Category Archives: Linux

Install and configure Unattended-Upgrade

Leave a reply 
apt install unattended-upgrades -y
systemctl enable unattended-upgrades
systemctl start unattended-upgrades
vi /etc/apt/apt.conf.d/50unattended-upgrades

# find Unattended-Upgrade::Package-Blacklist and add
    "icecast2";

# uncomment and set
Unattended-Upgrade::Remove-Unused-Kernel-Packages "true";
Unattended-Upgrade::Remove-New-Unused-Dependencies "true";
Unattended-Upgrade::Remove-Unused-Dependencies "true";
Unattended-Upgrade::Automatic-Reboot "false";
vi /etc/apt/apt.conf.d/20auto-upgrades

#Set the following variables or add 3rd line
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
APT::Periodic::AutocleanInterval "7";
# restart service and dry run
systemctl restart unattended-upgrades
unattended-upgrades --dry-run --debug

Linux see number of open files allowed per process (too many open files related)

Leave a reply 
#first figure out the process id of icecast2 (or any process)
ps -ef|grep xml
icecast2 5157 1 3 Nov14 ? 00:38:24 /usr/bin/icecast2 -b -c /etc/icecast2/icecast.xml

# then check limits for the process
cat /proc/5157/limits
Limit                     Soft Limit           Hard Limit           Units
Max cpu time              unlimited            unlimited            seconds
Max file size             unlimited            unlimited            bytes
Max data size             unlimited            unlimited            bytes
Max stack size            8388608              unlimited            bytes
Max core file size        unlimited            unlimited            bytes
Max resident set          unlimited            unlimited            bytes
Max processes             15563                15563                processes
Max open files            32768                32768                files
Max locked memory         65536                65536                bytes
Max address space         unlimited            unlimited            bytes
Max file locks            unlimited            unlimited            locks
Max pending signals       15563                15563                signals
Max msgqueue size         819200               819200               bytes
Max nice priority         0                    0
Max realtime priority     0                    0
Max realtime timeout      unlimited            unlimited            us

 

compile mp3gain on debian

Leave a reply

make sure gcc is installed

apt-get install unzip libmpg123-dev build-essential 
cd /usr/local/src 
mkdir mp3gain 
cd mp3gain 
wget https://netix.dl.sourceforge.net/project/mp3gain/mp3gain/1.6.2/mp3gain-1_6_2-src.zip 
unzip mp3gain-1_6_2-src.zip 
make && make install

 

Interessante links : https://wiki.ubuntuusers.de/MP3Gain/

Tips :

# This is all the options I want for mp3gain.
# -c : ignore clipping (according link above not recommended > please investigate for more information)
# -p : preserve file modification time
# -r : apply Track gain
# -d 2.0: makes it 91.0 dB (defaults to 89.0)

alias mymp3gain='mp3gain -c -p -r -d 2.0'

================================================
Since it defaults to 89.0 dB, you simply call 'mp3gain -r *.mp3'.

 

 

TCP Tuning

Avoid, that NMAP identify the server uptime

# immediately
echo 0 > /proc/sys/net/ipv4/tcp_timestamps

# permanent, add to /etc/sysctl.conf 
net.ipv4.tcp_timestamps = 0

 

Centos 7.x – Basic Installation 

# ------------------------------------------------------
## Network installation Path Centos 7.x
# ------------------------------------------------------
http://mirror.switch.ch/ftp/mirror/centos/7/os/x86_64/

# ------------------------------------------------------
## tools not installed from the beginning Centos 7.x
# ------------------------------------------------------
yum install wget 
yum install net-tools

# ------------------------------------------------------
## Firewall deaktivation Centos 7.x
# ------------------------------------------------------
#Check the Status of Firewalld
systemctl status firewalld
#Stop Firewalld
systemctl stop firewalld
#Disable Firewalld
systemctl disable firewalld

# ------------------------------------------------------
## Disable IPv6 Centos 7.x
# ------------------------------------------------------
# http://wiki.centos.org/FAQ/CentOS6#head-d47139912868bcb9d754441ecb6a8a10d41781df
vi /etc/sysctl.conf
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1

sysctl -p

systemctl stop  ip6tables.service
chkconfig ip6tables off
chkconfig shorewall on
reboot
---------------------------------------
this procedure causes issues with shorewall and ksplice.
vi /etc/sysconfig/network
# NETWORKING_IPV6=no
vi /etc/modprobe.d/modprobe.conf
# install ipv6 /bin/true
service ip6tables stop
chkconfig ip6tables off

reboot

# ------------------------------------------------------
## SELINUX Centos 7.x
# ------------------------------------------------------
# if you like to disable SeLINUX
# temporär : setenforce 0
# disable permanent on Servers Running in the LAN
vi /etc/sysconfig/selinux
SELINUX=disabled

# ------------------------------------------------------
## Add additional Repo's
# ------------------------------------------------------
# sehr gute erklärung : http://dokuwiki.nausch.org/doku.php/centos:epel6
# http://wiki.centos.org/AdditionalResources/Repositories

# RPMForge - This repository is a collaboration of Dag (who also maintains an individual archive) and other packagers. The archive provides over 10,000 packages for CentOS, including mplayer, xmms-mp3 and other popular media tools. You can read the installation instructions at Installing RPMForge. This repository is considered by many in the community to be stable and safe.
# http://wiki.centos.org/AdditionalResources/Repositories/RPMForge#head-f0c3ecee3dbb407e4eed79a56ec0ae92d1398e01
# x86_64 http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm
cd /tmp
wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm
rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt
# Verify the package you have downloaded
rpm -K rpmforge-release-0.5.3-1.el6.rf.*.rpm
# Install the package
rpm -i rpmforge-release-0.5.3-1.el6.rf.*.rpm



# ------------------------------------------------------
# Enable & Install EPEL Repo CentOS 7.x
# ------------------------------------------------------
yum install epel-release

# ------------------------------------------------------
# Add Basic user Centos 7.x
# ------------------------------------------------------
# add user/group zumbi
groupadd zumbi
useradd -gzumbi -Gzumbi -s/bin/bash -d/home/zumbi -m zumbi
# activate the user zumbi
# password :
passwd zumbi

# ------------------------------------------------------
## ssh configuration
# ------------------------------------------------------
# backup original configuration file
cp -a /etc/ssh/sshd_config /etc/ssh/sshd_config_original
# add line in sshd_config
echo "AllowUsers zumbi" >> /etc/ssh/sshd_config
echo "PermitRootLogin no" >> /etc/ssh/sshd_config
# Change the default Port
sed -i 's/#Port 22/Port 65535/g' /etc/ssh/sshd_config
service sshd restart
# Install the openssh-client for doing scp to the centos server
yum install openssh-clients

# ------------------------------------------------------
## ssh key auth configuration
# ------------------------------------------------------
#check howtoforge
# http://wiki.centos.org/HowTos/Network/SecuringSSH
mkdir ~/.ssh
chmod 700 ~/.ssh
vi ~/.ssh/authorized_keys
chmod 600 ~/.ssh/authorized_keys
vi /etc/ssh/sshd_config
[...]
Protocol 2
PasswordAuthentication no
UsePAM no
[...]

service sshd restart

# ------------------------------------------------------
## FTP Server configuration Centos 7.x
# ------------------------------------------------------
yum install -y vsftpd

# backup original configuration file
cp -a /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf_original
cp -a /etc/vsftpd/user_list /etc/vsftpd/user_list_original
cp -a /etc/vsftpd/chroot_list /etc/vsftpd/chroot_list_original

# remove original configuration files
rm -rf /etc/vsftpd/vsftpd.conf
rm -rf /etc/vsftpd/user_list
rm -rf /etc/vsftpd/chroot_list

# wget the reference files
cd /etc/vsftpd/
wget https://www.dropbox.com/s/nzwkqiwsgqv2rit/chroot_list
wget https://www.dropbox.com/s/etef4jaskcd50wd/user_list
wget https://www.dropbox.com/s/lxl86h46y4tjv5z/vsftpd.conf

## will avoid this Error: 500 OOPS: vsftpd: refusing to run with writable root inside chroot()
echo 'allow_writeable_chroot=YES' >> /etc/vsftpd/vsftpd.conf

# make the the FTP Server is starting at boot time
systemctl enable vsftpd.service
systemctl start  vsftpd.service

# ------------------------------------------------------
## ACPID installation Centos 7.x > for VM's important 
# ------------------------------------------------------
yum install acpid
systemctl start  acpid.service
systemctl enable acpid.service

# ------------------------------------------------------
## Webmin installation Centos 7.x
# ------------------------------------------------------
touch /etc/yum.repos.d/webmin.repo
echo "[Webmin]" >> /etc/yum.repos.d/webmin.repo
echo "name=Webmin Distribution Neutral" >> /etc/yum.repos.d/webmin.repo
echo "#baseurl=http://download.webmin.com/download/yum" >> /etc/yum.repos.d/webmin.repo
echo "mirrorlist=http://download.webmin.com/download/yum/mirrorlist" >> /etc/yum.repos.d/webmin.repo
echo "enabled=1" >> /etc/yum.repos.d/webmin.repo
cd /tmp
wget http://www.webmin.com/jcameron-key.asc
rpm --import jcameron-key.asc
yum install webmin

# ------------------------------------------------------
## UPTIMED instllation Centos 7.x
# ------------------------------------------------------
# 64bit >> http://rpm.pbone.net/index.php3/stat/4/idpl/29645284/dir/fedora_22/com/uptimed-0.4.0-1.fc22.x86_64.rpm.html
cd /tmp
wget ftp://mirror.switch.ch/pool/4/mirror/fedora/linux/releases/22/Everything/x86_64/os/Packages/u/uptimed-0.4.0-1.fc22.x86_64.rpm
rpm -i uptimed-0.4.0-1.fc22.x86_64.rpm 
uptimed -b
uprecords

# ------------------------------------------------------
## GLANCES installation Centos 7.x
# ------------------------------------------------------
# enable first EPEL Repo
yum -y install glances
#start application with 
glances

# ------------------------------------------------------
## DSTAT installation Centos 7.x
# ------------------------------------------------------
# enable first EPEL Repo
yum -y install dstat
#start application with 
dstat

# ------------------------------------------------------
## SNMP Installation Centos 7.x
# ------------------------------------------------------
# http://www.it-slav.net/blogs/2008/11/11/install-and-configure-snmp-on-rhel-or-centos/
# http://paulsuela.wordpress.com/2010/06/30/snmpd-conf-for-centos/
# http://lifeofageekadmin.com/configure-snmp-for-rhel-6/
# http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch22_:_Monitoring_Server_Performance

yum install –y net-snmp-utils net-snmp net-snmp-libs

cd /etc/snmp/
cp -a /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf_original
rm /etc/snmp/snmpd.conf
wget https://www.dropbox.com/s/yjqze30ibcgxadq/snmpd.conf

systemctl start  snmpd.service
systemctl enable snmpd.service

## Test the snmpd
snmpwalk -v 1 -c public localhost IP-MIB::ipAdEntIfIndex

# ------------------------------------------------------
## Shorewall Installation Centos 7.x
# ------------------------------------------------------
# http://www.howtoforge.com/how-to-set-up-shorewall-firewall-on-centos-5.1
# http://sugizo.wordpress.com/2011/07/08/centos-install-and-configure-shorewall/

# enable first EPEL Repo
yum  install shorewall 

cp /usr/share/doc/shorewall*/Samples/two-interfaces/{interfaces,policy,masq,routestopped,rules,zones} /etc/shorewall/
# definiere die Standardports im rule file
65535
10000
21
80
8080
53 >  DNS/ACCEPT

## modify the basic files
network
zones
rules
interfaces
policy
masq
routestopped

# ------------------------------------------------------
## VM Tuning and Optimization Guide Centos 7.x
# ------------------------------------------------------
# default : tuned is installed on centos 7.x
# http://xtm.badewetter.ch/wp/2015/05/virtualization-tuning-and-optimization-guide/

yum install tuned
systemctl stop  tuned.service
tuned-adm profile virtual-guest

# ------------------------------------------------------
## Mail configuration
# ------------------------------------------------------
# Test mail versand via watchdog script

# ------------------------------------------------------
## Kernel Tuning
# ------------------------------------------------------
# kernel parameter linux tuning
http://people.redhat.com/alikins/system_tuning.html

# ------------------------------------------------------
## phpmyadmin Installation
# ------------------------------------------------------
# http://dokuwiki.nausch.org/doku.php/centos:phpmyadmin_c6

# ------------------------------------------------------
## NFS installation
# ------------------------------------------------------
# http://www.howtoforge.com/setting-up-an-nfs-server-and-client-on-centos-6.3

yum install nfs-utils nfs-utils-lib
chkconfig --levels 235 nfs on
/etc/init.d/nfs start

# Nobody user and group issue
# http://whacked.net/2006/07/26/nfsv4nfs-mapid-nobody-domain/
# You can tweak this setup by editing the: /etc/idmapd.conf
# Domain =  dmd2.local

# ------------------------------------------------------
## SAMBA Installation
# ------------------------------------------------------
# http://rbgeek.wordpress.com/2012/05/25/how-to-install-samba-server-on-centos-6/

# ------------------------------------------------------
## install 3ware 3dm2 website and CLI
# ------------------------------------------------------
#Download software from http://www.lsi.com/channel/support/pages/downloads.aspx?k=*
wget http://www.lsi.com/downloads/Public/SATA/SATA%20Common%20Files/3DM2_CLI-linux_10.2.2.1_9.5.5.1.zip
unzip 3DM2_CLI-linux_10.2.2.1_9.5.5.1.zip
./install.sh -i
# When you are finished with your installation you should see /usr/sbin/3dm2 running 3 times.
# To connect go to https://domainname:888

# ------------------------------------------------------
## MaridaDB installation
# ------------------------------------------------------

#Install mariadb from default centos repo
yum install mariadb-server
systemctl start mariadb.service
/usr/bin/mysql_secure_installation

# install the latest MariaDB Version 10.x
# Enable MariaDB Repo

vi /etc/yum.repos.d/MariaDB.repo
# add
[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.0/centos7-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1

yum update -y
# there may  come up some errors
yum remove mariadb-libs*
yum install MariaDB-server MariaDB-client
/etc/init.d/mysql start
chkconfig mysql on

# ------------------------------------------------------
## MySql installation
# ------------------------------------------------------
# https://der-linux-admin.de/2016/02/centos-7-mysql-5-6-mysql-5-7-oder-aktueller-installieren/


yum install http://dev.mysql.com/get/mysql57-community-release-el7-7.noarch.rpm
vi /etc/yum.repos.d/mysql-community.repo
#Anschliessend können wir in der Datei /etc/yum.repos.d/mysql-community.repo die gewünschte Version von MySQL aktivieren.
yum install mysql-server
systemctl enable mysqld
systemctl start mysqld
#Eine Verbesserung bei den neueren MySQL-Servern ab der Version 5.7 ist, dass ein temporäres Root-Passwort gesetzt wird. Bei älteren Versionen konnte man sich nach dem ersten Start des Servers mit einem leeren Passwort aus User root anmelden. Die temporären Logindaten für den User root ermitteln wir wie folgt:
grep 'temporary password' /var/log/mysqld.log
2016-02-04T21:41:08.717231Z 1 [Note] A temporary password is generated for root@localhost: 8X_ojH!+Wdes

mysql_secure_installation

# Dmd@24sql2016

# ------------------------------------------------------
## Logrotate
# ------------------------------------------------------

Enable compress in the config file
/etc/logrotate.conf
cd /usr/mysql-test ; perl mysql-test-run.pl

# ------------------------------------------------------
## Detail configuration informations
# ------------------------------------------------------

http://xtm.badewetter.ch/wp/2015/05/how-to-do-painless-mysql-server-backups-with-automysqlbackup/