4. Software Installation Management | CentOS 7 Server Deployment Cookbook

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

CentOS 7 Server Deployment Cookbook

By : Timothy Boronczyk

5 (1)

CentOS 7 Server Deployment Cookbook

5 (1)

By: Timothy Boronczyk

Overview of this book

CentOS is derived from Red Hat Enterprise Linux (RHEL) sources and is widely used as a Linux server. This book will help you to better configure and manage Linux servers in varying scenarios and business requirements. Starting with installing CentOS, this book will walk you through the networking aspects of CentOS. You will then learn how to manage users and their permissions, software installs, disks, filesystems, and so on. You’ll then see how to secure connection to remotely access a desktop and work with databases. Toward the end, you will find out how to manage DNS, e-mails, web servers, and more. You will also learn to detect threats by monitoring network intrusion. Finally, the book will cover virtualization techniques that will help you make the most of CentOS.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Sections

Conventions

Reader feedback

Customer support

Free Chapter

1. Getting Started with CentOS

1. Getting Started with CentOS

Introduction

Installing CentOS using Anaconda in graphics mode

Installing CentOS using Anaconda in text mode

Coordinating multiple installations using Kickstart

Running a cloud image with Amazon Web Services' EC2

Installing a container image from the Docker Registry

Installing the GNOME desktop

Installing the KDE Plasma desktop

2. Networking

2. Networking

Introduction

Setting a static IP address

Binding multiple addresses to a single Ethernet device

Bonding two Ethernet devices

Configuring the network firewall with FirewallD

Configuring the network firewall using iptables

Installing a DHCP server

Configuring an NFS server to share a filesystem

Configuring an NFS client to use a shared filesystem

Serving Windows shares with Samba

3. User and Permission Management

3. User and Permission Management

Introduction

Escalating privileges with sudo

Enforcing password restrictions

Setting default permissions for new files and directories

Running binaries as a different user

Working with SELinux for greater security

4. Software Installation Management

4. Software Installation Management

Introduction

Registering the EPEL and Remi repositories

Prioritizing repositories using the Priorities plugin

Automating software updates with yum-cron

Verifying installed RPM packages

Compiling a program from source

5. Managing Filesystems and Storage

5. Managing Filesystems and Storage

Introduction

Viewing the size of files and available storage

Setting storage limits for users and groups

Creating a RAM disk

Creating a RAID

Replacing a device in a RAID

Creating a new LVM volume

Removing an existing LVM volume

Adding storage and growing an LVM volume

Working with LVM snapshots

6. Allowing Remote Access

6. Allowing Remote Access

Introduction

Running commands remotely through SSH

Configuring a more secure SSH login

Securely connecting to SSH without a password

Restricting SSH access by user or group

Protecting SSH with Fail2ban

Confining sessions to a chroot jail

Configuring TigerVNC

Tunneling VNC connections through SSH

7. Working with Databases

7. Working with Databases

Introduction

Setting up a MySQL database

Backing up and restoring a MySQL database

Configuring MySQL replication

Standing up a MySQL cluster

Setting up a MongoDB database

Backing up and restoring a MongoDB database

Configuring a MongoDB replica set

Setting up an OpenLDAP directory

Backing up and restoring an OpenLDAP database

8. Managing Domains and DNS

8. Managing Domains and DNS

Introduction

Setting up BIND as a resolving DNS server

Configuring BIND as an authoritative DNS server

Writing a reverse lookup zone file

Setting up a slave DNS server

Configuring rndc to control BIND

9. Managing E-mails

9. Managing E-mails

Introduction

Configuring Postfix to provide SMTP services

Adding SASL to Postfix with Dovecot

Configuring Postfix to use TLS

Configuring Dovecot for secure POP3 and IMAP access

Targeting spam with SpamAssassin

Routing messages with Procmail

10. Managing Web Servers

10. Managing Web Servers

Introduction

Installing Apache HTTP Server and PHP

Configuring name-based virtual hosting

Configuring Apache to serve pages over HTTPS

Enabling overrides and performing URL rewriting

Installing NGINX as a load balancer

11. Safeguarding Against Threats

11. Safeguarding Against Threats

Introduction

Sending messages to Syslog

Rotating log files with logrotate

Using Tripwire to detect modified files

Using ClamAV to fight viruses

Checking for rootkits with chkrootkit

Using Bacula for network backups

12. Virtualization

12. Virtualization

Introduction

Creating a new virtual machine

Cloning a virtual machine

Adding storage to a virtual machine

Connecting USB peripherals to a guest system

Configuring a guest's network interface

Prioritizing repositories using the Priorities plugin

Although package managers make installing and updating software an almost trivial task, there can still be some pain points if we're not careful. For example, we can configure multiple repositories, including third-party repositories not maintained by CentOS, and the version of a package in one repository can conflict with the same in another. This recipe uses the Priorities plugin to prioritize the repositories we use to help avoid such pitfalls.

Getting ready

This recipe requires a CentOS system with a working network connection. Administrative privileges are also required, either by logging in with the root account or through the use of sudo.

How to do it...

Follow these steps to prioritize which repositories yum downloads software from:

Open the /etc/yum.conf file with your text editor. Locate the plugins option and verify that its value is set to 1 to enable plugin support. Update the value if necessary:
```
plugins = 1
```
Install the yum-plugin...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

CentOS 7 Server Deployment Cookbook

Search

Your notes and bookmarks