From 3dfc41b736338044374fba02130713284f72fdfe Mon Sep 17 00:00:00 2001 From: Michele Cereda Date: Sat, 15 Nov 2025 20:16:14 +0100 Subject: [PATCH] fix(kb/openmediavault): review and update notes --- knowledge base/openmediavault.md | 118 +++++++++++++++++++++++-------- 1 file changed, 88 insertions(+), 30 deletions(-) diff --git a/knowledge base/openmediavault.md b/knowledge base/openmediavault.md index 5170e57..516b3b0 100644 --- a/knowledge base/openmediavault.md +++ b/knowledge base/openmediavault.md @@ -4,24 +4,27 @@ NAS solution based on [Debian Linux][debian]. 1. [TL;DR](#tldr) 1. [First access](#first-access) -1. [Make other users administrators](#make-other-users-administrators) -1. [Remove access for the default admin user](#remove-access-for-the-default-admin-user) +1. [Suggested first steps](#suggested-first-steps) +1. [Create users](#create-users) +1. [Make users OpenMediaVault administrators](#make-users-openmediavault-administrators) +1. [Disable the default `admin` user](#disable-the-default-admin-user) 1. [Wake On Lan](#wake-on-lan) 1. [Power management](#power-management) 1. [CPU governor](#cpu-governor) 1. [Disk power options](#disk-power-options) 1. [OMV Extras](#omv-extras) +1. [Antivirus](#antivirus) +1. [UPS](#ups) 1. [ZFS](#zfs) 1. [Further readings](#further-readings) - 1. [Sources](#sources) + 1. [Sources](#sources) ## TL;DR -Default web UI login: `admin`:`openmediavault`
-The root password is the one set during installation. +Default web UI login is `admin`:`openmediavault`. ```sh -# Make other users administrators. +# Make users OMV administrators. gpasswd -a 'me' 'openmediavault-admin' usermod -aG 'openmediavault-admin' 'me' @@ -51,21 +54,52 @@ tmux new-session -As 'omv-release-upgrade' "sudo omv-release-upgrade" ## First access -Default web UI login: `admin`:`openmediavault`
-The root password is the one set during installation. +The SSH and web UI servers are active by default on port 22 and 80 respectively. -## Make other users administrators +The default web UI administrator login is `admin`:`openmediavault`.
+This user **cannot** login locally, **nor** connect via SSH by default. It only can access OMV's web UI. -Just add the user to the `openmediavault-admin` group: +The `root` user's password is set during OS installation.
+This user **can** connect via SSH by default. + +## Suggested first steps + +1. [Create a custom user][create users].
+ Make the new custom user a system administrator to avoid using `root` for normal usage. +1. [Make the new custom user an OpenMediaVault administrator][make users openmediavault administrators]. +1. Change the `admin` user's password and [disable it][disable the default admin user]. +1. Disable SSH access for the `root` user in _Services_ > _SSH_. + +## Create users + +Just do it as for any other GNU/Linux system: ```sh -gpasswd -a 'me' 'openmediavault-admin' -usermod -aG 'openmediavault-admin' 'me' +useradd -mG 'users' 'me' && passwd 'me' +adduser 'me' && adduser 'me' 'users' ``` -## Remove access for the default admin user +If the user needs administrator privileges, consider adding it to the `sudo` group: -Only do this **after** you created another user and [made it an admin][make other users administrators]. +```sh +usermod -aG 'sudo' 'me' +gpasswd -a 'me' 'sudo' +adduser 'me' 'sudo' +``` + +## Make users OpenMediaVault administrators + +Just add the users to the `openmediavault-admin` group: + +```sh +usermod -aG 'openmediavault-admin' 'me' +gpasswd -a 'me' 'openmediavault-admin' +adduser 'me' 'openmediavault-admin' +``` + +## Disable the default `admin` user + +Only do this **after** you created another user and [made it an OMV admin][make users openmediavault administrators]. From the safest to the less safe option: @@ -86,7 +120,7 @@ From the safest to the less safe option: ```sh userdel -r 'admin' - deluser 'admin' + deluser --remove-home 'admin' ``` ## Wake On Lan @@ -98,6 +132,12 @@ Enable the option under _Network_ > _Interfaces_, in **every** NIC's settings yo ## Power management +```sh +sudo apt install 'powertop' +sudo powertop --auto-tune +sudo powertop --calibrate +``` + ### CPU governor Enabling the _Monitoring_ option under _System_ > _Power Management_ configures `cpufrequtils`.
@@ -153,14 +193,35 @@ From the CLI, as the `root` user: | bash ``` +## Antivirus + +1. Install the `openmediavault-clamav` plugin. +1. Enable the service under _Services_ > _Antivirus_ > _Settings_. +1. Apply pending changes. + +## UPS + +1. Install the `openmediavault-nut` plugin. +1. Enable the service under _Services_ > _UPS_. +1. Apply pending changes. + ## ZFS 1. [Install OMV-Extras][omv extras]. 1. Pick one: - - Disable the kernel's backports APT sources and stick to the mainline one.
- Linux backport kernels are released quickly enough to leave the userland incomplete at times. This often happens - with ZFS, resulting in broken package issues. + - \[preferred] Install the `openmediavault-kernel` plugin and use it to install the Proxmox kernel. + + Debian does **not** build ZFS kernel modules into any of their kernels due to licensing conflicts, and doing it + manually may result in an extensive build process during installation, which is prone to errors.
+ The Proxmox-Debian kernel has the ZFS kernel modules preinstalled by default. As kernel upgrades become available + and are performed, the userland for the Proxmox kernel will always have the required packages to support ZFS. + + - Disable the kernel's backports APT sources and stick to the mainline one. + + > [!warning] + > Linux backport kernels are released quickly enough to leave the userland incomplete at times. This happens often + > with ZFS, resulting in broken package issues. ```sh mv -v \ @@ -168,19 +229,14 @@ From the CLI, as the `root` user: '/etc/apt/sources.list.d/openmediavault-kernel-backports.list.disabled' ``` - - Install the `openmediavault-kernel` plugin and use it to install the Proxmox kernel.
- Debian does not build ZFS kernel modules into any of their kernels by default due to licensing conflicts. This may - result in an extensive build process during installation, which is prone to errors. - - The Proxmox-Debian kernel has the ZFS kernel modules preinstalled by default. As kernel upgrades become available - and are performed, the userland for the Proxmox kernel will always have the required packages to support ZFS. - 1. Install the `openmediavault-zfs` plugin. -1. Create pools and such.
- You might need to wipe the disks first. +1. Create new pools, or import existing ones. -ZFS provides ACL support, but it is not enabled by default.
-Just enable property in the pool or dataset. + > [!note] + > One might need to wipe the disks before creating new pools. + +ZFS does provide ACL support, but it is **not** enabled by default.
+Just enable that property in the pool or datasets. ## Further readings @@ -204,7 +260,9 @@ Just enable property in the pool or dataset. --> -[make other users administrators]: #make-other-users-administrators +[Create users]: #create-users +[Disable the default admin user]: #disable-the-default-admin-user +[Make users OpenMediaVault administrators]: #make-users-openmediavault-administrators [omv extras]: #omv-extras