mirror of
https://codeberg.org/alpine/alpine-wiki.git
synced 2023-08-25 13:53:16 +02:00
more featured to the new markdown Warning and Notes quotes
This commit is contained in:
parent
5f962c961a
commit
735bbc62a0
@ -42,7 +42,7 @@ so you must **tipe each line as is.. and hit enter**, but if you are in gui or r
|
||||
2. at the other OS just connect: `ssh -l root <ip>` change "`<ip>`" with the address of your device.
|
||||
3 after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config;service sshd restart`
|
||||
|
||||
**CAUTION** Some Linux or/and Mac terminals have security cut/paste locks, so
|
||||
> **Warning** Some Linux or/and Mac terminals have security cut/paste locks, so
|
||||
if you paste, the first line will be preceded by garbage, check always the first char of your paste.
|
||||
|
||||
## Installation of alpine
|
||||
@ -183,7 +183,7 @@ Those command put your alpine in "non minimalist mode" so means
|
||||
* will provide all the system tools to the devices management
|
||||
for more info of `daru`, check [the daru user explanation](#the-daru-user-explanation) section of this document
|
||||
|
||||
NExt section will cover the suser management and programs support:
|
||||
Next section will cover the suser management and programs support:
|
||||
|
||||
#### configuration programs and repositories
|
||||
|
||||
|
@ -40,7 +40,7 @@ echo "it works" > /var/www/localhost/htdocs/index.html
|
||||
|
||||
For testing open a browser and go to `http://<webserveripaddres>` and you will see "it works". The "webserveripaddres" are the ip address of your setup/server machine.
|
||||
|
||||
**WARNING**: alpine packagers are a mess, the apache2 default configuration is not ordened so all the conf files under `/etc/apache2/conf.d/` will be loaded with no specific order.
|
||||
> **Warning** : alpine packagers are a mess, the apache2 default configuration is not ordened so all the conf files under `/etc/apache2/conf.d/` will be loaded with no specific order.
|
||||
|
||||
### Controlling Apache2
|
||||
|
||||
@ -146,7 +146,7 @@ sed -i -r 's#^UserDir .*#UserDir public_html#g' /etc/apache2/conf.d/userdir.conf
|
||||
rc-service lighttpd restart
|
||||
```
|
||||
|
||||
**WARNING** as we said.. alpine policy is to be most upstream equal possible, almost like packagers are lazy? NO! just dont put any thing about root user access, but well, you must know what are you doing, by the addition of `UserDir disabled root postmaster` you will denied specific users due security.
|
||||
> **Warning** as we said.. alpine policy is to be most upstream equal possible, almost like packagers are lazy? NO! just dont put any thing about root user access, but well, you must know what are you doing, by the addition of `UserDir disabled root postmaster` you will denied specific users due security.
|
||||
|
||||
If you change the user dir , then you must change the directory definition at the last block.
|
||||
|
||||
@ -180,7 +180,7 @@ EOF
|
||||
service apache2 restart
|
||||
```
|
||||
|
||||
**WARNING** of course, the `myproxy.conf` is hypothetical, for didactic purposes, here it is only exemplified that the error is corrected in the step of the sed command to work.
|
||||
> **Warning** of course, the `myproxy.conf` is hypothetical, for didactic purposes, here it is only exemplified that the error is corrected in the step of the sed command to work.
|
||||
|
||||
#### Apache2 SSL support
|
||||
|
||||
@ -229,10 +229,10 @@ rc-service apache2 restart
|
||||
```
|
||||
|
||||
> **WARNING** this configuration:
|
||||
1. This is a permissive configuration full compatible wtith older and newer browsers.
|
||||
2. to only allow most secure protocols and a bit of compatibilty, set to `SSLProtocol all -TLSv1 -SSLv3`
|
||||
3. to only allow most secure negociations and a bit of compat, set to `SSLCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
|
||||
4. to only allow most secure negociations and a bit of compat, set proxy to `SSLProxyCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
|
||||
> 1. This is a permissive configuration full compatible wtith older and newer browsers.
|
||||
> 2. to only allow most secure protocols and a bit of compatibilty, set to `SSLProtocol all -TLSv1 -SSLv3`
|
||||
> 3. to only allow most secure negociations and a bit of compat, set to `SSLCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
|
||||
> 4. to only allow most secure negociations and a bit of compat, set proxy to `SSLProxyCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
|
||||
|
||||
Best is to made a redirection inside of the document root of port 80 deifintion
|
||||
also put a `<IfModule mod_ssl.c>` conditional at the beginning of the ssl config file.
|
||||
|
@ -124,7 +124,7 @@ EOF
|
||||
apk update --allow-untrusted
|
||||
```
|
||||
|
||||
**WARNING** if your version of alpine are more ancient like 3.6 or 3.8, do not use
|
||||
> **Warning** if your version of alpine are more ancient like 3.6 or 3.8, do not use
|
||||
the edge version, it need upgrading almost to alpine 3.10 to use it, so if you
|
||||
are using a older hardware not supported by recent linux kernel, upgrade to alpine 3.10
|
||||
and then you can follow this manual. Otherwise just avoit the edge swicht and
|
||||
@ -371,7 +371,7 @@ rc service gitea2 start
|
||||
rc-update add gitea2 default
|
||||
```
|
||||
|
||||
**CAUTION** if you runs multiple instances, each one must have different port,
|
||||
> **Warning** if you runs multiple instances, each one must have different port,
|
||||
this means you must check in the config `app.ini` file (like the `gitea2.ini` )
|
||||
that after the póst setup procedure, the port are correct and different, if not just,
|
||||
before or after change it with `HTTP_PORT` and `ROOT_URL` keys.
|
||||
@ -516,7 +516,7 @@ for the real proxy reverse redirection and lighttpd as real frontend web service
|
||||
|
||||
- 🗯 IRC
|
||||
- 💬 `##alpine_telegram_english`
|
||||
- 💬 `#alpine_linux_english`
|
||||
- 💬 `##alpine_linux_english`
|
||||
- 📱 Telegram https://t.me/alpine_linux
|
||||
- 🇬🇧 https://t.me/alpine_linux_english
|
||||
- 🇷🇺 https://t.me/alpine_linux_pycckuu (dual english russian, low activity)
|
||||
|
@ -11,7 +11,7 @@ just fresh PC or Laptop hardware computer, use if you have a [BIOS or
|
||||
UEFI based hardware](Alpine_and_UEFI.md) and only wants Alpine**
|
||||
Linux into it.
|
||||
|
||||
**HINT**: This method is in disuse today in favor of [usbstiks and imgs](alpine-install-from-usb-to-disk-pc-single-boot-only.md).
|
||||
> **Warning** This method is in disuse today in favor of [usbstiks and imgs](alpine-install-from-usb-to-disk-pc-single-boot-only.md).
|
||||
|
||||
## Terminology
|
||||
|
||||
|
@ -20,7 +20,8 @@ Alpine must be previously installed. This will install a new fashioned desktop,
|
||||
|
||||
You must have already installed alpine, and wayland only works well in alpine 3.14 and up
|
||||
|
||||
**YOU MUST HAVE DIRECT WIRED INTERNET, if not ask for an ISO from VenenuX:** [https://t.me/alpine_linux/762](https://t.me/s/alpine_linux/762)
|
||||
> **Warning** **YOU MUST HAVE DIRECT WIRED INTERNET, if not ask for an ISO from VenenuX:** [https://t.me/alpine_linux/762](https://t.me/s/alpine_linux/762)
|
||||
or configure a network connection check [alpine-tutorial-wifi-routering.md](alpine-tutorial-wifi-routering.md)
|
||||
|
||||
#### setup OS configuration
|
||||
|
||||
@ -151,7 +152,7 @@ useradd -m -U -c "" -G wheel,input,disk,floppy,cdrom,dialout,audio,video,lp,netd
|
||||
for u in $(ls /home); do for g in disk lp floppy audio cdrom dialout video lp netdev games users ping; do addgroup $u $g; done;done
|
||||
```
|
||||
|
||||
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
|
||||
For more details check [../../newbie/alpine-newbie-configuration.md](../../newbie/alpine-newbie-configuration.md#setup-system-users)
|
||||
|
||||
@ -190,7 +191,7 @@ For more details check [../../newbie/alpine-newbie-configuration.md](../../newb
|
||||
|
||||
#### setup audio and video for wayland
|
||||
|
||||
**HINT** on alpine 3.14 gtk3 will force xorg dependencies.. for 3.16 will use gtk4 and SDL2
|
||||
> **Note** on alpine 3.14 gtk3 will force xorg dependencies.. for 3.16 will use gtk4 and SDL2
|
||||
|
||||
```
|
||||
apk add xf86-input-evdev cairo pango pixman \
|
||||
@ -230,8 +231,9 @@ rc-service polkit restart
|
||||
rc-update del lightdm
|
||||
```
|
||||
|
||||
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
**ADVERTISE** pure wayland will work only in modern gpu, otherwise will use xwayland if you need some modules like xf86-video packages as `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
|
||||
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
|
||||
> **Note** pure wayland will work only in modern gpu, otherwise will use xwayland if you need some modules like xf86-video packages as `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
|
||||
|
||||
## Instalacion WAYLAND Alpine
|
||||
|
||||
@ -303,7 +305,7 @@ rc-update add lightdm
|
||||
rc-service lightdm restart
|
||||
```
|
||||
|
||||
**WARNING**: for alpine 3.14, 3.15 just works the login sesion for sway, maybe 3.16 and up will
|
||||
> **Warning** : for alpine 3.14, 3.15 just works the login sesion for sway, maybe 3.16 and up will
|
||||
result in a blank screen, check https://github.com/swaywm/sway/pull/3634#issuecomment-462779163
|
||||
|
||||
#### desktop integration and device media
|
||||
@ -350,10 +352,10 @@ all new(next) lines are made by just enter. the terminal will detect if must exe
|
||||
3. copy each separated by empty line, block of command, copy only blocks separate by empty line
|
||||
4. and paste each separated by empty line block in the remnote (ssh), do not paste all the blocks at same time!
|
||||
|
||||
**CAUTION** Some Linux or/and Mac terminals have security cut/paste locks, so
|
||||
> **Warning** Some Linux or/and Mac terminals have security cut/paste locks, so
|
||||
if you paste, the first line will be preceded by garbage, check always the first char of your paste.
|
||||
|
||||
**WARNING** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
|
||||
> **Warning** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
|
||||
and restart ssh `service sshd restart` becouse security implications.
|
||||
|
||||
Done? return to [Preparation](#preparation-alpine) section of this document.
|
||||
|
@ -149,7 +149,7 @@ useradd -m -U -c "" -G wheel,input,disk,floppy,cdrom,dialout,audio,video,lp,netd
|
||||
for u in $(ls /home); do for g in disk lp floppy audio cdrom dialout video lp netdev games users ping; do addgroup $u $g; done;done
|
||||
```
|
||||
|
||||
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
|
||||
For more details check [../../newbie/alpine-newbie-xfce-desktop.md](../../newbie/alpine-newbie-xfce-desktop.md#setup-system-users)
|
||||
|
||||
@ -229,8 +229,9 @@ rc-service lightdm restart
|
||||
|
||||
```
|
||||
|
||||
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
**HINT** check for some xf86-video packages like `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
|
||||
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
|
||||
> **Note** check for some xf86-video packages like `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
|
||||
|
||||
## instalacion Xfce4 Alpine
|
||||
|
||||
@ -319,10 +320,10 @@ all new(next) lines are made by just enter. the terminal will detect if must exe
|
||||
3. copy each separated by empty line, block of command, copy only blocks separate by empty line
|
||||
4. and paste each separated by empty line block in the remnote (ssh), do not paste all the blocks at same time!
|
||||
|
||||
**CAUTION** Some Linux or/and Mac terminals have security cut/paste locks, so
|
||||
> **Warning** Some Linux or/and Mac terminals have security cut/paste locks, so
|
||||
if you paste, the first line will be preceded by garbage, check always the first char of your paste.
|
||||
|
||||
**WARNING** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
|
||||
> **Warning** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
|
||||
and restart ssh `service sshd restart` becouse security implications.
|
||||
|
||||
#### hardware used
|
||||
|
@ -150,7 +150,7 @@ useradd -m -U -c "" -G wheel,input,disk,floppy,cdrom,dialout,audio,video,lp,netd
|
||||
for u in $(ls /home); do for g in disk lp floppy audio cdrom dialout video lp netdev games users ping; do addgroup $u $g; done;done
|
||||
```
|
||||
|
||||
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
|
||||
For more details check [../../newbie/alpine-newbie-xfce-desktop.md](../../newbie/alpine-newbie-xfce-desktop.md#setup-system-users)
|
||||
|
||||
@ -230,8 +230,9 @@ rc-service lightdm restart
|
||||
|
||||
```
|
||||
|
||||
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
**HINT** check for some xf86-video packages like `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
|
||||
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
|
||||
|
||||
> **Note** check for some xf86-video packages like `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
|
||||
|
||||
## instalacion OpenBox Alpine
|
||||
|
||||
@ -264,7 +265,7 @@ rc-service lightdm restart
|
||||
|
||||
#### openbox session menu and desktop configuration
|
||||
|
||||
**WARNING** the `openbox-doc` package must be installed
|
||||
> **Warning** the `openbox-doc` package must be installed
|
||||
|
||||
```
|
||||
cat > /etc/xdg/openbox/menu.xml << EOF
|
||||
@ -397,10 +398,10 @@ all new(next) lines are made by just enter. the terminal will detect if must exe
|
||||
3. copy each separated by empty line, block of command, copy only blocks separate by empty line
|
||||
4. and paste each separated by empty line block in the remnote (ssh), do not paste all the blocks at same time!
|
||||
|
||||
**CAUTION** Some Linux or/and Mac terminals have security cut/paste locks, so
|
||||
> **Warning** Some Linux or/and Mac terminals have security cut/paste locks, so
|
||||
if you paste, the first line will be preceded by garbage, check always the first char of your paste.
|
||||
|
||||
**WARNING** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
|
||||
> **Warning** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
|
||||
and restart ssh `service sshd restart` becouse security implications.
|
||||
|
||||
#### hardware used
|
||||
|
@ -133,7 +133,7 @@ sed -i -r 's#^UserDir .*#UserDir public_html#g' /etc/apache2/conf.d/userdir.conf
|
||||
rc-service lighttpd restart
|
||||
```
|
||||
|
||||
**WARNING** as we said.. alpine policy is to be most upstream equal possible, almost like packagers are lazy? NO! just dont put any thing about root user access, but well, you must know what are you doing, by the addition of `UserDir disabled root postmaster` you will denied specific users due security.
|
||||
> **Warning** as we said.. alpine policy is to be most upstream equal possible, almost like packagers are lazy? NO! just dont put any thing about root user access, but well, you must know what are you doing, by the addition of `UserDir disabled root postmaster` you will denied specific users due security.
|
||||
|
||||
#### Apache2 alpine proxy modules setup
|
||||
|
||||
@ -163,7 +163,7 @@ EOF
|
||||
service apache2 restart
|
||||
```
|
||||
|
||||
**WARNING** of course, the `myproxy.conf` is hypothetical, for didactic purposes, here it is only exemplified that the error is corrected in the step of the sed command to work.
|
||||
> **Warning** of course, the `myproxy.conf` is hypothetical, for didactic purposes, here it is only exemplified that the error is corrected in the step of the sed command to work.
|
||||
|
||||
#### Apache2 SSL support
|
||||
|
||||
@ -206,10 +206,10 @@ rc-service apache2 restart
|
||||
```
|
||||
|
||||
> **Warning** this configuration:
|
||||
1. This is a permissive configuration full compatible wtith older and newer browsers.
|
||||
2. to only allow most secure protocols and a bit of compatibilty, set to `SSLProtocol all -TLSv1 -SSLv3`
|
||||
3. to only allow most secure negociations and a bit of compat, set to `SSLCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
|
||||
4. to only allow most secure negociations and a bit of compat, set proxy to `SSLProxyCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
|
||||
> 1. This is a permissive configuration full compatible wtith older and newer browsers.
|
||||
> 2. to only allow most secure protocols and a bit of compatibilty, set to `SSLProtocol all -TLSv1 -SSLv3`
|
||||
> 3. to only allow most secure negociations and a bit of compat, set to `SSLCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
|
||||
> 4. to only allow most secure negociations and a bit of compat, set proxy to `SSLProxyCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
|
||||
|
||||
## 2 - PHP
|
||||
|
||||
@ -255,7 +255,7 @@ apk add php7-pdo php7-pdo_dblib php7-pdo_mysql php7-pdo_odbc php7-pdo_pgsql php7
|
||||
apk add php7-apache2
|
||||
```
|
||||
|
||||
**WARNING** all of these are due alpine 3.10 to 3.15 uses php7, alpine 3.16 start to use php8,
|
||||
> **Warning** all of these are due alpine 3.10 to 3.15 uses php7, alpine 3.16 start to use php8,
|
||||
so in such case just change the "7" by "8" exam ple change "php7-apache2" by "php8-apache2".
|
||||
|
||||
#### configuration of php
|
||||
@ -443,7 +443,7 @@ CPReuse =
|
||||
odbcinst -u -d -f /tmp/tmpmdb.tmp
|
||||
```
|
||||
|
||||
**WARNING** the packages for mysql and sqlite are `sqliteodbc` and `mariadb-connector-odbc` but only available for edge.
|
||||
> **Warning** the packages for mysql and sqlite are `sqliteodbc` and `mariadb-connector-odbc` but only available for edge.
|
||||
|
||||
## Extra needs
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user