--- doc/build/debian12_install.frag	2024/06/15 17:43:13	1.1
+++ doc/build/debian12_install.frag	2024/08/08 21:22:21	1.8
@@ -68,7 +68,7 @@ There are a few steps that require comme
        If you decide to customize partitioning, the following may be useful to know.
        LON-CAPA resource files are stored in the /home directory, so the
        majority of the disk space should be allocated here.  If you have 20 GB 
-       of space for Debian, /home should receive at least 10 to 12 GB.  
+       of space for Debian, /home should receive at least 10 to 12 GB. 
        Since MySQL uses the /var filesystem to store its databases you should
        have at least 4 gigs of space available on /var.  Be sure to 
        include adequate swap space.  A minimum is 512 Megs, but you should
@@ -82,17 +82,17 @@ There are a few steps that require comme
    <dd>The base system will be installed. Once that is complete you will have the option to select additional software collections. By default, "standard system utilities" will be checked -- leave that checked, and (optionally) also check SSH Server, if you plan to ssh into your Debian 12 Server/VM from another machine.</dd>
 </dl>
 <p>
-Finish installing your server, reboot it, and log in with the username you created during installation.  
+Finish installing your server, reboot it, and log in with the username you created during installation.
 </p>
-<h3>Enabling sudo>/h3> 
-<p>If you wish to allow the username created during installation to have administration privileges using sudo, use su to become root and execute the following, replacing <i>&lt;username&gt;<i> with that specific username:
+<h3>Enabling sudo</h3>
+<p>If you wish to allow the username created during installation to have administration privileges using sudo, use su to become root and execute the following, replacing <i>&lt;username&gt;</i> with that specific username:
 </p>
 <pre>
 apt-get install sudo
-/sbin/adduser <username> sudo
+/sbin/adduser &lt;username&gt; sudo
 exit
 </pre>
-<p>Now logout and log in again with that username. If you prefer not to use sudo, then you should omit all instances of <l>sudo<i> when executing all commands listed on the remainder of this page, after using su to become root.
+<p>Now logout and log in again with that username. If you prefer not to use sudo, then you should omit all instances of <i>sudo</i> when executing all commands listed on the remainder of this page, after using su to become root.
 </p>
 <h3>Firewall Configuration</h3>
 <p>
@@ -100,12 +100,11 @@ Use ufw to allow incoming traffic for th
 ssh, www, https
 </p>
 <p>Check if ufw is installed</p>
-<pre>sudo dpkg-query -s gpg |grep Status</pre>
+<pre>sudo dpkg-query -s ufw |grep Status</pre>
 <p>If the result is not: <i>Status: install ok installed</i>, then install it:
 <pre>sudo apt-get install ufw</pre>
 <p>Configure ufw by executing the following:</p>
 <pre>
-sudo apt-get install ufw
 sudo ufw default deny
 sudo ufw enable
 sudo ufw allow ssh
@@ -136,6 +135,8 @@ sudo systemctl stop systemd-timesyncd
 sudo systemctl disable systemd-timesyncd
 sudo apt-get remove systemd-timesyncd
 sudo apt-get install chrony
+sudo systemctl start chrony
+sudo systemctl enable chrony
 </pre>
 <h2>4. <a name="upd">Update your system</a></h2>
 <p>
@@ -152,12 +153,20 @@ If kernel packages were updated, reboot
 <h3>Import the LON-CAPA encryption key</h3>
 <p>Check if gpg is installed</p>
 <pre>sudo dpkg-query -s gpg |grep Status</pre>
-<p>If the result is not: <i>Status: install ok installed</i>, then install it:
+<p>If the result is not: <i>Status: install ok installed</i>, then install it:</p>
 <pre>sudo apt-get install gpg</pre>
 <p>Check if wget is installed</p>
 <pre>sudo dpkg-query -s wget |grep Status</pre>
-<p>If the result is not: <i>Status: install ok installed</i>, then install it:
+<p>If the result is not: <i>Status: install ok installed</i>, then install it:</p>
 <pre>sudo apt-get install wget</pre>
+<p>Check if /etc/apt/keyrings directory exists by executing:</p>
+<pre>
+ls -al /etc/apt/keyrings
+</pre>
+<p>If it is missing, create it by executing:</p>
+<pre>
+sudo mkdir /etc/apt/keyrings
+</pre>
 <p> Execute: </p>
 <pre>
 wget -q -O - https://install.loncapa.org/versions/debian/APT-GPG-KEY-loncapa.asc | gpg --dearmor | sudo tee /etc/apt/keyrings/loncapa.gpg > /dev/null
@@ -182,6 +191,7 @@ deb http://deb.debian.org bookworm-updat
 <h3>Install prerequisites</h3>
 <p> Execute: </p>
 <pre>
+sudo apt-get update
 sudo apt-get install loncapa-prerequisites
 </pre><p>
 This may take some minutes due to LON-CAPA's large number of dependencies.
@@ -222,7 +232,7 @@ used to check the configuration of a sys
 </p>
 <p>
 The script will analyze your system to determine which actions are recommended.  The script will then prompt you to choose the actions you would like taken.
-Once a choice has been entered for all nine possible actions, required changes will be made.
+Once a choice has been entered for all ten possible actions, required changes will be made.
 </p>
 <p>The possible actions are:
 <ul>
@@ -231,6 +241,7 @@ Once a choice has been entered for all n
 <li>Set-up the MySQL database</li>
 <li>Set-up MySQL permissions</li>
 <li>Configure Apache web server</li>
+<li>Configure systemd security settings for Apache web server</li>
 <li>Configure start-up of services</li>
 <li>Check firewall settings</li>
 <li>Stop services not used by LON-CAPA,<br>
@@ -274,11 +285,11 @@ for it to function at all.  Below is a l
       serious trouble. On a laptop, make this <tt>root@localhost</tt>.
   </dd>
   <dt>Support email address</dt>
-  <dd>If you enter an e-mail address here, then users of the system  
+  <dd>If you enter an e-mail address here, then users of the system 
       will be able to click an "Ask Helpdesk" link in the system to 
       display a web form which they will complete to request support from
       your institution's helpdesk. On form submission the contents 
-      will be sent to the e-mail address you specify. 
+      will be sent to the e-mail address you specify.
   </dd>
 </dl>
 
@@ -336,7 +347,10 @@ coordinator.  Congratulations!
 <h2>If things aren't working right</h2>
 <p>
 If you've followed the steps above and the server doesn't start or you think 
-there's something wrong, please send a <a href="http://help.loncapa.org/help">help request</a> to the MSU LON-CAPA group.  If there were errors in installation of the dependency .deb packages or errors during the
+there's something wrong, please contact the LON-CAPA helpdesk.
+Installation/update support is available from: helpdesk at loncapa.org
+(replace " at " with @).
+If there were errors in installation of the dependency .deb packages or errors during the
 automatic setup, please send us as much information as possible.
 If some part of this document is unclear please let us know.
 </p>