Debian 11 Install

ISO下载地址

https://get.debian.org/images/archive/11.10.0/amd64/iso-dvd/

Debian 11镜像源

Debian全球镜像站列表：https://www.debian.org/mirror/list

• 将 /etc/apt/sources.list中的所有内容注释掉或删除，并替换为以下任意一个镜像站提供的源地址。选择一个镜像站即可。
• 注意：在替换之前，请确保备份原始的 sources.list文件以防万一。
• ssh中输入 nano /etc/apt/sources.list开始编辑文件，使用 #注释所有的内容或删除所有内容后，粘贴下方任意镜像站内容。

网易镜像站：

deb https://mirrors.163.com/debian/ bullseye main non-free contrib
deb-src https://mirrors.163.com/debian/ bullseye main non-free contrib
deb https://mirrors.163.com/debian-security/ bullseye-security main
deb-src https://mirrors.163.com/debian-security/ bullseye-security main
deb https://mirrors.163.com/debian/ bullseye-updates main non-free contrib
deb-src https://mirrors.163.com/debian/ bullseye-updates main non-free contrib
deb https://mirrors.163.com/debian/ bullseye-backports main non-free contrib
deb-src https://mirrors.163.com/debian/ bullseye-backports main non-free contrib

清华大学镜像站:

deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-updates main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-updates main contrib non-free
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-backports main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-backports main contrib non-free
deb https://mirrors.tuna.tsinghua.edu.cn/debian-security bullseye-security main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian-security bullseye-security main contrib non-free

腾讯云镜像站：

deb https://mirrors.tencent.com/debian/ bullseye main non-free contrib
deb-src https://mirrors.tencent.com/debian/ bullseye main non-free contrib
deb https://mirrors.tencent.com/debian-security/ bullseye-security main
deb-src https://mirrors.tencent.com/debian-security/ bullseye-security main
deb https://mirrors.tencent.com/debian/ bullseye-updates main non-free contrib
deb-src https://mirrors.tencent.com/debian/ bullseye-updates main non-free contrib
deb https://mirrors.tencent.com/debian/ bullseye-backports main non-free contrib
deb-src https://mirrors.tencent.com/debian/ bullseye-backports main non-free contrib

实际安装

configure language & location & keyword

other ---> Asia --->China

partition disk

当看到这个页面时，选择Go Back，千万不能选continue

为什么要选择Go Back，不能选择continue呢？

因为如果选择了continue，那么接下来，会进入配置apt源阶段，此时会从security.debian.org 网址，拉取安全补丁，这个网址是国外的，下载补丁会非常的慢，3到4个小时，才能下载完成，有的时候还会出现网络中断，重新下载，非常麻烦。

接下来，选择 Install the Grub boot loader

相当于跳过了2步：configure the package manager 和 select and install software

install the grub boot loader

(仅了解) configure package manager & software

• Ctrl+Alt+F2 为命令行终端
• Ctrl+Alt+F4为日志输出终端
• Ctrl+Alt+F5为图形终端

如果第 1.步选择完国内源之后没有继续，这里空的，或者只有 deb cdrom: [pebian GNu/Linux 12.9.0Bookworm- 0fficial amd64 NETINST with irmware 20250111-10:54]/ bookworm contrib main non-free-firmware；如果第 1.步选择完国内源之后继续了，并且此时已经进入下载阶段了，则会看到类似以下的内容：

• Ctrl+Alt+F4为日志输出终端

从中可以看到 security.debian.org并没有被替换成国内源的地址。

Ctrl+Alt+F2 为命令行终端

cat /target/etc/apt/sources.list

nano /target/etc/apt/sources.list

将上图中debian-security中的 security.debian.org 替换为 mirrors.tuna.tsinghua.edu.cn 。注意，有2处

内容为：

deb http://mirrors.tuna.tsinghua.edu.cn/debian-security bullseye-security main contrib 

按 Ctrl+x退出，按 Ctrl+Alt+F1或 Ctrl+Alt+F5回到安装界面，继续安装

安装ssh server

 apt install openssh-server

 systemctl status ssh

 systemctl start ssh

 systemctl enable ssh

 debian默认情况下，不能以root用户远程ssh登录。所以，需要用其他用户登录，然后su - root 命令，切换成root用户

如果上面安装openssh-server失败了，那么需要手动便捷apt源了，如下：

nano /etc/apt/sources.list

将deb cdrom这一行，用#注释掉，然后添加下面一行

deb http://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free

这里的 deb http://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free，需要自己一个个字母手输入了，注意是http不是https。

最后执行：

apt update

修改apt源

apt install ca-certificates
nano /etc/apt/sources.list

将以下内容，追加到文件中。粘贴快捷键是ctrl + shift + v，保存退出时ctrl + x

deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye main contrib non-free
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-updates main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-updates main contrib non-free
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-backports main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bullseye-backports main contrib non-free
deb https://mirrors.tuna.tsinghua.edu.cn/debian-security bullseye-security main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian-security bullseye-security main contrib non-free

apt update  

安装ufw

apt install ufw


ufw enable

ufw allow ssh

ufw status numbered

安装主要组件

apt install vim

apt install sudo

（仅了解）安装安全更新

# 查看可用安全更新的列表
apt list --upgradable | grep -e "-security"

# 如果你在上面命令的输出中发现任何的软件包更新。就运行下面的命令来安装它们
apt list --upgradable | grep -e "-security" | awk -F "/" '{print $1}' | xargs apt install

root用户通过sshd直接登录

debian默认情况下，不能以root用户远程ssh登录。所以，需要用其他用户登录，然后su - root 命令，切换成root用户

vi /etc/ssh/sshd_config

# 添加如下配置

PermitRootLogin yes

重启sshd服务

systemctl restart sshd