From Wiki

Contents 1 Server set-up and Associated Details: 1.1 Typical SERVER SET-UP 1.2 Range of SERVICEs, and INSTALLATION HOW-To's 1.3 APPLICATIONS INSTALLED 1.4 Typical VHOSTS 2 Virtual Server (XEN) set-up and Associated Details 2.1 Xen and Debian Squeeze 2.1.1 Setup of Xen Xen 4.0.1 on Debian Squeeze 2.2 Archive 2.2.1 Setup of Base Hosting Server with XEN3.0 (dom0) 2.2.2 Modify XEN (dom0): Resize Partitions, RAID1 & LVM Howto's 2.2.3 Create & Manage XEN Virtual Servers (domU) 2.2.4 Streamlining Xen 2.2.5 Setup of New Xen Server 2.2.6 Upgrade of Xen through the years 2.2.7 Setup of Xen 3.2 (dom0) on Debian Lenny 2.2.8 Xen Networking 3 KVM Setup 3.1 Setup of KVM Guest VMs 3.2 Other KVM Info 4 Linux Tips, Tricks & Commands to be Remembered: 4.1 Scripts OF THE TRADE 4.2 Tips and Tricks 4.3 TOOLS OF THE TRADE 4.4 Remove Management of Servers 5 Upgrades and Other Installations 5.1 Upgrading Debian Sarge to Debian Etch 5.2 Upgrading Debian Etch to Debian Lenny (5) 5.3 Upgrading Ubuntu Hardy LTS to Ubuntu Lucid LTS 5.4 Setting up a Secure and Stable Linux OS 5.5 Work for the Future:

Server set-up and Associated Details:

Typical SERVER SET-UP

• Base Install of Debian Sarge / Base Install of Debian Squeeze
• #or Base Install of Debian Sarge with RAID
• Change from DHCP to Manual IP
• How to obtain Packages using APT

Range of SERVICEs, and INSTALLATION HOW-To's

All these services are based on a Debian base install using the current stable Debian Sarge, unless specifically stated otherwise. Similiarly, all these services are installed from Debian Packages from the Stable Repository using APT, unless specifically stated otherwise. It may be the case that the order of installation, or sequence of installing various packages may change, however APT & Debian Packages will take care of *any* dependencies.

A Service is typically one which typically requires ROOT permission to install, runs as a Special User on the server, starts up at boot time, and provides a key base service, with which applications run on top of.

1. Manual setup of Iptables Firewall rules & startup scripts
2. Shorewall Firewall
3. DNS - Bind9
4. Apache2_SSL_PHP5_MySQL5 Apache 2 & SSL - PHP4 - MySQL 4.1 old Etch setup
5. Postfix SMTP
6. Courier IMAPS Server - Maildir
7. Secure Outgoing SMTP via Postfix, Courier, TLS and SASL -- 7.5 - Authed Outgoing SMTP with Postfix and MySQL
8. Squid Proxy
9. Samba
10. Snmpd & mrtg
11. Munin Statistics
12. Netsaint / Nagios
13. ntp - Network Time Protocol
14. ProFTPd Server
15. Quota
16. SMART
17. NFS
18. Anyterm
19. Ajaxterm - Web SSH Terminal, alternative to Anyterm
20. Trac and SVN
21. Mailman
22. Dante Socks Server
23. Spamassassin setup and config
24. Duplicity - secure incremental backup
25. Procmail - setup with postfix
26. Wine
27. openvpn
28. PPTP - vpn
29. smokeping
30. Graphical Desktop and VNCserver
31. Reverse Proxy with apache mod_proxy

APPLICATIONS INSTALLED

An application is one which can be installed by a User with limited permissions, runs ontop of a set of required services, e.g. MySQL, PHP, and is only run when accessed/required by a user.

1. Squirrelmail
2. Webalizer
3. Awstats
4. Mediawiki
5. sun_jdk
6. Rootkit Detection
7. snort Network Intrusion Detection
8. vnstat Network Traffic Logger and Monitor
9. roundcube
10. planet RSS News Feed Aggregator

Typical VHOSTS

VHOSTS - Virtual Hosts, are typically Web addresses which apache handles and serves out. Virtual Hosts require a DNS entry pointing to an IP Address where Apache is located. See the example of setting up these VHOSTS in Apache.

1. http://burkesys.com
2. http://wiki.kartbuilding.net
3. https://mail.burkesys.com
4. http://www.kartbuilding.net
5. http://monitor.burkesys.com

Virtual Server (XEN) set-up and Associated Details

Xen and Debian Squeeze Setup of Xen Xen 4.0.1 on Debian Squeeze Xen 4.0.1 on Debian Squeeze dom0 and domU

Archive Setup of Base Hosting Server with XEN3.0 (dom0) There are a number of routes that can be taken when installing Xen on a Server, in order to prepare it to run Virtual Servers. These routes/options are as follows: Use Debian Etch Xen Install -- The current working option with no problems. Use Debian Backports -- The chosen option, as it worked with least hassle. Use Xen Binaries Use Xen Source and Compiling Use Debian Testing (etch) Packages Modify XEN (dom0): Resize Partitions, RAID1 & LVM Howto's Resize & Create Partitions in Debian RAID 1 and Xen (dom0) LVM on XEN (dom0) Create & Manage XEN Virtual Servers (domU) Create DomU Create Centos5 DomU on Debian Etch Dom0 Manage XEND Ongoing Experiences with Xen Resize/Increase the Size of a File Based DomU Xen Filesystem Streamlining Xen Automatic domU Installs using xen-tools Setup of New Xen Server Install and Config Base OS Upgrade of Xen through the years Moving from Xen Backports to Debian Etch Xen Packages - Attempt1 Upgrade domU to Lenny Upgrade Xen on dom0 Setup of Xen 3.2 (dom0) on Debian Lenny Basic Setup of Xen3.2 32bit Setup of Windows domU on Debian lenny dom0 Xen Networking Xen Networking

KVM Setup

• KVM Setup on Debian Squeeze (Old Lenny KVM Setup)

Setup of KVM Guest VMs

• Setup of Windows Server 2008 Guest on KVM
• Migrate Xen based VM (domU) to KVM based VM

Other KVM Info

• mount kvm file based image (disk.img) on host computer
• increase size of raw disk image with partitions
• Provide Boot Menu options for VMs accessible using VNC
• IPv6 Setup on KVM Host and Guest VMs

Linux Tips, Tricks & Commands to be Remembered:

_ alias _ apache _ awstats _ backup mysql database script _ backup via web download _ bash - shell tips and tricks _ benchmark tests _ cat _ chmod _ chown _ chsh _ corkscrew - ssh_over_https _ crontab _ debian logs _ dict _ dns - General Usage Tips _ dnstunnel - Tunnel SSH over DNS _ ffmpeg - Audio and Video Editing _ File Permissions _ find _ Firefox and Java Plugin _ FTP _ getent _ gnupg _ grep _ HEAD _ hellanzb _ history _ htop _ ifup-ifdown _ iptables_forward _ IRC and irssi _ kill, killall - End a Process _ locale _ ldap _ ls _ lsof _ lspci

_ mail etc. _ memory management _ MySQL _ Nikto - Web Server and CGI Scanner Version _ ncftp _ nmap - Network exploration tool and security scanner _ oom - Out of Memory _ Password Audit & Securing _ pine, pine set-up & pinegpg _ port forwarding _ procmail _ rsync _ suPHP _ pwgen _ rename _ scp _ screen _ sed - replace text in files via bash _ ssh _ sshkeys _ svn & trac _ users_manage _ script - Record/Log a SSH terminal Session _ search script _ Secure Backup _ sendmail _ smbmount _ sqlite _ sshfs - Mounting a remote directory over ssh _ strace _ synergy _ sysv-rc-conf _ tar _ tail _ tcpdump _ vi/vim _ vnstat - Network Traffic Logger and Monitor _ vodasms - send Text Messages _ wall - write a message to all users _ wc _ write _ zgrep _ zip

Scripts OF THE TRADE

• Convert mbox to Maildir for all users
• Find & Remove an old SSH Key for all users
• Find log files and copy to a folder
• Search for all Processes and kill them all
• links to scripts and cmdline tricks

Tips and Tricks

• mount an ISO (CD Image) on linux
• create favicon.ico
• Limit User resources
• Check when a fsck is due
• Obtain root shell after booting
• Resize raid array and create second array
• Fork bomb - DOS a Linux Server via command line
• Automate taking screenshots of webpages

TOOLS OF THE TRADE

• putty
• winscp
• vncviewer

Remove Management of Servers

• IP KVM Serial Console Switch

Upgrades and Other Installations

Upgrading Debian Sarge to Debian Etch

• How to Upgrade Sarge to Etch via apt
• X Server Upgrading Issues
• Minor snmp Issue
• smartd and smartmontools problem/issue
• Syntax Highlighting Problems with vim
• nagios upgrade issue
• Squid Issue, Etch and a 2.4 Kernel
• Recommended Packages to Install after Upgrading to Etch
• Issue with mounting root on a raid1 partition

Upgrading Debian Etch to Debian Lenny (5)

• Upgrade Trac
• Further issues upgrading to Lenny

Upgrading Ubuntu Hardy LTS to Ubuntu Lucid LTS

• dist-upgrading hardy to lucid

Setting up a Secure and Stable Linux OS

• Cleaning and Securing a Fedora install
• linode-server-setup

Work for the Future:

• Secure Backup (gpg) across Cluster - Done. See: Duplicity - secure incremental backup
• Roll Out LDAP
• Try and install vmware on domU to run Windows

http://wiki.sourcemage.org/Install_under_Xen