Différences

Ci-dessous, les différences entre deux révisions de la page.

--- ressources:linux:utilisation:base:installation:accueil [2024/07/03 13:33] – [Fonctionnalités de base] alainbatailly
+++ ressources:linux:utilisation:base:installation:accueil [2025/06/25 11:01] (Version actuelle) – alainbatailly
@@ Ligne 2: / Ligne 2: @@
 Cette page décrit la procédure d'installation et de configuration d'un ordinateur du laboratoire (ou de votre ordinateur personnel pour disposer de la même configuration que celle des ordinateurs du laboratoire). L'ancienne version de cette page est accessible [[.:archives:accueil|ici]].
+<tabs>
+  * [[#tab-base|base]]
+  * [[#tab-os|système d'exploitation]]
+  * [[#tab-reseau|configuration réseau]]
+  * [[#tab-logi|configuration logicielle]]
+  * [[#tab-divers|divers]]
+<pane id="tab-base">
+<callout type="info" icon="true">
+Remarques pour **Mint 22** :
+  * ''chromium-browser'' devient ''chromium''
+  * le paquet ''libwxbase3.0-dev'' semble avoir disparu
+</callout>
 Scripts principaux :
+  * **Mint 22** :
+    - [[ressources/linux/utilisation/base/installation/accueil#tab-os|installation du système d'exploitation]]
+    - <btn type="success" modal="cfg_reseau_22" size="xs"> script réseau</btn>
+    - <btn type="success" modal="cfg_logi_22" size="xs"> script logiciel</btn>
+    - <btn type="danger" modal="cfg_securite" size="xs"> script sécurité Poly</btn>
   * **Mint 21** / **Mint 21.1** :
-    * [[ressources/linux/utilisation/base/installation/accueil#installation_du_systeme_d_exploitation|installation du système d'exploitation]]
+    - [[ressources/linux/utilisation/base/installation/accueil#tab-os|installation du système d'exploitation]]
-    * <btn type="success" modal="cfg_reseau" size="xs"> script réseau</btn> [[ressources/linux/utilisation/base/installation/accueil#configuration_reseau|configuration réseau]] (ordinateurs du laboratoire uniquement)
+    - <btn type="success" modal="cfg_reseau" size="xs"> script réseau</btn> [[ressources/linux/utilisation/base/installation/accueil#tab-reseau|configuration réseau]] (ordinateurs du laboratoire uniquement)
-    * <btn type="success" modal="cfg_logi" size="xs"> script logiciel</btn> [[ressources/linux/utilisation/base/installation/accueil#configuration_logicielle|configuration logicielle]]
+    - <btn type="success" modal="cfg_logi" size="xs"> script logiciel</btn> [[ressources/linux/utilisation/base/installation/accueil#tab-logi|configuration logicielle]]
-    * <btn type="danger" modal="cfg_securite" size="xs"> script sécurité Poly</btn>
+    - <btn type="danger" modal="cfg_securite" size="xs"> script sécurité Poly</btn>
 Scripts correctifs / supplémentaires :
@@ Ligne 20: / Ligne 41: @@
-<tabs>
-  * [[#tab-base|base]]
-  * [[#tab-os|système d'exploitation]]
-  * [[#tab-reseau|configuration réseau]]
-  * [[#tab-logi|configuration logicielle]]
-  * [[#tab-divers|divers]]
-<pane id="tab-base">
 ===== Fonctionnalités de base =====
 Liste des fonctionnalités de base à valider avant la mise en opération d'une nouvelle version de Linux Mint :
@@ Ligne 200: / Ligne 210: @@
 <code>
 # programmes de base
-apt-get -y install autofs portmap nis
+apt-get -y install autofs portmap
 # ajout du conteneur Singularity (Salome 2022)
@@ Ligne 228: / Ligne 238: @@
 # connexion au serveur
+sudo apt-get install -y autofs nfs-common realmd sssd sssd-tools libnss-sss libpam-sss adcli samba-common-bin oddjob oddjob-mkhomedir packagekit
+echo qw34er | realm join meca.polymtl.ca -U adjoiner
+systemctl stop sssd
+systemctl stop autofs
+cd /etc/sssd/
+curl -O http://132.207.39.173/mint/21/config/sssd.conf
 cd /etc
-printf "me2" > defaultdomain
+curl -O http://132.207.39.173/mint/21/config/idmapd.conf
-printf '#
+curl -O http://132.207.39.173/mint/21/config/nsswitch.conf
-# yp.conf       Configuration file for the ypbind process. You can define
+curl -O http://132.207.39.173/mint/21/config/nfs.conf
-#               NIS servers manually here if they can t be found by
+curl -O http://132.207.39.173/mint/21/config/krb5.conf
-#               broadcasting on the local net (which is the default).
-#
+systemctl enable sssd
-#               See the manual page of ypbind for the syntax of this file.
+systemctl start sssd
-#
+systemctl enable autofs
-# IMPORTANT:    For the "ypserver", use IP addresses, or make sure that
+systemctl start autofs
-#               the host is in /etc/hosts. This file is only interpreted
+systemctl start portmap
-#               once, and if DNS isn t reachable yet the ypserver cannot
+systemctl add-wants multi-user.target rpcbind.service
-#               be resolved and ypbind won t ever bind to the server.
-# ypserver ypserver.network.com
+echo "account    required     pam_access.so" >> /etc/pam.d/sshd
-domain me2 server 132.207.39.99
+echo "+ : root : ALL" >> /etc/security/access.conf
-#' >yp.conf
+echo "+ : (lava_vnl) : ALL" >> /etc/security/access.conf
-printf '# /etc/nsswitch.conf
+echo "- : ALL : ALL" >> /etc/security/access.conf
-#
-# Example configuration of GNU Name Service Switch functionality.
-# If you have the "glibc-doc-reference" and "info" packages installed, try:
-# "info libc "Name Service Switch"" for information about this file.
-passwd:         compat nis
+# pour éviter des ralentissements de connexion
-group:          compat nis
+systemctl mask systemd-logind.service
-shadow:         compat nis
-gshadow:        files
-hosts:          files mdns4_minimal [NOTFOUND=return] dns myhostname
+# correction bug authentification
-networks:       files
+systemctl disable nscd
+systemctl stop nscd
-protocols:      db files
+reboot
-services:       db files
-ethers:         db files
-rpc:            db files
-netgroup:       nis
-automount:      nis
-##' > nsswitch.conf
+</code>
-service autofs stop
+</modal>
-service ypbind stop
-service portmap stop
+<modal id="cfg_reseau_22">
-systemctl add-wants multi-user.target rpcbind.service
+<code>
-service portmap start
-service ypbind start
-service autofs start
+# acces root ssh
-systemctl enable ypbind
+echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
+echo 'X11Forwarding yes' >> /etc/ssh/sshd_config
+service ssh restart
+# interface de connexion - écran d'accueil
+cd /etc/lightdm/lightdm.conf.d/
+printf '[SeatDefaults]
+user-session=cinnamon
+greeter-show-manual-login = true
+greeter-hide-users = true
+allow-guest = false
+##' > 70-linuxmint.conf
+# connexion au serveur
+export DEBIAN_FRONTEND=noninteractive
+apt -y install nfs-common realmd sssd sssd-ad sssd-tools libnss-sss libpam-sss adcli samba-common-bin oddjob oddjob-mkhomedir packagekit autofs openssh-server krb5-config nfs-common libsss-sudo krb5-user
+echo qw34er | realm join meca.polymtl.ca -U adjoiner
+systemctl stop sssd
+systemctl stop autofs
+#On copie le bon fichier SSSD
+cd /etc/sssd
+/bin/cp /etc/sssd/sssd.conf /etc/sssd/sssd.conf.old
+/bin/rm sssd.conf
+wget  'http://132.207.39.173/mint/22/config/sssd.conf'
+chmod 600 sssd.conf
+#On va chercher les bons fichier
+cd /etc
+/bin/cp /etc/nsswitch.conf /etc/nsswitch.conf.old
+/bin/rm nsswitch.conf
+wget  'http://132.207.39.173/mint/22/config/nsswitch.conf'
+chmod 644 nsswitch.conf
+cd /etc
+/bin/cp /etc/krb5.conf /etc/krb5.conf.old
+/bin/rm krb5.conf
+wget  'http://132.207.39.173/mint/22/config/krb5.conf'
+chmod 644 nsswitch.conf
+cd /etc
+/bin/cp /etc/idmapd.conf /etc/idmapd.conf.old
+/bin/rm idmapd.conf
+wget  'http://132.207.39.173/mint/22/config/idmapd.conf'
+chmod 644 idmapd.conf
+systemctl enable sssd
+systemctl start sssd
 systemctl enable autofs
+systemctl start autofs
-# pour éviter des ralentissements de connexion
-systemctl mask systemd-logind.service
-reboot
+echo "account    required     pam_access.so" >> /etc/pam.d/sshd
+echo "+ : root : ALL" >> /etc/security/access.conf
+echo "+ : (lava_vnl) : ALL" >> /etc/security/access.conf
+echo "- : ALL : ALL" >> /etc/security/access.conf
+# correction bug authentification
+systemctl disable nscd
+systemctl stop nscd
+systemctl restart autofs
+apt-get -y install xrdp net-tools
+systemctl enable xrdp
+usermod -a -G ssl-cert xrdp
+reboot
 </code>
 </modal>
@@ Ligne 305: / Ligne 373: @@
 # installation des logiciels requis
-apt-get -y install gedit geany geany-plugin* meld fail2ban cifs-utils nfs-common libwx-perl libwxbase3.0-dev libboost-dev libuser apache2 fail2ban htop filezilla rsync members nfs-common sshpass git gfortran gcc g++ libreoffice imagemagick emacs gummi liblapack-dev libarpack2-dev texlive-full inkscape gitg thunar giggle lyx csh nemo sshpass ssh clusterssh gitk blender kwrite gimp guake guake-indicator evince gedit libboost-dev libblas-dev liblapack-dev libboost-dev libblas-dev liblapack-dev okular rdesktop biber screen jabref myspell-fr-gut pdfgrep pdftk-java texstudio pdftk xournal freerdp2-x11 gscan2pdf gnome-terminal cheese
+apt-get -y install gedit geany geany-plugin* meld fail2ban cifs-utils nfs-common libwx-perl libwxbase3.0-dev libboost-dev libuser apache2 fail2ban htop filezilla rsync members nfs-common sshpass git gfortran gcc g++ libreoffice imagemagick emacs gummi liblapack-dev libarpack2-dev texlive-full inkscape gitg thunar giggle lyx csh nemo sshpass ssh clusterssh gitk blender kwrite gimp guake guake-indicator evince gedit libboost-dev libblas-dev liblapack-dev libboost-dev libblas-dev liblapack-dev okular rdesktop biber screen jabref myspell-fr-gut pdfgrep pdftk-java texstudio pdftk xournal freerdp2-x11 gscan2pdf gnome-terminal cheese chromium-browser
 # thèmes Geany
@@ Ligne 319: / Ligne 387: @@
 # suppression de Firefox
 apt remove firefox
+# suppression du keyring
+apt-get remove gnome-keyring
+apt-get update
+apt-get -y upgrade
+apt-get -y dist-upgrade
+reboot
+</code>
+</modal>
+<modal id="cfg_logi_22">
+<code>
+export DEBIAN_FRONTEND=noninteractive
+# ajout du conteneur Singularity (Salome 2022)
+wget https://github.com/sylabs/singularity/releases/download/v3.9.7/singularity-ce_3.9.7-bionic_amd64.deb
+sudo apt install ./singularity-ce_3.9.7-bionic_amd64.deb
+# Fix Matlab
+apt-get -y install libncursesw6 libncurses6
+ln -s /usr/lib/x86_64-linux-gnu/libncursesw.so.6.4 /usr/lib/x86_64-linux-gnu/libncurses.so.5
+apt-get -y install gedit meld cifs-utils nfs-common libwx-perl libboost-dev libuser apache2 fail2ban htop filezilla rsync members nfs-common sshpass git gfortran gcc g++ libreoffice imagemagick emacs gummi liblapack-dev libarpack2-dev texlive-full inkscape gitg thunar giggle lyx csh nemo sshpass ssh clusterssh gitk blender kwrite gimp guake guake-indicator evince gedit libboost-dev libblas-dev liblapack-dev libboost-dev libblas-dev liblapack-dev okular rdesktop biber screen jabref myspell-fr-gut pdfgrep pdftk-java texstudio pdftk xournal freerdp2-x11 gscan2pdf gnome-terminal cheese chromium geany libxcb-cursor-dev
+apt-get -y install curl
+curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
+echo "deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main"|sudo tee /etc/apt/sources.list.d/brave-browser-release.list
+apt update
+apt-get -y install brave-browser
+apt-get -y remove firefox
+# suppression du keyring
+apt-get remove gnome-keyring
 apt-get update
 apt-get -y upgrade
+apt-get -y dist-upgrade
 reboot
 </code>
@@ Ligne 379: / Ligne 484: @@
 <modal id="cfg_opti">
 <code>
+# installation singularity
+cd /tmp;
+wget https://github.com/sylabs/singularity/releases/download/v3.9.7/singularity-ce_3.9.7-bionic_amd64.deb;
+sudo apt install ./singularity-ce_3.9.7-bionic_amd64.deb
 # correctif singularity (requis pour PCs Mint 21 avec pilotes nvidia installés)
 sed -i -e 's/libGLX.so/#libGLX.so/g' /etc/singularity/nvliblist.conf