Install Linux for a public web server.
Avoid unnecessary GUI and development tools to reduce attack surface and maintenance.
Which package-selection policy is appropriate?
Select the minimum package groups needed for the workload and avoid unnecessary services and maintenance targets.
Detailed explanation
Incorrect. Installing every group adds unnecessary software and attack surface.
Incorrect. A desktop-only group does not match a headless web server.
Correct. Choose the minimal base plus the required server functionality.
Incorrect. The installation cannot be completed without selecting an appropriate base.
Try it yourself
An example you can run in a temporary verification environment.
systemctl list-unit-files --state=enabled --no-pagerExpected result
現在有効なunit一覧。変更は行わないKey points
- Least functionality
- Package groups
- Maintenance surface
Notes
- Environment: systemd採用Linux
- Use a disposable VM or test account when validating installation and SSH behavior.
- Exact command output can vary slightly by distribution and OpenSSH version.
Foundation review
Identify the scope
A headless service host does not need the same package set as an interactive desktop.
Check the side effect
Verify that required service packages remain available and add optional components later when justified.