admin/Linux_post_install

Fork 0

Files

T

he 0c30e04533 first commit

2026-07-28 10:26:55 -04:00

12 KiB

Executable File

Raw Blame History

myLinux — Personal Bootstrap & Homelab Toolkit

One command to turn a bare Debian/Ubuntu install into a usable machine.

 Clone          Install          Pre           Wrapper Scripts          Post
───────▶  ───────────▶  ───────────────────▶  ──────────────────▶  ────────────────▶
 git clone   ./install.sh   apt packages       bin/ → /usr/local   SSH, rclone, svc

Quick Start

git clone https://github.com/IFindMe/myLinux.git
cd myLinux
./install.sh              # core bootstrap + ScaleTail templates
./install.sh --apps        # core + interactive app picker
./install.sh --full        # core + all apps (non-interactive)

Advanced flags:

./install.sh --skip postinstall --skip scalepoint   # skip specific phases
./install.sh --steps 1,3                            # run only phases 1 and 3
./install.sh --no-color                             # disable colored output
./install.sh --apps --dry-run                       # preview without executing

The machine returns to a productive state with minimal manual work. The installer copies all tools to /usr/local/bin/ and clones ScaleTail templates to /usr/local/share/mylinux/ — you can delete the repo after install, everything still works.

What It Does

Step	Script	What Happens
1	`preinstall.sh`	apt update + installs 25+ system packages + yt-dlp + fail2ban
2	`install.sh`	copies all `bin/` scripts to `/usr/local/bin`
3	`postinstall.sh`	configures fail2ban, systemd services, PATH, bash completion
4	`apps/install.sh`	(optional) desktop apps installed via `--apps` or `--full`

Repository Structure

myLinux/
├── apps/                 # Optional desktop applications (by category)
│   ├── install.sh        # Interactive selector (y/n per app)
│   ├── browsers/
│   │   └── brave.sh      # Brave Browser
│   ├── development/
│   │   ├── opencode.sh   # opencode AI coding agent
│   │   └── vscode.sh     # VS Code
│   ├── media/
│   │   ├── obs.sh        # OBS Studio
│   │   ├── scrcpy.sh     # Android screen mirroring
│   │   └── vlc.sh        # VLC media player
│   ├── networking/
│   │   ├── netbird.sh    # NetBird VPN
│   │   ├── tailscale.sh  # Tailscale VPN
│   │   └── zerotier.sh   # ZeroTier VPN
│   ├── remote-access/
│   │   ├── termius.sh    # Termius SSH client
│   │   └── vnc-viewer.sh # TigerVNC Viewer
│   ├── system/
│   │   ├── docker.sh     # Docker Engine + group setup
│   │   └── qemu.sh       # QEMU + libvirt + KVM
│   └── utilities/
│       ├── affine.sh     # AFFiNE knowledge base
│       ├── btop.sh       # Resource monitor
│       └── localsend.sh  # LocalSend file sharing
├── bin/                  # Unified CLI + wrappers (installed to /usr/local/bin)
│   ├── pos               # Main dispatcher — pos <category> <cmd>
│   ├── pos-network-*     # pos network {ip,checkport,scan}
│   ├── pos-docker-*      # pos docker {ps,health,compose}
│   ├── pos-media-*       # pos media {mp3,mp4}
│   ├── pos-ssh-load-keys # pos ssh load-keys
│   ├── pos-system-firewall # pos system firewall
│   ├── pos-vbox          # pos vbox {create,enter,stop,start,rm,ls}
│   ├── wr-*  → pos       # Backward-compat wrappers
│   ├── mp3/mp4 → pos     # Backward-compat wrappers
│   ├── vbox → pos        # Backward-compat wrapper
│   ├── ssh-load-all → pos# Backward-compat wrapper
│   └── autostart.sh      # Boot-time script (via systemd)
<<<<<<< HEAD
├── config/
│   ├── authorized_keys   # SSH public keys (read by postinstall)
│   └── rclone.conf       # rclone Google Drive config (gitignored)
=======
├── config/                 # User config files (gitignored)
│   ├── authorized_keys     # SSH public keys (gitignored — add your own)
│   └── rclone.conf         # rclone config (gitignored — add your own)
>>>>>>> bba577c (Initial commit)
├── lib/
│   └── common.sh         # Shared library (colors, logging, spinner, timer)
├── systemd/
│   ├── autostart.service # Runs autostart.sh on boot
│   └── ssh-agent.service # SSH agent system service
├── install.sh            # Main installer (orchestrator)
├── preinstall.sh         # Package installation
├── postinstall.sh        # User configuration
├── .gitignore            # Prevents secrets from being committed
├── DEV.md                # Development guide
└── README.md             # This file

Tools Reference

All tools are accessible via the unified pos CLI. Backward-compatible wrappers (wr-*, mp3, mp4, vbox, ssh-load-all) still work — they forward to pos transparently.

pos                          # Show available categories
pos help <category>          # Show help for a specific command

Network

pos network ip                                      # Show interfaces, routes, public IP
pos network checkport 192.168.1.1:80                # Check if a TCP port is open
pos network scan 192.168.8.0/24                     # Fast parallel ping sweep

Docker

pos docker ps                                       # Enhanced container overview (health, IPs, ports)
pos docker health                                   # Quick one-glance health dashboard (exits 1 if unhealthy)

pos docker compose ls                               # List 119+ ScaleTail services
pos docker compose up jellyfin                      # Deploy with Tailscale sidecar HTTPS
pos docker compose down actual-budget               # Stop a stack
pos docker compose logs home-assistant -f            # Tail logs
pos docker compose update                           # Pull latest ScaleTail + refresh compose files
pos docker compose config set TS_AUTHKEY=...         # Set global defaults

First-run flow for compose:

pos docker compose config set TS_AUTHKEY=tskey-auth-xxxxx
pos docker compose up jellyfin
# Open https://jellyfin.tail-xxxxx.ts.net

Command	What it does
`pos docker compose ls`	List all 119 ScaleTail services
`pos docker compose up <service>`	Copy service → `SERVICES_BASE/<service>/`, create `config/` + `data/`, fill `.env`, `docker compose up -d`
`pos docker compose down <service>`	Stop a stack
`pos docker compose logs <service>`	View container logs
`pos docker compose update`	`git pull` ScaleTail templates + refresh `compose.yaml` (preserves `.env`)
`pos docker compose config`	Show/edit global defaults (`TS_AUTHKEY`, `TZ`, `DNS_SERVER`, `SERVICES_BASE`)

Services are deployed with a standard layout under SERVICES_BASE (default /srv):

/srv/<service>/
├── compose.yaml     # Refreshed by update (preserves .env)
├── .env             # Your config
├── config/
└── data/

pos vbox create lab1                                # Create — asks "Enter now?" after
pos vbox create lab1 --dir .                        # Bind current directory
pos vbox enter lab1                                 # Auto-starts if stopped
pos vbox ls                                         # Only shows vbox-managed containers
pos vbox stop/start/rm lab1

Media

pos media mp3 https://youtube.com/watch?v=...       # Audio → MP3 with thumbnail + metadata
pos media mp4 https://youtube.com/watch?v=...        # Video with interactive format selection

System

sudo pos system firewall                            # Interactive UFW management (menu-driven)

==============================
   UFW POWER — human friendly
==============================
1) Add rule (port/service/ip/directional)
2) Delete rule (by number or text)
3) Show status (simple / verbose / numbered)
4) Enable UFW
...

SSH

pos ssh load-keys                                   # Load all SSH keys into ssh-agent

The ssh-agent.service runs at boot socket at /run/ssh-agent/socket. SSH_AUTH_SOCK is set in ~/.bashrc.

Autostart

`autostart.sh`

Runs at boot via systemd. Customize it with commands you want executed on every startup.

Pre-install (Packages)

Installed by preinstall.sh:

Category	Packages
Essentials	git, curl, wget, ca-certificates, gnupg
Editors	vim, nano
Terminal	tmux, tree, htop, btop
Network	net-tools, iputils-ping, traceroute, tcpdump, nmap
Firewall	ufw, fail2ban
Compression	unzip, zip, rsync
Dev	python3, python3-pip, jq
Cloud	rclone
Media	yt-dlp (latest from GitHub)
SSH	openssh-client, openssh-server

Post-install (Configuration)

Applied by postinstall.sh:

SSH agent — enables ssh-agent.service, sets SSH_AUTH_SOCK in ~/.bashrc
rclone config — copies rclone remote configuration if present
PATH — ensures /usr/local/bin is in ~/.bashrc
Bash completion — tab completion for the pos CLI
systemd services — enables and starts all systemd/*.service units

Goal

After reinstalling Debian or Ubuntu:

git clone https://github.com/IFindMe/myLinux.git
cd myLinux
./install.sh

The machine should return to a usable state with minimal manual configuration.

Optional Apps

Install individual apps via apps/install.sh or batch with --apps (interactive) / --full (all):

Browsers

App	Method	Script
Brave Browser	APT repo	`apps/browsers/brave.sh`

Development

App	Method	Script
opencode	official install script	`apps/development/opencode.sh`
VS Code	Microsoft APT repo	`apps/development/vscode.sh`

Media

App	Method	Script
OBS Studio	apt package	`apps/media/obs.sh`
scrcpy	GitHub release (prebuilt)	`apps/media/scrcpy.sh`
VLC	apt package	`apps/media/vlc.sh`

Networking / VPN

App	Method	Script
NetBird	official install script	`apps/networking/netbird.sh`
Tailscale	APT repo	`apps/networking/tailscale.sh`
ZeroTier	curl install script	`apps/networking/zerotier.sh`

Remote Access

App	Method	Script
Termius	.deb package (official)	`apps/remote-access/termius.sh`
VNC Viewer (TigerVNC)	apt package	`apps/remote-access/vnc-viewer.sh`

System / Virtualization

App	Method	Script
Docker Engine	get.docker.com + usermod	`apps/system/docker.sh`
QEMU + libvirt + KVM	apt + usermod groups	`apps/system/qemu.sh`

Utilities

App	Method	Script
AFFiNE	AppImage (GitHub releases)	`apps/utilities/affine.sh`
btop	apt package	`apps/utilities/btop.sh`
LocalSend	flatpak (flathub)	`apps/utilities/localsend.sh`

Shared Library

lib/common.sh provides consistent output helpers used by all scripts:

log, warn, err, ok — status messages
section, step — section headers and progress
run — executes with set -x tracing, respects DRY_RUN
spawn — runs with animated spinner, supports confirm
timer_start, timer_stop — elapsed time tracking

source "$(dirname "$0")/lib/common.sh"
section "Setting up..."
spawn "Installing package" sudo apt install -y some-package
ok "Done in ${ELAPSED}s"

Development

See DEV.md for architecture, conventions, and how to add or modify tools.

12 KiB Executable File Raw Blame History

myLinux — Personal Bootstrap & Homelab Toolkit

Quick Start

What It Does

Repository Structure

Tools Reference

Network

Docker

Media

System

SSH

Autostart

autostart.sh

Pre-install (Packages)

Post-install (Configuration)

Goal

Optional Apps

Browsers

Development

Media

Networking / VPN

Remote Access

System / Virtualization

Utilities

Shared Library

Development

12 KiB

Executable File

Raw Blame History

`autostart.sh`