daily

Author: szepeviktor

debian-setup/deb-legacy-hunter.sh

@@ -0,0 +1,33 @@
+#!/bin/bash
+
+exit 0
+
+#aptitude search --disable-columns --display-format "%p" <TERMS>
+
+# 100% sure to remove
+apt autoremove --purge
+
+# Not from stable
+aptitude search '?and(?installed, ?not(?archive(stable)))'
+
+# Not native architecture
+aptitude search '?and(?installed, ?not(?architecture(native)))'
+
+# Packages on hold
+aptitude search '?and(?installed, ?action(hold))'
+
+# Only configuration files left
+aptitude search '?config-files'
+
+# Transitional packages
+aptitude search '?and(?installed, ?description(transitional))'
+
+# Various legacy
+aptitude search '?and(?installed, ?or(?garbage, ?broken, ?obsolete))'
+
+# /etc - Broken symlinks
+find /etc -xtype l -print0 | xargs -0 -- ls -l
+# /etc - Ignored by etckeeper
+git -C /etc status --short --ignored
+# /etc - Legacy
+find /etc -path "*.ucf-dist" -o -path "*.dpkg-old" -o -path "*.dpkg-dist" -o -path "*~"

debian-setup/debian-setup2.sh

@@ -46,9 +46,9 @@ Pkg_install_quiet \
     localepurge unattended-upgrades apt-listchanges debsums \
     ncurses-term mc most less time moreutils unzip \
     logtail apg bc dos2unix ccze colordiff sipcalc iprange jq \
-    net-tools dnsutils ntpdate ipset netcat-openbsd lftp s-nail \
-    gcc g++ libc6-dev make strace \
-    unscd cruft bash-completion htop mmdb-bin geoipupdate \
+    net-tools dnsutils ntpsec-ntpdate ipset netcat-openbsd \
+    lftp s-nail gcc g++ libc6-dev make strace \
+    unscd cruft-ng bash-completion htop mmdb-bin geoipupdate \
     init-system-helpers needrestart git mtr-tiny whois openssl
 
 # Provide mail command

debian-setup/packages/chrony

@@ -12,9 +12,20 @@ fi
 cat >/etc/chrony/chrony.conf <<EOF
 # Welcome to the chrony configuration file. See chrony.conf(5) for more
 # information about usable directives.
+
+# Include configuration files found in /etc/chrony/conf.d.
+confdir /etc/chrony/conf.d
+
+# Use Debian vendor zone.
 pool ${CHRONY_POOL} iburst
 pool 2.debian.pool.ntp.org iburst
 
+# Use time sources from DHCP.
+sourcedir /run/chrony-dhcp
+
+# Use NTP sources found in /etc/chrony/sources.d.
+sourcedir /etc/chrony/sources.d
+
 # This directive specify the location of the file containing ID/key pairs for
 # NTP authentication.
 keyfile /etc/chrony/chrony.keys
@@ -26,7 +37,11 @@ cmdport 0
 # information.
 driftfile /var/lib/chrony/chrony.drift
 
+# Save NTS keys and cookies.
+ntsdumpdir /var/lib/chrony
+
 # Uncomment the following line to turn logging on.
+#log tracking measurements statistics
 log statistics
 
 # Log files location.
@@ -35,20 +50,21 @@ logdir /var/log/chrony
 # Log 10 msec offset changes.
 logchange 0.010
 
-## seccomp (-F -1) is not compatible with mailonchange
-#mailonchange root 0.500
-
 # Stop bad estimates upsetting machine clock.
 maxupdateskew 100.0
 
 # This directive enables kernel synchronisation (every 11 minutes) of the
-# real-time clock. Note that it can’t be used along with the 'rtcfile' directive.
-# Virtual servers do not have permanent RTCs.
+# real-time clock. Note that it can't be used along with the 'rtcfile' directive.
 #rtcsync
 
 # Step the system clock instead of slewing it if the adjustment is larger than
 # one second, but only in the first three clock updates.
 makestep 1 3
+
+# Get TAI-UTC offset and leap seconds from the system tz database.
+# This directive must be commented out when using time sources serving
+# leap-smeared time.
+leapsectz right/UTC
 EOF
 
 service chrony restart

debian-setup/packages/systemd

@@ -6,7 +6,7 @@ if [ "$WITHOUT_SYSTEMD" == "yes" ]; then
     # Remove systemd
     # http://without-systemd.org/wiki/index.php/How_to_remove_systemd_from_a_Debian_jessie/sid_installation
     if Is_installed systemd; then
-        Pkg_install_quiet sysvinit-core sysvinit-utils bootlogd rsyslog
+        Pkg_install_quiet sysvinit-core sysvinit-utils orphan-sysvinit-scripts bootlogd rsyslog
         cp /usr/share/sysvinit/inittab /etc/inittab
         # Change to agetty
         #sed -i -e 's|:/sbin/getty |:/sbin/agetty |' /etc/inittab

monitoring/monit/services/ntpdate_script

@@ -25,8 +25,9 @@ set -e
 export NTPSERVERS="${*:-0.europe.pool.ntp.org}"
 declare -i OFFSET_MSEC
 
-OFFSET="$(/usr/sbin/ntpdate-debian -q \
-    | sed -n -e '0,/^.*) [+-]\([0-9.]\+\) +\/- [0-9.]\+ .*$/ s//\1/p')"
+OFFSET="$(
+    /usr/sbin/ntpdate-debian -q | sed -n -e '0,/^.*) [+-]\([0-9.]\+\) +\/- [0-9.]\+ .*$/ s//\1/p'
+)"
 
 if [ -z "$OFFSET" ]; then
     Error 1 "Failed to measure offset"

monitoring/ntpdated

@@ -2,14 +2,14 @@
 #
 # Run ntpdate daily and on reboot to correct the system clock.
 #
-# VERSION       :0.6.1
-# DATE          :2016-03-06
+# VERSION       :0.7.1
+# DATE          :2025-09-19
 # AUTHOR        :Viktor Szépe <[email protected]>
 # LICENSE       :The MIT License (MIT)
 # URL           :https://github.com/szepeviktor/debian-server-tools
 # BASH-VERSION  :4.2+
 # DEPENDS       :apt-get install ntpdate bind9-host
-# CONFIG        :/etc/default/ntpdate
+# CONFIG        :/etc/default/ntpsec-ntpdate
 # LOCATION      :/usr/local/sbin/ntpdated
 # CRON.D        :@reboot root	/usr/local/sbin/ntpdated
 # CRON.D        :@hourly root	/usr/local/sbin/ntpdated
@@ -44,9 +44,9 @@ Get_pool_ips()
 
 set -e
 
-if [ -r /etc/default/ntpdate ]; then
+if [ -r /etc/default/ntpsec-ntpdate ]; then
     # shellcheck disable=SC1091
-    source /etc/default/ntpdate
+    source /etc/default/ntpsec-ntpdate
 fi
 
 # shellcheck disable=SC2086,SC2046