add checklist for new machines

Used in team#41829

howto/new-machine.md

@@ -67,7 +67,11 @@ automated (see [ticket #31239](https://bugs.torproject.org/31239) for details of
 The procedure below assumes the following steps have already been
 taken by the installer:
 
- 0. partitions have been correctly setup, including some (>=512M) swap
+ 0. a minimal Debian install with security updates has been booted
+    (note that Puppet will deploy unattended-upgrades later, but it's
+    still a good idea to do those updates as soon as possible)
+
+ 1. partitions have been correctly setup, including some (>=512M) swap
     file (or swap partition) and a `tmpfs` in `/tmp`
 
     consider expanding the swap file if memory requirements are
@@ -81,10 +85,6 @@ taken by the installer:
         mkswap /swapfile &&
         swapon -a
 
- 1. a minimal Debian install with security updates has been booted
-    (note that Puppet will deploy unattended-upgrades later, but it's
-    still a good idea to do those updates as soon as possible)
-
  2. a hostname has been set, picked from the [doc/naming-scheme](doc/naming-scheme)
     and the short hostname (e.g. `test`) resolves to a fully qualified
     domain name (e.g. `test.torproject.org`) in the `torproject.org`
@@ -310,6 +310,28 @@ above](#pre-requisites)! Some installers cover all of those steps, but most do n
 At this point, the machine has a basic TPA setup. You will probably
 need to assign it a "role" in Puppet to get it to do anything. 
 
+Here's a checklist you can copy in an issue to make sure the above is
+followed:
+
+- [ ] BIOS and OOB setup
+- [ ] burn-in and basic testing
+- [ ] OS install and security sources check
+- [ ] partitions check
+- [ ] hostname check
+- [ ] ip address allocation
+- [ ] reverse DNS
+- [ ] DNS resolution
+- [ ] root password set
+- [ ] grub check
+- [ ] Nextcloud spreadsheet update
+- [ ] `hosters.yaml` update (rare)
+- [ ] fabric-tasks install
+- [ ] puppet bootstrap
+- [ ] dnswl
+- [ ] `/srv` filesystem
+- [ ] upgrade and reboot
+- [ ] silence alerts
+
 # Reference
 
 ## Design