Re: Stripping down Debian Squeeze
On 16/01/12 17:29, Bijoy Lobo wrote: Hi, I did a netinstall of Debian and installed the 4 modules (Squid, iptables, Snort and VPN). All seem tobe in less than 1 GB. Anything else i should look out for? That's about right if you're also running Apache and a web cgi interface for remote access - minimal (not including Snort and Squid) is about 130MB. If it helps I've put a list of packages on a stripped down (128MB) system here:- http://paste.debian.net/152389/ Thanks On Sun, Jan 15, 2012 at 2:28 PM, Andrei Popescu andreimpope...@gmail.com wrote: On Sb, 14 ian 12, 20:29:40, Brad Alexander wrote: 1. Do a base install of Debian. During the install, at the Software Selection screen where it asks what to install, *uncheck everything* -- except for ssh server, if you want that. This will give you the absolute minimal install possible. As far as I know this includes Essential, Required and Important. This can be trimmed down even further, but it gets very difficult and you have to know what you're doing. 2. After reboot, do an � � � � aptitude update ; aptitude install squid3 snort openvpn iptables � � This will give you your required packages and nothing else. I would disable Recommends first, I think this fits the definition of an unusual installation :) But do check out the recommended packages, there might be something you do need. Kind regards, Andrei -- Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic Cheers -- Iceweasel/Firefox extensions for finding answers to Debian questions:- https://addons.mozilla.org/en-US/firefox/collections/Scott_Ferguson/debian/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f140217.4040...@gmail.com
Re: Stripping down Debian Squeeze
On Sb, 14 ian 12, 20:29:40, Brad Alexander wrote: 1. Do a base install of Debian. During the install, at the Software Selection screen where it asks what to install, *uncheck everything* -- except for ssh server, if you want that. This will give you the absolute minimal install possible. As far as I know this includes Essential, Required and Important. This can be trimmed down even further, but it gets very difficult and you have to know what you're doing. 2. After reboot, do an aptitude update ; aptitude install squid3 snort openvpn iptables This will give you your required packages and nothing else. I would disable Recommends first, I think this fits the definition of an unusual installation :) But do check out the recommended packages, there might be something you do need. Kind regards, Andrei -- Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic signature.asc Description: Digital signature
Re: Stripping down Debian Squeeze
Hi, I did a netinstall of Debian and installed the 4 modules (Squid, iptables, Snort and VPN). All seem tobe in less than 1 GB. Anything else i should look out for? Thanks On Sun, Jan 15, 2012 at 2:28 PM, Andrei Popescu andreimpope...@gmail.com wrote: On Sb, 14 ian 12, 20:29:40, Brad Alexander wrote: 1. Do a base install of Debian. During the install, at the Software Selection screen where it asks what to install, *uncheck everything* -- except for ssh server, if you want that. This will give you the absolute minimal install possible. As far as I know this includes Essential, Required and Important. This can be trimmed down even further, but it gets very difficult and you have to know what you're doing. 2. After reboot, do an aptitude update ; aptitude install squid3 snort openvpn iptables This will give you your required packages and nothing else. I would disable Recommends first, I think this fits the definition of an unusual installation :) But do check out the recommended packages, there might be something you do need. Kind regards, Andrei -- Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic -- Thanks and Regards Bijoy Lobo Paladion Networks -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CACvomdTq5op2kHUj84odEAkJMiBgKk25ydHTgiSce=dsdke...@mail.gmail.com
Re: Stripping down Debian Squeeze
HI, On Fri, Jan 13, 2012 at 04:56:09PM +0530, Bijoy Lobo wrote: Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. For such system, all desktop application should go. More for security and space than performance. You can remove almost everything but base system as long as you keep dependency of these programs and required kernel modules for your hardware. Oh, keeping aptitude and vim will help your productivity. This is something you do not get quick short answer... try and learn yourself using tools such as aptitude. Osamu -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120114083342.GB15272@localhost
Re: Stripping down Debian Squeeze
On Sat, January 14, 2012 3:33 am, Osamu Aoki wrote: HI, On Fri, Jan 13, 2012 at 04:56:09PM +0530, Bijoy Lobo wrote: Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. For such system, all desktop application should go. More for security and space than performance. You can remove almost everything but base system as long as you keep dependency of these programs and required kernel modules for your hardware. Oh, keeping aptitude and vim will help your productivity. This is something you do not get quick short answer... try and learn yourself using tools such as aptitude. Osamu I still think the best option is to just install from netinst and only install what you need, as someone else suggested. It's what I do. ./tony -- http://tonybaldwin.me all tony, all the time -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/a31b5143ce2faf7fd7271fdf42e26883.squir...@tonybaldwin.org
Re: Stripping down Debian Squeeze
In a previous life, I was the Linux Platform Engineer for a company. One of my first jobs was to strip down CentOS 4 to create appliances. One thing I learned is that (as others have said in this thread) it is much easier to not put it on than to try to remove interlocking dependencies. Luckily, Debian is much easier to do this with than install everything but the kitchen sink approaches like CentOS. Thus, my recommendation would be as follows: 1. Do a base install of Debian. During the install, at the Software Selection screen where it asks what to install, *uncheck everything* -- except for ssh server, if you want that. This will give you the absolute minimal install possible. 2. After reboot, do an aptitude update ; aptitude install squid3 snort openvpn iptables This will give you your required packages and nothing else. 3. Once you have all the software installed that you need, you should capture the list of packages: dpkg --get-selections UTM.pkglist 4. For subsequent builds of this particular platform, perform step 1 above, then after reboot, copy the UTM.pkglist to the new machine and do the following: dpkg --set-selections UTM.pkglist apt-get dselect-upgrade This should get you the required packages with no extra fat. Just remember each time you need to add package(s) to update the UTM.pkglist... HTH, --b On Fri, Jan 13, 2012 at 6:26 AM, Bijoy Lobo bijoy.l...@paladion.net wrote: Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. -- Thanks and Regards Bijoy Lobo
Re: Stripping down Debian Squeeze
For the record, this works out pretty well if you have a number of box types that you use and can adapt. For instance, you could build a firewall box and capture the package list, one for a web server, wiki box, etc...And have a pool of package lists that you can call on or adapt for your building needs. --b On Sat, Jan 14, 2012 at 8:29 PM, Brad Alexander stor...@gmail.com wrote: In a previous life, I was the Linux Platform Engineer for a company. One of my first jobs was to strip down CentOS 4 to create appliances. One thing I learned is that (as others have said in this thread) it is much easier to not put it on than to try to remove interlocking dependencies. Luckily, Debian is much easier to do this with than install everything but the kitchen sink approaches like CentOS. Thus, my recommendation would be as follows: 1. Do a base install of Debian. During the install, at the Software Selection screen where it asks what to install, *uncheck everything* -- except for ssh server, if you want that. This will give you the absolute minimal install possible. 2. After reboot, do an aptitude update ; aptitude install squid3 snort openvpn iptables This will give you your required packages and nothing else. 3. Once you have all the software installed that you need, you should capture the list of packages: dpkg --get-selections UTM.pkglist 4. For subsequent builds of this particular platform, perform step 1 above, then after reboot, copy the UTM.pkglist to the new machine and do the following: dpkg --set-selections UTM.pkglist apt-get dselect-upgrade This should get you the required packages with no extra fat. Just remember each time you need to add package(s) to update the UTM.pkglist... HTH, --b On Fri, Jan 13, 2012 at 6:26 AM, Bijoy Lobo bijoy.l...@paladion.netwrote: Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. -- Thanks and Regards Bijoy Lobo
Stripping down Debian Squeeze
Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. -- Thanks and Regards Bijoy Lobo
Re: Stripping down Debian Squeeze
On Fri 13 Jan 2012 at 16:56:09 +0530, Bijoy Lobo wrote: I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. If a customised OS is wanted why start by installing everything and the kitchen sink? You could use a netinst CD in expert mode, skip the install software step, put GRUB on the MBR and go from there. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120113123330.GA2926@desktop
Re: Stripping down Debian Squeeze
On Vi, 13 ian 12, 16:56:09, Bijoy Lobo wrote: Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. If there were a software that could speed up systems then it would be installed by default ;) If you want specific recommendations of (alternative) software for your application you have to provide *many* more details. Start with: - hardware configuration - network topology - number of hosts - typical usage of the hosts - etc. Kind regards, Andrei -- Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic signature.asc Description: Digital signature
Re: Stripping down Debian Squeeze
On 01/13/2012 05:34 AM, Andrei Popescu wrote: On Vi, 13 ian 12, 16:56:09, Bijoy Lobo wrote: Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. If there were a software that could speed up systems then it would be installed by default ;) If you want specific recommendations of (alternative) software for your application you have to provide *many* more details. Start with: - hardware configuration - network topology - number of hosts - typical usage of the hosts - etc. Kind regards, Andrei Or install the netcd with no X trim if needed on the basic console install, then only install what you want after that. That's the only way I will install Debian, cuts out tons of cruft. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f1034e9.1030...@gmail.com
Re: Stripping down Debian Squeeze
On Friday 13 Jan 2012, Bijoy Lobo wrote: Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. Have you looked at EmDebian (emdebian.org). It comes in two flavours (or it did last time I looked), Crush and Grip. It removes things like man pages and generally squashes things down as small as possible while maintaining Debian compatability and doing things the Debian Way(TM). David -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201201131417.54871.david.goodeno...@btconnect.com
Re: Stripping down Debian Squeeze
On Vi, 13 ian 12, 14:17:54, David Goodenough wrote: On Friday 13 Jan 2012, Bijoy Lobo wrote: Hello Everyone, I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. Have you looked at EmDebian (emdebian.org). It comes in two flavours (or it did last time I looked), Crush and Grip. It removes things like man pages and generally squashes things down as small as possible while maintaining Debian compatability and doing things the Debian Way(TM). While it does make sense to delete a lot of stuff on a machine running from very limited storage, it just occurred to me that you can shoot yourself in the foot nicely if that machine is providing your internet access and you don't have a copy of those docs on another machine ;) Kind regards, Andrei -- Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic signature.asc Description: Digital signature
Re: Stripping down Debian Squeeze
On 13/01/12 23:33, Brian wrote: On Fri 13 Jan 2012 at 16:56:09 +0530, Bijoy Lobo wrote: I am currently Debian Squeeze for a UTM ( Squid3+Snort+OpenVPN+iptables). I would like to strip down the OS for better performance of the UTM. It would be acting as a gateway to my network so if there is any software within the OS which i can uninstall for better performance would certainly help me. If a customised OS is wanted why start by installing everything and the kitchen sink? You could use a netinst CD in expert mode, skip the install software step, put GRUB on the MBR and go from there. As above - then:- # apt-get --purge remove libnfsidmap2 nfs-common laptop-detect # apt-get install deborphan localepurge # apt-get remove `deborphan` Cheers -- Iceweasel/Firefox extensions for finding answers to Debian questions:- https://addons.mozilla.org/en-US/firefox/collections/Scott_Ferguson/debian/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f10bb04.7080...@gmail.com
