Ubuntu インストール(sakura) =========================== # ユーザアカウント ## regist ``` $ passwd $ adduser kanai ...(Input) Is the information correct? [Y/n] y $ sudo visudo 適当に選ぶ kanai ALL=(ALL) ALL kanai ALL=NOPASSWD: ALL ``` ## sshの鍵を登録する ```Shell su - kanai mkdir /home/kanai mkdir /home/kanai/.ssh chmod 700 /home/kanai/.ssh touch /home/kanai/.ssh/authorized_keys chmod 400 /home/kanai/.ssh/authorized_keys chown -R kanai:kanai /home/kanai ``` # ufw ``` systemctl status ufw -> active ufw disable sudo ufw status -> inactive sudo ufw status verbose sudo ufw allow 22/tcp sudo ufw allow 80/tcp sudo ufw allow 443/tcp sudo ufw allow 53/udp sudo ufw default deny sudo ufw enable sudo ufw reload sudo ufw status verbose ``` 動作確認 ------------------ :: sudo apt-get install apache2 sudo ln -s /etc/apache2/mods-available/userdir.conf /etc/apache2/mods-enabled/userdir.conf sudo ln -s /etc/apache2/mods-available/userdir.load /etc/apache2/mods-enabled/userdir.load sudo ln -s /etc/apache2/mods-available/auth_digest.load /etc/apache2/mods-enabled/auth_digest.load sudo systemctl reload apache2 cd ~; mkdir public_html; cd public_html; touch index.html sudo journalctl -u apache2 sudo vi /etc/apache2/sites-enabled/000-default.conf DocumentRoot /home/kanai/public_htmlへ # NS(bind9) sudo apt-get install bind9 sudo ln -s /etc/bind /var/namedb cd /etc/bind/ rm named.conf.default-zones named.conf.local named.conf.options vi named.conf named-checkconf service bind9 restart ``` options { directory "/var/cache/bind"; allow-transfer { trust-network; }; auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; }; zone "." { type hint; file "/etc/bind/db.root"; }; zone "localhost" { type master; file "/etc/bind/db.local"; }; zone "127.in-addr.arpa" { type master; file "/etc/bind/db.127"; }; zone "0.in-addr.arpa" { type master; file "/etc/bind/db.0"; }; zone "255.in-addr.arpa" { type master; file "/etc/bind/db.255"; }; acl "trust-network" { localhost; 127.0.0.1; ::1; }; zone "hogetan.net" { type master; file "/etc/bind/zone.hogetan.net"; }; ``` vi zone.hogetan.net ``` $TTL 86400 @ IN SOA os3-384-25246.vs.sakura.ne.jp. root.os3-384-25246.vs.sakura.ne.jp.( 8 ; Serial 180 ; Refresh(1h) 900 ; Retry(15min) 3600000 ; Expire(1000h) 86400 ; Minimum(24h) ) IN NS os3-384-25246.vs.sakura.ne.jp. IN A 133.167.108.250 www IN A 133.167.108.250 ``` sphinx ===================== :: sudo apt-get install texlive-latex-base ntp =============== :: sudo apt-get install ntp sudo vi /etc/ntp.conf :: server ntp1.jst.mfeed.ad.jp server ntp2.jst.mfeed.ad.jp server ntp3.jst.mfeed.ad.jp fudge 127.127.1.0 stratum 10 driftfile /var/lib/ntp/ntp.drift logfile /var/log/ntpd.log authenticate no # default deny all restrict default ignore restrict 45.0.0.0 mask 255.255.0.0 noquery nomodify nopeer notrust notrap restrict 172.16.0.0 mask 255.255.0.0 noquery nomodify nopeer notrust notrap restrict 210.173.160.27 noquery nomodify restrict 210.173.160.57 noquery nomodify restrict 210.173.160.87 noquery nomodify restrict 127.0.0.1 :: sudo touch /var/lib/ntp/drift sudo chown ntp:ntp /var/lib/ntp/drift sudo service ntp restart sudo ntpq -p -> 少し待ちます(reachが377になるまで) syslog-ng ========================== :: sudo aptitude install syslog-ng vi /etc/syslog-ng/syslog-ng.conf internal()のあとにudp追加。 source s_src { unix-dgram("/dev/log"); internal(); udp(); file("/proc/kmsg" program_override("kernel")); }; filter f_host_router { netmask(192.168.100.254/32); }; destination homelog { file("/var/log/homelog" perm(0644)); }; log { source(s_src); filter(f_host_router); destination(homelog); }; filter f_local1 { facility(local2) ; }; destination l2l3log { file("/var/log/l2l3" perm(0644)); }; log { source(s_src); filter(f_local1); destination(l2l3log); }; sudo service syslog-ng restart logger -h 127.0.0.1 -p local1.debug hoge python ============================= :: # これなにようだっけ？ sudo apt-get install libatlas3gf-base f2c sudo pip install tweepy sudo apt-get install python-pip python-setuptools \ python-dev build-essential libfreetype6-dev libpng-dev python-virtualenv \ gfortran libblas-dev liblapack-dev g++ tk-dev \ python-numpy libhdf5-serial-dev sudo pip install PyYAML sudo pip install numpy -> とおらない sudo pip install scipy sudo pip install SymPy netCDF4 nose PIL matplotlib nltk sudo easy_install -U distribute sudo pip install nltk * python + emacs :: sudo apt-get install python-mode VLANconfigの基本 ========================= :: cat <> /etc/sysconfig/network VLAN=yes VLAN_NAME_TYPE=VLAN_PLUS_VID_NO_PAD NETWORKING_IPV6=yes NOZEROCONF=yes EOF T400の設定 ======================= :: apt-get install firmware-iwlwifi apt-get install wicd-cli apt-get install iw iwconfig wlan0 mode Managed iwconfig wlan0 essid beefbeef-home-air iwconfig wlan0 key bc1 iwlist wlan0 scanning wpa_passphrase beefbeef-home-air >> /etc/wpa_supplicant.conf wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf ブリッジにする ======================== :: apt-get install bridge-utils int ============ :: /etc/network/interfaces auto lo iface lo inet loopback auto eth0.100 iface eth0.100 inet dhcp auto eth0.500 iface eth0.302 inet static address 192.168.5.254 netmask 255.255.255.0 dhcpd ========================= :: apt-get install isc-dhcp-server vi /etc/dhcp/dhcpd.conf /etc/init.d/isc-dhcp-server restart router化 ============================= :: net.ipv4.tcp_syncookies = 1 net.ipv4.ip_forward = 1 net.ipv4.icmp_echo_ignore_broadcasts = 1 net.ipv4.icmp_ignore_bogus_error_responses = 1 iptables -t nat -A POSTROUTING -o eth0.100 -j MASQUERADE bind cache ====================== :: apt-get install bind9 gmailをsmtpサーバとして活用する ============================================== relayの設定：このホストを家庭ネットワークのrelayサーバとする場合、mynetworksに追加する :: sudo vi /etc/postfix/main.cf mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/16 とか。 gmailへのSSLトンネル確立 :: sudo apt-get install stunnel cd /etc/ssl/certs openssl req -new -x509 -nodes -days 365 -out stunnel.pem -keyout stunnel.pem chmod 600 stunnel.pem dd if=/dev/urandom of=temp_file count=2 openssl dhparam -rand temp_file 512 >> stunnel.pem ln -sf stunnel.pem `openssl x509 -noout -hash < stunnel.pem`.0 debug用コマンド: smtp.gmail.comにアクセスできるかは以下のコマンドで確認 openssl s_client -host smtp.gmail.com -port 465 sudo vi /etc/stunnel/stunnel.conf ; clientを書き換える client = yes ; Service-level configuration の下を以下だけにする ; 127.0.0.1をlocalhostにするとv6 onlyでlistenする.. [gmailsmtp] accept = 127.0.0.1:8465 connect = smtp.gmail.com:465 sudo vi /etc/default/stunnel4 ENABLE=1 sudo service stunnel4 restart 次に、postfix側でrelayの設定 :: plain認証のため(postfixの) sudo apt-get install cyrus-sasl2-dbg sudo vi /etc/postfix/main.cf relayhost = [localhost]:8465 smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/isp_passwd smtp_sasl_security_options = noanonymous smtp_sasl_mechanism_filter = cram-md5,digest-md5,plain,login sudo vi /etc/postfix/isp_passwd [localhost]:8465 :password> < ここはgmailのアプリケーションパスワードを入れる！(スペースは抜こう sudo chmod 400 /etc/postfix/isp_passwd sudo postmap /etc/postfix/isp_passwd sudo service postfix restart tftpd ============= :: # もし入っているなら消す sudo apt-get remove tftpd sudo apt-get install tftpd-hpa sudo vi /etc/default/tftpd-hpa # ここはよしなに変える TFTP_DIRECTORY="/tftpboot" # --createをいれるとファイルが新規に作れる TFTP_OPTIONS="--secure --create" # /tftpbootつくって所有者の変更 sudo mkdir /tftpboot/ sudo chown -R tftp /tftpboot/ sudo service tftpd-hpa restart # 詳細は以下 https://help.ubuntu.com/community/TFTP