Editing Introduction to a Self Managed Life: a 13 hour & 28 minute presentation by FUTO software (section)

=== 5. Prepare the Drives ===

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxc7f_tmp_90d50cc3.png
File:lu55028jxc7f_tmp_ae1aab84.png
File:lu55028jxc7f_tmp_6fb6a48d.png
File:lu55028jxc7f_tmp_fc776e25.png
File:lu55028jxc7f_tmp_e4bd6c3a.png
File:lu55028jxc7f_tmp_41dc80bd.png
File:lu55028jxc7f_tmp_31ba1cbc.png
</gallery>

<span id="format-the-drives"></span>
==== 5.1 Format the drives ====

# In the installer, locate your two SSDs (ignore the USB installer drive).
# For each SSD:
#* Select the drive and choose '''“Reformat”'''.
#* Select '''“Use as boot device”''' – this will create an EFI partition on each.

<span id="configure-efi-partitions"></span>
==== 5.2 Configure EFI Partitions ====

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxc7f_tmp_be3ce88b.png
File:lu55028jxc7f_tmp_4b9aaa78.png
File:lu55028jxc7f_tmp_5086d648.png
File:lu55028jxc7f_tmp_8d8ec28c.png
File:lu55028jxc7f_tmp_8f536396.png
File:lu55028jxc7f_tmp_ee4b3eb0.png
File:lu55028jxc7f_tmp_84fae9c1.png
</gallery>

For each SSD:

* Locate the automatically created EFI partition (usually 1GB).
* Edit the size to '''512M'''.
* Make sure it’s set to mount at <code>/boot/efi</code>.

<span id="create-boot-partitions-for-raid"></span>

==== 5.3 Create Boot Partitions for RAID ====

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxc7f_tmp_5080ad97.png
File:lu55028jxc7f_tmp_5f9b3efa.png
File:lu55028jxc7f_tmp_c834b835.png
File:lu55028jxc7f_tmp_d73e5ee8.png
File:lu55028jxc7f_tmp_8ace6542.png
</gallery>

# On each SSD:
#* Create a new '''1GB''' partition.
#* DO NOT FORMAT IT. CHOOSE '''"Leave unformatted"'''.
#* '''DO NOT CHOOSE A MOUNT POINT.''' This is important for setting up RAID 1 later.
# Set Up RAID 1 for <code>/boot</code>

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxckj_tmp_23af8abb.png
File:lu55028jxckj_tmp_f4ef2715.png
</gallery>

# Select '''“Create software RAID (md)”'''.
# Choose both 1GB partitions you just created (one from each SSD).
# Set RAID Level to '''“RAID 1 (mirrored)”'''.
# Name it '''“bootraid”''' or something meaningful to you.
# Select '''“Create”''', hit enter.

<span id="create-root-partitions-for-raid"></span>

==== 5.4 Create Root Partitions for RAID ====

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxckj_tmp_d09fc3d7.png
File:lu55028jxckj_tmp_972a066a.png
File:lu55028jxckj_tmp_4a9745c7.png
File:lu55028jxckj_tmp_7f935e0e.png
</gallery>

# On each SSD:
#* Create a partition using all remaining space. Don’t fill in the “size” text box; it will automatically use the rest of the space on the drive.
#* '''DO NOT FORMAT IT. CHOOSE '''"Leave unformatted"'''.'''
#* '''DO NOT CHOOSE A MOUNT POINT.''' This is important for setting up RAID 1 later.

<span id="set-up-raid-1-for-root"></span>

==== 5.5 Set Up RAID 1 for Root ====

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxckj_tmp_a4a5a576.png
File:lu55028jxckj_tmp_40dcb02f.png
</gallery>

# Select '''“Create software RAID (md)”''' again.
# Choose both large partitions you just created.
# Make sure RAID Level is set to '''“RAID 1 (mirrored)”'''.
# Name it '''“osdriveraid”''' or something meaningful to you.
# Go to '''“Create”''' &amp; hit enter.

<span id="configure-the-boot-partition"></span>
==== 5.6 Configure the /boot Partition ====

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxckj_tmp_664f6137.png
File:lu55028jxckj_tmp_10955270.png
</gallery>

# Select the '''“bootraid”''' you created.
# Format it as '''ext4'''.
# Set mount point to <code>/boot</code>.

<span id="set-up-lvm-on-root-raid"></span>
==== 5.7 Set Up LVM on Root RAID ====

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:lu55028jxckj_tmp_83c21b25.png
File:lu55028jxckj_tmp_1514c051.png
</gallery>

# Select the '''“osdriveraid”''' you created.
# Choose '''“Create volume group”'''.
# Name it '''“ubuntuvolumegroup”''' or something meaningful to you.
# When selecting the device for the LVM, you’ll encounter [https://bugs.launchpad.net/subiquity/+bug/2062102 a bug in the installer]: &gt; ''The installer will show multiple devices without clear identifiers. This is a known issue that persists in the non-beta release of a stable, mission very important server operating system. Welcome to the world of open source software; this is part of the fun of using open source! Remember: '''it wouldn’t be open source if it worked!'''''
# To select the correct device:
#* Look for the option that’s around the size of your install (e.g., 231 GB for 250 GB SSDs).
#* Choose the largest option, which should correspond to your RAID 1 array for the root partition.
#* Ignore the smaller sizes, as they likely represent other partitions or devices.
#* Pray.
# After selecting the correct device, proceed with creating the volume group.

<span id="create-encrypted-volume"></span>

==== 5.8 Create Encrypted Volume ====

# With the LVM volume group selected, choose '''“Create encrypted volume”'''.
# Set a strong password. Consider using a password manager.
# It’s recommended not to create a recovery key, as this could be a potential security risk.
# Optionally, create a recovery key. If you do this, realize '''the recovery key can be used to decrypt your volume'''. ''Don’t do this unless you have a place to hide it that not even your cat can get to!''

<span id="create-logical-volume-for-root"></span>

==== 5.9. Create Logical Volume for Root ====

# Select the encrypted volume you just created.
# Choose '''“Create logical volume”'''.
# Name it '''“ubunturootvolume”''' or something meaningful to you.
# Use the maximum available size.
# Format it as '''ext4'''.
# Set the mount point to <code>/</code> (root).

<span id="review-and-confirm"></span>
==== 5.10 Review and Confirm ====

# Double-check your configuration. For two 250 GB SSDs, it should look like this:
#* Root (<code>/</code>): ~231GB on encrypted LVM which is on RAID 1
#* <code>/boot</code>: ~1GB on RAID 1
#* <code>/boot/efi</code>: 512MB on each SSD
# If everything looks correct, click '''“Done”'''.

<span id="complete-the-installation"></span>
==== 5.11 Complete the Installation ====

# Carefully review the summary one last time. ''Remember we are erasing everything on these drives, to a point where even Rossmann Repair can’t recover it. If you create an encrypted volume, write over it, and then want the data back… good luck with that one.''
# If you’re sure you want to proceed, click '''“Continue”'''.
# Follow the remaining Ubuntu Server installation prompts.
# Set up your username.
# Install OpenSSH server.

<blockquote>'''NOTE:''' Installing OpenSSH allows you to remotely access your machine to install things, use it, mess with it, etc, rather than sit in front of your server in your unairconditioned garage when it’s 117f outside. When you see me on video installing things via terminal, I am almost never in front of the actual machine(or vm) I am using, I am remoting in using ssh.
</blockquote>
<blockquote>'''NOTE''': Do not install Docker via Snap in the next menu when it asks you to. We will install Docker later, and it won’t be the [https://www.reddit.com/r/docker/comments/shztqs/wow_docker_works_a_lot_better_when_you_dont_have/ miserable snap version of DOCKER]_. If you install Docker using Snap accidentally, this is understandable. If you install docker via snap by CHOICE, you’ll be in hell, &amp; you’ll have earned it.
</blockquote>
<span id="reboot-log-in"></span>
==== 5.12 Reboot &amp; log in ====

# Click reboot now at the end.
# Once it is done shutting down Ubuntu Linux, unplug the installation USB.
# When it boots up, it will ask for the encryption password to unlock the root partition, type this in.

<div class="figure">

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:image-20241106140227789.png
</gallery>

</div>
<div class="figure">

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:image-20241106140354651.png
</gallery>

</div>
<div class="figure">

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:image-20241106140427599.png
</gallery>

</div>
<div class="figure">

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:image-20241106140457610.png
</gallery>

</div>
<div class="figure">

<gallery mode="packed-hover" heights=250 widths=400 perrow=2>
File:image-20241106140554944.png
</gallery>

</div>
<span id="set-up-static-ip-mapping-in-pfsense-post-installation"></span>
==== 5.13 Set Up Static IP Mapping in pfSense (Post-Installation) ====

<span id="set-up-static-ip-mapping-in-pfsense"></span>
==== Set Up Static IP Mapping in pfSense ====

# Log into your pfSense router.
# Go to '''Diagnostics &gt; ARP Table'''.
# Find the MAC address associated with your server’s IP (e.g., <code>192.168.5.2</code>). Mine was <code>e0:d5:5e:a8:7f:b5</code>.
# Go to '''Services &gt; DHCP Server'''.
# Scroll to the bottom and click '''“Add static mapping”'''.
# Enter the MAC address and IP address of your server.
''Figure 17: This is what my setup looks like when I’m done configuring my partition structure. Yours should resemble mine. Ubuntu makes it as difficult as possible to use encrypted LVM with RAID 1 on boot devices, but we can beat their interface with some good ol’ ingenuity.''
# Give it a descriptive name (e.g., “Happy cloud server static IP”).
# Save and apply changes.

<span id="identifying-devices-on-your-network"></span>