{"id":2974,"date":"2025-08-31T23:48:23","date_gmt":"2025-08-31T14:48:23","guid":{"rendered":"https:\/\/blog.id774.net\/entry\/?p=2974"},"modified":"2025-09-09T01:38:22","modified_gmt":"2025-09-08T16:38:22","slug":"%e4%b8%bb%e8%a6%81%e3%81%aa%e7%92%b0%e5%a2%83%e3%82%92-debian-13-%e3%81%a7%e7%b5%b1%e4%b8%80%e3%81%97%e3%81%9f","status":"publish","type":"post","link":"https:\/\/blog.id774.net\/entry\/2025\/08\/31\/2974\/","title":{"rendered":"\u4e3b\u8981\u306a\u74b0\u5883\u3092 Debian 13 \u3067\u7d71\u4e00\u3057\u305f"},"content":{"rendered":"

\u524d\u56de<\/a>\u306f\u5b9f\u9a13\u7684\u306b VM \u306b Debian 13 \u3092\u5c0e\u5165\u3057\u305f\u3002\u4eca\u56de\u306f\u3055\u3089\u306b\u8e0f\u307f\u8fbc\u307f\u3001\u65b0\u898f\u30b5\u30fc\u30d0\u30fc\u3092\u5951\u7d04\u3057\u3066\u672c\u756a\u7528\u3068\u3057\u3001\u65e2\u5b58\u306e\u74b0\u5883\u3092\u958b\u767a\u7528\u306b\u5207\u308a\u66ff\u3048\u305f\u3002\u305d\u306e\u4e0a\u3067\u4e21\u8005\u3092 Debian 13 \u306b\u7d71\u4e00\u3057\u3001\u81ea\u5b85\u306e VM \u30db\u30b9\u30c8\u74b0\u5883\u3082\u542b\u3081\u3066\u30b7\u30b9\u30c6\u30e0\u5168\u4f53\u3092\u6574\u7406\u3057\u305f\u3002\u52a0\u3048\u3066 VMware Workstation 17 Pro \u3092\u5c0e\u5165\u3057\u3001 vmrun \u30b3\u30de\u30f3\u30c9\u306b\u3088\u308b\u4e00\u62ec\u7ba1\u7406\u4f53\u5236\u3092\u69cb\u7bc9\u3057\u305f\u3002\u7d50\u679c\u7684\u306b\u3001OS \u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u7d71\u4e00\u306b\u3068\u3069\u307e\u3089\u305a\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u3084\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u518d\u8a2d\u8a08\u3082\u542b\u3081\u305f\u5927\u898f\u6a21\u306a\u74b0\u5883\u5237\u65b0\u3068\u306a\u3063\u305f\u3002<\/p>\n

\n

1. \u30b5\u30fc\u30d0\u30fc\u518d\u7de8\u3068 Debian 13 \u3078\u306e\u79fb\u884c<\/h2>\n

\u672c\u756a\u30fb\u958b\u767a\u74b0\u5883\u306e\u5206\u96e2<\/h3>\n

\u65b0\u898f\u306b\u5951\u7d04\u3057\u305f\u30b5\u30fc\u30d0\u30fc\u3092\u300c\u672c\u756a\u300d\u3001\u5f93\u6765\u74b0\u5883\u3092\u300c\u958b\u767a\u300d\u3068\u660e\u78ba\u306b\u5206\u96e2\u3057\u305f\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u74b0\u5883\u5909\u66f4\u3084\u30d7\u30ed\u30b0\u30e9\u30e0\u4fee\u6b63\u3092\u307e\u305a\u958b\u767a\u3067\u8a66\u3057\u3001\u554f\u984c\u306a\u3051\u308c\u3070\u672c\u756a\u3078\u53cd\u6620\u3067\u304d\u308b\u4f53\u5236\u3092\u6574\u3048\u305f\u3002\u5c0f\u898f\u6a21\u306a\u81ea\u524d CI\/CD \u306e\u3088\u3046\u306a\u904b\u7528\u3068\u306a\u308a\u3001\u5909\u66f4\u6642\u306e\u5fc3\u7406\u7684\u8ca0\u62c5\u304c\u6e1b\u5c11\u3057\u305f\u3002<\/p>\n

\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3068\u521d\u671f\u78ba\u8a8d<\/h3>\n

Debian 13 \u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb USB \u3092\u4f5c\u6210\u3057\u3001VM \u3067\u691c\u8a3c\u3057\u305f\u3002<\/p>\n

1
2
<\/div><\/td>
lsblk
\nfree -m<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

32GB \u30e1\u30e2\u30ea\u74b0\u5883\u3067\u306f\u81ea\u52d5\u7684\u306b 6GB \u7a0b\u5ea6\u306e\u30b9\u30ef\u30c3\u30d7\u304c\u78ba\u4fdd\u3055\u308c\u305f\u3002\u304b\u3064\u3066\u306e\u300c\u30e1\u30e2\u30ea\u3068\u540c\u5bb9\u91cf\u300d\u5272\u308a\u5f53\u3066\u3088\u308a\u3082\u30d0\u30e9\u30f3\u30b9\u304c\u6539\u5584\u3055\u308c\u3066\u3044\u308b\u3002<\/p>\n

\u30c7\u30a3\u30b9\u30af\u306e\u5b89\u5b9a\u5316\u3068\u6697\u53f7\u5316\u5fa9\u5143<\/h3>\n

\u30c7\u30d0\u30a4\u30b9\u540d\u306e\u63fa\u308c\u306b\u5bfe\u5fdc\u3059\u308b\u305f\u3081\u3001\u30de\u30a6\u30f3\u30c8\u306b\u306f UUID \u6307\u5b9a\u3092\u7528\u3044\u308b\u3002<\/p>\n

1
2
3
<\/div><\/td>
blkid
\nsudo mkdir -p \/mnt\/data
\nsudo mount UUID=xxxx-xxxx \/mnt\/data<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u306f\u4ee5\u4e0b\u306e\u624b\u9806\u3067\u5fa9\u5143\u3067\u304d\u308b\u3002<\/p>\n

1
2
3
<\/div><\/td>
sudo cryptsetup luksOpen \/dev\/sdb sdb_crypt --key-file \/etc\/lvm\/lvm.seckey
\nsudo vgchange -ay
\nsudo mount \/dev\/mapper\/vg-root \/<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n
\n

2. Apache, PHP, WordPress \u74b0\u5883<\/h2>\n

Apache \u3068 PHP-FPM<\/h3>\n
1
2
3
<\/div><\/td>
sudo apt install -y apache2 libapache2-mod-fcgid php8.4-fpm
\nsudo a2enconf php8.4-fpm
\nsudo systemctl reload apache2<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

WordPress \u3068 wp-cli<\/h3>\n
1
2
3
4
5
6
<\/div><\/td>
sudo apt install -y mariadb-server php8.4-mysql php8.4-xml php8.4-curl \\
\n  php8.4-mbstring php8.4-gd unzip curl
\n
\ncurl -O https:\/\/raw.githubusercontent.com\/wp-cli\/builds\/gh-pages\/phar\/wp-cli.phar
\nchmod +x wp-cli.phar
\nsudo mv wp-cli.phar \/usr\/local\/bin\/wp<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

wp \u30b3\u30de\u30f3\u30c9\u306e\u6240\u6709\u6a29\u3092 root \u306b\u3057\u3066 sudo \u5b9f\u884c\u3067\u7d71\u4e00\u3057\u3001\u5b89\u5168\u5074\u306b\u5bc4\u305b\u305f\u3002<\/p>\n

\u30ad\u30e3\u30c3\u30b7\u30e5\u5f37\u5316<\/h3>\n
1
2
<\/div><\/td>
sudo apt install -y memcached php8.4-memcached
\nsudo systemctl enable memcached --now<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n
\n

3. \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u79fb\u884c\u3068\u76e3\u8996<\/h2>\n

MySQL \/ MariaDB<\/h3>\n

\u505c\u6b62\uff0f\u6574\u5408\u6027\u78ba\u4fdd\u524d\u63d0\u3067\u306e\u30d5\u30a1\u30a4\u30eb\u30b3\u30d4\u30fc\uff08\u5b9f\u9a13\uff09\u3002<\/p>\n

1
2
3
4
<\/div><\/td>
sudo systemctl stop mariadb
\nsudo rsync -aHAX \/var\/lib\/mysql\/ newserver:\/var\/lib\/mysql\/
\n# \u5b9f\u904b\u7528\u3067\u306f\u30c0\u30f3\u30d7\u3092\u63a8\u5968
\nmysqldump -u root -p --all-databases > \/backup\/alldb.sql<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

\u30d7\u30ed\u30bb\u30b9\u76e3\u8996\uff08Munin \u30d7\u30e9\u30b0\u30a4\u30f3\u5074\u306e\u5f37\u5316\uff09<\/h3>\n

mysqld\/mariadbd \u76e3\u8996\u3092\u8ffd\u52a0<\/a>\u3057\u3001\u53ef\u8996\u6027\u3092\u9ad8\u3081\u305f\u3002<\/p>\n

\n

4. \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316<\/h2>\n

\u4eca\u56de\u306e\u5237\u65b0\u3067\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u539a\u3081\u306b\u3057\u305f\u3002\u30ec\u30a4\u30e4\u30fc\u5358\u4f4d\u3067\u5bfe\u7b56\u3092\u914d\u7f6e\u3057\u3066\u3044\u308b\u3002<\/p>\n

SSH \u30cf\u30fc\u30c9\u30cb\u30f3\u30b0<\/h3>\n
1
2
3
4
5
6
7
8
<\/div><\/td>
# \/etc\/ssh\/sshd_config\uff08\u4e3b\u8981\u4f8b\uff09
\nProtocol 2
\nPermitRootLogin no
\nPasswordAuthentication no
\nPubkeyAuthentication yes
\nAllowUsers admin deploy
\n
\nsudo systemctl reload ssh<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Fail2ban<\/h3>\n
1
2
3
4
5
6
7
8
<\/div><\/td>
sudo apt install -y fail2ban
\n# \/etc\/fail2ban\/jail.local\uff08\u4f8b\uff09
\n[sshd]
\nenabled = true
\nmaxretry = 5
\nbantime = 1h
\n
\nsudo systemctl enable fail2ban --now<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

Apache: mod_evasive<\/h3>\n
1
2
3
4
5
6
7
8
9
10
<\/div><\/td>
sudo apt install -y libapache2-mod-evasive
\nsudo a2enmod evasive
\n# \/etc\/apache2\/mods-available\/evasive.conf\uff08\u95be\u5024\u4f8b\uff09
\nDOSHashTableSize 3097
\nDOSPageCount 30
\nDOSSiteCount 200
\nDOSPageInterval 1
\nDOSSiteInterval 1
\nDOSBlockingPeriod 60
\nsudo systemctl reload apache2<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

\u30ed\u30b0\u5206\u96e2\uff08Postfix\uff09<\/h3>\n
1
2
3
4
5
<\/div><\/td>
# \/etc\/rsyslog.d\/30-postfix.conf
\n:programname, isequal, "postfix" -\/var\/log\/postfix.log
\n&amp; stop
\n
\nsudo systemctl restart rsyslog<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

\u4e0d\u8981\u30b5\u30fc\u30d3\u30b9\u306e\u7121\u52b9\u5316<\/h3>\n
1
2
3
<\/div><\/td>
systemctl list-unit-files --type=service | grep enabled
\nsudo systemctl disable --now avahi-daemon
\nsudo systemctl disable --now cups<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

\u30d1\u30c3\u30b1\u30fc\u30b8\u81ea\u52d5\u66f4\u65b0\uff08\u5fc5\u8981\u306b\u5fdc\u3058\u3066\uff09<\/h3>\n
1
2
<\/div><\/td>
sudo apt install -y unattended-upgrades
\nsudo dpkg-reconfigure --priority=low unattended-upgrades<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

AppArmor \u306e\u78ba\u8a8d<\/h3>\n
1
<\/div><\/td>
sudo aa-status<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

\u30d9\u30fc\u30b9\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\uff08nftables \u4f8b\uff09<\/h3>\n
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
<\/div><\/td>
sudo apt install -y nftables
\nsudo systemctl enable nftables --now
\n
\nsudo tee \/etc\/nftables.conf > \/dev\/null >>'EOF'
\nflush ruleset
\ntable inet filter {
\n  chain input {
\n    type filter hook input priority 0;
\n    ct state established,related accept
\n    iif lo accept
\n    tcp dport { 22, 80, 443 } accept
\n    ip protocol icmp accept
\n    drop
\n  }
\n}
\nEOF
\n
\nsudo nft -f \/etc\/nftables.conf<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n
\n

5. \u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u904b\u7528\u6539\u5584<\/h2>\n

rsync \u30d0\u30c3\u30af\u30a2\u30c3\u30d7<\/h3>\n
1
2
3
<\/div><\/td>
rsync -av --delete \/home\/ \/backup\/home\/
\n# SMART \u60c5\u5831\uff08\u4f8b\uff09
\nsudo smartctl -a \/dev\/sda >> \/var\/log\/smart_$(date +%F).log<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

MySQL \u30d0\u30c3\u30af\u30a2\u30c3\u30d7\uff08\u5b9a\u671f\uff09<\/h3>\n
1
<\/div><\/td>
mysqldump -u root -p mydb | gzip > \/backup\/mydb_$(date +%F).sql.gz<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

\u672c\u756a\u30fb\u958b\u767a WordPress \u306e\u5206\u96e2\u904b\u7528<\/h3>\n
1
2
3
<\/div><\/td>
# \u958b\u767a\u3067\u306e\u30a8\u30af\u30b9\u30dd\u30fc\u30c8\uff0f\u672c\u756a\u3067\u306e\u30a4\u30f3\u30dd\u30fc\u30c8\u4f8b
\nwp export --dir=.\/export
\nwp import .\/export\/*.xml --authors=create<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n
\n

6. VMware Workstation 17 Pro \u3068 vmrun \u7ba1\u7406<\/h2>\n

\u81ea\u5b85\u306e VM \u30db\u30b9\u30c8\u3092 Debian 13 \u306b\u66f4\u65b0\u3059\u308b\u3068\u540c\u6642\u306b\u3001VMware Workstation 17 Pro<\/a> \u3092\u5c0e\u5165\u3057\u305f<\/a>\u3002GUI \u3067\u306e\u521d\u671f\u4f5c\u6210\u306f\u52b9\u7387\u304c\u3088\u3044\u304c\u3001\u65e5\u5e38\u904b\u7528\u306f vmrun \u3067\u4e00\u62ec\u7ba1\u7406\u3059\u308b\u65b9\u91dd\u3067\u3042\u308b\u3002<\/p>\n

vmrun \u4e3b\u8981\u30b3\u30de\u30f3\u30c9<\/h3>\n
1
2
3
4
5
6
7
8
9
10
11
12
13
14
<\/div><\/td>
# \u8d77\u52d5\uff08GUI \u306a\u3057\uff09
\nvmrun start \/path\/to\/vm.vmx nogui
\n
\n# \u505c\u6b62\uff08\u901a\u5e38\uff0f\u5f37\u5236\uff09
\nvmrun stop \/path\/to\/vm.vmx soft
\nvmrun stop \/path\/to\/vm.vmx hard
\n
\n# \u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8
\nvmrun snapshot \/path\/to\/vm.vmx snap1
\nvmrun listSnapshots \/path\/to\/vm.vmx
\nvmrun revertToSnapshot \/path\/to\/vm.vmx snap1
\n
\n# \u7a3c\u50cd\u4e2d VM \u4e00\u89a7
\nvmrun list<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

GUI \u3068 CUI \u3092\u6a2a\u65ad\u3057\u3066\u5236\u5fa1\u3067\u304d\u308b\u67d4\u8edf\u6027\u306f\u904b\u7528\u4e0a\u306e\u5f37\u307f\u3067\u3042\u308b\u3002\u30d8\u30c3\u30c9\u30ec\u30b9\u904b\u7528\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u96c6\u4e2d\u7ba1\u7406\u304c\u5bb9\u6613\u306b\u306a\u3063\u305f\u3002<\/p>\n

\n

7. systemd \u3068 GUI \u904b\u7528<\/h2>\n

Debian 13 \u306f systemd \u524d\u63d0\u304c\u4e00\u5c64\u5f37\u307e\u3063\u305f\u3002\u5229\u70b9\u306f\u30b5\u30fc\u30d3\u30b9\u7ba1\u7406\u306e\u7d71\u4e00\u3068\u8d77\u52d5\u5236\u5fa1\u306e\u5bb9\u6613\u3055\u3001\u6b20\u70b9\u306f\u69cb\u6210\u306e\u80a5\u5927\u5316\u3067\u3042\u308b\u3002GUI \u74b0\u5883\u306b\u306f\u3044\u3064\u3082\u901a\u308a GNOME Flashback<\/a> \u3092\u9078\u629e\u3057\u305f\u3002\u8efd\u91cf\u3067\u30af\u30e9\u30b7\u30c3\u30af\u306a UI \u3092\u7dad\u6301\u3067\u304d\u3001\u30b5\u30fc\u30d0\u30fc\u7ba1\u7406\u7528\u9014\u306b\u9069\u3059\u308b\u3002\u30ed\u30b0\u30a4\u30f3\u6642\u306e\u30ab\u30fc\u30cd\u30eb\u30e1\u30c3\u30bb\u30fc\u30b8\u306f quiet \u30aa\u30d7\u30b7\u30e7\u30f3\u3067\u6291\u5236\u3057\u305f\u3002<\/p>\n

1
2
3
<\/div><\/td>
sudo vim \/etc\/default\/grub
\n# GRUB_CMDLINE_LINUX_DEFAULT="quiet"
\nsudo update-grub<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

gdm3 \u3068 lightdm \u3092\u6bd4\u8f03\u3057\u3001\u6700\u7d42\u7684\u306b\u306f lightdm \u3092\u7dad\u6301\u3057\u305f\u3002\u7406\u7531\u306f GPU \u304c Quadro K600 \u3068\u3044\u3046\u53e4\u3044 Kepler<\/a> \u4e16\u4ee3\u306e\u30ef\u30fc\u30af\u30b9\u30c6\u30fc\u30b7\u30e7\u30f3\u5411\u3051\u30ed\u30fc\u30a8\u30f3\u30c9\u3067\u3042\u308a nvidia-legacy-390xx-driver \u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u3059\u3067\u306b\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u3044\u306a\u3044\u3002\u305d\u306e\u305f\u3081 nouveau<\/a> \u3092\u4f7f\u3046\u5fc5\u8981\u304c\u3042\u308a\u3001\u305d\u306e\u89aa\u548c\u6027\u306e\u305f\u3081\u3067\u3042\u308b\u3002<\/p>\n

\n

8. \u307e\u3068\u3081 \u2015 OS \u7d71\u4e00\u3068\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u306e\u52b9\u679c<\/h2>\n