**Details, Installation, & Set-up of Debian based Linux Servers**
===== Server set-up and Associated Details=====
==== Typical SERVER SET-UP ====
* [[Base Install of Debian Sarge]] / [[Base Install of Debian Squeeze]]
* #or [[Base Install of Debian Sarge with RAID]]
* [[Change from DHCP to Manual IP]]
* [[How to obtain Packages using APT]]
==== Range of SERVICEs, and INSTALLATION HOW-To's ====
All these services are based on a Debian base install using the current stable Debian Sarge, unless specifically stated otherwise. Similiarly, all these services are installed from Debian Packages from the Stable Repository using [[How to obtain Packages using APT|APT]], unless specifically stated otherwise. It may be the case that the order of installation, or sequence of installing various packages may change, however APT & Debian Packages will take care of *any* dependencies.
A Service is typically one which typically requires ROOT permission to install, runs as a Special User on the server, starts up at boot time, and provides a key base service, with which applications run on top of.
- [[Iptables Firewall|Manual setup of Iptables Firewall rules & startup scripts]]
- [[Shorewall Firewall]]
- [[DNS - Bind9]]
- [[Apache2_SSL_PHP5_MySQL5]] [[Apache 2 & SSL - PHP4 - MySQL 4.1]] old Etch setup
- [[Postfix SMTP]]
- [[Courier IMAPS Server - Maildir]]
- [[Secure Outgoing SMTP via Postfix, Courier, TLS and SASL]] -- 7.5 - [[Authed Outgoing SMTP with Postfix and MySQL]]
- [[Squid Proxy]]
- [[Samba]]
- [[Snmpd & mrtg]]
- [[Munin Statistics]]
- [[Netsaint / Nagios]]
- [[ntp - Network Time Protocol]]
- [[ProFTPd Server]]
- [[Quota]]
- [[SMART]]
- [[NFS]]
- [[Anyterm]]
- [[Ajaxterm|Ajaxterm - Web SSH Terminal, alternative to Anyterm]]
- [[Trac and SVN]]
- [[Mailman]]
- [[Dante Socks Server]]
- [[Spamassassin setup and config]]
- [[Duplicity - secure incremental backup]]
- [[Procmail - setup with postfix]]
- [[Wine]]
- [[openvpn]]
- [[PPTP - vpn]]
- [[smokeping]]
- [[xfce-vncserver|Graphical Desktop and VNCserver]]
- [[Reverse Proxy with apache mod_proxy]]
==== APPLICATIONS INSTALLED ====
An application is one which can be installed by a User with limited permissions, runs ontop of a set of required services, e.g. MySQL, PHP, and is only run when accessed/required by a user.
- [[Squirrelmail]]
- [[Webalizer]]
- [[Awstats]]
- [[Mediawiki]]
- [[sun_jdk]]
- [[Rootkit Detection]]
- [[snort]] Network Intrusion Detection
- [[vnstat]] Network Traffic Logger and Monitor
- [[roundcube]]
- [[planet]] RSS News Feed Aggregator
==== Typical VHOSTS ====
VHOSTS - Virtual Hosts, are typically Web addresses which apache handles and serves out. Virtual Hosts require a DNS entry pointing to an IP Address where Apache is located. See the example of setting up these [[Apache 2 & SSL - PHP4 - MySQL 4.1|VHOSTS in Apache]].
- http://burkesys.com
- http://wiki.kartbuilding.net
- https://mail.burkesys.com
- http://www.kartbuilding.net
- http://monitor.burkesys.com
===== Virtual Server (XEN) set-up and Associated Details =====
==== Xen and Debian Squeeze ====
=== Setup of Xen Xen 4.0.1 on Debian Squeeze ===
* [[Xen 4.0.1 on Debian Squeeze dom0 and domU]]
==== Archive ====
=== Setup of Base Hosting Server with XEN3.0 (dom0) ===
There are a number of routes that can be taken when installing Xen on a Server, in order to prepare it to run Virtual Servers. These routes/options are as follows:
- Use [[Debian Etch Xen Install]] -- The current working option with no problems.
- Use [[XenDebianBackports|Debian Backports]] -- The chosen option, as it worked with least hassle.
- Use [[Xen Binaries]]
- Use [[Xen Source and Compiling]]
- Use Debian Testing (etch) Packages
=== Modify XEN (dom0): Resize Partitions, RAID1 & LVM Howto's ===
- [[Resize & Create Partitions in Debian]]
- [[RAID 1 and Xen (dom0)]]
- [[LVM on XEN (dom0)]]
=== Create & Manage XEN Virtual Servers (domU) ===
- [[Create DomU]]
- [[Create Centos5 DomU on Debian Etch Dom0]]
- [[Manage XEND]]
- [[Ongoing Experiences with Xen]]
- [[Resize/Increase the Size of a File Based DomU Xen Filesystem]]
=== Streamlining Xen ===
* Automatic domU Installs using [[xen-tools]]
=== Setup of New Xen Server ===
- [[Install and Config Base OS]]
=== Upgrade of Xen through the years ===
* [[Moving from Xen Backports to Debian Etch Xen Packages - Attempt1]]
* [[Upgrade domU to Lenny]]
* [[Upgrade Xen on dom0]]
=== Setup of Xen 3.2 (dom0) on Debian Lenny ===
* [[Basic Setup of Xen3.2 32bit]]
* [[Setup of Windows domU on Debian lenny dom0]]
=== Xen Networking ===
* [[Xen Networking]]
===== KVM Setup =====
* [[KVM Setup on Debian Jessie]] | [[KVM Setup on Debian Squeeze]] ([[KVM Setup on Debian Lenny|Old Lenny KVM Setup]])
==== Setup of KVM Guest VMs ====
* [[Setup of Windows Server 2008 Guest on KVM]]
* [[Migrate Xen based VM (domU) to KVM based VM]]
==== Other KVM Info ====
* [[mount kvm file based image (disk.img) on host computer]]
* [[increase size of raw disk image with partitions]]
* [[Provide Boot Menu options for VMs accessible using VNC]]
* [[IPv6 Setup on KVM Host and Guest VMs]]
===== Linux Tips, Tricks & Commands to be Remembered:=====
* _ [[alias]]
* _ [[apache]]
* _ [[awstats]]
* _ [[backup mysql database script]]
* _ [[backup via web download]]
* _ [[bash]] - shell tips and tricks
* _ [[benchmark tests]]
* _ [[cat]]
* _ [[chmod]]
* _ [[chown]]
* _ [[chsh]]
* _ [[corkscrew - ssh_over_https]]
* _ [[crontab]]
* _ [[debian logs]]
* _ [[dict]]
* _ [[dns]] - General Usage Tips
* _ [[dnstunnel]] - Tunnel SSH over DNS
* _ [[ffmpeg]] - Audio and Video Editing
* _ [[File Permissions]]
* _ [[find]]
* _ [[Firefox and Java Plugin]]
* _ [[FTP]]
* _ [[getent]]
* _ [[gnupg]]
* _ [[grep]]
* _ [[HEAD]]
* _ [[hellanzb]]
* _ [[history]]
* _ [[htop]]
* _ [[ifup-ifdown]]
* _ [[iptables_forward]]
* _ [[irssi|IRC and irssi]]
* _ [[kill, killall]] - End a Process
* _ [[locale]]
* _ [[ldap]]
* _ [[ls]]
* _ [[lsof]]
* _ [[lspci]]
* _ [[mail - mutt etc|mail etc.]]
* _ [[memory management]]
* _ [[MySQL]]
* _ [[Nikto]] - Web Server and CGI Scanner Version
* _ [[ncftp]]
* _ [[nmap]] - Network exploration tool and security scanner
* _ [[oom]] - Out of Memory
* _ [[Password Audit & Securing]]
* _ [[pine, pine set-up & pinegpg]]
* _ [[port forwarding]]
* _ [[procmail]]
* _ [[rsync]]
* _ [[suPHP]]
* _ [[pwgen]]
* _ [[rename]]
* _ [[scp]]
* _ [[screen]]
* _ [[sed]] - replace text in files via bash
* _ [[ssh]]
* _ [[sshkeys]]
* _ [[Using Trac & Svn|svn & trac]]
* _ [[users_manage]]
* _ [[script]] - Record/Log a SSH terminal Session
* _ [[search script]]
* _ [[Secure Backup]]
* _ [[sendmail]]
* _ [[smbmount]]
* _ [[sqlite]]
* _ [[sshfs]] - Mounting a remote directory over ssh
* _ [[strace]]
* _ [[synergy]]
* _ [[sysv-rc-conf]]
* _ [[tar]]
* _ [[tail]]
* _ [[tcpdump]]
* _ [[vi/vim]]
* _ [[vnstat]] - Network Traffic Logger and Monitor
* _ [[vodasms]] - send Text Messages
* _ [[wall]] - write a message to all users
* _ [[wc]]
* _ [[write]]
* _ [[zgrep]]
* _ [[zip]]
====Scripts OF THE TRADE====
* [[Convert mbox to Maildir for all users]]
* [[Find & Remove an old SSH Key for all users]]
* [[Find log files and copy to a folder]]
* [[Search for all Processes and kill them all]]
* [[links to scripts and cmdline tricks]]
==== Tips and Tricks ====
* [[mount an ISO (CD Image) on linux]]
* [[create favicon.ico]]
* [[Limit User resources]]
* [[Check when a fsck is due]]
* [[Obtain root shell after booting]]
* [[Resize raid array and create second array]]
* [[Fork bomb - DOS a Linux Server via command line]]
* [[Automate taking screenshots of webpages]]
====TOOLS OF THE TRADE====
* [[http://wiki.kartbuilding.net/putty.exe|putty]]
* [[http://wiki.kartbuilding.net/winscp.zip|winscp]]
* [[http://wiki.kartbuilding.net/vncviewer.exe|vncviewer]]
==== Remove Management of Servers ====
* [[IP KVM Serial Console Switch]]
===== Upgrades and Other Installations =====
==== Upgrading Debian Sarge to Debian Etch ====
* [[How to Upgrade Sarge to Etch via apt]]
* [[X Server Upgrading Issues]]
* [[Minor snmp Issue]]
* [[smartd and smartmontools problem/issue]]
* [[Syntax Highlighting Problems with vim]]
* [[nagios upgrade issue]]
* [[Squid Issue, Etch and a 2.4 Kernel]]
* [[Recommended Packages to Install|Recommended Packages to Install after Upgrading to Etch]]
* [[Issue with mounting root on a raid1 partition]]
==== Upgrading Debian Etch to Debian Lenny (5) ====
* [[Upgrade Trac]]
* [[Further issues upgrading to Lenny]]
==== Upgrading Ubuntu Hardy LTS to Ubuntu Lucid LTS ====
* [[dist-upgrading hardy to lucid]]
==== Setting up a Secure and Stable Linux OS ====
* [[Tomfmason_Fedora_Server_Setup|Cleaning and Securing a Fedora install]]
* [[linode-server-setup]]
==== Setup and config of Debian Bullseye as LAMP and Mail Server ====
* [[setup-config-debian-bullseye]]
==== Work for the Future:====
* Secure Backup (gpg) across Cluster - Done. See: [[Duplicity - secure incremental backup]]
* Roll Out LDAP
* [[Try and install vmware on domU to run Windows]]
http://wiki.sourcemage.org/Install_under_Xen