Linux

Linux is wonderful! However it can be a mess to setup.

These are some how-to and tricks for Linux (Debian / Ubuntu) servers and workstations.

Cells left-aligned, table centered

Duis	aute	irure
dolor	in reprehenderit	in voluptate velit
esse cillum dolore	eu fugiat nulla	pariatur.

Template:Col-begin Template:Col-break |Core elements |- | Server / workstation setup |- Template:Col-break |Security |- | Security: anti-virus / root-kits / Fail2Ban |- | Security: SSH |- | Security: firewall |- | Security: SSL |- | Security: VPN |- | Security: IDS / IPS Template:Col-break |Web |- | DB | | Web server |- | PHP webapps |- | CI webapps Template:Col-break |Network |- | LDAP |- | DHCP DNS |- | File share technologies |- | This section explains how to setup, boot and maintain a netboot image. |- | Mail server (SMTP, POP3/IMAP) |- | Monitoring IT components, servers and applications using Zabbix Template:Col-end

---

Server / workstation core setup

How to setup & maintain a Linux server or workstation with basics services.

Server / Workstation setup
Installation	Partitions setup	Specifics	Prefer IPv4 over IPv6	Applications	Photo
	Network and hostname configuration		XFCE: screensaver bug fix		Clean ubuntu
	VIM editor		Drivers
	Sources
	Create user
	Useful programs
	Languages
	Automatic updates

Security

How to secure your server / workstation ?

Global security

Anti-virus / anti root-kits / Fail2Ban

• Anti-virus
• Rootkit cleaner
• Fail2ban

SSH

SSH

• SSH Client

• How-to generate SSH key

• SSH server setup
• SSH server using local user / password auth.
• SSH server using key auth.
• SSH server using LDAP user auth.
• SSH server using LDAP key auth.

Firewall

This section explains HOW to create, maintain and use a firewall with IpTables.

Firewall
Basics	Firewall principle
	Firewall basics
	Firewall core (main) protocols
	Firewall VPN
	Firewall OUTPUT filters
	Firewall INPUT filters
Advanced	Firewall port forwarding
	Firewall source address filtering
Installation and scripts	Firewall installation scripts

SSL

SSL certificates and chain of trust

SSL server

VPN

Virtual Private Network (VPN)

• VPN introduction

• VPN server

• VPN client

Intrusion Detection / Protection

Protection is good, but that's not enough! We need to detect attacks.

• IDS = Intrusion Detection System : tool that detect attacks.
• IPS = Intrusion Protection System : detect an intrusion attempt and react upon it.

I'm using one of the most famous IDS: "Snort" (https://www.snort.org/).

• Snort IDS installation
• Snort IDS web-UI

Linux appliances

User management

Manage users and groups

• LDAP server
• LDAP client

DB servers

Database servers

• MySQL server
• PostgreSQL

Web

Web server

How to setup a website, proxy and SSL certificates...

Web server
Apache 2	Apache 2 installation
	Apache 2 HTTP virtual host
	Apache 2 HTTPS virtual host
	Apache 2 - SSL certificates page
	Apache 2 - Redirection (mod rewrite)
	Apache 2 - proxy
	Apache 2 - Custom error page
	Apache 2 - Performances
	Apache 2 - Security
	Apache 2 - LDAP access
Cherokee	Cherokee web server

Web applications

Web applications
Web app PhpMyAdmin
Web app PhpLdapAdmin
Web app PhpSecInfo

Continuous Integration applications

C.I - Continuous integration

CI applications
Jenkins
Sonar
SVN server

Network

DHCP and DNS

DHCP and DNS servers

Network
DHCP server	DHCP server installation
	DHCP dynamic IP assignation
	DHCP static IP assignation
DNS	DNS server
	DNS server split

File share

File share technologies

• Samba server
• NFS server
• Webdav

NetBoot

This section explains how to setup, boot and maintain a netboot image.

Requirements:

• DNS server
• DHCP server

NetBoot and "Thin client" (diskless clinets) principle:

• NetBoot server principle
• NetBoot target configuration

NetBoot services setup:

• TFTP server
• DHCP netboot configuration
• TFTP server manage netboot kernels
• NFS server

NFS image setup:

• NFS image creation
• NFS image configuration

Register NFS image to TFTP:

• TFTP server PXE configuration
• TFTP server PXE advanced menu

Alternate Netboot scenario: 'Linux installation': network Linux installation

Mail

Mail server (SMTP, POP3/IMAP)

Email relay

Email server setup

Monitoring

Monitoring IT components, servers and applications using Zabbix

Monitoring
Zabbix server	Zabbix server setup
	Zabbix server configuration
	Zabbix server hosts management
	Zabbix server template management = create and manage template
	Zabbix server create new application, items, triggers and actions
	Zabbix server dashboard
Zabbix agent setup	Zabbix agent setup

Note:

I'm using Zabbix v2.2. All the following information are just a practical summary of the Zabbix official documentation applied to my use-case.

Alternative to zabbix, the old good fashion SNMP client !

Other services

• NTP time sync
• Logwatch

Management UI

Webmin

Raspberry pi

• Raspbmc - XBMC HTPC

New menu (under construction)

This section is under construction...