My Ubuntu 22.04 preferences

1
2
3
4

                         setup via ssh/VNC
new-pc (Ubuntu 22.04) <--------------------- ssh-pc (Ubuntu, hacked)

  old-pc (Ubuntu 20.04)

1
2
3
4
5

# new-pc:
sudo apt install openssh-server

# on ssh-pc:
ssh-copy-id -i ~/.ssh/id_ed25519.pub NEW_PC_IP

1
2
3
4

# https://fishshell.com/
# https://launchpad.net/~fish-shell/+archive/ubuntu/release-3
sudo apt-add-repository ppa:fish-shell/release-3  # [ENTER]
sudo apt install -y fish

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

sudo apt install dropbear-initramfs

# /usr/share/doc/dropbear-initramfs/README.initramfs:
# > Command line options are taken from the $DROPBEAR_OPTIONS variable.  For
# > instance add DROPBEAR_OPTIONS="-p 2222" to /etc/dropbear/initramfs/dropbear.conf
# > to change the listening port to 2222.
sudo vi /etc/dropbear/initramfs/dropbear.conf
# if you want to change port:
# DROPBEAR_OPTIONS="-p 2222"

# /usr/share/doc/dropbear-initramfs/README.initramfs:
# > Password logins are disabled.  Public key(s) used for authentication are taken
# > from /etc/dropbear/initramfs/authorized_keys, or from
# > /etc/dropbear/initramfs/id_{dsa,rsa,ecdsa,ed25519}.pub if the former
# > does not exist.  A warning is raised if no authorized keys could be
# > found.
sudo vi /etc/dropbear/initramfs/authorized_keys  # paste ssh-pc's public key (~/.ssh/id_ed25519.pub)

# /usr/share/doc/dropbear-initramfs/README.initramfs:
# > Don't forget to run update-initramfs when you changed the config to make it
# > effective!
# >   # update-initramfs -u -k all
sudo update-initramfs -u -k all
#update-initramfs: Generating /boot/initrd.img-5.15.0-56-generic
#W: Possible missing firmware /lib/firmware/amdgpu/yellow_carp_gpu_info.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/vangogh_gpu_info.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_rlc.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_mec2.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_mec.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_me.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_pfp.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_ce.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_sdma1.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_sdma.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/sienna_cichlid_mes.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/navi10_mes.bin for module amdgpu
#update-initramfs: Generating /boot/initrd.img-5.15.0-43-generic
#W: Possible missing firmware /lib/firmware/amdgpu/yellow_carp_gpu_info.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/vangogh_gpu_info.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_rlc.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_mec2.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_mec.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_me.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_pfp.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_ce.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_sdma1.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/cyan_skillfish_sdma.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/sienna_cichlid_mes.bin for module amdgpu
#W: Possible missing firmware /lib/firmware/amdgpu/navi10_mes.bin for module amdgpu

sudo reboot

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

Since by default the initramfs' host keys differ from those of the main SSH
server, SSH clients such as OpenSSH's might issue a "REMOTE HOST IDENTIFICATION
HAS CHANGED!" warning.  In that case you might want to use another port for the
initramfs SSHd, and/or the "UserKnownHostsFile" option to specify an
alternative known_hosts file:

  $ ssh -F ~/.luks/ssh.conf remote.system.com
  $ cat ~/.luks/ssh.conf
  Host *
    User root
    UserKnownHostsFile ~/.luks/known_hosts
    PasswordAuthentication no
    IdentityFile ~/.ssh/id_rsa

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

mkdir ~/.luks/

vi ~/.ssh/config
: <<'CONF'
Host new-pc-decrypt
    HostName NEW_PC_IP
    User root
    UserKnownHostsFile ~/.luks/known_hosts
    # if DROPBEAR_OPTIONS="-p 2222":
    # Port 2222
CONF

ssh new-pc-decrypt echo ok  # ok

#
# >  You can then unlock the disk remotely via SSH with
# >
# >     ssh -tF ~/.luks/ssh.conf root@remote.system.com cryptroot-unlock
# >
# >  Or, using a local gpg-encrypted key file:
# >
# >     gpg --decrypt ~/.luks/remote.key.gpg | ssh -TF ~/.luks/ssh.conf root@remote.system.com cryptroot-unlock
ssh -t new-pc-decrypt cryptroot-unlock
#Please unlock disk nvme0n1p3_crypt:
#cryptsetup: nvme0n1p3_crypt set up successfully

1
2
3

sudo apt update
sudo apt upgrade
sudo reboot

1
2
3
4
5
6
7

# [screen-saver-2h]
gsettings get org.gnome.desktop.session idle-delay  # uint32 300
gsettings set org.gnome.desktop.session idle-delay 7200

# win+right drag to resize
gsettings get org.gnome.desktop.wm.preferences resize-with-right-button  # false
gsettings set org.gnome.desktop.wm.preferences resize-with-right-button true

1
2
3
4
5
6

# https://www.realvnc.com/en/connect/download/viewer/linux/ DEB x64
mkdir /tmp/vnc/; cd /tmp/vnc/
wget https://downloads.realvnc.com/download/file/viewer.files/VNC-Viewer-6.22.315-Linux-x64.deb
#get https://www.realvnc.com/download/file/viewer.files/VNC-Viewer-6.20.529-Linux-x64.deb
sudo dpkg -i VNC-Viewer-*-Linux-x64.deb
vncviewer -help

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54

mkdir /tmp/vnc/; cd /tmp/vnc/
wget https://www.realvnc.com/download/file/vnc.files/VNC-5.3.3-Linux-x64-DEB.tar.gz
tar xvf VNC-5.3.3-Linux-x64-DEB.tar.gz  # VNC-Server-5.3.3-Linux-x64.deb VNC-Viewer-5.3.3-Linux-x64.deb
sudo dpkg -i VNC-Server-5.3.3-Linux-x64.deb
#Selecting previously unselected package realvnc-vnc-server.
#(Reading database ... 399211 files and directories currently installed.)
#Preparing to unpack VNC-Server-5.3.3-Linux-x64.deb ...
#Unpacking realvnc-vnc-server (5.3.3.27908) ...
#Setting up realvnc-vnc-server (5.3.3.27908) ...
#Updating /etc/pam.d/vncserver
#Updating /etc/pam.conf... done
#
#NOTICE: common configuration in /etc/pam.d contains the following modules:
#   pam_sss.so
#The default vncserver PAM configuration only enables pam_unix. See 
#`man vncinitconfig' for details on any manual configuration required.
#
#Looking for font path... not found.
#Generating private key... done
#Installed systemd unit for VNC Server in Service Mode daemon
#Start or stop the service with:
#  systemctl (start|stop) vncserver-x11-serviced.service
#Mark or unmark the service to be started at boot time with:
#  systemctl (enable|disable) vncserver-x11-serviced.service
#
#Installed systemd unit for VNC Server in Virtual Mode daemon
#Start or stop the service with:
#  systemctl (start|stop) vncserver-virtuald.service
#Mark or unmark the service to be started at boot time with:
#  systemctl (enable|disable) vncserver-virtuald.service
#
#Processing triggers for shared-mime-info (2.1-2) ...
#Processing triggers for man-db (2.10.2-1) ...
#Processing triggers for hicolor-icon-theme (0.17-2) ...
#Processing triggers for mailcap (3.70+nmu1ubuntu1) ...
#Processing triggers for gnome-menus (3.36.0-1ubuntu3) ...
#Processing triggers for desktop-file-utils (0.26-1ubuntu3) ...

sudo vnclicense -add <LICENSE>  # License key <Free> has been successfully applied.
sudo vncpasswd -service
#Setting "Password" VNC parameter for Service Mode server
#Password:
#Verify:
#Successfully set "Password" VNC parameter in /root/.vnc/config.d/vncserver-x11
#Please note users of third party VNC Viewer projects will be able to connect by
#entering the first 8 characters of this password only.
sudo systemctl status vncserver-x11-serviced.service  # disabled, inactive
sudo systemctl status vncserver-virtuald.service      # disabled, inactive

sudo systemctl start vncserver-x11-serviced.service
sudo lsof -nP -i:5900
#COMMAND    PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
#vncserver 9520 root   10u  IPv6 145879      0t0  TCP *:5900 (LISTEN)
#vncserver 9520 root   11u  IPv4 145880      0t0  TCP *:5900 (LISTEN)

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# on ssh-pc:
ssh NEW_PC_IP 'mkdir -pv ~/.local/share/fish/'
scp ~/.local/share/fish/{fish_history,fish_read_history} NEW_PC_IP:~/.local/share/fish/
ssh NEW_PC_IP 'mkdir -pv ~/go/bin/'
scp ~/go/bin/powerline-go NEW_PC_IP:~/go/bin/
scp ~/go/bin/peco         NEW_PC_IP:~/go/bin/
ssh NEW_PC_IP 'mkdir -pv ~/opt/dummy/{bin/,sbin/,share/man/}'

# on new-pc:
fish

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

mkdircd /tmp/cica/
wget https://github.com/miiton/Cica/releases/download/v5.0.3/Cica_v5.0.3.zip
unzip Cica_v5.0.3.zip
#Archive:  Cica_v5.0.3.zip
#  inflating: Cica-Bold.ttf           
#  inflating: Cica-BoldItalic.ttf     
#  inflating: Cica-Regular.ttf        
#  inflating: Cica-RegularItalic.ttf  
#  inflating: COPYRIGHT.txt           
#  inflating: LICENSE.txt             

mkdir ~/.local/share/fonts/
mv -v *.ttf ~/.local/share/fonts/
#renamed 'Cica-Bold.ttf' -> '/home/wsh/.local/share/fonts/Cica-Bold.ttf'
#renamed 'Cica-BoldItalic.ttf' -> '/home/wsh/.local/share/fonts/Cica-BoldItalic.ttf'
#renamed 'Cica-Regular.ttf' -> '/home/wsh/.local/share/fonts/Cica-Regular.ttf'
#renamed 'Cica-RegularItalic.ttf' -> '/home/wsh/.local/share/fonts/Cica-RegularItalic.ttf'

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
# rm -v ~/.cargo/bin/{bat,cargo-generate,delta,dua,exa,fd,hyperfine,loc,rbspy,rg}
~/.cargo/bin/cargo install -v \
  bat \
  cargo-generate \
  dua-cli \
  exa \
  fd-find \
  git-delta \
  hyperfine \
  loc \
  rbspy \
  ripgrep \
  ;

1
2
3
4
5
6
7
8

sudo apt-get install apt-transport-https software-properties-common
sudo apt install ca-certificates
# add Xpra GPG key(s)
sudo wget -O "/usr/share/keyrings/xpra-2022.gpg" https://xpra.org/xpra-2022.gpg
# add Xpra repository
wget -O "/etc/apt/sources.list.d/xpra.list" https://xpra.org/repos/jammy/xpra.list
sudo apt-get update
sudo apt-get install xpra

1
2
3

mkdircd /tmp/chrome/
wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
sudo dpkg -i google-chrome-stable_current_amd64.deb

1
2
3

mkdircd /tmp/code/
wget https://az764295.vo.msecnd.net/stable/6261075646f055b99068d3688932416f2346dd3b/code_1.73.1-1667967334_amd64.deb
sudo dpkg -i code_*_amd64.deb

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

zcat /usr/share/doc/wireshark-common/README.Debian.gz

tshark
#Capturing on 'eno1'
#tshark: Couldn't run /usr/bin/dumpcap in child process: Permission denied
#
#0 packets captured

# sudo dpkg-reconfigure wireshark-common
cat /etc/group  # wireshark❌148:
id      # uid=1000(wsh) gid=1000(wsh) groups=1000(wsh),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),122(lpadmin),134(lxd),135(sambashare),145(libvirt)
groups  # wsh adm cdrom sudo dip plugdev lpadmin lxd sambashare libvirt
sudo usermod -a -G wireshark $USER
# logout, login
id      # uid=1000(wsh) gid=1000(wsh) groups=1000(wsh),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),122(lpadmin),134(lxd),135(sambashare),145(libvirt),148(wireshark)
groups  # wsh adm cdrom sudo dip plugdev lpadmin lxd sambashare libvirt wireshark

tshark
#Capturing on 'eno1'
# ** (tshark:96839) 17:04:13.744884 [Main MESSAGE] -- Capture started.
# ** (tshark:96839) 17:04:13.744924 [Main MESSAGE] -- File: "/tmp/wireshark_eno1GK9QL1.pcapng"
#    1 0.000000000 172.16.50.121 → 172.16.50.1  SSH 286 Server: Encrypted packet (len=220)
#...

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

tcpdump
#tcpdump: eno1: You don't have permission to capture on that device
#(socket: Operation not permitted)

ls -l /usr/bin/tcpdump /usr/bin/dumpcap
#-rwxr-xr-- 1 root wireshark  129696  3月  5 01:13 /usr/bin/dumpcap
#-rwxr-xr-x 1 root root      1331320  3月 25 18:52 /usr/bin/tcpdump

sudo chgrp wireshark /usr/bin/tcpdump
sudo chmod o-x /usr/bin/tcpdump
ls -l /usr/bin/tcpdump /usr/bin/dumpcap
#-rwxr-xr-- 1 root wireshark 1331320  3月 25 18:52 /usr/bin/tcpdump

getcap /usr/bin/tcpdump  # (nothing)
getcap /usr/bin/dumpcap  # /usr/bin/dumpcap cap_net_admin,cap_net_raw=eip

sudo setcap cap_net_admin,cap_net_raw+ep /usr/bin/tcpdump
getcap /usr/bin/tcpdump  # /usr/bin/tcpdump cap_net_admin,cap_net_raw=ep

tcpdump
#tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
#listening on eno1, link-type EN10MB (Ethernet), snapshot length 262144 bytes
#17:17:23.977197 IP wsh79.ssh > _gateway.61435: Flags [P.], seq 51393655:51393843, ack 2212120736, win 501, options [nop,nop,TS val 3755970434 ecr 1623], length 188
#...

1
2

sudo add-apt-repository ppa:audio-recorder/ppa
sudo apt install audio-recorder

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

mkdircd /tmp/docker/
curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
sudo usermod -aG docker $USER  # re-login to apply

docker pull alpine
docker pull debian:buster
docker pull debian:buster-slim
docker pull gcc
docker pull python:slim
docker pull ubuntu
docker pull ubuntu:12.04
docker pull ubuntu:14.04
docker pull ubuntu:16.04
docker pull ubuntu:18.04
docker pull ubuntu:20.04
docker pull ubuntu:22.04

# @ref:docker-login
docker login  # wataash

1
2
3

cd /tmp/
wget -O dropbox.deb 'https://www.dropbox.com/download?dl=packages/ubuntu/dropbox_2020.03.04_amd64.deb'
sudo dpkg -i dropbox.deb

1
2

# on ssh-pc:
scp ~/.fasd NEW_PC_IP:~/

1
2

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
brew install hugo

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

cat /etc/lsb-release  # 22.04 focal
# （TODO: Ubuntu 22.04 LTSの場合 がまだ無い）
# Ubuntu 20.04 LTSの場合:
wget -q https://www.ubuntulinux.jp/ubuntu-ja-archive-keyring.gpg -O- | sudo apt-key add -
wget -q https://www.ubuntulinux.jp/ubuntu-jp-ppa-keyring.gpg -O- | sudo apt-key add -
sudo wget https://www.ubuntulinux.jp/sources.list.d/focal.list -O /etc/apt/sources.list.d/ubuntu-ja.list
sudo apt update
# 3. 以下のコマンドを実行し、パッケージをアップグレードします。
sudo apt-get update  # Hit:2 http://jp.archive.ubuntu.com/ubuntu focal InRelease
sudo apt-get install ubuntu-defaults-ja
---
The following additional packages will be installed:
  firefox-locale-ja fonts-noto-cjk-extra language-pack-gnome-ja language-pack-gnome-ja-base language-pack-ja
  language-pack-ja-base libzinnia0v5 mozc-utils-gui
Suggested packages:
  ibus-qt5
The following NEW packages will be installed:
  firefox-locale-ja fonts-noto-cjk-extra language-pack-gnome-ja language-pack-gnome-ja-base language-pack-ja
  language-pack-ja-base libzinnia0v5 mozc-utils-gui ubuntu-defaults-ja
0 upgraded, 9 newly installed, 0 to remove and 3 not upgraded.

1
2
3
4
5
6

mkdircd /tmp/jb/
wget https://download-cdn.jetbrains.com/toolbox/jetbrains-toolbox-1.24.11947.tar.gz
tar xvf jetbrains-toolbox-*.tar.gz
# GUI
/tmp/jb/jetbrains-toolbox-*/jetbrains-toolbox
# installed in ~/.local/share/JetBrains/Toolbox/, so /tmp/jetbrans... can be removed

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

pip install -U \
beautifulsoup4 \
click \
colorama \
compiledb \
cython \
gcovr \
graphviz \
httpie \
ipython \
jinja2 \
jupyter \
lark-parser \
logzero \
matplotlib \
orderedset \
pandas \
pydf \
pylint \
pyyaml \
requests \
requests-html \
scan-build \
scapy \
sklearn \
sortedcontainers \
terminal-colors \
youtube-dl \
;

1
2

brew install rbenv ruby-build
...TODO