Lenny will be the next stable release after Debian Etch. It has today still the status unstable, but worked for me without any issues in a virtual machine on my mac. Hence, I decided today to move my servers on Lenny. Upgrade on a 1&1 AMD Rootserver is quite easy.

Juste replace in your /etc/apt/sources.list all ‘etch’ statements with ‘lenny’.

then type the following:

aptitude update
aptitude dist-upgrade
aptitude upgrade
aptitude update
aptitude upgrade

Upgrade worked for my without any major issues within a couple of minutes. However mySQL will not start properly and Apache2 will reset your may-be redirect commands (e.g. AllowOverride All to AllowOverride None in apache2.conf or httpd.conf). Please correct the Apache2 conf files and restart your server with /etc/init.d/apache2 restart.

As for the mySQL Error, the error message is self-explaining:

/etc/init.d/mysql:ERROR: Using expire_logs_days without log_bin crashes

Just go to your /etc/myqsl/my.conf file. The parameter ‘expire_logs_days’ requires now the ‘log_bin’ parameter be turned on. Open the file and turn ‘log_bin’ on (e.g, removing the ‘#’ character infront of it).

Afterwards you only need to restart your mysql server with /etc/initd./mysql restart, and you whole rootserver should now run smoothly on Debian Lenny.

The following document describes how to install debian etch server on a dedicated 1&1 AMD 64-bit server.

Install minimal Debian Etch installation via 1&1 fronted.

As no SSH control is yet installed, you have to connect via your terminal (e.g. putty, or Mac OS terminal). The string should look somehow like:

ssh u12345678@sercon.onlinehome-server.info.

Your password is the one you provided on your 1&1 Web-Frontend.
Alternatively you can try if ’ssh root@yourdomain.com’ is already working, type in the password you set up in your web frontend during re-installation.

Update sources for aptitude

Debian:~# aptitude update
Get:1 http://update.onlinehome-server.info etch Release.gpg [378B]
Get:2 http://update.onlinehome-server.info etch/updates Release.gpg [189B]
Get:3 http://update.onlinehome-server.info etch Release [58.2kB]
Get:4 http://update.onlinehome-server.info etch/updates Release [37.6kB]
Get:5 http://update.onlinehome-server.info etch/main Packages [4210kB]
Get:6 http://update.onlinehome-server.info etch/contrib Packages [50.4kB]
Get:7 http://update.onlinehome-server.info etch/non-free Packages [63.7kB]
Get:8 http://update.onlinehome-server.info etch/main Sources [1214kB]
Get:9 http://update.onlinehome-server.info etch/contrib Sources [18.3kB]
Get:10 http://update.onlinehome-server.info etch/non-free Sources [28.2kB]
Get:11 http://update.onlinehome-server.info etch/updates/main Packages [255kB]
Get:12 http://update.onlinehome-server.info etch/updates/contrib Packages [3926B]
Get:13 http://update.onlinehome-server.info etch/updates/non-free Packages [1420B]
Get:14 http://update.onlinehome-server.info etch/updates/main Sources [41.0kB]
Get:15 http://update.onlinehome-server.info etch/updates/contrib Sources [1168B]
Get:16 http://update.onlinehome-server.info etch/updates/non-free Sources [1176B]
Fetched 5986kB in 5s (1155kB/s)
Reading package lists... Done

Now let’s update for security reasons all packages (the files from 1&1 are sometimes outdated)
Output can look similar to the below dump:

Debian:~# aptitude upgrade
Reading package lists... Done
Building dependency tree... Done
Reading extended state information
Initializing package states... Done
Writing extended state information... Done
Reading task descriptions... Done
Building tag database... Done
The following packages will be upgraded:
  libgnutls13 openssh-client openssh-server ssh
4 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 1273kB of archives. After unpacking 28.7kB will be freed.
Do you want to continue? [Y/n/?] Y
Writing extended state information... Done
Get:1 http://update.onlinehome-server.info etch/updates/main libgnutls13 1.4.4-3+etch1 [315kB]
Get:2 http://update.onlinehome-server.info etch/updates/main openssh-server 1:4.3p2-9etch2 [246kB]
Get:3 http://update.onlinehome-server.info etch/updates/main openssh-client 1:4.3p2-9etch2 [712kB]
Get:4 http://update.onlinehome-server.info etch/updates/main ssh 1:4.3p2-9etch2 [1052B]
Fetched 1273kB in 0s (6401kB/s)
Preconfiguring packages ...
(Reading database ... 16424 files and directories currently installed.)
Preparing to replace libgnutls13 1.4.4-3 (using .../libgnutls13_1.4.4-3+etch1_amd64.deb) ...
Unpacking replacement libgnutls13 ...
Preparing to replace openssh-server 1:4.3p2-9etch1 (using .../openssh-server_1%3a4.3p2-9etch2_amd64.deb) ...
Unpacking replacement openssh-server ...
Preparing to replace openssh-client 1:4.3p2-9etch1 (using .../openssh-client_1%3a4.3p2-9etch2_amd64.deb) ...
Unpacking replacement openssh-client ...
Preparing to replace ssh 1:4.3p2-9etch1 (using .../ssh_1%3a4.3p2-9etch2_all.deb) ...
Unpacking replacement ssh ...
Setting up libgnutls13 (1.4.4-3+etch1) ...
Setting up openssh-client (4.3p2-9etch2) ...
Setting up openssh-server (4.3p2-9etch2) ...
Restarting OpenBSD Secure Shell server: sshd.
Setting up ssh (4.3p2-9etch2) ...
Debian:~#

Let’s now install some basic programs, you’ll most likely use in your daily live with your Debian Etch Server and which are not installed by default:

Debian:~# aptitude install mc zip unzip bzip2 screen vim rsync traceroute ftp lynx

Automatic time updating is pure convenience these days and I suggest to install this packages as well (you’ll most probably get a hint that a similar package has to be de-installed - just confirm please)

Debian:~# aptitude install ntp ntpdate

Now is good moment to check your time settings: (in current versions it seems that basis configuration from 1&1 is correct)

Debian:~# tzconfig
Your current time zone is set to Europe/Berlin
Do you want to change that? [n]: n
Your time zone will not be changed

Install SSH (for Secure Shell Access, if not yet installed

Debian:~# aptitude install ssh

Security is a must, let’s now finally change root password

Debian:~# passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully

Let’s now add a new user:

Debian:~# adduser jsmith
Adding user `jsmith' ...
Adding new group `jsmith' (1000) ...
Adding new user `jsmith' (1000) with group `jsmith' ...
Creating home directory `/home/jsmith' ...
Copying files from `/etc/skel' ...
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
Changing the user information for jsmith
Enter the new value, or press ENTER for the default
	Full Name []: John Smith
	Room Number []: home
	Work Phone []: -
	Home Phone []: -
	Other []: -
Is the information correct? [y/N] y

For security purposes I suggest you really perform following steps to avoid root access through SSH connection.
It might be reasonable as well to change standard port number for even more security.
Therefore we need to edit the configuration file:

Debian:~# vi /etc/ssh/sshd_config

Please make the following changes:

Change Port 22 to something else i.e. 2444
Change PermitRootLogin from YES to NO

Add the following 2 lines (please, don’t forget to replace it by your user)

AllowUsers jsmith
AllowGroups jsmith

Major issue is that most people stop right here. You have to restart ssh services for the changes to work.
Restarting OpenBSD Secure Shell server:

Debian:~# /etc/init.d/ssh restart

Now let’s exit

Debian:~# exit

the console and restart via ssh root@yourdomain.com.

You will get something like:

ssh: connect to host yourdomain.com port 22: Connection refused

as we did change the port number.

Please call you domain via:

ssh root@yourdomain.com -p yourportnumber

Still getting an error like: Permission denied, please try again.
? Well yes, we have limited access to our user jsmith. So all our security initiatives seem to work, now let’s hope that the following command will work:

ssh jmsith@yourdomain.com -p yourportnumber

Gotcha! Well, you’re not perfectly secure yet but more secure than most people with a dedicated server.

Don’t forget that you have to type from now on:

Debian:~# su (and typing in root password to get root rights)

Well done, now let’s continue to install some software, where I’m sure you want to use it (apache2, mysql, php5, etc.):

Debian:~# aptitude install apache2 libapache2-mod-php5 php5-cli php5-common php5-cgi

After this you should be able to see “It works!” by typing www.yourdomain.com into your webbrowser.

Debian:~# aptitude install mysql-common mysql-server mysql-server-5.0

Now I suggest to immediately set a new password to your mysql-root user:

Debian:~# mysqladmin -u root -p password 'MyNewPassword'

You’ll be prompted for a password. Just hit ENTER, as the initial password from the installation is empty!! Please be aware that you don’t have to retype the password, there is no further check, so please be careful to remind your settings!

Most probably you have more room on your home drive than on /var/

Let’s move your www directory to your home directory and make a soft link to it (so the system will not see any difference):

Debian:~# mv www /home/jsmith/
Debian:~# ln -s /home/jsmith/www/ www

Let’s install webmin (especially in the case that you’re not yet a linux guru). Watch www.webmin.com for the latest release and the correct link.

Debian:~# cd /tmp
Debian:~# wget http://switch.dl.sourceforge.net/sourceforge/webadmin/webmin_1.410_all.deb
Debian:~# dpkg -i webmin_1.410_all.deb

The system found a lot of dependencies which you will now solve and finally install webmin with:

Debian:~# aptitude install webmin

The systems will tell you after installation how to log in.

First thing you should do is creating a user (i.e. jsmith) with all rights - log off (as you can not delete yourself) - and login with this new user, then please delete root user immediately.

We need to change /etc/apache2/sites-available/default

Debian:~# vi /etc/apache2/sites-available/default

add the ‘#’ sign before RedirectMatch …
and change ‘AllowOverride None’ to ‘AllowOverride All’
After having restart your server, apache will read the files in your /home/jsmith/www directory.
Before you should enable apache2 module re_write.

Debian:~# a2enmod rewrite

Debian:~# /etc/init.d/apache2 restart

Most probably you want to have php5 support on your mysql database (i.e. for Wordpress)

Debian:~# aptitude install php5-mysql

Now we need some changes on the php.ini

Debian:~# vi /etc/php5/apache2/php.ini

change ‘upload_max_filesize = 2M’ to ‘upload_max_filesize = 20M’
change ‘post_max_size = 8M’ to ‘post_max_size = 20M’
change ‘memory_limit = 16M ‘ to ‘memory_limit = 64M’
change ‘expose_php = On’ to ‘expose_php = Off’

Now you should restart your apache2 and forcing to reload all new values:

Debian:~# /etc/init.d/apache2 force-reload

You should now be able to install whatever web application you want. Often you need mod_rewrite on apache2 enabled.

What we are still missing is the FTP Server:

Debian:~# aptitude install
Debian:~# cp /bin/false /bin/ftp
Debian:~# echo "/bin/ftp" >> /etc
Debian:~# addgroup ftpuser
Debian:~# usermod -G ftpuser jsmith

Configure settings

Debian:~# vi /etc/proftpd/proftpd.conf

add the following at the end of this file

DenyGroup !ftpuser !jsmith
RootLogin off
RequireValidShell on

UseReverseDNS off
IdentLookups off

change UseIPv6 from 'On' to 'Off'

Restart Server

Debian:~# /etc/init.d/proftpd restart

eAccelerator is a free open-source PHP accelerator, optimizer, and dynamic content cache. It increases the performance of PHP scripts by caching them in their compiled state, so that the overhead of compiling is almost completely eliminated. It also optimizes scripts to speed up their execution. eAccelerator typically reduces server load and increases the speed of your PHP code by 1-10 times.

You can find on Andrew’s side pages the php eaccelerator package for Debian Etch. Following this link brings you to his repository.

add deb http://debian.mcmillan.net.nz/debian etch awm
to your bin section of /etc/apt/sources.list

The following commands are needed to add Andrew’s key to your aptitude:

Debian:~# gpg --keyserver subkeys.pgp.net --recv-keys 0x8f068012;
Debian:~# gpg --export --armor 0x8f068012 | apt-key add -
Debian:~# aptitude update
Debian:~# aptitude install php5-eaccelerator

You have to edit your /etc/php5/apache2/php.ini and add the following lines at the end:

[eAccelerator]
extension="eaccelerator.so"
eaccelerator.shm_size="32"
eaccelerator.cache_dir="/tmp"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="0"
eaccelerator.shm_prune_period="0"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"

Finally just restart your Apache2 server for the changes to take effect.

Debian:~# /etc/init.d/apache2/ force-reload

If you’re running an own rootserver you often are in the situation that you need to make changes on your DNS settings mainly through a web interface of your provider. One main issue is that worldwide update of all DNS servers can easily take over 48 hours.

Zoneedit.com solves this issue. Just connect once your DNS server settings to zoneedit and you’re done. Make all necessary changes then on your zoneedit.com account (for instance rooting of emails to google.com etc.). All these changes are updated in a minute and give you all the freedem you need for all your plans you have with your dedicated rootserver.

Alexander Kasper from Hockwald-ITcompiled a 2.6.25.1 Kernel for 1&1 AMD64-Bit Server.

After downloading (i.e. to /tmp/ folder), you can install your brand new kernel with the following command:
Now we have to install the kernel by the following command.

dpkg --install linux-image-26251_custom10002052008_amd64.deb

Please check /boot/grub/menu.lst for the correct settings.

Either you check the pointer of vmlinuz to your new kernel in /boot/

ln -sf /boot/vmlinuz-2.6.25.1 /boot/vmlinuz

or you change /boot/grub/menu.lst accordingly. For the above mentioned kernel it has to look somehow like this:

serial –unit=0 –speed=57600
terminal –timeout=10 serial console

default=0
timeout=5

title linux with serial console
root (hd0,0)
kernel /boot/vmlinuz-2.6.25.1 ro root=/dev/md1 console=tty0 console=ttyS0,57600

title linux.old
root (hd0,0)
kernel /boot/vmlinuz.old ro root=/dev/md1 console=tty0 console=ttyS0,57600

### BEGIN AUTOMAGIC KERNELS LIST
## lines between the AUTOMAGIC KERNELS LIST markers will be modified
## by the debian update-grub script except for the default options below

## DO NOT UNCOMMENT THEM, Just edit them to your needs

## ## Start Default Options ##
## default kernel options
## default kernel options for automagic boot options
## If you want special options for specific kernels use kopt_x_y_z

As of February 2008 1&1 has still only Debian Sarge (3.1) in their standard portfolio for initial installation.
But the move to Debian Etch (4.0) is quite easy. Find below the major steps:
First you need to make a complete installation of the old Debian Sarge stable 3.1 system 64-bit via your 1&1 ControlCenter link.
After first login you can check your Kernel-Version with the following command:

:/# uname -mrs
Output: Linux 2.6.20.21-071108a x86_64

Check the installed Debian Version as follows:

:/# cat /etc/debian_version
Output: 3.1

Updating from Sarge (3.1) to Etch (4.0) - I prefer aptitude nowadays to ‘apt-get’, but apt will work as well.

:/# aptitude update:
:/# aptitude dist-upgrade
:/# vi /etc/apt/sources.list

Insert the following:

deb http://ftp.de.debian.org/debian/ etch main
deb-src http://ftp.de.debian.org/debian/ etch main
deb http://security.debian.org/ etch/updates main

Then type the following commands into your terminal

:/# aptitude update
:/# aptitude dist-upgrade
:/# shutdown -r now

After successfully reboot you should configure the timezone and continue to install all the stuff you want to have on your brand new Debian Etch 64-bit Server.

:/# tzconfig
:/# aptitude install php5 apache2 mysql-server

Last Update: 2nd November 2008

Connect to your server via ssh and then download the latest kernel version. Best practice is to look first via ftp for the correct file.

Type within your terminal:

ftp update.onlinehome-server.com
User: anonymous
Password: guest
cd local-updates/kernel/deb/
ls
exit

The filename of the latest version is: linux-image-2.6.27.4-20081028a_rootserver.1_amd64.deb
Let’s download this version:

wget ftp://update.onlinehome-server.com/local-updates/kernel/deb/linux-image-2.6.27.4-20081028a_rootserver.1_amd64.deb

Now we have to install the kernel by the following command.

dpkg --install linux-image-2.6.27.4-20081028a_rootserver.1_amd64.deb

Either you check the pointer of vmlinuz to your new kernel in /boot/

ln -sf /boot/vmlinuz-2.6.27.4-20081028a /boot/vmlinuz

Please replace vmlinuz-2.x.y.z by the release you want to add!

or you change /boot/grub/menu.lst accordingly. For the above mentioned kernel it has to look somehow like this:

serial –unit=0 –speed=57600
terminal –timeout=10 serial console

default=0
timeout=5

title linux with serial console
root (hd0,0)
kernel /boot/vmlinuz-2.6.27.4-20081028a ro root=/dev/md1 console=tty0 console=ttyS0,57600

title linux.old
root (hd0,0)
kernel /boot/vmlinuz.old ro root=/dev/md1 console=tty0 console=ttyS0,57600

### BEGIN AUTOMAGIC KERNELS LIST
## lines between the AUTOMAGIC KERNELS LIST markers will be modified
## by the debian update-grub script except for the default options below

## DO NOT UNCOMMENT THEM, Just edit them to your needs

## ## Start Default Options ##
## default kernel options
## default kernel options for automagic boot options
## If you want special options for specific kernels use kopt_x_y_z