book

Ubuntu Server Cookbook

Name: Ubuntu Server Cookbook
Author: Uday Sawant
ISBN: 9781785883064

by Uday Sawant

June 2016

Beginner

456 pages

9h 31m

English

Packt Publishing

Read now

Unlock full access

Ubuntu Server Cookbook
Table of Contents
Ubuntu Server Cookbook
Credits
About the Author
www.PacktPub.com
eBooks, discount offers, and moreWhy Subscribe?
Preface
What this book covers
What you need for this book
Who this book is for
Sections
Getting readyHow to do it…How it works…There's more…See also

Conventions
Reader feedback
Customer support
Downloading the example codeDownloading the color images of this bookErrataPiracyQuestions
1. Managing Users and Groups
Introduction
Creating a user account
Getting readyHow to do it…How it works…There's more…See also
Creating user accounts in batch mode
Getting readyHow to do it...How it works…
Creating a group
Getting readyHow to do it...How it works…There's more…See also
Adding group members
Getting readyHow to do it…How it works…There's more…
Deleting a user account
Getting readyHow to do it...How it works…There's more…See also
Managing file permissions
Getting readyHow to do it…How it works…There's more…
Getting root privileges with sudo
Getting readyHow to do it...How it works…There's more…Setting password less sudoOther uses of sudoSee also
Setting resource limits with limits.conf
Getting readyHow to do it...How it works…There's more…
Setting up public key authentication
Getting readyHow to do it...How it works…Working of SSH authenticationThere's more…Troubleshooting SSH connectionsSSH tools for the Windows platformSee also
Securing user accounts
How to do it...How it works…
2. Networking
Introduction
Connecting to a network with a static IP
Getting readyHow to do it…How it works…There's more…IPv6 configurationSee also
Installing the DHCP server
Getting readyHow to do it…How it works…There's more…
Installing the DNS server
Getting readyHow to do it…How it works…See also
Hiding behind the proxy with squid
Getting readyHow to do it…How it works…There's more…Access control listSet cache refresh rulesSarg – tool to analyze squid logsSquid guardSee also
Being on time with NTP
How to do it…How it works…There's more…See also
Discussing load balancing with HAProxy
Getting readyHow to do it…How it works…There's more …See also
Tuning the TCP stack
Getting ready…How to do it…How it works…See also
Troubleshooting network connectivity
Getting readyHow to do it…There's more…
Securing remote access with OpenVPN
Getting ready…How to do it…How it works…There's more…
Securing a network with uncomplicated firewall
Getting readyHow to do it…There's more…See also
Securing against brute force attacks
Getting readyHow to do it…How it works…There's more…
Discussing Ubuntu security best practices
Getting readyHow to do it…How it works…See also
3. Working with Web Servers
Introduction
Installing and configuring the Apache web server
Getting readyHow to do it…How it works…There's more…HTTP version 2 supportSee also
Serving dynamic contents with PHP
Getting readyHow to do it…How it works…PHP settingsThere's more…Installing the LAMP stackUpgrading PHP under Ubuntu 14
Hosting multiple websites with a virtual domain
Getting readyHow to do it…How it works…See also
Securing web traffic with HTTPS
Getting readyHow to do it…How it works…There's more…See also
Installing Nginx with PHP_FPM
Getting readyHow to do it…How it works…There's more…See also
Setting Nginx as a reverse proxy
Getting readyHow to do it…How it works…There's more…HAProxy and VarnishSee also
Load balancing with Nginx
Getting readyHow to do it…How it works…There's more…See also
Setting HTTPs on Nginx
Getting readyHow to do it…How it works…See also
Benchmarking and performance tuning of Apache
Getting readyHow to do it…There's more…See also
Securing the web server
Getting readyHow to do it…How it works…See also
Troubleshooting the web server
Getting readyHow to do it…Web server not accessibleVirtual host not accessibleAccess denied or forbidden errorsApache downloads .php files
4. Working with Mail Servers
Introduction
Sending e-mails with Postfix
Getting readyHow to do it…How it works…See also
Enabling IMAP and POP3 with Dovecot
Getting readyHow to do it…How it works…See also
Adding e-mail accounts
Getting readyHow to do it…How it works…There's more…Web console for virtual mailbox administrationSee also
Mail filtering with spam-assassin
Getting readyHow to do it…How it works…There's more…See also
Troubleshooting the mail server
Getting readyHow to do it…See also
Installing the Zimbra mail server
Getting readyHow to do it…How it works…There's more…See also
5. Handling Databases
Introduction
Installing relational databases with MySQL
Getting readyHow to do it…How it works…There’s more…Securing MySQL installationSee also
Storing and retrieving data with MySQL
Getting readyHow to do it…How it works…
Importing and exporting bulk data
How to do it…See also
Adding users and assigning access rights
Getting readyHow to do it…How it works…There’s more…Removing user accountsSetting resource limitsSee also
Installing web access for MySQL
Getting readyHow to do it…How it works…There’s more…See also
Setting backups
Getting readyHow to do it…How it works…See also
Optimizing MySQL performance – queries
Getting readyHow to do it…How it works…There’s more…Sharding MySQLSee also
Optimizing MySQL performance – configuration
Getting readyHow to do it…How it works…There’s more…Percona configuration wizardMySQL table compressionSee also
Creating MySQL replicas for scaling and high availability
Getting readyHow to do it…How it works…There’s more…See also
Troubleshooting MySQL
Getting readyHow to do it…See also
Installing MongoDB
Getting readyHow to do it…How it works…See also
Storing and retrieving data with MongoDB
Getting readyHow to do it…How it works…There’s more…See also
6. Network Storage
Introduction
Installing the Samba server
Getting readyHow to do it…How it works…There's more…Tools for personal file sharingSee also
Adding users to the Samba server
Getting readyHow to do it…How it works…There's more…See also
Installing the secure FTP server
Getting readyHow to do it…How it works…There's more…See also
Synchronizing files with Rsync
How to do it…How it works…There's more…See also
Performance tuning the Samba server
Getting readyHow to do it…How it works…
Troubleshooting the Samba server
How to do it…Checking network connectivityChecking the Samba serviceChecking Samba logsChecking Samba configurationSee also
Installing the Network File System
Getting readyHow to do it…How it works…There's more…See also
7. Cloud Computing
Introduction
Creating virtual machine with KVM
Getting readyHow to do it…How it works…There's more…See also
Managing virtual machines with virsh
Getting readyHow to do it…How it works…There's more…Easy cloud images with uvtoolSee also
Setting up your own cloud with OpenStack
Getting readyHow to do it…How it works…There's more…See also
Adding a cloud image to OpenStack
Getting readyHow to do it…How it works…There's more…See also
Launching a virtual instance with OpenStack
Getting readyHow to do it…How it works…There's more…See also
Installing Juju a service orchestration framework
Getting readyHow to do it…How it works…There's more…See also
Managing services with Juju
Getting readyHow to do it…How it works…There's more…See also
8. Working with Containers
Introduction
Installing LXD, the Linux container daemon
Getting readyHow to do it…How it works…There's more…See also
Deploying your first container with LXD
Getting readyHow to do it…How it works…There's more…See also
Managing LXD containers
Getting ready…How to do it…There's more…See also
Managing LXD containers – advanced options
How to do it…How it works…
Setting resource limits on LXD containers
How to do it…How it works…There's more…See also
Networking with LXD
Getting readyHow to do it…How it works…There's more…See also
Installing Docker
Getting readyHow to do it…How it works…There's more…See also
Starting and managing Docker containers
Getting readyHow to do it…How it works…There's more…See also
Creating images with a Dockerfile
Getting readyHow to do it…How it works…There's more…See also
Understanding Docker volumes
Getting readyHow to do it…How it works…See also
Deploying WordPress using a Docker network
How to do it…How it works…There's more…See also
Monitoring Docker containers
How to do it…How it works…There's more…See also
Securing Docker containers
How to do it…See also
9. Streaming with Ampache
Introduction
Installing the Ampache server
Getting readyHow to do it…How it works…There's more…See also
Uploading contents and creating catalogs
Getting readyHow to do it…How it works…
Setting on-the-fly transcoding
Getting readyHow to do it…
Enabling API access for remote streaming
Getting readyHow to do it…How it works…
Streaming music with Ampache
Getting readyHow to do it…
10. Communication Server with XMPP
Introduction
Installing Ejabberd
Getting readyHow to do it…How it works…See also
Creating users and connecting with the XMPP client
Getting readyHow to do it…How it works…There's more…See also
Configuring the Ejabberd installation
Getting readyHow to do it…How it works…There's more…See also
Creating web client with Strophe.js
Getting readyHow to do it…How it works…There's more…See also
Enabling group chat
Getting readyHow to do it…How it works…There's more…See also
Chat server with Node.js
Getting readyHow to do it…How it works…There's more…See also
11. Git Hosting
Introduction
Installing Git
Getting readyHow to do it…How it works…There's more…See also
Creating a local repository with Git CLI
Getting ready How to do it…How it works…There's more…See also
Storing file revisions with Git commit
Getting readyHow to do it…How it works…There's more…
Synchronizing the repository with a remote server
Getting readyHow to do it…How it works…There's more…GitHub pagesSee also
Receiving updates with Git pull
Getting readyHow to do it…How it works…See also
Creating repository clones
Getting readyHow to do it…How it works…See also
Installing GitLab, your own Git hosting
Getting readyHow to do it…How it works…There's more…See also
Adding users to the GitLab server
Getting readyHow to do it…
Creating a repository with GitLab
Getting readyHow to do it…
Automating common tasks with Git hooks
Getting readyHow to do it…How it works…See also
12. Collaboration Tools
Introduction
Installing the VNC server
Getting readyHow to do it…How it works…See also
Installing Hackpad, a collaborative document editor
Getting readyHow to do it…How it works…There's moreUsing Hackpad with DockerSee also
Installing Mattermost – a self-hosted slack alternative
Getting readyHow to do it…How it works…There's more …See also
Installing OwnCloud, self-hosted cloud storage
Getting readyHow to do it…How it works…See also
13. Performance Monitoring
Introduction
Monitoring the CPU
Getting readyHow to do it…How it works…There's more…See also
Monitoring memory and swap
Getting readyHow to do it…How it works…There's more…See also
Monitoring the network
Getting readyHow to do it…How it works…There's more…
Monitoring storage
Getting readyHow to do it…
Setting performance benchmarks
Getting readyHow to do it…There's more…Graphing toolsMore optionsSee also
14. Centralized Authentication Service
Introduction
Installing OpenLDAP
Getting readyHow to do it…How it works…See also
Installing phpLDAPadmin
Getting readyHow to do it…How it works…There's more…See also
Ubuntu server logins with LDAP
Getting readyHow to do it…How it works…See also
Authenticating Ejabberd users with LDAP
Getting readyHow to do it…How it works…See also
Index

Content preview from Ubuntu Server Cookbook

Securing the web server

In this recipe, we will learn some steps for securing web server installation.

Getting ready

You will need access to a root account or an account with sudo privileges.

You may need to have a web server stack installed and running.

How to do it…

Follow these steps to secure the web server:

Disable any unwanted modules. You can check all enabled modules with the following command:
```
$ a2query -m
```
Disable modules with the following command:
```
$ sudo a2dismod status
```
Hide the web server's identity. For Apache, edit /etc/apache2/conf-available/security.conf and set the following values:
```
ServerSignature Off
ServerTokens Prod
```
You may want to check other options under security.conf.
Next, disable the Apache server status page:
```
$ sudo a2dismod ...
```

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781785883064

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills