https://lukeslinux.co.uk/ 2026-04-16T22:52:45+00:00 https://lukeslinux.co.uk/ https://lukeslinux.co.uk/_media/wiki:logo.png text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/acl?rev=1716449179&do=diff Setting Permissions Removing Permissions Removing All Acls text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/acl_backup?rev=1716449179&do=diff Backing Up ACLs Restoring ACLs text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/adding_routes?rev=1716449179&do=diff Adding Routes CentOS 6.x To add a route, you can use the following command and replacing <destination>, <gateway>, <interface>: Once you have confirmed the route is working, you will need to add it to configuration file to make sure the route survives a reboot. Replace <interface> with the interface name text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ansible_installation?rev=1716449179&do=diff Official documentation for ansible: <http://docs.ansible.com/ansible/intro_getting_started.html> Note: older syntax (1.9.x) is compatible with ansible 2.2.x. 2.2.x syntax is NOT compatible with 1.9.x text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ansible_intro?rev=1716449179&do=diff Running ansible playbook To run an ansible playbook you can run the following command: Option Description -s, --sudo Force all plays to use sudo, even if not marked as such Running script locally By default ansible will run against the hosts in the following file: /etc/ansible/hosts text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_auth?rev=1716449179&do=diff Apache Authentication Apache 2.2.x and 2.4.x differ in their configuration for Basic authentication. Apache 2.2.x Directive Explanation Order Deny, Allow The deny rules are applied first, THEN the Allow rules are applied. Deny from all This denies EVEYONE access text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_buddy?rev=1716449179&do=diff Apache Buddy The following script can be used to understand your apache configuration and suggest suitable Max Client values based on largest apache processes and system RAM. The script was written for apache by Richard Forth <https://github.com/richardforth> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_configuration?rev=1716449179&do=diff Apache Configuration text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_configuration_centos?rev=1716449179&do=diff Configuration File: Apache 2.4 Pre-fork configuration The default location for the settings in apache 2.4 are: /etc/httpd/conf.modules.d/00-mpm.conf Note: If ServerLimit is lower then MaxRequestWorkers then you will get the following error: [root@apache ~]# httpd -t AH00180: WARNING: MaxRequestWorkers of 500 exceeds ServerLimit value of 256 servers, decreasing MaxRequestWorkers to 256. To increase, please see the ServerLimit directive. Syntax OK text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_fullstatus?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_htaccess?rev=1716449179&do=diff .htaccess CentOS/RHL <https://files.rackerjack.uk/htaccess/> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_htaccess_centos?rev=1716449179&do=diff htaccess for apache .htaccess allows for management of webserver configuration and can be used for things link: specifying protecting of a location, protecting wp-admin login for wordpress and configuring mod_rewrites. To use the .htaccess file you will need to allow the file the ability to override all. This will need to be configured in the apache config file or the vhost itself. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_maxc?rev=1716449179&do=diff ---Work in progress--- text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_security?rev=1716449179&do=diff Apache Security It is very important to keep your server secure. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_security_hiddenfiles?rev=1716449179&do=diff IMPORTANT It is important to note that apache WILL server hidden content (hidden files defined by '.' eg .hidden). The httpd.conf or apache2.conf file comes with an entry preventing .htaccess and .htpasswd files being served: Will will need to add an entry preventing other/all hidden files being served. Add the following content directly under the above content in the httpd.conf (apache2.conf file) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_security_php?rev=1716449179&do=diff Hiding php version If you run a curl on your website similar to the curl below, does it return php versions? This is NOT secure. We will now make a simple change to the /etc/php.ini file to hide this Example curl: To hide the php value, turn the following value Off text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_security_version?rev=1716449179&do=diff Hiding apache version If you run a curl on your website similar to the curl below, does it return apache versions? This is NOT secure. We will now make a simple change to the httpd.conf or apache2.conf file to hide this Example curl: Value text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_sitedown?rev=1716449179&do=diff Note: I have written a python script to check a system and report back on any potential Out-Of-Memory issues: Step 1 did apache hit max clients? CentOS/RHL Ubuntu/Debian Note: Could use error.log rather than error_log Step 2 Did the server run out of memory and kill processes that killed a vital service? CentOS/RHL text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_vhost?rev=1716449179&do=diff Apache vhost text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_vhost_centos?rev=1716449179&do=diff Vhosts (CentOS/RHEL) Default configuration file: /etc/httpd/conf.d/ You will need to create a vhost in this directory, with the file ending in .conf. For example: /etc/httpd/conf.d/example.co.uk.conf Example vhost for apache Globally change website from example.com to your required domain: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/apache_vhost_ubuntu?rev=1716449179&do=diff Configuring (all distributions) Default configuration file: /etc/apache2/sites-available/ You will need to create a vhost in this directory, with the file ending in .conf. For example: /etc/apache2/sites-available/example.com.conf Example vhost for apache text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/awk?rev=1716449179&do=diff AWK text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/bash_scripting?rev=1716449179&do=diff Bash Scripting text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/basic_awk?rev=1716449179&do=diff The following prints all lines in the file specified. You can also replace $0 with nothing. The following will only print the first column in the file. The -F is the field seperator and is specified with: -F“:” You can also select multiple columns and separate them with a space for a better format text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/bold_and_underlined?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/brute_force?rev=1716449179&do=diff This command will tell you how many failed ssh attempts have been made, from what IP address and their location in the world text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/clusters?rev=1716449179&do=diff Types of Clusters There are 4 main types of clusters: - Storage - High Availability (HA) - Load Balancing - High Performance High Availability Storage Allows servers to simultaniously read and write to a single shared filesystem. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/clusters_install?rev=1716449179&do=diff Service Description ricci Cluster management daemon (Remote cluster and storage management) Default port 11111 Propagates updated cluster configuration from (and to) cluster nodes luci Luci is a web-based HA administration application Luci can handle most common cluster tasks - avoiding the need for manual configuration changes text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/code?rev=1716449179&do=diff Test text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/colours?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/commands?rev=1716449179&do=diff Active/Disabled Services Check to see if running services are also enabled (note, not all services will require to be enabled. Its just a rough guide to go by). Firewalld Runtime-to-perm text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/compromise?rev=1716449179&do=diff Application Level Compromise When investigating a server it is EXTREMELY important to note the processes running on the device. A lot of application level compromises end up with a perl process masquerading as other processes. The best thing to do is give you an example: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/configuration?rev=1716449179&do=diff Apache configuration text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/connetctions_to_port?rev=1716449179&do=diff Connections to port 80 This command will show all connections (including IP address) to port 80. You are able to change this port if your web server does not run on this by changing the |grep :80| section in the command below Show static view of connections to port 80: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/cores?rev=1716449179&do=diff Or or text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/creating_lvms?rev=1716449179&do=diff Physical Volume Create First we need to put markers on the devices that will be used to create the volume groups: Creating Volume Groups Now we need to create a volume group: Below is the command used to create a volume group from one or more physical volumes. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/cronjobs?rev=1716449179&do=diff Format Note: When creating crons, you will need to specify the FULL path to a command. Eg. On the command-line you may type: This is because bash shells introduced the $PATH environment variable: The shell will then search the environment variables from right to left until it finds the appropriate path. This allows you to type the command and options rather than the full path to the init script. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/curl_basics?rev=1716449179&do=diff Flag Description -I, --head Fetch the HTTP-header only -v, --verbose Fetching is more talkative. Used for debugging text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/database_size?rev=1716449179&do=diff or [mysql] silent table Size of ALL databases Note: You do not need to change the 'Database Name' entry File size of a specific db The following commands should be run inside mysql Note: replace “Data Base Name” with the db name. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ddos?rev=1716449179&do=diff for i in $(netstat -pant | awk '/apache/ {print $5}' | awk -F: '{print $1}' | sort | uniq | sort); do echo; echo $i; curl -s http://ip-api.com/csv/$i | awk 'BEGIN { FS = "," } ; { print $2, $5 }'; done #!/bin/bash for i in $(netstat -pant | awk '/apache/ {print $5}' | awk -F: '{print $1}' | sort | uniq | sort); do if curl -s http://ip-api.com/csv/$i | awk 'BEGIN { FS = "," } ; { print $2, $5 }' | grep China; then echo $i ufw insert 1 deny from $i comment "china IP ddos… text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/deleting_mail?rev=1716449179&do=diff Deleting Mail If your local mail is stored in single files like: /var/spool/mail/user Then you can use the mutt command to delete emails older than x number of days or months. Eg Once mutt has loaded, use the following set of commands, replacing 30d with the emails you with to delete older than text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/disk_io_issues?rev=1716449179&do=diff <http://bencane.com/2012/08/06/troubleshooting-high-io-wait-in-linux/> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/dns_doctoring?rev=1716449179&do=diff What Is DNS Doctoring? A server behind a firewall makes a request to a domain, example: example.com. You are then returned with a public IP address of that domain. This IP address is the Public address of your server but to access the domain, you need the private address (NAT). text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/docker_containers?rev=1716449179&do=diff Showing containers: Example output: Searching for an OS There are pre-configured docker containers, you are able to search for them using the search command: Example output Renaming a Container docker rename --help text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/docker_images_containers?rev=1716449179&do=diff Getting a fresh image: Once you have pulled the image you can view your docker images with: Example output: Creating a container Once you have the image downloaded you can create a container with the following Flag Explanation -i text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/docker_imaging?rev=1716449179&do=diff Imaging Docker Containers text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/docker_install?rev=1716449179&do=diff Installing docker is very simple: Now start the service and enable from boot: To test if it has been installed properly you can run the following command: You are looking for the following line to see if it has been installed correctly: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/docker_mounting?rev=1716449179&do=diff Mounting text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/docker_networking?rev=1716449179&do=diff Summary: Mode Explanation None No Networking in container Bridge Connection the container to the bridge via veth interfaces Host Use the host networking stack inside the container Container Use networking stack of another container text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/docker_push?rev=1716449179&do=diff Docker Hub Sign up for a free account: <https://hub.docker.com/> ---------- Registering Your Machine Method 1 Command: Method 2 ---------- Committing a container (PUSH) source: <https://docs.docker.com/reference/commandline/commit/> First you will need to commit a container, then you can push it to the repository text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/docker_run?rev=1716449179&do=diff Docker Run Command Flag Explanation -i Interactive Container -t creates a pseudo-TTY that attaches stdin and stdout --rm Remove the container after the command/script has finished -v adds a volume to the container -d tells Docker to run the container in the background text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/du_vs_ls?rev=1716449179&do=diff du vs ls Why is ls and du showing different sizes? When there is a difference in sizes between the two commands it means that the file is a sparse file: TL;DR ls is reporting the allocated size du is reporting the space actually used Sparse File text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/editor?rev=1716449179&do=diff <http://unix.stackexchange.com/questions/73484/how-can-i-set-vi-as-my-default-editor-in-unix> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/exclude_packages?rev=1716449179&do=diff To exclude packages permanently edit the yum.conf file: Add “exclude=package*” E.g: Temporary Solution: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/fail2ban-xmlrpc?rev=1716449179&do=diff The following guide will show how to use fail2ban to block xmlrpc attacks. We need to set up rules/regex that the jail will follow, this will look for log file entries depending on what we specify: Create a file called: /etc/fail2ban/filter.d/xmlrpc.conf text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/fail2ban_commands?rev=1716449179&do=diff View Current Jails What current jails are there? Viewing Jail Information Viewing the status of that jail such as: total banned, blocked IPs, number of failed attempts Ignore IP Getting the IPs Unban IP Fail2Ban < v0.8.8: Fail2Ban > v0.8.8: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/fail2ban_install?rev=1716449179&do=diff First we need to add the repository: Then we can install fail2ban with The default configuration file is jail.conf however we should avoid making changes to this and instead make changes to jail.local. Use the following command to make jail.local text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/fail2ban_ssh_config?rev=1716449179&do=diff To find the configuration settings for ssh you will need to edit the following file Once you are in the file you will need to locate the ssh-iptables section. It should look similar to the following: If you wish to change the default ssh port on your server then you can also change fail2ban to listen to the custom port. Simply replace port=ssh with the ssh port number eg. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/fail2ban_wp-login?rev=1716449179&do=diff Create the following filter for wp-login in /etc/fail2ban/filter.d/wp-login.conf Append the following to /etc/fail2ban/jail.conf text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/fileadmin?rev=1716449179&do=diff File Admin text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/fileadmin_file_sizes?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/fileadmin_scp?rev=1716449179&do=diff Secure transfer of database to another server (scp) Once you have taken a mysql dump you may want to transfer this to another server. You can do this using scp (secure copy). Example: The example above securely copies the db to the server x.x.x.x and places the file in the root directory. (note: you will need to enter the password for the destination user/server) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/filesystem_usage?rev=1716449179&do=diff Command to show how much free space left in current filesystem text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/filesystem_usage_delete_files?rev=1716449179&do=diff Clearing Deleted Files WITHOUT an Application Restart Ever deleted a file and wondered why the disk space hasn't cleared? Chances are the application is still keeping the old file open. One way to “release” the file is to restart the application, however 99% of the time this is NOT ideal!! text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/find_command?rev=1716449179&do=diff Using the find command: Find recently edited files The following command finds files in a directory edited in the last 2 days text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/firewallcmd?rev=1716449179&do=diff Firewalld / Firewallcmd Whitelisting IP for a specific port using rich rules in firewalld text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/firewalld?rev=1716449179&do=diff Firewalld text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/firewalld_general?rev=1716449179&do=diff Show current zone: Get All Set Default Zone text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/firewalld_ports_services?rev=1716449179&do=diff Firewalld Ports Firewalld Services text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/force_https?rev=1716449179&do=diff Forcing https Create and enable .htaccess Once you have done this you will need to add the following code: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/force_non-www?rev=1716449179&do=diff Forcing non-www Create and enable .htaccess Once you have done this you will need to add the following code: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/force_nonwww_ssl?rev=1716449179&do=diff Forcing non-www and https Create and enable .htaccess Once you have done this you will need to add the following code: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ftp?rev=1716449179&do=diff vsFTPd text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/git_clone?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/git_commandline?rev=1716449179&do=diff [user] email = name = [alias] lg = log --graph --date-order --format=format:'%C(yellow)%h%C(reset)%C(red)%d%C(reset) %C(white)%s%C(reset) (%C(cyan)%cn%C(reset), %C(green)%cr%C(reset))' ll = log --graph --date-order --decorate mm = merge --no-ff --log FETCH_HEAD [push] default = simple [diff] tool = vimdiff [color] ui = true text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/git_install?rev=1716449179&do=diff Installing Git text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/history_timeformat?rev=1716449179&do=diff Showing History Time When running bash command “history”, it regularly excludes the time stamps. Session Specific TimeStamps You can set this by running the following command: For example, the following will set your current session in the specified format: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/holland_backup_centos?rev=1716449179&do=diff Holland Install CentOS The following command can be used to install holland backup: .my.cnf Next you will need to make sure that you a .my.cnf file. You can create this file in the root directory if it does not already exist (e.g. touch .my.cnf). The file should look like: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/home?rev=1716449179&do=diff Home Page Welcome This site has been designed to be used as a reference point, with useful commands and installation/configuration guides. You can simply use ctrl + f to search for a topic in this wiki or use the search bar in the top right hand corner text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/htpasswd?rev=1716449179&do=diff You can use the htpasswd command to create username and encrypted password for .htpasswd files. Note: NEVER user online tools to encypt passwords, this is NOT safe. -c = Create the passwdfile. If passwdfile already exists, it is rewritten and truncated. This option cannot be combined with the -n option. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/httpd_conf_prefork?rev=1716449179&do=diff MPM <http://serverfault.com/questions/383526/how-do-i-select-which-apache-mpm-to-use> In apache versions prior to 2.4 the defaults values are configured in the httpd.conf (or apache2.conf file). In Apache 2.4 and later the prefork values are not configured anywhere. If you wish to change these values you will need to manually enter them into the httpd.conf file text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/http_auth?rev=1716449179&do=diff http Authentication for nginx text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/http_headers?rev=1716449179&do=diff HTTP Headers text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/http_slow_loris?rev=1716449179&do=diff Slow Loris Attack This type of attack on an apache server causes the servers resources to be consumed by very slow responding connections which inturn causes a ddos, where no more connections are able to be established. When a client connects to the apache server, apache waits for the whole request to be received before the process starts processing. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/immutable?rev=1716449179&do=diff Immutable File Permissions Chattr is a command that can be used to set file attributes that can prevent all users (even root) from deleting a file. Viewing Immutable permissions Example output of immutable file: Setting file attributes with chattr text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/info_php?rev=1716449179&do=diff Create the file info.php and put this in the document root: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/init_daemons?rev=1716449179&do=diff Init Daemons Initialization daemons is the first process started during the booting of a computer. Daemons text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/innodb_vs_myisam?rev=1716449179&do=diff InnoDB vs MyISAM InnoDB MyISAM Default Engine in mysql 5.5.5 and above Default MyISAM Engine in mysql versions below 5.5.5 Row-level locking - less issues with backups Full Table-level locking - lots of backup issues Crash Recovery NO crash recovery text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install?rev=1716449179&do=diff Installing Apache CentOS (all distributions): Ubuntu (all distributions): Testing code: {code to highlight} text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install_apache?rev=1716449179&do=diff Installing Apache text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install_apache_centos?rev=1716449179&do=diff Installing (all distributions) Starting apache CentOS/RHL 5+6 CentOS/RHL7 Start Apache from boot CentOS/RHL 5+6 CentOS/RHL7 text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install_apache_ubuntu?rev=1716449179&do=diff Installing (all distributions) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install_mysql?rev=1716449179&do=diff Installing mysql text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install_mysql_centos?rev=1716449179&do=diff Ubuntu (all distributions): Starting mysql: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install_mysql_ubuntu?rev=1716449179&do=diff Ubuntu (all distributions): Starting mysql Ubuntu (all distributions): text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install_nginx?rev=1716449179&do=diff Nginx Install text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/install_nginx_centos?rev=1716449179&do=diff Installing nginx + php-fpm If you wish to use any sort of php functionality with nginx it is advised to use php-fpm. The following commands are how you install both nginx and php-fpm. Turn nginx and php-fpm to start on boot: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/iptables_addport?rev=1716449179&do=diff Add port 80 text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/iptables_droprule?rev=1716449179&do=diff Dropping/Deleting rules To drop an iptables rule you will need to know the number of the in the list, you can either count the lines or use your normal command with –line-numbers after. E.g: Once you know the line number you can delete the rule using: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/kernel?rev=1716449179&do=diff Current Active Kernel The following command shows the current active kernel! Output example: Latest Installed There may be an installed kernel on the device that is NOT active (reboot required). You should run the following command to check installed kernels, and then compare the installed kernel to the active kernel method shown above. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/kernel_oom?rev=1716449179&do=diff Understanding OOM Killer OOM killer is invoked by the kernel when the system runs out of memory File Description oom_adj Since Linux Kernel 2.6.36 this file has been deprecated. The new file is oom_score_adj oom_score_adj This file can be used to adjust the 'badness' which is used to select a process to kill in out-of-memory conditions text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/largest_files?rev=1716449179&do=diff Largest files in file system Quickly check the log file size: Quickly check the home directory of a user: ---------- NEW IMPROVED one-liner (also checked for open (Deleted) files). Change the “/” in filesystem=“/” to analyse another filesystem text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ldap_centos7?rev=1716449179&do=diff Packages Required Dependencies: Now look for krb5 and use for next search text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/list_all_crons?rev=1716449179&do=diff List cron for a specific user: List crons for every user Viewing Cron Start Time text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/load_test_ab?rev=1716449179&do=diff Load Testing Using ab ab - Apache HTTP server benchmarking tool Flag Description -n The number of requests to be performed (Default is 1) -c The number of concurrent requests to be performed at a time (Default is 1) -k Enabled the 'Keep Alive' feature to perform multiple requests in the same HTTP session (Default is NO Keep Alive) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/logical_volumes?rev=1716449179&do=diff LVMs text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/logrotate?rev=1716449179&do=diff Configuration file The configuration file for log rotate /var/logrotate.conf There is a line in this file that will show you where to find most of the application-specific configuration files. The line should look similar to: /etc/logrotate.d text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/log_hits?rev=1716449179&do=diff Summarising custom logs The following uses lsof to check all open log files by the web server, (access and error logs). You will need to run this command first to save the logs files as LOGS: Browser and robot.txt check Now you can run the following command to receive an output: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lsof?rev=1716449179&do=diff lsof text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lsof_compromise?rev=1716449179&do=diff Take the PID and use: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lsof_general?rev=1716449179&do=diff Opened files - directories Opened files - processes Opened files - device busy “Device or Resource Busy” Error - we need to find out what are all the processes using the mount point and kill those processes to umount the directory. By using lsof we can find those processes. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lsync?rev=1716449179&do=diff lsync text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lsyncd_options?rev=1716449179&do=diff settings { logfile = "/var/log/lsyncd/lsyncd.log", statusFile = "/var/log/lsyncd/lsyncd-status.log", statusInterval = 20, insist = true } sync{ default.rsyncssh, delete = false, source="/var/www/vhosts/example.com/public_html", host="192.168.122.231", targetdir="/var/www/vhosts/example.com/public_html", rsync = { _extra = { "--include=info.php", "--exclude=*" }, compress = true, archive = true, verbose = true, rsh = "/usr/bin/s… text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lsync_apache?rev=1716449179&do=diff Add the following to the /etc/sysconfig/httpd Now you add the following to the apache configuration file Example wordpress lsync apache configuration entry: Note: You will need to make sure the proxy_http is enabled! text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lsync_inotify_watches?rev=1716449179&do=diff Sometimes lsync stops working and the error message you receive is relating to increasing inotify watches. View Current config To calculate an estimate on the inotify values you can run the following command: To perm change the value: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lsync_installation?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lxc-containers?rev=1716449179&do=diff LXC-Containers Containers are a lightweight virtualization technology. They are more akin to an enhanced chroot than to full virtualization. Tthey do not emulate hardware and containers share the same operating system as the host. The kernel version of the containers are the same as the host machine text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lxc-containers_installing?rev=1716449179&do=diff Installing (CentOS/Fedora) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lxc-containers_password_reset?rev=1716449179&do=diff Lost Root Password Sometimes you may forget the root password, or for some reason were not provided one at the time you created the container. This is not an issue, you can reset the root password but locating the directory where the container is placed. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/lxc_images?rev=1716449179&do=diff Creating Containers The main overview for creating/downloading images NOT in the templates is: An example CentOS6 is: Example CentOS7: Example Ubuntu 14.04LTS: Example Ubutu 16.04 LTS: NOTE Most of these containers are completely blank/fresh images. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/magento?rev=1716449179&do=diff Magento Version text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/magento_indexing?rev=1716449179&do=diff Indexing To update the two databases to manual indexing you can use the following commands: A re-index all cron should be running once a day. Any more times and this can start causing lock issues on your device: Index Time text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/magento_information?rev=1716449179&do=diff Magento Edition Magento Version text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mail_swaks?rev=1716449179&do=diff There are 2 main methods for sending/testing outgoing mail: * Telnet/nc * swaks My favourite is using swaks as its easy to use and quick. You will probably need to install though: SWAKS Swaks can be found in the epel repository. Make sure you have this repo enabled and then run: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/maths?rev=1716449179&do=diff bc You can use bc in bash to do maths calculations with decimals. The man pages can be found: Example Calulation The output looks like: Limiting the decimal place You can then use this with printf to limit the number of decimals shown: \\The example below shows the results to 3 decimal places. You can replace the 3 with what ever value you wish to place text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/max_clients?rev=1716449179&do=diff Quick note: apache 2.4 - Max Clients is now named MaxRequestWorkers You can find the apache values in: /etc/httpd/conf/httpd.conf OR /etc/httpd/conf.modules.d/00-mpm.conf If no value has been set then chances are the default of 256 is set. (Tip: run apache2buddy to find out the value if you are having trouble working it out) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/memcache_invetigation?rev=1716449179&do=diff PHPMemcachedAdmin <https://github.com/LukeShirnia/phpmemcachedadmin> Configuration file /etc/sysconfig/memcached Logging Adding a key/value set KEY META_DATA EXPIRY_TIME LENGTH_IN_BYTES Getting the key Getting they key: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/memory_hoggers?rev=1716449179&do=diff Top 5 Memory Hoggers text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql-install?rev=1716449179&do=diff Mysql install text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysqltuner?rev=1716449179&do=diff Rackspace have created a script that can be used to test and provide guidance to tuning mysql. Oneliner: The following one-liner is for those who have not downloaded mysqltuner before: If you would like to download and change the permissions in individual steps follow: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_caching?rev=1716449179&do=diff Enabling Query Caching There are two options for viewing the query caching on a server: Option 1 When logged into mysql you can use the following command to view query cache size (note: 0 means that no caching has been enabled) You can also use the following command for more information: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_change_host?rev=1716449179&do=diff Changing the host of a mysql user: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_cnf?rev=1716449179&do=diff MySQL my.cnf Variables text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_connections?rev=1716449179&do=diff mysql/MariaDB connections Variable Name Definition Threads_connected The number of currently open connections. Connections The number of connection attempts (successful or not) to the MySQL server Viewing configured connections: From command line: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_databases?rev=1716449179&do=diff <http://www.tecmint.com/mysqladmin-commands-for-database-administration-in-linux/> <http://www.yolinux.com/TUTORIALS/LinuxTutorialMySQL.html> Show all databases Selecting a database Verify what database you have selected Creating a database Deleting a database text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_database_sizes?rev=1716449179&do=diff Database/Table Sizes text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_engines?rev=1716449179&do=diff Find the Total number of tables/engines (All Databases) Find the Engines for a specific db Replace magento with your db name Find Engines for a specific db (Either InnoDB or MyISAM) Replace magento with your db name and InnoDB with your desired engine text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_install?rev=1716449179&do=diff Mysql Install CentOS (all distrubutions): Ubuntu (all distributions): text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_lost_rootpass?rev=1716449179&do=diff Changing mysql root password when you have lost the original password. Now type the following command, you should not be prompted for a password when you enter this command Now select the database we are going to use with: Change the password for root user with: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_master_slave_replication?rev=1716449179&do=diff Mysql Master-Slave Replication Important information: Binary Logs --> Replication events are written to the binary logs (on the master). Information stored here will be read by the slave later. Relay Logs --> Simply a copy of the binary logs. Relay logs are stored on the slave. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_maxconnections?rev=1716449179&do=diff You are able to view the max connections for mysql with the following command: OR if you log into mysql you can use the following command: You should have a similar output: There are two options to set the max connections for mysql, you can edit the setting in mysql (which is not permanent) and you can edit the variable in the text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_mysqldump?rev=1716449179&do=diff mysqldump text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_mysqldump_database?rev=1716449179&do=diff Basic Dump NOTE: Before taking a dump, check the table engines!!! If table engines are MyISAM, a write AND read lock will be placed on the tables, which means there will be “interruption” of service involved. Change 'databasename' to the name of the database you are looking to dump text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_mysqldump_intro?rev=1716449179&do=diff Dumping and Importing database Best practice states that the /home/user/.my.cnf or /root/.my.cnf file should be created (depending on what user you are taking the dump with) with the appropriate credentials before taking a mysql dump. This is not mandatory but certainly makes life easier when working with mysql text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_mysqldump_table?rev=1716449179&do=diff Dumping a mysql table Dump Dump using PV Importing a table text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_phpmyadmin?rev=1716449179&do=diff Installing phpMyadmin text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_phpmyadmin_ubuntu?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_processlist?rev=1716449179&do=diff Investigating mysql Query List To view mysql query list run the following command from the command line: Example output: All Processes If you need to investigate mysql you can troubleshoot by investigating the processlist You should see an output similar to the following: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_queries?rev=1716449179&do=diff Killing a handful of mysql queries This one-liner kills the queries obtained through the following information: Database: database Query : SELECT Time : 10 seconds + Change the information above in the one-liner to tailor to your needs text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_remotedb_access?rev=1716449179&do=diff Accessing a Database Remotely Replace x.x.x.x in the following command with the IP address of the db host. Please note: The port 3306 will need to be opened on the server you are trying to access. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_replication?rev=1716449179&do=diff Important to look out for: The following means that the master and slave are communicating. The master is sending over the IO commands and the slave is receiving them The Slave is NOT running the IO commands sent from the Master Slave Behind Master? text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_rootpass?rev=1716449179&do=diff Resetting Mysql Root Password text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_rootpass_short?rev=1716449179&do=diff This is a quicker, less intrusive method with less downtime to reset mysql root password: Create the following file and then enter the command that follows Now edit: /etc/my.cnf and enter the following under the [mysqld] block Now delete the /var/lib/mysql/mysql.init and init_file=/var/lib/mysql/mysql.init line entered in /etc/my.cnf file text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_slow_investigation?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_slow_query?rev=1716449179&do=diff Slow Query Logs Checking the slow query logs via mysql prompt. \\Note: You CAN enable the slow query logging on runtime. A mysql restart will flush the changes made via runtime. If you wish for persistence then add it to the /etc/my.cnf file: Set the logs to another path: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_slow_query_rotate?rev=1716449179&do=diff Logrotate file: /san/mysqllogs/slowlogs/slow-log { create 640 mysql mysql notifempty daily rotate 5 missingok #compress postrotate # just if mysqld is really running if test -x /usr/bin/mysqladmin && \ /usr/bin/mysqladmin --defaults-file=/root/.my.cnf ping &>/dev/null then /usr/bin/mysqladmin --defaults-file=/root/.my.cnf flush-logs fi endscript } text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_storageengine?rev=1716449179&do=diff Storage Engines - InnoDB/myISAM mysql > 5.5 the default is INNODB mysql < 5.5 the default engine is MyISAM Before we convert tables we can first view the table engine with: Note: Change 'db_name' to your database Now we have viewed the table engine we can go ahead and convert the tables. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_tables?rev=1716449179&do=diff Once you have selected a database you are able to view the tables with the following command: You are then able to view the details of the table with: You should be presented with an output similar to text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_tmp_table?rev=1716449179&do=diff Tmp Table Mysql will sometimes create internal temporary tables while processing statements. Users have no direct control over when this occurs <https://dev.mysql.com/doc/refman/5.7/en/internal-temporary-tables.html> <http://stackoverflow.com/questions/7532307/skip-copying-to-tmp-table-on-disk-mysql> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_tuning?rev=1716449179&do=diff Mysql Tuning mysql tuning script: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_updatepass?rev=1716449179&do=diff Changing a users password You are also able to use the following command, this will change the password for ALL users with the matching username, so you do not have to declare the host: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/mysql_usercreate?rev=1716449179&do=diff Mysql User Creation Use % for wildcard host. Accessible from any locations. E.g Setting user password Deleting a user Checking MySQL Password Sometimes you forget the password for a user. This is annoying as hell. You have a list of old passwords but you are able to log in as root You can use the following to confirm if the password is correct: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/my_sftp_script?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nat_to_public?rev=1716449179&do=diff Converting NAT to its Public Address A common issue with dedicated devices is the “ip a” of “ifconfig” command does not show the public IP - only the NAT. You can use the following curl (replacing x.x.x.x with the NAT address) to find out its public address. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/netdata?rev=1716449179&do=diff <https://github.com/firehol/netdata> Installation <https://github.com/firehol/netdata/wiki/Installation> netdata by default listens on all IPs on port 19999, so you can access it with: http://this.machine.ip:19999/ Uninstall script generated: ./netdata-uninstaller.sh Update script generated : ./netdata-updater.sh netdata-updater.sh can work from cron. It will trigger an email from cron only if it fails (it does not print anything when it can update netdata). --- Installing net… text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/netstat?rev=1716449179&do=diff Apache Connection IPs and Connection State Cent OS 6 Ubuntu: Example output: Close_Wait Connections Summary text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/network_transmit_recieve?rev=1716449179&do=diff Transmit and Revive Troubleshooting If you have a server transmissiting or recieving lots of data then you can use the following tools to investigate: First run: This will show you the history of networking. You can then use the following tools to get an understanding of which service is using the most networking traffic and what IP address it is coming from or going to: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nfs?rev=1716449179&do=diff Installing and Configuring NFS server <http://www.itzgeek.com/how-tos/linux/centos-how-tos/how-to-setup-nfs-server-on-centos-7-rhel-7-fedora-22.html> The following services are found in the nfs-utils package and will be used throughout the installation guide Service Description nfs-server Enabled the clients to access NFS server rpcbind Converts RPC program numbers into universal addresses text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_code?rev=1716449179&do=diff Nginx Code text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_compression?rev=1716449179&do=diff Nginx Site Compression Adding compressions can significantly reduce the size of the data transmitted. Note: since compressions happens at run time it can add considerable processing overhead which can in turn cause negative performance. Note2: Some clients do not support responses with gzip encoding method. To successfully server both clients that do and do no accept compressed data, nginx can decompress data on the fily when sending it to a client that does not support compression text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_configuration?rev=1716449179&do=diff Nginx Server Block (vhost) www.files.rackerjack.uk text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_force_nonwww?rev=1716449179&do=diff You will need 2 server blocks for this: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_force_www?rev=1716449179&do=diff The right way is to define a separated server for the naked domain and redirect it. Note that this also works with HTTPS site. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_forcing_https?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_oneliner?rev=1716449179&do=diff One-liner to view nginx server blocks configured on the server: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_security?rev=1716449179&do=diff Nginx Security It is very important to keep your server secure. Hiding versions of php and apache are part of the security measures. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_security_fpm?rev=1716449179&do=diff Hiding php-fpm version If you run a curl on your website similar to the curl below, does it return php versions? This is NOT secure. We will now make a simple change to the php-fpm php.ini file to hide this Example curl: To hide the php value, find the following value and turn it off: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_security_version?rev=1716449179&do=diff Hiding php-fpm version If you run a curl on your website similar to the curl below, does it return nginx versions? This is NOT secure. We will now make a simple change to the nginx.conf file to hide this Example curl: To hide the nginx value, add the following line in the http section text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_serverblock?rev=1716449179&do=diff Basic HTTP-only nginx server_block First we need to edit /etc/nginx/nginx.conf to allow virtual hosts (known as server blocks when using nginx) This guide will show how to configure server blocks in the same manner as Ubuntu apache vhosts, using sites-available and sites-enabled. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_ssl?rev=1716449179&do=diff Files: Directive Path to Enter ssl_certificate Certificate file + Intermidiate bundle path ssl_certificate_key Key file path ssl_certificate = .crt + .ca ssl_certificate = 'cat Intermediate.txt text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/nginx_testing?rev=1716449179&do=diff Testing website configuration without a domain: Create and enable a vhost with your servers ip similar to the following: You can then load the website by typing the directory similar to the following: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/omreport?rev=1716449179&do=diff Checking Battery Status Battery Check Chances are you need to replace your battery text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/page_speed?rev=1716449179&do=diff Page Speed Information on module: <https://developers.google.com/speed/pagespeed/module/configuration> Test speed: <https://developers.google.com/speed/pagespeed/insights/> <https://gtmetrix.com/> <http://tools.pingdom.com> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/password_management?rev=1716449179&do=diff CentOS / RedHat Password Expiry text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/performance?rev=1716449179&do=diff Apache Performance Tuning text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php-fpm?rev=1716449179&do=diff php-fpm text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php-fpm_centos6?rev=1716449179&do=diff Configuring php-fpm When configuration php-fpm you are able to configure it using ports or sockets. The best thing to do is configure with socks as this avoids the networking stack associated with ports. This means that php-fpm will be using files (sockets) to run which could be considered slower because of potential slow HDDs however the files are mostly stored in RAM so it makes accessing them significantly quicker. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php-fpm_centos7?rev=1716449179&do=diff Configuring php-fpm When configuration php-fpm you are able to configure it using ports or sockets. The best thing to do is configure with socks as this avoids the networking stack associated with ports. This means that php-fpm will be using files (sockets) to run which could be considered slower because of potential slow HDDs however the files are mostly stored in RAM so it makes accessing them significantly quicker. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php-fpm_investigation?rev=1716449179&do=diff Children Check List the max children configuration for all php-fpm pools: Example output: Process Check Check the amount of processes running for each php-fpm pool: Example output: Netstat Check Example output: Doesnt work yet: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php-fpm_pal?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php-upgrade?rev=1716449179&do=diff Please see 'yum replace' for installing the correct package Upgrading PHP The following guide will use yum-plugin-replace to upgrade php. ---------- WARNING! Before upgrading, please make sure plesk is NOT installed IF you run the following guide and plesk IS installed, it will remove the 'php-psa' module which will fully remove plesk from your device!!! text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php_curl?rev=1716449179&do=diff PHP Curl Sometimes you need to test php curl. You can use php -r to do this. (Using parameter -r you can directly execute PHP code simply as you would do inside a .php) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php_error_logging?rev=1716449179&do=diff Turn on php logging edit: /etc/php.ini You can use the following command to find out where the php logs are written: Uncomment or edit to look like the following: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php_ini?rev=1716449179&do=diff IMPORTANT Before making ANY changes, remember to back up the php.ini file: Note: If the box is using php-fpm you will need to locate the php.ini file for this. Hint: rpm -qc packagename - locates the configuration files for a package upload_max_filesize text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php_versions?rev=1716449179&do=diff PHP Versions are fully supported for 2 years. After 2 years the version will then be updated for critical security risks only for 1 year It is then fully un-supported PHP Version Supported Until Critical Security Updates 5.3 Released 01.01.12 text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/php_versions_packaging?rev=1716449179&do=diff PHP Versions PHP source code is developed and maintained by “The PHP Group”: <http://php.net/> . This is made available to vendors (such as RHEL, IUS, Webtatic) who then repackage it for specific Operating Systems. All bug fixes, vulnerabilities etc are fixed by text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/physical_volumes?rev=1716449179&do=diff Quick Command Reference The following command displayes in GiB To display in GB use the following command: The following commands put a marker on the device which allows them to be used for volume groups Now create the volume LVCREATE Creating a logical volume from a specific volume group text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/plesk?rev=1716449179&do=diff Is plesk running?? text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/plesk_admin_pass?rev=1716449179&do=diff Plesk servers do not have a root mysql user, they have an admin user. This admin user is the same user used to log into the plesk portal. Admin password should never be changed through mysql, it should be changed through the admin control panel. To locate the admin password for plesk control panel, log into the server and run the following command: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/plesk_logs?rev=1716449179&do=diff Plesk Logs <https://kb.plesk.com/en/111283> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/plesk_mail?rev=1716449179&do=diff List Mail Users text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/plesk_mysql?rev=1716449179&do=diff Log into mysql on a plesk box: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/process_investigation?rev=1716449179&do=diff processes investigation Please see top CPU consumers or top RAM consumers for commands to find the offending processes Example Process: Investigating a PID First we need to find out if the process is an Established connection (replace 1234 with the PID): Process 'State' Investigation text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/proxy_pass?rev=1716449179&do=diff Proxy Pass text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/proxy_pass_port?rev=1716449179&do=diff Simply redirect a domain to a port. For example, if you wanted to visit: lukeshirnia.co.uk:5050 you can use a sub domain with proxy pass do this on local host. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/python?rev=1716449179&do=diff Python Scripting text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/python_altinstall?rev=1716449179&do=diff source <http://sowingseasons.com/blog/building-python-2-7-10-on-raspberry-pi-2.html> source <https://github.com/h2oai/h2o-2/wiki/Installing-python-2.7-on-centos-6.3.-Follow-this-sequence-exactly-for-centos-machine-only> Using Alt install Prerequisites Python 2.10.5 Source: <http://toomuchdata.com/2014/02/16/how-to-install-python-on-centos/> Now the dependancies have been installed we can go ahead and get the python tar: The following command will install the Python interpreter i… text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/python_directory_search?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/python_searching_a_file?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/raid?rev=1716449179&do=diff RAID text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/raid_0?rev=1716449179&do=diff RAID 0 No redundancy. Loss of disk is loss of entire data. Capacity of a RAID 0 volume is the true size of the disk. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/raid_1?rev=1716449179&do=diff RAID 1 Mirroring without parity or stripping. Data is written identically to two (or more) drives producing a 'mirrored set'. Write throughput is slow because it must be written to every drive. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ram_diagnostics?rev=1716449179&do=diff Command organises ps output by rss RSS stands for Resident Set Size This is a actual number in kilobytes of how much RAM the current process is using. Find the ram usage of a specific service: Description Once you have the output of the command you will need to investigate the processes 'State' text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/random_password?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/realuser?rev=1716449179&do=diff Searching for all non-system users (looking for real users) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/recap?rev=1716449179&do=diff Installing recap. Change /root/ to the user you wish to install git for CentOS/RHEL Ubuntu Changing recap/rs-sysmon logging intervals: The section should look similar to the following. Comment out the 10 mins and uncomment 5 mins cron Command for using recap logs text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/recap_oneliner?rev=1716449179&do=diff Command for navigating through recap/rs-sysmon easier Recap: rs-sysmon: Splitting Recap logs Every day the recap logs are concanentated into a single file. If you wish to break them into multiple files you can use the following. Note, you will need to replace 2017-07-04 with the date and ps_daily_20170704.log with the daily log file: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/redis_cache?rev=1716449179&do=diff Flushing Redis Cache To flush redis cache without restarting the service, follow this guide First find out what port + IP address redis is running on: Output will look similar to: You will first need to get the password from the local.xml file in the document root. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/redis_fragmentation?rev=1716449179&do=diff mem_fragmentation_ratio <https://redis.io/topics/memory-optimization> The fragmentation is calculated as the amount of memory currently in use (as the sum of all the allocations performed by Redis) divided by the physical memory actually used (the RSS value). Because the RSS reflects the peak memory, when the (virtually) used memory is low since a lot of keys / values were freed, but the RSS is high, the ratio mem_used / RSS will be very high text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/rename?rev=1716449179&do=diff If you have a large number of files and you need to rename them, you are able to use the 'rename' command: In the following command, I rename all of my video files from 00-99 to 000-099, this is so that they are listed in order when I have over 100+ video parts: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/repositories?rev=1716449179&do=diff Here you can find links to the appropriate repositories: IUS/EPEL <https://ius.io/GettingStarted/#manual-install> Install Example: IUS RHEL 6 CentOS 6 Example: IUS RHEL 7 CentOS We now want to confirm the repo has been added and been enabled: Note: yum repolist only shows enabled repos, to view all repos: yum repolist all text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/repository_management?rev=1716449179&do=diff Adding a Repo: Using RPM text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/rhel_vs_centos?rev=1716449179&do=diff RHEL vs CentOS Red Hat Red hat is a subscription based Enterprise Linux OS and is widely recognized secure operating system. It offers 24/7 support and vendor escalation should any issues arise. According to the Red Hat website, 98% of critical vulnerabilities had fixes within 1 calendar day: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/rpm?rev=1716449179&do=diff RPM text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/rpm_changelog?rev=1716449179&do=diff RPM Change log RPM change log can be used to view when a package was last updated It can also be used to view if a specific version of a package (eg. php) has been patched for a known vulnerability We can see that the current version installed on the system is: php-5.3.3-40.el6_6.x86_64 text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/rpm_changelog_repoquery?rev=1716449179&do=diff You can also use -changelog for packages that are NOT installed with repoquery Dependencies/Package First make sure the yum-utils package is installed: Installing yum-utils Example: Package NOT installed Using repoquery text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/rpm_general?rev=1716449179&do=diff Query Packages Show current package installed for a service Find Configuration files Find configuration files associated with a package Package Install Date That queries all your installed RPM packages (rpm -qa) and prints them using a format ( text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/rsync?rev=1716449179&do=diff rsync between servers Custom port: Directory Locally Exclude Directories Locally The . represents the current directory Need to update text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/run_levels?rev=1716449179&do=diff Run Levels and their meanings: Value Explanation 0 Halt 1 Single-user text mode 2 Full multi-user with no networking 3 Full multi-user, console logins only 4 Not used (user-definable) 5 Full multi-user graphical mode (with an X-based login screen) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sar?rev=1716449179&do=diff Sar text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sar_commands?rev=1716449179&do=diff Common Sar Commands Show all statistics for current day: Show statistics 3 times with 1 second interval ---------- Show CPU statistics 3 times with 1 second interval, (focus on the last field “%idle” to see the cpu load): CPU usage of ALL CPUs text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sar_install?rev=1716449179&do=diff Installing sar CentOS Ubuntu Show version of systat: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/screen_session?rev=1716449179&do=diff Screen Sessions Install Creating a screen session You can use screen sessions but typing the following command: Creating a screen session with session name: Listing Screen Sessions or Example Detach from screen sessions The following command can be used to detach from a screen session without closing it. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/screen_session_share?rev=1716449179&do=diff Sharing a screen Session First create a screen session List the screen sessions on second device: If you simply try to reattach to the screen session you will not be able to: You will need to run the following command Anything written on one screen session will now be mirrored on the other text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/securing_php?rev=1716449179&do=diff Securing PHP After Installation After you have installed php you should go about securing php. One major issue with php.ini file the following entry. Please note, if the line below is commented out AND =0 is NOT specified then the server will default to the value =1 text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sed?rev=1716449179&do=diff sed sed can be used to substitute eg. substitute : with nothing, and do for every occurrence (represented by g) remove multiple characters from line Below removed [ and ] below removes , 7 and l remove anything before a character text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/selinux?rev=1716449179&do=diff SELinux The diagram below shows the process a process requesting access to a file goes through before it is granted access using SELinux: Reference: <https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/images/SELinux_Decision_Process.png> SELinux Modes: 1) Enforcing - AVC is checked, logged and enforced 2) Permissive - AVC is checked and logged however rules are NOT enforced text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sending_mail?rev=1716449179&do=diff There are 2 main methods for sending/testing outgoing mail: * Telnet/nc * swaks My favourite is using swaks as its easy to use and quick. You will probably need to install though: SWAKS Swaks can be found in the epel repository. Make sure you have this repo enabled and then run: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/server_stats?rev=1716449179&do=diff ---Work in progress--- text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sftp?rev=1716449179&do=diff sFTP text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sftp_centos?rev=1716449179&do=diff Quick Overview This guide will go through secure FTP (sFTP) which uses the ssh port 22. sFTP is more secure than FTP as it encrypts data. This guide will explain how to jail a user so that they have no way to break out of their home directory. You are then able to mount a location to their home directory so that they can upload files to a website. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sickrage?rev=1716449179&do=diff rvm <https://www.digitalocean.com/community/tutorials/how-to-install-ruby-on-rails-on-centos-6-with-rvm> altinstall <https://github.com/h2oai/h2o-2/wiki/Installing-python-2.7-on-centos-6.3.-Follow-this-sequence-exactly-for-centos-machine-only> sickrage install: <https://github.com/SiCKRAGETV/sickrage-issues/wiki/Sickrage-installation-CENTOS-6> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sidebar?rev=1716449179&do=diff Troubleshooting * System * System Usage Summary * Process Investigation * Top 5 CPU Processes * Ram Usage Breakdown * Memory Hoggers * TCPDUMP * Web server * Apache Buddy * Apache Max Clients * php-fpm Investigating * php-fpm pal * fpm strace * Netstat * Connections to port * 'Site-down' Investigation * Log Summary * nginx server blocks (httpd -S equivalent) * HTTP Headers * mysql * mysql tuner * Process … text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/single-transaction?rev=1716449179&do=diff --single-transaction --single-transaction This option sends a START TRANSACTION SQL statement to the server before dumping data. It is useful only with transactional tables such as InnoDB, because then it dumps the consistent state of the database at the time when BEGIN was issued without blocking any applications. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sni?rev=1716449179&do=diff SNI (Server Name Indication) Previously you required a new IP address every time you wanted to add an SSL domain. This meant each virtual host was bound to an individual IP and all encrypted traffic for that IP would be served by the vhost bound to the port text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/sort?rev=1716449179&do=diff Sort Command Sorting based on numerical value: Sorting based on human readable numbers (1K, 1M, 1G, 1T) Sorting in reverse order Sorting by Month/Year Sorting by column or word position text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssh?rev=1716449179&do=diff Exclude a user from ssh keys, add the following to the bottom of /etc/ssh/sshd_config text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssh_fingerprint?rev=1716449179&do=diff Public Fingerprint Overview " Used for identification/verification of the host you are connecting to" Explanation A public key is encoded into a sequence of bytes (hashed with SHA1/SHA2) - this can then be recreated when next connecting to the device to verify that the device is the same device you connected to before. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssh_keys?rev=1716449179&do=diff Creating keys Similar output will be: Copying public keys to device Now we need to copy the public key onto the server If the server has a custom port: Logging in using private key You can then log into the device using the private key: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssh_tunnel?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl?rev=1716449179&do=diff Apache SSL Install Apache < 2.4.8 Directive Path to Enter SSLCertificateFile Certificate file path SSLCertificateKeyFile Key file path SSLCertificateChainFile Intermediate bundle path Apache 2.4.8+ text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_apache_centos?rev=1716449179&do=diff Creating CSR with OPEN SSL This website will produce a command that you can use on your LINUX server to produce the Private key and CSR. Install Vhost Test SSL Install text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_apache_ubuntu?rev=1716449179&do=diff Creating CSR with OPEN SSL This website will produce a command that you can use on your LINUX server to produce the Private key and CSR. Install Vhost Test SSL Install text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_cipher_check?rev=1716449179&do=diff Protocol Check Using Nmap to check configured suites Checking SSL Protocols: Cipher Check text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_encryption_type?rev=1716449179&do=diff If you would like to check the ssl encryption type on a cert you can use the following command. Note: Replace lukeslinux.co.uk:443 with your website and ssl port. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_expiry?rev=1716449179&do=diff If you would like to use the commandline to check your ssl expiry dates of website, including external websites then you can use the following: You can change lukeslinux.co.uk:443 to your website. It also works with *:443 and localhost:443 text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_fingerprint?rev=1716449179&do=diff Public Fingerprint Overview " Used for identification/verification of the host you are connecting to" Explanation A public key is encoded into a sequence of bytes (hashed with SHA1/SHA2) - this can then be recreated when next connecting to the device to verify that the device is the same device you connected to before. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_overview?rev=1716449179&do=diff SSL Overview Certificate The SSL certificate contains information about the certificate: - Domain Name(s) - Public Key - Company - Issue Date - Expiry Date - Issuer And more Client encrypts their messages with a public key supplied by the website that ONLY the server can decrypt with their private key text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_pfx?rev=1716449179&do=diff Sometimes the ssl format may be pfx. To convert to .pem you can use the following command (Note: often the file is password protected, as such you will need the password to change the file format): You may then be prompted for the password Please change cert.pfx to the name of the pfx file and change websitename.pem to the name you wish to call the formatted file. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ssl_poodle?rev=1716449179&do=diff To resolve poodle vulnerability please add the following to the virtual host: And to allow this globally please add in the /etc/httpd/conf.d/ssl.conf file: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/strace?rev=1716449179&do=diff text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/strace_apache_speed?rev=1716449179&do=diff Only works with NON https Website!!!! Only works with apache SCREEN 1 *Press ENTER Once* “Ctrl-a” *New Screen Session* SCREEN 2 ---------- Flag Description o ouput file f Trace child processes as they are created by currently traced processes as a result of the fork(2) system call text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/strace_php-fpm?rev=1716449179&do=diff Strace The following command straces all php-fpm processes and places the output in separate files for each process: Most appropriate command with good timestamps: or Flag Definition -r Print relative timestamp upon entry to each sys call. Records the difference between the beginning of successive system calls text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/system_stats?rev=1716449179&do=diff I have created a bash script that gathers the systems usage and outputs it on the screen. This method is very quick to assessing potential issues with the server. You can view the original code at: <https://github.com/LukeShirnia/ServerUsage/blob/master/ServerStats.sh> Note: Script does NOT make any changes, it simply reads from the server. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/table_size?rev=1716449179&do=diff Size of a tables in a db Note: You will need to replace DATABASE_NAME text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/tar?rev=1716449179&do=diff Command Explanation -z unzip -x extract file -v verbose -f Force -t table of contents Create Tar with Gzip Compression Compress with date in filename text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/tcp?rev=1716449179&do=diff Transmission Control Protocol (TCP) Quick Overview of TCP TCP communication guarantees packet delivery and is suited for applications that require high reliability. TCP is used by: * HTTP * HTTPs * FTP * SMTP * Telnet TCP rearranges all of the packates in a specific order (sequence). text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/tcpdump?rev=1716449179&do=diff TCP dump is used to create DUMPs of network traffic. This information can then be used to troubleshoot a range of problems you may be having, eg, application issues, networking issues etc. Note: If you write the output of a tcp dump to a file, you can then import this file into wire shark to interpret this better (make life easier) text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/top5_cpu_processes?rev=1716449179&do=diff The following commands show you the static cpu usage of your server: Shows more headers and information: Uses the sort command of --sort It is important to inspect the 'State' column when investigating processes. Below are the flat definitions: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/troubleshooting_overview?rev=1716449179&do=diff Troubleshooting Tips Troubleshooting speed issues can be broken down into 5 main key areas: * Application * CPU * Memory * Disk * Network Application As system administrators this area of the issue is not something we can fix but it is certaintly something we can rule in our out depending on the data gathered from the 5 key points above. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/tune2fs?rev=1716449179&do=diff Run out of disk space? Check if there is some reserved. Check how much reserved there is (replace the /dev/xvda1 with your filesystem): The following command will free up some space: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/ufw?rev=1716449179&do=diff Allow an IP to any port: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/uptime?rev=1716449179&do=diff Process Uptime Find the process ID of the master (parent process), then: Output looks like: or Show JUST the master process: Output is simlar: The bit we are interested in is the master process: This represents 1 days, 2 hours, 50 mins and 2 seconds text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/users_permissions?rev=1716449179&do=diff Showing GRANTS for a user Database manipulation Table Manipulation Granting ALL Privileges on a db Granting ALL Privileges on ALL dbs REMEMBER To Flush Privileges text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/user_quota?rev=1716449179&do=diff User Filesystem Quota You are able to text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/varnish_default.vcl?rev=1716449179&do=diff Varnish default.vcl Configuration text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/varnish_default_realip?rev=1716449179&do=diff Show real IP Note: You will need a combination of varnish configuration and log configuration for the web server: /etc/varnish/default.vcl text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/varnish_purge?rev=1716449179&do=diff Curl Purge This command will only work if you have acl_purge to allow the IP address to purge: This prevents anyone purging someone elses cache. Purge with varnishd command text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/varnish_restart?rev=1716449179&do=diff If you would like to restart varnish you will first need to test the configuration to make sure the restart does not stop the service: Note: When you run the following command it should dump the output of the config on the screen if it is successful. If it fails then it will produce an error. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/vnstat?rev=1716449179&do=diff Installing vnstat vnstat is a console-based network traffic monitor. It keeps a log of hourly, daily and monthly network traffic for the selected interface(s). The traffic information is analyzed from the proc filesystem. That way vnStat can be used even without root permissions. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/vsftpd_centos?rev=1716449179&do=diff Installing Configuring /etc/vsftpd/vsftpd.conf You should edit your /etc/vsftpd/vsftpd.conf file similar to the following: Chrooting User If you would like to chroot the users you can add the following line to the bottom of /etc/vsftpd/vsftpd.conf text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/website_cloaking?rev=1716449179&do=diff Website Cloaking When a website is hacked, the hacker may implement some code into the mix that will “cloak” the bad coded when a user-agent of 'Googlebot' is specified. This would mean that the website is still crawled/indexed and will still appear on google search however when a 'normal' user loads the website, they are presented with a more malicious site text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/website_speed?rev=1716449179&do=diff Example output Investigating timeouts Use the following command, run it from servers in different regions Output: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress-nginx?rev=1716449179&do=diff <https://codex.wordpress.org/Nginx> include global/restrictions.conf; include global/wordpress.conf; global/restrictions.conf # Global restrictions configuration file. # Designed to be included in any server {} block. location = /favicon.ico { log_not_found off; access_log off; } location = /robots.txt { allow all; log_not_found off; access_log off; } # Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac). # Keep logging the requests to parse… text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress?rev=1716449179&do=diff Wordpress text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress_admin_user?rev=1716449179&do=diff Manually Adding or Updating Admin Password Change the following values: " database USER <password> NAME email@email.com" text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress_issues?rev=1716449179&do=diff Quick Wordpress Files Download Change /var/www/html to the directory you wish to download the latest wordpress files and the following command will download the files Wordpress Permissions Replace ${WP_ROOT} with the directory location of wordpress. If you are already in the wp document root, replace with a dot . text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress_permalinks?rev=1716449179&do=diff Permalink rewrite rules .htaccess apache rewrite nginx Apply the following in the location / section in your server block: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress_proxypass?rev=1716449179&do=diff When wordpress is configured in a master-slave configuration, you need to be aware that making changes on the /wp-admin panel may not be saving the changes. If you visit example.com/wp-admin you may be visiting the slave server. If you make changes on the slave server then lsync can simply overwrite the changes made. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress_sitemanagement?rev=1716449179&do=diff Wordpress Site-Management text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress_whitepage?rev=1716449179&do=diff Wordpress Displaying White Page Try adding this line to wp-config.php to see the errors on the page: That should add the errors to the pages output and point you in the right direction as to which plugin needs to be disabled. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wordpress_xmlrpc?rev=1716449179&do=diff XMLRPC XML-RPC is a remote procedure call (RPC) protocol which uses XML to encode its calls and HTTP as a transport mechanism and its functionality is turned on by default since WordPress 3.5. XML-RPC is an API - this API gives developers and services the ability to talk to a wordpress site text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wp_frontpage?rev=1716449179&do=diff Try the following: <http://forum.graphene-theme.com/feature-requests/random-front-page> Front Page Display If you wish to manually edit the front page, create a file in the document root, theme folder called front-page.php, this page takes precedence over any other file created for the front page. Note, the file will be empty when you created it, as such your home page will be. Best thing to do is copy another file over and then edit text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/wp_menu?rev=1716449179&do=diff Adding a blank menu item: Creating a custom-item menu, add # as the url or text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/x-forwarded-for?rev=1716449179&do=diff x-Forwarded-For text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/x-forwarded-for_centos?rev=1716449179&do=diff If you have a server behind a loadbalancer then your web servers access logs may not log the correct IP address, they may log localhost or the ipaddress of the load balancer. Some hosting companies such as Rackspace have their LoadBalancer add a specific header called X-Forwarded-For headers. You can make a few changes to your Apache or nginx config files and vhosts to resolve this issue. Your log files should then read correctly. text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/x-forwarded-for_centos_nginx?rev=1716449179&do=diff Nginx – CentOS First you will need to find out the private ip address of your loadbalancer. The easiest way to do this is tail your logs for your domain with You should then be presented with a private net ip, in my case it is 10.189.255.252 You will then need to edit text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/yum?rev=1716449179&do=diff Yum text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/yum_plugin_replace?rev=1716449179&do=diff Installing yum-plugin-replace The yum-plugin-replace package is available from the IUS repo. You can install using my other guide: <https://lukeslinux.co.uk/repositories> text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/yum_provides?rev=1716449179&do=diff Package Dependencies Query package locally: Query package not installed: Package Provides Query package locally: Query package not installed: text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/yum_search?rev=1716449179&do=diff yum search If you are looking for a package but dont know the full package name you can use yum search. Note: You can then use a grep afterwards to narrow the search even more text/html 2024-05-23T07:26:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://lukeslinux.co.uk/zededitor?rev=1716449179&do=diff ZedEditor is a remote bash editor It allows you to edit your bash scripts from your local pc using a google Chrome add-on called zed-editor: After opening the program you will need to navigate to 'Remote Folder'. Once you here you will see 3 parts.