@@ -43,18 +43,26 @@ systemctl daemon-reload
4343systemctl restart sshd
4444
4545# Setup repositories
46- sed -i ' 1 {s/^/# /}' /etc/apt/sources.list.d/pve-enterprise.list
47- sed -i ' 1 {s/^/# /}' /etc/apt/sources.list.d/ceph.list
48-
49- echo ' deb https://deb.debian.org/debian/ bookworm main contrib non-free non-free-firmware
50-
51- deb https://security.debian.org/debian-security/ bookworm-security main contrib non-free non-free-firmware
52-
53- deb https://deb.debian.org/debian/ bookworm-updates main contrib non-free non-free-firmware
54-
55- deb https://deb.debian.org/debian/ bookworm-backports main contrib non-free non-free-firmware
56-
57- deb http://download.proxmox.com/debian/pve bookworm pve-no-subscription' | tee /etc/apt/sources.list
46+ echo " Enabled: no" >> /etc/apt/sources.list.d/pve-enterprise.sources
47+ echo " Enabled: no" >> /etc/apt/sources.list.d/ceph.sources
48+
49+ echo " Types: deb
50+ URIs: https://deb.debian.org/debian/
51+ Suites: trixie trixie-updates trixie-backports
52+ Components: main contrib non-free non-free-firmware
53+ Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
54+
55+ Types: deb
56+ URIs: https://security.debian.org/debian-security/
57+ Suites: trixie-security
58+ Components: main contrib non-free non-free-firmware
59+ Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg" | tee /etc/apt/sources.list.d/debian.sources
60+
61+ echo " Types: deb
62+ URIs: http://download.proxmox.com/debian/pve
63+ Suites: trixie
64+ Components: pve-no-subscription
65+ Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg" | tee /etc/apt/sources.list.d/proxmox.sources
5866
5967# Update packages
6068apt-get update
@@ -79,7 +87,7 @@ proxmox-boot-tool refresh
7987# Kernel hardening
8088curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files/main/etc/modprobe.d/server-blacklist.conf | tee /etc/modprobe.d/server-blacklist.conf > /dev/null
8189curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files/main/etc/sysctl.d/99-server.conf | tee /etc/sysctl.d/99-server.conf > /dev/null
82- sysctl -p
90+ sysctl -p /etc/sysctl.d
8391
8492# Rebuild initramfs
8593update-initramfs -u
0 commit comments