From: Plom Heller <plom@plomlompom.com>
Date: Mon, 7 Sep 2026 12:08:08 +0000 (+0200)
Subject: Also disable APT recommends installations for server.
X-Git-Url: https://plomlompom.com/repos/%7B%7Bdb.prefix%7D%7D/booking/test?a=commitdiff_plain;h=36db4da3628b8b6c76f9c4bab2fa0a6802e1d84b;p=confplom

Also disable APT recommends installations for server.
---

diff --git a/setup_scripts/_lib.sh b/setup_scripts/_lib.sh
index d9f941e..5d9e37f 100644
--- a/setup_scripts/_lib.sh
+++ b/setup_scripts/_lib.sh
@@ -14,6 +14,7 @@ TO_RBIND="${NAME_DEV} proc sys"
 NAME_DATA=data
 NAME_LUKSVG=cryptolvm
 NAME_SWAP=swap
+PATH_APT_NORECOMMENDS=/etc/apt/apt.conf.d/90-no-recommends
 PATH_MNT_ROOT="${PATH_MNT}/root"
 USERNAME=plom
 
@@ -191,3 +192,9 @@ start_root() {
 
     augment_profile
 }
+disable_apt_recommends() {
+    local PREFIX=${1:-}
+    local TARGET="${PREFIX}${PATH_APT_NORECOMMENDS}"
+    msg 'Disabling automatic installation of APT recommends …'
+    printf 'APT::Install-Recommends "false";\n' >| "${TARGET}"
+}
diff --git a/setup_scripts/install_debian.sh b/setup_scripts/install_debian.sh
index 144e52f..fa4d353 100755
--- a/setup_scripts/install_debian.sh
+++ b/setup_scripts/install_debian.sh
@@ -5,7 +5,6 @@
 FNAME_INITRD=initrd.img
 FNAME_NM_CONN=wifi.nmconnection
 FNAME_VMLINUZ=vmlinuz
-PATH_APT_NORECOMMENDS=/etc/apt/apt.conf.d/90-no-recommends
 PATH_CRYPTTAB=/etc/crypttab
 PATH_EFI=/boot/efi
 PATH_FSTAB=/etc/fstab
@@ -25,7 +24,6 @@ NAME_ROOT="${NAME_BOOT}"
 
 # constants derived from changeables
 PATH_EFI_NAME_BOOT="${PATH_EFI}/${NAME_BOOT}"
-PATH_MNT_APT_NORECOMMENDS="${PATH_MNT_ROOT}${PATH_APT_NORECOMMENDS}"
 PATH_MNT_APT_SOURCES="${PATH_MNT_ROOT}/etc/apt/sources.list"
 PATH_MNT_CRYPTTAB="${PATH_MNT_ROOT}${PATH_CRYPTTAB}"
 PATH_MNT_FSTAB="${PATH_MNT_ROOT}${PATH_FSTAB}"
@@ -84,8 +82,7 @@ printf '%s UUID=%s none luks\n' \
 msg 'Enabling non-free-firmware component in target sources.list …'
 sed -i 's/ main$/ main non-free-firmware/' "${PATH_MNT_APT_SOURCES}"
 
-msg 'Disabling automatic installation of APT recommends …'
-printf 'APT::Install-Recommends "false";\n' >| "${PATH_MNT_APT_NORECOMMENDS}"
+disable_apt_recommends "${PATH_MNT_ROOT}"
 
 msg 'Into chroot environment installing LVM tools, kernel, initrd etc. …'
 chroot_sh "apt-get -qq update"
diff --git a/setup_scripts/start_root_server.sh b/setup_scripts/start_root_server.sh
index 35c69a8..21bbc5b 100755
--- a/setup_scripts/start_root_server.sh
+++ b/setup_scripts/start_root_server.sh
@@ -8,6 +8,7 @@ PATH_SSHD_DROPIN=/etc/ssh/sshd_config.d/60-ssh-hardening.conf
 PATH_HOME_USER="/home/${USERNAME}"
 PATH_USER_SSH="${PATH_HOME_USER}/${DIRNAME_SSH}"
 
+disable_apt_recommends
 start_root server
 
 msg 'Moving ssh access from root to user …'