nuy | Page 14 | Linux Server Construction

ArchLinux ; Installation #3 Initial settings during installation

Initial setup within the installed systemTo enter the installed system, use the arch-chroot command.arch-chroot is a script for Arch Linux installation that mounts the system so that the specified path is the root "/".However, after this, only commands in the destination ArchLinux can be used. Commands in the installation media cannot be used.For example, to install a package, use pacman instead of pacstrap.Enter the installed system (/mnt becomes /)

2023.12.16

Archlinux_en

ArchLinux ; Installation #2 Disk Partitioning

1. Partitioning the disk on which Arch Linux is installedThis time, use gdisk command in UEFI mode and GPT for the partition table.Check current disk information# lsblkNAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTSloop0 7:0 0 693.5M 1 loop /run/archiso/airootfssda 8:0 0 20G 0 disksr0 11:0 1 813.3M 0 rom /run/archiso/bootmntIn the above case, a 20 GB virtual HDD was created on VmwareWorkstion, so the SIZE of the sda is set to 20 GB.The sda in the NAME line is the name of the device that represents the entire disk and will be partitioned to this sda.This time, create an EFI partition and a partition for Arch Linux, but not a swap partition.In the past, a partition was created for swap and allocated as swap, but now a "swap file" can be used without a swap partition.A "swap file" is a method of creating a single file of any size for swap and using that area as swap, which can be created, deleted, and resized.

2023.12.16

Archlinux_en

ArchLinux ; Installation #1 Image Download and Preparation

Arch Linux Arch Linux is a Linux distribution.Unlike other distributions, which often perform graphical installation, Arch Linux uses a CUI command line screen to perform the installation process.However, since there is no need to install unnecessary packages, you can create your own environment that is highly flexible, lightweight, and compact.Arch Linux does not have the "version" concept of other distributions.The installation ISO contains only the commands used during the installation process, and the ISO file is updated monthly to ensure that it is always up-to-date.Forte・Arch Linux does not have the "version" concept that other distributions have・The installation ISO image contains only the commands used during the installation process, and the ISO file is updated monthly.・Ability to work with the latest kernel and commands for installation・Arch Linux allows you to select and install only what you use, so no extra packages are installed.・Packages are always updated to be nearly up-to-date, so you can use the latest Linux kernel, the latest versions of software, and so on.・Arch Linux's proprietary package manager, pacman (CUI), takes significantly longer to install packages than other distributions.

2023.12.15

Archlinux_en

Ubuntu Server24.04 ; SSH , Firewall(UFW)

1. SSH Service Security SettingsThe SSH service allows the root user to log in by default, and since the root user already knows the user name and can log in to the server with administrative privileges once the password is known, we will deny this setting.1.1 Creating a General UserIf you have created a general user when installing Ubuntu 24.04, this procedure is not necessary.If you have already created a user at the time of OS installation, this procedure is not necessary. If you have already created a user during OS installation, this procedure is not necessary.If you have already created a user during OS installation, this procedure is not necessary. The "-m" option creates a home directory and the "-p" option specifies the password.For example, to set "ubuntuuser" as the user account name and "123456" as the password, execute as follows

2024.04.30

Ubuntu24.04_en

Ubuntu Server24.04 ; SSH connection with authentication using public key cryptography

SSH connection with authentication using public key cryptography Creation of public and private key pairsCreate a public/private key pair for a user connecting to the Linux server using OpenSSH.Use ssh-keygen to create key pairs.Creation of public/private key pairs is performed with remote login user privileges。If you do not specify the destination and file name, id_ed25519 and id_ed25519.pub will be created in /home/(user name)/.ssh/. On the way, enter the password for the key.

2024.04.30

Ubuntu24.04_en

Ubuntu Server24.04 ; NTP , FTP(Vsftpd) , Samba Install

1.Install NTP server2. Install FTP server vsftpd2.1Installation and configuration①Install2.2 Vsftpd Over SSL/TLS①Create a self-signed certificate.If you are using a trusted, legitimate certificate such as Let's Encrypt, you do not need to do this work.3. File server installation with SambaBuild a file server with access rights that requires user authentication with Samba.Installation Procedure(1) Create a shared folder with access rights that requires user authentication.(2) Create a group with access rights(3)Create users belonging to groups that can be accessed(4)Edit configuration file

2024.05.01

Ubuntu24.04_en

Ubuntu Server24.04 ; WEB Server(Apache)

Apache2 InstallAllow http:80 port and https:443 port in UFW first.3 Apache2 : Using Perl ScriptsEnable CGI to make Perl scripts available①Perl Install4 Apache2 : Using PHP Scripts①PHP Install5 Apache2 : Virtual Host Settings①Copy the default configuration file (file name is arbitrary, in this case vhost-yourdomain.conf as an example) and configure the virtual host6. Digest authentication with Apache2Since Basic Authentication, a well-known authentication authentication method for http, transmits authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted.On the other hand, Digest Authentication encrypts the authentication information and sends it in encrypted form, so there is almost no risk of information leakage.

2024.05.01

Ubuntu24.04_en

Ubuntu Server24.04 ; Anti-Virus(Clamav) , Mail Server

1.Anti-virus software Clamav installed1.1 InstallThe clamav-...

2024.05.01

Ubuntu24.04_en

Ubuntu Server24.04 ; MariaDB , WordPress Install

1. MariaDB Install1. 1Install1.2. MariaDB Server Security SettingsRun the tool mysql_secure_installation to configure security-related settings for the MariaDB server.Once executed, the tool will start several security settings in the form of questions. First, you will be asked if you want to use a plugin for password validation, as shown below.Password validation is a plugin that checks the strength of a user's password for MariaDB and restricts it to accepting only passwords that are secure enough. For example, it must be at least as many characters long as the user's password and must contain at least one symbol and one number. You can set this requirement by asking the following questionType y and press Enter if you like2.WordPress Install2.1 Create database

2024.05.02

Ubuntu24.04_en

Ubuntu Server24.04 ; Tripwire , disk usage check script , Logwatch

TripwireImplement a system to detect file tampering on Linux servers by crackers.This time, Tripwire, a host-based IDS (IDS=Intrusion Detection System), will be installed as the file tampering detection system.Tripwire detects file additions/changes/deletions by creating a database of file status at the time of installation and comparing the database with the current status of the file.1. Installation and configuration.Introduce disk usage check script1. Script CreationLog analysis tool Logwatch installed1. Install logwatch

2024.05.05

Ubuntu24.04_en

Ubuntu Server24.04 ; System Backup & Restore

1. System Backup1.1 Backup under /var/www/html①Create /var/www/system directory1.2 MariaDB database backup①Create db_backup.sh script under /var/www/system2. System Restore2.1 Restore backup files under HTML①Store HTML backup files used for backup in the "/ (root)" directorySelect the backup file with the latest timestamp(Example: www_back_20231009.tar.gz)2.2 Restore MariaDB database①Save DB backup file to any directory and decompress data

2024.05.05

Ubuntu24.04_en

Ubuntu Server24.04 ; Suricata , SNORT3

SuricataSURICATA IDS/IPS is an open source IDS that monitors communications on the network and detects suspicious traffic. Its basic mechanism is signature-based, so it can detect predefined unauthorized communications. Suricata is also characterized by its ability to provide protection as well as detection.1.Suricata Install①Install required packagesSnort31.Install required packages# apt install build-essential libpcap-dev libpcre3-dev libnet1-dev zlib1g-dev luajit hwloc libdumbnet-dev bison flex liblzma-dev openssl libssl-dev pkg-config libhwloc-dev cmake cpputest libsqlite3-dev uuid-dev libcmocka-dev libnetfilter-queue-dev libmnl-dev autotools-dev libluajit-5.1-dev libunwind-dev libfl-dev -y2. Install DAQ library

2024.05.02

Ubuntu24.04_en

Ubuntu Server23.04 ; WEB Server(Apache)

Apache2 InstallAllow http:80 port and https:443 port in UFW first.3 Apache2 : Using Perl ScriptsEnable CGI to make Perl scripts available①Perl Install4 Apache2 : Using PHP Scripts①PHP Install5 Apache2 : Virtual Host Settings①Copy the default configuration file (file name is arbitrary, in this case vhost-yourdomain.conf as an example) and configure the virtual host6. Digest authentication with Apache2Since Basic Authentication, a well-known authentication authentication method for http, transmits authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted.On the other hand, Digest Authentication encrypts the authentication information and sends it in encrypted form, so there is almost no risk of information leakage.

2023.10.02

Ubuntu23.04_en

Ubuntu Server23.04 ; Web server, Mail server SSL conversion (Let's Encrypt)

1.Obtain a certificate (Let's Encrypt)1.1 advance preparation1.Enable mod_ssl2.Package management system Snappy installedLet's Encrypt's SSL certificate issuing tool "certbot" is recommended to be installed using "snap" after 2021, so install Snapd first. (It can also be installed using the conventional method with dnf or yum)1.3 Obtain a Let's Encrypt CertificateIt is assumed that a web server such as Apache httpd or Nginx is running.If the web server is not running on the server where the work is to be performed, follow the procedure below under "Obtaining a Let's Encrypt certificate when the web server is not running".It is also assumed that the server on which the work is to be performed (the server with the FQDN of the server from which you want to obtain the certificate) is accessible from the Internet at port 80.2. SSL/TLS (Let's Encrypt) configuration for Apache2①Edit Apache2 SSL-related configuration files3. SSL/TLS (Let's Encrypt) settings on the mail server3.1 Obtaining a certificate for the mail serverObtain a certificate for the mail server, but it cannot be obtained in the same way as above, so the following with the "--standalone" option fails.

2023.10.05

Ubuntu23.04_en

Fedora40 ; OS Install

Fedora40 ; Download(Released on April 24, 2024)Fedora40 can be downloaded from the following mirrorhttps://ftp.riken.jp/Linux/fedora/releases/40/Server/x86_64/iso/The file to download is the "Fedora-Server-dvd-x86_64-40-1.14.iso" imageCreate an installation disk from the downloaded "Fedora-Server-dvd-x86_64-40-1.14.iso" image on a USB disk and install it on the actual device.Fedora40 ; Install①Change to boot from USB disk on the BIOS change screen of the PC and boot the PC.Select "Install Fedoara 40" at the top and press Enter

2024.04.26

fedora40_en