--- doc/build/debian12_install.frag	2024/06/15 17:43:13	1.1
+++ doc/build/debian12_install.frag	2024/08/06 12:37:10	1.6
@@ -68,7 +68,7 @@ There are a few steps that require comme
        If you decide to customize partitioning, the following may be useful to know.
        LON-CAPA resource files are stored in the /home directory, so the
        majority of the disk space should be allocated here.  If you have 20 GB 
-       of space for Debian, /home should receive at least 10 to 12 GB.  
+       of space for Debian, /home should receive at least 10 to 12 GB. 
        Since MySQL uses the /var filesystem to store its databases you should
        have at least 4 gigs of space available on /var.  Be sure to 
        include adequate swap space.  A minimum is 512 Megs, but you should
@@ -82,17 +82,17 @@ There are a few steps that require comme
    <dd>The base system will be installed. Once that is complete you will have the option to select additional software collections. By default, "standard system utilities" will be checked -- leave that checked, and (optionally) also check SSH Server, if you plan to ssh into your Debian 12 Server/VM from another machine.</dd>
 </dl>
 <p>
-Finish installing your server, reboot it, and log in with the username you created during installation.  
+Finish installing your server, reboot it, and log in with the username you created during installation.
 </p>
-<h3>Enabling sudo>/h3> 
-<p>If you wish to allow the username created during installation to have administration privileges using sudo, use su to become root and execute the following, replacing <i>&lt;username&gt;<i> with that specific username:
+<h3>Enabling sudo</h3>
+<p>If you wish to allow the username created during installation to have administration privileges using sudo, use su to become root and execute the following, replacing <i>&lt;username&gt;</i> with that specific username:
 </p>
 <pre>
 apt-get install sudo
 /sbin/adduser <username> sudo
 exit
 </pre>
-<p>Now logout and log in again with that username. If you prefer not to use sudo, then you should omit all instances of <l>sudo<i> when executing all commands listed on the remainder of this page, after using su to become root.
+<p>Now logout and log in again with that username. If you prefer not to use sudo, then you should omit all instances of <i>sudo</i> when executing all commands listed on the remainder of this page, after using su to become root.
 </p>
 <h3>Firewall Configuration</h3>
 <p>
@@ -100,12 +100,11 @@ Use ufw to allow incoming traffic for th
 ssh, www, https
 </p>
 <p>Check if ufw is installed</p>
-<pre>sudo dpkg-query -s gpg |grep Status</pre>
+<pre>sudo dpkg-query -s ufw |grep Status</pre>
 <p>If the result is not: <i>Status: install ok installed</i>, then install it:
 <pre>sudo apt-get install ufw</pre>
 <p>Configure ufw by executing the following:</p>
 <pre>
-sudo apt-get install ufw
 sudo ufw default deny
 sudo ufw enable
 sudo ufw allow ssh
@@ -136,6 +135,8 @@ sudo systemctl stop systemd-timesyncd
 sudo systemctl disable systemd-timesyncd
 sudo apt-get remove systemd-timesyncd
 sudo apt-get install chrony
+sudo systemctl start chrony
+sudo systemctl enable chrony
 </pre>
 <h2>4. <a name="upd">Update your system</a></h2>
 <p>
@@ -152,12 +153,20 @@ If kernel packages were updated, reboot
 <h3>Import the LON-CAPA encryption key</h3>
 <p>Check if gpg is installed</p>
 <pre>sudo dpkg-query -s gpg |grep Status</pre>
-<p>If the result is not: <i>Status: install ok installed</i>, then install it:
+<p>If the result is not: <i>Status: install ok installed</i>, then install it:</p>
 <pre>sudo apt-get install gpg</pre>
 <p>Check if wget is installed</p>
 <pre>sudo dpkg-query -s wget |grep Status</pre>
-<p>If the result is not: <i>Status: install ok installed</i>, then install it:
+<p>If the result is not: <i>Status: install ok installed</i>, then install it:</p>
 <pre>sudo apt-get install wget</pre>
+<p>Check if /etc/apt/keyrings directory exists by executing:</p>
+<pre>
+ls -al /etc/apt/keyrings
+</pre>
+<p>If it is missing, create it by executing:</p>
+<pre>
+sudo mkdir /etc/apt/keyrings
+</pre>
 <p> Execute: </p>
 <pre>
 wget -q -O - https://install.loncapa.org/versions/debian/APT-GPG-KEY-loncapa.asc | gpg --dearmor | sudo tee /etc/apt/keyrings/loncapa.gpg > /dev/null
@@ -182,6 +191,7 @@ deb http://deb.debian.org bookworm-updat
 <h3>Install prerequisites</h3>
 <p> Execute: </p>
 <pre>
+sudo apt-get update
 sudo apt-get install loncapa-prerequisites
 </pre><p>
 This may take some minutes due to LON-CAPA's large number of dependencies.
@@ -274,11 +284,11 @@ for it to function at all.  Below is a l
       serious trouble. On a laptop, make this <tt>root@localhost</tt>.
   </dd>
   <dt>Support email address</dt>
-  <dd>If you enter an e-mail address here, then users of the system  
+  <dd>If you enter an e-mail address here, then users of the system 
       will be able to click an "Ask Helpdesk" link in the system to 
       display a web form which they will complete to request support from
       your institution's helpdesk. On form submission the contents 
-      will be sent to the e-mail address you specify. 
+      will be sent to the e-mail address you specify.
   </dd>
 </dl>