Alpine Linux

https://wiki.alpinelinux.org/wiki/
Admin
Alpine Linux is a security-oriented, lightweight Linux distribution based on musl libc and BusyBox,...
Tokens:2,224,656
Snippets:17,595
Trust Score:9.9
Update:1 day ago
Show doc for...
Tokens:
Raw
### Webmin setup prompts

Source: https://wiki.alpinelinux.org/wiki/Webmin?__goaway_challenge=cookie&__goaway_id=ab70e66b814adc09809f236fbe9274c7

Example responses to the Webmin setup script prompts. Use 'enter' for defaults, set log directory to /var/log/webmin, choose Gentoo (84) as OS, ES4.0 as version, set admin credentials, disable SSL, and start Webmin at boot.

```text
    Config file directory [/etc/webmin]: enter
    Log file directory [/var/webmin]: /var/log/webmin
    Full path to perl: enter
    Operating system: 84 // 84 must be Gentoo
    Version: ES4.0
    Web server port (default 10000): enter (or other port number)
    Login name (default admin): admin
    Login password: admin-password
    Password again: admin-password
    Use SSL (y/n): n
    Start Webmin at boot time (y/n): y
```

--------------------------------

### Install and start Lighttpd

Source: https://wiki.alpinelinux.org/wiki/Lighttpd?__goaway_challenge=cookie&__goaway_id=770cb85e8e016ef5d28ee014d183fac8

Install Lighttpd, add it to the default runlevel, and start the service. Run these commands as root.

```shell
apk add lighttpd
rc-update add lighttpd default
rc-service lighttpd restart
```

--------------------------------

### Install and start polkit

Source: https://wiki.alpinelinux.org/wiki/Michael's_cwm_desktop_(minimal)?__goaway_challenge=cookie&__goaway_id=dcd20daf096fa35611569a669b76c1fc

Install polkit (or polkit-elogind), add it to runlevel, and start the service.

```shell
# apk add polkit
```

```shell
# rc-update add polkit
```

```shell
# rc-service polkit start
```

--------------------------------

### Install and start MySQL

Source: https://wiki.alpinelinux.org/wiki/Cvechecker?__goaway_challenge=cookie&__goaway_id=687596f81cfb69f6df6c6e85885c740a

Commands to install MySQL, start the service, and set the root password.

```shell
apk add mysql mysql-client
rc-service mysql setup
rc-service mysql start && rc-update add mysql default
/usr/bin/mysqladmin -u root password 'new-password'
```

--------------------------------

### Install and start haveged

Source: https://wiki.alpinelinux.org/wiki/Entropy_and_randomness?__goaway_challenge=cookie&__goaway_id=6a906bc6ae91ee49532bed8ce0ca216a

Installs haveged, starts the service, and enables it to start at boot.

```bash
apk -U add haveged && rc-service haveged start && rc-update add haveged
```

--------------------------------

### Install MySQL and initialize databases

Source: https://wiki.alpinelinux.org/wiki/FreePBX_V3?__goaway_challenge=cookie&__goaway_id=b187ff66bd903c5abb6553ca6a782d23

Installs MySQL server and client, initializes the database, and starts the service.

```shell
apk add mysql mysql-client
```

```shell
/usr/bin/mysql_install_db --user=mysql
```

```shell
rc-service mariadb start && rc-update add mariadb default
```

--------------------------------

### Setup and start PostgreSQL

Source: https://wiki.alpinelinux.org/wiki/Request_Tracker?__goaway_challenge=cookie&__goaway_id=c3a4bc857a6c0e85f2c0b80ff1f8fc91

Initializes the PostgreSQL data directory and starts the PostgreSQL service.

```shell
/etc/init.d/postgresql setup
```

```shell
/etc/init.d/postgresql start
```

--------------------------------

### Install ipset and add to startup

Source: https://wiki.alpinelinux.org/wiki/Linux_Router_with_VPN_on_a_Raspberry_Pi?__goaway_challenge=cookie&__goaway_id=a8f49ef4611bdcf65d1da1045e2e656e

Install ipset using apk and add it to the default runlevel so it starts on boot.

```shell
apk add ipset
```

```shell
rc-update add ipset default
```

--------------------------------

### setup-interfaces available interfaces prompt

Source: https://wiki.alpinelinux.org/wiki/Configure_Networking?__goaway_challenge=cookie&__goaway_id=884fcb90f77cb46f9f053c096180fb10

Example output from setup-interfaces showing available interfaces and the prompt to choose which one to initialize. Choose eth0 for Ethernet or wlan0 for wireless.

```text
Available interfaces are: eth0 wlan0.
Enter '?' for help on bridges, bonding and vlans.
Which one do you want to initialize? (or '?' or 'done') [eth0]
```

--------------------------------

### Scripted OpenLDAP installation on Alpine

Source: https://wiki.alpinelinux.org/wiki/Configure_OpenLDAP?__goaway_challenge=cookie&__goaway_id=428680b707370728ff1a6eb5b2373e2d

Automates the steps from the quickstart guide. Adjust the DOMAIN variable to your domain. Installs packages, configures slapd.d, imports configuration, and starts the service.

```bash
 export DOMAIN="dc=home"
 
 echo "Installing packages..."
 apk add openldap openldap-back-mdb openldap-clients
 
 echo "Configuring for v2.3+ style slapd.d config directory..."
 install -m 755 -o ldap -g ldap -d /etc/openldap/slapd.d
 sed -i~ \
   -e 's/^cfgfile=/#cfgfile=/' \
   -e 's/^#cfgdir=.*/cfgdir="\/etc\/openldap\/slapd.d"/' \
   /etc/conf.d/slapd
 rm /etc/openldap/slapd.conf
 
 echo "Customizing for domain: ${DOMAIN}..."
 sed -i~ \
   -e 's/\.la$/.so/' \
   -e "s/dc=my-domain,dc=com/${DOMAIN}/" /etc/openldap/slapd.ldif
 
 echo "Importing configuration..."
 slapadd -n 0 -F /etc/openldap/slapd.d -l /etc/openldap/slapd.ldif
 chown -R ldap:ldap /etc/openldap/slapd.d/*
 
 echo "Configuring slapd service..."
 install -m 755 -o ldap -g ldap -d /var/lib/openldap/run
 service slapd start
 rc-update add slapd
```

--------------------------------

### Quick/easy way: download and run create-alpine-sdk.sh

Source: https://wiki.alpinelinux.org/wiki/Setting_up_the_build_environment_1.7?__goaway_challenge=cookie&__goaway_id=06416f8726b19fe8d210317e4490419b

Alternative to manual setup: download the script, make it executable, and run it with sudo. It downloads, unpacks, and compiles everything, placing the result in /opt/alpine/alpine-sdk.

```bash
1) There is the hard way - do it yourself - if you want that go on with step-by-step
2) The quick/easy way: download a script that will do it for you: http://dev.alpinelinux.org/~abrodman/create-alpine-sdk.sh
   1) download the script
   2) chmod +x create-alpine-sdk.sh
   3) sudo ./create-alpine-sdk.sh
   -> it will download, unpack and compile everything for you
   -> location: /opt/alpine/alpine-sdk
```

--------------------------------

### Commands to stop modloop, update, and setup disk

Source: https://wiki.alpinelinux.org/wiki/Replacing_non-Alpine_Linux_with_Alpine_remotely?__goaway_challenge=cookie&__goaway_id=377a1c95199fdce2c3ddb4e58bfc385e

Run these commands to stop the modloop service, update the package index, and start the hard disk setup. The setup-disk command will guide you through the installation.

```bash
rc-service modloop stop
apk update
setup-disk
```

--------------------------------

### Secure MariaDB Installation

Source: https://wiki.alpinelinux.org/wiki/MariaDB?__goaway_challenge=cookie&__goaway_id=c0e0a5ff621d034f5a4ad358803fa1c3

Runs the interactive script to secure the MariaDB installation, guiding through root password setup, removing anonymous users, and other security options.

```bash
mariadb-secure-installation
```

--------------------------------

### Example /etc/resolv.conf

Source: https://wiki.alpinelinux.org/wiki/Alpine_configuration_management_scripts?__goaway_challenge=cookie&__goaway_id=dcb9fddbb78bc80eaf264fee3d568867

Example contents of /etc/resolv.conf after running setup-dns with the given options.

```text
search example.org nameserver 192.168.0.1
```

--------------------------------

### MariaDB setup commands for Gitea

Source: https://wiki.alpinelinux.org/wiki/Talk:Gitea?__goaway_challenge=cookie&__goaway_id=2b666717a77bbade3c8aa22754b82d95

Commands to install and initialize MariaDB, start the service, secure the installation, and create the Gitea database and user. Run as root; the SQL statements are executed in the mysql client.

```bash
apk add mariadb mariadb-client
mysql_install_db --user=mysql --datadir=/var/lib/mysql
service mariadb start
rc-update add mariadb
mysql_secure_installation

mysql -u root -p
CREATE DATABASE gitea;
GRANT ALL ON gitea.* TO 'giteadbuser'@'localhost' IDENTIFIED BY 'giteadbpasswd';
FLUSH PRIVILEGES;
EXIT
```

--------------------------------

### Enter the new vserver

Source: https://wiki.alpinelinux.org/wiki/User:Ncopa/buildmsg?__goaway_challenge=cookie&__goaway_id=d16efd9b1b5c8a00cc2456bfb1d19d98

Enters the build-2-6 vserver to begin setup.

```bash
vserver build-2-6 enter
```

--------------------------------

### Setup hostname, network, and repos

Source: https://wiki.alpinelinux.org/wiki/Bootstrapping_Alpine_Linux?__goaway_challenge=cookie&__goaway_id=57513420189faee6cfce4e8f73481ed0

Run the setup scripts to configure hostname, network interfaces, and APK repositories.

```shell
setup-hostname
```

```shell
setup-interfaces
```

```shell
setup-apkrepos -f
```

--------------------------------

### Install and configure PostgreSQL

Source: https://wiki.alpinelinux.org/wiki/ISP_Mail_Server_2.x_HowTo?__goaway_challenge=cookie&__goaway_id=cfcc63911225274bf8149286f8acf52a

Adds and configures PostgreSQL packages, sets up the service, and enables it to start at boot. This is the initial setup for the mail server database.

```shell
 apk add acf-postgresql postgresql-client
 rc-service postgresql setup
 rc-service postgresql start
 rc-update add postgresql
```

--------------------------------

### setup-bootable usage example

Source: https://wiki.alpinelinux.org/wiki/Alpine_configuration_management_scripts?__goaway_challenge=cookie&__goaway_id=dcb9fddbb78bc80eaf264fee3d568867

Command to prepare a target partition /dev/sdXY for booting, using verbose mode and specifying source and destination. The source is the installation media device, and the destination is the target partition.

```shell
# setup-bootable -v /media/<installation-media-device> /dev/sdXY
```

--------------------------------

### setup-desktop prompt output

Source: https://wiki.alpinelinux.org/wiki/Alpine_configuration_management_scripts?__goaway_challenge=cookie&__goaway_id=dcb9fddbb78bc80eaf264fee3d568867

Example prompt shown when running setup-desktop, asking for the desktop environment choice. The default is 'none'.

```text
Which desktop environment? ('gnome', 'plasma', 'xfce', 'mate', 'sway', 'lxqt' or 'none') [none]
```

--------------------------------

### Install and start darkhttpd

Source: https://wiki.alpinelinux.org/wiki/How_to_setup_a_Alpine_Linux_mirror?__goaway_challenge=cookie&__goaway_id=60f5ad06fd061174cf11a5a64e17f1d2

Installs, starts, and enables darkhttpd at boot as an alternative to lighttpd.

```shell
apk add darkhttpd && rc-service darkhttpd start && rc-update add darkhttpd
```

--------------------------------

### Create ext4 filesystem and install system

Source: https://wiki.alpinelinux.org/wiki/Raspberry_Pi_4_-_Persistent_system_acting_as_a_NAS_and_Time_Machine?__goaway_challenge=cookie&__goaway_id=9b1d326d09cede82a738816b5c02b3de

Format the new partition, mount it, and run setup-disk to install the system.

```bash
apk add e2fsprogs
mkfs.ext4 /dev/mmcblk0p2
mount /dev/mmcblk0p2 /mnt
setup-disk -m sys /mnt
mount -o remount,rw /media/mmcblk0p1
```

--------------------------------

### Run setup-desktop script

Source: https://wiki.alpinelinux.org/wiki/Alpine_configuration_management_scripts?__goaway_challenge=cookie&__goaway_id=dcb9fddbb78bc80eaf264fee3d568867

Invoke the setup-desktop script to install a desktop environment. You will be prompted to select from 'gnome', 'plasma', 'xfce', 'mate', 'sway', 'lxqt', or 'none'. The script installs the chosen desktop, Firefox (unless BROWSER variable is set), and adds startup services. Reboot to boot into the graphical login screen, except for sway.

```bash
# setup-desktop
```

--------------------------------

### Install bridge package for LACP setup

Source: https://wiki.alpinelinux.org/wiki/Bonding?__goaway_challenge=cookie&__goaway_id=cbf13475170a4b9d3e6f062e746995a3

Install the bridge package when setting up a LACP setup with a bridge interface.

```shell
apk add bridge
```

--------------------------------

### Set up network interfaces

Source: https://wiki.alpinelinux.org/wiki/Xen_Dom0_on_USB_or_SD?__goaway_challenge=cookie&__goaway_id=c00ab300d04edf1367f000586ee89999

Run setup-interfaces and then ifup eth0 to bring up the network. You may need to replace eth0 with your actual interface name.

```shell
# setup-interfaces
# ifup eth0
```

--------------------------------

### Install and start bluez-alsa

Source: https://wiki.alpinelinux.org/wiki/Raspberry_Pi_Bluetooth_Speaker?__goaway_challenge=cookie&__goaway_id=bc10eb9729bdd76be16d4c5a87a9928e

Install bluez-alsa and bluez-alsa-utils, add bluealsa to startup, start the service, and run bluealsa-aplay in the background.

```bash
 apk add bluez-alsa bluez-alsa-utils
 rc-update add bluealsa
 rc-service start bluealsa
 bluealsa-aplay &
```

--------------------------------

### Setup chroot and mount filesystems

Source: https://wiki.alpinelinux.org/wiki/User:Halscode/Atomic_Alpine?__goaway_challenge=cookie&__goaway_id=1037beccba234f12abc8f7162d6e2e4b

Sets up a basic chroot environment by binding /dev, mounting proc and sysfs, generating fstab, copying resolv.conf, and entering the chroot. Includes a tip to use tab for snapshot path completion.

```shell
# export SNP="/mnt/snapshots/20210411212549sdBXyLxg/@"
#     # tip: use tab to fill in the correct snapshot; this one is just an example

# mount -o bind /dev $SNP/dev
# mount -t proc none $SNP/proc
# mount -t sysfs sys $SNP/sys

# sed "s#CURRENT_SNAPSHOTS_PATH#/snapshots/20210411212549sdBXyLxg#g" /mnt/fstab > "$SNP/etc/fstab"

# cp -L /etc/resolv.conf "$SNP/etc/"  # so DNS still works
# chroot "$SNP" /bin/sh

# mount -a
```

--------------------------------

### GDBus error output for Firefox portal failure

Source: https://wiki.alpinelinux.org/wiki/Flatpak?__goaway_challenge=cookie&__goaway_id=d19c1e11564178aeb8de69fdb9f3b447

Example error output when a Flatpak application fails to interface with the portal, causing issues like being unable to open file directories. Ensure portals are installed and started.

```text
(firefox:12345): Gtk-WARNING **: 12:00:00.000: Unable to load an interface for org.freedesktop.portal.FileChooser: **GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown:** The name **org.freedesktop.portal.Desktop** was not provided by any .service files
```

--------------------------------

### Install and start Avahi daemon

Source: https://wiki.alpinelinux.org/wiki/MDNS?__goaway_challenge=cookie&__goaway_id=38e0df33ca6524bb4f5bbf4f193cd642

Installs the avahi package, enables the avahi-daemon service at boot, and starts it immediately. Requires doas privileges.

```shell
$ doas apk add avahi
$ doas rc-update add avahi-daemon
$ doas rc-service avahi-daemon start
```

--------------------------------

### Run setup-alpine with interactive answers

Source: https://wiki.alpinelinux.org/wiki/Michael's_base_installation_procedure?__goaway_challenge=cookie&__goaway_id=339df73cc69d2425e905317e591d4e8b

Boot from Ventoy, log in as root, and run setup-alpine. The subsequent lines are the answers to the interactive prompts, including keyboard layout, hostname, network configuration, and user creation. The exact prompts are not shown, but the sequence is as documented.

```text
root

# setup-alpine

us

us

alpine

ENTER (eth0)

ENTER (dhcp)

ENTER (wlan0)

1

passwd..

ENTER (dhcp)

n

new password

new password

..time zone..

..no proxy..

..default.. (chrony)

1

user

real name user

passwd

passwd

default, none,

default, openssh,

..here I deviate slightly:

?

cryptsys

y

..enter file system password many times..

reboot.
```

--------------------------------

### Run Alpine setup from CD or USB

Source: https://wiki.alpinelinux.org/wiki/Alpine_Release_Testing_Checklist?__goaway_challenge=cookie&__goaway_id=055165b5007d05909aa9684ffcfe6e70

Boot from the installation media, log in as root, and run the setup script. This is the first step in the installation process.

```shell
/sbin/setup-alpine
```

--------------------------------

### Start PHP-FPM7

Source: https://wiki.alpinelinux.org/wiki/Nginx_with_PHP?__goaway_challenge=cookie&__goaway_id=07258a5d854c6ae0d2cd8c01e6c72c81

Starts the PHP-FPM7 service, which is not running after installation.

```bash
rc-service php-fpm7 start
```

--------------------------------

### Example /etc/resolv.conf content

Source: https://wiki.alpinelinux.org/wiki/Alpine_configuration_management_scripts

Sample content for /etc/resolv.conf after running setup-dns with the example options.

```text
search example.org
nameserver 192.168.0.1
```

--------------------------------

### Create user and configure startup files

Source: https://wiki.alpinelinux.org/wiki/User:Innsill/firefox-starter_(x86-64_)?__goaway_challenge=cookie&__goaway_id=a19531876f6138675fdb2b889c132bca

Create a user 'ff', switch to it, and edit .profile and .xinitrc to start X and Firefox.

```bash
adduser ff
```

```bash
su ff -
```

```bash
$vi .profile
```

```bash
startx
```

```bash
$vi .xinitrc
```

```bash
exec firefox
```

```bash
$exit
```

--------------------------------

### Start PHP-FPM82

Source: https://wiki.alpinelinux.org/wiki/Nginx_with_PHP?__goaway_challenge=cookie&__goaway_id=07258a5d854c6ae0d2cd8c01e6c72c81

Start the PHP-FPM service for PHP8.2 after installation.

```bash
rc-service php-fpm82 start
```

--------------------------------

### Example autostart file contents

Source: https://wiki.alpinelinux.org/wiki/Hikari?__goaway_challenge=cookie&__goaway_id=00d88bcc2a202d30c7bf298426ea385a

Example commands to place in the autostart file. Each line runs a command in the background using an ampersand, similar to .xinitrc. No shebang line is needed.

```shell
/usr/bin/qterminal &
/usr/bin/libreoffice &
/usr/bin/rofi -combi-modi run,drun,filebrowser -show combi -sort &
```

--------------------------------

### Install and start audit for profile creation

Source: https://wiki.alpinelinux.org/wiki/AppArmor?__goaway_challenge=cookie&__goaway_id=a1217e073943394287f435c36ec5d3e2

Install the audit package and start the auditd service, then add it to the boot sequence. This is required before generating custom profiles.

```shell
# apk add audit
```

```shell
# rc-service auditd start
```

```shell
# rc-update add auditd
```

--------------------------------

### Start ALSA service with rc-service

Source: https://wiki.alpinelinux.org/wiki/ALSA?__goaway_challenge=cookie&__goaway_id=a24aa58f4a5065f37417d5243e741ee0

Starts the ALSA service using OpenRC. The service is not started on install.

```shell
# rc-service alsa start
```

--------------------------------

### setup-bootable usage: command-line arguments

Source: https://wiki.alpinelinux.org/wiki/Alpine_configuration_management_scripts

Shows the usage syntax for setup-bootable: source and optional dest. The source can be a directory, ISO, or URL; dest defaults to /media/usb. Options include -k, -u, -f, -s, and -v.

```bash
setup-bootable source \[dest\]
```

--------------------------------

### Generate a starter answerfile with setup-alpine -c

Source: https://wiki.alpinelinux.org/wiki/Using_an_answerfile_with_setup-alpine?__goaway_challenge=cookie&__goaway_id=dd8c646cd447b3b8eb67c1215361c0c8

Run this command to create an initial answerfile at the specified path. The generated file contains commented example configuration variables that you should edit to your needs.

```shell
setup-alpine -c PATH_TO_FILENAME
```

--------------------------------

### Run FreePBX installer

Source: https://wiki.alpinelinux.org/wiki/FreePBX

Starts the FreePBX installer. You can accept the defaults.

```shell
./install_amp
```

--------------------------------

### Prepare MariaDB directories and setup

Source: https://wiki.alpinelinux.org/wiki/Moodle?__goaway_challenge=cookie&__goaway_id=f88ed54e82b2b92e70598bb461965ef8

Creates necessary directories, sets ownership, and runs the MariaDB setup script.

```shell
 # mkdir -p /var/lib/mysql
 # chown mysql:mysql /var/lib/mysql
 # /etc/init.d/mariadb setup
```

--------------------------------

### Setup and start PostgreSQL service

Source: https://wiki.alpinelinux.org/wiki/Freeswitch_Voicemail_On_Alpine_Linux?__goaway_challenge=cookie&__goaway_id=156256a97384d19942d9e83582bfaeae

Add PostgreSQL to the default runlevel, run the setup command, and start the service. These commands prepare PostgreSQL for use as the voicemail database.

```bash
rc-update add postgresql
rc-service postgresql setup
rc-service postgresql start
```

--------------------------------

### Start PostgreSQL and Lighttpd services

Source: https://wiki.alpinelinux.org/wiki/2600hz?__goaway_challenge=cookie&__goaway_id=d0d063a8b893e02284c7f14296c160b4

Sets up PostgreSQL, starts it and adds to boot, then starts Lighttpd and adds to boot.

```shell
rc-service postgresql setup
rc-service postgresql start && rc-update add postgresql default
rc-service lighttpd start && rc-update add lighttpd default
```

--------------------------------

### Install MariaDB and client

Source: https://wiki.alpinelinux.org/wiki/Gitea?__goaway_challenge=cookie&__goaway_id=a364e3b837e6fe647072c7f0222c782e

Install MariaDB and the mariadb-client package for database setup.

```shell
apk add mariadb mariadb-client
```

--------------------------------

### List setup-* scripts with find

Source: https://wiki.alpinelinux.org/wiki/Alpine_Linux:Glossary?__goaway_challenge=cookie&__goaway_id=d2f426acc7e6efac2dfb809f3ae4745d

Command to list all setup-* scripts in /usr/sbin, sorted. Useful for discovering available configuration scripts.

```shell
find /usr/sbin -name "setup*" -print | sort
```

--------------------------------

### Install PulseAudio utilities

Source: https://wiki.alpinelinux.org/wiki/PulseAudio?__goaway_challenge=cookie&__goaway_id=14f1ad698831aa28addc2275d3939ecd

Install pulseaudio-utils to get pactl for volume control.

```shell
apk add pulseaudio-utils
```

--------------------------------

### Return to user and start X

Source: https://wiki.alpinelinux.org/wiki/Michael's_cwm_desktop_(minimal)?__goaway_challenge=cookie&__goaway_id=dcd20daf096fa35611569a669b76c1fc

Exit root and launch the X server with startx.

```shell
# return
```

```shell
$ startx
```

--------------------------------

### Install and start Apache2 on Alpine Linux

Source: https://wiki.alpinelinux.org/wiki/Moodle?__goaway_challenge=cookie&__goaway_id=f88ed54e82b2b92e70598bb461965ef8

Installs Apache2, starts the service, and enables auto-start on boot. The configuration file is located at /etc/apache2/httpd.conf, web root at /var/www/localhost/htdocs, and logs at /var/log/apache2.

```shell
 # apk add apache2
 # rc-service apache2 start  # Start the service
 # rc-update add apache2    # Enable auto-start on boot
```
Tokens:
Raw