Installation et configuration d'un ordinateur

# programmes de base
apt-get -y install autofs portmap nis

# ajout du conteneur Singularity (Salome 2022)
wget https://github.com/sylabs/singularity/releases/download/v3.9.7/singularity-ce_3.9.7-bionic_amd64.deb
sudo apt install ./singularity-ce_3.9.7-bionic_amd64.deb

# correctif pour Matlab
apt-get -y install libncurses5

# correctifs pour les codes du laboratoire
sudo ln -s /usr/lib/x86_64-linux-gnu/libffi.so.7 /usr/lib/x86_64-linux-gnu/libffi.so.6

# acces root ssh
echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
echo 'X11Forwarding yes' >> /etc/ssh/sshd_config
service ssh restart

# interface de connexion - écran d'accueil
cd /etc/lightdm/lightdm.conf.d/
printf '[SeatDefaults]
user-session=cinnamon
greeter-show-manual-login = true
greeter-hide-users = true
allow-guest = false

##' > 70-linuxmint.conf

# connexion au serveur
cd /etc
printf "me2" > defaultdomain
printf '#
# yp.conf       Configuration file for the ypbind process. You can define
#               NIS servers manually here if they can t be found by
#               broadcasting on the local net (which is the default).
#
#               See the manual page of ypbind for the syntax of this file.
#
# IMPORTANT:    For the "ypserver", use IP addresses, or make sure that
#               the host is in /etc/hosts. This file is only interpreted
#               once, and if DNS isn t reachable yet the ypserver cannot
#               be resolved and ypbind won t ever bind to the server.

# ypserver ypserver.network.com
domain me2 server 132.207.39.99
#' >yp.conf
printf '# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the "glibc-doc-reference" and "info" packages installed, try:
# "info libc "Name Service Switch"" for information about this file.

passwd:         compat nis
group:          compat nis
shadow:         compat nis
gshadow:        files

hosts:          files mdns4_minimal [NOTFOUND=return] dns myhostname
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis
automount:      nis

##' > nsswitch.conf
service autofs stop
service ypbind stop
service portmap stop
systemctl add-wants multi-user.target rpcbind.service
service portmap start
service ypbind start
service autofs start
systemctl enable ypbind
systemctl enable autofs

# pour éviter des ralentissements de connexion
systemctl mask systemd-logind.service

reboot

# activation de xrdp
apt-get install xrdp net-tools
systemctl enable xrdp

# interface de connexion - écran d'accueil
cd /etc/lightdm/lightdm.conf.d/
printf '[SeatDefaults]
user-session=cinnamon
greeter-show-manual-login = true
greeter-hide-users = true
allow-guest = false

##' > 70-linuxmint.conf

# installation des logiciels requis
apt-get -y install gedit geany geany-plugin* meld fail2ban cifs-utils nfs-common libwx-perl libwxbase3.0-dev libboost-dev libuser apache2 fail2ban htop filezilla rsync members nfs-common sshpass git gfortran gcc g++ libreoffice imagemagick emacs gummi liblapack-dev libarpack2-dev texlive-full inkscape gitg thunar giggle lyx csh nemo sshpass ssh clusterssh gitk blender kwrite gimp guake guake-indicator evince gedit libboost-dev libblas-dev liblapack-dev libboost-dev libblas-dev liblapack-dev okular rdesktop biber screen jabref myspell-fr-gut pdfgrep pdftk-java texstudio pdftk xournal freerdp2-x11 gscan2pdf gnome-terminal cheese

# thèmes Geany
cp /apps/hephaistos/logiciels/linux/geany/*.conf /usr/share/geany/colorschemes/;chmod u=rw /usr/share/geany/colorschemes/*.conf;chmod g=r /usr/share/geany/colorschemes/*.conf;chmod o=r /usr/share/geany/colorschemes/*.conf;

#Brave
apt install curl
curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main"|sudo tee /etc/apt/sources.list.d/brave-browser-release.list
apt update
apt install brave-browser

# suppression de Firefox
apt remove firefox

apt-get update
apt-get -y upgrade
reboot

cd /tmp
wget http://elpatcho.meca.polymtl.ca/ubuntu/2204LTS/config/falcon-sensor_7.06.0-16108_amd64.deb
apt-get install ./falcon-sensor_7.06.0-16108_amd64.deb
/opt/CrowdStrike/falconctl -s -f --cid=86AF76FDD30342A4B52C8AA0B3E3C693-A2

cd /tmp
wget http://elpatcho.meca.polymtl.ca/Tanium/linux-client-bundle.zip && unzip linux-client-bundle.zip
cd linux-client-bundle && chmod u+x install.sh
./install.sh
cd ..
/bin/rm -R /tmp/linux-client-bundle
/bin/rm -R /tmp/linux-client-bundle.zip

#Fix RDP Mint 21.1
sed -i '/test -x \/etc\/X11\/Xsession && exec \/etc\/X11\/Xsession/i export
$(dbus-launch)' /etc/xrdp/startwm.sh
systemctl restart xrdp

#Fix Webcam Logitech Mint 21
echo 'SUBSYSTEM=="video4linux", ATTR{name}=="HD Pro Webcam C920",
MODE="0666"' | sudo tee /etc/udev/rules.d/99-perm.rules > /dev/null
udevadm control --reload-rules && udevadm trigger

# gestion du son
# apt-install alsa-base
# alsa force-reload
apt-get install pavucontrol
# Define the text to be added
text="[Unit]\nDescription=PulseAudio system server\n# DO NOT ADD ConditionUser=!root\n\n[Service]\nType=notify\nExecStart=pulseaudio --daemonize=no --system --realtime --log-target=journal\n#Exec=pulseaudio --daemonize=no --system --realtime --log-target=journal\nRestart=on-failure\n\n[Install]\nWantedBy=multi-user.target\n"
# Add the text to the file
echo -e "$text" | sudo tee -a /etc/systemd/system/pulseaudio.service > /dev/null
sed -i '/^load-module module-native-protocol-unix/ s/$/ auth-anonymous=1/' /etc/pulse/system.pa
systemctl --system enable --now pulseaudio.service
systemctl --system restart pulseaudio.service

# correctif singularity (requis pour PCs Mint 21 avec pilotes nvidia installés)
sed -i -e 's/libGLX.so/#libGLX.so/g' /etc/singularity/nvliblist.conf

cd /tmp;
wget https://github.com/sylabs/singularity/releases/download/v3.9.7/singularity-ce_3.9.7-bionic_amd64.deb;
sudo apt install ./singularity-ce_3.9.7-bionic_amd64.deb