LPIC-2 Linux System Administration

https://lpic2.goffinet.org/
Admin
Comprehensive documentation and training material for LPIC-2 Linux system administration...
Tokens:128,094
Snippets:1,732
Trust Score:8.2
Update:6 months ago
Show doc for...
Tokens:
Raw
### Install and Start SSH Server

Source: https://lpic2.goffinet.org/configuration_du_reseau.html

Install the OpenSSH server package if it's not already present, enable it to start on boot, and then start the service. Configuration is typically done in /etc/ssh/sshd_config.

```bash
# yum install openssh-server
# systemctl enable sshd
# systemctl start sshd
# less /etc/ssh/sshd_config
```

--------------------------------

### Install and Start NTP Service

Source: https://lpic2.goffinet.org/services_dns_dhcp.html

Installs the NTP package, enables the ntpd service to start on boot, and starts the service immediately.

```bash
# yum -y install ntp
# systemctl enable ntpd
# systemctl start ntpd
```

--------------------------------

### Install and Enable HTTP Daemon

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Install the Apache HTTP server using `yum` and enable its service to start on boot, then start the service. This is required for serving installation repositories over HTTP.

```bash
yum -y install httpd
systemctl enable httpd.service && systemctl start httpd.service
```

--------------------------------

### Install Kickstart Configuration Tool

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Install the `system-config-kickstart` package, which provides a graphical tool for creating and editing Kickstart files. After installation, the tool can be launched.

```bash
yum install system-config-kickstart
system-config-kickstart
```

--------------------------------

### Create and Install VM with virt-install Script

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

This bash script automates the creation and initial setup of a KVM virtual machine using virt-install. It destroys any existing VM with the same name, creates a new disk image, and configures graphical and serial consoles for OS installation.

```bash
#/bin/bash
# vm-install.sh

# local path to the iso
iso=/var/CentOS-7-x86_64-DVD-1503-01.iso

# Stop and undefine the VM
/bin/virsh destroy $1; /bin/virsh undefine $1 --remove-all-storage

# graphical console
# via local ISO 
virt-install \
--virt-type kvm \
--name=$1 \
--disk path=/var/lib/libvirt/images/$1.img,size=8 \
--ram=1024 \
--vcpus=1 \
--os-variant=rhel7 \
--graphics vnc \
--console pty,target_type=serial \
--cdrom $iso

```

--------------------------------

### Kickstart Configuration for Graphical Console VM Installation

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

This Kickstart file configures a simple installation with local keyboard, timestamp, DHCP network, hostname, password, Swap, /boot, LVM, @core, and chrony for a graphical console installation.

```bash
# File /var/www/html/conf/vm.ks

keyboard --vckeymap=be-oss --xlayouts='be (oss)'
lang fr_BE.UTF-8
network --onboot=on --bootproto=dhcp --device=link --hostname=localhost.localdomain
rootpw testtest
services --enabled="chronyd"
timezone Europe/Paris --isUtc
bootloader --location=mbr --boot-drive=vda
clearpart --all --initlabel --drives=vda
ignoredisk --only-use=vda
part pv.9 --fstype="lvmpv" --ondisk=vda --size=5000
part /boot --fstype="ext4" --ondisk=vda --size=500
volgroup rhel --pesize=4096 pv.9
logvol swap  --fstype="swap" --size=500 --name=swap --vgname=rhel
logvol /  --fstype="ext4" --size=3072 --name=root --vgname=rhel

%packages --ignoremissing
@core
chrony
%end
reboot


```

--------------------------------

### Install and Configure BIND Chroot Environment

Source: https://lpic2.goffinet.org/services_dns_dhcp.html

Install the 'bind-chroot' package and use the setup script to move BIND's data directory into a chroot environment. This enhances security by isolating BIND's file access.

```bash
# yum install -y bind-chroot
# /usr/libexec/setup-named-chroot.sh /var/named/chroot on 
# systemctl disable named
# systemctl stop named
# systemctl enable named-chroot
Created symlink from /etc/systemd/system/multi-user.target.wants/named-chroot.service to /usr/lib/systemd/system/named-chroot.service.
# systemctl start named-chroot
```

--------------------------------

### Enable and Start DNS Service

Source: https://lpic2.goffinet.org/services_dns_dhcp.html

Enables the DNS service (named) to start on boot and starts the service. Use 'systemctl status named' to verify it is running.

```bash
# systemctl enable named
# systemctl start named
# systemctl status named

```

--------------------------------

### Install phpMyAdmin

Source: https://lpic2.goffinet.org/service_apache.html

Installs phpMyAdmin using apt-get. Follow the prompts to configure database settings.

```bash
# apt-get -y install phpmyadmin
```

```text
Faut-il configurer la base de données de phpmyadmin avec dbconfig-common ? Oui
Mot de passe de l'administrateur de la base de données : *****
Mot de passe de connexion MySQL pour phpmyadmin : à laisser vide (aléatoire)
```

--------------------------------

### Download Installation ISO

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Download an operating system installation ISO image using `wget`. This ISO will be used to create the local installation repository.

```bash
wget http://ftp.belnet.be/ftp.centos.org/7/isos/x86_64/CentOS-7-x86_64-DVD-1503-01.iso
```

--------------------------------

### Install Apache Web Server

Source: https://lpic2.goffinet.org/service_apache.html

Use apt-get to install Apache2 and related packages. This command installs the web server, documentation, and utility tools.

```bash
apt-get install apache2 apache2-doc apache2-utils
```

--------------------------------

### Install and Configure Chrony Client

Source: https://lpic2.goffinet.org/services_dns_dhcp.html

Installs the chrony package for NTP client functionality, enables and starts the chronyd service, and displays tracking and source information.

```bash
# yum -y install chrony
# cat /etc/chrony.conf
# systemctl enable chronyd
# systemctl start chronyd
# chronyc tracking
# chronyc sources -v
```

--------------------------------

### Script to Install VM with Text Console

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

This bash script automates VM creation and installation using virt-install for a text console. It configures the VM with specific network settings, disk, RAM, and uses a Kickstart file for automated setup. Ensure the bridge and mirror variables are correctly set.

```bash
#/bin/bash
# vm-install4.sh

bridge=192.168.122.1
mirror=http://$bridge/repo
#mirror=http://centos.mirrors.ovh.net/ftp.centos.org/7/os/x86_64
#mirror=http://ftp.belnet.be/ftp.centos.org/7/os/x86_64
#mirror=http://mirror.i3d.net/pub/centos/7/os/x86_64

#Stop and undefine the VM
/bin/virsh destroy $1; /bin/virsh undefine $1 --remove-all-storage

# Text console, bridged, HD qcow2
# HTTP + Kickstart 
virt-install \
--virt-type kvm \
--name=$1 \
--disk path=/var/lib/libvirt/images/$1.qcow2,size=16,format=qcow2 \
--ram=1024 \
--vcpus=1 \
--os-variant=rhel7 \
--network bridge=virbr0 \
--graphics none \
--console pty,target_type=serial \
--location $mirror \
-x "ks=http://$bridge/conf/vm2.ks console=ttyS0,115200n8 serial"


```

--------------------------------

### Install Bind9 and Utilities

Source: https://lpic2.goffinet.org/service_apache.html

Installs the Bind9 DNS server and associated utilities using apt-get. This is for setting up a nameserver.

```bash
# apt-get -y install bind9 bind9utils

```

--------------------------------

### Start SSH service

Source: https://lpic2.goffinet.org/demarrage_et_noyau.html

Use `systemctl start sshd` to initiate the SSH service. This command is used after installation, enabling, or if the service was previously stopped.

```bash
# systemctl start sshd

```

--------------------------------

### Install KVM and Virtualization Tools

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Installs the KVM hypervisor, QEMU for hardware emulation, libguestfs tools for VM disk management, and necessary fonts.

```bash
yum group install "Virtualization Host" "Virtualization Client"

yum -y install \
qemu-kvm \
dejavu-lgc-sans-fonts \
libguestfs-tools
```

--------------------------------

### Install Apache Binaries

Source: https://lpic2.goffinet.org/service_apache.html

Installs the compiled Apache binaries and related files to the configured installation directory. This command requires root privileges (using 'su').

```bash
$ su
# make install
```

--------------------------------

### Install and Configure collectd-web

Source: https://lpic2.goffinet.org/processus.html

Install collectd-web using yum, enable and start the necessary services (collectd, httpd), and configure the firewall. This enables web-based monitoring of collectd data.

```bash
yum install collectd-web
systemctl enable collectd
systemctl enable httpd
systemctl start collectd
systemctl start httpd
firewall-cmd --add-service=http --permanent
firewall-cmd --reload

```

--------------------------------

### Start and Stop a Process in Console

Source: https://lpic2.goffinet.org/processus.html

Demonstrates how to start a process in the foreground, suspend it with Ctrl+Z, and view it with `ps aux`.

```bash
tail -f /var/log/messages
^Z

[1]+  Stopped                 tail -f /var/log/syslog
```

```bash
ps aux | grep tail
francois 23704  0.0  0.0   7256   620 pts/5    T    14:08   0:00 tail -f /var/log/messages
```

--------------------------------

### Enable and Start DHCP Service

Source: https://lpic2.goffinet.org/services_dns_dhcp.html

Enables the DHCP service to start on boot and starts the service immediately. Check the status to confirm it's running.

```bash
# systemctl enable dhcpd
# systemctl start dhcpd

```

--------------------------------

### Start Apache HTTP Server

Source: https://lpic2.goffinet.org/service_apache.html

Starts the Apache HTTP Server process in the background using the 'httpd -k start' command. This is a test to verify the installation and configuration.

```bash
# /opt/prod/apache24/bin/httpd -k start &
```

--------------------------------

### Define and Start New VM

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Define the new VM using the modified XML configuration and then start it. This integrates the exported VM into libvirt.

```bash
virsh define vm2.xml

```

```bash
virsh start vm2

```

--------------------------------

### Ansible Modules: Ping and Setup

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Demonstrates basic Ansible module usage for checking host connectivity with the 'ping' module and gathering system facts with the 'setup' module.

```bash
ansible all -m ping
ansible vm01 -m ping
ansible all -m setup
```

--------------------------------

### Enable and Start VSFTPD Service

Source: https://lpic2.goffinet.org/partages.html

Enables the VSFTPD service to start automatically on boot and starts the service immediately. Use `systemctl` for managing services.

```bash
systemctl enable vsftpd
systemctl start vsftpd

```

--------------------------------

### Install MariaDB Server and Client

Source: https://lpic2.goffinet.org/service_apache.html

Installs the MariaDB database server and client packages using apt-get. This is the first step in setting up a LAMP stack for database management.

```bash
# apt-get -y install mariadb-server mariadb-client
```

--------------------------------

### Start Virtual Network

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Starts the newly defined virtual network 'lab'. This makes the network available for VMs to connect to.

```bash
virsh net-start lab

```

--------------------------------

### Install Tree Utility

Source: https://lpic2.goffinet.org/services_dns_dhcp.html

Install the 'tree' command-line utility, which provides a recursive directory listing in a tree-like format.

```bash
# yum install -y tree
```

--------------------------------

### Install LAMP Stack and phpMyAdmin

Source: https://lpic2.goffinet.org/service_apache.html

Installs the MariaDB server and client, Apache web server, and PHP with necessary modules for web applications.

```bash
# apt-get -y install \
 mariadb-server mariadb-client \
 apache2 apache2-utils \
 php5 \
 php5-mysqlnd \
 php5-apcu \
 phpmyadmin
```

--------------------------------

### Enable and Start libvirtd Service

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Ensures the libvirtd service starts automatically on boot and is running to manage KVM virtual machines.

```bash
systemctl enable libvirtd && systemctl start libvirtd
```

--------------------------------

### Install Apache Web Server

Source: https://lpic2.goffinet.org/service_apache.html

Installs the Apache web server package. This command is part of setting up the 'A' in LAMP.

```bash
# apt-get -y install apache2
```

--------------------------------

### Install GRUB2 Bootloader

Source: https://lpic2.goffinet.org/demarrage_et_noyau.html

Install the GRUB2 bootloader to a specified partition. Replace /dev/sda1 with the actual boot device or partition.

```bash
# grub2-install /dev/sda1
```

--------------------------------

### Start a VM with virsh

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Use this command to start a virtual machine domain that has been previously defined.

```bash
virsh start vm1
```

--------------------------------

### Install Filesystem Tools

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Installs necessary tools for XFS and BTRFS filesystems on Debian/Ubuntu-based systems.

```bash
apt-get -y install xfsprogs btrfs-tools
```

--------------------------------

### Execute VM Management and Installation

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Shell commands to execute the defined functions for managing virtual machines, preparing Kickstart files, and initiating the installation process. The temporary Kickstart file is removed after execution.

```shell
gest_dom
prep_ks
virt_install

# rm -f $www/$temp.ks
```

--------------------------------

### Install and Configure Quagga for OSPF

Source: https://lpic2.goffinet.org/routage_et_parefeu.html

Install the Quagga routing suite, copy the OSPF daemon configuration sample, and set the correct ownership for the configuration file. This prepares the system to run OSPF.

```bash
# yum install quagga
# cp /usr/share/doc/quagga-0.99.22.4/ospfd.conf.sample /etc/quagga/ospfd.conf
# chown quagga:quagga /etc/quagga/ospfd.conf
```

--------------------------------

### Install Tree Utility

Source: https://lpic2.goffinet.org/service_apache.html

Install the 'tree' command-line utility to visualize directory structures. This is useful for exploring Apache's configuration file layout.

```bash
apt-get install tree
```

--------------------------------

### VM Installation Script with HTTP Repo

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

A bash script to create and install a KVM virtual machine using `virt-install`. It configures the VM with specified resources and uses an HTTP repository for the installation source. The script can use a local mirror or a public mirror.

```bash
#/bin/bash
# vm-install2.sh

# KVM Host IP
bridge=192.168.122.1

# Repo URL
mirror=http://$bridge/repo
#mirror=http://centos.mirrors.ovh.net/ftp.centos.org/7/os/x86_64
#mirror=http://ftp.belnet.be/ftp.centos.org/7/os/x86_64
#mirror=http://mirror.i3d.net/pub/centos/7/os/x86_64

# Stop and undefine the VM
/bin/virsh destroy $1; /bin/virsh undefine $1 --remove-all-storage

# graphical console, bridged
# via http repo
virt-install \
--virt-type kvm \
--name=$1 \
--disk path=/var/lib/libvirt/images/$1.img,size=8 \
--ram=1024 \
--vcpus=1 \
--os-variant=rhel7 \
--network bridge=virbr0 \
--graphics vnc \
--console pty,target_type=serial \
--location $mirror

```

--------------------------------

### Install LuCI Web Interface

Source: https://lpic2.goffinet.org/routage_et_parefeu.html

Installs the LuCI web interface, which provides a graphical user interface for OpenWrt, using the opkg package manager.

```bash
opkg update
opkg install luci-ssl

```

--------------------------------

### Install VSFTPD Server

Source: https://lpic2.goffinet.org/partages.html

Installs the VSFTPD package for setting up an FTP server. Ensure you have the necessary package manager configured.

```bash
yum -y install vsftpd

```

--------------------------------

### Verify Apache Server Process After Starting

Source: https://lpic2.goffinet.org/service_apache.html

Confirms that the Apache httpd processes are running after starting the server with the custom configuration file.

```bash
# ps fu -C httpd
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root      9822  0.0  0.3  37740  3588 ?        Ss   23:16   0:00 httpd -f /opt/prod/apache24/conf/httpd_1.conf
apache24  9823  0.0  0.3 326704  3256 ?        Sl   23:16   0:00  \_ httpd -f /opt/prod/apache24/conf/httpd_1.conf
apache24  9824  0.0  0.3 326704  3256 ?        Sl   23:16   0:00  \_ httpd -f /opt/prod/apache24/conf/httpd_1.conf
apache24  9825  0.0  0.3 326704  3256 ?        Sl   23:16   0:00  \_ httpd -f /opt/prod/apache24/conf/httpd_1.conf
```

--------------------------------

### Ansible Playbook Example

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

An example Ansible playbook for automating the deployment and configuration of virtual machines. This demonstrates Ansible's capabilities in managing infrastructure.

```yaml
- name: Configure VM Host
  hosts: vm_hosts
  become: yes
  tasks:
    - name: Ensure KVM is installed
      package:
        name: qemu-kvm
        state: present

    - name: Ensure libvirt is installed
      package:
        name: libvirt-daemon
        state: present

    - name: Ensure virt-manager is installed
      package:
        name: virt-manager
        state: present

    - name: Start and enable libvirtd service
      service:
        name: libvirtd
        state: started
        enabled: yes

    - name: Create a storage pool
      command: virsh pool-define-as --name default --type dir --target /var/lib/libvirt/images
      args:
        creates: /etc/libvirt/storage/default.xml

    - name: Start and enable the storage pool
      command: virsh pool-start default

    - name: Autostart the storage pool
      command: virsh pool-autostart default

    - name: Create a virtual machine
      command: virt-install --name myvm --ram 1024 --vcpus 1 --disk size=10 --os-type linux --os-variant rhel7.0 --network network=default --graphics vnc,listen=0.0.0.0 --noautoconsole
      args:
        creates: /var/lib/libvirt/images/myvm.img

```

--------------------------------

### Kickstart Configuration for Text Console VM Installation

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

This Kickstart file configures a simple text-based installation, disabling firewall and SELinux, and skipping the X Window System. It includes settings for keyboard, timezone, language, network, root password, and LVM partitioning.

```bash
# File /var/www/html/conf/vm2.ks
#platform=x86, AMD64, ou Intel EM64T
#version=DEVEL
# Install OS instead of upgrade
install
# Keyboard layouts
# old format: keyboard be-latin1
# new format:
keyboard --vckeymap=be-oss --xlayouts='be (oss)'
# Reboot after installation
reboot
# Root password
rootpw --plaintext testtest
# System timezone
timezone Europe/Paris
# System language
lang fr_BE
# Firewall configuration
firewall --disabled
# Network information
network  --bootproto=dhcp --device=link
# System authorization information
auth  --useshadow  --passalgo=sha512
# Use text mode install
text
# SELinux configuration
selinux --disabled
# Do not configure the X Window System
skipx

# System services
services --enabled="chronyd"

bootloader --location=mbr --boot-drive=vda
clearpart --all --initlabel --drives=vda
ignoredisk --only-use=vda
part pv.9 --fstype="lvmpv" --ondisk=vda --size=5000
part /boot --fstype="ext4" --ondisk=vda --size=500
volgroup rhel --pesize=4096 pv.9
logvol swap  --fstype="swap" --size=500 --name=swap --vgname=rhel
logvol /  --fstype="ext4" --size=3072 --name=root --vgname=rhel

%packages --ignoremissing
@core
chrony

%end


```

--------------------------------

### Start OSPF Daemon

Source: https://lpic2.goffinet.org/routage_et_parefeu.html

Start the OSPF daemon (ospfd) using systemctl and check its status. This activates the OSPF routing protocol on the system.

```bash
# systemctl start ospfd
# systemctl status ospfd
```

--------------------------------

### Create Kickstart Configuration Directory

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Create a directory to host Kickstart configuration files via HTTP and create an empty Kickstart file. Ensure the directory has the correct SELinux context for Apache access.

```bash
mkdir /var/www/html/conf/
touch vm.ks /var/www/html/conf/
chcon -R -t httpd_sys_content_t /var/www/html
```

--------------------------------

### Install Samba and Related Packages

Source: https://lpic2.goffinet.org/partages.html

Install Samba and necessary utilities for Active Directory integration and file sharing. This includes packages for realmd, sssd, and NTP.

```bash
yum install realmd samba samba-common oddjob oddjob-mkhomedir sssd ntpdate ntp
```

--------------------------------

### Script to Install VM with Graphical Console

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

This bash script automates the creation and installation of a virtual machine using virt-install, configured for a graphical console with HTTP and Kickstart. Ensure the bridge and mirror variables are set correctly.

```bash
#/bin/bash
# vm-install3.sh

bridge=192.168.122.1
mirror=http://$bridge/repo
#mirror=http://centos.mirrors.ovh.net/ftp.centos.org/7/os/x86_64
#mirror=http://ftp.belnet.be/ftp.centos.org/7/os/x86_64
#mirror=http://mirror.i3d.net/pub/centos/7/os/x86_64

#Stop and undefine the VM
/bin/virsh destroy $1; /bin/virsh undefine $1 --remove-all-storage

# Graphical console, bridged, HD qcow2
# HTTP + Kickstart 
virt-install \
--virt-type kvm \
--name=$1 \
--disk path=/var/lib/libvirt/images/$1.qcow2,size=16,format=qcow2 \
--ram=1024 \
--vcpus=1 \
--os-variant=rhel7 \
--network bridge=virbr0 \
--graphics vnc \
--console pty,target_type=serial \
--location $mirror \
-x ks=http://$bridge/conf/vm.ks


```

--------------------------------

### Enable Network Autostart

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Configures the virtual network 'lab' to start automatically when the host system boots.

```bash
virsh net-autostart lab

```

--------------------------------

### Start Apache Service

Source: https://lpic2.goffinet.org/service_apache.html

Command to start the Apache service using systemd. Ensure the service unit file is correctly placed and configured before execution.

```bash
# systemctl start apache24.service
```

--------------------------------

### Install Build Tools and Libraries

Source: https://lpic2.goffinet.org/service_apache.html

Installs essential build tools like 'build-essential' and necessary libraries such as 'libpcre3-dev' required for compiling Apache. This command is for Debian/Ubuntu-based systems.

```bash
# apt-get install ntpdate build-essential libpcre3-dev
```

--------------------------------

### Install Virtio Drivers Repository

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Installs the virtio-win repository and packages, which provide necessary drivers for paravirtualized devices in KVM guests. This is crucial for optimal performance.

```bash
wget https://fedorapeople.org/groups/virt/virtio-win/virtio-win.repo -O /etc/yum.repos.d/virtio-win.repo

yum install virtio-win

```

--------------------------------

### Creating a Loopback File System

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Steps to create a file system on a loop device.

```bash
dd if=/dev/zero of=~/loopfile bs=1M count=100
```

```bash
mkfs.ext4 ~/loopfile
```

```bash
mkdir ~/mountpoint
```

```bash
mount -o loop ~/loopfile ~/mountpoint
```

--------------------------------

### Conditional Access Control with Boolean Expressions

Source: https://lpic2.goffinet.org/service_apache.html

The <If> directive allows configuration changes based on a boolean expression. This example denies access if the HTTP Referer header does not start with 'http://www.example.com/'.

```apache
<If "!(%{HTTP_REFERER} -strmatch 'http://www.example.com/*')">
    Require all denied
</If>
```

--------------------------------

### Check Public IP Address with Netcat

Source: https://lpic2.goffinet.org/audit_du_reseau.html

Use netcat to connect to a service that reports your public IP address. This example shows connecting to checkip.eurodyndns.org on port 80 and sending an HTTP GET request.

```bash
nc -v checkip.eurodyndns.org 80
```

```http
GET http://checkip.eurodyndns.org/ HTTP/1.0\n
```

```text
HTTP/1.1 200 OK
Date: Sun, 12 Jan 2014 15:46:47 GMT
Server: Apache
Content-Length: 160
Keep-Alive: timeout=15, max=189
Connection: close
Content-Type: text/html; charset=UTF-8

<html><head><title>Current IP Check</title></head>
<body bgcolor=white text=black>
Current IP Address: 109.129.223.2
<br>Hostname: 109.129.223.2
</body></html>
```

--------------------------------

### Install FreeIPA Server Packages

Source: https://lpic2.goffinet.org/service_dannuaire.html

Install the FreeIPA server and its DNS component using yum. This command ensures the necessary packages are present for the FreeIPA server.

```bash
# yum -y install ipa-server ipa-server-dns

```

--------------------------------

### Install Apache2 Module

Source: https://lpic2.goffinet.org/service_apache.html

Install a specific Apache2 module using apt-get install. Replace '[module-name]' with the actual module name.

```bash
sudo apt-get install [module-name]
```

--------------------------------

### Install Curl and Check HTTP Headers

Source: https://lpic2.goffinet.org/service_apache.html

Install the 'curl' package to fetch web content. Use 'curl -I' to retrieve only the HTTP headers of a given URL, useful for checking server responses.

```bash
# apt-get install curl
# curl -I 127.0.0.1
```

--------------------------------

### Create Sample Files (Elegant Loop)

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Generates ten sample files named 'fichier0' through 'fichier9' using a C-style for loop for more elegant iteration.

```bash
$ for ((i=0;i<10;i=i+1)); do echo "fichier$i" > fichier$i; done
```

--------------------------------

### Adding a User Script Example

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

A placeholder for a script that might add a user.

```bash
#!/bin/bash
adduser $1

```

--------------------------------

### Define VM Management and Kickstart Preparation

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Shell functions to manage virtual machine lifecycle and prepare Kickstart configuration files. Ensure the 'www' directory exists and is accessible.

```shell
## 6. $temp : nom temporaire pour le fichier Kickstart
temp="$name-$(uuidgen | cut -d - -f 1)"
## 7. $www : emplacement physique des fichiers de configuration
www=/var/www/html/conf

gest_dom ()
{
## Gestion des noms utilisés, ici pour un lab (à améliorer)
## Arrêt et retrait de la VM
echo "Arrêt et retrait de la VM $name" 
/bin/virsh destroy $name; /bin/virsh undefine $name
#Erase the VM disk
rm -f $vol/$name.*
}


prep_ks ()
{
## Préparation du fichier Kickstart
echo "Préparation du fichier Kickstart"

##
touch $www/$temp.ks
cat << EOF > $www/$temp.ks 
install
keyboard --vckeymap=be-oss --xlayouts='be (oss)'
reboot
rootpw --plaintext testtest
timezone Europe/Brussels
url --url="$mirror"
lang fr_BE
firewall --disabled
network --bootproto=dhcp --device=eth0
network --hostname=$name
# network --device=eth0 --bootproto=static --ip=192.168.22.10 --netmask 255.255.255.0 --gateway 192.168.22.254 --nameserver=192.168.22.11 --ipv6 auto
auth  --useshadow  --passalgo=sha512
text
firstboot --enable
skipx
ignoredisk --only-use=vda
bootloader --location=mbr --boot-drive=vda
zerombr
clearpart --all --initlabel
part /boot --fstype="xfs" --ondisk=vda --size=500
part swap --recommended
part pv.00 --fstype="lvmpv" --ondisk=vda --size=500 --grow
volgroup local0 --pesize=4096 pv.00
logvol /  --fstype="xfs"  --size=4000 --name=root --vgname=local0
%packages
@core
%end
%post
#yum -y update
mkdir /root/.ssh
curl $conf/id_rsa.pub > /root/.ssh/authorized_keys
sed -i 's/PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config
%end
EOF

chown apache:apache $www/$temp.ks
}

```

--------------------------------

### Install Drupal 7 from Source

Source: https://lpic2.goffinet.org/service_apache.html

Downloads Drupal 7, its French translation, extracts it, moves it to the web root, and sets appropriate ownership and permissions.

```bash
cd /var/www
wget https://ftp.drupal.org/files/projects/drupal-7.41.tar.gz
wget http://ftp.drupal.org/files/translations/7.x/drupal/drupal-7.41.fr.po
tar -xvzf drupal-7.41.tar.gz
mv drupal-7.41.fr.po drupal-7.41/profiles/standard/translations/
chown -R www-data.www-data drupal-7.41
chmod g+w -R drupal-7.41
mv drupal-7.41 monsite01
```

--------------------------------

### Define Custom Installation Layout

Source: https://lpic2.goffinet.org/service_apache.html

Defines a custom installation layout named 'Lab' within the 'config.layout' file. This allows specifying custom installation paths, such as '/opt/prod/apache24'.

```text
<Layout Lab>
    prefix:        /opt/prod/apache24
    exec_prefix:   ${prefix}
    bindir:        ${exec_prefix}/bin
    sbindir:       ${exec_prefix}/bin
    libdir:        ${exec_prefix}/lib
    libexecdir:    ${exec_prefix}/modules
    mandir:        ${prefix}/man
    sysconfdir:    ${prefix}/conf
    datadir:       ${prefix}
    installbuilddir: ${datadir}/build
    errordir:      ${datadir}/error
    iconsdir:      ${datadir}/icons
    htdocsdir:     ${datadir}/htdocs
    manualdir:     ${datadir}/manual
    cgidir:        ${datadir}/cgi-bin
    includedir:    ${prefix}/include
    localstatedir: ${prefix}
    runtimedir:    ${localstatedir}/logs
    logfiledir:    ${localstatedir}/logs
    proxycachedir: ${localstatedir}/proxy
</Layout>
```

--------------------------------

### Install Drush Utility

Source: https://lpic2.goffinet.org/service_apache.html

Installs Drush, a command-line shell and scripting interface for Drupal.

```bash
# apt-get install drush
```

--------------------------------

### Start Apache Server After Adding Listen Directive

Source: https://lpic2.goffinet.org/service_apache.html

Starts the Apache server with the updated configuration file that now includes the 'Listen 80' directive. The server should start without the 'no listening sockets available' error.

```bash
# httpd -f /opt/prod/apache24/conf/httpd_1.conf
AH00558: httpd: Could not reliably determine the server\'s fully qualified domain name, using 192.168.122.170. Set the 'ServerName' directive globally to suppress this message
```

--------------------------------

### Install LVM2 Package

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Installs the LVM2 package using either apt-get for Debian/Ubuntu or yum for CentOS/Fedora/RHEL.

```bash
apt-get install lvm2 || yum install lvm2

```

--------------------------------

### Configure httpd Content Context

Source: https://lpic2.goffinet.org/selinux.html

Install httpd, inspect its default web content contexts, create a new directory, assign it the httpd_sys_content_t context using semanage fcontext, and apply the changes with restorecon.

```bash
# yum -y install httpd
# ls -Z /var/www
drwxr-xr-x. root root system_u:object_r:httpd_sys_script_exec_t:s0 cgi-bin
drwxr-xr-x. root root system_u:object_r:httpd_sys_content_t:s0 html
# mkdir /opt/www
# semanage fcontext -a -t httpd_sys_content_t "/opt/www(/.*)?"
# restorecon -R -v /opt/www
restorecon reset /opt/www context unconfined_u:object_r:usr_t:s0->unconfined_u:object_r:httpd_sys_content_t:s0
```

--------------------------------

### First virt-install Script

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Automate the installation of a virtual machine using the virt-install command-line tool. This is useful for scripting deployments.

```bash
virt-install
```

--------------------------------

### Install XFS Tools

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Installs the xfsprogs package, which contains utilities for managing XFS filesystems on Debian/Ubuntu systems.

```bash
apt-get install xfsprogs
```

--------------------------------

### Setup Shared Directories and User Permissions

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

This script sets up a shared directory structure, creates users and groups, assigns ownership, and configures permissions including the sticky bit and SGID for enhanced security and collaboration.

```bash
groupadd omega
adduser -G omega alpha
adduser -G omega beta
passwd alph
passwd beta
ln -s /opt/share1 /home/alpha/share1
ln -s /opt/share2 /home/alpha/share2
ln -s /opt/share3 /home/alpha/share3
ln -s /opt/share1 /home/beta/share1
ln -s /opt/share2 /home/beta/share2
ln -s /opt/share3 /home/beta/share3
chown alpha:omega /opt/share1
chown alpha:omega /opt/share2
chown alpha:omega /opt/share3
chmod g+ws,+t,o-rx /opt/share1
chmod g+ws,+t,o-rx /opt/share2
chmod g+ws,+t,o-rx /opt/share3
```

--------------------------------

### Install mdadm for Software RAID

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Installs the necessary package for managing software RAID devices on Debian/Ubuntu systems.

```bash
apt-get install mdadm
```

--------------------------------

### Install OpenSSH server

Source: https://lpic2.goffinet.org/demarrage_et_noyau.html

Use `yum` to install the `openssh-server` package. This is a prerequisite for managing the SSH service with systemctl.

```bash
# yum -y install openssh-server

```

--------------------------------

### Kickstart File 'core.ks'

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

A Kickstart file named 'core.ks' used for automating the installation of Red Hat Enterprise Linux. It defines partitioning, package selection, and post-installation scripts.

```bash
# Fichier kickstart core.ks

# System language
lang en_US.UTF-8
keyboard us
timezone UTC --isUtc

# Network information
network --bootproto=dhcp --device=eth0 --ipv6=auto
# Use text mode install
text

# Reboot after installation
reboot

# Root password
rootpw --iscrypted $1$abcdefgh$ijklmnopqrstuvwxyz.0

# System authorization information
auth --enableshadow --passalgo=sha512

# SELinux configuration
selinux --enforcing

# Firewall configuration
firewall --disabled

# Partition clearing information
clearpart --all --initlabel

# Disk partitioning
part /boot --fstype="xfs" --size=500
part swap --fstype="swap" --size=2048
part / --fstype="xfs" --grow --size=1

# Package selection
%packages
@core
%end

# Post-installation script
%post --log=/root/ks-post.log
# Example: update packages
yum update -y

# Example: create a user
useradd -m -s /bin/bash testuser
echo "password" | passwd --stdin testuser

# Example: enable sshd
systemctl enable sshd

%end

```

--------------------------------

### Install UFW Firewall

Source: https://lpic2.goffinet.org/securiser_un_serveur_ubuntu.html

Installs the Uncomplicated Firewall (UFW) on Ubuntu. Use this to manage network traffic rules.

```bash
sudo apt-get install ufw
```

--------------------------------

### Run Apache with Custom Configuration

Source: https://lpic2.goffinet.org/service_apache.html

Attempts to start the Apache server using a specified configuration file. This command may fail if essential directives like 'Listen' are missing.

```bash
# httpd -f /opt/prod/apache24/conf/httpd_1.conf
AH00558: httpd: Could not reliably determine the server\'s fully qualified domain name, using 192.168.122.170. Set the 'ServerName' directive globally to suppress this message
no listening sockets available, shutting down
AH00015: Unable to open logs
```

--------------------------------

### Enable VM Autostart with virsh

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Configure a virtual machine to automatically start when the host system boots up.

```bash
virsh autostart vm1
```

--------------------------------

### virt-install Script for VM Creation

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

A bash script that automates the creation of virtual machines using virt-install. It takes the Kickstart file type and domain name as arguments and configures network and storage settings.

```bash
#/bin/bash

## usage : autovm.sh [type] [nom domaine]
##         autovm.sh $1 $2
## types (appel d'un fichier kickstarts):
##         core

## Variables
## 1. $type : Fichier Kickstart
type=$1
## 2. $name : Nom du domaine
name=$2
## 3. $vol : Emplacement des disques
vol=/var/lib/libvirt/images
## 4. $conf : Emplacement HTTP des fichiers Kickstart
conf=http://192.168.122.1/conf
## 5. $mirror : Sources d'installation HTTP
mirror=http://192.168.122.1/repo
## Miroirs publics
#mirror=http://centos.mirrors.ovh.net/ftp.centos.org/7/os/x86_64
#mirror=http://ftp.belnet.be/ftp.centos.org/7/os/x86_64
#mirror=http://mirror.i3d.net/pub/centos/7/os/x86_64
## 6. $temp : nom temporaire pour le fichier Kickstart
temp="$name-$(uuidgen | cut -d - -f 1)"
## 7. $www : emplacement physique des fichiers de configuration
www=/var/www/html/conf

gest_dom ()
{
## Gestion des noms utilisés, ici pour un lab (à améliorer)
## Arrêt et retrait de la VM
echo "Arrêt et retrait de la VM $name"
/bin/virsh destroy $name; /bin/virsh undefine $name --remove-all-storage
}


prep_ks ()
{
## Préparation du fichier Kickstart
echo "Préparation du fichier Kickstart"
cp $www/$type.ks $www/$temp.ks
chown apache:apache $www/$temp.ks
## Report du hostname 
sed -i "s/network --hostname=.*/network --hostname=$name/g" $www/$temp.ks
## 
}

virt_install ()
{

```

--------------------------------

### Email Header Example

Source: https://lpic2.goffinet.org/audit_du_reseau.html

This is an example of an email header, showing received information, authentication results, and message details.

```text
Delivered-To: goffinet@goffinet.eu
Received: by 10.182.155.65 with SMTP id vu1csp53918obb;
        Sat, 11 Jan 2014 20:21:59 -0800 (PST)
X-Received: by 10.194.85.75 with SMTP id f11mr15767833wjz.47.1389500518905;
        Sat, 11 Jan 2014 20:21:58 -0800 (PST)
Return-Path: <zozo@zozo.be>
Received: from mailrelay005.isp.belgacom.be (mailrelay005.isp.belgacom.be. [195.238.6.171])
        by mx.google.com with ESMTP id bp4si6953453wjb.110.2014.01.11.20.21.58
        for <goffinet@goffinet.eu>;
        Sat, 11 Jan 2014 20:21:58 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning zozo@zozo.be does not designate 195.238.6.171 as permitted sender) client-ip=195.238.6.171;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning zozo@zozo.be does not designate 195.238.6.171 as permitted sender) smtp.mail=zozo@zozo.be
Message-Id: <073a06$ornfl8@relay.skynet.be>
Date: 12 Jan 2014 05:21:36 +0100
X-Belgacom-Dynamic: yes
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AnGJADQY0lJtgd8C/2dsb2JhbABagwtwB4IvJ4J1okgBkg4BYxd0gkWBeiSIGwGaEpQypGSCZ4E6BKosg2k
Received: from 2.223-129-109.adsl-dyn.isp.belgacom.be (HELO 10.10.10.10) ([109.129.223.2])
  by relay.skynet.be with ESMTP; 12 Jan 2014 05:21:36 +0100
From: <zozo@zozo.be>
To: <goffinet@goffinet.eu>
Subject: Testing one two three

This is only a test. Please do not panic. If this works, then all is well, else all is not well.
In closing, Lorem ipsum dolor sit amet, consectetur adipiscing elit.
```

--------------------------------

### Create Sample Files

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Generates ten sample files named 'fichier0' through 'fichier9' in the current directory.

```bash
$ for i in 0 1 2 3 4 5 6 7 8 9; do echo "fichier$i" > fichier$i; done
```

--------------------------------

### Install DHCP Server

Source: https://lpic2.goffinet.org/services_dns_dhcp.html

Installs the DHCP server package using yum. Ensure the package name is correct for your distribution.

```bash
yum -y install dhcp
```

--------------------------------

### Read /etc/fstab and Mount All

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Use mount -a to read the /etc/fstab file and mount all file systems defined within it.

```bash
mount -a
```

--------------------------------

### Install NFS Client Utilities

Source: https://lpic2.goffinet.org/partages.html

Install the necessary packages for NFS client functionality on a Linux system using yum.

```bash
yum install -y nfs-utils
```

--------------------------------

### Enable and Start chronyd Service

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Starts the chronyd service for time synchronization, which is important for distributed systems and accurate logging.

```bash
# systemctl enable chronyd && systemctl start chronyd
```

--------------------------------

### Traceroute Example Output

Source: https://lpic2.goffinet.org/configuration_du_reseau.html

This is an example output of the traceroute command, showing the hops taken to reach a destination IP address.

```text
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
 1  WDR3600-D3.lan (192.168.100.1)  3.299 ms  3.518 ms  3.434 ms
 2  88.147.32.1 (88.147.32.1)  27.768 ms  27.690 ms  36.957 ms
 3  88.147.95.13 (88.147.95.13)  36.936 ms  37.300 ms  37.230 ms
 4  ge-2-2-2-193.bru20.ip4.tinet.net (77.67.76.121)  37.154 ms  37.076 ms  37.059 ms
 5  xe-0-0-2.ams60.ip4.tinet.net (89.149.180.121)  42.757 ms  42.678 ms  43.997 ms
 6  as15169.ams60.ip4.tinet.net (141.136.102.246)  64.105 ms  60.201 ms  78.499 ms
 7  209.85.248.92 (209.85.248.92)  59.925 ms 209.85.248.112 (209.85.248.112)  34.158 ms  33.950 ms
 8  72.14.238.69 (72.14.238.69)  40.288 ms 209.85.253.249 (209.85.253.249)  64.905 ms  52.239 ms
 9  209.85.254.231 (209.85.254.231)  58.553 ms  59.042 ms  58.659 ms
10  209.85.255.51 (209.85.255.51)  64.564 ms 209.85.254.189 (209.85.254.189)  58.307 ms 216.239.49.30 (216.239.49.30)  58.246 ms
11  * * *
12  google-public-dns-a.google.com (8.8.8.8)  58.556 ms  58.716 ms  43.237 ms
```

--------------------------------

### SMTP Conversation Example

Source: https://lpic2.goffinet.org/audit_du_reseau.html

This is an example log of a successful SMTP conversation, showing the commands sent and the server's responses.

```text
220 relay.skynet.be ESMTP
250-relay.skynet.be
250-8BITMIME
250 SIZE 16777216
250 sender <zozo@zozo.be> ok
250 recipient <goffinet@goffinet.eu> ok
354 go ahead
250 ok:  Message 170208462 accepted
221 relay.skynet.be
```

--------------------------------

### Update System Packages

Source: https://lpic2.goffinet.org/virtualisation_kvm.html

Before installing new software, it's recommended to update your system's package list and installed packages.

```bash
yum update
```

--------------------------------

### Create a Test File

Source: https://lpic2.goffinet.org/disques_et_stockage_lvm.html

Create an empty test file on the mounted file system.

```bash
touch /mnt/data1/test.txt
```
Tokens:
Raw