Starlab knowledge base linux:skoleni

linux:skoleni:backup

Anonymous (anonymous@undisclosed.example.com) — 2016-12-05T15:14:36+0200

Zapisky z kurzu zalohovani Vymazleny rsync rsync -av --backup --backup-dir="/backup/modry/history" --suffix=_`date +%F_%T` /etc 192.168.6.37:/backup/modry Svata trojice rdiff-backupu rdiff-backup /etc 192.168.6.37::/backup/rdiff rdiff-backup -r 2016/01/27 192.168.6.37::/backup/rdiff/hosts /tmp/restore2 rdiff-backup --remove-older-than 4W 192.168.6.37::/backup/rdiff

linux:skoleni:cisco

Anonymous (anonymous@undisclosed.example.com) — 2015-10-18T14:02:50+0200

Cisco Best Practice or What we really use! * vlans (802.11q) * stp * snmp -> mrtg * security - dhcp helper * more static arp STP - What it solves? Something's missing, something's redundant? * missing - broken cable, lost connection, broken switch

linux:skoleni:dns

Anonymous (anonymous@undisclosed.example.com) — 2014-09-03T16:25:18+0200

Nejdulezitejsi utilita ''dig' se nachazi v debianu v netradicne pojmenovanem baliku bez pomlcky apt-get install dnsutils Rozdilne odpovedi na spatne podepsanou (zfalsovanou) domenu www.rhybar.cz dig +dnssec +multi www.rhybar.cz dig +cd +dnssec +multi www.rhybar.cz

linux:skoleni:firewall

Anonymous (anonymous@undisclosed.example.com) — 2016-05-13T15:47:03+0200

Skoleni Router, Firewall, Samba, VPN Download and install the epel-release package from the EPEL repository, 6.8 is the version at this date but it can be different later, check the name of the file. yum install wget wget http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm rpm -ivh epel-release-6.8.noarch.rpm yum --enablerepo epel groupinstall Xfce

linux:skoleni:ha

Anonymous (anonymous@undisclosed.example.com) — 2016-12-05T15:30:27+0200

HA - basics Note: Fibre channel - cheap stuff!!! Requirements * Two disks (preferably same size and my lovely LVM) * Networking between machines (node1 & node2), Tip: VMPlayer LAN Segments * Working DNS resolution (/etc/hosts file) * Selinux disabled

linux:skoleni:hromadna_bezpecnost

Anonymous (anonymous@undisclosed.example.com) — 2017-03-22T19:26:05+0200

Predpekli (Void) gpg --recv-key 7638D0442B90D010 --keyserver key.ubuntu.com gpg --export 7638D0442B90D010 | apt-key add - apt-get install puppet fail2ban cryptosetup-luks Ekvivalent watch while true; do iptables -L -n; sleep 2;clear; done Client side

linux:skoleni:ldap

Anonymous (anonymous@undisclosed.example.com) — 2018-11-01T18:23:31+0200

osnova skoleni * Co si odnesete * Co je ldap * Instalace na linuxu * Pridavani zaznamu * Vyhledavani * PhpLDAPadmin * Pridavani strukturalnich zaznamu * Pokrocile vyhledavani * Ukazka php * Zabezpeceni, zalohovani a indexy Co si odnesete

linux:skoleni:mailserver

Anonymous (anonymous@undisclosed.example.com) — 2014-05-02T00:50:05+0200

Mail Server Mail server patri rozhodne k tem slozitejsim instalacim. Nejdrive peclive proberema packet-po-packetu odeslani a prijmuti e-mailu. Cesta mailu Chceme odeslat e-mail na foo@example.com. Vytvorime e-mail a predame ho k odeslani, to muze znamenat i pomerne komplikovane sifrovane odesilani pres autentizaci apod, ale v nasem pripade rekneme, ze e-mail

linux:skoleni:nagios

Anonymous (anonymous@undisclosed.example.com) — 2016-12-05T15:00:43+0200

Poznamky z kurzu skoleni nagios iptables -I OUTPUT -d 10.0.4.159 -j REJECT iptables -I OUTPUT -d 10.0.4.159 -p tcp --dport 22 -j REJECT Monitoring ucebny A vytvoreni 2D mapy pomoci template nagios-ucebna.txt tomas 42 9 226 240 noro 22 7 622 310 martin 29 5 711 319 jakub 23 10 584 114 marek 31 4 436 169 vladimir 40 38 75 95

linux:skoleni:start

Anonymous (anonymous@undisclosed.example.com) — 2014-06-27T09:26:47+0200

Linux pro pokrocile Osnova: Den prvni * zakladni prace - ssh a editor vi, less, tail -f, logy, mc * dhcp - vysvetleni na tabuli, zminka o PXE, nastaveni dhcp serveru * samba - v zakladnim nejhloupejsim modu “share” pro domaci pouziti *

linux:skoleni:virtualizace-centos

Anonymous (anonymous@undisclosed.example.com) — 2015-09-04T10:09:47+0200

Virtualizace Jelikoz CentOS ze sve podpory zcela vyradil XEN po vzoru sve matky RedHat, doinstalovani cele podpory zpet je zbytecne slozite. Zajemce odkazuji na docela dobry navod pro CentOS 6.2 Po spusteni systemu Debian wheezy (toho casu testing) nabehne system do kernelu 3.2.0-xxx a je treba nainstalovat XEN hypervizor - mikrokernel, ktery bude fyzicky ovladat hardware a…

linux:skoleni:virtualizace

Anonymous (anonymous@undisclosed.example.com) — 2015-09-04T10:22:04+0200