Set Up a Minimal Server on a Raspberry Pi by Alan Formy-Duval

Don't decommission that old Raspberry Pi just yet! This step-by-step guide shows how I set up my Raspberry Pi with the most minimal configuration to conserve precious system resources.

Recently, the microSD (secure digital) card in my Raspberry Pi stopped working. It had been in constant use as a server for almost two years, and this provided a good opportunity to start fresh and correct a few problems. After its initial installation, it began experiencing disk problems and the official Raspberry Pi operating system (OS) received a significant update (and was renamed from Raspbian to Raspberry Pi OS). So I acquired a new microSD card and preceded to rebuild.

Although this Raspberry Pi 3 Model B isn't the latest hardware, it is still adequate for running a minimal server for various services. I think my original installation used the full operating system image that includes the graphical user interface and a lot of other software packages unnecessary for my needs.

This step-by-step guide shows how I set up my Raspberry Pi with the most minimal configuration to conserve precious system resources.

Get started

To begin, create a new operating system drive for the Pi. This requires two things: an OS image file and a microSD card.

Download the Raspberry Pi OS image file

While several operating systems are available, I chose to stick to the officially supported OS.

The first step is to download the newest OS image file from the official Raspberry Pi OS site to a computer you can use to write to a microSD card. Three different images are offered, and I chose the Raspberry Pi OS Lite. It is the smallest OS and includes only the essential files required for a base OS, so it will consume the least amount of disk space and system RAM. (When I downloaded the OS, the release date was August 20, 2020, but it has been updated since then. I do not expect any major differences, but as always, I recommend reading the release notes.)

Write the OS to the microSD Card

The second step is to write the downloaded OS image file to the microSD card. My card was used previously, and when I inserted it into my Linux desktop, it automatically mounted its two existing partitions. I couldn't write the image until I unmounted these partitions. To do so, I had to determine their path with the lsblk command, which identified the device as /dev/mmcblk0:

# lsblk -p

I then unmounted the partitions with the umount command:

# umount /dev/mmcblk0p2
# umount /dev/mmcblk0p1

Once the partitions are unmounted, write the image file to the microSD card. Although there are many graphical image-writing tools available, I used the venerable dd command:

# dd bs=4M if=/home/alan/Downloads/raspios/2020-08-20-raspios-buster-armhf-lite.img of=/dev/mmcblk0 status=progress conv=fsync

Boot the Pi

You just need a monitor, keyboard, and power adapter to access the Raspberry Pi. I also have an Ethernet cable for network connectivity, which I prefer over wireless—especially for a dedicated server.

Insert the microSD card and power on the Pi. Once it boots, log in with the default credentials: user pi and password raspberry.

Configure the OS

Take the following steps to minimize your installation, disk space, and memory usage as much as possible. I recommend spending time to research each configuration to be as correct as possible. There are often several ways to apply a configuration, and configuration files and directives can be deprecated. Always review a product's documentation to ensure you're not applying an outdated configuration.

Run raspi-config

The main configuration program in Raspberry Pi OS is called raspi-config. Run it immediately after logging in:

# raspi-config

It presents an option to expand the root filesystem to use all of the available space on the microSD card. After taking this option, reboot and log in again.

Verify that the card's full capacity is being used with the df command:

# df -h

If you need to configure other options, run raspi-config again. Some of these will vary according to your requirements or preferences. Go through all of them just to be sure you don't miss anything. I recommend the following changes for best performance. (I will skip the sections where I did not make any changes.)

• System options: You can set the hostname, preferably using a fully qualified domain name (FQDN). You can also change your password here, which is always highly recommended.
• Interface options: Enable SSH.
• Performance options: Reduce GPU memory to the lowest setting (16MB).
• Localization options: Choose your time zone, location, and keyboard type.
• Advanced options: This section contains the Expand Filesystem option to expand the root filesystem. If you didn't do this above, be sure to do it here so that you have access to all storage available on the microSD card.
• Update: Entering the Update section immediately checks for an update to the raspi-config tool. If an update is available, it will be downloaded and applied. Otherwise, raspi-config will re-launch after a few seconds.

Once you complete these configurations in raspi-config, select Finish to exit the tool.

Manual configurations

There are several other changes that I recommend. They are all manual changes that require editing certain configuration files.

Configure static IP

Generally, it is best to configure a server with a static IP address. To configure the IP and your default gateway (router) and domain name service (DNS) addresses, begin by identifying the network interface device with the ip command:

# ip link
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0:  mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether b8:27:eb:48:3f:46 brd ff:ff:ff:ff:ff:ff

You also need to know the IP address of your default gateway and one or more DNS servers. Add this information to the file /etc/dhcpcd.conf (I strongly suggest making a backup of this file before making changes):

# cd /etc
# cp -a dhcpcd.conf dhcpcd.conf.original

Edit the file as shown:

# vi dhcpcd.conf

# static IP configuration:
interface eth0
static ip_address=192.168.1.5/24
static routers=192.168.1.1
static domain_name_servers=192.168.1.3 192.168.1.4

Unless you specifically need to use IPv6, you might prefer to disable it. Do this by creating two new files that include a one-line directive instructing the Linux kernel not to use IPv6.

First, create the file /etc/sysctl.d/disable-ipv6.conf with the line net.ipv6.conf.all.disable_ipv6 = 1:

# cd /etc/sysctl.d
# echo "net.ipv6.conf.all.disable_ipv6 = 1" > disable-ipv6.conf

Then create the file /etc/modprobe.d/blacklist-ipv6.conf with the line blacklist ipv6:

# cd /etc/modprobe.d
# echo "blacklist ipv6" > blacklist-ipv6.conf

Disable WiFi, Bluetooth, and audio

My server's specific purpose will not need Bluetooth or audio. Also, since it's connected with Ethernet, it will not use wireless (WiFi). Unless you plan to use them, disable them with the following steps.

Make the following changes to the file /boot/config.txt (again, I suggest making a backup of this file):

# cd /boot
# cp -a config.txt config.txt.original

Add the following two directives to the bottom of the file to disable Bluetooth and WiFi:

dtoverlay=disable-bt
dtoverlay=disable-wifi

These echo commands will do the trick:

# cd /boot
# echo "dtoverlay=disable-bt" >> config.txt
# echo "dtoverlay=disable-wifi" >> config.txt

To disable audio, change the parameter dtparam=audio to off. You can do this with a short sed command:

# sed -i '/dtparam=audio/c dtparam=audio=off' config.txt

The last step is to disable the WiFi service. Use the systemctl mask command:

systemctl mask wpa_supplicant.service

You can disable a couple of other services if you won't need them:

Disable modem service:

systemctl disable hciuart

Disable Avahi-daemon:

systemctl disable avahi-daemon.service

Final steps

• Check your memory usage:

# free -h

I was astonished: My OS only uses 30MB of RAM.

• Create personal accounts: It is advisable to create user accounts for any individuals who will log into this server. You can assign them to the sudo group to allow them to issue administrative commands. For example, to give a user named George an account:

# adduser george
# usermod -a -G adm,sudo,users george

• Get updates: This is an important step. Apply updates to get the latest fixes to the Raspberry Pi OS:

# apt update
# apt full-upgrade

• Reboot: It's a good idea to reboot your new server:

# systemctl reboot

• Install Cockpit: You can install Cockpit, also known as the Linux Web Console, on Raspberry Pi OS. It provides an HTML-based interface for managing and monitoring your server remotely. I recently wrote about getting started with Cockpit. Install it with:

# apt install cockpit

Now my Raspberry Pi is ready to host a server. I could use it for a web server, a VPN server, a game server such as Minetest, or (as I did) an ad blocker based on Pi-Hole.

Keep old hardware alive

Regardless of what hardware you have available, carefully minimizing and controlling your operating system and packages can keep your resource usage low so that you can get the most out of it. This also improves security by reducing the number of services and packages available to would-be mal-actors trying to exploit a vulnerability.

So, before you decommission older hardware, consider all the possibilities for how it can continue to be used.

About the author

Alan Formy-Duval Opensource.com CorrespondentAlan Formy-Duval - Alan has 20 years of IT experience, mostly in the Government and Financial sectors. He started as a Value Added Reseller before moving into Systems Engineering. Alan's background is in high-availability clustered apps. He wrote the 'Users and Groups' and 'Apache and the Web Stack' chapters in the Oracle Press/McGraw Hill Oracle Solaris 11 System Administration book. He earned his Master of Science in Information Systems from George Mason University.

Opensource.com aspires to publish all content under a Creative Commons license but may not be able to do so in all cases. You are responsible for ensuring that you have the necessary permission to reuse any work on this site. Red Hat and the Red Hat logo are trademarks of Red Hat, Inc., registered in the United States and other countries.

Learn more at amazon.com

More Windows Administration Information:
• You Can Switch to Linux!
• Linux su vs sudo: What's the Difference?
• Commands to Display Your Linux Computer's Hardware Information
• What is Bash?
• Setting Up a Basic Ethernet LAN on a Linux PC
• What You Need to Know to Set Up a Simple Firewall in Linux
• 7 Steps to Securing Your Linux Server
• What is Ubuntu?
• Linux Installation CDs vs. Linux "Live" CDs
• Setting Up a Linux Modem