https://wiki.alpinelinux.org/w/api.php?action=feedcontributions&user=Roenbaeck&feedformat=atomAlpine Linux - User contributions [en]2024-03-19T08:25:34ZUser contributionsMediaWiki 1.40.0https://wiki.alpinelinux.org/w/index.php?title=Raspberry_Pi_4_-_Persistent_system_acting_as_a_NAS_and_Time_Machine&diff=17714Raspberry Pi 4 - Persistent system acting as a NAS and Time Machine2020-06-09T14:22:40Z<p>Roenbaeck: removed whitespace</p>
<hr />
<div>== Tinker, Tailor, Raspberry Pi ==<br />
<br />
I went ahead and got myself a Raspberry Pi 4B with 4GB RAM, which I intend to use as a job scheduling server, only to find out that the suggested OS, Raspberry Pi OS, is 32-bit. Fortunately, the Linux distro Alpine, which I’ve grown very fond of lately, is available for Raspberry Pi as aarch64, meaning it’s both 64-bit kernel and userland. Unfortunately the distro is currently, as of version 3.12, not set up for persistent storage and is more of a live playground. Gathering bits and pieces from various guides online, this can however be remedied with some tinkering. On this page you will find how to set up a persistent 64-bit OS on the Raspberry Pi, share a USB attached disk, while also adding some interesting software.<br />
<br />
If you go ahead and buy the Pi 4, note that it has micro-HDMI ports. I thought they were mini, for which I already had cabling, but alas, another adapter had to be purchased. Also, when attaching a USB disk it is better if it is externally powered. The Pi can however power newer external SSD drives that have low power consumption. I tried with a magnetic disk based one powered over USB first, but it behaved somewhat strangely. With that said, let’s go ahead and look at how to get yourself a shiny tiny new server.<br />
<br />
=== Tinkering for Persistence ===<br />
<br />
After downloading the v3.12 tarball from Alpine on my macOS, it’s time to set up the SDHC card for the Pi. I actually borrowed my old hand-me-down MacBook Air that I gave to my daughter a few years ago, since it has a built-in card reader, as opposed to my newer Air. The Pi boots off a FAT32 partition, but we want the system to reside in an ext4 partition later, so we will start by reserving a small portion of the card for the boot partition. This is done using Terminal in macOS with the following commands.<br />
<br />
diskutil list<br />
diskutil partitionDisk /dev/disk2 MBR "FAT32" ALP 256MB "Free Space" SYS R<br />
sudo fdisk -e /dev/disk2<br />
> f 1<br />
> w<br />
> exit<br />
<br />
The tarball should have decompressed once it hit your download folder. If not, use the option “xvzf” for tar.<br />
<br />
cd /Volumes/ALP<br />
tar xvf ~/Downloads/alpine-rpi-3.12.0-aarch64.tar<br />
nano usercfg.txt<br />
<br />
The newly created file usercfg.txt should contain the following:<br />
<br />
enable_uart=1<br />
gpu_mem=32<br />
disable_overscan=1<br />
<br />
The least amount of memory for headless is 32MB. The UART thing is beyond me, but seems to be a recommended setting. Removing overscan gives you more screen estate. If you intend to use this as a desktop computer rather than a headless server you probably want to allot more memory to the GPU and enable sound. Full specification for options can be found on the official Raspberry Pi homepage.<br />
<br />
After that we just need to make sure the card is not busy, so we change to a safe directory and thereafter eject the card (making sure that any pending writes are finalized).<br />
<br />
cd<br />
diskutil eject /dev/disk2<br />
<br />
Put the SDHC card in the Pi and boot. Login with “root” as username and no password. This presumes that you have connected everything else, such as a keyboard and monitor.<br />
<br />
setup-alpine<br />
<br />
During setup, select your keymap, hostname, etc, as desired. However, when asked where to store configs, type “none”, and the same for the apk cache directory. If you want to follow this guide to the point, you should also select “chrony” as the NTP client. The most important part here though is to get your network up and running. A full description of the setup programs can be found on the Alpine homepage.<br />
<br />
apk update<br />
apk upgrade<br />
apk add cfdisk<br />
cfdisk /dev/mmcblk0<br />
<br />
In cfdisk, select “Free space” and the option “New”. It will suggest using the entire available space, so just press enter, then select the option “primary”, followed by “Write”. Type “yes” to write the partition table to disk, then select “Quit”.<br />
<br />
apk add e2fsprogs<br />
mkfs.ext4 /dev/mmcblk0p2<br />
mount /dev/mmcblk0p2 /mnt<br />
setup-disk -m sys /mnt<br />
mount -o remount,rw /media/mmcblk0p1<br />
<br />
Ignore the warnings about extlinux. This and the following trick was found in the Alpine Wiki, but in some confusing order. <br />
<br />
rm -f /media/mmcblk0p1/boot/*<br />
cd /mnt<br />
rm boot/boot<br />
mv boot/* /media/mmcblk0p1/boot/<br />
rm -Rf boot<br />
mkdir media/mmcblk0p1<br />
ln -s media/mmcblk0p1/boot boot<br />
<br />
Now the mountpoints need fixing, so run:<br />
<br />
apk add nano<br />
nano etc/fstab<br />
<br />
If you prefer some other editor (since people tend to become religious about these things) then feel free to use whatever makes you feel better than nano. Add the following line:<br />
<br />
/dev/mmcblk0p1 /media/mmcblk0p1 vfat defaults 0 0<br />
<br />
Now the kernel needs to know where the root filesystem is.<br />
<br />
nano /media/mmcblk0p1/cmdline.txt<br />
<br />
Append the following at the end of the one and only line in the file:<br />
<br />
root=/dev/mmcblk0p2<br />
<br />
After exiting nano, it’s safe to reboot, so:<br />
<br />
reboot<br />
<br />
After rebooting, login using “root” as username, and the password you selected during setup-alpine earlier. Now you have a persistent system and everything that is done will stick, as opposed to how the original distro was configured.<br />
<br />
=== Tailoring for Remote Access ===<br />
<br />
OpenSSH should already be installed, but it will not allow remote root login. We will initially relax this constraint. Last in this article is a section on hardening where we again disallow root login. If you intend to have this box accessible from the Internet I strongly advice on hardening the Pi.<br />
<br />
nano /etc/ssh/sshd_config<br />
<br />
Uncomment and change the line (about 30 lines down) with PermitRootLogin to:<br />
<br />
PermitRootLogin yes<br />
<br />
Then restart the service:<br />
<br />
rc-service sshd restart<br />
<br />
Now you should be able to ssh to your Pi. The following steps are easier when you can cut and paste things into a terminal window. Feeling lucky? Then now is a good time to disconnect your keyboard and monitor.<br />
<br />
=== Keeping the Time ===<br />
<br />
If you selected chrony as your NTP client it may take a long time for it to actually correct the clock. Since the Pi does not have a hardware clock, it’s necessary to have time corrected at boot time, so we will change the configuration such that the clock is set if it is more than 60 seconds off during the first 10 lookups. <br />
<br />
nano /etc/chrony/chrony.conf<br />
<br />
Add the following line at the bottom of the file.<br />
<br />
makestep 60 10<br />
<br />
Check the date, restart the service, and check the (now hopefully corrected) date again.<br />
<br />
date<br />
rc-service chronyd restart<br />
date<br />
<br />
Having the correct time is a good thing, particularly when building a job scheduling server.<br />
<br />
=== Silencing the Fan ===<br />
<br />
Together with the Pi I also bought a fan, the Pimoroni Fan Shim. According to reviews it is one of the better ways to cool your Pi, but it’s still too soon for me to have an opinion. Unless controller software is installed, it will always run at full speed. It’s not noisy, but still noticeable sitting a metric meter from the Pi. Again, some tinkering will be needed since the controller software needs some prerequisites installed. We lost nano between reboots, so we will go ahead and add it again.<br />
<br />
apk update<br />
apk upgrade<br />
apk add nano<br />
<br />
Other software we need is in the “community” repositories of Alpine. In order to active that repository we need to edit a file:<br />
<br />
nano /etc/apk/repositories<br />
<br />
Uncomment the second line (ending in v3.12/community), exit, then install the necessary packages.<br />
<br />
apk update<br />
apk add git bash python3 python3-dev py3-pip py3-wheel build-base<br />
<br />
After those prerequisites are in place, install the fan shim software using:<br />
<br />
git clone https://github.com/pimoroni/fanshim-python<br />
cd fanshim-python<br />
./install.sh<br />
apk add py3-psutil<br />
cd examples<br />
./install-service.sh<br />
<br />
The last script will fail with “systemctl: command not found”, since Alpine uses OpenRC as its init system, and not systemd which this script presumes. We will instead write our own startup script:<br />
<br />
nano /etc/init.d/fanshim<br />
<br />
This new file should have the following contents:<br />
<br />
#!/sbin/openrc-run<br />
name="fanshim"<br />
command="/usr/bin/python3 /root/fanshim-python/examples/automatic.py"<br />
command_args="--on-threshold 65 --off-threshold 55 --delay 2"<br />
pidfile="/var/run/$SVCNAME.pid"<br />
command_background="yes"<br />
<br />
There are a lot of interesting options for fanshim that you can explore, like tuning it’s RGB led. Now we want this to run at boot time, so add it the the default runlevel, then start it.<br />
<br />
rc-update add fanshim default<br />
rc-service fanshim start<br />
<br />
Enjoy the silence!<br />
<br />
=== Adding and Sharing a Disk ===<br />
<br />
Some of files we will be transferring are going to be quite large. It would also be neat to be able to access files easily from the Finder in macOS, so I am adding a USB3 connected hard disk with 4TB storage. What follows will be very similar to setting up a NAS, and in fact, the way I fell in love with Alpine was by building my own NAS from scratch (with the minor differences being more disks and using zfs). <br />
<br />
First we need to change the filesystem. The disk comes formatted as FAT32, which is very poorly suited for a networked disk. Samba, which is what we will be using for sharing, more or less requires a filesystem that supports extended attributes. After plugging in the drive, we will therefore repartition the drive and format it to ext4. <br />
<br />
cfdisk /dev/sda<br />
<br />
Using cfdisk, delete any existing partitions and create one new partition. It should become “Linux filesystem” by default. Don’t forget to “Write” before “Quit”. Then format it:<br />
<br />
mkfs.ext4 /dev/sda1<br />
<br />
Now we need to add autofs to get automatic mounting. This package is in edge/testing though, so we need to enable that branch and repository, but still have main and community take preference. This can be done by labelling a repository.<br />
<br />
nano /etc/apk/repositories<br />
<br />
Change the line with the testing repository (last line in my file) to the following. Note that yours will have some server.from.setup/path depending on what you selected in setup-alpine. You only uncomment and add the @testing label in other words.<br />
<br />
@testing http://<server.from.setup/path>/edge/testing<br />
<br />
Now autofs can be installed from the labelled repo.<br />
<br />
apk add autofs@testing<br />
<br />
Note that dependencies are still pulled from main/community to the extent it is possible. In order to configure autofs, first:<br />
<br />
nano /etc/autofs/auto.master<br />
<br />
Add the following line after the uncommented line starting with /misc. It will also disconnect the hard disk after 5 minutes to save energy:<br />
<br />
/- /etc/autofs/auto.hdd --timeout=300<br />
<br />
Then create this new config file:<br />
<br />
nano /etc/autofs/auto.hdd<br />
<br />
Add the the following line to the empty file.<br />
<br />
/hdd -fstype=ext4 :/dev/sda1<br />
<br />
Now, the user pi needs to be created.<br />
<br />
adduser pi<br />
smbpasswd -a pi<br />
<br />
Select desirable passwords for the pi user. The latter one will later be stored in the macOS keychain and therefore easy to forget, so make note of it somewhere. <br />
<br />
Add autofs to startup and start it now. Change the ownership of /hdd to pi.<br />
<br />
rc-update add autofs default<br />
rc-service autofs start<br />
chown -R pi.pi /hdd<br />
<br />
With that in place (disk can be accessed through /hdd) it is time to set up the sharing. For this we will use samba and avahi for network discovery.<br />
<br />
apk add samba avahi dbus<br />
nano /etc/samba/smb.cfg<br />
<br />
Now, this is what my entire smb.cfg file looks like, with all the tweaks to get stuff running well from macOS.<br />
<br />
[global]<br />
create mask = 0664<br />
directory mask = 0775<br />
veto files = /.DS_Store/lost+found/<br />
delete veto files = true<br />
nt acl support = no<br />
inherit acls = yes<br />
ea support = yes<br />
security = user<br />
passdb backend = tdbsam<br />
map to guest = Bad User<br />
vfs objects = catia fruit streams_xattr recycle<br />
acl_xattr:ignore system acls = yes<br />
recycle:repository = .recycle<br />
recycle:keeptree = yes<br />
recycle:versions = yes<br />
fruit:aapl = yes<br />
fruit:metadata = stream<br />
fruit:model = MacSamba<br />
fruit:veto_appledouble = yes<br />
fruit:posix_rename = yes <br />
fruit:zero_file_id = yes<br />
fruit:wipe_intentionally_left_blank_rfork = yes <br />
fruit:delete_empty_adfiles = yes <br />
server max protocol = SMB3<br />
server min protocol = SMB2<br />
workgroup = WORKGROUP <br />
server string = NAS <br />
server role = standalone server<br />
dns proxy = no<br />
[Harddisk]<br />
comment = Raspberry Pi Removable Harddisk <br />
path = /hdd <br />
browseable = yes <br />
writable = yes <br />
spotlight = yes <br />
valid users = pi <br />
fruit:resource = xattr <br />
fruit:time machine = yes<br />
fruit:advertise_fullsync = true<br />
<br />
Those last two lines can be removed if you are not interested in using the disk as a Time Machine backup for your Apple devices. I will likely not use it, but since this is how I configured my NAS and it was a hassle to figure out how to get it working I thought I’d leave it here for reference. Doesn’t hurt to keep it there in any way.<br />
<br />
Let us also configure the avahi-daemon, by creating a config file for the samba service. Avahi will announce the server using Bonjour, making them easily recognizable from macOS (where they automagically show up in the Finder). <br />
<br />
nano /etc/avahi/services/samba.service<br />
<br />
This new file should have the following contents:<br />
<br />
<?xml version="1.0" standalone='no'?><br />
<!DOCTYPE service-group SYSTEM "avahi-service.dtd"><br />
<service-group><br />
<name replace-wildcards="yes">%h</name><br />
<service><br />
<type>_smb._tcp</type><br />
<port>445</port><br />
</service><br />
<service><br />
<type>_device-info._tcp</type><br />
<port>0</port><br />
<txt-record>model=RackMac</txt-record><br />
</service><br />
<service><br />
<type>_adisk._tcp</type><br />
<txt-record>sys=waMa=0,adVF=0x100</txt-record><br />
<txt-record>dk0=adVN=HDD,adVF=0x82</txt-record><br />
</service><br />
</service-group><br />
<br />
Not that the txt-record containing adVN=HDD can be removed if you are not interested in using the disk as a Time Machine backup. Still, leaving it won’t hurt.<br />
<br />
Finally, it’s time to add samba and avahi to the startup and start the services.<br />
<br />
rc-update add samba default<br />
rc-update add avahi-daemon default<br />
rc-service samba start<br />
rc-service avahi-daemon start<br />
<br />
The disk should now be visible from macOS. Remember to click “Connect as…” and enter “pi” as the username and your selected smbpasswd from earlier. Check the box “Remember this password in my keychain” for quicker access next time. Sometimes, due to a bug in Catalina, you may get “The original item cannot be found” when accessing the remote disk. If that happens, force quit Finder, and you should be good to go again. If anyone knows of any other fix to this issue, let me know!<br />
<br />
=== Automation ===<br />
<br />
Now, this server will be used as a job server. Some of the jobs running will need the psql command from PostgreSQL and some others will be R jobs. Let’s install both, or whatever you need to satisfy your desires. You can skip this step for now if you are undecided about what to run or just need basic services like the built-in shell scripting.<br />
<br />
apk add R postgresql<br />
<br />
In order to automate these jobs, we will be using Cronicle. It depends on node.js so we need to install the prerequisites. It’s run script is fetched using curl, so it will also need to be installed.<br />
<br />
apk add nodejs npm curl<br />
<br />
The installation is done as follows (it is a oneliner even if it looks broken here).<br />
<br />
curl -s https://raw.githubusercontent.com/jhuckaby/Cronicle/master/bin/install.js | node<br />
<br />
I want to use standard ports, so I need to change the config slightly.<br />
<br />
nano /opt/cronicle/conf/config.json<br />
<br />
Change base_app_url from port 3012 to 80. Much further down, change http_port from 3012 to 80, and https_port from 3013 to 443. If you want mails to be sent, change smtp_hostname in the beginning of the file to the mail relay you are using. After that an initialization script needs to be run.<br />
<br />
/opt/cronicle/bin/control.sh setup<br />
<br />
Now we just need to get it running at boot time. This is, however, a service that we do not want to “kill” using a PID, so we are going to enable local scripts that start and stop the service in a controlled manner instead.<br />
<br />
rc-update add local default<br />
nano /etc/local.d/cronicle.start<br />
<br />
This new file should have the following line in it:<br />
<br />
/opt/cronicle/bin/control.sh start<br />
<br />
Now we need to create a stop file as well:<br />
<br />
nano /etc/local.d/cronicle.stop<br />
<br />
This file should have the contents:<br />
<br />
/opt/cronicle/bin/control.sh stop<br />
<br />
In order for the local script daemon to run these, they need to be executable.<br />
<br />
chmod +x /etc/local.d/cronicle.*<br />
<br />
With that, let’s secure things.<br />
<br />
=== Hardening ===<br />
<br />
Now that most configuring is done, it’s time to harden the Pi. First we will install a firewall with some basic login protection using the builtin ‘limit’ in iptables. Assuming you are in the 192.168.1.0/24 range, which was set during setup-alpine, the following should be run. Only clients on the local network are allowed access to shared folders.<br />
<br />
apk add ufw@testing<br />
rc-update add ufw default<br />
ufw allow 22<br />
ufw limit 22/tcp<br />
ufw allow 80<br />
ufw allow 443<br />
ufw allow from 192.168.1.0/24 to any app CIFS<br />
ufw allow Bonjour<br />
<br />
With the rules in place, it’s time to disallow root login over ssh, and make sure that only fresh protocols are used.<br />
<br />
nano /etc/ssh/sshd_config<br />
<br />
Change the line that previously said yes to no, and add the other lines at the bottom of the file (borrowed from this security site):<br />
<br />
PermitRootLogin no<br />
PrintMotd no<br />
Protocol 2<br />
HostKey /etc/ssh/ssh_host_ed25519_key<br />
HostKey /etc/ssh/ssh_host_rsa_key<br />
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256<br />
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr<br />
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com<br />
<br />
After that, enable ufw and restart sshd. Note that if something goes wrong here you will need to plug in a monitor and keyboard again to login locally and fix things.<br />
<br />
ufw enable<br />
rc-service sshd restart<br />
<br />
Now is a good time to reboot and reconnect to check that everything is working.<br />
<br />
reboot<br />
<br />
With root not being able to login, you will instead login as “pi”. It is possible for this user to (temporarily, until exit) elevate privileges by the following command:<br />
<br />
su<br />
<br />
Another option is to use sudo, but I will leave it like this for now, and go ahead with setting up some jobs. That’s a story for another article though.<br />
<br />
I hope this guide has been of help. It should be of use for anyone tinkering with Alpine on their Raspberries, and likely some parts for those running other Linux flavors on different hardware as well.</div>Roenbaeckhttps://wiki.alpinelinux.org/w/index.php?title=Raspberry_Pi_4_-_Persistent_system_acting_as_a_NAS_and_Time_Machine&diff=17713Raspberry Pi 4 - Persistent system acting as a NAS and Time Machine2020-06-09T14:21:09Z<p>Roenbaeck: Added ref to new wiki page "Raspberry Pi 4 - Persistent System acting as a NAS and Time Machine"</p>
<hr />
<div>== Tinker, Tailor, Raspberry Pi ==<br />
<br />
I went ahead and got myself a Raspberry Pi 4B with 4GB RAM, which I intend to use as a job scheduling server, only to find out that the suggested OS, Raspberry Pi OS, is 32-bit. Fortunately, the Linux distro Alpine, which I’ve grown very fond of lately, is available for Raspberry Pi as aarch64, meaning it’s both 64-bit kernel and userland. Unfortunately the distro is currently, as of version 3.12, not set up for persistent storage and is more of a live playground. Gathering bits and pieces from various guides online, this can however be remedied with some tinkering. On this page you will find how to set up a persistent 64-bit OS on the Raspberry Pi, share a USB attached disk, while also adding some interesting software.<br />
<br />
If you go ahead and buy the Pi 4, note that it has micro-HDMI ports. I thought they were mini, for which I already had cabling, but alas, another adapter had to be purchased. Also, when attaching a USB disk it is better if it is externally powered. The Pi can however power newer external SSD drives that have low power consumption. I tried with a magnetic disk based one powered over USB first, but it behaved somewhat strangely. With that said, let’s go ahead and look at how to get yourself a shiny tiny new server.<br />
<br />
=== Tinkering for Persistence ===<br />
<br />
After downloading the v3.12 tarball from Alpine on my macOS, it’s time to set up the SDHC card for the Pi. I actually borrowed my old hand-me-down MacBook Air that I gave to my daughter a few years ago, since it has a built-in card reader, as opposed to my newer Air. The Pi boots off a FAT32 partition, but we want the system to reside in an ext4 partition later, so we will start by reserving a small portion of the card for the boot partition. This is done using Terminal in macOS with the following commands.<br />
<br />
diskutil list<br />
diskutil partitionDisk /dev/disk2 MBR "FAT32" ALP 256MB "Free Space" SYS R<br />
sudo fdisk -e /dev/disk2<br />
> f 1<br />
> w<br />
> exit<br />
<br />
The tarball should have decompressed once it hit your download folder. If not, use the option “xvzf” for tar.<br />
<br />
cd /Volumes/ALP<br />
tar xvf ~/Downloads/alpine-rpi-3.12.0-aarch64.tar<br />
nano usercfg.txt<br />
<br />
The newly created file usercfg.txt should contain the following:<br />
<br />
enable_uart=1<br />
gpu_mem=32<br />
disable_overscan=1<br />
<br />
The least amount of memory for headless is 32MB. The UART thing is beyond me, but seems to be a recommended setting. Removing overscan gives you more screen estate. If you intend to use this as a desktop computer rather than a headless server you probably want to allot more memory to the GPU and enable sound. Full specification for options can be found on the official Raspberry Pi homepage.<br />
<br />
After that we just need to make sure the card is not busy, so we change to a safe directory and thereafter eject the card (making sure that any pending writes are finalized).<br />
<br />
cd<br />
diskutil eject /dev/disk2<br />
<br />
Put the SDHC card in the Pi and boot. Login with “root” as username and no password. This presumes that you have connected everything else, such as a keyboard and monitor.<br />
<br />
setup-alpine<br />
<br />
During setup, select your keymap, hostname, etc, as desired. However, when asked where to store configs, type “none”, and the same for the apk cache directory. If you want to follow this guide to the point, you should also select “chrony” as the NTP client. The most important part here though is to get your network up and running. A full description of the setup programs can be found on the Alpine homepage.<br />
<br />
apk update<br />
apk upgrade<br />
apk add cfdisk<br />
cfdisk /dev/mmcblk0<br />
<br />
In cfdisk, select “Free space” and the option “New”. It will suggest using the entire available space, so just press enter, then select the option “primary”, followed by “Write”. Type “yes” to write the partition table to disk, then select “Quit”.<br />
<br />
apk add e2fsprogs<br />
mkfs.ext4 /dev/mmcblk0p2<br />
mount /dev/mmcblk0p2 /mnt<br />
setup-disk -m sys /mnt<br />
mount -o remount,rw /media/mmcblk0p1<br />
<br />
Ignore the warnings about extlinux. This and the following trick was found in the Alpine Wiki, but in some confusing order. <br />
<br />
rm -f /media/mmcblk0p1/boot/*<br />
cd /mnt<br />
rm boot/boot<br />
mv boot/* /media/mmcblk0p1/boot/<br />
rm -Rf boot<br />
mkdir media/mmcblk0p1<br />
ln -s media/mmcblk0p1/boot boot<br />
<br />
Now the mountpoints need fixing, so run:<br />
<br />
apk add nano<br />
nano etc/fstab<br />
<br />
If you prefer some other editor (since people tend to become religious about these things) then feel free to use whatever makes you feel better than nano. Add the following line:<br />
<br />
/dev/mmcblk0p1 /media/mmcblk0p1 vfat defaults 0 0<br />
<br />
Now the kernel needs to know where the root filesystem is.<br />
<br />
nano /media/mmcblk0p1/cmdline.txt<br />
<br />
Append the following at the end of the one and only line in the file:<br />
<br />
root=/dev/mmcblk0p2<br />
<br />
After exiting nano, it’s safe to reboot, so:<br />
<br />
reboot<br />
<br />
After rebooting, login using “root” as username, and the password you selected during setup-alpine earlier. Now you have a persistent system and everything that is done will stick, as opposed to how the original distro was configured.<br />
<br />
=== Tailoring for Remote Access ===<br />
<br />
OpenSSH should already be installed, but it will not allow remote root login. We will initially relax this constraint. Last in this article is a section on hardening where we again disallow root login. If you intend to have this box accessible from the Internet I strongly advice on hardening the Pi.<br />
<br />
nano /etc/ssh/sshd_config<br />
<br />
Uncomment and change the line (about 30 lines down) with PermitRootLogin to:<br />
<br />
PermitRootLogin yes<br />
<br />
Then restart the service:<br />
<br />
rc-service sshd restart<br />
<br />
Now you should be able to ssh to your Pi. The following steps are easier when you can cut and paste things into a terminal window. Feeling lucky? Then now is a good time to disconnect your keyboard and monitor.<br />
<br />
=== Keeping the Time ===<br />
<br />
If you selected chrony as your NTP client it may take a long time for it to actually correct the clock. Since the Pi does not have a hardware clock, it’s necessary to have time corrected at boot time, so we will change the configuration such that the clock is set if it is more than 60 seconds off during the first 10 lookups. <br />
<br />
nano /etc/chrony/chrony.conf<br />
<br />
Add the following line at the bottom of the file.<br />
<br />
makestep 60 10<br />
<br />
Check the date, restart the service, and check the (now hopefully corrected) date again.<br />
<br />
date<br />
rc-service chronyd restart<br />
date<br />
<br />
Having the correct time is a good thing, particularly when building a job scheduling server.<br />
<br />
=== Silencing the Fan ===<br />
<br />
Together with the Pi I also bought a fan, the Pimoroni Fan Shim. According to reviews it is one of the better ways to cool your Pi, but it’s still too soon for me to have an opinion. Unless controller software is installed, it will always run at full speed. It’s not noisy, but still noticeable sitting a metric meter from the Pi. Again, some tinkering will be needed since the controller software needs some prerequisites installed. We lost nano between reboots, so we will go ahead and add it again.<br />
<br />
apk update<br />
apk upgrade<br />
apk add nano<br />
<br />
Other software we need is in the “community” repositories of Alpine. In order to active that repository we need to edit a file:<br />
<br />
nano /etc/apk/repositories<br />
<br />
Uncomment the second line (ending in v3.12/community), exit, then install the necessary packages.<br />
<br />
apk update<br />
apk add git bash python3 python3-dev py3-pip py3-wheel build-base<br />
<br />
After those prerequisites are in place, install the fan shim software using:<br />
<br />
git clone https://github.com/pimoroni/fanshim-python<br />
cd fanshim-python<br />
./install.sh<br />
apk add py3-psutil<br />
cd examples<br />
./install-service.sh<br />
<br />
The last script will fail with “systemctl: command not found”, since Alpine uses OpenRC as its init system, and not systemd which this script presumes. We will instead write our own startup script:<br />
<br />
nano /etc/init.d/fanshim<br />
<br />
This new file should have the following contents:<br />
<br />
#!/sbin/openrc-run<br />
<br />
name="fanshim"<br />
command="/usr/bin/python3 /root/fanshim-python/examples/automatic.py"<br />
command_args="--on-threshold 65 --off-threshold 55 --delay 2"<br />
pidfile="/var/run/$SVCNAME.pid"<br />
command_background="yes"<br />
<br />
There are a lot of interesting options for fanshim that you can explore, like tuning it’s RGB led. Now we want this to run at boot time, so add it the the default runlevel, then start it.<br />
<br />
rc-update add fanshim default<br />
rc-service fanshim start<br />
<br />
Enjoy the silence!<br />
<br />
=== Adding and Sharing a Disk ===<br />
<br />
Some of files we will be transferring are going to be quite large. It would also be neat to be able to access files easily from the Finder in macOS, so I am adding a USB3 connected hard disk with 4TB storage. What follows will be very similar to setting up a NAS, and in fact, the way I fell in love with Alpine was by building my own NAS from scratch (with the minor differences being more disks and using zfs). <br />
<br />
First we need to change the filesystem. The disk comes formatted as FAT32, which is very poorly suited for a networked disk. Samba, which is what we will be using for sharing, more or less requires a filesystem that supports extended attributes. After plugging in the drive, we will therefore repartition the drive and format it to ext4. <br />
<br />
cfdisk /dev/sda<br />
<br />
Using cfdisk, delete any existing partitions and create one new partition. It should become “Linux filesystem” by default. Don’t forget to “Write” before “Quit”. Then format it:<br />
<br />
mkfs.ext4 /dev/sda1<br />
<br />
Now we need to add autofs to get automatic mounting. This package is in edge/testing though, so we need to enable that branch and repository, but still have main and community take preference. This can be done by labelling a repository.<br />
<br />
nano /etc/apk/repositories<br />
<br />
Change the line with the testing repository (last line in my file) to the following. Note that yours will have some server.from.setup/path depending on what you selected in setup-alpine. You only uncomment and add the @testing label in other words.<br />
<br />
@testing http://<server.from.setup/path>/edge/testing<br />
<br />
Now autofs can be installed from the labelled repo.<br />
<br />
apk add autofs@testing<br />
<br />
Note that dependencies are still pulled from main/community to the extent it is possible. In order to configure autofs, first:<br />
<br />
nano /etc/autofs/auto.master<br />
<br />
Add the following line after the uncommented line starting with /misc. It will also disconnect the hard disk after 5 minutes to save energy:<br />
<br />
/- /etc/autofs/auto.hdd --timeout=300<br />
<br />
Then create this new config file:<br />
<br />
nano /etc/autofs/auto.hdd<br />
<br />
Add the the following line to the empty file.<br />
<br />
/hdd -fstype=ext4 :/dev/sda1<br />
<br />
Now, the user pi needs to be created.<br />
<br />
adduser pi<br />
smbpasswd -a pi<br />
<br />
Select desirable passwords for the pi user. The latter one will later be stored in the macOS keychain and therefore easy to forget, so make note of it somewhere. <br />
<br />
Add autofs to startup and start it now. Change the ownership of /hdd to pi.<br />
<br />
rc-update add autofs default<br />
rc-service autofs start<br />
chown -R pi.pi /hdd<br />
<br />
With that in place (disk can be accessed through /hdd) it is time to set up the sharing. For this we will use samba and avahi for network discovery.<br />
<br />
apk add samba avahi dbus<br />
nano /etc/samba/smb.cfg<br />
<br />
Now, this is what my entire smb.cfg file looks like, with all the tweaks to get stuff running well from macOS.<br />
<br />
[global]<br />
create mask = 0664<br />
directory mask = 0775<br />
veto files = /.DS_Store/lost+found/<br />
delete veto files = true<br />
nt acl support = no<br />
inherit acls = yes<br />
ea support = yes<br />
security = user<br />
passdb backend = tdbsam<br />
map to guest = Bad User<br />
vfs objects = catia fruit streams_xattr recycle<br />
acl_xattr:ignore system acls = yes<br />
recycle:repository = .recycle<br />
recycle:keeptree = yes<br />
recycle:versions = yes<br />
fruit:aapl = yes<br />
fruit:metadata = stream<br />
fruit:model = MacSamba<br />
fruit:veto_appledouble = yes<br />
fruit:posix_rename = yes <br />
fruit:zero_file_id = yes<br />
fruit:wipe_intentionally_left_blank_rfork = yes <br />
fruit:delete_empty_adfiles = yes <br />
server max protocol = SMB3<br />
server min protocol = SMB2<br />
workgroup = WORKGROUP <br />
server string = NAS <br />
server role = standalone server<br />
dns proxy = no<br />
<br />
[Harddisk]<br />
comment = Raspberry Pi Removable Harddisk <br />
path = /hdd <br />
browseable = yes <br />
writable = yes <br />
spotlight = yes <br />
valid users = pi <br />
fruit:resource = xattr <br />
fruit:time machine = yes<br />
fruit:advertise_fullsync = true<br />
<br />
Those last two lines can be removed if you are not interested in using the disk as a Time Machine backup for your Apple devices. I will likely not use it, but since this is how I configured my NAS and it was a hassle to figure out how to get it working I thought I’d leave it here for reference. Doesn’t hurt to keep it there in any way.<br />
<br />
Let us also configure the avahi-daemon, by creating a config file for the samba service. Avahi will announce the server using Bonjour, making them easily recognizable from macOS (where they automagically show up in the Finder). <br />
<br />
nano /etc/avahi/services/samba.service<br />
<br />
This new file should have the following contents:<br />
<br />
<?xml version="1.0" standalone='no'?><br />
<!DOCTYPE service-group SYSTEM "avahi-service.dtd"><br />
<service-group><br />
<name replace-wildcards="yes">%h</name><br />
<service><br />
<type>_smb._tcp</type><br />
<port>445</port><br />
</service><br />
<service><br />
<type>_device-info._tcp</type><br />
<port>0</port><br />
<txt-record>model=RackMac</txt-record><br />
</service><br />
<service><br />
<type>_adisk._tcp</type><br />
<txt-record>sys=waMa=0,adVF=0x100</txt-record><br />
<txt-record>dk0=adVN=HDD,adVF=0x82</txt-record><br />
</service><br />
</service-group><br />
<br />
Not that the txt-record containing adVN=HDD can be removed if you are not interested in using the disk as a Time Machine backup. Still, leaving it won’t hurt.<br />
<br />
Finally, it’s time to add samba and avahi to the startup and start the services.<br />
<br />
rc-update add samba default<br />
rc-update add avahi-daemon default<br />
rc-service samba start<br />
rc-service avahi-daemon start<br />
<br />
The disk should now be visible from macOS. Remember to click “Connect as…” and enter “pi” as the username and your selected smbpasswd from earlier. Check the box “Remember this password in my keychain” for quicker access next time. Sometimes, due to a bug in Catalina, you may get “The original item cannot be found” when accessing the remote disk. If that happens, force quit Finder, and you should be good to go again. If anyone knows of any other fix to this issue, let me know!<br />
<br />
=== Automation ===<br />
<br />
Now, this server will be used as a job server. Some of the jobs running will need the psql command from PostgreSQL and some others will be R jobs. Let’s install both, or whatever you need to satisfy your desires. You can skip this step for now if you are undecided about what to run or just need basic services like the built-in shell scripting.<br />
<br />
apk add R postgresql<br />
<br />
In order to automate these jobs, we will be using Cronicle. It depends on node.js so we need to install the prerequisites. It’s run script is fetched using curl, so it will also need to be installed.<br />
<br />
apk add nodejs npm curl<br />
<br />
The installation is done as follows (it is a oneliner even if it looks broken here).<br />
<br />
curl -s https://raw.githubusercontent.com/jhuckaby/Cronicle/master/bin/install.js | node<br />
<br />
I want to use standard ports, so I need to change the config slightly.<br />
<br />
nano /opt/cronicle/conf/config.json<br />
<br />
Change base_app_url from port 3012 to 80. Much further down, change http_port from 3012 to 80, and https_port from 3013 to 443. If you want mails to be sent, change smtp_hostname in the beginning of the file to the mail relay you are using. After that an initialization script needs to be run.<br />
<br />
/opt/cronicle/bin/control.sh setup<br />
<br />
Now we just need to get it running at boot time. This is, however, a service that we do not want to “kill” using a PID, so we are going to enable local scripts that start and stop the service in a controlled manner instead.<br />
<br />
rc-update add local default<br />
nano /etc/local.d/cronicle.start<br />
<br />
This new file should have the following line in it:<br />
<br />
/opt/cronicle/bin/control.sh start<br />
<br />
Now we need to create a stop file as well:<br />
<br />
nano /etc/local.d/cronicle.stop<br />
<br />
This file should have the contents:<br />
<br />
/opt/cronicle/bin/control.sh stop<br />
<br />
In order for the local script daemon to run these, they need to be executable.<br />
<br />
chmod +x /etc/local.d/cronicle.*<br />
<br />
With that, let’s secure things.<br />
<br />
=== Hardening ===<br />
<br />
Now that most configuring is done, it’s time to harden the Pi. First we will install a firewall with some basic login protection using the builtin ‘limit’ in iptables. Assuming you are in the 192.168.1.0/24 range, which was set during setup-alpine, the following should be run. Only clients on the local network are allowed access to shared folders.<br />
<br />
apk add ufw@testing<br />
rc-update add ufw default<br />
ufw allow 22<br />
ufw limit 22/tcp<br />
ufw allow 80<br />
ufw allow 443<br />
ufw allow from 192.168.1.0/24 to any app CIFS<br />
ufw allow Bonjour<br />
<br />
With the rules in place, it’s time to disallow root login over ssh, and make sure that only fresh protocols are used.<br />
<br />
nano /etc/ssh/sshd_config<br />
<br />
Change the line that previously said yes to no, and add the other lines at the bottom of the file (borrowed from this security site):<br />
<br />
PermitRootLogin no<br />
<br />
PrintMotd no<br />
Protocol 2<br />
HostKey /etc/ssh/ssh_host_ed25519_key<br />
HostKey /etc/ssh/ssh_host_rsa_key<br />
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256<br />
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr<br />
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com<br />
<br />
After that, enable ufw and restart sshd. Note that if something goes wrong here you will need to plug in a monitor and keyboard again to login locally and fix things.<br />
<br />
ufw enable<br />
rc-service sshd restart<br />
<br />
Now is a good time to reboot and reconnect to check that everything is working.<br />
<br />
reboot<br />
<br />
With root not being able to login, you will instead login as “pi”. It is possible for this user to (temporarily, until exit) elevate privileges by the following command:<br />
<br />
su<br />
<br />
Another option is to use sudo, but I will leave it like this for now, and go ahead with setting up some jobs. That’s a story for another article though.<br />
<br />
I hope this guide has been of help. It should be of use for anyone tinkering with Alpine on their Raspberries, and likely some parts for those running other Linux flavors on different hardware as well.</div>Roenbaeckhttps://wiki.alpinelinux.org/w/index.php?title=Raspberry_Pi_4_-_Persistent_System_acting_as_a_NAS_and_Time_Machine&diff=17711Raspberry Pi 4 - Persistent System acting as a NAS and Time Machine2020-06-09T09:35:15Z<p>Roenbaeck: Roenbaeck moved page Raspberry Pi 4 - Persistent System acting as a NAS and Time Machine to Raspberry Pi 4 - Persistent system acting as a NAS and Time Machine: spelling</p>
<hr />
<div>#REDIRECT [[Raspberry Pi 4 - Persistent system acting as a NAS and Time Machine]]</div>Roenbaeckhttps://wiki.alpinelinux.org/w/index.php?title=Raspberry_Pi_4_-_Persistent_system_acting_as_a_NAS_and_Time_Machine&diff=17710Raspberry Pi 4 - Persistent system acting as a NAS and Time Machine2020-06-09T09:35:15Z<p>Roenbaeck: Roenbaeck moved page Raspberry Pi 4 - Persistent System acting as a NAS and Time Machine to Raspberry Pi 4 - Persistent system acting as a NAS and Time Machine: spelling</p>
<hr />
<div>After the five hour grace period I will add the actual contents here...</div>Roenbaeckhttps://wiki.alpinelinux.org/w/index.php?title=Tutorials_and_Howtos&diff=17709Tutorials and Howtos2020-06-09T09:34:22Z<p>Roenbaeck: spelling</p>
<hr />
<div>{{Todo|This material needs to be re-organized .. as '''Howtos are smaller articles''' and '''tutorials are more detailed document''' both need to be reordered as independent sections }}<br />
<br />
[[Image:package_edutainment.svg|right|link=]]<br />
{{TOC left}}<br />
'''Welcome to Tutorials and Howtos, a place of basic and advanced configuration tasks for your Alpine Linux.'''<br />
<br />
'''The tutorials are hands-on''' and the reader is expected to try and achieve the goals described in each step, possibly with the help of a good example. The output in one step is the starting point for the following step.<br />
<br />
'''Howtos are smaller articles''' explaining how to perform a particular task with Alpine Linux, that expects a minimal knowledge from reader to perform actions.<br />
<br />
'''IMPORTANT:''' contributions on those pages must be complete articles as well as requesting topics to be covered, dont override already made contributions. If you want to request a topic, please add your request in this page's [[Talk:Tutorials_and_Howtos|Discussion]].<br />
<br />
-----------------------------------------------------------------<br />
<br />
All of '''those linked pages here will help you make many things''' over the Alpine '''O'''perating '''S'''ystem or Alpine '''OS'''.<br />
<br />
Alpine are the main program named '''OS''' (means Operating System), that's runs on top of the '''machine/PC/laptop''', and subsequently over this '''OS''' run the programs such like the internet web browser ({{Pkg|firefox}}, {{Pkg|chromium}}), and the web pages like "facebook" runs over that internet web browser.<br />
<br />
{{Clear}}<br />
<br />
== New users and Newbies ==<br />
<br />
* [[Newbie Alpine Ecosystem]] (for overall information in funny sections)<br />
<br />
==== Installation: New users cases ====<br />
<br />
* [[Alpine newbie install manual]]<br />
** [[Alpine Install: from a disc to a new computer single only boot]]<br />
** [[Alpine Install: from a disc to a old computer single only boot]]<br />
** [[Alpine Install: from a disc to a virtualbox machine single only]]<br />
** [[Alpine Install: from a iso to a virtualbox machine with external disc]]<br />
<br />
==== Postinstall: desktops and applications ====<br />
<br />
* [[Alpine newbie apk packages|Overall info and minimal packages common to any working desktop]]<br />
** [[Alpine newbie desktops|Alpine newbie desktops, (overall information only)]]<br />
** [[Alpine Newbies XFCE Desktop Environment]]<br />
** [[Alpine Newbies LXDE Desktop Environment]]<br />
** [[Alpine Newbies Openbox Window Manager|Alpine Newbies Xorg and Openbox Window Manager]]<br />
** [[Alpine Newbies MATE Desktop Environment]]<br />
* [[Alpine and UEFI|Alpine and UEFI Support Status and related topics]]<br />
<br />
==== Developers: compilers, IDE's and tools ====<br />
<br />
* [[Alpine newbie developer]]<br />
** [[Alpine newbie developer: full stack web]]<br />
<br />
==== Servers: deploy in production ====<br />
<br />
* [[Alpine production deploy]]<br />
** [[Production Web server: Lighttpd]]<br />
** [[Production DataBases : mysql]]<br />
** [[Production LAMP system: Lighttpd + PHP + MySQL]]<br />
* Alpine production monitoring<br />
** [[Cacti: traffic analysis and monitoring network]]<br />
<br />
== Storage ==<br />
<br />
* [[Alpine local backup|Alpine local backup (lbu)]] ''(Permanently store your modifications in case your box needs reboot)'' <!-- Installation and Storage --><br />
** [[Back Up a Flash Memory Installation]] <!-- Installation and Storage --><br />
** [[Manually editing a existing apkovl]]<br />
<br />
* [[Setting up disks manually]] <!-- Installation and Storage --><br />
* [[Setting up a software RAID array]]<br />
<!-- ** [[Setting up a /var partition on software IDE raid1]] Obsolete, Installation and Storage --> <br />
* [[Raid Administration]]<br />
* [[Setting up encrypted volumes with LUKS]]<br />
* [[Setting up LVM on LUKS]]<br />
* [[Setting up Logical Volumes with LVM]]<br />
** [[Setting up LVM on GPT-labeled disks]]<br />
** [[Installing on GPT LVM]]<br />
* [[Filesystems|Formatting HD/Floppy/Other]] <!-- just a stub --><br />
<br />
* [[Setting up iSCSI]]<br />
** [[iSCSI Raid and Clustered File Systems]]<br />
* [[Setting up NBD]]<br />
* [[Setting up ZFS on LUKS]]<br />
* [[Setting up ZFS with native encryption]]<br />
* [[High performance SCST iSCSI Target on Linux software Raid]] ''(deprecated)'' <!-- solution --><br />
* [[Linux iSCSI Target (TCM)]]<br />
* [[Disk Replication with DRBD]] <!-- draft --><br />
<br />
* [[Burning ISOs]] <!-- just some links now --><br />
* [[Partitioning and Bootmanagers]]<br />
* [[Migrating data]]<br />
* [[Create a bootable SDHC from a Mac]]<br />
* [[Alpine on ARM]]<br />
<br />
== Networking ==<br />
<br />
* [[Configure Networking]]<br />
* [[Connecting to a wireless access point]]<br />
* [[Bonding]]<br />
* [[Vlan]]<br />
* [[Bridge]]<br />
* [[OpenVSwitch]]<br />
* [[How to configure static routes]]<br />
* [[Configure a Wireguard interface (wg)]]<br />
<br />
* [[Alpine Wall]] - [[How-To Alpine Wall]] - [[Alpine Wall User's Guide]] ''(a new firewall management framework)''<br />
<br />
* [[PXE boot]]<br />
<br />
* [[Using serial modem]]<br />
* [[Using HSDPA modem]]<br />
* [[Setting up Satellite Internet Connection]]<br />
* [[Using Alpine on Windows domain with IPSEC isolation]]<br />
<br />
* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)'' <!-- Server and Networking --><br />
* [[How to setup a wireless access point]] ''(Setting up Secure Wireless AP w/ WPA encryption with bridge to wired network)''<br />
* [[Setting up a OpenVPN server with Alpine]] ''(Allowing single users or devices to remotely connect to your network)''<br />
<!-- [[Using Racoon for Remote Sites]] is a different VPN tunnelling method, but that article is just a stub --><br />
* [[Experiences with OpenVPN-client on ALIX.2D3]] <!-- solution --><br />
<br />
* [[Generating SSL certs with ACF]] <!-- Generating SSL certs with ACF 1.9 --><br />
* [[Setting up unbound DNS server]]<br />
* [[Setting up nsd DNS server]]<br />
* [[TinyDNS Format]]<br />
* [[Fault Tolerant Routing with Alpine Linux]] <!-- solution --><br />
* [[Freeradius Active Directory Integration]]<br />
* [[Multi_ISP]] ''(Dual-ISP setup with load-balancing and automatic failover)''<br />
* [[OwnCloud]] ''(Installing OwnCloud)''<br />
<br />
* [[Seafile: setting up your own private cloud]]<br />
<br />
* [[GNUnet]]<br />
<br />
== Post-Install ==<br />
<!-- If you edit this, please coordinate with Installation#Post-Install and Developer_Documentation#Package_management. Note that these three sections are not exact duplicates. --><br />
<br />
* [[Alpine_newbie_apk_packages|Alpine newbie users post install and easy setups]]<br />
** [[Alpine Linux package management|Package Management (apk)]] ''(How to add/remove packages on your Alpine)''<br />
<!-- [[Alpine Linux package management#Local_Cache|How to enable APK caching]] --><br />
** [[Comparison with other distros]]<br />
* [[Alpine local backup|Alpine local backup (lbu)]] ''(Permanently store your modifications in case your box needs reboot)''<br />
** [[Back Up a Flash Memory Installation]] <!-- new --><br />
** [[Manually editing a existing apkovl]]<br />
* [[Alpine Linux Init System|Init System (OpenRC)]] ''(Configure a service to automatically boot at next reboot)''<br />
** [[Multiple Instances of Services]]<br />
<!-- [[Writing Init Scripts]] --><br />
* [[Alpine setup scripts#setup-xorg-base|Setting up Xorg]]<br />
* [[Upgrading Alpine]]<br />
<!-- Obsolete<br />
[[Upgrading Alpine - v1.9.x]]<br />
[[Upgrading Alpine - CD v1.8.x]]<br />
[[Upgrading Alpine - HD v1.8.x]]<br />
[[Upgrade to repository main|Upgrading to signed repositories]]<br />
--><br />
<br />
* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)''<br />
* [[setup-acf]] ''(Configures ACF (webconfiguration) so you can manage your box through https)''<br />
* [[Changing passwords for ACF|Changing passwords]]<br />
* [[Ansible]] ''(Configuration management)''<br />
<br />
* [[Enable Serial Console on Boot]]<br />
<!-- Obsolete?<br />
* [[Error message on boot: Address space collision: host bridge window conflicts with Adaptor ROM]]<br />
--><br />
* [[How to get regular stuff working]] ''some notes on need-to-know topics''<br />
* [[Installing Oracle Java]]<br />
* [[Rsnapshot|Setting up periodic backups with <samp>rsnapshot</samp>]]<br />
<br />
== Virtualization==<br />
<br />
* [[Xen Dom0]] ''(Setting up Alpine as a dom0 for Xen hypervisor)''<br />
* [[Xen Dom0 on USB or SD]]<br />
* [[Create Alpine Linux PV DomU]]<br />
* [[Xen PCI Passthrough]]<br />
* [[Xen LiveCD]]<br />
* [[qemu]]<br />
* [[KVM]] ''(Setting up Alpine as a KVM hypervisor)''<br />
* [[LXC]] ''(Setting up a Linux container in Alpine Linux)''<br />
* [[Docker]]<br />
* [[Install_Alpine_on_VirtualBox]]<br />
* [[Install Alpine on VMWare]]<br />
<br />
== Desktop Environment ==<br />
<br />
* [[Awesome(wm) Setup]]<br />
* [[dwm]] ''(dynamic window manager for X)''<br />
* [[EyeOS]] ''(Cloud Computing Desktop)''<br />
* [[Gnome Setup]]<br />
* [[MATE|MATE Setup]]<br />
* [[Oneye]] ''(Cloud Computing Desktop - Dropbox Alternative)''<br />
* [[Owncloud]] ''(Cloud Computing Desktop - Dropbox Alternative)''<br />
** (to be merged with [[OwnCloud]] ''(Your personal Cloud for storing and sharing your data on-line)'')<br />
* [[Remote Desktop Server]]<br />
* [[Suspend on LID close]]<br />
* [[Sway]]<br />
* [[XFCE Setup]] and [[Xfce Desktop|Desktop Ideas]]<br />
* [[Installing Adobe flash player for Firefox]]<br />
* [[Sound Setup]]<br />
* [[Printer Setup]]<br />
* [[Default applications]]<br />
<br />
== Raspberry Pi ==<br />
<br />
* [[Raspberry Pi|Raspberry Pi (Installation)]]<br />
* [[Classic install or sys mode on Raspberry Pi]]<br />
* [[RPI Video Receiver]] ''(network video decoder using Rasperry Pi and omxplayer)''<br />
* [[Linux Router with VPN on a Raspberry Pi]]<br />
* [[Linux Router with VPN on a Raspberry Pi (IPv6)]]<br />
* [[Raspberry Pi 4 - Persistent system acting as a NAS and Time Machine]]<br />
* [[Raspberry Pi 3 - Configuring it as wireless access point -AP Mode]]<br />
* [[Raspberry Pi 3 - Setting Up Bluetooth]]<br />
* [[Raspberry Pi 3 - Browser Client]]<br />
* [[Raspberry Pi Zero W - Installation]]<br />
* [[Raspberry Pi - Headless Installation]]<br />
<br />
== PowerPC ==<br />
<br />
* [[Ppc64le|Powepc64le (Installation)]]<br />
<br />
== IBM Z (IBM z Systems) ==<br />
<br />
* [[s390x|s390x (Installation)]]<br />
<br />
== Applications ==<br />
<br />
=== Telephony ===<br />
* [[Setting up Zaptel/Asterisk on Alpine]]<br />
** [[Setting up Streaming an Asterisk Channel]]<br />
* [[Freepbx on Alpine Linux]]<br />
* [[FreePBX_V3]] ''(FreeSWITCH, Asterisk GUI web acces tool)''<br />
* [[2600hz]] ''(FreeSWITCH, Asterisk GUI web access tool)''<br />
* [[Kamailio]] ''(SIP Server, formerly OpenSER)''<br />
<br />
=== Mail ===<br />
* [[Hosting services on Alpine]] ''(Hosting mail, webservices and other services)''<br />
** [[Hosting Web/Email services on Alpine]]<br />
* [[ISP Mail Server HowTo]] <!-- solution, Mail --><br />
** [[ISP Mail Server Upgrade 2.x]]<br />
** [[ISP Mail Server 2.x HowTo]] ''(Beta, please test)''<br />
** [[ISP Mail Server 3.x HowTo]]<br />
* [[Roundcube]] ''(Webmail system)''<br />
* [[Setting up postfix with virtual domains]]<br />
* [[Protecting your email server with Alpine]]<br />
* [[Setting up clamsmtp]]<br />
* [[Setting up dovecot with imap and ssl]]<br />
* [[relay email to gmail (msmtp, mailx, sendmail]]<br />
<br />
=== HTTP ===<br />
* [[Lighttpd]]<br />
** [[Lighttpd Https access]]<br />
** [[Setting Up Lighttpd with PHP]]<br />
** [[Setting Up Lighttpd With FastCGI]]<br />
* [[Cherokee]]<br />
* [[Nginx]]<br />
** [[Nginx_with_PHP#Nginx_with_PHP|Nginx with PHP]]<br />
** [[Nginx as reverse proxy with acme (letsencrypt)]]<br />
* [[Apache]]<br />
** [[Apache with php-fpm]]<br />
** [[Setting Up Apache with PHP]]<br />
** [[Apache authentication: NTLM Single Signon]]<br />
<br />
* [[High Availability High Performance Web Cache]] ''(uCarp + HAProxy for High Availability Services such as Squid web proxy)'' <!-- solution, Server --><br />
<br />
* [[Setting up Transparent Squid Proxy]] <!-- draft --><br />
** [[SqStat]] ''(Script to look at active squid users connections)''<br />
** [[Obtaining user information via SNMP]] ''(Using squark-auth-snmp as a Squid authentication helper)'' <!-- Networking and Server, <== Using squark-auth-snmp --><br />
* [[Setting up Explicit Squid Proxy]]<br />
<br />
* [[Drupal]] ''(Content Management System (CMS) written in PHP)''<br />
* [[WordPress]] ''(Web software to create website or blog)''<br />
* [[MediaWiki]] ''(Free web-based wiki software application)''<br />
* [[DokuWiki]]<br />
* [[Darkhttpd]]<br />
* [[Tomcat]]<br />
<br />
=== Other Servers ===<br />
* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)''<br />
<br />
* [[Setting up a nfs-server]]<br />
* [[Setting up a samba-server]] ''(standard file sharing)''<br />
* [[Setting up a samba-ad-dc]] ''(Active Directory compatible domain controller)''<br />
* [[Phpizabi]] ''(Social Networking Platform)''<br />
* [[Statusnet]] ''(Microblogging Platform)''<br />
* [[Pastebin]] ''(Pastebin software application)''<br />
* [[Setting up Transmission (bittorrent) with Clutch WebUI]]<br />
<br />
* [[Patchwork]] ''(Patch review management system)''<br />
* [[Redmine]] ''(Project management system)''<br />
* [[Request-Tracker]] ''(Ticket system)''<br />
* [[OsTicket]] ''(Ticket system)''<br />
* [[Setting up trac wiki|Trac]] ''(Enhanced wiki and issue tracking system for software development projects)''<br />
<br />
* [[Cgit]]<br />
** [[Setting up a git repository server with gitolite and cgit]] <!-- doesn't exist yet --><br />
* [[Roundcube]] ''(Webmail system)''<br />
* [[Glpi]] ''(Manage inventory of technical resources)''<br />
<br />
* [[How to setup a Alpine Linux mirror]]<br />
* [[Cups]]<br />
* [[NgIRCd]] ''(Server for Internet Relay Chat/IRC)''<br />
* [[How To Setup Your Own IRC Network]] ''(Using {{Pkg|charybdis}} and {{Pkg|atheme-iris}})''<br />
* [[OpenVCP]] ''(VServer Control Panel)''<br />
* [[Mahara]] ''(E-portfolio and social networking system)''<br />
* [[Chrony and GPSD | Using chrony, gpsd, and a garmin LVC 18 as a Stratum 1 NTP source ]]<br />
* [[Sending SMS using gnokii]]<br />
* [[IPTV How To|Internet Protocol television (IPTV)]]<br />
* [[UniFi_Controller]]<br />
* [[DNSCrypt-Proxy]] ''Encrypt and authenticate DNS calls from your system''<br />
* [[Odoo]]<br />
<br />
=== Monitoring ===<br />
* Setting up [[collectd]]<br />
* [[Traffic monitoring]] <!-- Networking and Monitoring --><br />
* [[Setting up traffic monitoring using rrdtool (and snmp)]] <!-- Monitoring --><br />
* [[Setting up monitoring using rrdtool (and rrdcollect)]]<br />
* [[Cacti: traffic analysis and monitoring network]] ''(Front-end for rrdtool networking monitor)''<br />
* [[LTTng]] ''(Kernel and userspace tracing)''<br />
* [[Setting up Zabbix|Zabbix]] ''(Monitor and track the status of network services and hardware)''<br />
* [[Setting up A Network Monitoring and Inventory System]] ''(Nagios + OpenAudit and related components)'' <!-- draft, solution, Networking and Monitoring and Server --><br />
** [[Setting up NRPE daemon]] ''(Performs remote Nagios checks)'' <!-- Networking and Monitoring --><br />
* [[Setting up Smokeping|Smokeping]] ''(Network latency monitoring)'' <!-- Networking and Monitoring --><br />
** [[Setting up MRTG and Smokeping to Monitor Bandwidth Usage and Network Latency]]<br />
* [[Setting Up Fprobe And Ntop|Ntop]] ''(NetFlow collection and analysis using a remote fprobe instance)'' <!-- Networking and Monitoring --><br />
* [[Cvechecker]] ''(Compare installed packages for Common Vulnerabilities Exposure)'' <!-- Monitoring and Security --><br />
<br />
* [[IP Accounting]] <!-- Networking and Monitoring --><br />
* [[Obtaining user information via SNMP]] ''(Using squark-auth-snmp as a Squid authentication helper)'' <!-- Networking and Server, <== Using squark-auth-snmp --><br />
* [[SqStat]] ''(Script to look at active squid users connections)''<br />
<br />
* [[Piwik]] ''(A real time web analytics software program)''<br />
* [[Awstats]] ''(Free log file analyzer)''<br />
* [[Intrusion Detection using Snort]]<br />
** [[Intrusion Detection using Snort, Sguil, Barnyard and more]]<br />
* [[Dglog]] ''(Log analyzer for the web content filter DansGuardian)''<br />
<br />
* [[Webmin]] ''(A web-based interface for Linux system)''<br />
* [[PhpPgAdmin]] ''(Web-based administration tool for PostgreSQL)''<br />
* [[PhpMyAdmin]] ''(Web-based administration tool for MYSQL)''<br />
* [[PhpSysInfo]] ''(A simple application that displays information about the host it's running on)''<br />
* [[Linfo]]<br />
<br />
* [[Setting up lm_sensors]]<br />
<br />
* [[ZoneMinder video camera security and surveillance]]<br />
<br />
== Misc ==<br />
<br />
* [[:Category:Shell]]<br />
* [[:Category:Programming]]<br />
* [[Running glibc programs]]<br />
* [[:Category:Drivers]]<br />
* [[:Category:Multimedia]]<br />
* [[Kernel Modesetting]]<br />
* [[CPU frequency scaling]]<br />
<br />
== Complete Solutions ==<br />
* [[DIY Fully working Alpine Linux for Allwinner and Other ARM SOCs]]<br />
* [[Replacing non-Alpine Linux with Alpine remotely]]<br />
* [[High performance SCST iSCSI Target on Linux software Raid]]<br />
* [[Fault Tolerant Routing with Alpine Linux]]<br />
* [[Experiences with OpenVPN-client on ALIX.2D3]]<br />
* [[Building a cloud with Alpine Linux]]<br />
<br />
* [[ISP Mail Server HowTo]] ''(Postfix+PostfixAdmin+DoveCot+Roundcube+ClamAV+Spamd - A full-serivce ISP mail server)''<br />
** [[ISP Mail Server Upgrade 2.x]]<br />
** [[ISP Mail Server 2.x HowTo]] ''(Beta, please test)''<br />
* [[High Availability High Performance Web Cache]] ''(uCarp + HAProxy for High Availability Services such as Squid web proxy)''<br />
* [[Setting up A Network Monitoring and Inventory System]] ''(Nagios + OpenAudit and related components)'' <!-- draft --><br />
* [[Streaming Security Camera Video with VLC]]<br />
* [[Dynamic Multipoint VPN (DMVPN)]] combined with [[Small_Office_Services]]<br />
<br />
<br />
<!--<br />
This does not attempt to be complete. Is it useful to have these listed here? I find them more accessible if grouped with their topics; also, an up-to-date list of all Draft or Obsolete pages can be found at [[Project:Wiki maintenance]].<br />
<br />
== Drafts ==<br />
Currently unfinished/works-in-progress.<br />
* [[Using Racoon for Remote Sites]]<br />
* [[Setting up Transparent Squid Proxy]] ''(Covers Squid proxy and URL Filtering system)''<br />
** [[Obtaining user information via SNMP]] ''(Using the Squark Squid authentication helper)'' [!-- no longer a draft --]<br />
* [[Setting up Streaming an Asterisk Channel]]<br />
* [[Setting up A Network Monitoring and Inventory System]] ''(Nagios + OpenAudit and related components)''<br />
* [[Intrusion Detection using Snort]] ''(Installing and configuring Snort and related applications on Alpine 2.0.x)''<br />
* [[IP Accounting]] ''(Installing and configuring pmacct for IP Accounting, Netflow/sFlow collector)''<br />
* [[Disk Replication with DRBD]]<br />
--><br />
<br />
<br />
[[Category:Newbie]]</div>Roenbaeckhttps://wiki.alpinelinux.org/w/index.php?title=Raspberry_Pi_4_-_Persistent_system_acting_as_a_NAS_and_Time_Machine&diff=17708Raspberry Pi 4 - Persistent system acting as a NAS and Time Machine2020-06-09T09:33:08Z<p>Roenbaeck: Waiting</p>
<hr />
<div>After the five hour grace period I will add the actual contents here...</div>Roenbaeckhttps://wiki.alpinelinux.org/w/index.php?title=Tutorials_and_Howtos&diff=17707Tutorials and Howtos2020-06-09T08:27:24Z<p>Roenbaeck: Added ref to new wiki page "Raspberry Pi 4 - Persistent System acting as a NAS and Time Machine"</p>
<hr />
<div>{{Todo|This material needs to be re-organized .. as '''Howtos are smaller articles''' and '''tutorials are more detailed document''' both need to be reordered as independent sections }}<br />
<br />
[[Image:package_edutainment.svg|right|link=]]<br />
{{TOC left}}<br />
'''Welcome to Tutorials and Howtos, a place of basic and advanced configuration tasks for your Alpine Linux.'''<br />
<br />
'''The tutorials are hands-on''' and the reader is expected to try and achieve the goals described in each step, possibly with the help of a good example. The output in one step is the starting point for the following step.<br />
<br />
'''Howtos are smaller articles''' explaining how to perform a particular task with Alpine Linux, that expects a minimal knowledge from reader to perform actions.<br />
<br />
'''IMPORTANT:''' contributions on those pages must be complete articles as well as requesting topics to be covered, dont override already made contributions. If you want to request a topic, please add your request in this page's [[Talk:Tutorials_and_Howtos|Discussion]].<br />
<br />
-----------------------------------------------------------------<br />
<br />
All of '''those linked pages here will help you make many things''' over the Alpine '''O'''perating '''S'''ystem or Alpine '''OS'''.<br />
<br />
Alpine are the main program named '''OS''' (means Operating System), that's runs on top of the '''machine/PC/laptop''', and subsequently over this '''OS''' run the programs such like the internet web browser ({{Pkg|firefox}}, {{Pkg|chromium}}), and the web pages like "facebook" runs over that internet web browser.<br />
<br />
{{Clear}}<br />
<br />
== New users and Newbies ==<br />
<br />
* [[Newbie Alpine Ecosystem]] (for overall information in funny sections)<br />
<br />
==== Installation: New users cases ====<br />
<br />
* [[Alpine newbie install manual]]<br />
** [[Alpine Install: from a disc to a new computer single only boot]]<br />
** [[Alpine Install: from a disc to a old computer single only boot]]<br />
** [[Alpine Install: from a disc to a virtualbox machine single only]]<br />
** [[Alpine Install: from a iso to a virtualbox machine with external disc]]<br />
<br />
==== Postinstall: desktops and applications ====<br />
<br />
* [[Alpine newbie apk packages|Overall info and minimal packages common to any working desktop]]<br />
** [[Alpine newbie desktops|Alpine newbie desktops, (overall information only)]]<br />
** [[Alpine Newbies XFCE Desktop Environment]]<br />
** [[Alpine Newbies LXDE Desktop Environment]]<br />
** [[Alpine Newbies Openbox Window Manager|Alpine Newbies Xorg and Openbox Window Manager]]<br />
** [[Alpine Newbies MATE Desktop Environment]]<br />
* [[Alpine and UEFI|Alpine and UEFI Support Status and related topics]]<br />
<br />
==== Developers: compilers, IDE's and tools ====<br />
<br />
* [[Alpine newbie developer]]<br />
** [[Alpine newbie developer: full stack web]]<br />
<br />
==== Servers: deploy in production ====<br />
<br />
* [[Alpine production deploy]]<br />
** [[Production Web server: Lighttpd]]<br />
** [[Production DataBases : mysql]]<br />
** [[Production LAMP system: Lighttpd + PHP + MySQL]]<br />
* Alpine production monitoring<br />
** [[Cacti: traffic analysis and monitoring network]]<br />
<br />
== Storage ==<br />
<br />
* [[Alpine local backup|Alpine local backup (lbu)]] ''(Permanently store your modifications in case your box needs reboot)'' <!-- Installation and Storage --><br />
** [[Back Up a Flash Memory Installation]] <!-- Installation and Storage --><br />
** [[Manually editing a existing apkovl]]<br />
<br />
* [[Setting up disks manually]] <!-- Installation and Storage --><br />
* [[Setting up a software RAID array]]<br />
<!-- ** [[Setting up a /var partition on software IDE raid1]] Obsolete, Installation and Storage --> <br />
* [[Raid Administration]]<br />
* [[Setting up encrypted volumes with LUKS]]<br />
* [[Setting up LVM on LUKS]]<br />
* [[Setting up Logical Volumes with LVM]]<br />
** [[Setting up LVM on GPT-labeled disks]]<br />
** [[Installing on GPT LVM]]<br />
* [[Filesystems|Formatting HD/Floppy/Other]] <!-- just a stub --><br />
<br />
* [[Setting up iSCSI]]<br />
** [[iSCSI Raid and Clustered File Systems]]<br />
* [[Setting up NBD]]<br />
* [[Setting up ZFS on LUKS]]<br />
* [[Setting up ZFS with native encryption]]<br />
* [[High performance SCST iSCSI Target on Linux software Raid]] ''(deprecated)'' <!-- solution --><br />
* [[Linux iSCSI Target (TCM)]]<br />
* [[Disk Replication with DRBD]] <!-- draft --><br />
<br />
* [[Burning ISOs]] <!-- just some links now --><br />
* [[Partitioning and Bootmanagers]]<br />
* [[Migrating data]]<br />
* [[Create a bootable SDHC from a Mac]]<br />
* [[Alpine on ARM]]<br />
<br />
== Networking ==<br />
<br />
* [[Configure Networking]]<br />
* [[Connecting to a wireless access point]]<br />
* [[Bonding]]<br />
* [[Vlan]]<br />
* [[Bridge]]<br />
* [[OpenVSwitch]]<br />
* [[How to configure static routes]]<br />
* [[Configure a Wireguard interface (wg)]]<br />
<br />
* [[Alpine Wall]] - [[How-To Alpine Wall]] - [[Alpine Wall User's Guide]] ''(a new firewall management framework)''<br />
<br />
* [[PXE boot]]<br />
<br />
* [[Using serial modem]]<br />
* [[Using HSDPA modem]]<br />
* [[Setting up Satellite Internet Connection]]<br />
* [[Using Alpine on Windows domain with IPSEC isolation]]<br />
<br />
* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)'' <!-- Server and Networking --><br />
* [[How to setup a wireless access point]] ''(Setting up Secure Wireless AP w/ WPA encryption with bridge to wired network)''<br />
* [[Setting up a OpenVPN server with Alpine]] ''(Allowing single users or devices to remotely connect to your network)''<br />
<!-- [[Using Racoon for Remote Sites]] is a different VPN tunnelling method, but that article is just a stub --><br />
* [[Experiences with OpenVPN-client on ALIX.2D3]] <!-- solution --><br />
<br />
* [[Generating SSL certs with ACF]] <!-- Generating SSL certs with ACF 1.9 --><br />
* [[Setting up unbound DNS server]]<br />
* [[Setting up nsd DNS server]]<br />
* [[TinyDNS Format]]<br />
* [[Fault Tolerant Routing with Alpine Linux]] <!-- solution --><br />
* [[Freeradius Active Directory Integration]]<br />
* [[Multi_ISP]] ''(Dual-ISP setup with load-balancing and automatic failover)''<br />
* [[OwnCloud]] ''(Installing OwnCloud)''<br />
<br />
* [[Seafile: setting up your own private cloud]]<br />
<br />
* [[GNUnet]]<br />
<br />
== Post-Install ==<br />
<!-- If you edit this, please coordinate with Installation#Post-Install and Developer_Documentation#Package_management. Note that these three sections are not exact duplicates. --><br />
<br />
* [[Alpine_newbie_apk_packages|Alpine newbie users post install and easy setups]]<br />
** [[Alpine Linux package management|Package Management (apk)]] ''(How to add/remove packages on your Alpine)''<br />
<!-- [[Alpine Linux package management#Local_Cache|How to enable APK caching]] --><br />
** [[Comparison with other distros]]<br />
* [[Alpine local backup|Alpine local backup (lbu)]] ''(Permanently store your modifications in case your box needs reboot)''<br />
** [[Back Up a Flash Memory Installation]] <!-- new --><br />
** [[Manually editing a existing apkovl]]<br />
* [[Alpine Linux Init System|Init System (OpenRC)]] ''(Configure a service to automatically boot at next reboot)''<br />
** [[Multiple Instances of Services]]<br />
<!-- [[Writing Init Scripts]] --><br />
* [[Alpine setup scripts#setup-xorg-base|Setting up Xorg]]<br />
* [[Upgrading Alpine]]<br />
<!-- Obsolete<br />
[[Upgrading Alpine - v1.9.x]]<br />
[[Upgrading Alpine - CD v1.8.x]]<br />
[[Upgrading Alpine - HD v1.8.x]]<br />
[[Upgrade to repository main|Upgrading to signed repositories]]<br />
--><br />
<br />
* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)''<br />
* [[setup-acf]] ''(Configures ACF (webconfiguration) so you can manage your box through https)''<br />
* [[Changing passwords for ACF|Changing passwords]]<br />
* [[Ansible]] ''(Configuration management)''<br />
<br />
* [[Enable Serial Console on Boot]]<br />
<!-- Obsolete?<br />
* [[Error message on boot: Address space collision: host bridge window conflicts with Adaptor ROM]]<br />
--><br />
* [[How to get regular stuff working]] ''some notes on need-to-know topics''<br />
* [[Installing Oracle Java]]<br />
* [[Rsnapshot|Setting up periodic backups with <samp>rsnapshot</samp>]]<br />
<br />
== Virtualization==<br />
<br />
* [[Xen Dom0]] ''(Setting up Alpine as a dom0 for Xen hypervisor)''<br />
* [[Xen Dom0 on USB or SD]]<br />
* [[Create Alpine Linux PV DomU]]<br />
* [[Xen PCI Passthrough]]<br />
* [[Xen LiveCD]]<br />
* [[qemu]]<br />
* [[KVM]] ''(Setting up Alpine as a KVM hypervisor)''<br />
* [[LXC]] ''(Setting up a Linux container in Alpine Linux)''<br />
* [[Docker]]<br />
* [[Install_Alpine_on_VirtualBox]]<br />
* [[Install Alpine on VMWare]]<br />
<br />
== Desktop Environment ==<br />
<br />
* [[Awesome(wm) Setup]]<br />
* [[dwm]] ''(dynamic window manager for X)''<br />
* [[EyeOS]] ''(Cloud Computing Desktop)''<br />
* [[Gnome Setup]]<br />
* [[MATE|MATE Setup]]<br />
* [[Oneye]] ''(Cloud Computing Desktop - Dropbox Alternative)''<br />
* [[Owncloud]] ''(Cloud Computing Desktop - Dropbox Alternative)''<br />
** (to be merged with [[OwnCloud]] ''(Your personal Cloud for storing and sharing your data on-line)'')<br />
* [[Remote Desktop Server]]<br />
* [[Suspend on LID close]]<br />
* [[Sway]]<br />
* [[XFCE Setup]] and [[Xfce Desktop|Desktop Ideas]]<br />
* [[Installing Adobe flash player for Firefox]]<br />
* [[Sound Setup]]<br />
* [[Printer Setup]]<br />
* [[Default applications]]<br />
<br />
== Raspberry Pi ==<br />
<br />
* [[Raspberry Pi|Raspberry Pi (Installation)]]<br />
* [[Classic install or sys mode on Raspberry Pi]]<br />
* [[RPI Video Receiver]] ''(network video decoder using Rasperry Pi and omxplayer)''<br />
* [[Linux Router with VPN on a Raspberry Pi]]<br />
* [[Linux Router with VPN on a Raspberry Pi (IPv6)]]<br />
* [[Raspberry Pi 4 - Persistent System acting as a NAS and Time Machine]]<br />
* [[Raspberry Pi 3 - Configuring it as wireless access point -AP Mode]]<br />
* [[Raspberry Pi 3 - Setting Up Bluetooth]]<br />
* [[Raspberry Pi 3 - Browser Client]]<br />
* [[Raspberry Pi Zero W - Installation]]<br />
* [[Raspberry Pi - Headless Installation]]<br />
<br />
== PowerPC ==<br />
<br />
* [[Ppc64le|Powepc64le (Installation)]]<br />
<br />
== IBM Z (IBM z Systems) ==<br />
<br />
* [[s390x|s390x (Installation)]]<br />
<br />
== Applications ==<br />
<br />
=== Telephony ===<br />
* [[Setting up Zaptel/Asterisk on Alpine]]<br />
** [[Setting up Streaming an Asterisk Channel]]<br />
* [[Freepbx on Alpine Linux]]<br />
* [[FreePBX_V3]] ''(FreeSWITCH, Asterisk GUI web acces tool)''<br />
* [[2600hz]] ''(FreeSWITCH, Asterisk GUI web access tool)''<br />
* [[Kamailio]] ''(SIP Server, formerly OpenSER)''<br />
<br />
=== Mail ===<br />
* [[Hosting services on Alpine]] ''(Hosting mail, webservices and other services)''<br />
** [[Hosting Web/Email services on Alpine]]<br />
* [[ISP Mail Server HowTo]] <!-- solution, Mail --><br />
** [[ISP Mail Server Upgrade 2.x]]<br />
** [[ISP Mail Server 2.x HowTo]] ''(Beta, please test)''<br />
** [[ISP Mail Server 3.x HowTo]]<br />
* [[Roundcube]] ''(Webmail system)''<br />
* [[Setting up postfix with virtual domains]]<br />
* [[Protecting your email server with Alpine]]<br />
* [[Setting up clamsmtp]]<br />
* [[Setting up dovecot with imap and ssl]]<br />
* [[relay email to gmail (msmtp, mailx, sendmail]]<br />
<br />
=== HTTP ===<br />
* [[Lighttpd]]<br />
** [[Lighttpd Https access]]<br />
** [[Setting Up Lighttpd with PHP]]<br />
** [[Setting Up Lighttpd With FastCGI]]<br />
* [[Cherokee]]<br />
* [[Nginx]]<br />
** [[Nginx_with_PHP#Nginx_with_PHP|Nginx with PHP]]<br />
** [[Nginx as reverse proxy with acme (letsencrypt)]]<br />
* [[Apache]]<br />
** [[Apache with php-fpm]]<br />
** [[Setting Up Apache with PHP]]<br />
** [[Apache authentication: NTLM Single Signon]]<br />
<br />
* [[High Availability High Performance Web Cache]] ''(uCarp + HAProxy for High Availability Services such as Squid web proxy)'' <!-- solution, Server --><br />
<br />
* [[Setting up Transparent Squid Proxy]] <!-- draft --><br />
** [[SqStat]] ''(Script to look at active squid users connections)''<br />
** [[Obtaining user information via SNMP]] ''(Using squark-auth-snmp as a Squid authentication helper)'' <!-- Networking and Server, <== Using squark-auth-snmp --><br />
* [[Setting up Explicit Squid Proxy]]<br />
<br />
* [[Drupal]] ''(Content Management System (CMS) written in PHP)''<br />
* [[WordPress]] ''(Web software to create website or blog)''<br />
* [[MediaWiki]] ''(Free web-based wiki software application)''<br />
* [[DokuWiki]]<br />
* [[Darkhttpd]]<br />
* [[Tomcat]]<br />
<br />
=== Other Servers ===<br />
* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)''<br />
<br />
* [[Setting up a nfs-server]]<br />
* [[Setting up a samba-server]] ''(standard file sharing)''<br />
* [[Setting up a samba-ad-dc]] ''(Active Directory compatible domain controller)''<br />
* [[Phpizabi]] ''(Social Networking Platform)''<br />
* [[Statusnet]] ''(Microblogging Platform)''<br />
* [[Pastebin]] ''(Pastebin software application)''<br />
* [[Setting up Transmission (bittorrent) with Clutch WebUI]]<br />
<br />
* [[Patchwork]] ''(Patch review management system)''<br />
* [[Redmine]] ''(Project management system)''<br />
* [[Request-Tracker]] ''(Ticket system)''<br />
* [[OsTicket]] ''(Ticket system)''<br />
* [[Setting up trac wiki|Trac]] ''(Enhanced wiki and issue tracking system for software development projects)''<br />
<br />
* [[Cgit]]<br />
** [[Setting up a git repository server with gitolite and cgit]] <!-- doesn't exist yet --><br />
* [[Roundcube]] ''(Webmail system)''<br />
* [[Glpi]] ''(Manage inventory of technical resources)''<br />
<br />
* [[How to setup a Alpine Linux mirror]]<br />
* [[Cups]]<br />
* [[NgIRCd]] ''(Server for Internet Relay Chat/IRC)''<br />
* [[How To Setup Your Own IRC Network]] ''(Using {{Pkg|charybdis}} and {{Pkg|atheme-iris}})''<br />
* [[OpenVCP]] ''(VServer Control Panel)''<br />
* [[Mahara]] ''(E-portfolio and social networking system)''<br />
* [[Chrony and GPSD | Using chrony, gpsd, and a garmin LVC 18 as a Stratum 1 NTP source ]]<br />
* [[Sending SMS using gnokii]]<br />
* [[IPTV How To|Internet Protocol television (IPTV)]]<br />
* [[UniFi_Controller]]<br />
* [[DNSCrypt-Proxy]] ''Encrypt and authenticate DNS calls from your system''<br />
* [[Odoo]]<br />
<br />
=== Monitoring ===<br />
* Setting up [[collectd]]<br />
* [[Traffic monitoring]] <!-- Networking and Monitoring --><br />
* [[Setting up traffic monitoring using rrdtool (and snmp)]] <!-- Monitoring --><br />
* [[Setting up monitoring using rrdtool (and rrdcollect)]]<br />
* [[Cacti: traffic analysis and monitoring network]] ''(Front-end for rrdtool networking monitor)''<br />
* [[LTTng]] ''(Kernel and userspace tracing)''<br />
* [[Setting up Zabbix|Zabbix]] ''(Monitor and track the status of network services and hardware)''<br />
* [[Setting up A Network Monitoring and Inventory System]] ''(Nagios + OpenAudit and related components)'' <!-- draft, solution, Networking and Monitoring and Server --><br />
** [[Setting up NRPE daemon]] ''(Performs remote Nagios checks)'' <!-- Networking and Monitoring --><br />
* [[Setting up Smokeping|Smokeping]] ''(Network latency monitoring)'' <!-- Networking and Monitoring --><br />
** [[Setting up MRTG and Smokeping to Monitor Bandwidth Usage and Network Latency]]<br />
* [[Setting Up Fprobe And Ntop|Ntop]] ''(NetFlow collection and analysis using a remote fprobe instance)'' <!-- Networking and Monitoring --><br />
* [[Cvechecker]] ''(Compare installed packages for Common Vulnerabilities Exposure)'' <!-- Monitoring and Security --><br />
<br />
* [[IP Accounting]] <!-- Networking and Monitoring --><br />
* [[Obtaining user information via SNMP]] ''(Using squark-auth-snmp as a Squid authentication helper)'' <!-- Networking and Server, <== Using squark-auth-snmp --><br />
* [[SqStat]] ''(Script to look at active squid users connections)''<br />
<br />
* [[Piwik]] ''(A real time web analytics software program)''<br />
* [[Awstats]] ''(Free log file analyzer)''<br />
* [[Intrusion Detection using Snort]]<br />
** [[Intrusion Detection using Snort, Sguil, Barnyard and more]]<br />
* [[Dglog]] ''(Log analyzer for the web content filter DansGuardian)''<br />
<br />
* [[Webmin]] ''(A web-based interface for Linux system)''<br />
* [[PhpPgAdmin]] ''(Web-based administration tool for PostgreSQL)''<br />
* [[PhpMyAdmin]] ''(Web-based administration tool for MYSQL)''<br />
* [[PhpSysInfo]] ''(A simple application that displays information about the host it's running on)''<br />
* [[Linfo]]<br />
<br />
* [[Setting up lm_sensors]]<br />
<br />
* [[ZoneMinder video camera security and surveillance]]<br />
<br />
== Misc ==<br />
<br />
* [[:Category:Shell]]<br />
* [[:Category:Programming]]<br />
* [[Running glibc programs]]<br />
* [[:Category:Drivers]]<br />
* [[:Category:Multimedia]]<br />
* [[Kernel Modesetting]]<br />
* [[CPU frequency scaling]]<br />
<br />
== Complete Solutions ==<br />
* [[DIY Fully working Alpine Linux for Allwinner and Other ARM SOCs]]<br />
* [[Replacing non-Alpine Linux with Alpine remotely]]<br />
* [[High performance SCST iSCSI Target on Linux software Raid]]<br />
* [[Fault Tolerant Routing with Alpine Linux]]<br />
* [[Experiences with OpenVPN-client on ALIX.2D3]]<br />
* [[Building a cloud with Alpine Linux]]<br />
<br />
* [[ISP Mail Server HowTo]] ''(Postfix+PostfixAdmin+DoveCot+Roundcube+ClamAV+Spamd - A full-serivce ISP mail server)''<br />
** [[ISP Mail Server Upgrade 2.x]]<br />
** [[ISP Mail Server 2.x HowTo]] ''(Beta, please test)''<br />
* [[High Availability High Performance Web Cache]] ''(uCarp + HAProxy for High Availability Services such as Squid web proxy)''<br />
* [[Setting up A Network Monitoring and Inventory System]] ''(Nagios + OpenAudit and related components)'' <!-- draft --><br />
* [[Streaming Security Camera Video with VLC]]<br />
* [[Dynamic Multipoint VPN (DMVPN)]] combined with [[Small_Office_Services]]<br />
<br />
<br />
<!--<br />
This does not attempt to be complete. Is it useful to have these listed here? I find them more accessible if grouped with their topics; also, an up-to-date list of all Draft or Obsolete pages can be found at [[Project:Wiki maintenance]].<br />
<br />
== Drafts ==<br />
Currently unfinished/works-in-progress.<br />
* [[Using Racoon for Remote Sites]]<br />
* [[Setting up Transparent Squid Proxy]] ''(Covers Squid proxy and URL Filtering system)''<br />
** [[Obtaining user information via SNMP]] ''(Using the Squark Squid authentication helper)'' [!-- no longer a draft --]<br />
* [[Setting up Streaming an Asterisk Channel]]<br />
* [[Setting up A Network Monitoring and Inventory System]] ''(Nagios + OpenAudit and related components)''<br />
* [[Intrusion Detection using Snort]] ''(Installing and configuring Snort and related applications on Alpine 2.0.x)''<br />
* [[IP Accounting]] ''(Installing and configuring pmacct for IP Accounting, Netflow/sFlow collector)''<br />
* [[Disk Replication with DRBD]]<br />
--><br />
<br />
<br />
[[Category:Newbie]]</div>Roenbaeck