9. Securing RHEL 7 | Red Hat Enterprise Linux Server Cookbook

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Red Hat Enterprise Linux Server Cookbook

By : Jakub Gaj, Leemans

5 (6)

Red Hat Enterprise Linux Server Cookbook

5 (6)

By: Jakub Gaj, Leemans

Overview of this book

Dominating the server market, the Red Hat Enterprise Linux operating system gives you the support you need to modernize your infrastructure and boost your organization’s efficiency. Combining both stability and flexibility, RHEL helps you meet the challenges of today and adapt to the demands of tomorrow. This practical Cookbook guide will help you get to grips with RHEL 7 Server and automating its installation. Designed to provide targeted assistance through hands-on recipe guidance, it will introduce you to everything you need to know about KVM guests and deploying multiple standardized RHEL systems effortlessly. Get practical reference advice that will make complex networks setups look like child’s play, and dive into in-depth coverage of configuring a RHEL system. Also including full recipe coverage of how to set up, configuring, and troubleshoot SELinux, you’ll also discover how secure your operating system, as well as how to monitor it.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Sections

Conventions

Reader feedback

Customer support

Free Chapter

1. Working with KVM Guests

1. Working with KVM Guests

Introduction

Installing and configuring a KVM

Configuring resources

Building guests

Adding CPUs on the fly

Adding RAM on the fly

Adding disks on the fly

Moving disks to another storage

Moving VMs

Backing up your VM metadata

2. Deploying RHEL "En Masse"

2. Deploying RHEL "En Masse"

Introduction

Creating a kickstart file

Publishing your kickstart file using httpd

Deploying a system using PXE

Deploying a system using a custom boot ISO file

3. Configuring Your Network

3. Configuring Your Network

Introduction

Creating a VLAN interface

Creating a teamed interface

Creating a bridge

Configuring IPv4 settings

Configuring your DNS resolvers

Configuring static network routes

4. Configuring Your New System

4. Configuring Your New System

Introduction

The systemd service and setting runlevels

Starting and stopping systemd services

Configuring the systemd journal for persistence

Monitoring services using journalctl

Configuring logrotate

Managing time

Configuring your boot environment

Configuring smtp

5. Using SELinux

5. Using SELinux

Introduction

Changing file contexts

Configuring SELinux booleans

Configuring SELinux port definitions

Troubleshooting SELinux

Creating SELinux policies

Applying SELinux policies

6. Orchestrating with Ansible

6. Orchestrating with Ansible

Introduction

Install Ansible

Configuring the Ansible inventory

Creating a template for a kickstart file

Creating a playbook to deploy a new VM with kickstart

Creating a playbook to perform system configuration tasks

Troubleshooting Ansible

7. Puppet Configuration Management

7. Puppet Configuration Management

Introduction

Installing and configuring Puppet Master

Installing and configuring the Puppet agent

Defining a simple module to configure time

Defining nodes and node grouping

Deploying modules to single nodes and node groups

8. Yum and Repositories

8. Yum and Repositories

Introduction

Managing yum history

Creating a copy of an RHN repository

Configuring additional repositories

Setting up yum to automatically update

Configuring logrotate for yum

Recovering from a corrupted RPM database

9. Securing RHEL 7

9. Securing RHEL 7

Introduction

Installing and configuring IPA

Securing the system login

Configuring privilege escalation with sudo

Secure the network with firewalld

Using kdump and SysRq

Using ABRT

Auditing the system

10. Monitoring and Performance Tuning

10. Monitoring and Performance Tuning

Introduction

Tuning your system's performance

Setting up PCP – Performance Co-Pilot

Monitoring basic system performance

Monitoring CPU performance

Monitoring RAM performance

Monitoring storage performance

Monitoring network performance

Index

Index

Customer Reviews

5 (6)

5 star

100%

4 star

0%

3 star

0%

2 star

0%

1 star

0%

Using ABRT

ABRT (Automatic Bug Reporting Tool), is a set of tools that help users detect and analyze application crashes.

How to do it…

First, we'll install the necessary packages and then take a look at how to use these tools.

Installing and configuring abrtd

Let's install abrt and get it running:

Install the abrt daemon and tools via the following command line:
```
~]# yum install -y abrt-cli
```

Now, enable and start the abrt daemon through these commands:

~]# systemctl enable abrtd
~]# systemctl restart abrtdThere's more...

Using abrt-cli

List all detected segmentation faults by executing the following command:

~]# abtr-cli list

Here's what the output should look like:

The displayed location contains all the information about the segmentation fault. You can use this to analyze what went wrong, and if you need help from Red Hat, you can use abrt-cli report to report to Red Hat Support.

There's more…

When your RHEL 7 system is registered with a satellite, all bugs will automatically be reported to the...

Visually different images

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Red Hat Enterprise Linux Server Cookbook

Search

Your notes and bookmarks