What do you want to see in a minimal template (OpenVZ 7)
InceptionHosting
Hosting ProviderOG
in General
Hi Folks,
Just to get the troll answer out of the way: KVM
Moving on..
As per the title as a VPS user, what would you like to see in a minimal template for Debian 10 and Ubuntu 18 and CentOS 7? (8 not yet available as an EZ template to modify)
I am only focusing on the latest versions for now.
Current package set I have made up in my list to create a new minimal set:
debian10
- apt
- openssh-client
- openssh-server
- wget
- nano
- iputils-ping
- iptables
- tar
- unzip
- bzip2
- gzip
- bash
- sudo
ubuntu18
- apt
- openssh-client
- openssh-server
- wget
- nano
- iputils-ping
- iptables
- bash
- tar
- unzip
- bzip2
- gzip
- bash
- sudo
centos7
- initscripts
- authconfig
- yum
- rpm
- wget
- vim-minimal
- nano
- iproute
- iptables
- iptables-services
- openssh-clients
- openssh-server
- tar
- unzip
- bzip2
- gzip
- bash
- sudo
Packages must be available in the standard distro repo's
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
Comments
CentOS 7
Rather less than more, so fewer than the above OK.
man, add also ALPINE LINUX, its 2MB or something
Some of the additional small stuff I always install and use regularly with Ubuntu. I'll just leave them here ...
changetrack
dstat
iperf
iptraf
msmtp
rdiff-backup
s-nail
tmux
Not so simple with OpenVZ 7 as the template creation process is different.
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
Xen.
How about ensuring the a beefier set of default locales installed?
en_US.utf8 is necessary to get software like mosh working correctly and almost everyone can needs it.
I always end up wasting 5-10m with VZ virtualization when the locales are missing.
For debian, in addition to what you've listed: git, rsync, locales, apt-transport-https. Perhaps bash, but dash may well be sufficient.
Nowadays, just ssh and apt are enough for ansible to install everything else I'd need.
For debian
What about ca-certificates? Are they included in openssh-server already? Because I don't think so
I also like htop very much
For a CentOS 7 min template I would add:
Really? In a minimal template?
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
That's the default firewall on CentOS.
I know, but it is not a requirement.
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
Indeed, but because it's the default option it's what I expect to find in a minimal CentOS template.
I did not even put ip tables in the last set I made
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
I'd go firewalld not iptables on Centos too.
Stingy
Ubuntu 18.04
I (foolishly perhaps?) tried to install Mail-in-a-Box on an OpenVZ7 VPS today and there were two things that were annoyingly missing.
1. nano (which you have included)
2. curl
The third thing was Locale info which someone else already noted.
Recommended providers: BuyVM - MXroute - LunaNode - Forpsi - IntoVPS
Contact me for all of your Mail-in-a-Box email hosting needs at AnyDomain. I am also a proud reseller of MXroute email.
I hate firewalld and try to get rid of it. For me iptables makes it easier to manage scripts across different distros.
Generally less is better. If you've got wget, yum, which, rpm then pretty much anything else people want can be added by individuals in their standard setup script. Removing is trickier because your script has to figure which dependencies might break, and dependencies change.
I also prefer minimal to be minimal ...
BTW; Any easy way in CentOS to strip away packages to a required minimum?
(In Debian I'd use deborphan to help me remove stuff, then save the ouput of
dpkg --get-selectionsand use that with--set-selectionson another installation ...)I don't know of an easy way. My script has a 'whitelist' of minimal packages, and does a
rpm --query -athen builds a list of what to remove based on the difference. The annoying thing about this is I have to add all the dependencies into the whitelist, which is why minimal is easier to handle.I upgraded a not very small "minimal" centos7 to centos8, it worked, but I couldn't figure out an easy way to identify the orphans/deps I could get rid off easily, it used 1.1 GB of my 5 GB disk space in OVZ7 ...
For orphans you can probably do something like
orphans="" ; for r in $( rpm --query -a ) ; do d=$( rpm -qR ${r} | wc -l ) ; if [[ "${d}" -eq "0" ]] ; then orphans="${orphans} ${r}" ; fi ; done(just freestyling, completely untested).Try
yum autoremoveto get rid of the orphans.Plus
tmuxcurltreewhichjitterentropyrsyncsystemdfirewalldMinus
wgetnanoI feel the need to express a simple fact: Minimal means Minimal!
There's only one thing needed: SSH
openvpn ? many ppl buy these for just that
You don’t even want a package manager?
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
which came first: the chicken or the egg?
Very helpful thanks for your invaluable contribution.
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
what would I do with it?
Jokes aside, what you set in your first post is more than fine; anything optional should not be in a minimal.
The problem - if I understand correctly - is that you have to un-install / delete stuff, while a minimal install is to build only with the mandatory bricks/packages.