i fglrx-kernel-source_<version>.deb
* dpkg -i xorg-driver-fglrx_<version>.deb

* aticonfig --initial=dual-head --screen-layout=left
* echo "fglrx" >> /etc/modules

* reboot

==== CMUCL (Lisp) ====

===== 64-bit Arch =====
* apt-get install common-lisp-controller
* scp 10.20.3.8:/root/keep/cmucl* .
* dpkg --force-architecture -i ./cmucl*
=== Remove Compiz ===
* apt-get remove --purge compiz compiz-core compiz-fusion-plugins-extra compiz-fusion-plugins-main compiz-gnome compiz-plugins compizconfig-backend-gconf libcompizconfig0 libdecoration0 libx11-xcb1 mesa-utils

=== Printing (CUPS) ===
<code><pre>
Printer Info:

Name: Starkweather
Host: starkweather.cs.transy.edu
IP: 10.20.3.6
Model: HP Color Laserjet 4500N
Trays: 1

Name: Watson
Host: watson.cs.transy.edu
IP: 10.20.3.7
Model: Lexmark T642 (B&W)
Trays: 1
</pre></code>

==== starkweather ====

* apt-get install hplip libcupsys2-dev cupsys-bsd openssl libjpeg62-dev libsnmp-dev libtool libusb-dev libsane-dev sane-utils 
* hp-setup -i 10.20.3.6 
*Print Queue Name: starkweather
*Yes
Location: BSC 106
Additional Information: HP Color Laserjet 4500N

==== watson ====

* scp 10.20.3.8:/root/keep/Lexmark* .
* lpadmin -p watson -v socket://10.20.3.7:9100 -L "BSC 106" -D "Lexmark T642" -P ./Lexmark-T642-Postscript.ppd -E
* Set watson as default printer
** lpadmin -d watson

=== Hosts ===

* Add these entries to /etc/hosts
** Be sure to remove the original line in /etc/hosts for that host (no duplicates, please)
<code><pre>
# Servers
10.20.3.4       hollerith.cs.transy.edu hollerith
10.20.3.9       kay.cs.transy.edu       kay
10.20.3.8       babbage.cs.transy.edu   babbage

# Workstations
## SGI
10.20.3.3       calvin.cs.transy.edu    calvin
10.20.3.13      holberton.cs.transy.edu holberton
10.20.3.5       sammett.cs.transy.edu   sammett
10.20.3.30      morello.cs.transy.edu   morello
10.20.3.19      hoover.cs.transy.edu    hoover
10.20.3.26      forsythe.cs.transy.edu  forsythe

## Linux
10.20.3.29      bartik.cs.transy.edu    bartik
10.20.3.15      burks.cs.transy.edu     burks
10.20.3.14      clarke.cs.transy.edu    clarke
10.20.3.25      fox.cs.transy.edu       fox
10.20.3.23      garrett.cs.transy.edu   garrett
10.20.3.21      granville.cs.transy.edu granville
10.20.3.11      hopper.cs.transy.edu    hopper
10.20.3.12      lovelace.cs.transy.edu  lovelace
10.20.3.28      winters.cs.transy.edu   winters

## Mac
10.20.3.31      wozniak.cs.transy.edu   wozniak

# Color HP Laser Printer
10.20.3.6       starkweather.cs.transy.edu starkweather

# B&W Lexmark Laser Printer
10.20.3.7       watson.cs.transy.edu watson

</pre></code>

=== At Boot ===

* update-rc.d -f apache2 remove
* update-rc.d -f apparmor remove
* Edit /etc/rc.local - add echo "2147483648" > /proc/sys/kernel/shmmax

=== Remove Shutdown ===
* While logged in as root:
* mv /sbin/shutdown /sbin/shutoff
* The computer will now be unable to shut down except for the power button and calling the shutoff file like this:
* shutoff -h now

=== Log-in Customization ===

* add-apt-repository ppa:tualatrix/ppa
* apt-get update
* apt-get install ubuntu-tweak
* Through the GUI, Applications -> System Tools -> Ubuntu Tweak.
* Once the program opens, Go to Login Settings on the left hand scroll bar.
* Scroll to the bottom of the right window pane and unlock settings, then add picture. Tweak accepts 64x64 pixel PNGs and SVG images.

==Final Step==

* Remember to reboot once you're finished.
* Also remember to do /etc/.random, set up passwordless SSH and set up the old gFortran libraries. Instructions can be found in Babbage at /root/keep and its subdirectories (./FastLab and ./OldFortranLibs)