Debian 8 'Jessie' Desktop System Setup
Guided. Use entire disk with encrypted LVM. This creates a LUKS device (/dev/dm-0). Create a separate /home partition (it chooses 10 GB).
When prompted for what to install (by tasksel), keep the defaults and::
- Add the GNOME desktop environment
- Add Print server
- Add SSH server
Update The System
Run Update and install all the updates that have been released since this version of Debian was released. You may need to reboot afterwards if a newer Linux kernel was installed.
Update Manager won't remove old Linux kernels, to do this you need to instead use Synaptic Package Manager (under 'Installed (auto removable)') or apt-get.
Synaptic > Settings > Repositories (or use the stand-alone program 'Software and updates')
Remove the flash drive 'CD-ROM' from the list
(It was necessary to add 'http://mozilla.debian.net/ jessie-backports firefox-release' but Firefox has since returned to Debian.)
Packages Recommended For Desktop Systems - Free
Install the following:
- icedove - since replaced with thunderbird
- gparted - If you want to do filesystem checks you need gparted - see https://labs.riseup.net/code/issues/8070
- libreoffice 4 > 5 or later: sudo apt-get -t jessie-backports install libreoffice
- iceweasel [since replaced with Firefox] 45 > 47 or later: apt-get install -t jessie-backports firefox
- firmware-linux-free - https://packages.debian.org/jessie/firmware-linux-free. Info and lists of the firmware files: https://wiki.debian.org/Firmware.
- [Did I install hplip? linuxprinting.org-ppds is not installed and hplip 3.14.6 is installed]
You may need to add non-free to /etc/apt/sources.list for laptops that require binary blobs, for example for wireless adapters.
Note that we've chosen not to install flashplugin-nonfree and codecs for a wide array of audio and video formats.
Optionally install the following:
- Jessie backports: https://packages.debian.org/jessie-backports/firmware-linux-nonfree
- Microcode - https://wiki.debian.org/Microcode. You can check which version of the microcode your processors are running in Debian version 7 onwards by looking for "microcode" lines in /proc/cpuinfo. brought in by firmware-linux anyway.
- intel-microcode - https://packages.debian.org/source/jessie/intel-microcode
- amd64-microcode - https://packages.debian.org/source/jessie/amd64-microcode
Optional - Other Software
- To fix a video corruption issue: apt-get -t jessie-backports install xserver-xorg-video-intel
Run Software & Updates → Updates →
- Automatically check for updates: Daily
- When there are security updates: Download and install automatically
(The Software & Updates program is actually called software-properties-gtk and should have installed by default.)
Add any users that require it to "sudoers" so they can perform administrative tasks (when this has been done, Synaptic will henceforth ask for this user's password rather than root's):
# su -
# adduser <USERNAME> sudo
Each person should install Adblock Plus from https://adblockplus.org into their own Firefox (rather than install it once on each PC, centrally, from Debian repositories, because that version is updated too infrequently). Not only does Adblock Plus prevent you seeing many advertisements, it blocks an important attack vector used to distribute malware.