Details, Installation, & Set-up of Debian based Linux Servers

From Wiki

Contents 1 Server set-up and Associated Details: 1.1 Typical SERVER SET-UP 1.2 Range of SERVICEs, and INSTALLATION HOW-To's 1.3 APPLICATIONS INSTALLED 1.4 Typical VHOSTS 2 Virtual Server (XEN) set-up and Associated Details 2.1 Setup of Base Hosting Server with XEN3 (dom0) 2.2 Modify XEN (dom0): Resize Partitions, RAID1 & LVM Howto's 2.3 Create & Manage XEN Virtual Servers (domU) 2.4 Xen Networking 2.5 Streamlining Xen 2.6 Setup of New Xen Server 3 Linux Tips, Tricks & Commands to be Remembered: 3.1 Scripts OF THE TRADE 3.2 Tips and Tricks 3.3 TOOLS OF THE TRADE 4 Upgrading Debian Sarge to Debian Etch 5 Setting up a Secure and Stable Linux OS 6 Work for the Future:

Server set-up and Associated Details:

Typical SERVER SET-UP

• Base Install of Debian Sarge
• #or Base Install of Debian Sarge with RAID
• Change from DHCP to Manual IP
• How to obtain Packages using APT

Range of SERVICEs, and INSTALLATION HOW-To's

All these services are based on a Debian base install using the current stable Debian Sarge, unless specifically stated otherwise. Similiarly, all these services are installed from Debian Packages from the Stable Repository using APT, unless specifically stated otherwise. It may be the case that the order of installation, or sequence of installing various packages may change, however APT & Debian Packages will take care of *any* dependencies.

A Service is typically one which typically requires ROOT permission to install, runs as a Special User on the server, starts up at boot time, and provides a key base service, with which applications run on top of.

1. Manual setup of Iptables Firewall rules & startup scripts
2. Shorewall Firewall
3. DNS - Bind9
4. Apache 2 & SSL - PHP4 - MySQL 4.1
5. Postfix SMTP
6. Courier IMAPS Server - Maildir
7. Secure Outgoing SMTP via Postfix, Courier, TLS and SASL
8. Squid Proxy
9. Samba
10. Snmpd & mrtg
11. Munin Statistics
12. Netsaint / Nagios
13. ntp - Network Time Protocol
14. ProFTPd Server
15. Quota
16. SMART
17. NFS
18. Anyterm
19. Ajaxterm - Web SSH Terminal, alternative to Anyterm
20. Trac and SVN
21. Mailman
22. Dante Socks Server
23. Spamassassin setup and config
24. Duplicity - secure incremental backup
25. Procmail - setup with postfix
26. Wine
27. openvpn
28. PPTP - vpn

APPLICATIONS INSTALLED

An application is one which can be installed by a User with limited permissions, runs ontop of a set of required services, e.g. MySQL, PHP, and is only run when accessed/required by a user.

1. Squirrelmail
2. Webalizer
3. Awstats
4. Mediawiki
5. sun_jdk
6. Rootkit Detection
7. snort Network Intrusion Detection
8. vnstat Network Traffic Logger and Monitor

Typical VHOSTS

VHOSTS - Virtual Hosts, are typically Web addresses which apache handles and serves out. Virtual Hosts require a DNS entry pointing to an IP Address where Apache is located. See the example of setting up these VHOSTS in Apache.

1. http://burkesys.com
2. http://wiki.kartbuilding.net
3. https://mail.burkesys.com
4. http://www.kartbuilding.net
5. http://monitor.burkesys.com

Virtual Server (XEN) set-up and Associated Details

Setup of Base Hosting Server with XEN3 (dom0)

There are a number of routes that can be taken when installing Xen on a Server, in order to prepare it to run Virtual Servers. These routes/options are as follows:

1. Use Debian Etch Xen Install -- The current working option with no problems.
2. Use Debian Backports -- The chosen option, as it worked with least hassle.
3. Use Xen Binaries
4. Use Xen Source and Compiling
5. Use Debian Testing (etch) Packages

Modify XEN (dom0): Resize Partitions, RAID1 & LVM Howto's

1. Resize & Create Partitions in Debian
2. RAID 1 and Xen (dom0)
3. LVM on XEN (dom0)

Create & Manage XEN Virtual Servers (domU)

1. Create DomU
2. Create Centos5 DomU on Debian Etch Dom0
3. Manage XEND
4. Ongoing Experiences with Xen
5. Resize/Increase the Size of a File Based DomU Xen Filesystem

Xen Networking

• Xen Networking

Streamlining Xen

• Automatic domU Installs using xen-tools

Setup of New Xen Server

1. Install and Config Base OS

Linux Tips, Tricks & Commands to be Remembered:

_ alias _ apache _ awstats _ backup mysql database script _ backup via web download _ bash - shell tips and tricks _ benchmark tests _ cat _ chmod _ chown _ chsh _ corkscrew - ssh_over_https _ crontab _ debian logs _ dict _ dns - General Usage Tips _ dnstunnel - Tunnel SSH over DNS _ ffmpeg - Audio and Video Editing _ File Permissions _ find _ Firefox and Java Plugin _ FTP _ getent _ gnupg _ grep _ HEAD _ history _ htop _ ifup-ifdown _ iptables_forward _ IRC and irssi _ kill, killall - End a Process _ locale _ ldap _ ls _ lsof _ lspci

_ mail etc. _ memory management _ MySQL _ Nikto - Web Server and CGI Scanner Version _ nmap - Network exploration tool and security scanner _ Password Audit & Securing _ pine, pine set-up & pinegpg _ port forwarding _ procmail _ rsync _ suPHP _ pwgen _ rename _ scp _ screen _ sed - replace text in files via bash _ ssh _ sshkeys _ svn & trac _ users_manage _ script - Record/Log a SSH terminal Session _ search script _ Secure Backup _ sendmail _ smbmount _ sshfs - Mounting a remote directory over ssh _ strace _ synergy _ sysv-rc-conf _ tar _ tail _ vi/vim _ vnstat - Network Traffic Logger and Monitor _ vodasms - send Text Messages _ wall - write a message to all users _ wc _ write _ zgrep _ zip

Scripts OF THE TRADE

• Convert mbox to Maildir for all users
• Find & Remove an old SSH Key for all users

Tips and Tricks

• mount an ISO (CD Image) on linux

TOOLS OF THE TRADE

• putty
• winscp
• vncviewer

Upgrading Debian Sarge to Debian Etch

• How to Upgrade Sarge to Etch via apt
• X Server Upgrading Issues
• Minor snmp Issue
• smartd and smartmontools problem/issue
• Syntax Highlighting Problems with vim
• nagios upgrade issue
• Squid Issue, Etch and a 2.4 Kernel
• Recommended Packages to Install after Upgrading to Etch
• Moving from Xen Backports to Debian Etch Xen Packages - Attempt1
• Issue with mounting root on a raid1 partition

Setting up a Secure and Stable Linux OS

• Cleaning and Securing a Fedora install

Work for the Future:

• Secure Backup (gpg) across Cluster - Done. See: Duplicity - secure incremental backup
• Roll Out LDAP
• Try and install vmware on domU to run Windows

http://wiki.sourcemage.org/Install_under_Xen