-1

This question already has an answer here:

As part of hardening a standalone/dedicated MySQL 5.6 server running on Ubuntu 12.04 LTS, unnecessary services and packages will have to be removed.

For a server that is serving only as a MySQL server, what services and packages should we remove? Is there a list of services/packages that we can use?

Here's a list of services running (?). Which are the ones them look like they could be stopped and their packages removed?

[ ? ]  acpid
[ ? ]  anacron
[ ? ]  atd
[ - ]  bootlogd
[ ? ]  console-setup
[ ? ]  cron
[ ? ]  cryptdisks
[ ? ]  cryptdisks-early
[ ? ]  cryptdisks-enable
[ ? ]  cryptdisks-udev
[ ? ]  dbus
[ ? ]  dmesg
[ - ]  grub-common
[ ? ]  hostname
[ ? ]  hwclock
[ ? ]  hwclock-save
[ - ]  keymap.sh
[ ? ]  killprocs
[ ? ]  module-init-tools
[ ? ]  network-interface
[ ? ]  network-interface-container
[ ? ]  network-interface-security
[ ? ]  networking
[ ? ]  ondemand
[ ? ]  passwd
[ ? ]  plymouth
[ ? ]  plymouth-log
[ ? ]  plymouth-ready
[ ? ]  plymouth-splash
[ ? ]  plymouth-stop
[ ? ]  plymouth-upstart-bridge
[ ? ]  procps
[ ? ]  rc.digitalocean
[ ? ]  rc.local
[ ? ]  resolvconf
[ - ]  rsync
[ ? ]  rsyslog
[ ? ]  sendsigs
[ ? ]  setvtrgb
[ + ]  ssh
[ - ]  stop-bootlogd
[ - ]  stop-bootlogd-single
[ ? ]  sudo
[ ? ]  udev
[ ? ]  udev-fallback-graphics
[ ? ]  udev-finish
[ ? ]  udevmonitor
[ ? ]  udevtrigger
[ ? ]  umountfs
[ ? ]  umountnfs.sh
[ ? ]  umountroot
[ - ]  unattended-upgrades
[ - ]  urandom

marked as duplicate by Andrew, Shane Madden, Jenny D, Ward, Katherine Villyard Feb 18 '14 at 15:30

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • Is there a business reason to start with Ubuntu Server, instead of.... say.... CentOS? Personal Biases aside, you and me both. – MDMoore313 Feb 17 '14 at 0:55
  • 1
    @MDMoore313 Probably not. The developers just "want" it, usually. One problem with Ubuntu here is that it enables everything by default, has no firewall, ... that's two problems. – Michael Hampton Feb 17 '14 at 0:58
  • 3
    Please do not cross-post: stackoverflow.com/questions/21818887/… - also, I can only echo the comment in the other question: Work out what ones are not required. And then do your job – Mark Henderson Feb 17 '14 at 1:17
  • I dont think its similar to Tips for Securing a LAMP Server. The server is a dedicated MySQL server and accepts connections from only the app server. – Athena Wisdom Feb 17 '14 at 1:23
0

This is already minimalist. You have ssh enabled and that's about it. Almost everything else is startup and shutdown tasks.

One thing you should enable is acpid. Without this, you may not be able to shutdown or reboot your droplet from Digital Ocean's control panel. (Or, on a physical server, the power button will not perform a graceful shutdown but instead hard power off the machine.)

Not the answer you're looking for? Browse other questions tagged or ask your own question.