Adding what you need.
USE THE PACKAGE MANAGER
Your system's package manager installs software with its dependencies, and updates it later.
That is the right route for almost everything.
WHY NOT DOWNLOAD AND COMPILE
Software installed outside the package manager does not get updated.
That becomes an unpatched vulnerability nobody remembers installing.
BEFORE INSTALLING ANYTHING
Ask whether you need it.
Every service running is something to maintain and secure.
WHAT TO AVOID
Installing from unofficial repositories Running installation scripts from unfamiliar sources Installing things to try them and never removing them
AFTER INSTALLING
Check what it exposes. Does it listen on a network port?
If so, your firewall should control access to it.
FOR CONTROL PANELS
Install early, before other software, since they configure a great deal themselves.
WHAT TO RECORD
What you installed and why.
In six months you will not remember.
