nuy

FreeBSD13.3_en

FreeBSD13.3 ; Initial setup (Vim , SSH , firewall, NTP server)

1. Vim Install Install Vim, which you are familiar with as an editor, as follows # pkg install -y vim 2. SSH Connection Security Measures 2.1 SSH port changed, root user login disabled 3. Firewall Settings FreeBSD has the following firewalls ・pf ・ipfw ・ipf In this case, we will use ipfw to configure the firewall 4. NTP Server Settings 4.1 Rewrite the referenced NTP server in /etc/ntp.conf. Add an appropriate server in Japan.
FreeBSD13.3_en

FreeBSD13.3 ; FTP Server , Samba Fileserver

1. FTP Sever (Vsftpd) 1.1 advance preparation ①Private Key Creation 2. File Server with Samba Use Samba to build a file server for Windows and Mac file sharing 2.1 Samba Install # cd /usr/ports/net/samba413/ # make Remove the active directory relationships for ADS and AD_DC, as they will not be used this time. LDAP is also removed because account management is not done through LDAP.
FreeBSD13.3_en

FreeBSD13.3 ; WEB Server(Apache2) , MySQL8

1. Apache2 1.1 Install # cd /usr/ports/www/apache24 # make config There are many options, but we will proceed with the defaults 2. MySQL Install Install MySQL before installing PHP # pkg install -y mysql80-client mysql80-server 3. apache24 - PHP 8.0 3.1 PHP Install # cd /usr/ports/lang/php83 # make config
FreeBSD13.3_en

FreeBSD13.3 ; Web Server SSL、Webmin

1. FreeBSD13.2 ; Web Server SSL、Webmin 1.1 Installing the Certbot tool for Let's Encrypt Run the following command to install the Certbot package # pkg install py39-certbot 2. Webmin Install Webmin is a web browser-based tool for configuring Unix-like operating systems (OS) such as Linux. It allows users to make numerous changes to internal OS settings such as user and disk usage limits, services, configuration files, etc., and to modify and control many open source applications such as Apache, PHP, MySQL, and others. Webmin is built primarily in Perl and runs as its own process and web server. By default, it communicates on TCP port 10000.
FreeBSD13.3_en

FreeBSD13.3 ; Mail Server(Postfix,Dovecot) , SSL/TLS

1. Obtaining a certificate for the mail server Obtain a certificate for the mail server to convert the mail server to SSL/TLS. Use the certbot that was used when the web server was converted to SSL. Stop the web server and execute the following command
FreeBSD13.3_en

FreeBSD13.3 ; Postfix ClamAV + Amavis + SpamassAssin

Install ClamAV on FreeBSD 13 and link it with Amavis against Postfix. ClamAV is anti-virus software. We will proceed on the assumption that you have already implemented Postfix. Before proceeding, update the Ports Collection. 2. Amavis Install Amavis, which links ClamAV and Postfix 3. Anti-Spam with SpamAssassin 3.1 SpamAssassin Install If you did not select spamassassin as an option when you installed Amavis, install it as follows
Rocky Linux9.2_en

Rocky Linux9.2 ; OS Install

Rocky Linux9.2 The Rocky Release Engineering team announced the latest version of Rocky Linux 9.0 on July 14, 2022. Rocky Linux is a Linux distribution compatible with Red Hat Enterprise Linux; Rocky Linux 9 is a compatible release with RHEL 9 released in May and will be supported until the end of May 2032. This time we will install Rocky Linux 9.2, released May 16, 2023, which is the same as 9.0 9.1.
Slackware 15.0_en

Slackware15.0 : OS image download, boot

About Slackware Slackware is one of the Linux distributions. However, in the early days of Linux, it was one of the two major distributions so commonly used that it was said that Linux was either Slackware or Red Hat Linux. Launched in 1992, Slackware celebrates its 31st anniversary this year. The latest version is 15.0, released on February 4, 2022. Forte ・High stability ・Secure with few bugs and security holes ・It is capable of high operating speeds. Slackware is fast because it installs only the components that users need. ・Highly compliant with standards and suitable for servers ・Slackware is simple to use, and if you can master it, you can create your own environment. ・SlackBuilds, which automates the installation of apps, is available, and the SlackBuilds site has a database of scripts for creating various packages on your own. Furthermore, if you install sbopkg, you can browse the Slackbuilds database with a single command and automatically download, generate, and install packages. ・Slackware allows you to use emacs, vim, and gimp, which are standard Linux applications.
Slackware 15.0_en

Slackware 15.0 ; Disk partitioning

Partitioning First, basic partitioning divides the disk space into two parts: / (root) and a partition for swap. The partition for swap must be prepared. 1.Using gdisk commands When gdisk is invoked, the following is displayed. gdisk always requires a device file name as an argument
Slackware 15.0_en

Slackware 15.0 ; Disk partition format

Partition formatting and directory mapping 1.Launch Slackwar...
Slackware 15.0_en

Slackware15.0 ; Installing packages

Installing packages Select installation media and other inst...
Slackware 15.0_en

Slackware15.0 ; Various settings during installation

Creating Bootstick To create an emergency Bootstick, insert a USB stick, select Create, and press Enter. Select Skip since you will not create it this time. Install Boot Manager ELILO Installation If installed on a machine with a UEFI boot PC or motherboard, the following screen will appear PCs running on UEFI firmware will not work with LILO, so proceed to install ELILO designed for EFI/UEFI systems Select skip and press Enter to continue
Slackware 15.0_en

Slackware15.0 ; Various settings after OS installation #I

Adding General Users Root is a privileged user and should not normally be logged in as root. You must create your own account separate from root. Create a login user with the following command # useradd huong # passwd huong New password: Retype new password: passwd: password updated successfully Create user's home directory Setting up the use of the sudo command To grant sudo privileges to the created general user, use the command "visudo" as root and edit the file "sudoers". This time, "users belonging to the wheel group can use it; they will not be asked for their password when sudoing." Use the
Slackware 15.0_en

Slackware15.0 ; Various settings after OS installation #2

SSH Remote Connection Configure the default settings to increase the security of ssh connections. 1. SSH service configuration file modification Modify the configuration file to change the SSH service settings. The SSH service configuration file is "/etc/ssh/sshd_config".
Slackware 15.0_en

Slackware15.0 ; SSH connect with public key

Creation of public and private key pairs Create a public/private key pair for a user connecting to a Linux server using OpenSSH. Use ssh-keygen to create the key pair. The creation of a public/private key pair is performed with remote login user privileges. If you do not specify the destination and file name, id_ed25519 and id_ed25519.pub will be created in /home/(user name)/.ssh/. On the way, enter the password for the key.