Commit e5c5cc18 authored by Clark's avatar Clark
Browse files

Removing stale workstation stuff

parent a9c99108
......@@ -61,104 +61,7 @@ Then flash the ISO to the USB.
sudo dd if=Qubes-R4.0.3-x86_64.iso of=/dev/sda status=progress
#+END_SRC
* Debian 10 Images
Unfortunately, more often than not, I've found it necessary to use the unofficial version including support for non-free firmware for my machines.
[[https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/][Current and official Debian ISO files]].
[[https://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/current-live/amd64/iso-hybrid/][Current Debian ISO files including non-free firmware]].
I always roll with the *xfce* images. Install Debian 10 to bare metal using a flashed USB drive. Assuming an attached flash USB drive is identified as =/dev/sda= (verify using =lsblk=), flash the ISO to the USB drive using the following.
#+begin_src sh
# First I format the disk and ensure all bits are zero
sudo dd if=/dev/zero of=/dev/sda status=progress
sudo dd if=~/debian-live-10.2.0-amd64-xfce+nonfree.iso of=/dev/sda status=progress
#+end_src
Insert the USB, then boot from the flashed drive and proceed with installation. My default username is =user=.
* Sudo User Account
Login as =user=. Then get *root*, once and nevermore, using =su -=. Grant sudo rights to =user=, then login again.
#+BEGIN_SRC sh
usermod -aG sudo user && \
exit
#+END_SRC
Logout and in to receive sudo privileges on the =user= account.
#+BEGIN_SRC sh
xfce4-session-logout -l
#+END_SRC
* TODO Firmware updates
My Lenovo Thinkpad requires some non-free firmware which, unfortunately, I need to enable for full functionality.
** TODO Graphics card
The graphics card is an NVIDIA Quadro M2200, which supports multiple monitors with the proper firmware. Download and install the latest driver (version 440.82 as of June 2020). Use [[https://www.nvidia.com/Download/index.aspx][this link]] to search for the latest driver or just install an older version and update it using =apt= (is this true????????).
#+BEGIN_SRC sh
wget https://www.nvidia.com/content/DriverDownload-March2009/confirmation.php?url=/XFree86/Linux-x86_64/440.82/NVIDIA-Linux-x86_64-440.82.run
...
#+END_SRC
See here: https://www.linuxquestions.org/questions/linux-laptop-and-netbook-25/debian-10-buster-on-thinkpad-p51-nvidia-quadro-m2200-4175663184/
** TODO WiFi
See here: https://www.linuxquestions.org/questions/linux-laptop-and-netbook-25/debian-10-buster-on-thinkpad-p51-nvidia-quadro-m2200-4175663184/
** TODO +?
See here: https://www.linuxquestions.org/questions/linux-laptop-and-netbook-25/debian-10-buster-on-thinkpad-p51-nvidia-quadro-m2200-4175663184/
* TODO Tor Package Management
For privacy, I use Debian's onion services to download packages from official repositories. First though, this requires installing =tor= and =apt-transport-tor=.
First run =sudo test= to escalate privileges.
#+begin_src sh
sudo apt update && \
sudo apt upgrade -y && \
sudo apt install -y tor apt-transport-tor && \
sudo rm /etc/apt/sources.list && \
sudo bash -c 'cat <<EOT >> /etc/apt/sources.list
# Debian 10, Buster!
# Repos over TOR:
deb tor+http://vwakviie2ienjx6t.onion/debian buster main
deb-src tor+http://vwakviie2ienjx6t.onion/debian buster main
deb tor+http://sgvtcaew4bxjd7ln.onion/debian-security buster/updates main
deb-src tor+http://sgvtcaew4bxjd7ln.onion/debian-security buster/updates main
deb tor+http://vwakviie2ienjx6t.onion/debian buster-updates main
deb-src tor+http://vwakviie2ienjx6t.onion/debian buster-updates main
EOT' && \
sudo apt update
#+end_src
Thereafter, I download a few based utilities over tor and specify a time-zone.
#+BEGIN_SRC sh
sudo apt install -y net-tools curl vim unzip apt-transport-https software-properties-common autoconf libtool \
lynis flashrom xscreensaver yubikey-manager yubikey-personalization-gui keepassxc nextcloud-desktop xclip \
dnsutils whois apache2-utils && \
sudo timedatectl set-timezone America/Los_Angeles
#+END_SRC
* Enable Firewalls
* TODO Enable Firewalls
Install and enable firealls.
......@@ -167,7 +70,7 @@ sudo apt install -y ufw && \
sudo ufw --force enable
#+end_src
* Enforce VPN Routing
* TODO Enforce VPN Routing
This requires some kind of VPN access. I'm using a low cost VPN provider, PIA. After signing up, the provide authentication credentials, what I'm using below as =vpn_username= and =vpn_password=.
......@@ -203,7 +106,7 @@ Test the VPN service initializes using =sudo openvpn --config /etc/openvpn/local
Verify the service status using =sudo systemctl status openvpn@local_profile= and checking one's public IP using =wget --secure-protocol=PFS --https-only -qO- checkip.dyndns.org=.
* Setup SSH
* TODO Setup SSH
Create an ssh-key, and update config.
......@@ -215,7 +118,7 @@ LogLevel=VERBOSE
EOT'
#+END_SRC
* Wazuh Agent - Endpoint Security
* TODO Wazuh Agent - Endpoint Security
Wazuh is an HIDS system, which is a fork of OSSEC built on the ELK stack. I'll install a Wazuh agent that I use to send data to a Wazuh server deployed elsewhere (e.g., on =10.0.0.2=).
......@@ -229,7 +132,7 @@ sudo WAZUH_MANAGER="192.168.1.2" apt install wazuh-agent -y
For addition steps registering agents to the Wazuh manager, see [[https://documentation.wazuh.com/3.9/user-manual/registering/index.html][the Wazuh guide]].
* Harden Firefox
* TODO Harden Firefox
Go through all the about:preferences particularly the /search/ and /privacy & security/ settings.
......@@ -241,7 +144,7 @@ Add and enable the following extensions, in the following order:
5) [[https://addons.mozilla.org/en-US/firefox/addon/pay-by-privacy-com/][Pay by Privacy.com]]
6) [[https://github.com/marcelklehr/floccus][Floccus]]
* Git
* TODO Git
Live and die by Git. I'm using the handle =sentry=.
......@@ -295,19 +198,6 @@ wget https://github.com/h3poteto/whalebird-desktop/releases/download/4.1.0/Whale
sudo dpkg -i Whalebird-4.1.0-linux-x64.deb
#+END_SRC
* TODO Virtual Manager
* TODO VMware Workstation Pro
This requires virtualization enabled in the laptop's BIOS settings.
#+BEGIN_SRC sh
sudo apt install -y gcc build-essential && \
wget --secure-protocol=PFS --https-only -O /tmp/vmware.bin https://www.vmware.com/go/getworkstation-linux && \
sudo bash /tmp/vmware.bin
#+END_SRC
After a few minutes to download the files, a GUI will popup to complete the installation.
* Python 3
Install various libraries for Python.
......@@ -349,18 +239,6 @@ sudo apt install radare2 && \
r2pm init && \
r2pm -i rarop
#+END_SRC
* Bluetooth
I use =blueman=, as specified in the [[https://wiki.debian.org/BluetoothUser/a2dp][Debian Bluetooth setup guide]].
#+begin_src sh
sudo apt install -y pulseaudio pulseaudio-module-bluetooth pavucontrol bluez-firmware && \
sudo sed -i '/ExecStart=\/usr\/lib\/bluetooth\/bluetoothd/c\ExecStart=\/usr\/lib\/bluetooth\/bluetoothd --noplugin=sap' /etc/systemd/system/bluetooth.target.wants/bluetooth.service && \
sudo systemctl daemon-reload && \
sudo systemctl restart bluetooth && \
sudo killall pulseaudio && \
sudo apt install -y blueman
#+end_src
* TODO Cell Phone Utilities
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment