Netkiller Linux 手札 Debian/Ubuntu Cookbook Neo Chan

[neo.chan]

Netkiller Linux 手札
Debian/Ubuntu Cookbook
Neo Chan



中国广东省深圳市宝安区龙华镇
518109
+86 755 29812080
+86 755 29812080
<openunix@163.com>
文档出处
http://netkiller.8800.org/
http://netkiller.hikz.com/
http://netkiller.mefound.com

版权 © 2006, 2007, 2008 Netkiller(Neo Chan). All rights reserved.

版权声明

你可以任意转载，转载请与作者联系，转载时请务必标明文章原始出处和作者信息及本声明。

文档最近一次更新于 {latest}

对初学Linux的爱好者忠告

玩Linux最忌reboot（重新启动）这是windows玩家坏习惯

Linux 只要接上电源你就不要再想用reboot,shutdown,halt,poweroff命令,Linux系统和应用软件一般备有 reload,reconfigure,restart/start/stop...不需要安装软件或配置服务器后使用reboot重新引导计算机

在 Linux系统里SIGHUP信号被定义为刷新配置文件,有些程序没有提供reload参数,你可以给进程发送HUP信号,让它刷新配置文件,而不用 restart.通过pkill,killall,kill 都可以发送HUP信号例如: pkill -HUP httpd

鸣谢

目录

自述

本文目的
内容简介
读者对象
写给读者
作者简介
联系作者

1 . Introduction

Linux
disable x window
APT
console timeout
tar - GNU tar / compress and decompress

2 . System

device information
System Information
time zone

to change system date/time

3 . Command Shell

find and replace
to convert utf-8 from gb2312 code
php function check

I. Network

4 . network tools

wget
axel
ncftp
curl
w3m
lynx
nmap
rdesktop - A Remote Desktop Protocol client
tcpdump

5 . ethernet

Interfaces
Mask
Gateway
sysctl
bonding

Ubuntu

6 . DNS/Bind

bind9
Load Balancing
view
tools

7 . Proxy Server

Socks 5
Apache Proxy

8 . Squid - Internet Object Cache (WWW proxy cache)

debian/ubuntu 安装
Proxy Server
Squid作为反向代理Cache服务器(Reverse Proxy)
代理+反向代理
Squid 管理
禁止页面被Cache
Squid 实用案例

Squid Apache/Lighttpd 在同一台服务器上
用非 root 用户守护 Squid

9 . News Group (innd)

User Authentication

10 . NET SNMP (Simple Network Management Protocol)

安装SNMP
例出MBI
Cacti

11 . Ftp Server

ProFTPD + MySQL / OpenLDAP 用户认证

Proftpd + MySQL
Proftpd + OpenLDAP

Pure-FTPd + LDAP + MySQL + PGSQL + Virtual-Users + Quota

II. Security

12 . OpenSSH

maximum number of authentication
disable root SSH login
Automatic SSH / SSH without password

13 . ip tunnel

ipv4

14 . OpenVPN

Ubuntu/Debian 环境安装
OpenVPN GUI for Windows
源码安装

15 . Firewall

ulogd
Firewall GUI Tools
Shorewall Tools

16 . FreeRADIUS

ldap
mysql
WAP2 Enterprise

17 . Kerberos

安装
生成kerberos的本地数据库

18 . Email

III. Web Application

19 . Lighttpd and fastcgi

quick install with aptitude
to compile and then install lighttpd

compress module
shell script

PHP

php fastcgi

Python
Perl

Installing lighttpd and FastCGI for Catalyst

20 . LAMP

quick install apache with aptitude

deflate
ssl
VirtualHost
~/public_html
PHP 5

Compile and then install Apache

Apache 安装与配置
PHP
Shell Script

XAMPP for Linux

21 . Tomcat 安装与配置

tomcat
mod_jk
mod_proxy_ajp
RewriteEngine 连接 Tomcat

22 . Application Service

Zope
JBoss - JBoss Enterprise Middleware

23 . Web Server Optimization

ulimit
Apache 调优

worker

Tomcat
deflate

测试 gzip,deflate 模块

Apache Log
跟踪用户的cookie
Zend Optimizer

24 . Web Appendix

综合测试
PHP connect SQL Server under unix like

IV. Database

25 . PostgreSQL

Install
Postgres 配置
PostgreSQL 实用实例参考

26 . MySQL

Installation
Replication

Master
Slave
Testing

MySQL CLuster

Management node (MGM node)
Data node
SQL node
Starting
Shutdown
Testing

27 . SQL

SQL 99
SQL 92

28 . database design

opensource database design tools

V. Storage And Backup/Restore

29 . Samba

install
config
test

30 . Rsync
31 . tsync
32 . csync2
33 . Unison File Synchronizer

local
remote
config

34 . Network Storage - Openfiler

Accounts
Volumes

RAID
iSCSI

Quota
Shares

35 . Amanda: Open Source Backup
36 . inotify

inotify-tools
Incron

37 . Distributed Filesystem

DRBD (Distributed Replicated Block Device)
Coda

VI. Cluster

39 . Linux Virtual Server

环境配置
VS/NAT
VS/TUN
VS/DR

配置文件

ipvsadm script
debug

40 . keepalived

安装
test

41 . heartbeat+ldirectord

VII. Developer

42 . Editor

VIM

43 . compiler

gcc - The GNU C compiler
g++ - The GNU C++ compiler
make
调试工具

ldd

44 . Python

Django
Python Imaging Library

45 . Perl

Catalyst Web framework

46 . PHP 5

pear - Packages
PHPUnit - Unit testing framework for PHP

47 . Java
48 . Project

Subversion
TRAC
TUTOS

49 . Memcached

python-memcached
Java API
PHP Memcache

50 . OpenLDAP server (slapd)

Installation
基本操作
Active Directory
Replication
Backup and Restore

51 . Assistant

Webmin
logwatch
awstats
webalizer
Cacti
Nagios
BIG BROTHER
Ganglia

52 . Open Source Distributed Computing

Boinc (berkeley 分布式计算平台)

53 . Multimedia

ImageMagick
How to add metadata to digital pictures from the command line
broadcast streaming

icecast
shoutcast

54 . Voice over IP

Gnu Gatekeeper

Gnu Gatekeeper Install
Gnu Gatekeeper Configure
Gnu Gatekeeper Test

Asterisk (OpenSource Linux PBX that supports both SIP and H.323)
OpenSER SIP Server

55 . 案例

大型网站架设指南
基于LVS的集群邮件系统

56 . 历史记录
A. 附录

[woohaha]

对初学Linux的爱好者忠告

玩Linux最忌reboot（重新启动）这是windows玩家坏习惯

Linux 只要接上电源你就不要再想用reboot,shutdown,halt,poweroff命令,Linux系统和应用软件一般备有 reload,reconfigure,restart/start/stop...不需要安装软件或配置服务器后使用reboot重新引导计算机

不是吧，我每次更新完kernal都被要求重启。

[neo.chan]

对初学Linux的爱好者忠告

玩Linux最忌reboot（重新启动）这是windows玩家坏习惯

Linux 只要接上电源你就不要再想用reboot,shutdown,halt,poweroff命令,Linux系统和应用软件一般备有 reload,reconfigure,restart/start/stop...不需要安装软件或配置服务器后使用reboot重新引导计算机

不是吧，我每次更新完kernal都被要求重启。

你太有才了，我每次开关电源坏了，也有重启。

[neo.chan]

Netkiller Linux 手札
下一页
Home | Mirror
Netkiller Linux 手札
Debian/Ubuntu Cookbook
Mr. Neo Chan, 陈景峰



中国广东省深圳市宝安区龙华镇
518109
+86 755 29812080
+86 755 29812080
<openunix@163.com>
文档出处
http://netkiller.8800.org/
http://netkiller.hikz.com/
http://netkiller.mefound.com

版权 © 2006, 2007, 2008, 2009 Netkiller(Neo Chan). All rights reserved.

版权声明

你可以任意转载，转载请与作者联系，转载时请务必标明文章原始出处和作者信息及本声明。

文档最近一次更新于 Mon Dec 22 10:18:02 UTC 2008

对初学Linux的爱好者忠告

玩Linux最忌reboot（重新启动）这是windows玩家坏习惯

Linux 只要接上电源你就不要再想用reboot,shutdown,halt,poweroff命令,Linux系统和应用软件一般备有 reload,reconfigure,restart/start/stop...不需要安装软件或配置服务器后使用reboot重新引导计算机

在 Linux系统里SIGHUP信号被定义为刷新配置文件,有些程序没有提供reload参数,你可以给进程发送HUP信号,让它刷新配置文件,而不用 restart.通过pkill,killall,kill 都可以发送HUP信号例如: pkill -HUP httpd

鸣谢

目录

自述

本文目的
内容简介
读者对象
写给读者
作者简介
联系作者

1. Introduction

Distribution information
Linux Installation

I. System

2. Locale

time zone
to change system date/time

3. Device manager

Device information

dmesg - print or control the kernel ring buffer
dmidecode - DMI table decoder
usb device

console / terminal

serial console
console timeout
TUI (Text User Interface)
disable x window

Harddisk

Show partition
Create partition
Format partition
Mount partition

Removable Storage

usb flash
CD / DVD

loop devices
Network

Network adapter
Ethernet Interfaces
Mask
Gateway
sysctl
bonding

4. Packages

Debian / Ubuntu apt-get

Update
Search
Installation
Remove
List of installed software packages
dpkg-reconfigure

tar - GNU tar / compress and decompress

tar examples
gzip
b2zip

zip, zipcloak, zipnote, zipsplit - package and compress (archive) files

5. Service

runlevel
xinetd - replacement for inetd with many enhancements
Scheduled Tasks

crontab - maintain crontab files for individual users
at, batch, atq, atrm - queue, examine or delete jobs for later execution

6. Commnad

directory and file
grep, egrep, fgrep, rgrep - print lines matching a pattern
find - search for files in a directory hierarchy

7. Profile

shell

8. Permission

User
Group

Add a user to the group

9. Process

ps - report a snapshot of the current processes
pstree - display a tree of processes
pid
jobs

nohup - run a command immune to hangups, with output to a non-tty

10. Monitor

uptime - Tell how long the system has been running.
Memory
vmstat - Report virtual memory statistics
strace - trace system calls and signals
lsof - list open files
input/output statistics

II. Network Application

15. network tools

curl / w3m / lynx
nmap
tcpdump
rdesktop - A Remote Desktop Protocol client

16. DNS/Bind

bind9
Load Balancing
view
tools

17. Proxy Server

Socks 5
Apache Proxy

18. Squid - Internet Object Cache (WWW proxy cache)

debian/ubuntu 安装
Proxy Server
Squid作为反向代理Cache服务器(Reverse Proxy)
代理+反向代理
Squid 管理
禁止页面被Cache
Squid 实用案例

Squid Apache/Lighttpd 在同一台服务器上
用非 root 用户守护 Squid

19. News Group (innd)

User Authentication

20. NET SNMP (Simple Network Management Protocol)

安装SNMP
例出MBI
Cacti

III. Security

21. OpenSSH

maximum number of authentication
disable root SSH login
Automatic SSH / SSH without password
Putty
OpenSSH Tunnel

22. ACL - Access Control List

getfacl - get file access control lists
setfacl - set file access control lists

set
default
remove

backup and restore

23. sysctl - configure kernel parameters at runtime

net.ipv4.ip_forward

24. iptables - administration tools for packet filtering and NAT

refresh chains
list chains
chains admin
INPUT Rule Chains

OpenSSH
FTP
DNS
WWW
SOCKS5
Mail Server
MySQL
PostgreSQL
DHCP
Samba
ICMP
禁止IP访问自己
DENY

OUTPUT Rule Chains

outbound
ICMP
禁止自己访问某个IP

Forward

TCPMSS

NAT

redirect
MASQUERADE
DMZ zone

IPV6
ulogd - The Netfilter Userspace Logging Daemon

25. Firewall

ufw - program for managing a netfilter firewall

DHCP
Samba

Firewall GUI Tools
Shorewall Tools

26. ip tunnel

ipv4

27. OpenVPN (openvpn - Virtual Private Network daemon)

Ubuntu/Debian 环境安装
OpenVPN GUI for Windows
源码安装

28. FreeRADIUS

ldap
mysql
WAP2 Enterprise

29. Kerberos

CentOS 安装
Install by apt-get
生成kerberos的本地数据库

IV. File Transfer

30. wget - retrieves files from the web
31. axel - A light download accelerator - Console version
32. ncftp

batch command
ncftpget
ncftpput

33. ProFTPD + MySQL / OpenLDAP 用户认证

Proftpd + MySQL
Proftpd + OpenLDAP

34. Pure-FTPd + LDAP + MySQL + PGSQL + Virtual-Users + Quota
35. rsync - fast remote file copy program (like rcp)

install with source
install with aptitude
upload
download
mirror
step by step to learn rsync
rsync examples

backup to a central backup server with 7 day incremental
backup to a spare disk
mirroring vger CVS tree
automated backup at home
Fancy footwork with remote file lists

rsync for windows

36. tsync
37. Unison File Synchronizer

local
remote
config

38. csync2

server
node
test
Advanced Configuration

V. Web Application

39. Lighttpd and fastcgi

quick install with aptitude

php fastcgi

to compile and then install lighttpd

compress module
shell script

simple-vhost
redirect
rewrite
alias.url
PHP

php fastcgi

Python
Perl

Installing lighttpd and FastCGI for Catalyst

40. LAMP

Compile and then install Apache

Apache 安装与配置
PHP

Quick install apache with aptitude

command
rewrite module
PHP module
deflate module
ssl module
VirtualHost
~userdir module - /public_html

XAMPP for Linux
PHP 5
Mod Perl

41. Tomcat 安装与配置

tomcat
mod_jk
mod_proxy_ajp
RewriteEngine 连接 Tomcat
Testing file
Script 1
Shell Script 2

42. Application Service

Zope
JBoss - JBoss Enterprise Middleware

43. Web Server Optimization

ulimit
Apache 调优

worker

Tomcat
deflate

测试 gzip,deflate 模块

Apache Log
跟踪用户的cookie
Zend Optimizer
eaccelerator
Memcached
khttpd

44. Web Analysis

综合测试
awstats
webalizer

VI. Database And LDAP

45. PostgreSQL

Install
Postgres 配置
Backup / Restore
PostgreSQL 实用实例参考

46. MySQL

Installation
Replication

Master
Slave
Testing

MySQL CLuster

Management node (MGM node)
Data node
SQL node
Starting
Shutdown
Testing

The Slow Query Log

47. OpenLDAP server (slapd)

Installation
基本操作

Add
Search
Modify
Delete
Search

Active Directory
Replication

Primary
Secondary

Backup and Restore

VII. Storage And Backup/Restore

48. Samba

install
share
test
user
smbfs
Security consideration

49. Network Storage - Openfiler

Accounts
Volumes

RAID
iSCSI

Quota
Shares

50. Amanda: Open Source Backup
51. inotify

inotify-tools
Incron - cron-like daemon which handles filesystem events

52. Distributed Filesystem

DRBD (Distributed Replicated Block Device)

disk and partition
Installation
configure
Starting
Using

Coda

VIII. Cluster

54. Linux Virtual Server

环境配置
VS/NAT
VS/TUN
VS/DR

配置文件

ipvsadm script
debug
ipvsadm monitor

55. keepalived

安装
test

56. heartbeat+ldirectord

IX. Monitor and Assistant

57. Webmin
58. logwatch
59. awstats
60. webalizer
61. Cacti
62. nulog
63. Zenoss
64. Nagios
65. BIG BROTHER
66. Ganglia

X. Multimedia

67. ImageMagick
68. How to add metadata to digital pictures from the command line
69. broadcast streaming

gnump3d - A streaming server for MP3 and OGG files
icecast2 - Ogg Vorbis and MP3 streaming media server

installation from source

shoutcast
PeerCast

70. To convert multimedia format

To convert .rm files to .mp3
encode to Macromedia Flash format

XI. Instant messaging

71. IRC - Internet Relay Chat
72. jabber
73. Voice over IP

Gnu Gatekeeper

Gnu Gatekeeper Install
Gnu Gatekeeper Configure
Gnu Gatekeeper Test

Asterisk (OpenSource Linux PBX that supports both SIP and H.323)
OpenSER SIP Server

74. Open Source Distributed Computing

Boinc (berkeley 分布式计算平台)
ubuntu apt-get 安装

A. 案例

大型网站架设指南
基于LVS的集群邮件系统

B. 附录

CentOS / Redhat Notes

useful command
mysql

查找文件并删除
xargs
find and replace
to convert utf-8 from gb2312 code
php function check

C. 历史记录

表格清单

1.1. Linux partition
23.1. net.ipv4.ip_forward
49.1. Volume Group Management

范例清单

3.1. bonding example
27.1. server.conf
27.2. client.conf
27.3. server.ovpn
27.4. client.ovpn
27.5. openvpn.conf
35.1. examples
35.2. backup to a central backup server with 7 day incremental
35.3. backup to a spare disk
35.4. mirroring vger CVS tree
35.5. automated backup at home
35.6. Fancy footwork with remote file lists
38.1. /etc/csync2.cfg
39.1. /etc/init.d/lighttpd
39.2. fastcgi.conf
40.1. index.php
40.2. mod_perl.conf
41.1. /etc/rc.d/init.d/www
43.1. /etc/init.d/memcached
47.1. base-dn.ldif
47.2. ou.ldif
55.1. keepalived.conf
61.1. cacti config.php
62.1. config.php

下一页
自述