book

CentOS 7 Server Deployment Cookbook

Name: CentOS 7 Server Deployment Cookbook
Author: Timothy Boronczyk
ISBN: 9781783288885

by Timothy Boronczyk

October 2016

Beginner

406 pages

7h 50m

English

Packt Publishing

Read now

Unlock full access

CentOS 7 Server Deployment Cookbook
CentOS 7 Server Deployment Cookbook
Credits
About the Author
About the Reviewer
www.PacktPub.com
Why subscribe?
Preface
What this book covers
What you need for this book
Who this book is for
Sections
Getting readyHow to do it…How it works…There's more…See also

Conventions
Reader feedback
Customer support
ErrataPiracyQuestions
1. Getting Started with CentOS
Introduction
Installing CentOS using Anaconda in graphics mode
Getting readyHow to do it...How it works...See also
Installing CentOS using Anaconda in text mode
Getting readyHow to do it...How it works...See also
Coordinating multiple installations using Kickstart
Getting readyHow to do it...How it works...See also
Running a cloud image with Amazon Web Services' EC2
Getting readyHow to do it...How it works...See also
Installing a container image from the Docker Registry
Getting readyHow to do it...How it works...See also
Installing the GNOME desktop
Getting readyHow to do it...How it works...See also
Installing the KDE Plasma desktop
Getting readyHow to do it...How it works...See also
2. Networking
Introduction
Setting a static IP address
Getting readyHow to do it...How it works...See also
Binding multiple addresses to a single Ethernet device
Getting readyHow to do it...How it works...See also
Bonding two Ethernet devices
Getting readyHow to do it...How it works...See also
Configuring the network firewall with FirewallD
Getting readyHow to do it...How it works...See also
Configuring the network firewall using iptables
Getting readyHow to do it...How it works...See also
Installing a DHCP server
Getting readyHow to do it...How it works...See also
Configuring an NFS server to share a filesystem
Getting readyHow to do it...How it works...See also
Configuring an NFS client to use a shared filesystem
Getting readyHow to do it...How it works...See also
Serving Windows shares with Samba
Getting readyHow to do it...How it works...See also
3. User and Permission Management
Introduction
Escalating privileges with sudo
Getting readyHow to do it...How it works...See also
Enforcing password restrictions
Getting readyHow to do it...How it works...See also
Setting default permissions for new files and directories
Getting readyHow to do it...How it works...See also
Running binaries as a different user
Getting readyHow to do it...How it works...See also
Working with SELinux for greater security
Getting readyHow to do it...How it works...See also
4. Software Installation Management
Introduction
Registering the EPEL and Remi repositories
Getting readyHow to do it...How it works...See also
Prioritizing repositories using the Priorities plugin
Getting readyHow to do it...How it works...See also
Automating software updates with yum-cron
Getting readyHow to do it...How it works...See also
Verifying installed RPM packages
Getting readyHow to do it...How it works...See also
Compiling a program from source
Getting readyHow to do it...How it works...See also
5. Managing Filesystems and Storage
Introduction
Viewing the size of files and available storage
Getting readyHow to do it...How it works...See also
Setting storage limits for users and groups
Getting readyHow to do it...How it works...See also
Creating a RAM disk
Getting readyHow to do it...How it works...See also
Creating a RAID
Getting readyHow to do it...How it works...See also
Replacing a device in a RAID
Getting readyHow to do it...How it works...See also
Creating a new LVM volume
Getting readyHow to do it...How it works...See also
Removing an existing LVM volume
Getting readyHow to do it...How it works...See also
Adding storage and growing an LVM volume
Getting readyHow to do it...How it works...See also
Working with LVM snapshots
Getting readyHow to do it...How it works...See also
6. Allowing Remote Access
Introduction
Running commands remotely through SSH
Getting readyHow to do it...How it works...See also
Configuring a more secure SSH login
Getting readyHow to do it...How it works...See also
Securely connecting to SSH without a password
Getting readyHow to do it...How it works...See also
Restricting SSH access by user or group
Getting readyHow to do it...How it works...See also
Protecting SSH with Fail2ban
Getting readyHow to do it...How it works...See also
Confining sessions to a chroot jail
Getting readyHow to do it...How it works...See also
Configuring TigerVNC
Getting readyHow to do it...How it works...See also
Tunneling VNC connections through SSH
Getting readyHow to do it...How it works...See also
7. Working with Databases
Introduction
Setting up a MySQL database
Getting readyHow to do it...How it works...See also
Backing up and restoring a MySQL database
Getting readyHow to do it...How it works...See also
Configuring MySQL replication
Getting readyHow to do it...How it works...See also
Standing up a MySQL cluster
Getting readyHow to do it...How it works...See also
Setting up a MongoDB database
Getting readyHow to do it…How it works...See also
Backing up and restoring a MongoDB database
Getting readyHow to do it...How it works...See also
Configuring a MongoDB replica set
Getting readyHow to do it...How it works...See also
Setting up an OpenLDAP directory
Getting readyHow to do it...How it works...See also
Backing up and restoring an OpenLDAP database
Getting readyHow to do it...How it works...See also
8. Managing Domains and DNS
Introduction
Setting up BIND as a resolving DNS server
Getting readyHow to do it...How it works...See also
Configuring BIND as an authoritative DNS server
Getting readyHow to do it...How it works...See also
Writing a reverse lookup zone file
Getting readyHow to do it...How it works...See also
Setting up a slave DNS server
Getting readyHow to do it...How it works...See also
Configuring rndc to control BIND
Getting readyHow to do it...How it works...See also
9. Managing E-mails
Introduction
Configuring Postfix to provide SMTP services
Getting readyHow to do it...How it works...See also
Adding SASL to Postfix with Dovecot
Getting readyHow to do it...How it works...See also
Configuring Postfix to use TLS
Getting readyHow to do it...How it works...See also
Configuring Dovecot for secure POP3 and IMAP access
Getting readyHow to do it...How it works...See also
Targeting spam with SpamAssassin
Getting readyHow to do it...How it works...See also
Routing messages with Procmail
Getting readyHow to do it...How it works...See also
10. Managing Web Servers
Introduction
Installing Apache HTTP Server and PHP
Getting readyHow to do it...How it works...See also
Configuring name-based virtual hosting
Getting readyHow to do it...How it works...See also
Configuring Apache to serve pages over HTTPS
Getting readyHow to do it...How it works...See also
Enabling overrides and performing URL rewriting
Getting readyHow to do it...How it works...See also
Installing NGINX as a load balancer
Getting readyHow to do it...How it works...See also
11. Safeguarding Against Threats
Introduction
Sending messages to Syslog
Getting readyHow to do it...How it works...See also
Rotating log files with logrotate
Getting readyHow to do it...How it works...See also
Using Tripwire to detect modified files
Getting readyHow to do it...How it works...See also
Using ClamAV to fight viruses
Getting readyHow to do it...How it works...See also
Checking for rootkits with chkrootkit
Getting readyHow to do it...How it works...See also
Using Bacula for network backups
Getting readyHow to do it...How it worksSee also
12. Virtualization
Introduction
Creating a new virtual machine
Getting readyHow to do it...How it works...See also
Cloning a virtual machine
Getting readyHow to do it...How it works...See also
Adding storage to a virtual machine
Getting readyHow to do it...How it works...See also
Connecting USB peripherals to a guest system
Getting readyHow to do it...How it works...See also
Configuring a guest's network interface
Getting readyHow to do it...How it works...See also

Content preview from CentOS 7 Server Deployment Cookbook

Configuring the network firewall with FirewallD

Now you'll learn how to configure the networking firewall using FirewallD. Starting with CentOS 7, FirewallD replaces iptables as the default firewall configuration utility (although iptables is still used behind the scenes by FirewallD). Based on which zones and services you configure, you can increase the network security of your server by controlling what traffic is allowed or disallowed to and from the system.

Getting ready

This recipe requires a CentOS system with a working network connection. You'll also need administrative privileges provided by logging in with the root account.

How to do it...

This collection of commands will show you how to perform several basic configuration tasks using FirewallD's ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

CentOS 7 Linux Server Cookbook - Second Edition

Publisher Resources

ISBN: 9781783288885

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design