[gentoo-server] Re: Ideas for a server profile?

[MIkey]

Matthew Marlowe wrote:

> Actually, I find myself having to install at least the basic xorg stuff
> on servers lately due to various java dependencies(app servers
> and monitoring software/etc) - but I try to keep it as minimal as
> possible.  I know that is controversial, but I'd vote to keep the X
> flag in.  After all, its just a little more disk space and compile time.

Won't installing the java apps themselves that require X pull it in
regardless of the X use flag being set?  If not, the ebuild probably needs
to be fixed...
 
>> - having cron, atd, ... in system would be nice, do we want that?
>
> I'd vote no.  I have never found any agreement by sysadmins about
> which cron daemons work best.  And, many boxes dont require it.

ditto++
 
> Personally, I can not stand ssmtp - the first thing I have to do on every
> box is uninstall it and install postfix.

ditto++, although with me it is sendmail.  Mailwrapper should be hard
masked :)
 
> I also wish iptables, ifenslave, and iproute2 were included by default.

ditto++

> I also enable keep alives, disable pam authentication, and require
> key authentication in the ssh server.

ditto++ no the pam - i hate pam on servers unless they provide some sort of
shell access or need it for mysql authentication...  Otherwise it is
another layer of false security to screw up.

As far as my pretty much standard package list:

app-admin/logrotate
app-admin/localepurge
app-misc/screen           (for long builds)
net-dns/bind-tools        (for troubleshooting dns problems)
net-misc/netdate          (for when ntp is not running/configured)
sys-apps/eject            (for ejecting cds remotely during installs)
sys-apps/hotplug,coldplug (have these been superceded by udev?)
sys-boot/lilo
sys-fs/sysfsutils



-- 
gentoo-server@g.o mailing list