Initial setup

• Raspbian Stretch
• Write it to an 8 GB flash card using Etcher
• Attach a USB keyboard, an HDMI monitor and an Ethernet cable
• Boot it up and log in using the default user pi and password raspberry

Configure keyboard

sudo raspi-config

• Select 4 Localisation Options
• Select I3 Change Keyboard Layout
• Follow the prompts

Enable SSH service

sudo raspi-config

• Select 5 Interfacing Options
• Select P2 SSH

Get IP address

hostname -I

From now on you can remotely access the system from an SSH client at this IP address, which we’ll refer to as ip below.

Expand filesystem

sudo raspi-config

• Select 7 Advanced Options
• Select A1 Expand Filesystem
• Follow the prompts including rebooting the system

Create new root user

sudo adduser newuser
sudo adduser newuser sudo

Remove default pi user

sudo deluser --remove-home pi

• Follow the prompts to set a password etc.
• Log out of the system
• Log in as the new user
• Verify that this user can elevate to root with sudo su

Copy SSH public key to system

From your client machine:

ssh-copy-id newuser@ip

Lock down SSH config

Add the following to /etc/ssh/sshd_config to enforce public key authentication etc.:

Protocol 2
PasswordAuthentication no
PermitRootLogin no
PubkeyAuthentication yes
AuthenticationMethods publickey
AllowUsers newuser
PermitEmptyPasswords no

Change your host name

Edit the host name file:

sudo nano /etc/hostname

Then replace occurrences of raspberrypi with the new host name:

sudo nano /etc/hosts

Then reboot your system:

sudo reboot

Tags