{"id":24,"date":"2012-07-29T13:23:00","date_gmt":"2012-07-29T13:23:00","guid":{"rendered":"http:\/\/www.mirageglobe.com\/wp\/?p=24"},"modified":"2012-07-29T13:23:00","modified_gmt":"2012-07-29T13:23:00","slug":"draw-up-an-ubuntu-server-environment","status":"publish","type":"post","link":"https:\/\/pages.alldaycity.com\/mirageglobe\/draw-up-an-ubuntu-server-environment\/","title":{"rendered":"Draw up an Ubuntu Server Environment"},"content":{"rendered":"

Ubuntu<\/strong>
\nUbuntu Server is becoming a de-facto linux platform due to its frequent updates and wide adoption. This makes it one of the most simpliest to manage in Linux distributions. Other popular distributions include Debian (which ubuntu is built upon), Fedora, Suse. With cloud computing, you can launch an instance very easily. An instance is just like an empty hardware box, with the only difference of it being virtual. When you start off with a newly installed machine, lets see how we can set it up. We will focus on Ubuntu server edition here.
\nChoosing a version<\/strong>
\nFor ubuntu, there are a few versions. It runs in twice a year release cycle, thus 10.04 (is around april) and 10.10 (is around october). So why are versions important? The release cycle keeps the basic packages updated. If you are running a server and is not looking to update your ubuntu installation every 6 months, use a LTS (Long Term Support). The LTS versions have a gap of about 2 years with 4 years support. 10.04 (Lucid) and 12.04 (Precise) is LTS versions as of writing.
\nGetting the basics up<\/strong>
\nNow we have a command prompt blinking in our face. What now? Type in the following.<\/p>\n

<\/div>\n
\n

> sudo apt-get update
\n> sudo apt-get upgrade<\/p><\/blockquote>\n

this will run loads of installs and type “y” for yes if you have to. After installing, reboot.<\/p>\n

\n

> sudo reboot<\/p><\/blockquote>\n<\/div>\n

Now you need to setup your date time.\u00a0there are other methods but this method adjusts and prevents time drift. You can make this more complicated via NTP daemon. Read this\u00a0https:\/\/help.ubuntu.com\/12.04\/serverguide\/NTP.html<\/a>\n<\/div>\n

> nano \/etc\/cron.daily\/ntpdate<\/p><\/blockquote>\n

Enter this line if its not there, without the quotes! “ntpdate ntp.ubuntu.com”. Save and exit using ctrl-x.<\/p>\n

> sudo chmod 755 \/etc\/cron.daily\/ntpdate<\/p><\/blockquote>\n

setting local of system, which adds compilers to your server. Notice we use Sudo alot? Its meaning to run the command as the super user (Super User DO).<\/div>\n
\n

> sudo apt-get install build-essential<\/p><\/blockquote>\n

<\/div>\n<\/div>\n
Change the default shell to bash<\/b><\/div>\n
\u00a0<\/b><\/div>\n
Nano is a great text editor that is simple and easy to use. You will need to frequently use ctrl+x to save and quit once you finish your changes. Here we use nano to edit the password file of your server. After entering the command below, find your username and change from bin\/sh to bin\/bash. For example:”myuser:x:1000:1001::\/home\/myuser:\/bin\/sh” to\u00a0“myuser:x:1000:1001::\/home\/myuser:\/bin\/bash”<\/div>\n
\n

> sudo nano \/etc\/passwd<\/p><\/blockquote>\n

This command is to load the default shell as bash. Bash shell has more commands and is easier to use.\n<\/p><\/div>\n

Installing Security Packages – ClamAV and NMAP<\/b>
\n
\n<\/b>ClamAV is a general antivirus which is constantly maintained by public and a group of dedicated team. Kudos to them! To install and start a basic scan, enter in terminal and run,<\/p>\n

> sudo apt-get install clamav
\n> sudo freshclam -r -i<\/p><\/blockquote>\n

There are a few methods to make clamAV a default daemon mode so you can invoke this via other applications. Mailservers can find this very useful. Another use is if you have upload folders.
\nNMAP is a port scanner to see if you have open ports<\/p>\n

> sudo apt-get install nmap
\n> sudo nmap [IPAddress]<\/p><\/blockquote>\n<\/div>\n

Installing UFW (Uncomplicated FireWall)<\/b><\/div>\n
<\/div>\n
In command line, key in the following.<\/div>\n
\n

> sudo apt-get install ufw
\n> sudo ufw enable
\n> sudo ufw status
\n> sudo ufw logging on [this enables logging]
\n> sudo ufw allow ssh
\n> sudo ufw allow 80\/tcp
\n> sudo ufw allow ftp
\n> sudo ufw allow smtp<\/p><\/blockquote>\n

To enable FTP to successfully go through your firewall, you might need to open certain ports. The example below opens from 20000 to 20999.<\/p>\n

> sudo ufw allow ftps
\n> sudo ufw allow proto tcp from any to any port 20000:20999
\n> sudo ufw delete allow ftps [this is to delete a rule]
\n> sudo ufw status [this is to view the firewall]<\/p><\/blockquote>\n

Now reboot your machine. you can do this easily via command line below.\n<\/p><\/div>\n

\n

> sudo reboot<\/p><\/blockquote>\n<\/div>\n

<\/div>\n
\n Using CHKROOTKIT<\/b><\/p>\n

> apt-get install chkrootkit
\n> chkrootkit<\/p><\/blockquote>\n

Moving around Ubuntu Server 12.04<\/b>\n<\/div>\n

The following are places which are commonly accessed by admins<\/div>\n
<\/div>\n
\n
    \n
  • \/etc\/init.d\/… – directory where all your application controls are stored<\/li>\n
  • \/etc\/… – directory where your applications are stored<\/li>\n
  • \/var\/www\/… – directory where your web server html\/php files are stored<\/li>\n
  • \/var\/log\/… – directory where your log files are stored<\/li>\n
  • \/home\/…. – directory where home directory of your users are held<\/li>\n
  • \/etc\/passwd – file which stores the password<\/li>\n
  • \/etc\/shadow – file which I cant remember what this is for<\/li>\n
  • \/etc\/group – file which shows how groups and users are defined for this system<\/li>\n<\/ul>\n

    Some nice Commands<\/b><\/p>\n

      \n
    • if php5-cgi is installed, you can find the version of Php:\u00a0php-cgi -v<\/li>\n
    • copy command:\u00a0sudo cp \/mysource \/mytarget<\/li>\n
    • changes the permissions of the folder or file: chmod -R 777 myfolder<\/li>\n
    • secure access into another machine: ssh asd@123.45.67.89<\/li>\n
    • view memory usage: free -m<\/li>\n
    • shows which group user mydomain is in:\u00a0grep mydomain \/etc\/group<\/li>\n
    • usermod -a -G adm demo<\/li>\n
    • Top \/ ps -ef<\/li>\n
    • vmstat 1 [si so is the swap]<\/li>\n
    • crontab -e [to edit]<\/li>\n
    • crontab -l [to list]<\/li>\n
    • To find out if a file exists and create one if there isnt one: touch filename<\/li>\n<\/ul>\n<\/div>\n
      <\/div>\n
      \nReferences<\/b><\/p>\n
        \n
      • Ref: https:\/\/help.ubuntu.com\/community\/InstallingSecurityTools<\/li>\n
      • SECURE KEY GENERATION: ADMIN USER + PUBLIC KEY<\/li>\n
      • http:\/\/cloudservers.rackspacecloud.com\/index.php\/Ubuntu_-_Setup<\/li>\n
      • http:\/\/www.cyberciti.biz\/faq\/howto-linux-add-user-to-group\/<\/li>\n
      • http:\/\/www.kalzumeus.com\/2010\/12\/12\/staging-servers-source-control-deploy-workflows-and-other-stuff-nobody-teaches-you\/<\/li>\n<\/ul>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

        Ubuntu Ubuntu Server is becoming a de-facto linux platform due to its frequent updates and wide adoption. This makes it one of the most simpliest to manage in Linux distributions. Other popular distributions include Debian (which ubuntu is built upon), Fedora, Suse. With cloud computing, you can launch an instance very easily. An instance is […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-24","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/posts\/24","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/comments?post=24"}],"version-history":[{"count":0,"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/posts\/24\/revisions"}],"wp:attachment":[{"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/media?parent=24"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/categories?post=24"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pages.alldaycity.com\/mirageglobe\/wp-json\/wp\/v2\/tags?post=24"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}