Différences

Ci-dessous, les différences entre deux révisions de la page.

--- ressources:linux:utilisation:base:installation:accueil [2024/07/09 08:16] – alainbatailly
+++ ressources:linux:utilisation:base:installation:accueil [2025/06/25 11:01] (Version actuelle) – alainbatailly
@@ Ligne 11: / Ligne 11: @@
   * [[#tab-divers|divers]]
 <pane id="tab-base">
+<callout type="info" icon="true">
+Remarques pour **Mint 22** :
+  * ''chromium-browser'' devient ''chromium''
+  * le paquet ''libwxbase3.0-dev'' semble avoir disparu
+</callout>
 Scripts principaux :
+  * **Mint 22** :
+    - [[ressources/linux/utilisation/base/installation/accueil#tab-os|installation du système d'exploitation]]
+    - <btn type="success" modal="cfg_reseau_22" size="xs"> script réseau</btn>
+    - <btn type="success" modal="cfg_logi_22" size="xs"> script logiciel</btn>
+    - <btn type="danger" modal="cfg_securite" size="xs"> script sécurité Poly</btn>
   * **Mint 21** / **Mint 21.1** :
     - [[ressources/linux/utilisation/base/installation/accueil#tab-os|installation du système d'exploitation]]
@@ Ligne 198: / Ligne 210: @@
 <code>
 # programmes de base
-apt-get -y install autofs portmap nis
+apt-get -y install autofs portmap
 # ajout du conteneur Singularity (Salome 2022)
@@ Ligne 226: / Ligne 238: @@
 # connexion au serveur
+sudo apt-get install -y autofs nfs-common realmd sssd sssd-tools libnss-sss libpam-sss adcli samba-common-bin oddjob oddjob-mkhomedir packagekit
+echo qw34er | realm join meca.polymtl.ca -U adjoiner
+systemctl stop sssd
+systemctl stop autofs
+cd /etc/sssd/
+curl -O http://132.207.39.173/mint/21/config/sssd.conf
 cd /etc
-printf "me2" > defaultdomain
+curl -O http://132.207.39.173/mint/21/config/idmapd.conf
-printf '#
+curl -O http://132.207.39.173/mint/21/config/nsswitch.conf
-# yp.conf       Configuration file for the ypbind process. You can define
+curl -O http://132.207.39.173/mint/21/config/nfs.conf
-#               NIS servers manually here if they can t be found by
+curl -O http://132.207.39.173/mint/21/config/krb5.conf
-#               broadcasting on the local net (which is the default).
-#
+systemctl enable sssd
-#               See the manual page of ypbind for the syntax of this file.
+systemctl start sssd
-#
+systemctl enable autofs
-# IMPORTANT:    For the "ypserver", use IP addresses, or make sure that
+systemctl start autofs
-#               the host is in /etc/hosts. This file is only interpreted
+systemctl start portmap
-#               once, and if DNS isn t reachable yet the ypserver cannot
+systemctl add-wants multi-user.target rpcbind.service
-#               be resolved and ypbind won t ever bind to the server.
-# ypserver ypserver.network.com
+echo "account    required     pam_access.so" >> /etc/pam.d/sshd
-domain me2 server 132.207.39.99
+echo "+ : root : ALL" >> /etc/security/access.conf
-#' >yp.conf
+echo "+ : (lava_vnl) : ALL" >> /etc/security/access.conf
-printf '# /etc/nsswitch.conf
+echo "- : ALL : ALL" >> /etc/security/access.conf
-#
-# Example configuration of GNU Name Service Switch functionality.
-# If you have the "glibc-doc-reference" and "info" packages installed, try:
-# "info libc "Name Service Switch"" for information about this file.
-passwd:         compat nis
+# pour éviter des ralentissements de connexion
-group:          compat nis
+systemctl mask systemd-logind.service
-shadow:         compat nis
-gshadow:        files
-hosts:          files mdns4_minimal [NOTFOUND=return] dns myhostname
+# correction bug authentification
-networks:       files
+systemctl disable nscd
+systemctl stop nscd
-protocols:      db files
+reboot
-services:       db files
-ethers:         db files
-rpc:            db files
-netgroup:       nis
-automount:      nis
-##' > nsswitch.conf
+</code>
-service autofs stop
+</modal>
-service ypbind stop
-service portmap stop
+<modal id="cfg_reseau_22">
-systemctl add-wants multi-user.target rpcbind.service
+<code>
-service portmap start
-service ypbind start
-service autofs start
+# acces root ssh
-systemctl enable ypbind
+echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
+echo 'X11Forwarding yes' >> /etc/ssh/sshd_config
+service ssh restart
+# interface de connexion - écran d'accueil
+cd /etc/lightdm/lightdm.conf.d/
+printf '[SeatDefaults]
+user-session=cinnamon
+greeter-show-manual-login = true
+greeter-hide-users = true
+allow-guest = false
+##' > 70-linuxmint.conf
+# connexion au serveur
+export DEBIAN_FRONTEND=noninteractive
+apt -y install nfs-common realmd sssd sssd-ad sssd-tools libnss-sss libpam-sss adcli samba-common-bin oddjob oddjob-mkhomedir packagekit autofs openssh-server krb5-config nfs-common libsss-sudo krb5-user
+echo qw34er | realm join meca.polymtl.ca -U adjoiner
+systemctl stop sssd
+systemctl stop autofs
+#On copie le bon fichier SSSD
+cd /etc/sssd
+/bin/cp /etc/sssd/sssd.conf /etc/sssd/sssd.conf.old
+/bin/rm sssd.conf
+wget  'http://132.207.39.173/mint/22/config/sssd.conf'
+chmod 600 sssd.conf
+#On va chercher les bons fichier
+cd /etc
+/bin/cp /etc/nsswitch.conf /etc/nsswitch.conf.old
+/bin/rm nsswitch.conf
+wget  'http://132.207.39.173/mint/22/config/nsswitch.conf'
+chmod 644 nsswitch.conf
+cd /etc
+/bin/cp /etc/krb5.conf /etc/krb5.conf.old
+/bin/rm krb5.conf
+wget  'http://132.207.39.173/mint/22/config/krb5.conf'
+chmod 644 nsswitch.conf
+cd /etc
+/bin/cp /etc/idmapd.conf /etc/idmapd.conf.old
+/bin/rm idmapd.conf
+wget  'http://132.207.39.173/mint/22/config/idmapd.conf'
+chmod 644 idmapd.conf
+systemctl enable sssd
+systemctl start sssd
 systemctl enable autofs
+systemctl start autofs
-# pour éviter des ralentissements de connexion
-systemctl mask systemd-logind.service
-reboot
+echo "account    required     pam_access.so" >> /etc/pam.d/sshd
+echo "+ : root : ALL" >> /etc/security/access.conf
+echo "+ : (lava_vnl) : ALL" >> /etc/security/access.conf
+echo "- : ALL : ALL" >> /etc/security/access.conf
+# correction bug authentification
+systemctl disable nscd
+systemctl stop nscd
+systemctl restart autofs
+apt-get -y install xrdp net-tools
+systemctl enable xrdp
+usermod -a -G ssl-cert xrdp
+reboot
 </code>
 </modal>
@@ Ligne 303: / Ligne 373: @@
 # installation des logiciels requis
-apt-get -y install gedit geany geany-plugin* meld fail2ban cifs-utils nfs-common libwx-perl libwxbase3.0-dev libboost-dev libuser apache2 fail2ban htop filezilla rsync members nfs-common sshpass git gfortran gcc g++ libreoffice imagemagick emacs gummi liblapack-dev libarpack2-dev texlive-full inkscape gitg thunar giggle lyx csh nemo sshpass ssh clusterssh gitk blender kwrite gimp guake guake-indicator evince gedit libboost-dev libblas-dev liblapack-dev libboost-dev libblas-dev liblapack-dev okular rdesktop biber screen jabref myspell-fr-gut pdfgrep pdftk-java texstudio pdftk xournal freerdp2-x11 gscan2pdf gnome-terminal cheese
+apt-get -y install gedit geany geany-plugin* meld fail2ban cifs-utils nfs-common libwx-perl libwxbase3.0-dev libboost-dev libuser apache2 fail2ban htop filezilla rsync members nfs-common sshpass git gfortran gcc g++ libreoffice imagemagick emacs gummi liblapack-dev libarpack2-dev texlive-full inkscape gitg thunar giggle lyx csh nemo sshpass ssh clusterssh gitk blender kwrite gimp guake guake-indicator evince gedit libboost-dev libblas-dev liblapack-dev libboost-dev libblas-dev liblapack-dev okular rdesktop biber screen jabref myspell-fr-gut pdfgrep pdftk-java texstudio pdftk xournal freerdp2-x11 gscan2pdf gnome-terminal cheese chromium-browser
 # thèmes Geany
@@ Ligne 317: / Ligne 387: @@
 # suppression de Firefox
 apt remove firefox
+# suppression du keyring
+apt-get remove gnome-keyring
+apt-get update
+apt-get -y upgrade
+apt-get -y dist-upgrade
+reboot
+</code>
+</modal>
+<modal id="cfg_logi_22">
+<code>
+export DEBIAN_FRONTEND=noninteractive
+# ajout du conteneur Singularity (Salome 2022)
+wget https://github.com/sylabs/singularity/releases/download/v3.9.7/singularity-ce_3.9.7-bionic_amd64.deb
+sudo apt install ./singularity-ce_3.9.7-bionic_amd64.deb
+# Fix Matlab
+apt-get -y install libncursesw6 libncurses6
+ln -s /usr/lib/x86_64-linux-gnu/libncursesw.so.6.4 /usr/lib/x86_64-linux-gnu/libncurses.so.5
+apt-get -y install gedit meld cifs-utils nfs-common libwx-perl libboost-dev libuser apache2 fail2ban htop filezilla rsync members nfs-common sshpass git gfortran gcc g++ libreoffice imagemagick emacs gummi liblapack-dev libarpack2-dev texlive-full inkscape gitg thunar giggle lyx csh nemo sshpass ssh clusterssh gitk blender kwrite gimp guake guake-indicator evince gedit libboost-dev libblas-dev liblapack-dev libboost-dev libblas-dev liblapack-dev okular rdesktop biber screen jabref myspell-fr-gut pdfgrep pdftk-java texstudio pdftk xournal freerdp2-x11 gscan2pdf gnome-terminal cheese chromium geany libxcb-cursor-dev
+apt-get -y install curl
+curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
+echo "deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main"|sudo tee /etc/apt/sources.list.d/brave-browser-release.list
+apt update
+apt-get -y install brave-browser
+apt-get -y remove firefox
+# suppression du keyring
+apt-get remove gnome-keyring
 apt-get update
 apt-get -y upgrade
+apt-get -y dist-upgrade
 reboot
 </code>