Click here for "Error Codes for Commercial Air Conditioners".(Japanese Version)

nuy

Archlinux_en

ArchLinux ; SSH , Firewall (ufw)

1. SSH Service Security Settings Change the configuration file for the SSH service, which is "/etc/ssh/sshd_config". In this case, we will change the default SSH port 22 to 2244. Change /etc/ssh/sshd_config as follows 2. Firewall (ufw) 2.1 Install # pacman -S ufw # systemctl status ufw ○ ufw.service - CLI Netfilter Manager Loaded: loaded (/usr/lib/systemd/system/ufw.service; disabled; preset: dis> Active: inactive (dead) You can confirm that the ufw service is stopped by displaying "Active: inactive (dead)"
Archlinux_en

ArchLinux ; Initial settings after OS installation

1. User Account Creation Add user (huong) to wheel group and create home directory # useradd -m -G wheel huong User (huong) password setting # passwd huong New password: Retype new password: passwd: password updated successfully Grant sudo privileges to the added huong user 2 . Configuration of the text editor vim Vim was already installed during the Arch Linux installation, so this is just a configuration file. If you are installing vim 3. Network Connections ■ If using systemd-resolved, create /etc/resolv.conf as a link file # ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf ■ If systemd-resolved is not used
Archlinux_en

ArchLinux ; Installation #4 How to install with btrfs file system

For installation with ext4 file system, please refer to the following page https://korodes.com/arch_en_02/ https://korodes.com/arch_en_03/ 1.Creating partitions 1.1 Confirmation of installation device Check the target device with the lsblk command
Archlinux_en

ArchLinux ; Installation #3 Initial settings during installation

Initial setup within the installed system To enter the installed system, use the arch-chroot command. arch-chroot is a script for Arch Linux installation that mounts the system so that the specified path is the root "/". However, after this, only commands in the destination ArchLinux can be used. Commands in the installation media cannot be used. For example, to install a package, use pacman instead of pacstrap. Enter the installed system (/mnt becomes /)
Archlinux_en

ArchLinux ; Installation #2 Disk Partitioning

1. Partitioning the disk on which Arch Linux is installed This time, use gdisk command in UEFI mode and GPT for the partition table. Check current disk information # lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS loop0 7:0 0 693.5M 1 loop /run/archiso/airootfs sda 8:0 0 20G 0 disk sr0 11:0 1 813.3M 0 rom /run/archiso/bootmnt In the above case, a 20 GB virtual HDD was created on VmwareWorkstion, so the SIZE of the sda is set to 20 GB. The sda in the NAME line is the name of the device that represents the entire disk and will be partitioned to this sda. This time, create an EFI partition and a partition for Arch Linux, but not a swap partition. In the past, a partition was created for swap and allocated as swap, but now a "swap file" can be used without a swap partition. A "swap file" is a method of creating a single file of any size for swap and using that area as swap, which can be created, deleted, and resized.
Archlinux_en

ArchLinux ;  Installation #1 Image Download and Preparation

Arch Linux Arch Linux is a Linux distribution. Unlike other distributions, which often perform graphical installation, Arch Linux uses a CUI command line screen to perform the installation process. However, since there is no need to install unnecessary packages, you can create your own environment that is highly flexible, lightweight, and compact. Arch Linux does not have the "version" concept of other distributions. The installation ISO contains only the commands used during the installation process, and the ISO file is updated monthly to ensure that it is always up-to-date. Forte ・Arch Linux does not have the "version" concept that other distributions have ・The installation ISO image contains only the commands used during the installation process, and the ISO file is updated monthly. ・Ability to work with the latest kernel and commands for installation ・Arch Linux allows you to select and install only what you use, so no extra packages are installed. ・Packages are always updated to be nearly up-to-date, so you can use the latest Linux kernel, the latest versions of software, and so on. ・Arch Linux's proprietary package manager, pacman (CUI), takes significantly longer to install packages than other distributions.
Ubuntu24.04_en

Ubuntu Server24.04 ; SSH , Firewall(UFW)

1. SSH Service Security Settings The SSH service allows the root user to log in by default, and since the root user already knows the user name and can log in to the server with administrative privileges once the password is known, we will deny this setting. 1.1 Creating a General User If you have created a general user when installing Ubuntu 24.04, this procedure is not necessary. If you have already created a user at the time of OS installation, this procedure is not necessary. If you have already created a user during OS installation, this procedure is not necessary. If you have already created a user during OS installation, this procedure is not necessary. The "-m" option creates a home directory and the "-p" option specifies the password. For example, to set "ubuntuuser" as the user account name and "123456" as the password, execute as follows
Ubuntu24.04_en

Ubuntu Server24.04 ; SSH connection with authentication using public key cryptography

SSH connection with authentication using public key cryptography  Creation of public and private key pairs Create a public/private key pair for a user connecting to the Linux server using OpenSSH. Use ssh-keygen to create key pairs. Creation of public/private key pairs is performed with remote login user privileges。 If you do not specify the destination and file name, id_ed25519 and id_ed25519.pub will be created in /home/(user name)/.ssh/. On the way, enter the password for the key.
Ubuntu24.04_en

Ubuntu Server24.04 ; NTP , FTP(Vsftpd) , Samba Install

1.Install NTP server 2. Install FTP server vsftpd 2.1Installation and configuration ①Install 2.2 Vsftpd Over SSL/TLS ①Create a self-signed certificate. If you are using a trusted, legitimate certificate such as Let's Encrypt, you do not need to do this work. 3. File server installation with Samba Build a file server with access rights that requires user authentication with Samba. Installation Procedure (1) Create a shared folder with access rights that requires user authentication. (2) Create a group with access rights (3)Create users belonging to groups that can be accessed (4)Edit configuration file
Ubuntu24.04_en

Ubuntu Server24.04 ; WEB Server(Apache)

Apache2 Install Allow http:80 port and https:443 port in UFW first. 3 Apache2 : Using Perl Scripts Enable CGI to make Perl scripts available ①Perl Install 4 Apache2 : Using PHP Scripts ①PHP Install 5 Apache2 : Virtual Host Settings ①Copy the default configuration file (file name is arbitrary, in this case vhost-yourdomain.conf as an example) and configure the virtual host 6. Digest authentication with Apache2 Since Basic Authentication, a well-known authentication authentication method for http, transmits authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted. On the other hand, Digest Authentication encrypts the authentication information and sends it in encrypted form, so there is almost no risk of information leakage.
Ubuntu24.04_en

Ubuntu Server24.04 ; Anti-Virus(Clamav) , Mail Server

1.Anti-virus software Clamav installed 1.1 Install The clama...
Ubuntu24.04_en

Ubuntu Server24.04 ; Web server, Mail server SSL conversion (Let's Encrypt)

1. Obtain a certificate(Let's Encrypt) 1.1 advance preparation 1.Enable mod_ssl # a2enmod ssl 2.Package management system Snappy installed Let's Encrypt's SSL certificate issuing tool "certbot" is recommended to be installed using "snap" after 2021, so install Snapd first. 2. SSL/TLS (Let's Encrypt) configuration for Apache2 ①Edit Apache2 SSL-related configuration files hoge.com-ssl in hoge.com-ssl.conf is an arbitrary name 3. SSL/TLS (Let's Encrypt) settings on the mail server 3.1 Obtaining a certificate for the mail server Obtain a certificate for the mail server, but it cannot be obtained in the same way as above, so the following with the "--standalone" option fails.
Ubuntu24.04_en

Ubuntu Server24.04 ; MariaDB , WordPress Install

1. MariaDB Install 1. 1Install 1.2. MariaDB Server Security Settings Run the tool mysql_secure_installation to configure security-related settings for the MariaDB server. Once executed, the tool will start several security settings in the form of questions. First, you will be asked if you want to use a plugin for password validation, as shown below. Password validation is a plugin that checks the strength of a user's password for MariaDB and restricts it to accepting only passwords that are secure enough. For example, it must be at least as many characters long as the user's password and must contain at least one symbol and one number. You can set this requirement by asking the following question Type y and press Enter if you like 2.WordPress Install 2.1 Create database
Ubuntu24.04_en

Ubuntu Server24.04 ; Tripwire , disk usage check script , Logwatch

Tripwire Implement a system to detect file tampering on Linux servers by crackers. This time, Tripwire, a host-based IDS (IDS=Intrusion Detection System), will be installed as the file tampering detection system. Tripwire detects file additions/changes/deletions by creating a database of file status at the time of installation and comparing the database with the current status of the file. 1. Installation and configuration. Introduce disk usage check script 1. Script Creation Log analysis tool Logwatch installed 1.  Install logwatch
Ubuntu24.04_en

Ubuntu Server24.04 ; System Backup & Restore

1. System Backup 1.1 Backup under /var/www/html ①Create /var/www/system directory 1.2 MariaDB database backup ①Create db_backup.sh script under /var/www/system 2. System Restore 2.1 Restore backup files under HTML ①Store HTML backup files used for backup in the "/ (root)" directory Select the backup file with the latest timestamp (Example: www_back_20231009.tar.gz) 2.2 Restore MariaDB database ①Save DB backup file to any directory and decompress data