Bab 9. Tips sistem

Daftar Isi

9.1. Tips konsol
9.1.1. Merekam aktivitas shell secara bersih
9.1.2. Program screen
9.1.3. Menavigasi di sekitar direktori
9.1.4. Pembungkus readline
9.1.5. Memindai pohon kode sumber
9.2. Menyesuaikan vim
9.2.1. Menyesuaikan vim dengan fitur internal
9.2.2. Menyesuaikan vim dengan paket eksternal
9.3. Perekaman dan presentasi data
9.3.1. Daemon log
9.3.2. Penganalisis log
9.3.3. Tampilan data teks yang dikustomisasi
9.3.4. Tampilan waktu dan tanggal yang disesuaikan
9.3.5. Echo shell berwarna
9.3.6. Perintah berwarna
9.3.7. Merekam aktivitas penyunting untuk pengulangan yang kompleks
9.3.8. Merekam gambar grafis dari aplikasi X
9.3.9. Merekam perubahan dalam berkas konfigurasi
9.4. Memantau, mengendalikan, dan memulai aktivitas program
9.4.1. Mencatat waktu eksekusi proses
9.4.2. Prioritas penjadwalan
9.4.3. Perintah ps
9.4.4. Perintah top
9.4.5. Daftar berkas yang dibuka oleh suatu proses
9.4.6. Menelusuri aktivitas program
9.4.7. Identifikasi proses menggunakan berkas atau soket
9.4.8. Mengulangi perintah dengan interval konstan
9.4.9. Mengulangi perintah atas berkas
9.4.10. Memulai program dari GUI
9.4.11. Menyesuaikan program yang akan dimulai
9.4.12. Membunuh sebuah proses
9.4.13. Menjadwalkan tugas sekali
9.4.14. Menjadwalkan tugas secara teratur
9.4.15. Tombol Alt-SysRq
9.5. Tips pemeliharaan sistem
9.5.1. Siapa yang ada di sistem?
9.5.2. Memperingatkan semua orang
9.5.3. Identifikasi perangkat keras
9.5.4. Konfigurasi perangkat keras
9.5.5. Waktu sistem dan perangkat keras
9.5.6. Konfigurasi terminal
9.5.7. Infrastruktur suara
9.5.8. Disabling the screen saver
9.5.9. Menonaktifkan suara bip
9.5.10. Penggunaan memori
9.5.11. Pemeriksaan keamanan dan integritas sistem
9.6. Tips penyimpanan data
9.6.1. Penggunaan ruang disk
9.6.2. Konfigurasi partisi disk
9.6.3. Mengakses partisi menggunakan UUID
9.6.4. LVM2
9.6.5. Konfigurasi sistem berkas
9.6.6. Pembuatan sistem berkas dan pemeriksaan integritas
9.6.7. Optimalisasi sistem berkas dengan opsi mount
9.6.8. Optimasi sistem berkas melalui superblok
9.6.9. Optimalisasi hard disk
9.6.10. Optimasi solid state drive
9.6.11. Menggunakan SMART untuk memprediksi kegagalan hard disk
9.6.12. Menentukan direktori penyimpanan sementara melalui $TMPDIR
9.6.13. Perluasan ruang penyimpanan yang dapat digunakan melalui LVM
9.6.14. Expansion of usable storage space by mounting another partition
9.6.15. Expansion of usable storage space by bind-mounting another directory
9.6.16. Expansion of usable storage space by overlay-mounting another directory
9.6.17. Expansion of usable storage space using symlink
9.7. Image disk
9.7.1. Membuat berkas image disk
9.7.2. Menulis secara langsung ke disk
9.7.3. Mengait berkas image disk
9.7.4. Membersihkan berkas image disk
9.7.5. Membuat berkas image disk kosong
9.7.6. Membuat berkas image ISO9660
9.7.7. Menulis secara langsung ke CD/DVD-R/RW
9.7.8. Mengait berkas image ISO9660
9.8. Data biner
9.8.1. Melihat dan menyunting data biner
9.8.2. Memanipulasi berkas tanpa mengait disk
9.8.3. Redundansi data
9.8.4. Data file recovery and forensic analysis
9.8.5. Splitting a large file into small files
9.8.6. Menghapus konten berkas
9.8.7. Dummy files
9.8.8. Erasing an entire hard disk
9.8.9. Erasing unused area of an hard disk
9.8.10. Undeleting deleted but still open files
9.8.11. Mencari semua hardlink
9.8.12. Konsumsi ruang disk yang tak terlihat
9.9. Tips enkripsi data
9.9.1. Removable disk encryption with dm-crypt/LUKS
9.9.2. Mounting encrypted disk with dm-crypt/LUKS
9.10. Kernel
9.10.1. Parameter kernel
9.10.2. Header kernel
9.10.3. Compiling the kernel and related modules
9.10.4. Compiling the kernel source: Debian Kernel Team recommendation
9.10.5. Driver perangkat keras dan firmware
9.11. Sistem tervirtualisasi
9.11.1. Alat virtualisasi dan emulasi
9.11.2. Alur kerja virtualisasi
9.11.3. Mounting the virtual disk image file
9.11.4. Sistem chroot
9.11.5. Beberapa sistem desktop

Di sini, saya menjelaskan tips dasar untuk mengonfigurasi dan mengelola sistem, sebagian besar dari konsol.

Ada beberapa program utilitas untuk membantu aktivitas konsol Anda.


Penggunaan sederhana script(1) (lihat Bagian 1.4.9, “Merekam aktivitas shell”) untuk merekam aktivitas shell menghasilkan berkas dengan karakter kontrol. Hal ini dapat dihindari dengan menggunakan col(1) sebagai berikut.

$ script
Script started, file is typescript

Lakukan apapun … dan tekan Ctrl-D untuk keluar dari skrip.

$ col -bx < typescript > cleanedfile
$ vim cleanedfile

Ada metode alternatif untuk merekam aktivitas shell:

  • Menggunakan tee (dapat digunakan selama proses boot di initramfs):

    $ sh -i 2>&1 | tee typescript
  • Menggunakan gnome-terminal dengan penyangga baris yang dinaikkan untuk gulir balik.

  • Menggunakan screen dengan "^A H" (lihat Bagian 9.1.2, “Program screen”) untuk melakukan perekaman konsol.

  • Menggunakan vim dengan ":terminal" untuk memasuki mode terminal. Gunakan "Ctrl-W N" untuk keluar dari mode terminal ke mode normal. Gunakan ":w typescript" untuk menulis penyangga ke berkas.

  • Menggunakan emacs dengan "M-x shell", "M-x eshell", atau "M-x term" untuk memasuki konsol rekaman. Gunakan "C-x C-w" untuk menulis penyangga ke berkas.

screen(1) tidak hanya memungkinkan satu jendela terminal bekerja dengan beberapa proses, tetapi juga memungkinkan proses shell jarak jauh untuk bertahan dari koneksi yang terputus. Berikut adalah skenario penggunaan screen(1) yang biasa.

  1. Anda masuk ke mesin remote.

  2. Anda memulai screen pada satu konsol.

  3. Anda menjalankan beberapa program di jendela screen yang dibuat dengan ^A c ("Control-A" diikuti oleh "c").

  4. Anda beralih di antara beberapa jendela screen dengan ^A n ("Control-A" diikuti oleh "n").

  5. Tiba-tiba Anda harus meninggalkan terminal Anda, tetapi Anda tidak ingin kehilangan pekerjaan aktif Anda dengan mempertahankan koneksi.

  6. Anda dapat melepaskan sesi layar dengan metode apa pun.

    • Secara brutal mencabut koneksi jaringan Anda

    • Mengetik ^A d ("Control-A" diikuti oleh "d") dan keluar secara manual dari sambungan jarak jauh

    • Ketik ^A DD ("Control-A" diikuti oleh "DD") agar layar terlepas dan log Anda keluar

  7. Anda masuk lagi ke mesin remote yang sama (bahkan dari terminal yang berbeda).

  8. Anda memulai screen sebagai "screen -r".

  9. screen secara ajaib memasang kembali semua jendela screen sebelumnya dengan semua program aktif berjalan.

[Tip] Tip

Anda dapat menghemat biaya koneksi dengan screen untuk koneksi jaringan terukur seperti dial-up dan paket, karena Anda dapat membiarkan proses aktif saat terputus, lalu mencantolkan kembali nanti ketika Anda terhubung lagi.

Dalam sesi screen, semua masukan papan ketik dikirim ke jendela Anda saat ini kecuali untuk penekanan tombol perintah. Semua penekanan tombol perintah screen dimasukkan dengan mengetik ^A ("Control-A") ditambah satu tombol [ditambah parameter apa pun]. Berikut adalah hal-hal penting untuk diingat.


Lihat screen(1) untuk detailnya.

Lihat tmux(1)untuk fungsionalitas dari perintah alternatif.

Pada Bagian 1.4.2, “Menyesuaikan bash”, 2 tips untuk memungkinkan navigasi cepat di sekitar direktori dijelaskan: $CDPATH dan mc.

Jika Anda menggunakan program filter teks fuzzy, Anda dapat melakukannya tanpa mengetik path yang tepat. Untuk fzf, sertakan yang berikut dalam ~/.bashrc.

FZF_KEYBINDINGS_PATH=/usr/share/doc/fzf/examples/key-bindings.bash
if [ -f $FZF_KEYBINDINGS_PATH ]; then
  . $FZF_KEYBINDINGS_PATH
fi
FZF_COMPLETION_PATH=/usr/share/doc/fzf/examples/completion.bash
if [ -f $FZF_COMPLETION_PATH ]; then
  . $FZF_COMPLETION_PATH
fi

Sebagai contoh:

  • Anda dapat melompat ke subdirektori yang sangat dalam dengan upaya minimal. Anda pertama mengetik "cd **" dan menekan Tab. Kemudian Anda akan diberi tampilan path kandidat. Mengetikkan string path parsial, misalnya, s/d/b foo, akan mempersempit path kandidat. Anda memilih path yang akan digunakan oleh cd dengan kursor dan tombol return.

  • Anda dapat memilih perintah dari riwayat perintah dengan lebih efisien dengan upaya minimal. Anda menekan Ctrl-R di sapaan perintah. Kemudian Anda akan dimintai perintah kandidat. Mengetikkan string perintah parsial, misalnya, vim d, akan mempersempit kandidat. Anda memilih yang akan digunakan dengan kursor dan tombol return.

Setelah Anda mempelajari dasar-dasar vim(1) melalui Bagian 1.4.8, “Menggunakan vim”, silakan baca "Seven habits of effective text editing (2000)" dari Bram Moolenaar untuk memahami bagaimana vim harus digunakan.

[Perhatian] Perhatian

Jangan mencoba mengubah pengikatan tombol baku tanpa alasan yang sangat bagus.

Perilaku vim dapat diubah secara signifikan dengan mengaktifkan fitur internalnya melalui perintah mode Ex seperti "set ..." untuk mengatur opsi vim.

Perintah mode Ex ini dapat dimasukkan dalam berkas vimrc pengguna, "~/.vimrc" tradisional, atau"~/.vim/vimrc" yang ramah git. Berikut adalah contoh yang sangat sederhana [2]:

colorscheme murphy             " from /usr/share/vim/vim??/colors/*.vim
filetype plugin indent on      " filetype aware behavior
syntax enable                  " Syntax highlight
"set spelllang=en_us            " Spell check language as en_us
"set spell                      " Enable spell check
set autoindent                 " Copy indent from current line
set smartindent                " More than autoindent (Drop/Pop after {/})
set nosmarttab                 " <Tab>-key always inserts blanks
set backspace=indent,eol,start " Back space through everything
set laststatus=2               " Always show status line
set statusline=%<%f%m%r%h%w%=%y[U+%04B]%2l/%2L=%P,%2c%V

Kustomisasi sederhana untuk mengaktifkan model-aman dan IDE klasik dapat diaktifkan dengan memasang paket vim-scripts dan menambahkan yang berikut ini ke berkas vimrc pengguna.

packadd! secure-modelines
packadd! winmanager
let mapleader = ' '
" Toggle paste mode with <SPACE>p
set pastetoggle=<leader>p
" IDE-like UI for files and buffers with <space>w
nnoremap <leader>w         :WMToggle<CR>
" Use safer keys <C-?> for moving to another window
nnoremap <C-H>         <C-W>h
nnoremap <C-J>         <C-W>j
nnoremap <C-K>         <C-W>k
nnoremap <C-L>         <C-W>l

Agar pengikatan tombol di atas berfungsi dengan baik, program terminal perlu dikonfigurasi untuk menghasilkan "ASCII DEL" bagi tombol Backspace dan "Escape sequence" untuk tombol Delete.

Sistem paket Vim asli yang baru, bekerja dengan baik dengan "git" dan "git submodule". Salah satu contoh konfigurasi tersebut dapat ditemukan di repositori git saya: dot-vim. Ini pada dasarnya:

  • Dengan menggunakan "git" dan "git submodule", paket eksternal terbaru, seperti "nama", ditempatkan ke dalam ~/.vim/pack/*/opt/nama dan sejenisnya.

  • Dengan menambahkan baris :packadd! nama ke berkas vimrc pengguna, paket-paket ini ditempatkan pada runtimepath.

  • Vim memuat paket-paket ini pada runtimepath selama inisialisasinya.

  • Pada akhir inisialisasinya, tag untuk dokumen yang dipasang diperbarui dengan "helptags ALL".

Untuk lebih lanjut, silakan mulai vim dengan "vim --startuptime vimstart.log" untuk memeriksa urutan eksekusi aktual dan waktu yang dihabiskan untuk setiap langkah.

Paket pengaya eksternal yang menarik dapat ditemukan:

Cukup membingungkan untuk melihat terlalu banyak cara[3] untuk mengelola dan memuat paket-paket eksternal ini bagi vim. Memeriksa informasi asli adalah obat terbaik.


Meskipun alat pager seperti more(1) dan less(1) (lihat Bagian 1.4.5, “Pager”) dan alat ubahan untuk menyoroti dan memformat (lihat Bagian 11.1.8, “Menyoroti dan memformat data teks polos”) dapat menampilkan data teks dengan baik, penyunting tujuan umum (lihat Bagian 1.4.6, “Penyunting teks”) paling serbaguna dan dapat disesuaikan.

[Tip] Tip

Untuk vim(1) dan alias mode pager-nya view(1), ":set hls" memungkinkan pencarian yang disorot.

Shell echo ke sebagian besar terminal modern dapat diwarnai menggunakan kode escape ANSI (lihat "/usr/share/doc/xterm/ctlseqs.txt.gz").

Misalnya, coba yang berikut ini

$ RED=$(printf "\x1b[31m")
$ NORMAL=$(printf "\x1b[0m")
$ REVERSE=$(printf "\x1b[7m")
$ echo "${RED}RED-TEXT${NORMAL} ${REVERSE}REVERSE-TEXT${NORMAL}"

Anda dapat merekam aktivitas penyunting untuk pengulangan yang kompleks.

Untuk Vim, sebagai berikut.

  • "qa": mulai merekam karakter yang diketik ke dalam register bernama "a".

  • … aktivitas penyunting

  • "q": mengakhiri rekaman karakter yang diketik.

  • "@a": jalankan isi register "a".

Untuk Emacs, sebagai berikut.

  • "C-x (": mulai mendefinisikan makro papan ketik.

  • … aktivitas penyunting

  • "C-x)": akhir mendefinisikan makro papan ketik.

  • "C-x e": jalankan makro papan ketik.

Aktivitas program dapat dipantau dan dikendalikan menggunakan alat khusus.


[Tip] Tip

Paket procps memberikan dasar-dasar pemantauan, pengendalian, dan memulai kegiatan program. Anda harus mempelajari semuanya.

Ada beberapa cara untuk mengulangi perintah atas berkas yang cocok dengan beberapa kondisi, misalnya pencocokan pola glob "*.ext".

for x in *.ext; do if [ -f "$x"]; then command "$x" ; fi; done
  • Kombinasi find(1) dan xargs(1):

find . -type f -maxdepth 1 -name '*.ext' -print0 | xargs -0 -n 1 command
  • find(1) dengan opsi "-exec" dengan suatu perintah:

find . -type f -maxdepth 1 -name '*.ext' -exec command '{}' \;
  • find(1) dengan opsi "-exec" dengan skrip shell pendek:

find . -type f -maxdepth 1 -name '*.ext' -exec sh -c "command '{}' && echo 'successful'" \;

Contoh di atas ditulis untuk memastikan penanganan yang tepat dari nama berkas aneh seperti yang berisi spasi. Lihat Bagian 10.1.5, “Idiom untuk pemilihan berkas” untuk penggunaan find (1) pada tingkat lanjut.

Untuk antarmuka baris perintah (CLI), program pertama dengan nama yang cocok yang ditemukan di direktori yang ditentukan dalam variabel lingkungan $PATH dijalankan. Lihat Bagian 1.5.3, “Variabel "$PATH"”.

Untuk antarmuka pengguna grafis (GUI) yang sesuai dengan standar freedesktop.org, berkas *.desktop di direktori /usr/share/applications/ memberikan atribut yang diperlukan untuk tampilan menu GUI dari setiap program. Setiap paket yang sesuai dengan sistem menu xdg Freedesktop.org memasang data menu yang disediakan oleh "*.desktop" di bawah "/usr/share/applications/". Lingkungan desktop modern yang sesuai dengan standar Freedesktop.org menggunakan data ini untuk menghasilkan menu mereka menggunakan paket xdg-utils. Lihat "/usr/share/doc/xdg-utils/README".

Misalnya, berkas chromium.desktop mendefinisikan atribut untuk "Peramban Web Chromium" seperti "Name" untuk nama program, "Exec" untuk path eksekusi program dan argumen, "Icon" untuk ikon yang digunakan, dll. (lihat Spesifikasi Entri Desktop) sebagai berikut:

[Desktop Entry]
Version=1.0
Name=Chromium Web Browser
GenericName=Web Browser
Comment=Access the Internet
Comment[fr]=Explorer le Web
Exec=/usr/bin/chromium %U
Terminal=false
X-MultipleArgs=false
Type=Application
Icon=chromium
Categories=Network;WebBrowser;
MimeType=text/html;text/xml;application/xhtml_xml;x-scheme-handler/http;x-scheme-handler/https;
StartupWMClass=Chromium
StartupNotify=true

Ini adalah deskripsi yang terlalu disederhanakan. Berkas *.desktop dipindai sebagai berikut.

Lingkungan desktop mengatur variabel lingkungan $XDG_DATA_HOME dan $XDG_DATA_DIR. Misalnya, di bawah GNOME 3:

  • $XDG_DATA_HOME tidak ditata. (Nilai baku $HOME/.local/share digunakan.)

  • $XDG_DATA_DIRS diatur ke /usr/share/gnome:/usr/local/share/:/usr/share/.

Jadi direktori dasar (lihat Spesifikasi Direktori Dasar XDG) dan direktori applications adalah sebagai berikut.

  • $HOME/.local/share/$HOME/.local/share/applications/

  • /usr/share/gnome//usr/share/gnome/applications/

  • /usr/local/share//usr/local/share/applications/

  • /usr/share//usr/share/applications/

Berkas *.desktop dipindai dalam direktori applications ini dalam urutan ini.

[Tip] Tip

Entri menu GUI ubahan pengguna dapat dibuat dengan menambahkan berkas *.desktop di direktori $HOME/.local/share/applications/.

[Tip] Tip

Demikian pula, jika berkas *.desktop dibuat di direktori autostart di bawah direktori dasar ini, program yang ditentukan dalam berkas *.desktop dijalankan secara otomatis ketika lingkungan desktop dimulai. Lihat Spesifikasi Autostart Aplikasi Desktop.

[Tip] Tip

Demikian pula, jika berkas *.desktop dibuat di direktori $HOME/Desktop dan lingkungan Desktop dikonfigurasi untuk mendukung fitur peluncur ikon desktop, program yang ditentukan di dalamnya dijalankan setelah mengklik ikon. Harap dicatat bahwa nama sebenarnya dari direktori $HOME/Desktop tergantung pada lokal. Lihat xdg-user-dirs-update(1).

Some programs start another program automatically. Here are check points for customizing this process.

[Tip] Tip

update-mime(8) updates the "/etc/mailcap" file using "/etc/mailcap.order" file (see mailcap.order(5)).

[Tip] Tip

The debianutils package provides sensible-browser(1), sensible-editor(1), and sensible-pager(1) which make sensible decisions on which editor, pager, and web browser to call, respectively. I recommend you to read these shell scripts.

[Tip] Tip

In order to run a console application such as mutt under GUI as your preferred application, you should create an GUI application as following and set "/usr/local/bin/mutt-term" as your preferred application to be started as described.

# cat /usr/local/bin/mutt-term <<EOF
#!/bin/sh
gnome-terminal -e "mutt \$@"
EOF
# chmod 755 /usr/local/bin/mutt-term
[Tip] Tip

GUI application can be executed easily under specific environment variables if the program for "Exec" in its corresponding *.desktop file doesn't specify the full execution path. You can enable non-English keyboard input to kitty using an input method framework ibus or fcitx5 by installing required input method packages and creating a shell script "/usr/local/bin/kitty" as follows.

# cat /usr/local/bin/kitty <<EOF
#!/bin/sh
GLFW_IM_MODULE=ibus exec /usr/bin/kitty "\$@"
EOF
# chmod 755 /usr/local/bin/kitty

This kitty script can alternatively in "~/bin/" or "~/.local/bin/" directories as long as they are defined earlier than "/usr/bin/" in "$PATH".

Use cron(8) to schedule tasks regularly. See crontab(1) and crontab(5).

You can schedule to run processes as a normal user, e.g. foo by creating a crontab(5) file as "/var/spool/cron/crontabs/foo" with "crontab -e" command.

Here is an example of a crontab(5) file.

# use /bin/sh to run commands, no matter what /etc/passwd says
SHELL=/bin/sh
# mail any output to paul, no matter whose crontab this is
MAILTO=paul
# Min Hour DayOfMonth Month DayOfWeek command (Day... are OR'ed)
# run at 00:05, every day
5  0  *  * *   $HOME/bin/daily.job >> $HOME/tmp/out 2>&1
# run at 14:15 on the first of every month -- output mailed to paul
15 14 1  * *   $HOME/bin/monthly
# run at 22:00 on weekdays(1-5), annoy Joe. % for newline, last % for cc:
0 22 *   * 1-5 mail -s "It's 10pm" joe%Joe,%%Where are your kids?%.%%
23 */2 1 2 *   echo "run 23 minutes after 0am, 2am, 4am ..., on Feb 1"
5  4 *   * sun echo "run at 04:05 every Sunday"
# run at 03:40 on the first Monday of each month
40 3 1-7 * *   [ "$(date +%a)" == "Mon" ] && command -args
[Tip] Tip

For the system not running continuously, install the anacron package to schedule periodic commands at the specified intervals as closely as machine-uptime permits. See anacron(8) and anacrontab(5).

[Tip] Tip

For scheduled system maintenance scripts, you can run them periodically from root account by placing such scripts in "/etc/cron.hourly/", "/etc/cron.daily/", "/etc/cron.weekly/", or "/etc/cron.monthly/". Execution timings of these scripts can be customized by "/etc/crontab" and "/etc/anacrontab".

Systemd has low level capability to schedule programs to run without cron daemon. For example, /lib/systemd/system/apt-daily.timer and /lib/systemd/system/apt-daily.service set up daily apt download activities. See systemd.timer(5) .

Pressing Alt-SysRq (PrtScr) followed by one keys does the magic of rescuing control of the system.


See more on Linux kernel user’s and administrator’s guide » Linux Magic System Request Key Hacks

[Tip] Tip

From SSH terminal etc., you can use the Alt-SysRq feature by writing to the "/proc/sysrq-trigger". For example, "echo s > /proc/sysrq-trigger; echo u > /proc/sysrq-trigger" from the root shell prompt syncs and umounts all mounted filesystems.

The current (2021) Debian amd64 Linux kernel has /proc/sys/kernel/sysrq=438=0b110110110:

  • 2 = 0x2 - enable control of console logging level (ON)

  • 4 = 0x4 - enable control of keyboard (SAK, unraw) (ON)

  • 8 = 0x8 - enable debugging dumps of processes etc. (OFF)

  • 16 = 0x10 - enable sync command (ON)

  • 32 = 0x20 - enable remount read-only (ON)

  • 64 = 0x40 - enable signaling of processes (term, kill, oom-kill) (OFF)

  • 128 = 0x80 - allow reboot/poweroff (ON)

  • 256 = 0x100 - allow nicing of all RT tasks (ON)

The following sets system and hardware time to MM/DD hh:mm, CCYY.

# date MMDDhhmmCCYY
# hwclock --utc --systohc
# hwclock --show

Times are normally displayed in the local time on the Debian system but the hardware and system time usually use UTC(GMT).

If the hardware time is set to UTC, change the setting to "UTC=yes" in the "/etc/default/rcS".

The following reconfigure the timezone used by the Debian system.

# dpkg-reconfigure tzdata

If you wish to update system time via network, consider to use the NTP service with the packages such as ntp, ntpdate, and chrony.

[Tip] Tip

Under systemd, use systemd-timesyncd for the network time synchronization instead. See systemd-timesyncd(8).

Lihat yang berikut.

[Tip] Tip

ntptrace(8) in the ntp package can trace a chain of NTP servers back to the primary source.

Device drivers for sound cards for current Linux are provided by Advanced Linux Sound Architecture (ALSA). ALSA provides emulation mode for previous Open Sound System (OSS) for compatibility.

Application softwares may be configured not only to access sound devices directly but also to access them via some standardized sound server system. Currently, PulseAudio, JACK, and PipeWire are used as sound server system. See Debian wiki page on Sound for the latest situation.

There is usually a common sound engine for each popular desktop environment. Each sound engine used by the application can choose to connect to different sound servers.

[Tip] Tip

Use "cat /dev/urandom > /dev/audio" or speaker-test(1) to test speaker (^C to stop).

[Tip] Tip

If you can not get sound, your speaker may be connected to a muted output. Modern sound system has many outputs. alsamixer(1) in the alsa-utils package is useful to configure volume and mute settings.


Pemeliharaan sistem yang buruk dapat mengekspos sistem Anda ke eksploitasi eksternal.

Untuk pemeriksaan keamanan dan integritas sistem, Anda harus mulai dengan yang berikut.


Berikut adalah skrip sederhana untuk memeriksa salah izin berkas sehingga dapat ditulis oleh siapapun.

# find / -perm 777 -a \! -type s -a \! -type l -a \! \( -type d -a -perm 1777 \)
[Perhatian] Perhatian

Karena paket debsums menggunakan checksum MD5 yang disimpan secara lokal, itu tidak dapat sepenuhnya dipercaya sebagai alat audit keamanan sistem terhadap serangan berbahaya.

Mem-boot sistem Anda dengan CD live Linux atau CD debian-installer dalam mode penyelamatan memudahkan Anda untuk mengonfigurasi ulang penyimpanan data pada perangkat boot Anda.

You may need to umount(8) some devices manually from the command line before operating on them if they are automatically mounted by the GUI desktop system.

For disk partition configuration, although fdisk(8) has been considered standard, parted(8) deserves some attention. "Disk partitioning data", "partition table", "partition map", and "disk label" are all synonyms.

Older PCs use the classic Master Boot Record (MBR) scheme to hold disk partitioning data in the first sector, i.e., LBA sector 0 (512 bytes).

Recent PCs with Unified Extensible Firmware Interface (UEFI), including Intel-based Macs, use GUID Partition Table (GPT) scheme to hold disk partitioning data not in the first sector.

Although fdisk(8) has been standard for the disk partitioning tool, parted(8) is replacing it.


[Perhatian] Perhatian

Although parted(8) claims to create and to resize filesystem too, it is safer to do such things using best maintained specialized tools such as mkfs(8) (mkfs.msdos(8), mkfs.ext2(8), mkfs.ext3(8), mkfs.ext4(8), …) and resize2fs(8).

[Catatan] Catatan

Untuk beralih antara GPT dan MBR, Anda perlu menghapus beberapa blok pertama isi disk secara langsung (lihat Bagian 9.8.6, “Menghapus konten berkas”) dan menggunakan "parted /dev/sdx mklabel gpt" atau "parted /dev/sdx mklabel msdos" untuk mengaturnya. Harap dicatat "msdos" digunakan di sini untuk MBR.

LVM2 is a logical volume manager for the Linux kernel. With LVM2, disk partitions can be created on logical volumes instead of the physical harddisks.

LVM membutuhkan hal-hal berikut.

  • device-mapper support in the Linux kernel (default for Debian kernels)

  • the userspace device-mapper support library (libdevmapper* package)

  • the userspace LVM2 tools (lvm2 package)

Please start learning LVM2 from the following manpages.

  • lvm(8): Basics of LVM2 mechanism (list of all LVM2 commands)

  • lvm.conf(5): Configuration file for LVM2

  • lvs(8): Melaporkan informasi tentang volume logis

  • vgs(8): Melaporkan informasi tentang grup volume

  • pvs(8): Melaporkan informasi tentang volume fisik

For ext4 filesystem, the e2fsprogs package provides the following.

  • mkfs.ext4(8) to create new ext4 filesystem

  • fsck.ext4(8) to check and to repair existing ext4 filesystem

  • tune2fs(8) to configure superblock of ext4 filesystem

  • debugfs(8) to debug ext4 filesystem interactively. (It has undel command to recover deleted files.)

The mkfs(8) and fsck(8) commands are provided by the e2fsprogs package as front-ends to various filesystem dependent programs (mkfs.fstype and fsck.fstype). For ext4 filesystem, they are mkfs.ext4(8) and fsck.ext4(8) (they are symlinked to mke2fs(8) and e2fsck(8)).

Similar commands are available for each filesystem supported by Linux.


[Tip] Tip

Ext4 filesystem is the default filesystem for the Linux system and strongly recommended to use it unless you have some specific reasons not to.

Btrfs status can be found at Debian wiki on btrfs and kernel.org wiki on btrfs. It is expected to be the next default filesystem after the ext4 filesystem.

Beberapa alat memungkinkan akses ke sistem berkas tanpa dukungan kernel Linux (lihat Bagian 9.8.2, “Memanipulasi berkas tanpa mengait disk”).

Karakteristik sistem berkas dapat dioptimalkan melalui superblok menggunakan perintah tune2fs(8).

[Tip] Tip

Meskipun bernama seperti itu, tune2fs(8) bekerja tidak hanya pada sistem berkas ext2 tetapi juga pada sistem berkas ext3 dan ext4.

Solid state drive (SSD) is auto detected now.

Reduce unnecessary disk accesses to prevent disk wear out by mounting "tmpfs" on volatile data path in /etc/fstab.

You can monitor and log your hard disk which is compliant to SMART with the smartd(8) daemon.

  1. Enable SMART feature in BIOS.

  2. Install the smartmontools package.

  3. Identify your hard disk drives by listing them with df(1).

    • Mari kita asumsikan hard disk drive yang akan dipantau sebagai "/dev/hda".

  4. Periksa keluaran "smartctl -a /dev/hda" untuk melihat apakah fitur SMART benar-benar diaktifkan.

    • Jika tidak, aktifkan dengan "smartctl -s on -a /dev/hda".

  5. Fungsikan daemon smartd(8) agar berjalan dengan cara berikut.

    • jadikan bukan komentar "start_smartd=yes" dalam berkas "/etc/default/smartmontools".

    • jalankan ulang daemon smartd(8) dengan "sudo systemctl restart smartmontools".

[Tip] Tip

Daemon smartd(8) dapat disesuaikan dengan berkas /etc/smartd.conf termasuk cara diberitahu tentang peringatan.

For partitions created on Logical Volume Manager (LVM) (Linux feature) at install time, they can be resized easily by concatenating extents onto them or truncating extents from them over multiple storage devices without major system reconfiguration.

If you have usable space in another partition (e.g., "/path/to/empty" and "/path/to/work"), you can create a directory in it and stack that on to an old directory (e.g., "/path/to/old") where you need space using the OverlayFS for Linux kernel 3.18 or newer (Debian Stretch 9.0 or newer).

$ sudo mount -t overlay overlay \
  -olowerdir=/path/to/old-dir,upperdir=/path/to/empty,workdir=/path/to/work

Here, "/path/to/empty" and "/path/to/work" should be on the RW-enabled partition to write on "/path/to/old".

Here, we discuss manipulations of the disk image.

The disk image file, "disk.img", of an unmounted device, e.g., the second SCSI or serial ATA drive "/dev/sdb", can be made using cp(1) or dd(1) by the following.

# cp /dev/sdb disk.img
# dd if=/dev/sdb of=disk.img

The disk image of the traditional PC's master boot record (MBR) (see Bagian 9.6.2, “Konfigurasi partisi disk”) which reside on the first sector on the primary IDE disk can be made by using dd(1) by the following.

# dd if=/dev/hda of=mbr.img bs=512 count=1
# dd if=/dev/hda of=mbr-nopart.img bs=446 count=1
# dd if=/dev/hda of=mbr-part.img skip=446 bs=1 count=66
  • "mbr.img": MBR dengan tabel partisi

  • "mbr-nopart.img": MBR tanpa tabel partisi

  • "mbr-part.img": Tabel partisi MBR saja

If you have an SCSI or serial ATA device as the boot disk, substitute "/dev/hda" with "/dev/sda".

If you are making an image of a disk partition of the original disk, substitute "/dev/hda" with "/dev/hda1" etc.

The disk image "partition.img" containing a single partition image can be mounted and unmounted by using the loop device as follows.

# losetup -v -f partition.img
Loop device is /dev/loop0
# mkdir -p /mnt/loop0
# mount -t auto /dev/loop0 /mnt/loop0
...hack...hack...hack
# umount /dev/loop0
# losetup -d /dev/loop0

Ini dapat disederhanakan sebagai berikut.

# mkdir -p /mnt/loop0
# mount -t auto -o loop partition.img /mnt/loop0
...hack...hack...hack
# umount partition.img

Each partition of the disk image "disk.img" containing multiple partitions can be mounted by using the loop device. Since the loop device does not manage partitions by default, we need to reset it as follows.

# modinfo -p loop # verify kernel capability
max_part:Maximum number of partitions per loop device
max_loop:Maximum number of loop devices
# losetup -a # verify nothing using the loop device
# rmmod loop
# modprobe loop max_part=16

Now, the loop device can manage up to 16 partitions.

# losetup -v -f disk.img
Loop device is /dev/loop0
# fdisk -l /dev/loop0

Disk /dev/loop0: 5368 MB, 5368709120 bytes
255 heads, 63 sectors/track, 652 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Disk identifier: 0x452b6464

      Device Boot      Start         End      Blocks   Id  System
/dev/loop0p1               1         600     4819468+  83  Linux
/dev/loop0p2             601         652      417690   83  Linux
# mkdir -p /mnt/loop0p1
# mount -t ext4 /dev/loop0p1 /mnt/loop0p1
# mkdir -p /mnt/loop0p2
# mount -t ext4 /dev/loop0p2 /mnt/loop0p2
...hack...hack...hack
# umount /dev/loop0p1
# umount /dev/loop0p2
# losetup -d /dev/loop0

Alternatively, similar effects can be done by using the device mapper devices created by kpartx(8) from the kpartx package as follows.

# kpartx -a -v disk.img
...
# mkdir -p /mnt/loop0p2
# mount -t ext4 /dev/mapper/loop0p2 /mnt/loop0p2
...
...hack...hack...hack
# umount /dev/mapper/loop0p2
...
# kpartx -d /mnt/loop0
[Catatan] Catatan

You can mount a single partition of such disk image with loop device using offset to skip MBR etc., too. But this is more error prone.

The empty disk image "disk.img" which can grow up to 5GiB can be made using dd(1) as follows.

$ dd bs=1 count=0 if=/dev/zero of=disk.img seek=5G

Instead of using dd(1), specialized fallocate(8) may be used here.

You can create an ext4 filesystem on this disk image "disk.img" using the loop device as follows.

# losetup -f -v disk.img
Loop device is /dev/loop1
# mkfs.ext4 /dev/loop1
...hack...hack...hack
# losetup -d /dev/loop1
$ du  --apparent-size -h disk.img
5.0G  disk.img
$ du -h disk.img
83M disk.img

For "disk.img", its file size is 5.0 GiB and its actual disk usage is mere 83MiB. This discrepancy is possible since ext4 can hold sparse file.

[Tip] Tip

The actual disk usage of sparse file grows with data which are written to it.

Using similar operation on devices created by the loop device or the device mapper devices as Bagian 9.7.3, “Mengait berkas image disk”, you can partition this disk image "disk.img" using parted(8) or fdisk(8), and can create filesystem on it using mkfs.ext4(8), mkswap(8), etc.

The ISO9660 image file, "cd.iso", from the source directory tree at "source_directory" can be made using genisoimage(1) provided by cdrkit by the following.

#  genisoimage -r -J -T -V volume_id -o cd.iso source_directory

Similarly, the bootable ISO9660 image file, "cdboot.iso", can be made from debian-installer like directory tree at "source_directory" by the following.

#  genisoimage -r -o cdboot.iso -V volume_id \
   -b isolinux/isolinux.bin -c isolinux/boot.cat \
   -no-emul-boot -boot-load-size 4 -boot-info-table source_directory

Di sini boot loader Isolinux (lihat Bagian 3.1.2, “Tahap 2: boot loader”) digunakan untuk boot.

You can calculate the md5sum value and make the ISO9660 image directly from the CD-ROM device as follows.

$ isoinfo -d -i /dev/cdrom
CD-ROM is in ISO 9660 format
...
Logical block size is: 2048
Volume size is: 23150592
...
# dd if=/dev/cdrom bs=2048 count=23150592 conv=notrunc,noerror | md5sum
# dd if=/dev/cdrom bs=2048 count=23150592 conv=notrunc,noerror > cd.iso
[Awas] Awas

You must carefully avoid ISO9660 filesystem read ahead bug of Linux as above to get the right result.

Here, we discuss direct manipulations of the binary data on storage media.

Dengan akses fisik ke PC Anda, siapa pun dapat dengan mudah mendapatkan hak istimewa root dan mengakses semua berkas di PC Anda (lihat Bagian 4.6.4, “Mengamankan kata sandi root”). Ini berarti bahwa sistem kata sandi masuk tidak dapat mengamankan data pribadi dan sensitif Anda terhadap kemungkinan pencurian PC Anda. Anda harus menerapkan teknologi enkripsi data untuk melakukannya. Meskipun GNU privacy guard (lihat Bagian 10.3, “Infrastruktur keamanan data”) dapat mengenkripsi berkas, dibutuhkan beberapa upaya pengguna.

Dm-crypt facilitates automatic data encryption via native Linux kernel modules with minimal user efforts using device-mapper.


[Perhatian] Perhatian

Data encryption costs CPU time etc. Encrypted data becomes inaccessible if its password is lost. Please weigh its benefits and costs.

[Catatan] Catatan

Entire Debian system can be installed on a encrypted disk by the debian-installer (lenny or newer) using dm-crypt/LUKS and initramfs.

[Tip] Tip

Lihat Bagian 10.3, “Infrastruktur keamanan data” untuk utilitas enkripsi ruang pengguna: GNU Privacy Guard.

You can encrypt contents of removable mass devices, e.g. USB memory stick on "/dev/sdx", using dm-crypt/LUKS. You simply format it as the following.

# fdisk /dev/sdx
... "n" "p" "1" "return" "return" "w"
# cryptsetup luksFormat /dev/sdx1
...
# cryptsetup open /dev/sdx1 secret
...
# ls -l /dev/mapper/
total 0
crw-rw---- 1 root root  10, 60 2021-10-04 18:44 control
lrwxrwxrwx 1 root root       7 2021-10-04 23:55 secret -> ../dm-0
# mkfs.vfat /dev/mapper/secret
...
# cryptsetup close secret

Kemudian, dapat dikait seperti biasa pada "/media/nama_pengguna/label_disk", kecuali untuk menanyakan kata sandi (lihat Bagian 10.1.7, “Perangkat penyimpanan lepasan” ) di bawah lingkungan desktop modern menggunakan paket udisks2. Perbedaannya adalah bahwa setiap data yang ditulis padanya dienkripsi. Entri kata sandi dapat diotomatisasi menggunakan keyring (lihat Bagian 10.3.6, “Password keyring”).

You may alternatively format media in different filesystem, e.g., ext4 with "mkfs.ext4 /dev/mapper/sdx1". If btrfs is used instead, the udisks2-btrfs package needs to be installed. For these filesystems, the file ownership and permissions may need to be configured.

Debian distributes modularized Linux kernel as packages for supported architectures.

If you are reading this documentation, you probably don't need to compile Linux kernel by yourself.

Debian has its own method of compiling the kernel and related modules.


If you use initrd in Bagian 3.1.2, “Tahap 2: boot loader”, make sure to read the related information in initramfs-tools(8), update-initramfs(8), mkinitramfs(8) and initramfs.conf(5).

[Awas] Awas

Do not put symlinks to the directories in the source tree (e.g. "/usr/src/linux*") from "/usr/include/linux" and "/usr/include/asm" when compiling the Linux kernel source. (Some outdated documents suggest this.)

[Catatan] Catatan

When compiling the latest Linux kernel on the Debian stable system, the use of backported latest tools from the Debian unstable may be needed.

module-assistant(8) (or its short form m-a) helps users to build and install module package(s) easily for one or more custom kernels.

The dynamic kernel module support (DKMS) is a new distribution independent framework designed to allow individual kernel modules to be upgraded without changing the whole kernel. This is used for the maintenance of out-of-tree modules. This also makes it very easy to rebuild modules as you upgrade kernels.

The hardware driver is the code running on the main CPUs of the target system. Most hardware drivers are available as free software now and are included in the normal Debian kernel packages in the main area.

  • Driver GPU

    • Driver GPU Intel (main)

    • Driver GPU AMD/ATI (main)

    • Driver GPU NVIDIA (main untuk driver nouveau, dan non-free untuk driver biner saja yang didukung oleh vendor.)

  • Softmodem driver

    • martian-modem and sl-modem-dkms packages (non-free)

The firmware is the code or data loaded on the device attach to the target system (e.g., CPU microcode, rendering code running on GPU, or FPGA / CPLD data, …). Some firmware packages are available as free software but many firmware packages are not available as free software since they contain sourceless binary data. Installing these firmware data is essential for the device to function as expected.

  • The firmware data packages containing data loaded to the volatile memory on the target device.

    • firmware-linux-free (main)

    • firmware-linux-nonfree (non-free)

    • firmware-linux-* (non-free)

    • *-firmware (non-free)

    • intel-microcode (non-free)

    • amd64-microcode (non-free)

  • The firmware update program packages which update data on the non-volatile memory on the target device.

    • fwupd (main): Firmware update daemon which downloads firmware data from Linux Vendor Firmware Service.

    • gnome-firmware (main): GTK front end for fwupd

    • plasma-discover-backend-fwupd (main): Qt front end for fwupd

Please note that non-free and contrib packages are not part of the Debian system. The access configuration to enable and to disable the non-free and contrib areas is described in Bagian 2.1.4, “Dasar-dasar arsip Debian”. You should be aware of negatives associated with the use of the non-free and contrib packages as described in Bagian 2.1.5, “Debian adalah perangkat lunak 100% bebas”.

Please also note that the firmware data downloaded by fwupd from Linux Vendor Firmware Service and loaded to the running Linux kernel may be non-free.

Use of virtualized system enables us to run multiple instances of system simultaneously on a single hardware.

There are several virtualization and emulation tool platforms.

  • Complete hardware emulation packages such as ones installed by the games-emulator metapackage

  • Mostly CPU level emulation with some I/O device emulations such as QEMU

  • Mostly CPU level virtualization with some I/O device emulations such as Kernel-based Virtual Machine (KVM)

  • OS level container virtualization with the kernel level support such as LXC (Linux Containers), Docker, ...

  • OS level filesystem access virtualization with the system library call override on the file path such as chroot

  • OS level filesystem access virtualization with the system library call override on the file ownership such as fakeroot

  • OS API emulation such as Wine

  • Interpreter level virtualization with its executable selection and run-time library overrides such as virtualenv and venv for Python

The container virtualization uses Bagian 4.7.4, “Fitur keamanan Linux” and it is the backend technology of Bagian 7.6, “Sandbox”.

Here are some packages to help you to setup the virtualized system.

Tabel 9.27. Daftar alat virtualisasi

paket popcon ukuran deskripsi
schroot V:6, I:9 2708 specialized tool for executing Debian binary packages in chroot
sbuild V:1, I:4 282 tool for building Debian binary packages from Debian sources
debootstrap V:6, I:62 308 bootstrap a basic Debian system (written in sh)
cdebootstrap V:0, I:2 116 bootstrap a Debian system (written in C)
virt-manager V:10, I:43 2298 Virtual Machine Manager: desktop application for managing virtual machines
libvirt-clients V:44, I:64 1287 programs for the libvirt library
games-emulator I:0 26 games-emulator: Debian's emulators for games
bochs V:0, I:1 6999 Bochs: IA-32 PC emulator
qemu I:29 100 QEMU: fast generic processor emulator
qemu-system I:22 101 QEMU: full system emulation binaries
qemu-user V:0, I:9 110111 QEMU: user mode emulation binaries
qemu-utils V:13, I:107 6623 QEMU: utilitas
qemu-kvm V:4, I:30 107 KVM: full virtualization on x86 hardware with the hardware-assisted virtualization
virtualbox V:11, I:14 107009 VirtualBox: x86 virtualization solution on i386 and amd64
xen-tools V:0, I:3 727 tools to manage debian XEN virtual server
wine V:16, I:71 191 Wine: Windows API Implementation (standard suite)
dosbox V:2, I:17 2718 DOSBox: x86 emulator with Tandy/Herc/CGA/EGA/VGA/SVGA graphics, sound and DOS
lxc V:9, I:14 19661 Linux containers user space tools
python3-venv I:55 6 venv for creating virtual python environments (system library)
python3-virtualenv V:10, I:58 435 virtualenv for creating isolated virtual python environments
pipx V:0, I:1 887 pipx for installing python applications in isolated environments

See Wikipedia article Comparison of platform virtual machines for detail comparison of different platform virtualization solutions.

[Catatan] Catatan

Default Debian kernels support KVM since lenny.

Typical work flow for virtualization involves several steps.

For the raw disk image file, see Bagian 9.7, “Image disk”.

For other virtual disk image files, you can use qemu-nbd(8) to export them using network block device protocol and mount them using the nbd kernel module.

qemu-nbd(8) supports disk formats supported by QEMU: QEMU supports following disk formats: raw, qcow2, qcow, vmdk, vdi, bochs, cow (user-mode Linux copy-on-write), parallels, dmg, cloop, vpc, vvfat (virtual VFAT), and host_device.

Perangkat blok jaringan dapat mendukung partisi dengan cara yang sama seperti perangkat loop (lihat Bagian 9.7.3, “Mengait berkas image disk”). Anda dapat mengait partisi pertama dari "disk.img" sebagai berikut.

# modprobe nbd max_part=16
# qemu-nbd -v -c /dev/nbd0 disk.img
...
# mkdir /mnt/part1
# mount /dev/nbd0p1 /mnt/part1
[Tip] Tip

You may export only the first partition of "disk.img" using "-P 1" option to qemu-nbd(8).

If you wish to try a new Debian environment from a terminal console, I recommend you to use chroot. This enables you to run console applications of Debian unstable and testing without usual risks associated and without rebooting. chroot(8) is the most basic way.

[Perhatian] Perhatian

Examples below assumes both parent system and chroot system share the same amd64 CPU architecture.

Although you can manually create a chroot(8) environment using debootstrap(1). But this requires non-trivial efforts.

The sbuild package to build Debian packages from source uses the chroot environment managed by the schroot package. It comes with helper script sbuild-createchroot(1). Let's learn how it works by running it under script(1) as follows.

$ sudo mkdir -p /srv/chroot
$ sudo sbuild-createchroot -v --include=eatmydata,ccache unstable /srv/chroot/unstable-amd64-sbuild http://deb.debian.org/debian

You see how debootstrap(8) populates system data for unstable environment under "/srv/chroot/unstable-amd64-sbuild" for a minimal build system.

You can login to this environment using schroot(1).

$ sudo schroot -v -c chroot:unstable-amd64-sbuild

You see how a system shell running under unstable environment is created.

[Catatan] Catatan

The "/usr/sbin/policy-rc.d" file which always exits with 101 prevents daemon programs to be started automatically on the Debian system. See "/usr/share/doc/sysv-rc/README.policy-rc.d.gz".

[Catatan] Catatan

Some programs under chroot may require access to more files from the parent system to function than sbuild-createchroot provides as above. For example, "/sys", "/etc/passwd", "/etc/group", "/var/run/utmp", "/var/log/wtmp", etc. may need to be bind-mounted or copied.

[Tip] Tip

The sbuild package helps to construct a chroot system and builds a package inside the chroot using schroot as its backend. It is an ideal system to check build-dependencies. See more on sbuild at Debian wiki and sbuild configuration example in "Guide for Debian Maintainers".

If you wish to try a new GUI Desktop environment of any OS, I recommend you to use QEMU or KVM on a Debian stable system to run multiple desktop systems safely using virtualization. These enable you to run any desktop applications including ones of Debian unstable and testing without usual risks associated with them and without rebooting.

Since pure QEMU is very slow, it is recommended to accelerate it with KVM when the host system supports it.

Virtual Machine Manager also known as virt-manager is a convenient GUI tool for managing KVM virtual machines via libvirt.

The virtual disk image "virtdisk.qcow2" containing a Debian system for QEMU can be created using debian-installer: Small CDs as follows.

$ wget http://cdimage.debian.org/debian-cd/5.0.3/amd64/iso-cd/debian-503-amd64-netinst.iso
$ qemu-img create -f qcow2 virtdisk.qcow2 5G
$ qemu -hda virtdisk.qcow2 -cdrom debian-503-amd64-netinst.iso -boot d -m 256
...
[Tip] Tip

Running other GNU/Linux distributions such as Ubuntu and Fedora under virtualization is a great way to learn configuration tips. Other proprietary OSs may be run nicely under this GNU/Linux virtualization, too.

See more tips at Debian wiki: SystemVirtualization.



[2] Contoh penyesuaian yang lebih rumit: "Vim Galore", "sensible.vim", "#vim Recommendations" ...

[3] vim-pathogen populer.