Posts

how to secure tmp partation in linux

1. Create separte partation for tmp , if you don't have the space to create a fresh /tmp partition on existing drives, you can use the loopback capabilities of the Linux kernel by creating a loopback filesystem that will be mounted as /tmp and can use the same restrictive mount options. To create a 1GB loopback filesystem, execute the following commands. [root@Centos7 ~]# dd if=/dev/zero of=/dev/tmpDIR bs=1024 count=1000000 1000000+0 records in 1000000+0 records out 1024000000 bytes (1.0 GB) copied, 5.32903 seconds, 192 MB/s 2. Backup Current /tmp Directory: Now backup the current /tmp directory using the syntax below which will keep the same permissions for the files currently in /tmp. [root@Centos7 ~]# cp -Rpf /tmp /tmpbak 3.Modify fstab: You should add a line to the end of the /etc/fstab file so the tmp partation so tmp is mounted when the server reboots. /dev/mapper/centos-tmp  /tmp                    xfs  ...

NTPd : NTP Server installation on centos7

1. NTP package is provided by default from Centos  repositories, and can be installed by the following command: [root@Centos7 ~]# yum -y install ntp 2. Configure these lines. [root@Centos7 ~]# vi /etc/ntp.conf # line 18: add the network range you allow to receive requests restrict 172.160.0.0 mask 255.255.0.0 nomodify notrap # change servers for synchronization #server 0.centos.pool.ntp.org iburst #server 1.centos.pool.ntp.org iburst #server 2.centos.pool.ntp.org iburst #server 3.centos.pool.ntp.org iburst server ntp1.example.local iburst server ntp2.example.local iburst 3. Once the installation completes, start the service and configure it so it starts automatically each time the server boots: [root@Centos7 ~]# systemctl start ntpd [root@Centos7 ~]# systemctl enable ntpd 4. Add the NTP service in firewall [root@Centos7 ~]# firewall-cmd --add-service=ntp --permanent success [root@Centos7 ~]# firewall-cmd --reload success 5. To get a basic report you c...

MySql - Convert InnoDB to MyISAM Storage Engine of Database

MySql - Convert InnoDB to MyISAM Storage Engine of Database To convert Database InnoDB Tables to MyISAM steps follow these steps 1. Take the backup of Mysql database [root@Centos7 ]# mysqldump -f --opt mysqldb > /usr/mysqldb.sql 2. Convert the ENGINE from InnoDB to MYISAM  by using below commans. [root@Centos7 ]#mysql -u username -p -e "SELECT concat('ALTER TABLE ', TABLE_NAME,' ENGINE=MYISAM;') FROM Information_schema.TABLES WHERE TABLE_SCHEMA = 'db_name' AND ENGINE = 'InnoDB' AND TABLE_TYPE = 'BASE TABLE'" | tail -n+2 >> /root/MYISAM.sql Note : Update  username and db_name values with your own values. 3. mport that MYISAM.sql file into INNODB database [root@Centos7 ]# mysql -u username -p mysqldb < /root/MYISAM.sql 4. Make it permanent, add to my.cnf default-storage-engine= MyISAM

How to scan new iSCSI disks in Linux ?

How to scan new iSCSI disks in Linux ? 1.First check which are the existing disk available on linux server from fdisk. [root@Centos7 ~]# fdisk -l 2>/dev/null | egrep '^Disk' | egrep -v 'dm-|type|identifier' Disk /dev/xvda: 53.7 GB, 53687091200 bytes, 104857600 sectors Disk /dev/mapper/cl-root: 10.7 GB, 10737418240 bytes, 20971520 sectors Disk /dev/mapper/cl-swap: 5368 MB, 5368709120 bytes, 10485760 sectors Disk /dev/mapper/cl-usr: 10.7 GB, 10737418240 bytes, 20971520 sectors Disk /dev/mapper/cl-home: 2147 MB, 2147483648 bytes, 4194304 sectors Disk /dev/mapper/cl-var: 5444 MB, 5444206592 bytes, 10633216 sectors Disk /dev/mapper/cl-tmp: 2147 MB, 2147483648 bytes, 4194304 sectors 2.Find out how many SCSI controller configured. [root@Centos7 ~]# ls -l /sys/class/scsi_host/ total 0 lrwxrwxrwx 1 root root 0 Dec 11 12:09 host0 -> ../../devices/pci0000:00/0000:00:01.1/ata1/host0/scsi_host/host0 lrwxrwxrwx 1 root root 0 Dec 11 12:09 host1 -> ../../dev...

How to install and Configuring manual or automatic node login with iSCSI Initiator

Configuring manual or automatic node login with iSCSI 1. Install the software package: [root@Centos7 ~]# yum -y install iscsi-initiator-utils 2. Configure the iqn name for the initiator: [root@Centos7 ~]# cat /etc/iscsi/initiatorname.iscsi InitiatorName=iqn.2017-12.com.centos7:Centos7 3. Edit the iSCSI initiator configuration: # vi /etc/iscsi/iscsid.conf # To manually startup the session set to "manual". The default is automatic. node.startup = automatic # To enable CHAP authentication node.session.auth.authmethod = CHAP # To set a CHAP username and password for initiator node.session.auth.username = iscsiadmin node.session.auth.password = P@$$w0rd 4. Start iSCSI initiator daemon: [root@Centos7 ~]# systemctl start iscsi [root@Centos7 ~]# systemctl enable iscsi 5.Discovering targets in our iSCSI server: [root@Centos7 ~]# iscsiadm --mode discovery -t sendtargets --portal 172.16.20.90 172.16.20.90:3260,1 iqn.2004-04.com.sanstorage:tvs-671:iscsi.sa...

Enable https on Apache website

How to install OpenSSL and mod ssl First need to install the openssl and mod ssl and then will generating the certificate to be used. Open a terminal prompt and issue the following command  [root@Centos7 conf.d]# yum install mod_ssl Loaded plugins: fastestmirror, langpacks Loading mirror speeds from cached hostfile  * base: mirror.nbrc.ac.in  * epel: kartolo.sby.datautama.net.id  * extras: mirror.nbrc.ac.in Resolving Dependencies --> Running transaction check ---> Package mod_ssl.x86_64 1:2.4.6-67.el7.centos.5 will be installed --> Finished Dependency Resolution Dependencies Resolved ========================================================================  Package                     Arch                 ...

How install xrdp on CentOS 7 / RHEL 7

How to install xrdp on CentOS 7 / RHEL 7 1. First Install Gnome on CentOS 7 2. Install and configure EPEL repository. [root@Centos7 system]# yum install epel-release Loaded plugins: fastestmirror, langpacks base                                                                                                           | 3.6 kB  00:00:00 extras                                                                                                         | 3...