スライド 1

Size: px

Start display at page:

Download "スライド 1"

蛮帚田
5 years ago
Views:

LPIC 2 2013/12/8 http://www.neclearning.

modules_install 6 # make install # cp kernelimage /boot # mkinitrd /boot/initrd.

8 1 # cd /usr/src/linux; vi Makefile Makefile 2 # make mrproper 3 4 # make *config ( make xconfig make oldconfig ) # make # make bzimage; make modules 5 # make modules_install 6 # make install # cp kernelimage /boot # mkinitrd /boot/initrd.img kernel-ver # vi /boot/grub/grub.conf RAM RAM LPI-Japan All rights reserved. 8

11 /etc/inittab /etc/inittab init id:runlevels:action:process id:5:initdefault: action si::sysinit:/etc/rc.d/rc.sysinit l0:0:wait:/etc/rc.d/rc 0 l1:1:wait:/etc/rc.d/rc 1 l6:6:wait:/etc/rc.d/rc 6 ca::ctrlaltdel:/sbin/shutdown -t3 -r now 1:2345:respawn:/sbin/mingetty tty1 6:2345:respawn:/sbin/mingetty tty6 x:5:respawn:/etc/x11/prefdm -nodaemon initdefault process sysinit wait ctrlaltdel respawn once powerfail runlevels process Ctrl Alt Delete process UPS LPI-Japan All rights reserved. 11

12 1 /sbin/init /boot/grub/grub.conf default=0 timeout=5 title Linux root (hd0,0) kernel /vmlinuz ro root=label=/ initrd /initrd img title Linux Single root (hd0,0) kernel /vmlinuz ro root=label=/ S initrd /initrd img root= ro rw init= ro (rw) init=/sbin/init LPI-Japan All rights reserved. 12

d/s* ; do action $"Starting $subsys: " $i start done # ls -l /etc/rc3.d lrwxrwxrwx 1 root root 18 3 6 10:11 /etc/rc3.d/k92iptables ->../init.

13 2 /sbin/init # init 3 or # telinit 3 /etc/inittab l0:0:wait:/etc/rc.d/rc 0 l3:3:wait:/etc/rc.d/rc 3 l6:6:wait:/etc/rc.d/rc 6 /etc/rc.d/rc # First, run the KILL scripts. for i in /etc/rc$runlevel.d/k* ; do action $"Stopping $subsys: " $i stop done # Now run the START scripts. for i in /etc/rc$runlevel.d/s* ; do action $"Starting $subsys: " $i start done # ls -l /etc/rc3.d lrwxrwxrwx 1 root root :11 /etc/rc3.d/k92iptables ->../init.d/iptables lrwxrwxrwx 1 root root :04 /etc/rc3.d/s55sshd ->../init.d/sshd /etc/init.d/iptables stop /etc/init.d/sshd start # chkconfig sshd off # ls /etc/rc3.d/*sshd /etc/rc3.d/k25sshd LPI-Japan All rights reserved. 13

15 /etc/fstab /etc/fstab fs fsck LABEL=/ / ext3 defaults 1 1 LABEL=/boot /boot ext3 defaults 1 2 LABEL=/home /home ext3 defaults,acl 1 2 LABEL=SWAP-hda6 swap swap defaults 0 0 /dev/hda8 /mydir ext3 defaults,user 1 2 defaults async/sync (no)atime (no)auto (no)user ro/rw usrquota acl rw suid dev auto nouser async / (ro) (rw) quota ACL Access Control List LPI-Japan All rights reserved. 15

16 ext2 ext3 ext4 mke2fs tune2fs dumpe2fs e2fsck debugfs e2label ext2/ext3/ext4 -t -b -m -j ext2/ext3/ext4 -m -j -c -i -l ext2/ext3/ext4 -h ext2/ext3/ext4 ext2/ext3/ext4 ext2/ext3/ext4 LPI-Japan All rights reserved. 16

RAID RAID mdadm RAID /proc/mdstat # mdadm --create /dev/md0 --level=1 --raid-devices=2 --spare-devices=1 /dev/sda1 /dev/sdb1 /dev/sdc1 mdadm: array /dev/md0 started.

18 RAID RAID mdadm RAID /proc/mdstat # mdadm --create /dev/md0 --level=1 --raid-devices=2 --spare-devices=1 /dev/sda1 /dev/sdb1 /dev/sdc1 mdadm: array /dev/md0 started. # cat /proc/mdstat Personalities : [raid1] md0 : active raid1 sdc1[2](s) sdb1[1] sda1[0] blocks [2/2] [UU] unused devices: <none> # mdadm --stop /dev/md0 # cat /proc/mdstat Personalities : [raid1] unused devices: <none> sda1 sdb1 sdc1 RAID-1 LPI-Japan All rights reserved. 18

19 LVM 1 PV VG LV 1GB 1GB 1GB 1GB 4GB 3GB 2GB 2GB 500MB #pvcreate /dev/xxx #vgcreate vg1 /dev/xxx /dev/yyy #lvcreate -L 3G -n lv1 vg1 # mke2fs -j /dev/vg1/lv1 # mount /dev/vg1/lv1 /mnt LPI-Japan All rights reserved. 19

22 tcpdump # tcpdump tcp port 23 tcpdump: listening on eth0 22:50: > : S : (0) win 5840 <mss 1460,sackOK,timestamp ,nop,wscale 2> (DF) [tos 0x10] 22:50: > : S : (0) ack win 5792 <mss 1460,sackOK,timestamp ,nop,wscale 0> (DF) 22:50: > :. ack 1 win 1460 <nop,nop,timestamp > (DF) [tos 0x10] 22:50: > : P 1:13(12) ack 1 win 5792 <nop,nop,timestamp > (DF) [tos 0x10] LPI-Japan All rights reserved. 22

26 DNS BIND example.com /etc/named.conf options { }; directory "/var/named"; version "x.x.x"; zone "." IN { type hint; file "named.ca"; }; zone "example.com" IN { type master; file "exam.db"; allow-update { none; }; }; zone " in-addr.arpa" IN { type master; file " db"; allow-update { none; }; }; /var/named/exam.db $TTL example.com. IN SOA sv1.example.com. root.sv1.example.com. ( ) example.com. IN NS sv1.example.com. example.com. IN MX 5 sv1.example.com. station1.example.com. IN A station2.example.com. IN A sv1.example.com. IN A IN CNAME sv1.example.com. /var/named/ db $TTL in-addr.arpa. IN SOA sv1.example.com. root.sv1.example.com. ( ) in-addr.arpa. IN NS sv1.example.com in-addr.arpa. IN PTR station1.example.com in-addr.arpa. IN PTR station2.example.com in-addr.arpa. IN PTR sv1.example.com. DNS /etc/resolv.conf LPI-Japan All rights reserved. 26

30 Apache http 1 /etc/httpd/conf/httpd.conf Listen Port DocumentRoot UserDir 80 (Listen (HTML ) DocumentRoot "/var/www/html" URL /abc/xyz.html /var/www/html/abc/xyz.html URL ~ UserDir UserDir public_html URL /~tom/contents/abc.html /home/tom/public_html/contens/abc.html LPI-Japan All rights reserved. 30

Apache http 2 AuthType,AuthName,AuthUserFile,Require htpasswd httpd.conf <Directory "/var/www/html/secret"> AuthType Basic AuthName AuthUserFile /etc/httpd/.

31 Apache http 2 AuthType,AuthName,AuthUserFile,Require htpasswd httpd.conf <Directory "/var/www/html/secret"> AuthType Basic AuthName AuthUserFile /etc/httpd/.htpasswd Require valid-user </Directory> # htpasswd -cm /etc/httpd/.htpasswd taro New password: Re-type new password: Adding password for user taro AuthType AuthName AuthUserFile Require MD5.htpasswd valid-user username LPI-Japan All rights reserved. 31

= user passdb backend = smbpasswd:/etc/samba/smbpasswd map to guest = Bad

Samba [homes] comment = Home Directories browseable = no writable = yes [share]

33 Samba /etc/samba/smb.conf [global] workgroup = LPI server string = Samba Server Version %v security = user passdb backend = smbpasswd:/etc/samba/smbpasswd map to guest = Bad password username map = /etc/samba/smbusers unix password sync = Yes [global] Samba [homes] comment = Home Directories browseable = no writable = yes [share] comment = Shared Space path = /share writeable = Yes guest ok = Yes [homes] [] [ ] path = testparm smbclient LPI-Japan All rights reserved. 33

34 NFS NFS NFS NFS /etc/exports /share client1(rw,sync) ro rw root_squash #exportfs -r no_root_squash anonuid=uid (ro) (rw) root anonymous root root anonymous ID NFS server1 / share A B C portmap mountd nfsd sync #showmount -e server1 #mount -t nfs server1:/share client1 / mnt nfs A B C portmap /mnt/nfs LPI-Japan All rights reserved. 34

DHCP IP IP /etc/dhcpd.conf option subnet-mask 255.255.255.0; option broadcast-address 192.168.1.255; option routers 192.168.1.254; option domain-name "example.com"; option domain-name-servers 192.168.1.1; default-lease-time 21600; max-lease-time 43200; subnet 192.

36 DHCP IP IP /etc/dhcpd.conf option subnet-mask ; option broadcast-address ; option routers ; option domain-name "example.com"; option domain-name-servers ; default-lease-time 21600; max-lease-time 43200; subnet netmask { /var/lib/dhcpd/dhcpd.leases lease { starts /09/19 09:02:21; ends /09/19 15:02:21; binding state active; next binding state free; hardware ethernet 00:00:4c:a3:5f:40; } IP } range ; host station150 { hardware ethernet 00:00:4C:12:34:CD; fixed-address ; option domain-name "sub.example.com"; } subnet LPI-Japan All rights reserved. 36

PAM PAM PAM 1. PAM 2. PAM 3. PAM 4. 5. /etc/pam.d/login auth required pam_securetty.

so account include system-auth password include system-auth session include system-auth session optional

37 PAM PAM PAM 1. PAM 2. PAM 3. PAM /etc/pam.d/login auth required pam_securetty.so auth include system-auth account required pam_nologin.so account include system-auth password include system-auth session include system-auth session optional pam_console.so auth account password session required requisite sufficient optional include /bin/login PAM PAM PAM PAM /lib/security PAM /etc/pam.d required / PAM LPI-Japan All rights reserved. 37

39 MTA SMTP MTA MTA Mail Transfer Agent MTA MDA sendmail Postfix qmail /var/spool/mqueue MUA SMTP MDA MRA POP/IMAP /var/spool/mail MUA /etc/postfix/main.cf mydestination = $myhostname, $mydomain MDA Mail Delivery Agent MTA procmail /etc/procmailrc ~/.procmailrc :0 Bc * < *! <html! mickey@mydomain.com MRA Mail Retrieval Agent MUA POP IMAP Dovecot Curier-IMAP /etc/dovecot.conf protocols = imap imaps auth default { mechanisms = plain MUA Mail User Agent MTA MRA Outlook Thunderbird LPI-Japan All rights reserved. 39

168.1.100 DNS 53/udp #iptables -A OUTPUT -d 192.168.1.100 -p udp --dport 53 -j ACCEPT 192.168.1.0/24 UDP #iptables -A INPUT -s!

41 iptables iptables -A -s -d -j INPUT FORWARD OUTPUT -s -d -p [--sport ] [--dport ] --dport --sport -i -o -j ACCEPT DROP REJECT /24 TELNET 23/tcp #iptables -A INPUT -s /24 -p tcp --dport 23 -j ACCEPT DNS 53/udp #iptables -A OUTPUT -d p udp --dport 53 -j ACCEPT /24 UDP #iptables -A INPUT -s! /24 -p udp -j REJECT LPI-Japan All rights reserved. 41

yes TCP wrapper /etc/hosts.deny sshd : ALL ssh ssh-keygen ~/.ssh/id_rsa ~/.ssh/id_rsa.pub ssh ssh ~/.

42 ssh /etc/ssh/sshd_config Port 22 Protocol 2,1 PermitRootLogin yes PubkeyAuthentication yes HostbasedAuthentication yes PasswordAuthentication yes PermitEmptyPasswords no UsePAM yes X11Forwarding yes TCP wrapper /etc/hosts.deny sshd : ALL ssh ssh-keygen ~/.ssh/id_rsa ~/.ssh/id_rsa.pub ssh ssh ~/.ssh/authorized_keys id_rsa.pub /etc/hosts.allow sshd : / LPI-Japan All rights reserved. 42

44 Linux BIOS /sbin/init /etc/rc.d/rc.sysinit /etc/fstab ( ) ( ) ( ) ( ) /sbin/init /etc/rc.d/rc /etc/rcx.d mingetty X Window System ( 5 ) /boot/grub/grub.conf default=0 timeout=5 title Linux root (hd0,0) kernel /vmlinuz ro root=label=/ initrd /initrd img LPI-Japan All rights reserved. 44

自由軟體教學平台

自由軟體教學平台 NCHC Opensource task force DRBL steven@nchc.gov.tw, c00hkl00@nchc.gov.tw National Center for High-Performance Computing http://www.nchc.gov.tw Jan, 2003 1 2003/1/28 ( ) 09:00-10:30 10:40-12:00 Linux 13:00-14:30