install_commands_bullseye.txt

Install Debian Bullseye with MATE desktop, ssh server, webserver and user visss
***********

add visss user to sudoer:
su
/sbin/adduser username sudo

configure network cards
network card for leader fixed ip 192.168.100.1
network card for follower fixed ip 192.168.200.1

***********


sudo apt-get update
sudo apt-get upgrade
sudo apt install make  gcc  libx11-dev libxext-dev libgtk-3-dev libglade2-0 libglade2-dev libpcap0.8 libcap2 ethtool  net-tools  git gitk libcanberra-gtk-module libcanberra-gtk3-module libtiff-dev libboost-all-dev ffmpeg vlc apt-transport-https intltool  libges-1.0-dev libges-1.0-dev gstreamer1.0-plugins-bad libnotify-bin libnotify-dev ipython3 cmake-data librhash0 libuv1 cmake-qt-gui  libavcodec-dev libavformat-dev libswscale-dev libdc1394-22-dev libxine2-dev libv4l-dev libgtk2.0-dev libtbb-dev libatlas-base-dev libmp3lame-dev libtheora-dev libvorbis-dev libxvidcore-dev libopencore-amrnb-dev libopencore-amrwb-dev x264 v4l-utils  python3-numpy python3-dev python3-pip htop openssh-server mdm mdadm  samba cifs-utils  chrome-gnome-shell apache2 certbot  libpcap-dev python3-tk unattended-upgrades chrony net-tools libopencv-dev gnome-disk-utility gnome-system-tools software-properties-gtk network-manager-openconnect-gnome openconnect seahorse rsync x2goserver x2goserver-xsession gtkterm python3-pysolar python3-filelock autossh

wget -qO - https://download.sublimetext.com/sublimehq-pub.gpg | sudo apt-key add -
echo "deb https://download.sublimetext.com/ apt/stable/" | sudo tee /etc/apt/sources.list.d/sublime-text.list 
sudo apt-get update
sudo apt-get install sublime-text



*********************
download gig e v framework
https://www.teledynedalsa.com/en/support/downloads-center/software-development-kits/132/
of from Speicherwolke VISSS folder!

cd DALSA/
sudo ./corinstall 

reboot!


#### VISSSS Software #################
cd
git clone https://github.com/maahn/VISSS_configuration

cd
git clone https://github.com/maahn/VISSS
cd VISSS/data-acquisition/
sudo cp /home/visss/VISSS/scripts/visss-sudoers /etc/sudoers.d/visss

make

If make fails, try "source /etc/profile"


mkdir -p /home/visss/.local/share/applications/
ln -s /home/visss/VISSS/scripts/visss_gui.desktop /home/visss/.local/share/applications/



launch visss_GUI in /home/visss/Desktop/VISSS/scripts/  to sign them

drag visss_GUI to menu bar for shortcut


mkdir -p ~/.config/autostart
ln -s /home/visss/VISSS/scripts/visss_gui.desktop /home/visss/.config/autostart/


********* autologin without Password
make sure lightdm is the used display manager with:

sudo dpkg-reconfigure lightdm

then, add to /etc/lightdm/lightdm.conf

[SeatDefaults]
autologin-user=visss
autologin-user-timeout=0
user-session=mate

don't forget to reboot to test whether it works!

### timezone

sudo timedatectl set-timezone UTC

####### AUTOSSH

Copy SSH Key visss_ftpserver.key to VISSS

add to crontab:
@reboot screen -S 'autossh'  -d -m bash -c 'autossh -N -M 0 -p 22 -o "ServerAliveInterval 30" -o "ServerAliveCountMax 3"  -i visss_ftpserver.key visss@ftp.meteo.uni-leipzig.de -R 0.0.0.0:2201:localhost:22'

Replace 2201 by apppropiate port number

###### VPN (DEPRECEATED USE AUTOSSH)

configure vpn with name vpn.uni-leipzig.de

add file "/etc/polkit-1/localauthority/10-vendor.d/org.freedesktop.NetworkManager.pkla" with:
--
[nm-applet]
Identity=unix-user:visss
Action=org.freedesktop.NetworkManager.*
ResultAny=yes
ResultInactive=no
ResultActive=yes
--

create VPN script  "/home/visss/vpn_reconnect.sh" with:
--
#!/bin/bash
CON="vpn.uni-leipzig.de"
STATUS=`nmcli con show --active | grep $CON | cut -f1 -d " "`
if [ -z "$STATUS" ]; then
    nmcli con up $CON
fi
--

do "chmod +x /home/visss/vpn_reconnect.sh" and add to cron with "crontab -e" and add: 
--
* * * * * /home/visss/vpn_reconnect.sh  > /home/visss/vpn_reconnect.log 2>&1
--

finally remove (ie set it to blank) the password of the login key ring (using seahorse), it needs to be unlocked for the vpn password       

##### apache2 web server for minitoring #####

change directory in /etc/apache2/sites-enabled/000-default.conf
DokumentRoot=/data

add to /etc/apache2/apache2.conf
--
<Directory /data/>
	Options Indexes FollowSymLinks
	AllowOverride None
	Require all granted
      EnableMMAP Off
</Directory>
--

sudo systemctl restart apache2

#### automatic updates

automatic security updates can be enabled by software-properties-gtk

but make sure to exclude kernel upgrades becuase they mess with the serial card drivers:
sudo nano /etc/apt/apt.conf.d/50unattended-upgrades

Unattended-Upgrade::Package-Blacklist {
      "linux-headers*";
      "linux-image*";
      "linux-generic*";
      "linux-modules*";
}






####create RAID (if several HDD are installed) #####

#use partitions and make them a little smaller becuase disk sizes are not always the same which can cause problems when swapping disks

sudo mdadm --create --verbose /dev/md0 --level=5 --raid-devices=3 /dev/sdb1 /dev/sdc1 /dev/sdd1
use GUI to fromat and setup RAID in /data
check whetehr RAID exists after reboot



#### Ethernet card #################
Only required for 5000baseT interfaces and nano 5G cameras:

sudo cp VISSS/scripts/advertise5000baseT.service /etc/systemd/system
sudo systemctl enable advertise5000baseT.service

Ethtools responds with 'Cannot advertise speed 5000 duplex full' but it works anyway?

test with:
sudo service advertise5000baseT start
systemctl status advertise5000baseT.service

sudo ethtool enp4s0


#### clock
 *** only needed when two computers record data of cameras **

add trigger as a clock for the follower, open "sudo nano /etc/chrony/chrony.conf"
server ADD.TRIGGER.IP.ADDRESS iburst prefer

on the trigger "sudo nano /etc/chrony/chrony.conf"
# Allow NTP client access from local network.
allow ADD.FOLLOWER.IP.ADDRESS

on both "sudo systemctl restart chronyd"

check clock status with "chronyc sources", ^* in the beginning means that clock is mainly used.


##### git access

create git token and enable using it with

git config --global credential.helper store