SA2 v6 Linux System Administration II Net Configuration, Software, Troubleshooting

Transcription

1 SA2 v6 Linux System Administration II Net Configuration, Software, Troubleshooting Synopsis: This is the second System Administration class, a follow-on class for new administrators with limited networking and security experience for Linux based hosts. Students will experience added understanding of configuration issues of disks, bootup services, software, network and secure connections to network services. This class builds concepts and techniques required to administrate a Red Hat Enterprise Linux and or any other Linux version host with the assumption that all essential Linux file system concepts, utilities and command line concepts (SA1 Content) are understood and the student has experience using them recently. Duration : 4 days System Administration 2 Description: This course provides the student with hands on experience related to advanced hands off system installation, configuration and bootup files, troubleshooting bootup issues, configuring file space using partitions and advanced partitioning services like RAID and LVM, installing and configuring software, configuring networking services, log management, service startup management, process control, backup concepts and general desktop configuration for a workstation on a local area network. Students are expected to understand all SA1 concepts and skills regarding applications and the file system. This course builds on SA1 skills by focusing on the many concepts used within a Linux or UNIX environment to administer locally and remotely a workstation on LAN, Local Area Network. The objective of this class is to help attendees develop significant technical abilities in just a few days and optionally to prepare for the RHCSA exam. This course is more effective in developing the required skills than months of on the job training and individual study. This course is relevant to all Linux versions and specifically the current production release of Red Hat Enterprise Linux and Red Hat Fedora Linux on 32 or 64 bit Intel/AMD platforms which is also the basis for all lab exercises. This is not the starting point for a new to Linux or new Linux Admin. Prerequisites: LAN fundamentals or equivalent; Internet understanding and working with TCP/IP or equivalent. Several months of solid hands on experience managing any other type of system is also ideal. SA1 System Admininstration 1 - Essential Admin Concepts, Installation, Commands and Utilities course AND Optionally: ASP-123 Advanced Shell Programming (c) All Rights Reserved SA2-1

2 Follow-on: SA3 Linux System Administration 3 - Internet Network Services and Security Students attending this course will learn: Data Logging Services and Maintenance Basics of Hardware Virtualization using KVM Discover Basic Troubleshooting Tips and Techniques Detailed Hands Off Installation of Linux as a server Partitioning Needs for File Systems and Swap space File System Management, Advanced File Permissions: SUID, SGID Extended Network Setup and Configuration Advanced Repository Setup for Software Installation with YUM FTP, NFS and autofs Concepts, Connections and Tips RAID and LVM Concepts and Management Users and Groups Management Accessing Centralized Users+Groups, Appending Centralized Home Directories Process Management in GUI and TUI Printing Concepts and Configuration SELinux Concepts and Management Tools Encrypted File System Management Basic Firewall Concepts and Configuration Run Level Control, Single User and Multi-User Modes Secure Remote Access Audience: Anyone wanting to get a deeper understanding of administering Red Hat Enterprise Linux (or any Linux based) workstations in a local area network. Anyone wanting to understand and be able to install or update software, manage and backup file space, configure the network connection, connect to network resources, manage network services at bootup and thereafter, troubleshoot bootup, administrate advanced permissions SUID and SGID, create shared group directories and administrate printers and users, configure advanced file system services like RAID and LVM. (c) All Rights Reserved SA2-2

3 Linux Certification Tracks There are a few different certification tracks students can participate in. This is the first of 3 courses that would prepare any student with all the necessary knowledge. Red Hat certifications RHCSA and RHCE ( are hands-on examinations requiring the examinee to have a thorough understanding and extensive experience in order to achieve the requirements in the limited time frame of the exam. There are NO multiple choice questions, just labs to perform. ========================================================= Courses Suggested Certification SA1+SA2 RHCSA SA2+SA3 or SA4 RHCE LPI (Linux Professional Institute ) is a vendor neutral general multiple choice question examination now adopted by CompTIA for their CompTIA Linux+ certification. There are 3 certification levels: LPIC-1, LPIC-2 and LPIC-3, each requiring multiple tests. ========================================================= Suggested Certification Required Exams: SA1+SA2 LPIC-1 Junior Level Linux Professional Exams 101 and 102 Or ABC CompTIA Linux+ XK0-003 SA2 LPIC-2 Advanced Level Linux Professional : Exams 201 and 202 SA3 LPIC-3 Senior Level Linux Professional Exams 301 and 302 Ubuntu Certified Professional (UCP) ========================================================= Suggested Certification Required Exams: SA1+SA2 Ubuntu Certified Professional LPI 101, LPI 102 and Ubuntu 199 (c) All Rights Reserved SA2-3

4 Detailed Outline For Linux SA2 1 Hardware Requirements and Installing Linux Supported hardware, driver requirements, install options Step by step Installation Overview Pre-configured Installation Options Customized Disk Space Usage: RAID, LVM Custom Installation Overview Selecting Packages to Install Network Configuration Options Firewall and SELinux setup options Post Installation Configuration: Firstboot Custom Installation with specific software and partitions 2 Bootup, GRUB Boot Manager, VM Bootup Linux Bootup Overview Grub.conf configuration, Grub Stages and Commands Kernel Initialization, Logged to : /var/log/dmesg The init Command Steps Daemon Processes and System V Run Levels Runlevels defined Run Level Service Management : chkconfig Initialization management: /etc/inittab The /etc/init.d/rc.local script System Shutdown and Reboot Introduction To Hardware Virtualization Creation of Virtual Machines Managing Guest OS In Virtual Machines Configuring GRUB restricted access option Managing initialization and startup of network services Switching between run levels Managing orderly shutdowns and reboots (c) All Rights Reserved SA2-4

5 3 Partitions, Formatting, Mounting and swap Managing Disk Partitions : fdisk Formatting partitions : mkfs, ext2, ext3, ext4, swap Mount and umount partitions Permanent Bootup Configuration of Partitions: /etc/fstab Testing File System Configurations Rebuilding broken file system: fsck Building Secure Encrypted Partitions and File Systems Managing and Displaying Swap Resources Create partitions of ext3/ext4 with and without encryption Configure a new partition, format and make it available after reboot Configure a new swap partition, format and make it available after reboot Format partitions, create permanent mount points in /etc/fstab Create an encrypted file system, mount and umount 4 RPM and YUM Package Management Concepts of 'Packages' and Package Managers Using RPM Displaying current packages installed Adding, removing packages Tar Balls of software Installing tar balls of software Configuring and using the YUM frontend to RPM How to Extract and Utilize Source RPM's Viewing installed software Installing software at the prompt and in X Query packages, add a package, remove it using RPM and YUM (c) All Rights Reserved SA2-5

6 5 Managing Users and groups Concepts of login control, users and groups Shadow file login restrictions Securing the root account Creation of basic user accounts Choice of command shell to use: sh, ksh, bash User tools: chsh, chgrp, passwd, chfn, chown Establishing Administrative Roles : sudo Basic Security Settings Advanced Permission Modes: SUID, SGID, Sticky Overview of modes, umask and chmod Creating a Group Shared Directory for specific users Pluggable Authentication Modules, PAM, configuration and use Centralized user accounts from NIS and LDAP, client setup Connecting Roaming Users: NIS/LDAP Auto-Mounting Home Directories: autofs Creating, managing and monitoring file system quotas Add, modify and remove user accounts Display User ID Information Change file ownership Change Password Age Settings Switch to different user accounts Manipulate file security settings Create a shared group directory Create a public and a group restricted directory Configure limited access using PAM Configure access to NIS, optionally LDAP, services for additional users Configure quotas for users and groups (c) All Rights Reserved SA2-6

7 6 Admin Tools : IPv4, IPv6, cron, Logs, Process Control, CUPS Concepts of IPv4 and IPv6 Networking Protocols LAN network settings, connection basics Using Static or DHCP networking Network files and parameters within files Host Name Resolution, /etc/hosts, DNS Client set Network Diagnostics: ping, netstat, traceroute, mtr IPv6 features, setup and configuration IPv6 utilities: DHCPv6, ping6, traceroute6, ip, DNS Periodic Job Control: cron, crontab, at, anacron Log Rotation Controls and Management Configuring syslog Options Temp File and Log File Management: tmpwatch, logrotate Process Monitoring: ps, top, gnome-system-monitor uptime, w, free and vmstat utilities Controlling Processes : top, kill, GUI System Monitor Interpreting performance measurements Printer configuration using CUPS Configuring manual and DHCP IP settings Forcing DHCP settings to release and renew Testing network connectivity Configuring and Testing IPv6 settings Creating cron and at jobs to manage a host Observing and managing log rotation Observing and managing processes (c) All Rights Reserved SA2-7

8 7 Advanced File System Features Kernel Features and Modularity Retrieving and Updating To A Newer Kernel RPM Concepts of 'Tuning' a Kernel /proc Virtual File System Features and Usage /proc System Control Utility : sysctl Kernel Modular Design and Commands lsmod, rmmod, insmod, modprobe Modules Configuration /etc/modprobe.conf Overview Of SELinux Concepts, Usage and Management SELinux Utilities and Troubleshooting Overview Of RAID Levels and Features Creating RAID Devices and Volumes Info and Recovery Options For mdadm Flexible File Systems With LVM Creating Physical Volume, Volume Group and Logical Volume Extending Volume Groups and Logical Volumes : vgextend Resizing Logical Volumes : e2fsadm Display LVM Information Install and use alternative kernel Observe modules being loaded by kernel Manage run level and services in various run levels Manage services started at reboot Create LVM and RAID partitions for ext3 Configure a new RAID device, format and make it available after reboot Configure a new LVM device, format and make it available after reboot Extend a logical volume while the logical volume is still attached 8 Host Management : X + kickstart XOrg Overview Concepts of Installing Systems On LAN/WAN Creating Installation Server Creating kickstart Installation Scripts File Locations and Configuration Tool Modularity Of X Design and Extensibility Built Into Design Layers In X, Desktops and The X Protocol Secure Host Access ssh VNC Remote X Display kickstart Automated Installation Understanding kickstart directives Building and Deploying A kickstart File (c) All Rights Reserved SA2-8

9 Configure installation service Configure and test kickstart scripts Switch desktops, remote desktop access 9 Hardware Virtualization with KVM Virtualization Manager Hardware Considerations Virtual Resources Creating a Virtual Machine (VM) VM Management Activating VM's on boot Install virtualization software Create a virtual machine Manage virtual machine with virtmanager 10 Managing Services: NTP, Web, FTP, VNC, Firewall Configure NTP on Hosts Configure FTP File Sharing Configure Web Service Configure Secure Remote Desktop Access Firewall Configuration for Network Services Testing Network Services Install Various Server Services Create Shared Files on Web and FTP Services Provide Secure Terminal Access : SSH Provide Remote Secure Desktop Services (c) All Rights Reserved SA2-9

10 11 Special Kernel Services And Utilities Kernel Concepts, Management, Tuneables Managing, Reviewing, Troubleshooting SELinux Events restorecon, setenforce, setsebool, semanage,.. Configure File Access Control Lists Last Line Of Defense: On-Line Docs, Bugzilla Lock down files Provide Expanded Access Controls 12 Troubleshooting Your System Concepts of Troubleshooting a Broken System Creating an Emergency Boot Disk Getting to Single User Mode Getting to Rescue Mode Using chroot in Rescue Mode Where to start looking for trouble: log files Examples of broken systems and what to do Bad boot block, bad file system, bad fstab, Network down, NFS not working Emergency scenarios and how to repair them Repairs from single user mode Repairs from executive mode Using the chroot command within rescue mode to: Rebuild boot block Recover from bad root partition How To Break Into ANY Linux System How To Recover/Replace root Password How To Get Buy Locked Down Grub Configuration (c) All Rights Reserved SA2-10