Re: Secure/hardened/minimal Debian (or "Why is the base system the way it is?")
On Sun, May 19, 2002 at 11:31:40PM -0400, Bradley Alexander wrote:
> On Sun, 2002-05-19 at 22:32, Nicole Zimmerman wrote:
>
>
> The other thing I do is to maintain a package list of machines I build.
> It for instance, I have selection of workstation packagelists, laptop,
> mailserver, firewall and the like. In essence, I do a
>
> dpkg --get-selections > packagelist
>
> This gives me the option of doing a base install, then doing
>
> dpkg --set-selections < packagelist
> apt-get dselect-upgrade
>
> in lieu of FAI. Putting the packagelist, drive partitioning information,
> and copies of tweaked datafiles onto a CD (like the woody minicd), would
> allow you to replicate machines relatively quickly.
>
This would add missing packages, but does it also remove (or even better
purge) unselected packages?
I recently posted to debian-users a similar question, when I try to make a
minimal install I choose the tasksel path and select nothing, this makes a
pretty minimal system without compilers and the sort (100+ packages). However
once I start dselect, all the "standard default" packages are marked to be
installed. People on debian-user recomended using the "_" at the top
category... I have yet to try this on a test box, but think it would just
select everything to be purged, which is not what I was looking for... just a
way to make dselect use the current package installation as a target instead
of "its default install package selection".
donfede
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: