Tools

Tools: Latest: Part 1: Reviving an Old Laptop with Debian & Docker

2026-05-10 0 views admin
Tools: Latest: Part 1: Reviving an Old Laptop with Debian & Docker

Introduction

1. Choosing the Hardware & OS

Why an Old Laptop?

Why Debian 13 "Trixie"?

2. Installation and Network Configuration

Minimal Installation

Setting a Static IP

Connecting Remotely with SSH

3. Initial Server Hardening

Update the System

Configure the Firewall

Configure Lid-Close Action

4. Installing the Containerization Engine: Docker

Install Docker Engine

Add User to Docker Group

Install Docker Compose

Conclusion Welcome to the first post in my new homelab series! I've always been fascinated by self-hosting and DevOps, and I believe the best way to learn is by doing. In this series, I'll document my journey of turning an old, unused laptop into a powerful, efficient, and secure bare-metal server for hosting a variety of network services. The goal for this first part is to lay a solid foundation. We'll take an old laptop, install a minimal and stable Linux operating system, perform some initial security hardening, and set up Docker as our containerization engine. By the end of this post, we'll have a perfect blank canvas ready for the exciting services we'll deploy in the upcoming parts. Before diving in, why use an old laptop instead of a Raspberry Pi or a dedicated server? For a starter homelab, a laptop has three huge advantages: For the operating system, I chose Debian. It's renowned for its stability, security, and massive package repository. It’s the bedrock of many other distributions (like Ubuntu) and is perfect for a server because it's lightweight and doesn't include unnecessary software. We'll be using the minimal "net-install" to ensure we only install what we absolutely need. The installation process is straightforward, but the network setup is key to a reliable server. A server needs a permanent, unchanging IP address. The best way to do this is with DHCP Reservation on your router. This tells your router to always assign the same IP address to your server's unique MAC address. First, find your laptop’s current IP address and network interface name by running: You’ll see output similar to: With this info, log into your router’s admin panel, find the "DHCP Reservation" or "Static Leases" section, and assign a memorable IP address (e.g., 192.168.0.45) to your server’s MAC address. This ensures the server always gets the same IP from your router, making it easy to find on your network. With a static IP set, all future management will be done remotely using an SSH client. For Windows, I highly recommend Solar-PuTTY. I created a new session, entered the server's static IP address, my username, and password, and connected. With a remote SSH session active, the first thing to do is secure the server and configure it for its headless role. First, let's make sure all packages are up to date. ufw (Uncomplicated Firewall) is perfect for a simple setup. We'll set it to deny all incoming traffic by default and only allow SSH connections. To ensure the laptop keeps running when the lid is closed, we edit the logind.conf file. Save the file, then restart the service: Instead of installing applications directly on our host, we'll use Docker to keep the system clean and make management easier. The official convenience script is the easiest way to get the latest version. To run docker commands without sudo, add your user to the docker group. The $USER variable automatically uses the currently logged-in user. After this, log out and log back in for the change to take effect. Docker Compose is essential for managing multi-container applications with a simple YAML file. To verify the installation: And that's it for Part 1! We've successfully turned an old piece of hardware into a hardened, modern server running Debian and Docker with a reliable network configuration. We have a solid and secure foundation to build upon. In the next part of the series, we'll deploy our first critical service: a local, network-wide ad-blocking DNS resolver using AdGuard Home. Stay tuned! Templates let you quickly answer FAQs or store snippets for re-use. Hide child comments as well For further actions, you may consider blocking this person and/or reporting abuse

Command

Copy

$ 2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 inet 192.168.0.45/24 brd 192.168.0.255 scope global dynamic enp3s0 valid_lft 86396sec preferred_lft 86396sec 2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 inet 192.168.0.45/24 brd 192.168.0.255 scope global dynamic enp3s0 valid_lft 86396sec preferred_lft 86396sec 2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 inet 192.168.0.45/24 brd 192.168.0.255 scope global dynamic enp3s0 valid_lft 86396sec preferred_lft 86396sec -weight: 600;">sudo -weight: 500;">apt -weight: 500;">update && -weight: 600;">sudo -weight: 500;">apt -weight: 500;">upgrade -y -weight: 600;">sudo -weight: 500;">apt -weight: 500;">update && -weight: 600;">sudo -weight: 500;">apt -weight: 500;">upgrade -y -weight: 600;">sudo -weight: 500;">apt -weight: 500;">update && -weight: 600;">sudo -weight: 500;">apt -weight: 500;">upgrade -y # Install UFW -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install ufw -y # Allow SSH connections -weight: 600;">sudo ufw allow ssh # Enable the firewall -weight: 600;">sudo ufw -weight: 500;">enable # Install UFW -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install ufw -y # Allow SSH connections -weight: 600;">sudo ufw allow ssh # Enable the firewall -weight: 600;">sudo ufw -weight: 500;">enable # Install UFW -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install ufw -y # Allow SSH connections -weight: 600;">sudo ufw allow ssh # Enable the firewall -weight: 600;">sudo ufw -weight: 500;">enable -weight: 600;">sudo nano /etc/systemd/logind.conf -weight: 600;">sudo nano /etc/systemd/logind.conf -weight: 600;">sudo nano /etc/systemd/logind.conf HandleLidSwitch=ignore HandleLidSwitch=ignore HandleLidSwitch=ignore -weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">restart systemd-logind.-weight: 500;">service -weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">restart systemd-logind.-weight: 500;">service -weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">restart systemd-logind.-weight: 500;">service -weight: 500;">curl -fsSL https://get.-weight: 500;">docker.com -o get--weight: 500;">docker.sh -weight: 600;">sudo sh get--weight: 500;">docker.sh -weight: 500;">curl -fsSL https://get.-weight: 500;">docker.com -o get--weight: 500;">docker.sh -weight: 600;">sudo sh get--weight: 500;">docker.sh -weight: 500;">curl -fsSL https://get.-weight: 500;">docker.com -o get--weight: 500;">docker.sh -weight: 600;">sudo sh get--weight: 500;">docker.sh -weight: 600;">sudo usermod -aG -weight: 500;">docker $USER -weight: 600;">sudo usermod -aG -weight: 500;">docker $USER -weight: 600;">sudo usermod -aG -weight: 500;">docker $USER -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install -weight: 500;">docker-compose-plugin -y -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install -weight: 500;">docker-compose-plugin -y -weight: 600;">sudo -weight: 500;">apt -weight: 500;">install -weight: 500;">docker-compose-plugin -y -weight: 500;">docker compose version -weight: 500;">docker compose version -weight: 500;">docker compose version - Cost-Effective: It's free if you have one lying around! - Built-in UPS: The battery acts as a built-in Uninterruptible Power Supply (UPS), keeping the server running through short power outages. - Low Power Consumption: Laptop hardware is designed to be power-efficient, which is great for a device that will be running 24/7. - Create a Bootable USB: I downloaded the Debian 13 "netinst" ISO from the official website and used Rufus on Windows to create a bootable USB drive. - Boot from USB: I plugged the USB into the laptop and booted from it (usually pressing F12, F2, or Esc during startup to select the USB device). - Language, Location, and Keyboard: Selected English, United States, and the default keyboard layout. - Network Setup: Connected the laptop to my home network (Ethernet preferred for stability). - Hostname & Domain: Entered a short, memorable hostname for the server (e.g., homelab) and left the domain blank. - User Accounts: Set a root password. Created a non-root regular user (this will be used for daily management). - Set a root password. - Created a non-root regular user (this will be used for daily management). - Partition Disks: Chose Guided – use entire disk with separate /home partition. This is simpler for a server setup. - Software Selection: At the “Software selection” screen: Unchecked “Debian desktop environment” Checked “SSH server” and “standard system utilities” This ensures a clean command-line system that can be accessed remotely. - Unchecked “Debian desktop environment” - Checked “SSH server” and “standard system utilities” - This ensures a clean command-line system that can be accessed remotely. - GRUB Bootloader: Installed GRUB on the primary drive (so the system boots correctly). - Finish Installation: Removed the USB drive when prompted and rebooted into the fresh Debian -weight: 500;">install. - Set a root password. - Created a non-root regular user (this will be used for daily management). - Unchecked “Debian desktop environment” - Checked “SSH server” and “standard system utilities” - This ensures a clean command-line system that can be accessed remotely. - Interface name: enp3s0 - Current IP: 192.168.0.45 - MAC address: shown under link/ether in the same section.

🏷️ Tags

toolsutilitiessecurity toolslatestrevivinglaptopdebiandockerapt

More from Tools

Tools: Politeness vs Enforcement: Why "Set HTTPS_PROXY" Isn't a Security Control (2026)

Tools: Politeness vs Enforcement: Why "Set HTTPS_PROXY" Isn't a Security Control (2026)

2026-05-10 0
Tools: Part 2: Homelab Management & Monitoring (2026)

Tools: Part 2: Homelab Management & Monitoring (2026)

2026-05-10 0
Tools: How to Deploy Llama 3.2 Multimodal with TensorRT-LLM on a $20/Month DigitalOcean GPU Droplet: 4x Faster Vision+Text at 1/100th GPT-4 Turbo Cost (2026)

Tools: How to Deploy Llama 3.2 Multimodal with TensorRT-LLM on a $20/Month DigitalOcean GPU Droplet: 4x Faster Vision+Text at 1/100th GPT-4 Turbo Cost (2026)

2026-05-10 0
Tools: Containerizing Apache Airflow: Building Portable Data Pipelines with Docker (2026)

Tools: Containerizing Apache Airflow: Building Portable Data Pipelines with Docker (2026)

2026-05-10 0

Trending

1

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

2025-10-27 • 189 views
2

CVE-2025-43939: Dell Unity OS Command Injection (High)

2025-10-30 • 148 views
3

Google disputes false claims of massive Gmail data breach

2025-10-30 • 130 views
4

Microsoft: DNS outage impacts Azure and Microsoft 365 services

2025-10-30 • 88 views
5

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting

2025-11-25 • 81 views