book

Linux Administration: A Beginner's Guide, Eighth Edition, 8th Edition

by Wale Soyinka

April 2020

Beginner

688 pages

19h 24m

English

McGraw-Hill

Read now

Unlock full access

Linux: The Operating SystemOpen Source Software and GNU: OverviewThe GNU Public LicenseUpstream and DownstreamThe Advantages of Open Source SoftwareUnderstanding the Differences Between Windows and LinuxSingle Users vs. Multiple Users vs. Network UsersThe Monolithic Kernel and the Micro-KernelSeparation of the GUI and the KernelMy Network PlacesThe Registry vs. Text FilesDomains and Active DirectorySummary
Hardware and Environmental ConsiderationsServer DesignUptimeMethods of InstallationInstalling FedoraProject PrerequisitesThe InstallationInstallation SummaryLocalization SectionSoftware SectionSystem SectionUser Settings SectionThe InstallationInstalling Ubuntu ServerStart the InstallationConfigure the NetworkConfigure ProxyConfigure Ubuntu Archive MirrorFile System SetupProfile SetupSSH SetupFeatured Server SnapsInstall CompleteSummary
Behind the CloudObtaining and Spinning Up New Virtual Linux ServersFree-to-Run Virtual Linux ServersCommercial Cloud Service ProvidersSummary
An Introduction to BashJob ControlEnvironment VariablesPipesRedirectionCommand-Line ShortcutsFilename ExpansionEnvironment Variables as ParametersMultiple CommandsBackticksDocumentation ToolsThe man CommandThe texinfo SystemFiles (Types, Ownership, and Permissions)Normal FilesDirectoriesHard LinksSymbolic LinksBlock DevicesCharacter DevicesListing Files: lsChange Ownership: chownChange Group: chgrpChange Mode: chmodFile Management and ManipulationCopy Files: cpMove Files: mvLink Files: lnFind a File: findFile Compression: gzipFile Compression: bzip2File Compression: xzCreate a Directory: mkdirRemove Files or Directories: rmShow Present Working Directory: pwdTape Archive: tarConcatenate Files: catDisplay a File One Screen at a Time: more or lessShow the Directory Location of a File: whichLocate a Command: whereisEditorsviemacspicosedMiscellaneous ToolsDisk Utilization: duDisk Free: dfList Processes: psShow an Interactive List of Processes: topSend a Signal to a Process: killShow System Information: unameWho Is Logged In: whoA Variation on who: wSwitch User: suPutting It All Together (Moving a User and Its Home Directory)Summary
The Red Hat Package ManagerManaging Software Using RPMQuerying for Information the RPM Way (Getting to Know One Another)Installing Software with RPM (Moving in Together)Uninstalling Software with RPM (Ending the Relationship)Other Things RPM Can DoYumDNFGUI RPM Package ManagersFedora or UbuntuopenSUSE and SLEThe Debian Package Management SystemAPTSoftware Management in UbuntuQuerying for InformationInstalling Software in UbuntuRemoving Software in UbuntuCompile and Install GNU SoftwareGetting and Unpacking the Source PackageLooking for DocumentationConfiguring the PackageCompiling the PackageInstalling the PackageTesting the SoftwareCleanupCommon Problems when Building from Source CodeProblems with LibrariesMissing Configure ScriptBroken Source CodeSummary
What Exactly Constitutes a User?Where User Information Is KeptThe /etc/passwd FileThe /etc/shadow FileThe /etc/group FileUser Management ToolsCommand-Line User ManagementGUI User ManagersUsers and Access PermissionsUnderstanding SetUID and SetGID ProgramsSticky BitPluggable Authentication ModulesHow PAM WorksPAM’s Files and Their LocationsConfiguring PAMA Sample PAM Configuration FileThe “Other” FileD’oh! I Can’t Log In!Debugging PAMA Grand TourCreating Users with useraddCreating Groups with groupaddModifying User Attributes with usermodModifying Group Attributes with groupmodDeleting Users and Groups with userdel and groupdelSummary
Boot LoadersGRUB LegacyGRUB 2BootstrappingThe init ProcessSystemd ScriptsWriting Your Own rc ScriptEnabling and Disabling ServicesEnabling a ServiceDisabling a ServiceOdds and Ends of Booting and Shutting Downfsck!Booting into Single-User (“Recovery”) ModeSummary
The Makeup of File Systemsi-NodesBlocksSuperblocksext4BtrfsXFSManaging File SystemsMounting and Unmounting Local DisksUsing fsckAdding a New DiskOverview of PartitionsTraditional Disk and Partition Naming ConventionsVolume ManagementCreating Partitions and Logical VolumesCreating File SystemsSummary
systemdsystemd’s RoleHow systemd WorksxinetdThe /etc/xinetd.conf FileExamples: A Simple (echo) Service EntryThe Logging Daemonrsyslogdsystemd-journald (journald)The cron ProgramThe crontab FileEditing the crontab FileSummary
What Exactly Is a Kernel?Finding the Kernel Source CodeGetting the Correct Kernel VersionUnpacking the Kernel Source CodeBuilding the KernelPreparing to Configure the KernelKernel ConfigurationCompiling the KernelInstalling the KernelBooting the KernelThe Author Lied! It Didn’t Work!Patching the KernelDownloading and Applying PatchesIf the Patch WorkedIf the Patch Didn’t WorkSummary
What’s Inside the /proc Directory?Tweaking Files Inside of /procSome Useful /proc EntriesEnumerated /proc EntriesCommon proc Settings and ReportsSYN Flood ProtectionIssues on High-Volume ServersSysFScgroupfstmpfstmpfs ExampleSummary
The LayersPacketsTCP/IP Model and the OSI ModelHeadersEthernetIP (IPv4)TCPUDPA Complete TCP ConnectionOpening a ConnectionTransferring DataClosing the ConnectionHow ARP WorksThe ARP Header: ARP Works with Other Protocols, Too!Bringing IP Networks TogetherHosts and NetworksSubnettingNetmasksStatic RoutingDynamic Routing with RIPtcpdump Bits and BobsReading and Writing DumpfilesCapturing More or Less per PacketPerformance ImpactDon’t Capture Your Own Network TrafficTroubleshooting Slow Name Resolution (DNS) IssuesIPv6IPv6 Address FormatIPv6 Address TypesIPv6 Backward CompatibilitySummary
Modules and Network InterfacesNetwork Device Configuration Utilities (ip, ifconfig, and nmcli)Sample Usage: ifconfig, ip, and nmcliSetting Up NICs at Boot TimeManaging RoutesSample Usage: Route ConfigurationDisplaying RoutesA Simple Linux RouterRouting with Static RoutesVPCs, Subnets, IPs, and Route Configuration (AWS Cloud Example)VPCs and Subnets (AWS)Internet Gateways and Routing (AWS)Security Groups (AWS)Launch a Linux Server in Its Own Subnet (AWS)Hostname ConfigurationSummary
How Netfilter WorksA NAT PrimerChainsInstalling NetfilterEnabling Netfilter in the KernelConfiguring NetfilterSaving Your Netfilter ConfigurationThe iptables CommandfirewalldCookbook SolutionsSimple NAT: iptablesSimple NAT: nftablesSimple Firewall: iptablesSummary
Common Sources of RiskSetUID ProgramsUnnecessary ProcessesPicking the Right RunlevelNonhuman User AccountsLimited ResourcesMitigating RiskchrootSELinuxAppArmorMonitoring Your SystemLoggingUsing ps and netstatWatch That Space (Using df)Automated MonitoringStaying in the Loop (Mailing Lists)Summary
TCP/IP and Network SecurityThe Importance of Port NumbersTracking ServicesUsing the netstat CommandSecurity Implications of netstat’s OutputBinding to an InterfaceShutting Down ServicesShutting Down xinetd and inetd ServicesShutting Down Non-xinetd ServicesMonitoring Your SystemMaking the Best Use of syslogMonitoring Bandwidth with MRTGHandling AttacksTrust Nothing (and No One)Change Your PasswordsPull the PlugNetwork Security ToolsnmapSnortNessus and OpenVASWireshark/tcpdumpSummary
The Hosts FileHow DNS WorksDomain and Host Naming ConventionsThe Root DomainSubdomainThe in-addr.arpa DomainTypes of ServersInstalling a DNS ServerUnderstanding the BIND Configuration FileThe SpecificsConfiguring a DNS ServerDefining a Primary Zone in the named.conf FileDefining a Secondary Zone in the named.conf FileDefining a Caching Zone in the named.conf FileDNS Records TypesSOA: Start of AuthorityNS: Name ServerA and AAAA: Address RecordsPTR: Pointer RecordMX: Mail ExchangerCNAME: Canonical NameRP and TXT: The Documentation EntriesSetting Up BIND Database FilesDNS Server Setup WalkthroughThe DNS ToolboxhostdigresolvectlnslookupwhoisnsupdateThe rndc ToolConfiguring DNS ClientsThe ResolverConfiguring the Client (Traditional)Summary
The Mechanics of FTPClient/Server InteractionsObtaining and Installing vsftpdConfiguring vsftpdStarting and Testing the FTP ServerCustomizing the FTP ServerSetting Up an Anonymous-Only FTP ServerSetting Up an FTP Server with Virtual UsersSummary
Understanding HTTPHeadersPortsProcess Ownership and SecurityInstalling the Apache HTTP ServerApache ModulesStarting Up and Shutting Down ApacheStarting Apache at Boot TimeTesting Your InstallationConfiguring ApacheCreating a Simple Root-Level PageApache Configuration FilesCommon Configuration OptionsTroubleshooting ApacheSummary
Understanding SMTPRudimentary SMTP DetailsSecurity ImplicationsE-mail ComponentsInstalling the Postfix ServerInstalling Postfix via DNF in Fedora, CentOS, or RHELInstalling Postfix via APT in UbuntuConfiguring the Postfix ServerThe main.cf FileChecking Your ConfigurationRunning the ServerChecking the Mail QueueFlushing the Mail QueueThe newaliases CommandMaking Sure Everything WorksSummary
POP3 and IMAP Protocol BasicsDovecot (IMAP and POP3 Server)Installing DovecotDovecot Configuration Files and OptionsConfiguring DovecotRunning DovecotChecking Basic POP3 FunctionalityChecking Basic IMAP FunctionalityOther Issues with Mail ServicesSSL/TLS SecurityAvailabilityLog FilesSummary
VoIP OverviewVoIP ServerAnalog Telephone Adapter (ATA)IP PhonesVoIP ProtocolsVoIP ImplementationsAsteriskHow Asterisk WorksAsterisk InstallationStarting and Stopping AsteriskUnderstanding Asterisk Configuration Files and StructureThe Dialplan: extensions.confModules: modules.confAsterisk Network, Port, and Firewall RequirementsConfiguring the Local Firewall for AsteriskConfiguring the PBXLocal ExtensionsOutside Connection (VoIP Trunking)Trunking Using Twilio Elastic SIP TrunksAsterisk Maintenance and TroubleshootingAsterisk CLI CommandsHelpful CLI CommandsCommon Issues with VoIPSummary
Understanding Public Key CryptographyKey CharacteristicsSSH Backstory (Versions)OpenSSH and OpenBSDAlternative Vendors for SSH ClientsInstalling OpenSSH on RPM-Based SystemsInstalling OpenSSH via APT in UbuntuServer Startup and ShutdownSSHD Configuration FileUsing OpenSSHSecure Shell (ssh) Client ProgramSecure Copy (scp) ProgramSecure FTP (sftp) ProgramFiles Used by the OpenSSH ClientSummary
The Mechanics of NFSVersions of NFSSecurity Considerations for NFSMount and Access a PartitionEnabling NFS in Fedora, RHEL, and CentOSEnabling NFS in Ubuntu and DebianThe Components of NFSKernel Support for NFSConfiguring an NFS ServerThe /etc/exports Configuration FileConfiguring NFS ClientsThe mount CommandSoft vs. Hard MountsCross-Mounting DisksThe Importance of the intr OptionPerformance TuningTroubleshooting Client-Side NFS IssuesStale File HandlesPermission DeniedSample NFS Client and NFS Server ConfigurationCommon Uses for NFSSummary
The Mechanics of SMBUsernames and PasswordsEncrypted PasswordsSamba DaemonsInstalling Samba via RPMInstalling Samba via APTSamba AdministrationStarting and Stopping SambaCreating a ShareUsing smbclientMounting Remote Samba SharesSamba UsersCreating Samba UsersAllowing Null PasswordsChanging Passwords with smbpasswdUsing Samba to Authenticate Against a Windows Serverwinbindd DaemonTroubleshooting SambaSummary
DFS OverviewDFS ImplementationsGlusterFSSummary
LDAP BasicsLDAP DirectoryClient/Server ModelUses of LDAPLDAP TerminologyOpenLDAPServer-Side DaemonsOpenLDAP UtilitiesInstalling OpenLDAPConfiguring OpenLDAPConfiguring slapdStarting and Stopping slapdConfiguring OpenLDAP ClientsCreating Directory EntriesSearching, Querying, and Modifying the DirectoryUsing OpenLDAP for User AuthenticationConfiguring the ServerConfiguring the ClientSummary
Printing TerminologiesThe CUPS SystemRunning CUPSInstalling CUPSConfiguring CUPSAdding PrintersLocal Printers and Remote PrintersUsing the Web Interface to Add a PrinterUsing Command-Line Tools to Add a PrinterRoutine CUPS AdministrationSetting the Default PrinterEnabling, Disabling, and Deleting PrintersAccepting and Rejecting Print JobsManaging Printing PrivilegesManaging Printers via the Web InterfaceUsing Client-Side Printing ToolslprlpqlprmSummary
The Mechanics of DHCPThe DHCP ServerInstalling DHCP Software via RPMInstalling DHCP Software via APT in UbuntuConfiguring the DHCP ServerA Sample dhcpd.conf FileThe DHCP Client DaemonSummary
Why Virtualize?Virtualization ConceptsVirtualization ImplementationsHyper-VKernel-Based Virtual Machine (KVM)QEMUVirtualBoxVMwareXenKVMKVM ExampleManaging KVM Virtual MachinesSetting Up KVM in Ubuntu/DebianContainersContainers vs. Virtual MachinesDockerSummary
Evaluating Your Backup NeedsAmount of DataBackup Hardware and Backup MediumNetwork ThroughputSpeed and Ease of Data RecoveryData DeduplicationTape ManagementCommand-Line Backup Toolsdump and restoretarrsyncMiscellaneous Backup SolutionsSummary
OverviewNative SolutionsDistro-Specific SolutionsUniversal Solutions
Basic Host System RequirementsInstalling the Virtualization Applications and UtilitiesDownload and Prep the Demo VM Image FileImport the Demo VM Image and Create a New VM InstanceManaging the Demo Virtual MachineConnecting to the Demo VMVirtual Network Computing (VNC)Virtual Serial TTY ConsoleConnecting via SSHCockpit ApplicationJust Use It!Demo Containers (Docker, podman, buildah, and kubectl)Feedback

Overview

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.

Gain Essential Linux Administration Skills Easily

Effectively set up and manage popular Linux distributions on individual servers and build entire network infrastructures using this practical resource. Fully updated to cover the latest tools and techniques, Linux Administration: A Beginner’s Guide, Eighth Edition features clear explanations, step-by-step instructions, and real-world examples. Find out how to configure hardware and software, work from the command line or GUI, maintain Internet and network services, and secure your data. Performance tuning, virtualization, containers, software management, security, and backup solutions are covered in detail.

Install and configure Linux, including the latest distributions from Fedora, Ubuntu, CentOS, openSUSE, Debian, and RHEL.
Set up and administer core system services, daemons, users, and groups.
Manage software applications from source code or binary packages.
Customize, build, or patch the Linux kernel.
Understand and manage the Linux network stack and networking protocols, including TCP/IP, ARP, IPv4, and IPv6.
Minimize security threats and build reliable firewalls and routers with Netfilter (iptables and nftables) and Linux.
Create and maintain DNS, FTP, web, e-mail, print, LDAP, VoIP, and SSH servers and services.
Share resources using GlusterFS, NFS, and Samba.
Spin-up and manage Linux-based servers in popular cloud environments, such as OpenStack, AWS, Azure, Linode, and GCE.
Explore virtualization and container technologies using KVM, Docker, Kubernetes, and Open Container Initiative (OCI) tooling.
Download specially curated Virtual Machine image and containers that replicate various exercises, software, servers, commands, and concepts covered in the book.

Wale Soyinka is a father, system administrator, a DevOps/SecOps aficionado, an open source evangelist, a hacker, and a well-respected world-renowned chef (in his mind). He is the author of Advanced Linux Administration as well as other Linux, Network, and Windows administration training materials.