High-Level Installation Process
Regardless of the distribution, the high-level process usually goes like this:Create Installation Medium
Burn/copy/transfer the ISO to your install medium (e.g. a CD or USB stick).Popular tools for creating bootable USB drives:
- Rufus (Windows)
- Etcher (Cross-platform)
- dd command (Linux)
Boot from Installation Medium
Boot your server from your install medium.You may need to change the boot order in your BIOS/UEFI settings.
Installation Best Practices
Use Expert Install Mode
Where applicable, use the expert install option so you have tighter control of what is running on your server.
- Package selection
- Partitioning scheme
- Network configuration
- Service selection
Minimal Installation
Only Install What You Need
Only install what you absolutely need. I, personally, do not install anything other than SSH.
- Fewer packages = smaller attack surface
- Less to maintain and update
- Better performance
- Easier troubleshooting
Enable Disk Encryption
After Installation
Once installation is complete, proceed to the Pre/Post Installation Requirements to prepare your system for hardening.Keep your installation media in a safe place. You may need it for system recovery or troubleshooting.