/*@jsxRuntime automatic @jsxImportSource react*/ const {Fragment: _Fragment, jsx: _jsx, jsxs: _jsxs} = arguments[0]; const {useMDXComponents: _provideComponents} = arguments[0]; function _createMdxContent(props) { const _components = Object.assign({ h1: "h1", a: "a", span: "span", p: "p", h2: "h2", h3: "h3", pre: "pre", code: "code", ul: "ul", li: "li" }, _provideComponents(), props.components); return _jsxs(_Fragment, { children: [_jsxs(_components.h1, { id: "new-virtual-machine-server-setup-checklist", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#new-virtual-machine-server-setup-checklist", children: _jsx(_components.span, { className: "icon icon-link" }) }), "New Virtual Machine Server Setup Checklist"] }), "\n", _jsx(_components.p, { children: "I use a lot of checklists -- here is one of mine for setting up a new Linux virtual machine server. The commands are written for Ubuntu/Debian-based systems." }), "\n", _jsxs(_components.h2, { id: "system-updates", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#system-updates", children: _jsx(_components.span, { className: "icon icon-link" }) }), "System Updates"] }), "\n", _jsxs(_components.h3, { id: "update-package-lists-and-upgrade-system", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#update-package-lists-and-upgrade-system", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Update Package Lists and Upgrade System"] }), "\n", _jsx(_components.p, { children: "First, let's update the package lists and upgrade existing packages:" }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "apt" }), " update\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "apt" }), " upgrade\n"] }) }), "\n", _jsxs(_components.ul, { children: ["\n", _jsxs(_components.li, { children: [_jsx(_components.code, { children: "apt update" }), ": Updates the package list/index files from repositories"] }), "\n", _jsxs(_components.li, { children: [_jsx(_components.code, { children: "apt upgrade" }), ": Actually upgrades the installed packages to their latest versions"] }), "\n"] }), "\n", _jsxs(_components.h2, { id: "docker-installation", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#docker-installation", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Docker Installation"] }), "\n", _jsx(_components.p, { children: "Follow these steps to install Docker properly on Ubuntu:" }), "\n", _jsxs(_components.h3, { id: "1-remove-conflicting-packages", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#1-remove-conflicting-packages", children: _jsx(_components.span, { className: "icon icon-link" }) }), "1. Remove Conflicting Packages"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token keyword", children: "for" }), " ", _jsx(_components.span, { className: "token for-or-select variable", children: "pkg" }), " ", _jsx(_components.span, { className: "token keyword", children: "in" }), " docker.io docker-doc ", _jsx(_components.span, { className: "token function", children: "docker-compose" }), " docker-compose-v2 podman-docker containerd runc", _jsx(_components.span, { className: "token punctuation", children: ";" }), " ", _jsx(_components.span, { className: "token keyword", children: "do" }), " ", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "apt-get" }), " remove ", _jsx(_components.span, { className: "token variable", children: "$pkg" }), _jsx(_components.span, { className: "token punctuation", children: ";" }), " ", _jsx(_components.span, { className: "token keyword", children: "done" }), "\n"] }) }), "\n", _jsxs(_components.h3, { id: "2-set-up-docker-repository", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#2-set-up-docker-repository", children: _jsx(_components.span, { className: "icon icon-link" }) }), "2. Set up Docker Repository"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token comment", children: "# Add Docker's official GPG key:" }), "\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "apt-get" }), " update\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "apt-get" }), " ", _jsx(_components.span, { className: "token function", children: "install" }), " ca-certificates ", _jsx(_components.span, { className: "token function", children: "curl" }), "\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "install" }), " -m 0755 -d /etc/apt/keyrings\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "curl" }), " -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "chmod" }), " a+r /etc/apt/keyrings/docker.asc\n\n", _jsx(_components.span, { className: "token comment", children: "# Add the repository to Apt sources:" }), "\n", _jsx(_components.span, { className: "token builtin class-name", children: "echo" }), " ", _jsx(_components.span, { className: "token punctuation", children: "\\" }), "\n ", _jsxs(_components.span, { className: "token string", children: ["\"deb [arch=", _jsxs(_components.span, { className: "token variable", children: [_jsx(_components.span, { className: "token variable", children: "$(" }), "dpkg --print-architecture", _jsx(_components.span, { className: "token variable", children: ")" })] }), " signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \\\n ", _jsxs(_components.span, { className: "token variable", children: [_jsx(_components.span, { className: "token variable", children: "$(" }), _jsx(_components.span, { className: "token builtin class-name", children: "." }), " /etc/os-release ", _jsx(_components.span, { className: "token operator", children: "&&" }), " ", _jsx(_components.span, { className: "token builtin class-name", children: "echo" }), " ", _jsxs(_components.span, { className: "token string", children: ["\"", _jsx(_components.span, { className: "token variable", children: "$VERSION_CODENAME" }), "\""] }), _jsx(_components.span, { className: "token variable", children: ")" })] }), " stable\""] }), " ", _jsx(_components.span, { className: "token operator", children: "|" }), " ", _jsx(_components.span, { className: "token punctuation", children: "\\" }), "\n ", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "tee" }), " /etc/apt/sources.list.d/docker.list ", _jsx(_components.span, { className: "token operator", children: ">" }), " /dev/null\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "apt-get" }), " update\n"] }) }), "\n", _jsxs(_components.h3, { id: "3-install-docker-engine", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#3-install-docker-engine", children: _jsx(_components.span, { className: "icon icon-link" }) }), "3. Install Docker Engine"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "apt-get" }), " ", _jsx(_components.span, { className: "token function", children: "install" }), " docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin\n"] }) }), "\n", _jsxs(_components.h3, { id: "4-configure-docker-to-start-on-boot", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#4-configure-docker-to-start-on-boot", children: _jsx(_components.span, { className: "icon icon-link" }) }), "4. Configure Docker to Start on Boot"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token function", children: "sudo" }), " systemctl ", _jsx(_components.span, { className: "token builtin class-name", children: "enable" }), " docker.service\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " systemctl ", _jsx(_components.span, { className: "token builtin class-name", children: "enable" }), " containerd.service\n"] }) }), "\n", _jsxs(_components.h2, { id: "change-hostname", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#change-hostname", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Change Hostname"] }), "\n", _jsx(_components.p, { children: "To permanently change your server's hostname:" }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token function", children: "sudo" }), " hostnamectl set-hostname ", _jsx(_components.span, { className: "token operator", children: "<<" }), "your-new-hostname", _jsx(_components.span, { className: "token operator", children: ">>" }), "\n"] }) }), "\n", _jsxs(_components.p, { children: ["And update ", _jsx(_components.code, { children: "/etc/hosts" }), " to reflect the new hostname:"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "nano" }), " /etc/hosts\n", _jsx(_components.span, { className: "token comment", children: "# Add/update the line:" }), "\n", _jsx(_components.span, { className: "token number", children: "127.0" }), ".0.1 ", _jsx(_components.span, { className: "token operator", children: "<<" }), "your-new-hostname", _jsx(_components.span, { className: "token operator", children: ">>" }), "\n"] }) }), "\n", _jsxs(_components.h2, { id: "user-management", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#user-management", children: _jsx(_components.span, { className: "icon icon-link" }) }), "User Management"] }), "\n", _jsxs(_components.h3, { id: "create-new-user-with-sudo-privileges", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#create-new-user-with-sudo-privileges", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Create New User with Sudo Privileges"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token comment", children: "# Create new user" }), "\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " adduser ", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "\n\n", _jsx(_components.span, { className: "token comment", children: "# Add to sudo group" }), "\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "usermod" }), " -aG ", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "\n\n", _jsx(_components.span, { className: "token comment", children: "# Add to docker group" }), "\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "usermod" }), " -aG ", _jsx(_components.span, { className: "token function", children: "docker" }), " ", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "\n"] }) }), "\n", _jsxs(_components.h2, { id: "essential-cli-tools-installation", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#essential-cli-tools-installation", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Essential CLI Tools Installation"] }), "\n", _jsxs(_components.h3, { id: "install-homebrew", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#install-homebrew", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Install Homebrew"] }), "\n", _jsx(_components.p, { children: "Login as your new user above first, as you can't install homebrew as root." }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: ["/bin/bash -c ", _jsxs(_components.span, { className: "token string", children: ["\"", _jsxs(_components.span, { className: "token variable", children: [_jsx(_components.span, { className: "token variable", children: "$(" }), _jsx(_components.span, { className: "token function", children: "curl" }), " -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh", _jsx(_components.span, { className: "token variable", children: ")" })] }), "\""] }), "\n"] }) }), "\n", _jsxs(_components.h3, { id: "install-micro-editor", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#install-micro-editor", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Install ", _jsx(_components.a, { href: "https://micro-editor.github.io/", children: "Micro Editor" })] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "apt" }), " ", _jsx(_components.span, { className: "token function", children: "install" }), " micro\n"] }) }), "\n", _jsxs(_components.h3, { id: "install-lazydocker-and-lazygit", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#install-lazydocker-and-lazygit", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Install ", _jsx(_components.a, { href: "https://github.com/jesseduffield/lazydocker", children: "Lazydocker" }), " and ", _jsx(_components.a, { href: "https://github.com/jesseduffield/lazygit", children: "Lazygit" })] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: ["brew ", _jsx(_components.span, { className: "token function", children: "install" }), " jesseduffield/lazydocker/lazydocker\nbrew ", _jsx(_components.span, { className: "token function", children: "install" }), " lazygit\n"] }) }), "\n", _jsxs(_components.h2, { id: "ssh-server-configuration", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#ssh-server-configuration", children: _jsx(_components.span, { className: "icon icon-link" }) }), "SSH Server Configuration"] }), "\n", _jsxs(_components.h3, { id: "1-generate-ssh-key-pair-on-your-local-machine", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#1-generate-ssh-key-pair-on-your-local-machine", children: _jsx(_components.span, { className: "icon icon-link" }) }), "1. Generate SSH Key Pair (on your local machine)"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: ["ssh-keygen -t ed25519 -C ", _jsx(_components.span, { className: "token string", children: "\"your-email@example.com\"" }), "\n"] }) }), "\n", _jsxs(_components.h3, { id: "2-configure-ssh-server", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#2-configure-ssh-server", children: _jsx(_components.span, { className: "icon icon-link" }) }), "2. Configure SSH Server"] }), "\n", _jsxs(_components.p, { children: ["Edit ", _jsx(_components.code, { children: "/etc/ssh/sshd_config" }), ":"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "nano" }), " /etc/ssh/sshd_config\n"] }) }), "\n", _jsx(_components.p, { children: "Add/modify these important settings:" }), "\n", _jsx(_components.pre, { children: _jsx(_components.code, { children: "PermitRootLogin no\nPasswordAuthentication no\nPubkeyAuthentication yes\nMaxAuthTries 10\n" }) }), "\n", _jsxs(_components.h3, { id: "3-add-ssh-keys", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#3-add-ssh-keys", children: _jsx(_components.span, { className: "icon icon-link" }) }), "3. Add SSH Keys"] }), "\n", _jsx(_components.p, { children: "For the new user:" }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token comment", children: "# Create .ssh directory" }), "\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "mkdir" }), " -p /home/", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "/.ssh\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "chown" }), " ", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), ":", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), " /home/", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "/.ssh\n", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "chmod" }), " ", _jsx(_components.span, { className: "token number", children: "700" }), " /home/", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "/.ssh\n\n", _jsx(_components.span, { className: "token comment", children: "# Copy root's authorized_keys to new user (if exists)" }), "\n", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), " -f /root/.ssh/authorized_keys ", _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ";" }), " ", _jsx(_components.span, { className: "token keyword", children: "then" }), "\n ", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "cp" }), " /root/.ssh/authorized_keys /home/", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "/.ssh/\n ", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "chown" }), " ", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), ":", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), " /home/", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "/.ssh/authorized_keys\n ", _jsx(_components.span, { className: "token function", children: "sudo" }), " ", _jsx(_components.span, { className: "token function", children: "chmod" }), " ", _jsx(_components.span, { className: "token number", children: "600" }), " /home/", _jsx(_components.span, { className: "token operator", children: "<<" }), "new-username", _jsx(_components.span, { className: "token operator", children: ">>" }), "/.ssh/authorized_keys\n", _jsx(_components.span, { className: "token keyword", children: "fi" }), "\n\n", _jsx(_components.span, { className: "token comment", children: "# Or manually add your public key if needed" }), "\n", _jsx(_components.span, { className: "token comment", children: "# echo \"your-public-key\" | sudo tee /home/<>/.ssh/authorized_keys" }), "\n"] }) }), "\n", _jsxs(_components.h3, { id: "4-restart-ssh-service", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#4-restart-ssh-service", children: _jsx(_components.span, { className: "icon icon-link" }) }), "4. Restart SSH Service"] }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash", children: [_jsx(_components.span, { className: "token function", children: "sudo" }), " systemctl restart ", _jsx(_components.span, { className: "token function", children: "ssh" }), "\n"] }) }), "\n", _jsxs(_components.h2, { id: "security-recommendations", children: [_jsx(_components.a, { "aria-hidden": "true", tabIndex: "-1", href: "#security-recommendations", children: _jsx(_components.span, { className: "icon icon-link" }) }), "Security Recommendations"] }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Always keep your system updated" }), "\n", _jsx(_components.li, { children: "Don't allow SSH logins via password" }), "\n", _jsx(_components.li, { children: "Consider using UFW (Uncomplicated Firewall) to manage incoming connections" }), "\n"] }), "\n", _jsx(_components.p, { children: "Remember to test SSH access with your new user before closing your current session to ensure you haven't locked yourself out of the server." })] }); } function MDXContent(props = {}) { const {wrapper: MDXLayout} = Object.assign({}, _provideComponents(), props.components); return MDXLayout ? _jsx(MDXLayout, Object.assign({}, props, { children: _jsx(_createMdxContent, props) })) : _createMdxContent(props); } return { default: MDXContent };