VM to install Unifi Network Application

Since everything else failed…
References:

• https://community.ui.com/questions/UniFi-Installation-Scripts-or-UniFi-Easy-Update-Script-or-UniFi-Lets-Encrypt-or-UniFi-Easy-Encrypt-/ccbc7530-dd61-40a7-82ec-22b17f027776
• https://www.youtube.com/watch?v=peWzAUKbnlw
• https://glennr.nl/s/unifi-network-controller [UniFi scripts]

Download Ubuntu 18.04 container Template from Proxmox: Proxmox > Local > Templates
Set up a CT with this Template with password/ssh keys + 32GB of disk, 1GB RAM + IP 192.268.1.70/24
Download script:

wget https://get.glennr.nl/unifi/install/unifi-7.3.83.sh
bash unifi-7.3.83.sh

OS: Ubuntu 22.04 Server LTS (laziness, mostly)
IP: 192.168.1.70 (unifi.fortier-family.com)

Following :

• https://www.billysoftacademy.com/2022-tutorial-learn-how-to-install-the-unifi-controller-version-7-on-a-linux-ubuntu-20-04-lts-vm/ | https://www.billysoftacademy.com/wp-content/uploads/2022/06/UNIFI-INSTALLATION-COMMANDS.pdf

apt update && apt upgrade -y
apt install openjdk-8-jdk ca-certificates apt-transport-https -y
 
echo 'deb https://www.ui.com/downloads/unifi/debian stable ubiquiti' | sudo tee /etc/apt/sources.list.d/100-ubnt-unifi.list
apt-key adv --keyserver keyserver.ubuntu.com --recv 06E85760C0A52C50
apt update && apt install unifi -y
#### ERRORS #####

wget https://get.glennr.nl/unifi/install/unifi-7.1.66.sh
chmod +x unifi-7.1.66.sh
./unifi-7.1.sh
systemctl status unifi

sudo apt-get update && sudo apt-get install ca-certificates apt-transport-https
echo 'deb https://www.ui.com/downloads/unifi/debian stable ubiquiti' | sudo tee /etc/apt/sources.list.d/100-ubnt-unifi.list
wget -qO - https://www.mongodb.org/static/pgp/server-3.4.asc | sudo apt-key add -
echo "deb https://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.4.list
sudo apt-get update
sudo wget -O /etc/apt/trusted.gpg.d/unifi-repo.gpg https://dl.ui.com/unifi/unifi-repo.gpg 
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv 06E85760C0A52C50 
sudo apt-get update && sudo apt-get install unifi -y
systemctl enable --now unifi
apt install default-jre

Top shit → doesn't work…

 wget https://dl.ui.com/unifi/6.5.55/unifi_sysvinit_all.deb
dpkg -i unifi_sysvinit_all.deb
apt-get install -f

doesn't work either…

 wget https://get.glennr.nl/unifi/install/unifi-6.5.55.sh
bash unifi-6.5.55.sh 

→ here

timedatectl set-timezone Europe/Zurich
timedatectl

vi /etc/systemd/timesyncd.conf

[Time]
NTP=ntp.fortier-family.com

timedatectl set-ntp true
timedatectl status
systemctl restart systemd-timesyncd

Why not?

apt-get install ntp
sntp --version
vi /etc/ntp.conf

choose a pool close : https://support.ntp.org/bin/view/Servers/NTPPoolServers

server 0.ch.pool.ntp.org
server 1.ch.pool.ntp.org
server 2.ch.pool.ntp.org
server 3.ch.pool.ntp.org

systemctl restart ntp
systemctl status ntp

...kernel reports TIME_ERROR: 0x2041: Clock Unsynchronized

 ufw allow from any to any port 123 proto udp

every reboot … SSH Keys are regenerated !! How stoopid is that?!

ssh 192.168.1.70
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ED25519 key sent by the remote host is
SHA256:y7imTO26lQ4UFuIDhuJ+aRl6v3JdsUEeUBghUx7V/+o.
Please contact your system administrator.
Add correct host key in /Users/fortiera/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /Users/fortiera/.ssh/known_hosts:309
Host key for 192.168.1.70 has changed and you have requested strict checking.
Host key verification failed.

dpkg-reconfigure cloud-init # None (28)
 
dpkg-reconfigure cloud-init
apt-get purge cloud-init
rm -rf /etc/cloud/ && sudo rm -rf /var/lib/cloud/

since Unifi is not providing statistics… Java Power !! Let's install it on Arch Basic Archlinux Install

gdisk /dev/sda 

# create one partition for EFI + 1 for /

root@archiso ~ # gdisk /dev/sda
GPT fdisk (gdisk) version 1.0.8
 
Partition table scan:
  MBR: not present
  BSD: not present
  APM: not present
  GPT: not present
 
Creating new GPT entries in memory.
 
Command (? for help): o
This option deletes all partitions and creates a new protective MBR.
Proceed? (Y/N): Y
 
Command (? for help): n
Partition number (1-128, default 1):
First sector (34-67108830, default = 2048) or {+-}size{KMGTP}:
Last sector (2048-67108830, default = 67108830) or {+-}size{KMGTP}: +550M
Current type is 8300 (Linux filesystem)
Hex code or GUID (L to show codes, Enter = 8300): EF00
Changed type of partition to 'EFI system partition'
 
Command (? for help): n
Partition number (2-128, default 2):
First sector (34-67108830, default = 1128448) or {+-}size{KMGTP}:
Last sector (1128448-67108830, default = 67108830) or {+-}size{KMGTP}:
Current type is 8300 (Linux filesystem)
Hex code or GUID (L to show codes, Enter = 8300):
Changed type of partition to 'Linux filesystem'
 
Command (? for help): p
Disk /dev/sda: 67108864 sectors, 32.0 GiB
Model: QEMU HARDDISK
Sector size (logical/physical): 512/512 bytes
Disk identifier (GUID): 2B7EBB37-FD6B-495E-8DFF-A2B02184B4BA
Partition table holds up to 128 entries
Main partition table begins at sector 2 and ends at sector 33
First usable sector is 34, last usable sector is 67108830
Partitions will be aligned on 2048-sector boundaries
Total free space is 2014 sectors (1007.0 KiB)
 
Number  Start (sector)    End (sector)  Size       Code  Name
   1            2048         1128447   550.0 MiB   EF00  EFI system partition
   2         1128448        67108830   31.5 GiB    8300  Linux filesystem
 
Command (? for help): w
Final checks complete. About to write GPT data. THIS WILL OVERWRITE EXISTING
PARTITIONS!!
 
Do you want to proceed? (Y/N): Y
OK; writing new GUID partition table (GPT) to /dev/sda.
The operation has completed successfully.

mkfs.ext4 -L ROOT /dev/sda2
mkfs.vfat -F32 -n EFI /dev/sda1
mount /dev/sda2 /mnt
mkdir /mnt/boot
mount /dev/sda1 /mnt/boot
pacstrap /mnt linux-hardened base base-devel intel-ucode vim linux-firmware dhcpcd networkmanager git openssh go net-snmp wget
genfstab -U /mnt >> /mnt/etc/fstab
arch-chroot /mnt/
===== Config =====
echo "unifi" > /etc/hostname
echo LANG=en_US.UTF-8 > /etc/locale.conf
ln -s `which vim` /usr/bin/vi

vi /etc/locale.gen
#uncomment #en_US.utf-8

locale-gen
echo KEYMAP=us-acentos > /etc/vconsole.conf
echo FONT=lat9w-16 >> /etc/vconsole.conf
ln -sf /usr/share/zoneinfo/Europe/Zurich /etc/localtime
echo "#<ip-address>	<hostname.domain.org>	<hostname>
127.0.0.1	monitor.localdomain	monitor" >/etc/hosts
 
==== Init/boot ====
<code bash>
vi /etc/mkinitcpio.conf
# HOOKS=(base keyboard udev autodetect modconf block keymap filesystems)

mkinitcpio -p linux-hardened
bootctl --path=/boot install

• /boot/loader/entries/arch.conf

title Arch Linux
linux /vmlinuz-linux-hardened
initrd /intel-ucode.img
initrd /initramfs-linux-hardened.img
options root="LABEL=ROOT" rw

• /boot/loader/loader.conf

default  arch.conf
timeout  4
console-mode max
#editor   no

passwd

pacman -S htop zsh ccze dfc

useradd -m warnaud

su - warnaud
cd /tmp
mkdir yay
curl https://aur.archlinux.org/cgit/aur.git/plain/PKGBUILD?h=yay > /tmp/yay/PKGBUILD
cd yay
makepkg
su
pacman -U yay*.zst

vi /etc/systemd/network/ens192.network

[Match]
Name=ens192
 
[Network]
Address=192.168.1.60/24
Gateway=192.168.1.1
DNS=192.168.1.10
DNS=192.168.1.11

systemctl enable --now systemd-networkd

• https://help.ui.com/hc/en-us/articles/220066768-UniFi-Network-How-to-Install-and-Update-via-APT-on-Debian-or-Ubuntu
• https://technium.ch/unifi-controller-lxc-container-installieren-tutorial/
• https://community.ui.com/questions/Java-Home-Directory-Fail-Issue-on-Ubuntu-RESOLVED/1faea5fd-6eda-4be9-a12f-676ef6be2529
• https://community.ui.com/questions/UniFi-Installation-Scripts-or-UniFi-Easy-Update-Script-or-UniFi-Lets-Encrypt-or-UniFi-Easy-Encrypt-/ccbc7530-dd61-40a7-82ec-22b17f027776
• https://vitux.com/how-to-install-ntp-server-and-client-on-ubuntu/
• https://linuxize.com/post/how-to-set-or-change-timezone-on-ubuntu-20-04/
• https://davidshomelab.com/unifi-controller-setup-on-ubuntu-20-04lts/