passwd修改默认密码，防止被爆破

echo root:密码 |sudo chpasswd root
apt-get update && apt-get upgrade -y

安装必要软件依赖

apt update -y && apt install -y curl && apt install -y wget && apt install -y git && apt install sudo -y

apt install ffmpeg default-jdk git wget nano vim htop locate p7zip p7zip-full unzip

BBR开启（提速必备）

echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
sysctl -p
sysctl -n net.ipv4.tcp_congestion_control
lsmod | grep bbr

更换软件源

sudo <span class="hljs-built_in">tee</span> /etc/apt/sources.list <<-<span class="hljs-string">'EOF'</span>
deb http://mirrors.ustc.edu.cn/debian stable main contrib non-free non-free-firmware
<span class="hljs-comment"># deb-src http://mirrors.ustc.edu.cn/debian stable main contrib non-free non-free-firmware</span>

deb http://mirrors.ustc.edu.cn/debian stable-updates main contrib non-free non-free-firmware
<span class="hljs-comment"># deb-src http://mirrors.ustc.edu.cn/debian stable-updates main contrib non-free non-free-firmware</span>

deb http://mirrors.ustc.edu.cn/debian stable-proposed-updates main contrib non-free non-free-firmware
<span class="hljs-comment"># deb-src http://mirrors.ustc.edu.cn/debian stable-proposed-updates main contrib non-free non-free-firmware</span>

<span class="hljs-comment"># deb https://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware</span>
<span class="hljs-comment"># deb-src https://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware</span>
EOF
sudo apt update
sudo apt upgrade
sudo apt dist-upgrade

配置基础软件包

sudo apt install vim wget curl htop git proxychains4 screenfetch tmux bash-completion fcitx5-rime chromium fcitx5 zsh fonts-powerline fzf net-tools openssh-server firewalld bat

加入sudo用户组：

<span class="token function">su</span>
<span class="token function">apt-get</span> <span class="token function">install</span> <span class="token function">sudo</span>
/usr/sbin/usermod -a -G <span class="token function">sudo</span> <span class="token variable">$(<span class="token builtin class-name">echo</span> <span class="token environment constant">$USER</span>)</span> 

1