memo.xight.org

- Summary
Debian アーカイブ署名鍵が更新したため，
aptitude update でエラーが発生する．

Debian パッケージディレクトリ検索 (バイナリ) - debian-archive-keyring をインストールして，対応完了．

- エラー内容
LANG=C

# aptitude update
...

Reading package lists... Done
W: There are no public key available for the following key IDs:
A70DAF536070D3A1
W: There are no public key available for the following key IDs:
A70DAF536070D3A1
W: There are no public key available for the following key IDs:
A70DAF536070D3A1
W: You may want to run apt-get update to correct these problems

日本語

# aptitude update
...

パッケージリストを読み込んでいます... 完了
W: 以下の鍵 ID に対して利用可能な公開鍵がありません:
A70DAF536070D3A1
W: 以下の鍵 ID に対して利用可能な公開鍵がありません:
A70DAF536070D3A1
W: 以下の鍵 ID に対して利用可能な公開鍵がありません:
A70DAF536070D3A1

- Reference
そこをなんとか (仮題) - 2006-11-21
http://d.hatena.ne.jp/takunama/20061121

KeN's GNU/Linux Diary | Debianアーカイブ署名鍵が更新
http://kmuto.jp/d/index.cgi/debian/apt-key-20061120.htm

KeN's GNU/Linux Diary | secure apt
http://kmuto.jp/d/index.cgi/debian/apt-secure.htm

Debian パッケージディレクトリ検索 (バイナリ) - debian-archive-keyring

- Summary

# aptitude install geoip-bin
# cp /etc/GeoIP.conf.default /etc/GeoIP.conf

- /etc/GeoIP.conf を編集

# Enter your license key here
LicenseKey YOUR_LICENSE_KEY_HERE

# Enter your User ID here
UserId YOUR_USER_ID_HERE

# Enter the Product ID(s) of the database(s) you would like to update
# By default 106 (MaxMind GeoIP Country) is listed below
ProductIds 106

% geoiplookup example.com
GeoIP Country Edition: US, United States

- Reference
Bubble://ちずろぐ/
http://bubble.air-nifty.com/mapper/

Bubble://ちずろぐ/: GeoIP
http://bubble.air-nifty.com/mapper/geoip/

Debian パッケージディレクトリ検索 (バイナリ) - geoip-bin
Debian パッケージディレクトリ検索 (バイナリ) - libgeoip-dev
Debian パッケージディレクトリ検索 (バイナリ) - libgeoip1

- Reference
PC World - LinuxWorld: HP Announces Support for Debian Linux
http://www.pcworld.com/article/id,126717-c,linux/article.html

- via
スラッシュドット ジャパン - HPがDebianを公式サポート
http://slashdot.jp/linux/article.pl?sid=06/08/15/0244231

- Summary
Package: base-config
Version: 2.53.10.1

インストール時にエラー発生．

Template #30 in /var/lib/dpkg/info/base-config.templates does not contain a 'Template:' line

- 対処法
/var/lib/dpkg/info/base-config.templates の 2271行目を削除．

# vi +2271 /var/lib/dpkg/info/base-config.templates
dd
:wq
# apt-get -f install

- Reference
最近のKamaQ - ハンガリー語のサイト
http://kamatei.dip.jp/~a-kamata/?itemid=45

Bug#372734: Template #30 in /var/lib/dpkg/info/base-config.templates does not contain a 'Template:' line
http://lists.debian.org/debian-boot/2006/06/msg00500.html

Bug#372734: marked as done (Template #30 in /var/lib/dpkg/info/base-config.templatesdoes not contain a 'Template:' line)
http://lists.debian.org/debian-boot/2006/06/msg00875.html

Sarge base-config update error - Hungarian Unix Portal
http://hup.hu/node/26236

Google Csoportok: hun.lists.mlf.linux-kezdo
http://groups.google.co.hu/group/hun.lists.mlf.linux-kezdo/tree/browse_frm/thread/c0843fe40a32dcce/df45941a1987180e?rnum=1&hl=hu&_done=%2Fgroup%2Fhun.lists.mlf.linux-kezdo%2Fbrowse_frm%2Fthread%2Fc0843fe40a32dcce%2Fdf45941a1987180e%3Fhl%3Dhu%26#doc_df45941a1987180e

- /etc/apt/sources.list

# PHP5
#deb http://people.debian.org/~dexter php5 sarge
deb http://people.debian.org/~dexter php5.1 sarge

- Install

# aptitude install php5.1 php5.1-gd php5.1-mbstring

$ COLUMNS=112 dpkg -l |grep php5.1
ii libapache2-mod-php5.1 5.1.4-0.1~sarge1 HTML-embedded scripting language (apache 2.0 module)
ii php5.1 5.1.4-0.1~sarge1 server-side, HTML-embedded scripting language (meta-package)
ii php5.1-cgi 5.1.4-0.1~sarge1 HTML-embedded scripting language (CGI binary)
ii php5.1-cli 5.1.4-0.1~sarge1 command-line interpreter for the PHP 5.1 scripting language
ii php5.1-common 5.1.4-0.1~sarge1 common files for packages built from the php5.1 source
ii php5.1-gd 5.1.4-0.1~sarge1 GD module for PHP 5.1
ii php5.1-mbstring 5.1.4-0.1~sarge1 mbstring module for PHP 5.1
ii php5.1-mysql 5.1.4-0.1~sarge1 MySQL module for PHP 5.1
ii php5.1-session 5.1.4-0.1~sarge1 session module for PHP 5.1
ii php5.1-sqlite 5.1.4-0.1~sarge1 SQLite module for PHP 5.1

- Zopeのインストール

# aptitude install zope zope2.7

以下のエラーが発生する．

dpkg: zope の読み込みエラーです(--configure):
 サブプロセス post-installation script はエラー終了ステータス 22 を返しました。。

# zopectl pcgi
Creating PCGI resource file for default... done.
# zopectl init
Initializing Zope instance home for default... done.
# zopectl access
Setting up initial user for default...Password: パスワードを入力
Verify password: パスワードを入力
 done.

# aptitude install zope

- Ploneのインストール
# aptitude install plone

- Zopeを起動
# /etc/init.d/zope start

以下が表示されればOK．
http://localhost:9673/

- Reference
Debian パッケージディレクトリ検索 (バイナリ) - chalow
Debian Package Tracking System - chalow

- /etc/apt/sources.listに以下を追加

deb http://people.debian.org/~dexter php5 sarge

- インストール

# aptitude update
# aptitude install php5
# aptitude install php5-mysql php5-gd

- Reference
[debian-users:43746] Re: php5 の 対応
http://lists.debian.or.jp/debian-users/200506/msg00077.html

- Summary
jigdo を利用すると，最新のパッケージ，カーネルのISOイメージを簡単に作成できる．

- 手順
1. インストールCDの作成
jigdo-fileをインストール，起動

# aptitude install jigdo-file
% jigdo-lite

jigdoファイルのURIは以下を指定
http://cdimage.debian.org/debian-cd/3.1_r1/i386/jigdo-cd/debian-31r1-i386-binary-1.jigdo

Jigsaw Download "lite"
Copyright (C) 2001-2004 | jigdo@
Richard Atterer | atterer.net
Getting mirror information from /etc/apt/sources.list

---

-------------------------------------------------------------
To resume a half-finished download, enter name of .jigdo file.
To start a new download, enter URL of .jigdo file.
You can also enter several URLs/filenames, separated with spaces,
or enumerate in {}, e.g. `http://server/cd-{1_NONUS,2,3}.jigdo'
jigdo: http://cdimage.debian.org/debian-cd/3.1_r1/i386/jigdo-cd/debian-31r1-i386-binary-1.jigdo

Downloading .jigdo file

jigdoファイルのダウンロード後，スキャンするパスを聞いてくる．
Enter のみ入力．

---

-------------------------------------------------------------
Images offered by `http://cdimage.debian.org/debian-cd/3.1_r1/i386/jigdo-cd/debian-31r1-i386-binary-1.jigdo':
  1: 'Debian GNU/Linux 3.1 r1 "Sarge" - Official i386 Binary-1 CD' (debian-31r1-i386-binary-1.iso)

Further information about `debian-31r1-i386-binary-1.iso':
Generated on Tue, 20 Dec 2005 00:33:52 +0100

---

-------------------------------------------------------------
If you already have a previous version of the CD you are
downloading, jigdo can re-use files on the old CD that are also
present in the new image, and you do not need to download them
again. Mount the old CD ROM and enter the path it is mounted under
(e.g. `/mnt/cdrom').
Alternatively, just press enter if you want to start downloading
the remaining files.
Files to scan:

ミラーを選択．
/etc/apt/sources.list から1行目のデータが使用されるのか，
デフォルトで http://ftp.ring.gr.jp/pub/linux/debian/debian-ddtp/ になっていた．

ここで，jp と入力すると，日本のミラーサイトの一覧が表示される．

---

-------------------------------------------------------------
The jigdo file refers to files stored on Debian mirrors. Please
choose a Debian mirror as follows: Either enter a complete URL
pointing to a mirror (in the form
`ftp://ftp.debian.org/debian/'), or enter any regular expression
for searching through the list of mirrors: Try a two-letter
country code such as `de', or a country name like `United
States', or a server name like `sunsite'.
Debian mirror [http://ftp.ring.gr.jp/pub/linux/debian/debian-ddtp/]:

Downloading .template file

以下が表示されてダウンロードとイメージデータ作成開始．

---

-------------------------------------------------------------
Merging parts from `file:' URIs, if any...
Found 0 of the 1190 files required by the template
Will not create image or temporary file - try again with different input files

以下が表示されたらイメージデータ作成完了．

Found 1 of the 1 files required by the template
Successfully created `debian-31r1-i386-binary-1.iso'

---

-------------------------------------------------------------
Finished!
The fact that you got this far is a strong indication that `debian-31r1-i386-binary-1.iso'
was generated correctly. I will perform an additional, final check,
which you can interrupt safely with Ctrl-C if you do not want to wait.

OK: Checksums match, image is good!

Windowsでイメージを作成するには，以下サイトからWindows用クライアントをダウンロードして使用する．
http://atterer.net/jigdo/

jigdo-lite.bat

で起動．

2. ISOイメージを焼く
Windows でイメージを焼くには，CD Manipulator を利用する．
  - 下段左から二番目をクリック
  - トラックリストタブをクリック
  - メニューバーのトラック -> iso ファイルの挿入
  - CD の書き込み

3. インストール

- Reference
Sarge(Debian) をインストールしよう CD編
http://www.eva.gr.jp/~help/linux/2005/20050711.html
jigdo (Jigsaw Download) - a download manager for CD/DVD images
http://atterer.net/jigdo/

- Summary
Apache2 で SSL を導入する．
[2006-11-09] 変更．
[2008-06-18] 変更．

- 手順
1. 鍵の生成
2. SSL用 confファイル作成
3. VirtualHost とSSLモジュールの有効化
4. apache の再起動

- /usr/share/ssl-cert/ssleay.cnf をコピーする

# cd /usr/share/ssl-cert
# cp ssleay.cnf custom.cnf
# vi custom.cnf

- /usr/share/ssl-cert/custom.cnf を編集

<<

- /etc/apache2/ssl/apache.pem を作成

# mkdir /etc/apache2/ssl
# make-ssl-cert /usr/share/ssl-cert/custom.cnf /etc/apache2/ssl/apache.pem

- /etc/apache2/sites-available/ssl を作成

# cp /usr/share/apache2/config/default-443 /etc/apache2/sites-available/ssl

- /etc/apache2/sites-available/ssl を編集

- mod_sslを有効化

# a2enmod ssl
# a2ensite ssl

- Reference
日々の試行と実験: SSL導入(Debian sarge apache2)
http://golgotha.xrea.jp/archives/2006/01/ssldebian_sarge.html

klog: Debian の Apache2 で SSL セットアップ
http://5net.com/blog/2004/11/debian_apache2_ssl.html

deb/WWWサーバ - PukiWiki Plus!
http://motoka.com/wiki/?cmd=read&page=deb%2FWWW%A5%B5%A1%BC%A5%D0

SSL用証明書の作成(Linux編)
http://www.aconus.com/~oyaji/www/certs_linux.htm

- [2008-06-18] 追記
Debian Etchでは
apache2-ssl-certificate ではなく，
make-ssl-certを利用する．

- Reference
LDAPv3 HOWTO on Debian
http://www.tom.sfc.keio.ac.jp/~torry/ldap/ldap.html#doc14_2289
Windowsネットワーク用統合認証サーバー構築(OpenLDAP+Samba) - Fedoraで自宅サーバー構築
http://fedorasrv.com/openldap.shtml
PC View : Network : LDAPではじめる情報共有—第1回 LDAPの概要(1)—ディレクトリと識別名
http://www.pc-view.net/Network/040130/

- Summary
Unofficial な aptパッケージ
- Reference
apt-get.org: Unofficial APT repositories
http://apt-get.org/

- インストール

# aptitude install libapache-mod-ssl
# aptitude install libapache-mod-ssl-doc
# cat /usr/share/doc/libapache-mod-ssl-doc/examples/mod-ssl.conf >> /etc/apache/conf.d/ssl.conf
# zcat /usr/share/doc/libapache-mod-ssl-doc/examples/vhost.conf.gz >> /etc/apache/conf.d/vhost.conf
# apachectl configtest

- 鍵を作る

# mod-ssl-makecert
What type of certificate do you want to create?

1. dummy (dummy self-signed Snake Oil cert)
2. test (test cert signed by Snake Oil CA)
3. custom (custom cert signed by own CA)
4. existing (existing cert)

Use dummy when you are a vendor package maintainer,
test when you are an admin but want to do tests only,
custom when you are an admin willing to run a real server
existing when you are an admin who upgrades a server.

Normally you would choose 2.

your choice: 2
Which algorithm should be used to generate required key(s)?

1. RSA
2. DSA

Normally you would choose 1.

your choice: 1
SSL Certificate Generation Utility (mkcert.sh)
Copyright (c) 1998-2000 Ralf S. Engelschall, All Rights Reserved.

Generating test certificate signed by Snake Oil CA [TEST]
WARNING: Do not use this for real-life/production systems
______________________________________________________________________

STEP 1: Generating RSA private key (1024 bit) [server.key]
1261417 semi-random bytes loaded
Generating RSA private key, 1024 bit long modulus
.++++++
....++++++
e is 65537 (0x10001)
______________________________________________________________________

STEP 2: Generating X.509 certificate signing request [server.csr]
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a
DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.

---

-
1. Country Name (2 letter code) [XY]:JP
2. State or Province Name (full name) [Snake Desert]:Tokyo
3. Locality Name (eg, city) [Snake Town]:Itabashi-ku
4. Organization Name (eg, company) [Snake Oil, Ltd]:Example Co.,Ltd.
5. Organizational Unit Name (eg, section) [Webserver Team]:Web Contents Group
6. Common Name (eg, FQDN) [www.snakeoil.dom]:example.com
7. Email Address (eg, name@FQDN) [www@snakeoil.dom]:admin@example.com
8. Certificate Validity (days) [365]:
______________________________________________________________________

STEP 3: Generating X.509 certificate signed by Snake Oil CA [server.crt]
Certificate Version (1 or 3) [3]:3
Signature ok
subject=/C=JP/ST=Tokyo/L=Itabashi-ku/O=Example Co.,Ltd./OU=Web Contents
Group/CN=example.com/emailAddress=admin@example.com
Getting CA Private Key
Verify: matching certificate & key modulus
Verify: matching certificate signature
/etc/apache/ssl.crt/server.crt: OK
______________________________________________________________________

STEP 4: Enrypting RSA private key with a pass phrase for security
[server.key]
The contents of the server.key file (the generated private key) has to be
kept secret. So we strongly recommend you to encrypt the server.key file
with a Triple-DES cipher and a Pass Phrase.
Encrypt the private key now? [Y/n]: n
Warning, you're using an unencrypted RSA private key.
Please notice this fact and do this on your own risk.
______________________________________________________________________

RESULT: Server Certification Files

o /etc/apache/ssl.key/server.key
   The PEM-encoded RSA private key file which you configure
   with the 'SSLCertificateKeyFile' directive (automatically done
   when you install via APACI). KEEP THIS FILE PRIVATE!

o /etc/apache/ssl.crt/server.crt
   The PEM-encoded X.509 certificate file which you configure
   with the 'SSLCertificateFile' directive (automatically done
   when you install via APACI).

o /etc/apache/ssl.csr/server.csr
   The PEM-encoded X.509 certificate signing request file which
   you can send to an official Certificate Authority (CA) in order
   to request a real server certificate (signed by this CA instead
   of our demonstration-only Snake Oil CA) which later can replace
   the /etc/apache/ssl.crt/server.crt file.

WARNING: Do not use this for real-life/production systems

- 鍵を隠す

# chmod 600 /etc/apache/ssl.key/server.key

- apacheの再起動

# apachectl stop
# apachectl start

- Reference
http://shiro.pochi.cc/~sasaki/chalow/2004-12-09.html#2004-12-09-4
http://oceanicsky.dyndns.org/pukiwiki/?libapache-mod-ssl

- 問題
  apt-get を実行すると IPv6 アドレスが表示される．
  AWStats の実行も非常に遅くなる．

- /etc/modprobe.d/aliasesを下記のように修正

修正前 alias net-pf-10 ipv6
修正後 alias net-pf-10 off

- update-modules を実行し，/etc/modules.confを更新する

# update-modules

- reboot が必要かも

- Reference
Debian GNU/Linux スレッドテンプレ - install
http://debian.fam.cx/?install#content_1_50

2ch-Linux-Beginners - NetworksFAQs
http://linux2ch.is.land.to/?NetworksFAQs#f8b2e994

とりあえずやってみる 2005年8月
http://blog.goo.ne.jp/myuki_zzz/d/20050806

- Install

# aptitude install kernel-image-2.6.8-2-686

- /boot/grub/menu.lst の確認

- grub-install を実行

# grub-install /dev/hda
Probing devices to guess BIOS drives. This may take a long time.
Installation finished. No error reported.
This is the contents of the device map /boot/grub/device.map.
Check if this is correct or not. If any of the lines is incorrect,
fix it and re-run the script `grub-install'.

(fd0) /dev/fd0
(hd0) /dev/hda

- update-grub を実行

# update-grub
Searching for GRUB installation directory ... found: /boot/grub .
Testing for an existing GRUB menu.list file...

Could not find /boot/grub/menu.lst file. Would you like
/boot/grub/menu.lst generated for you? (y/N) y
Searching for splash image... none found, skipping...
Found kernel: /vmlinuz-2.4.18-bf2.4
Updating /boot/grub/menu.lst ... done

- /boot/grub/menu.lst を編集

- 再度 update-grub を実行

# update-grub
Searching for GRUB installation directory ... found: /boot/grub .
Testing for an existing GRUB menu.list file... found: /boot/grub/menu.lst
.
Searching for splash image... none found, skipping...
Found kernel: /vmlinuz-2.4.18-bf2.4
Updating /boot/grub/menu.lst ... done

- LILOの問い合わせを無くし，update-grubを自動的に実行させる
/etc/kernel-img.conf を作成

postinst_hook = /sbin/update-grub
postrm_hook = /sbin/update-grub
do_bootloader = no

- Reference
Iwatani Electronics - Debian GNU/Linux で利用する GNU GRUB
http://www2.i-e-c.co.jp/grubindex.html

- language-env user-ja をインストール

# aptitude install language-env user-ja

- 日本語環境の設定

% set-language-env

- ja-trans と jless のインストール

# aptitude install ja-trans jless

- locale を生成
/etc/locale.gen の編集

ja_JP.EUC-JP EUC-JP

# /usr/sbin/locale-gen

- /etc/apt/apt.conf.d/70debconf に追記

- Proxyを利用

Acquire::http::Proxy "http://proxy.example.com:8080/";
Acquire::ftp::Proxy "ftp://proxy.example.com:8080/";

又は

Acquire {
Retries "0";
http {
Proxy "http://proxy.example.com:8080/";
}
ftp {
Proxy "ftp://proxy.example.com:8080/";
}
// comment
}

- Proxy認証を利用

Acquire::http::Proxy "http://username:password@proxy.example.com:8080/";
Acquire::ftp::Proxy "ftp://username:password@proxy.example.com:8080/";

又は

Acquire {
Retries "0";
http {
Proxy "http://username:password@proxy.example.jp:8080/";
}
ftp {
Proxy "ftp://username:password@proxy.example.jp:8080/";
}
// comment
}

- Reference
  Linux/apt.conf - discypus
  http://discypus.jp/wiki/?Linux%2Fapt.conf

- Summar
  「Debian GNU/Linux徹底入門」の姉妹書
  
- Reference
  本: Debian 辞典