This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
computing:gnulinux [2018/05/18 07:21] – oemb1905 | computing:gnulinux [2018/05/18 08:05] (current) – removed oemb1905 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ------------------------------------------- | ||
- | * **gnulinux** | ||
- | * **Jonathan Haack** | ||
- | * **Haack' | ||
- | * **netcmnd@jonathanhaack.com** | ||
- | ------------------------------------------- | ||
- | |||
- | //Welcome to my gnulinux wiki page. Tis page has simple and complex system administrationnotes to remind me when I forget something that I already learned! | ||
- | |||
- | ------------------------------------------- | ||
- | #**powerpc gnulinux notes; issues, installs +** | ||
- | ------------------------------------------- | ||
- | |||
- | Making a bootable usb stick ... | ||
- | |||
- | diskutil list | ||
- | diskutil eraseDisk < | ||
- | diskutil unmountDisk < | ||
- | |||
- | Examples | ||
- | |||
- | sudo dd if=/ | ||
- | sudo dd if=/ | ||
- | |||
- | Insert USB drive into PPC Mac of choice, depress command-option-o-f (open firmware) | ||
- | try usb0, usb1, usb2, etc. until it works and finds the port you used for the img | ||
- | |||
- | probe-usb | ||
- | boot usb0/ | ||
- | boot usb1/ | ||
- | |||
- | once inside the yaboot shell, some common examples are: | ||
- | |||
- | install url=mintppc.org | ||
- | install | ||
- | cli | ||
- | cli-expert | ||
- | cli64 | ||
- | cli64-expert | ||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**wireless hardware drivers, b43 cutter +** | ||
- | ------------------------------------------- | ||
- | |||
- | deb http:// | ||
- | deb http:// | ||
- | apt-get update | ||
- | sudo lspci | ||
- | apt-get install firmware-b43-installer | ||
- | apt-get install firmware-b43-lpphy-installer | ||
- | apt-get install firmware-b43legacy-installer | ||
- | |||
- | use lspci above and then visit https:// | ||
- | |||
- | |||
- | |||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**some imaging notes** | ||
- | ------------------------------------------- | ||
- | |||
- | convert .iso to .img syntax example | ||
- | |||
- | hdiutil convert -format UDRW -o destination_file.img source_file.iso | ||
- | diskutil list | ||
- | diskutil partitionDisk /dev/disk1 1 "Free Space" " | ||
- | diskutil partitionDisk /dev/disk2 GPT JHFS+ New 0b | ||
- | dd if=[Directory/ | ||
- | diskutil eject /dev/disk2 | ||
- | | ||
- | Plug into the Intel Mac, hold option while booting, proceed w/ install | ||
- | |||
- | |||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**optical media ripping from command line** | ||
- | ------------------------------------------- | ||
- | |||
- | cdrecord -pad -dao -data blag-140k-i686.iso | ||
- | |||
- | |||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**security & policy information** | ||
- | ------------------------------------------- | ||
- | |||
- | sudo nano / | ||
- | |||
- | Prevent Log in - create file | ||
- | |||
- | / | ||
- | |||
- | tcpdump common uses; monitoring traffic on network | ||
- | |||
- | tcpdump -n -i < | ||
- | tcpdump -n -i < | ||
- | tcpdump -i eth0 -nn -c 10 tcp and host < | ||
- | tcpdump -i wlan0 port http or port smtp or port imap or port pop3 -l -A | egrep -e ' | ||
- | | ||
- | Generate | ||
- | | ||
- | sudo htpasswd -c .htpasswd username | ||
- | | ||
- | Syntax for .htaccess | ||
- | | ||
- | AuthUserFile / | ||
- | AuthGroupFile /dev/null | ||
- | AuthName " | ||
- | AuthType Basic | ||
- | |||
- | <Limit GET POST> | ||
- | require valid-user | ||
- | </ | ||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**display managers; lightdm & gdm3** | ||
- | ------------------------------------------- | ||
- | |||
- | cd / | ||
- | | ||
- | Global lightdm settings here | ||
- | |||
- | cd / | ||
- | sudo nano lightdm.conf | ||
- | | ||
- | Lightdm ubuntu-MATE greeter and lock screen issues | ||
- | |||
- | / | ||
- | / | ||
- | | ||
- | The .conf file w/ some common sense parameters | ||
- | |||
- | [SeatDefaults] | ||
- | allow-guest=false | ||
- | greeter-hide-users=true | ||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**mac - hardware - gnulinux requirements** | ||
- | ------------------------------------------- | ||
- | | ||
- | mac fan control; needed to ensure computer does not fry ... | ||
- | |||
- | apt-get update | ||
- | apt-get install macfanctld | ||
- | / | ||
- | <set desired values> | ||
- | service macfanctld restart | ||
- | | ||
- | |||
- | ------------------------------------------- | ||
- | #**samba share basics** | ||
- | ------------------------------------------- | ||
- | | ||
- | sudo apt update | ||
- | sudo apt install samba | ||
- | sudo adduser username | ||
- | sudo smbpasswd -a username | ||
- | mkdir / | ||
- | nano / | ||
- | [sharename] | ||
- | path = / | ||
- | available = yes | ||
- | valid users = camalas | ||
- | read only = no | ||
- | browseable = yes | ||
- | public = yes | ||
- | writable = yes | ||
- | |||
- | |||
- | ------------------------------------------- | ||
- | # | ||
- | ------------------------------------------- | ||
- | |||
- | start or stop network manager (or other services) | ||
- | | ||
- | systemctl < | ||
- | / | ||
- | | ||
- | verify dhcp client working for interface eno1 | ||
- | | ||
- | dhclient -v eno1 | ||
- | | ||
- | add subnet to interface eno1 | ||
- | | ||
- | ip address add 192.1## | ||
- | | ||
- | interface tool w/ eno1 example | ||
- | | ||
- | ethtool eno1 | ||
- | |||
- | interface with switch using screen | ||
- | | ||
- | screen / | ||
- | |||
- | calculate subnet automatically | ||
- | | ||
- | subnetcalc | ||
- | | ||
- | proxying web traffic through remote server | ||
- | | ||
- | ssh -D < | ||
- | | ||
- | get block ID of drives | ||
- | | ||
- | blkid | ||
- | |||
- | nmap to scan devices on lan | ||
- | | ||
- | nmap -sP 10.## | ||
- | |||
- | find utils example | ||
- | |||
- | find . -iname " | ||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**scripts and miscellaneous** | ||
- | ------------------------------------------- | ||
- | |||
- | downloading scripts and executing them; example from DO | ||
- | |||
- | curl -sSL https:// | ||
- | |||
- | ngrok notes; private http(s) tunnels | ||
- | |||
- | ./ngrok http 80 | ||
- | wget https:// | ||
- | cat ~/ | ||
- | |||
- | query hosts on the lan | ||
- | |||
- | avahi-browse -tl _workstation._tcp | ||
- | |||
- | Debian print system configuration to stdout; use root | ||
- | |||
- | cat / | ||
- | lsb_release -a | ||
- | lspci | ||
- | |||
- | Debian repo management | ||
- | |||
- | cd /etc/apt | ||
- | nano sources.lsit | ||
- | [main contrib non-free] | ||
- | | ||
- | Uploading files to remote webservers with sftp | ||
- | |||
- | cd ~/Downloads | ||
- | sftp user@host.com:/ | ||
- | > put / | ||
- | | ||
- | |||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**Building From Source to Custom library Location** | ||
- | ------------------------------------------- | ||
- | |||
- | tar -xf < | ||
- | |||
- | Navigate to the directory that tar unarchived the files to. Then, within that directory, execute: | ||
- | |||
- | ./configure --prefix=/ | ||
- | | ||
- | make | ||
- | sudo make install clean | ||
- | |||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**Cacti Server Notes** | ||
- | ------------------------------------------- | ||
- | |||
- | Installing snmpd to an embedded system and then installing cacti to a client to monitor the | ||
- | device. Additionally, | ||
- | running on the client machine (ping only). | ||
- | |||
- | ssh -p ###### root@nameofembeddedhost | ||
- | opkg update | ||
- | opkg install snmpd | ||
- | cd /etc/config | ||
- | nano snmpd | ||
- | / | ||
- | / | ||
- | |||
- | There are many customizations possible, but my colleagues recommend the minimum of changing the | ||
- | name of the public community to something indicative of the network purpose. | ||
- | is also adviseable to change three fields below that refer to the physical location, ip address, and the contact email for the system administrator in charge of managing the snmp server. | ||
- | |||
- | sudo apt install cacti | ||
- | |||
- | I used the default recommendations, | ||
- | reconfiguration command below. | ||
- | |||
- | sudo dpkg-reconfigure cacti | ||
- | <Yes, rebuild database, default to other options> | ||
- | <I chose matching MySQL pass because it failed with blank> | ||
- | |||
- | At this point, cacti should work so to speak, but it will need to be configured and have its license terms accepted. | ||
- | |||
- | localhost/ | ||
- | <say yes to EULA, etc.> | ||
- | <user: admin> | ||
- | <pass: admin> | ||
- | |||
- | Since cacti' | ||
- | |||
- | Create Devices | ||
- | Add (upper right corner) | ||
- | Host Template - ucd/net SNMP Host | ||
- | Ping or SNMP | ||
- | ICMP Ping | ||
- | Version 2 | ||
- | <name of public community chosen must match / | ||
- | <fully qualified hostname must be the external domain name or local ip> | ||
- | <for linux devices or the cacti server itself, use local ip or 127.0.0.1, snmpd version 1> | ||
- | |||
- | After it successfully creates the device, then scroll down to graphs and add them all unless you have a reason not to. Once you do that, click return, and then select to "Place Device on a Tree" using the defaults provided. | ||
- | | ||
- | During this install I had a conflict with a previously installed web server nginx, so I had to find its process and then kill it: | ||
- | |||
- | netstat -enpl | ||
- | sudo kill -XXX PID | ||
- | | ||
- | After that, I restarted the web-server apache2 as follows: | ||
- | |||
- | sudo / | ||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**Beagle Bone Black w/ Debian** | ||
- | ------------------------------------------- | ||
- | To locate device if auto-mounted | ||
- | sudo dmesg | ||
- | |||
- | umount / | ||
- | |||
- | Optional: use fdisk to remove the partition first before dding ... | ||
- | |||
- | sudo dd of=/ | ||
- | |||
- | After this, pull out SD card. Plug back in. Locate where it mounted, prepare to edit file to allow it to run the installer upon boot. This is located in boot/ | ||
- | |||
- | cmdline=init=/ | ||
- | |||
- | Get out of the directory asap. then: | ||
- | |||
- | umount / | ||
- | |||
- | Now that the image has been turned into an installer, you may put the microSD card into the Beagle Bone (without power). | ||
- | |||
- | If there is a fourth pin, usually red, do not use. We only need input, output, and ground. | ||
- | | ||
- | sudo screen < | ||
- | sudo screen / | ||
- | | ||
- | {{: | ||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**Screen** | ||
- | ------------------------------------------- | ||
- | |||
- | Using ssh to tunnel to another host, and then executing screen to keep the session persistent. | ||
- | |||
- | ssh -p ### -t user@host.com screen -DRO | ||
- | |||
- | Using screen with usb to serial adapter | ||
- | |||
- | sudo screen / | ||
- | |||
- | Some other common speeds are 9600, 57600, 38400, 19200 | ||
- | | ||
- | |||
- | |||
- | ------------------------------------------- | ||
- | # | ||
- | ------------------------------------------- | ||
- | Start defualt | ||
- | sudo virsh net-start default | ||
- | |||
- | Remove bridge | ||
- | sudo ifconfig virbr0 dow | ||
- | sudo brctl delbr virbr0 | ||
- | |||
- | List all | ||
- | sudo virsh net-list --all | ||
- | |||
- | ------------------------------------------- | ||
- | #**rsync** | ||
- | ------------------------------------------- | ||
- | |||
- | sudo rsync -avxHAX --progress / | ||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**next topic** | ||
- | ------------------------------------------- | ||
- | |||
- | chmod 700 ~/ | ||
- | chmod 644 ~/ | ||
- | chmod 600 ~/ | ||
- | chmod 755 ~/ | ||
- | |||
- | ------------------------------------------- | ||
- | #**Simple Bridge Mode Virt-Manager** | ||
- | ------------------------------------------- | ||
- | create it - use gui, or brctl | ||
- | |||
- | sudo nano / | ||
- | |||
- | auto br1 | ||
- | iface br1 inet dhcp | ||
- | | ||
- | | ||
- | | ||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**smart tests** | ||
- | ------------------------------------------- | ||
- | smartctl -t short | ||
- | smartctl -t long | ||
- | |||
- | ------------------------------------------- | ||
- | #**ssh with screen** | ||
- | ------------------------------------------- | ||
- | ssh -t xx.xx.xx.xx screen -DRO | ||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**RAID 1 Notes** | ||
- | ------------------------------------------- | ||
- | The sfdisk command is not complete ... the proc shows kernel report on mirroring / syncing status ... | ||
- | |||
- | sfdisk -d | sfdisk | ||
- | cat / | ||
- | | ||
- | Temperamental Swap mirroring ... | ||
- | | ||
- | mdadm --readwrite /dev/md1 | ||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**Purism Keyboard Issue** | ||
- | ------------------------------------------- | ||
- | |||
- | sudo nano / | ||
- | |||
- | Put this in the file. | ||
- | | ||
- | #!/bin/sh | ||
- | setkeycodes 56 43 | ||
- | exit 0 | ||
- | |||
- | Ctrl-X, Y, Enter. | ||
- | | ||
- | sudo chmod 750 / | ||
- | sudo chown root:root / | ||
- | sudo reboot | ||
- | |||
- | Done - problem fixed. | ||
- | | ||
- | |||
- | |||
- | |||
- | ------------------------------------------- | ||
- | #**Level 3 DNS & resolv.conf** | ||
- | ------------------------------------------- | ||
- | |||
- | sudo nano / | ||
- | search domain.com [local domain] | ||
- | nameserver xx.xx.xx.xx [router] | ||
- | nameserver 4.2.2.1 | ||
- | nameserver 4.2.2.2 | ||
- | nameserver 4.2.2.3 | ||
- | nameserver 4.2.2.4 | ||
- | | ||
- | |||
- | ------------------------------------------- | ||
- | #**next topic** | ||
- | ------------------------------------------- | ||
- | |||
- | |||
- | |||
- | --- // |