**Details, Installation, & Set-up of Debian based Linux Servers** ===== Server set-up and Associated Details===== ==== Typical SERVER SET-UP ==== * [[Base Install of Debian Sarge]] / [[Base Install of Debian Squeeze]] * #or [[Base Install of Debian Sarge with RAID]] * [[Change from DHCP to Manual IP]] * [[How to obtain Packages using APT]] ==== Range of SERVICEs, and INSTALLATION HOW-To's ==== All these services are based on a Debian base install using the current stable Debian Sarge, unless specifically stated otherwise. Similiarly, all these services are installed from Debian Packages from the Stable Repository using [[How to obtain Packages using APT|APT]], unless specifically stated otherwise. It may be the case that the order of installation, or sequence of installing various packages may change, however APT & Debian Packages will take care of *any* dependencies. A Service is typically one which typically requires ROOT permission to install, runs as a Special User on the server, starts up at boot time, and provides a key base service, with which applications run on top of. - [[Iptables Firewall|Manual setup of Iptables Firewall rules & startup scripts]] - [[Shorewall Firewall]] - [[DNS - Bind9]] - [[Apache2_SSL_PHP5_MySQL5]] [[Apache 2 & SSL - PHP4 - MySQL 4.1]] old Etch setup - [[Postfix SMTP]] - [[Courier IMAPS Server - Maildir]] - [[Secure Outgoing SMTP via Postfix, Courier, TLS and SASL]] -- 7.5 - [[Authed Outgoing SMTP with Postfix and MySQL]] - [[Squid Proxy]] - [[Samba]] - [[Snmpd & mrtg]] - [[Munin Statistics]] - [[Netsaint / Nagios]] - [[ntp - Network Time Protocol]] - [[ProFTPd Server]] - [[Quota]] - [[SMART]] - [[NFS]] - [[Anyterm]] - [[Ajaxterm|Ajaxterm - Web SSH Terminal, alternative to Anyterm]] - [[Trac and SVN]] - [[Mailman]] - [[Dante Socks Server]] - [[Spamassassin setup and config]] - [[Duplicity - secure incremental backup]] - [[Procmail - setup with postfix]] - [[Wine]] - [[openvpn]] - [[PPTP - vpn]] - [[smokeping]] - [[xfce-vncserver|Graphical Desktop and VNCserver]] - [[Reverse Proxy with apache mod_proxy]] ==== APPLICATIONS INSTALLED ==== An application is one which can be installed by a User with limited permissions, runs ontop of a set of required services, e.g. MySQL, PHP, and is only run when accessed/required by a user. - [[Squirrelmail]] - [[Webalizer]] - [[Awstats]] - [[Mediawiki]] - [[sun_jdk]] - [[Rootkit Detection]] - [[snort]] Network Intrusion Detection - [[vnstat]] Network Traffic Logger and Monitor - [[roundcube]] - [[planet]] RSS News Feed Aggregator ==== Typical VHOSTS ==== VHOSTS - Virtual Hosts, are typically Web addresses which apache handles and serves out. Virtual Hosts require a DNS entry pointing to an IP Address where Apache is located. See the example of setting up these [[Apache 2 & SSL - PHP4 - MySQL 4.1|VHOSTS in Apache]]. - http://burkesys.com - http://wiki.kartbuilding.net - https://mail.burkesys.com - http://www.kartbuilding.net - http://monitor.burkesys.com ===== Virtual Server (XEN) set-up and Associated Details ===== ==== Xen and Debian Squeeze ==== === Setup of Xen Xen 4.0.1 on Debian Squeeze === * [[Xen 4.0.1 on Debian Squeeze dom0 and domU]] ==== Archive ==== === Setup of Base Hosting Server with XEN3.0 (dom0) === There are a number of routes that can be taken when installing Xen on a Server, in order to prepare it to run Virtual Servers. These routes/options are as follows: - Use [[Debian Etch Xen Install]] -- The current working option with no problems. - Use [[XenDebianBackports|Debian Backports]] -- The chosen option, as it worked with least hassle. - Use [[Xen Binaries]] - Use [[Xen Source and Compiling]] - Use Debian Testing (etch) Packages === Modify XEN (dom0): Resize Partitions, RAID1 & LVM Howto's === - [[Resize & Create Partitions in Debian]] - [[RAID 1 and Xen (dom0)]] - [[LVM on XEN (dom0)]] === Create & Manage XEN Virtual Servers (domU) === - [[Create DomU]] - [[Create Centos5 DomU on Debian Etch Dom0]] - [[Manage XEND]] - [[Ongoing Experiences with Xen]] - [[Resize/Increase the Size of a File Based DomU Xen Filesystem]] === Streamlining Xen === * Automatic domU Installs using [[xen-tools]] === Setup of New Xen Server === - [[Install and Config Base OS]] === Upgrade of Xen through the years === * [[Moving from Xen Backports to Debian Etch Xen Packages - Attempt1]] * [[Upgrade domU to Lenny]] * [[Upgrade Xen on dom0]] === Setup of Xen 3.2 (dom0) on Debian Lenny === * [[Basic Setup of Xen3.2 32bit]] * [[Setup of Windows domU on Debian lenny dom0]] === Xen Networking === * [[Xen Networking]] ===== KVM Setup ===== * [[KVM Setup on Debian Jessie]] | [[KVM Setup on Debian Squeeze]] ([[KVM Setup on Debian Lenny|Old Lenny KVM Setup]]) ==== Setup of KVM Guest VMs ==== * [[Setup of Windows Server 2008 Guest on KVM]] * [[Migrate Xen based VM (domU) to KVM based VM]] ==== Other KVM Info ==== * [[mount kvm file based image (disk.img) on host computer]] * [[increase size of raw disk image with partitions]] * [[Provide Boot Menu options for VMs accessible using VNC]] * [[IPv6 Setup on KVM Host and Guest VMs]] ===== Linux Tips, Tricks & Commands to be Remembered:===== * _ [[alias]] * _ [[apache]] * _ [[awstats]] * _ [[backup mysql database script]] * _ [[backup via web download]] * _ [[bash]] - shell tips and tricks * _ [[benchmark tests]] * _ [[cat]] * _ [[chmod]] * _ [[chown]] * _ [[chsh]] * _ [[corkscrew - ssh_over_https]] * _ [[crontab]] * _ [[debian logs]] * _ [[dict]] * _ [[dns]] - General Usage Tips * _ [[dnstunnel]] - Tunnel SSH over DNS * _ [[ffmpeg]] - Audio and Video Editing * _ [[File Permissions]] * _ [[find]] * _ [[Firefox and Java Plugin]] * _ [[FTP]] * _ [[getent]] * _ [[gnupg]] * _ [[grep]] * _ [[HEAD]] * _ [[hellanzb]] * _ [[history]] * _ [[htop]] * _ [[ifup-ifdown]] * _ [[iptables_forward]] * _ [[irssi|IRC and irssi]] * _ [[kill, killall]] - End a Process * _ [[locale]] * _ [[ldap]] * _ [[ls]] * _ [[lsof]] * _ [[lspci]] * _ [[mail - mutt etc|mail etc.]] * _ [[memory management]] * _ [[MySQL]] * _ [[Nikto]] - Web Server and CGI Scanner Version * _ [[ncftp]] * _ [[nmap]] - Network exploration tool and security scanner * _ [[oom]] - Out of Memory * _ [[Password Audit & Securing]] * _ [[pine, pine set-up & pinegpg]] * _ [[port forwarding]] * _ [[procmail]] * _ [[rsync]] * _ [[suPHP]] * _ [[pwgen]] * _ [[rename]] * _ [[scp]] * _ [[screen]] * _ [[sed]] - replace text in files via bash * _ [[ssh]] * _ [[sshkeys]] * _ [[Using Trac & Svn|svn & trac]] * _ [[users_manage]] * _ [[script]] - Record/Log a SSH terminal Session * _ [[search script]] * _ [[Secure Backup]] * _ [[sendmail]] * _ [[smbmount]] * _ [[sqlite]] * _ [[sshfs]] - Mounting a remote directory over ssh * _ [[strace]] * _ [[synergy]] * _ [[sysv-rc-conf]] * _ [[tar]] * _ [[tail]] * _ [[tcpdump]] * _ [[vi/vim]] * _ [[vnstat]] - Network Traffic Logger and Monitor * _ [[vodasms]] - send Text Messages * _ [[wall]] - write a message to all users * _ [[wc]] * _ [[write]] * _ [[zgrep]] * _ [[zip]] ====Scripts OF THE TRADE==== * [[Convert mbox to Maildir for all users]] * [[Find & Remove an old SSH Key for all users]] * [[Find log files and copy to a folder]] * [[Search for all Processes and kill them all]] * [[links to scripts and cmdline tricks]] ==== Tips and Tricks ==== * [[mount an ISO (CD Image) on linux]] * [[create favicon.ico]] * [[Limit User resources]] * [[Check when a fsck is due]] * [[Obtain root shell after booting]] * [[Resize raid array and create second array]] * [[Fork bomb - DOS a Linux Server via command line]] * [[Automate taking screenshots of webpages]] ====TOOLS OF THE TRADE==== * [[http://wiki.kartbuilding.net/putty.exe|putty]] * [[http://wiki.kartbuilding.net/winscp.zip|winscp]] * [[http://wiki.kartbuilding.net/vncviewer.exe|vncviewer]] ==== Remove Management of Servers ==== * [[IP KVM Serial Console Switch]] ===== Upgrades and Other Installations ===== ==== Upgrading Debian Sarge to Debian Etch ==== * [[How to Upgrade Sarge to Etch via apt]] * [[X Server Upgrading Issues]] * [[Minor snmp Issue]] * [[smartd and smartmontools problem/issue]] * [[Syntax Highlighting Problems with vim]] * [[nagios upgrade issue]] * [[Squid Issue, Etch and a 2.4 Kernel]] * [[Recommended Packages to Install|Recommended Packages to Install after Upgrading to Etch]] * [[Issue with mounting root on a raid1 partition]] ==== Upgrading Debian Etch to Debian Lenny (5) ==== * [[Upgrade Trac]] * [[Further issues upgrading to Lenny]] ==== Upgrading Ubuntu Hardy LTS to Ubuntu Lucid LTS ==== * [[dist-upgrading hardy to lucid]] ==== Setting up a Secure and Stable Linux OS ==== * [[Tomfmason_Fedora_Server_Setup|Cleaning and Securing a Fedora install]] * [[linode-server-setup]] ==== Setup and config of Debian Bullseye as LAMP and Mail Server ==== * [[setup-config-debian-bullseye]] ==== Work for the Future:==== * Secure Backup (gpg) across Cluster - Done. See: [[Duplicity - secure incremental backup]] * Roll Out LDAP * [[Try and install vmware on domU to run Windows]] http://wiki.sourcemage.org/Install_under_Xen