https://docs.xeylou.fr/deb13/index.htmldownload link (amd64)Hugoen-ushttps://docs.xeylou.fr/deb13/banner/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.xeylou.fr/deb13/banner/index.htmlsudo apt-get update -qq sudo apt-get install -y -qq git figlet bc git clone -q https://github.com/xeylou/my-motd-s.git /tmp/my-motd-s sudo cp /tmp/my-motd-s/gnu-linux/banner_4.txt /etc/ssh/banner sudo tee /etc/ssh/sshd_config.d/02-banner.conf > /dev/null << 'EOF' Banner /etc/ssh/banner # PrintLastLog no EOF sudo sshd -t && sudo systemctl reload ssh sudo cp /tmp/my-motd-s/gnu-linux/update-motd.d-en/* /etc/update-motd.d/ sudo chmod 755 /etc/update-motd.d/[0-3]* sudo rm -f /etc/motd /tmp/my-motd-s run-parts --lsbsysinit /etc/update-motd.dhttps://docs.xeylou.fr/deb13/docker/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.xeylou.fr/deb13/docker/index.htmlsudo apt-get remove $(dpkg --get-selections docker.io docker-compose docker-doc docker-buildx podman-docker containerd runc | cut -f1) sudo apt-get update -qq sudo apt-get install -y -qq ca-certificates curl sudo install -m 0755 -d /etc/apt/keyrings sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc sudo chmod a+r /etc/apt/keyrings/docker.asc sudo tee /etc/apt/sources.list.d/docker.sources <<EOF Types: deb URIs: https://download.docker.com/linux/debian Suites: $(. /etc/os-release && echo "$VERSION_CODENAME") Components: stable Architectures: $(dpkg --print-architecture) Signed-By: /etc/apt/keyrings/docker.asc EOF sudo apt-get update -qq sudo apt-get install -y -qq docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin sudo usermod -aG docker $USER systemctl status --no-pager dockerhttps://docs.xeylou.fr/deb13/hardening/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.xeylou.fr/deb13/hardening/index.htmlbased on sshaudit.com, updated for deb13 openssh 10 for the ssh part keep a parallel ssh session open until the end prep safety cat /home/$USER/.ssh/authorized_keys ssh.socket ssh.socket is active, so Port and AddressFamily directives get ignored and systemctl reload ssh fails with “Cannot bind any address”