Details, Installation, & Set-up of Debian based Linux Servers
From Wiki
Server set-up and Associated Details:
Typical SERVER SET-UP
- Base Install of Debian Sarge / Base Install of Debian Squeeze
- #or Base Install of Debian Sarge with RAID
- Change from DHCP to Manual IP
- How to obtain Packages using APT
Range of SERVICEs, and INSTALLATION HOW-To's
All these services are based on a Debian base install using the current stable Debian Sarge, unless specifically stated otherwise. Similiarly, all these services are installed from Debian Packages from the Stable Repository using APT, unless specifically stated otherwise. It may be the case that the order of installation, or sequence of installing various packages may change, however APT & Debian Packages will take care of *any* dependencies.
A Service is typically one which typically requires ROOT permission to install, runs as a Special User on the server, starts up at boot time, and provides a key base service, with which applications run on top of.
- Manual setup of Iptables Firewall rules & startup scripts
- Shorewall Firewall
- DNS - Bind9
- Apache2_SSL_PHP5_MySQL5
Apache 2 & SSL - PHP4 - MySQL 4.1 old Etch setup - Postfix SMTP
- Courier IMAPS Server - Maildir
- Secure Outgoing SMTP via Postfix, Courier, TLS and SASL -- 7.5 - Authed Outgoing SMTP with Postfix and MySQL
- Squid Proxy
- Samba
- Snmpd & mrtg
- Munin Statistics
- Netsaint / Nagios
- ntp - Network Time Protocol
- ProFTPd Server
- Quota
- SMART
- NFS
- Anyterm
- Ajaxterm - Web SSH Terminal, alternative to Anyterm
- Trac and SVN
- Mailman
- Dante Socks Server
- Spamassassin setup and config
- Duplicity - secure incremental backup
- Procmail - setup with postfix
- Wine
- openvpn
- PPTP - vpn
- smokeping
- Graphical Desktop and VNCserver
- Reverse Proxy with apache mod_proxy
APPLICATIONS INSTALLED
An application is one which can be installed by a User with limited permissions, runs ontop of a set of required services, e.g. MySQL, PHP, and is only run when accessed/required by a user.
- Squirrelmail
- Webalizer
- Awstats
- Mediawiki
- sun_jdk
- Rootkit Detection
- snort Network Intrusion Detection
- vnstat Network Traffic Logger and Monitor
- roundcube
- planet RSS News Feed Aggregator
Typical VHOSTS
VHOSTS - Virtual Hosts, are typically Web addresses which apache handles and serves out. Virtual Hosts require a DNS entry pointing to an IP Address where Apache is located. See the example of setting up these VHOSTS in Apache.
- http://burkesys.com
- http://wiki.kartbuilding.net
- https://mail.burkesys.com
- http://www.kartbuilding.net
- http://monitor.burkesys.com
Virtual Server (XEN) set-up and Associated Details
Xen and Debian SqueezeSetup of Xen Xen 4.0.1 on Debian Squeeze
|
ArchiveSetup of Base Hosting Server with XEN3.0 (dom0)There are a number of routes that can be taken when installing Xen on a Server, in order to prepare it to run Virtual Servers. These routes/options are as follows:
Modify XEN (dom0): Resize Partitions, RAID1 & LVM Howto'sCreate & Manage XEN Virtual Servers (domU)
Streamlining Xen
Setup of New Xen ServerUpgrade of Xen through the years
Setup of Xen 3.2 (dom0) on Debian LennyXen Networking |
KVM Setup
Setup of KVM Guest VMs
Other KVM Info
- mount kvm file based image (disk.img) on host computer
- increase size of raw disk image with partitions
- Provide Boot Menu options for VMs accessible using VNC
- IPv6 Setup on KVM Host and Guest VMs
Linux Tips, Tricks & Commands to be Remembered:
Scripts OF THE TRADE
- Convert mbox to Maildir for all users
- Find & Remove an old SSH Key for all users
- Find log files and copy to a folder
- Search for all Processes and kill them all
- links to scripts and cmdline tricks
Tips and Tricks
- mount an ISO (CD Image) on linux
- create favicon.ico
- Limit User resources
- Check when a fsck is due
- Obtain root shell after booting
- Resize raid array and create second array
- Fork bomb - DOS a Linux Server via command line
- Automate taking screenshots of webpages
TOOLS OF THE TRADE
Remove Management of Servers
Upgrades and Other Installations
Upgrading Debian Sarge to Debian Etch
- How to Upgrade Sarge to Etch via apt
- X Server Upgrading Issues
- Minor snmp Issue
- smartd and smartmontools problem/issue
- Syntax Highlighting Problems with vim
- nagios upgrade issue
- Squid Issue, Etch and a 2.4 Kernel
- Recommended Packages to Install after Upgrading to Etch
- Issue with mounting root on a raid1 partition
Upgrading Debian Etch to Debian Lenny (5)
Upgrading Ubuntu Hardy LTS to Ubuntu Lucid LTS
Setting up a Secure and Stable Linux OS
Work for the Future:
- Secure Backup (gpg) across Cluster - Done. See: Duplicity - secure incremental backup
- Roll Out LDAP
- Try and install vmware on domU to run Windows