Best posts made by scottalanmiller

scottalanmiller

After more than twenty years on UNIX systems, it seems like the right time to begin a guide to Linux systems administration, and what better place than on MangoLassi where we can make it into a living, growing document.

An Introduction: Why Linux System Administration

Linux: Collected Educational Resources
Why Desktops Are Not a Good Learning Tool
Avoid the Raspberry Pi for Learning Linux Server Administration
Linux: What is a Distro
Choosing a Linux Distribution for Business
What Is UNIX, and How Does Linux Fit In
What Makes Something a Linux OS
Why Does Open Source Matter
Understanding Linux Release Schedules
Understanding the Relationships of Red Hat's RHEL, CentOS and Fedora Distributions
Understanding the Suse Distributions Suse Linux, OpenSuse Leap and OpenSuse Tumbleweed
Understanding the Debian and Ubuntu Linux Distributions
Linux Architectural Variety
Linux and Virtualization
From Windows to UNIX: Monolithic to Modular Design

Basics of Linux Administration

Getting Our Hands Dirty: Learning Our Way Around

Installing Our First Linux Operating System for Learning Systems Administration
Linux: The Lay of the Land, Filesystem Hierarchy Standard
Accessing a Linux Server using SSH
Linux: Working with Files
From Windows to UNIX: File Extensions
From Windows to UNIX: Case Sensitivity
Linux: File Colors
Linux: Standard Command Structures
Linux: Aliases
Linux: Basic Working with Text Files
Linux: Finding Files
From Windows to UNIX: Text File Formats
Linux: Symbolically Linking Files
UNIX: Users and Groups
- UNIX: The root user
- UNIX: The /etc/passwd File in Depth
- UNIX: The /etc/group File in Depth
- UNIX: The /etc/shadow File in Depth
- Linux: Tools for Managing Local Users
- Linux: Tools for Managing Local Groups
- UNIX: Switching Users with su
- UNIX: sudo
- UNIX: The sudoers file
UNIX: Basic File Permissions
- UNIX: File Permission Octets
UNIX: Extended File Permissions and Attributes
UNIX: Everything is a File (Descriptor)
Linux: Shells
System Administration: Standard Tools
UNIX: Path
Linux: Home Directories
Linux: Common Filesystems
- From Windows to Linux: Filesystem Culture
Linux: Text Editing
UNIX: X Windows and the Graphical Desktop

Packages and Installation

From Windows to Linux: Installation Culture
Linux: Software Installation
Red Hat and the RPM World
* Linux: RPM Package Management

* [Linux: YUM Package Management](http://mangolassi.it/topic/8629)
  * Linux: YUM Repositories
  * [Linux: Installing with YUM](http://mangolassi.it/topic/8799/)
  * [Linux: Updating with YUM](http://mangolassi.it/topic/8800/)
  * [Linux: What is the EPEL](https://mangolassi.it/topic/12046/)
* Linux: DNF Package Management

Debian, Ubuntu and the DEB World
* Linux: Installing with APT
Installing from a Tarball
* UNIX: What Is a Tarball

General Administration Tasks

Storage and Filesystems

System Administration: Filesystems
System Administration: Clustered Filesystems
Linux: Checking Filesystem Usage with df
Linux: Directory Utilization with du
- Linux: Looking for Large Folders with du
- Linux: Why are df and du Showing Me Different Things?
- Sparse Files and lastlog
Linux: Disk Devices
Linux: Working with Disks, fdisk and parted
Linux: Creating a Filesystem
Linux: Mounting Filesystems
Linux: The Role of the Logical Volume Manager (LVM)
Linux: The Role of MD Software RAID
Linux: MD Software RAID
Linux: The Role of DRBD
Linux: BtrFS
- Linux Practicum: Adding a Second Storage Device on CentOS 7 with BtrFS
UNIX: ZFS
System Administration: Network Filesystems
- Linux: NFS
  - Linux Practicum: Creating a Simple NFS Server
  - Linux Practicum: Mounting a Simple NFS Share
- Linux: SMB

Networking

Linux: Network Bonding and Teaming

Memory and Swap

Linux: Swap Space and Files
Linux: Creating Swap
Linux: Swappiness Behavior

Monitoring and Analysis

Linux: Using uptime to understand load
Linux: Using free to view memory usage
Linux: Using top to view instantaneous performance
Linux: SAR

System Administration Tasks

System Administration: Backups

Linux Special Tools

Linux: Special Tools Outside of the Mainstream
- Netdata - Local Data Analytics with Cloud Interface
Linux: Special Tools for Command Line Performance Viewing

Linux Why?

UNIX: Why Does Root Get a Special Home Directory

BASH Basics

BASH: if else Constructs
BASH: case Constructs

Advanced Topics

DRBD

Linux Command References

scottalanmiller

It's not often that you get messages like this and I wanted to kind of save it somewhere Shout out to @BBigford @Neally @DenisKelley who are all named as well.

0_1472016852840_Screenshot from 2016-08-24 01-29-43.png

https://community.spiceworks.com/topic/1785625-the-influence-of-community-and-personal-inspiration

scottalanmiller

So we have been kicking around an idea to help turn the NTG Lab up to the next level and we wanted to see if there would be any interesting from the community. The NTG Lab is pretty extensive, and always growing. We get good access to hardware and software from lots of vendors anxious to have us showcase their products to our staff and since we have an isolated lab the availability of licenses to us is generally pretty good (it's kept out of production so vendors know they aren't losing money from a lack of sales.) We have gear such as several enterprise servers from multiple vendors, iSCSI SAN, NAS, hypervisors, etc.

What we are looking to do is move from the small, limited lab facility that we have currently to move into something much more substantial and robust - a full cabinet in an enterprise datacenter.

We are interested in finding out if some community members might be interested in going in for something like $25/mo to get access to the lab. It's not a cloud platform and the system would be a bit information, we aren't looking at hundreds of people here but it would be great to find around twenty. This would be people who know each other, not a system "for sale" and the goal is education, testing and lab - no implication of this being a production system (we have a SAN for goodness sake, this isn't prod!!)

The idea is that this would be a truly incredible system that we can use together for a degree of learning and experimenting that just can't be done in another way. Basically the most amazing home lab you could imagine - hosted in an enterprise datacenter. For the cost of just a few tiny cloud VMs from a cloud provider.

Thoughts?

scottalanmiller

Everyone learns differently. We all know this, but we rarely take a lot of time to think about what it means practically. Some people are great auditory learners, I know I am. Give me an informative podcast with good information and a long morning walk and I will ingest a lot of great information. Some people need to take notes, others lose everything being said if they take notes. Some people need visual aids. Some need to do things hands on. Some want to investigate and discover while others want to be led and shown. We are all different.

In the working world and especially in fields like IT and software engineering learning is far more than the background practice that we do to get in the door, it is a part of our daily lives. IT is an enormous field and requires that we not only know a lot of foundational background information, but also requires that we constantly stay up to date on products, companies, techniques, tools, trends and more. IT is so large that even if it were to never change or grow we would still be spending our entire careers learning more and more as there is just so much to know!

IT practitioners take learning to a new level that most fields would never suggest or accept. In fact, if you even suggested to people working in most fields that they should have to put in the kind of time that IT professionals much do just to remain current and grow at a moderate pace you would not just be mocked but would often be met with derision. Many people would actually be upset being asked to learn in such a way.

In fields, like IT, where continuous learning are necessities we have to think about learning processes in different ways. For most people in the majority of the world's careers it is adequate that learning be separate from "life and career", that it be set aside as a special case activity only done in special, formal settings such as high school, university, certification training classes and the like. Additional learning or training might be requires throughout a career but it would generally be done is special settings, at scheduled times and be very limited such as a training course for a few days every few years. Very "separate" from normal life.

IT cannot work in this manner effectively. Learning must be constant, it must be part of the lifestyle. We cannot look at learning and education as something we do then set aside, only taking down off of the shelf and dusting off once in a while. We must live it. We must embrace it. It has to be part of every day, every activity. Always learning, always growing, always advancing.

One of the most important skills that any IT practitioner must cultivate is that of being able to teach themselves, constantly. This might be reading books, spending time in deep reflection, doing projects, hanging out on professional social media, reading articles, pursuing certifications, building labs, trialing new products, attending seminars, attending conferences and more. And most likely, doing many or all of these things.

IT requires so much learning, in so many directions, at such a significant pace that there is no reasonable means of approaching the primary corpus of an individual's learning from any formal system. Formal learning systems, classrooms of one type or another, are perfectly reasonable as supplemental learning systems. But these are time consuming, expensive and slow at best and, in most cases, lack even the capability of providing continued support for mid-level career professionals and above. The value of formal systems drops away rapidly as a career progresses and alternative learning methods must be adopted.

IT essentially demands that anyone looking to continue growing in the field, or in reality even those just looking to stand still without losing ground, teach themselves throughout their careers. A formal education process might be useful in kick starting their careers at the onset or help to get them "over a hump" later in life. But by and large self learning is needed at nearly all times.

The reason that I love hiring people who have always used self education and self learning processes while foregoing formal educational processes is not because of a negative associated with those processes, but because the needs of the field demand that self learning be a skill that isn't just passable but is highly honed and natural. If someone has learned through traditional, formal processes then I have to struggle to determine how much passion, determination and practical skill at self learning that person possesses. Why did they choose formal education that is slower, less demanding and more expensive if they enjoy and are good at learning on their own? How do I know that they can continue to grow without needing special resources provided at best, or at worst that they are simply unable to keep growing in IT and will immediately begin the process of failing?

For job candidates that don't demonstrate a strong aptitude, desire and experience in self education I am left with little option but to wonder if they are ready for a career in IT. Of course they may have simply chosen a developmental path that fails to demonstrate some of the most critical industry skills, and that is unfortunate. But candidates that have demonstrated that they can self educate are known to have a critical skill that is needed. That demonstration is one of the best possible factor that I could look for in evaluating a candidate.

Going forward, after hiring someone new, their past knowledge is almost useless. What they have learning is likely outdated, is almost certainly not directly applicable to the work that they will need to be doing and what they need to do will often change anyway and even if they were fully current at the time that they were hired they would still need to be learning regularly just to maintain the level of skill that they had when hired. The skills and experience that someone has when initial hired serves almost exclusively to demonstrate aptitude and interest for the subject material. Of equal or greater importance, but much harder to ascertain, is their ability to learn the new material that will be needed going forward and to do so on their own with minimal additional assistance.

Those that have taught themselves have simply more opportunity to demonstrate their ability to do what is needed to succeed in IT. Which itself is meaningful, it suggests that they understand that requirement of doing so and the value of being able to do so. Candidates who have not done this adequately may themselves not understand what the field will entail once they are working in it and may have no idea how to teach themselves or even if they have the necessary skills and drive to do so anyway. Formal educational processes do so much to avoid these processes that often those who have taken those paths in life may lack the necessary exposure to even answer these questions when presented with them.

Self learning is the best way to prove to employers and to yourself how ready to you are to tackle the ongoing growth and educational demands of the industry.

scottalanmiller

Jump servers are one of the easier projects to tackle and a great starting place on your Linux journey as they are easy to make, very useful, have little to no external dependencies and are often a foundation point for starting a UNIX infrastructure. In this lab project we will build a very basic Linux Jump Server using CentOS 7.

For a Jump Server we can do a very basic install, we can easily get away with a single vCPU and 1GB of RAM. We need only the most minimal local storage so 8GB should be more than enough. Once we have the settings ready, we can do a minimal install option and accept all of the defaults. No special needs here.

Linux CentOS 7 Jump Scale HC3

As always we start by patching up to current...

yum -y update
yum -y install epel-release
yum -y install fail2ban

And truly, this is enough to have a starter Jump Box. Very basic, of course, and probably not where we would want to stop. Where do we go from here?

First you would create users and SSH keys and then deploy them to the other boxes that you wish to connect to. This is the core of what makes the Jump Box a Jump Box. This is standard SSH key setup, nothing unique to a Jump Box.

Additional steps that are often interesting are to add two factor authentication to the Jump Box, such as Google Authenticator.

scottalanmiller

I've been looking for this for years (not knowing the name didn't help) and finally found it. It is a Canadian show that we saw in NY via PBS when I was young. It aired in 1983 and introduced many of the most popular computers of the era (8bit era pre-Mac and pre-Amiga.). I used to watch this with @SonshineAcres and my mom in the years before we owned a computer at home. A very influential, but silly, show for me.

http://www.youtube.com/watch?v=XC_T5mvuguw

scottalanmiller

https://youtu.be/-s_xiE-Q3_Q

scottalanmiller

People often ask where to start learning Linux, and the answer is always to "just start doing projects." That's hard to do, of course, because someone without server experience might not have a good set of project ideas that would reflect real business processes to start out with. So I am going to start collecting ideas:

Build a Linux Jump Box
Build a Linux Logging Server like ELK, Graylog or Splunk
Build a Linux Monitoring System like Zabbix, Zenoss or Nagio
Build a Linux Ticketing System like ServiceDesk+ or osTicket
Build a Linux Documentation Management System like MediaWiki, Dokuwiki or Alfresco.
Build a Linux VoIP PBX like FreePBX.
Build a Linux Instant Messaging System like Rocket.Chat, Mattermost or OpenFire.
Build a Linux Email System like Zimbra.
Build a Linux Media Server for home movies, music, pictures, etc.
Build a Linux Backups System.
Build a Linux Shared Storage System using NFS for other Linux Machines.
Build a Linux Shared Storage System using Samba for Windows and Mac OSX devices.
Build a Linux Active Directory server with Samba 4 or FreeIPA.
Build a DevOps management system with Salt, Ansible, Chef or Puppet.
Script your builds, script maintenance tasks.

General Project Tips:

Always use enterprise Linux OS Distros: CentOS / RHEL, OpenSuse / Suse or Ubuntu (mostly in that order)
Treat the systems as if they were production and secure them, monitor them, etc.
Always vitualize
Use real server hardware when you can
Use enterprise cloud platforms when you can (Amazon, Azure, Rackspace, Softlayer, Digital Ocean, Vultr, etc.)
Do everything in such a way as to make your current business or any potential employer jealous of your home or lab network. Do this by raising the bar on the home line to be what a business should be like.

scottalanmiller

Doing this on a Digital Ocean CentOS 7.1 Droplet with 1GB of RAM. Always fully update before starting.

[[email protected] ~]# cat /etc/redhat-release
CentOS Linux release 7.1.1503 (Core)

setenforce 0
yum -y install epel-release
mkdir -p /var/www/html; cd /var/www/html/
wget https://raw.githubusercontent.com/snipe/snipe-it/master/install.sh && chmod 744 install.sh && ./install.sh

Just accepts the defaults for MariaDB and set the root password. Remember to record this!!

Now a little more, the site should be up but will have errors because we aren't quite done yet...

 cd snipeit
vi app/config/app.php

Now modify the timezone line so that it looks like this...

Now we just have to do one final step to get everything configured and running. Just run this command to configure your first user:

php artisan app:install

Follow the prompts. Once completed, you are done. You can navigate to http://ipaddress/ and you should be able to log in and begin using your Snipe-IT system on CentOS 7 with MariaDB.

scottalanmiller

It does not take long working in IT to experience this phenomenon. The previous IT professional built what is clearly a disaster and then promptly quit. We see this in small shops where there is a single IT professional that leaves or in shops using an MSP and the MSP is replaced. In both cases the commonality is that when there is a change of IT staff it is a total change of staff - there is a lack of continuity between the old staff and the new staff. What is important here is that there is no one involved in making the old decisions who then is affected by them in the future.

So why do we see this so often? This might seem strange and just a bizarre artefact of IT, but there is a reason for it, I believe. Or reasons, perhaps.

IT is inherently complex and as we well know, it is poorly understood by management and often ignored. Management often sees only the results and not the risk - whether to outages, data loss, audits or whatever. This means that management will often (in fact, almost aways) reward "getting lucky" more than "doing a good job." This creates some very obvious problems. Combine this with the fact that nearly no SMB has a growth plan for IT pros effectively forcing them to change jobs to continue their careers and we have a disastrous combination of factors for the business.

To an employee making big decisions that are only see from the outside and not audited for quality processes there is only results of "it worked" or "it failed" rather than "it works but we are at huge risk of total disaster" and "it didn't work, but nearly did and it wasn't my fault." An employee is, much of the time, more protected by cutting corners than honestly trying to do good work. This is an obvious failing by management to not look for meaningful work and to reward random or worse, reckless, work.

The result is that for best career results in the SMB space much of the time and often in the MSP for the SMB space the best career options can be had by taking reckless chances. In doing this, projects can come in under budget and be completed quickly. Why waste time protecting the environment from disaster, why waste time documenting, why train someone else to take over, why study best practices or common approaches - all of these things add career risk and if the business isn't looking for a "good job" to be done, there is little incentive for the IT staff to consider them as valuable. In reality, even very reckless IT decisions are rarely going to blow up in the first year or two, most disasters happen well down the road. And even very dangerous conditions rarely have a disaster rate higher than 50% over a system lifespan.

For example, using a Walmart bargain bin laptop as a server, no RAID, no backups, with a pirated copy of Windows 2008, without being patched ever still has a better than 50% chance of not creating a disaster for more than two years. Of course we know that this is a terrible businesses decision and represents all kinds of risk to the business, yet if the business is not auditing for good decision making, long term investment thinking, thinking like an owner, risk assessments, legal licensing, industry best practices and so forth, the business would only see "working file server with active directory functionality" and "saving a fortune over other proposed solutions." Of course, the business could fail and lose every bit of their data and be hit by a major Microsoft licensing audit and be totally out of business overnight because of this, but unless those disasters hit the business might never know what risk was taken.

How does a house of cards scenario help the IT pro? In tons of ways:

It lowers the skill and effort needed to do IT work. This lets marginally skilled IT pros look competent and even, in some cases, like super stars (short term).
It allows IT to benefit from getting paid full time work, for doing part time effort.
If the IT pro or MSP can walk away before the disaster hits, they look like heroes and move on to the next job(s) with a sparkling reference that they need only use once or twice before doing the same thing from the next job.
If the disaster hits before they quit or find another job, the impact is minimal. If the fault for risky house of cards thinking gets pinned on them, they get fired or quit - it's not that much punishment, the risk is low. Find another job, use a different job that didn't have a disaster as a reference. References are a dime a dozen.
If the disaster hits after moving on, blame the "new guy" for not maintaining the system properly. The same factors that kept management from auditing while you were there likely can't tell if you or the new guy are to blame for the disaster. Heck, he didn't fix the problems so clearly he was okay with how things were, right?
In easily 60% or more of cases, no disaster will ever happen before systems are retired or the company fails anyway. Most SMBs go out of business in just a few years in general. So the chances that there even will be a failure at all, while insanely high for a business decision where the negative outcomes will often mean bankruptcy, is no big deal to the employee for whom the risks are trivial. So there is a very good chance that several companies that an IT pros does this to will never be any the wiser and will very often thank him for what he did.
Even if caught, because the business wasn't watching carefully there is a very good chance that the IT Pro can pass blame to equipment, acts of God or whatever. These things happen, just look at all of the other SMBs having unexpected, total disasters. Even when caught, blame is not always assigned.

At the end of the day, IT Pros in the SMB are rarely held accountable in a way that rewards good decision making for the business and rather are more likely to be rewarded, either by the initial company or through subsequent career moves, for having put the business at risk. The risks to the business are huge, while trivial to the IT staff. Conversely, the employee is rarely rewarded for doing a truly excellent job and may be passed over for work if they refuse to cut corners compared to someone offering to "make do with fewer resources and less budget" making it actually a risky career move to do a good job!

At the end of the day, IT cannot fix this problem. Only businesses can. Good business means rewarding employees for good work and holding them accountable to bad work. But if the business rewards high risk scenarios, employees will take that route. Understanding how businesses are incentivizing their own demise or risk is the critical first step to fixing this issue.

scottalanmiller

Just making a single place for all of these links so that we can see the growth over time rather than only monthly:

Month	Views	Posts
August 2017
July 2017
June 2017	2224200	10024
May 2017
April 2017	2006092	8473
March 2017	2109242	8658
February 2017	1774324	11358
January 2017	2366223	8973
December 2016	2563932	9268
November 2016	2476690	7981
October 2016	2511810	8772
September 2016	1801790	NA
August 2016	1800240	11872
July 2016	2377016	8336
June 2016	1724899	NA
May 2016	1681058	8396
April 2016	1923873	8682
March 2016	2142561	11267
February 2016	1564432	11500
January 2016	1721711	10149
December 2015	2139721	8000
November 2015	1334733	11628
October 2015	800123	11270
September 2015	487557	6122
August 2015	765246	6954
July 2015	700480	4689
June 2015	498262	5502
May 2015	435155	6771
April 2015	339904	7334
March 2015	516573	8658
February 2015	445725	NA
January 2015

February 2015 was month eleven for the community and the first month that the NodeBB platform had stats for us. March is the first that we paid attention to posts.

scottalanmiller

There is no better way to get started with Linux than jumping straight in! So we will do just that. For the majority of our learning, we are going to focus on CentOS Linux because it is completely free, focused completely on enterprise server needs and is a mirror of the leading business distribution and the most commonly encountered in the Linux System Administration workplace. This series is not a sales pitch for CentOS or RHEL but use them because they make the most sense for getting started in a Linux career. When possible, we will branch out and investigate other enterprise Linux offerings as well to make the educational opportunities as complete as possible.

As with any modern server administration, we are going to assume that everything that we do is going to be virtualized. We will address Linux on physical installs later in our "course", but unless we are specifically targeting a physical install for a special purpose (such as creating a virtualization host) we will stick to working and assuming that all work is as a virtual machine. As a system administrator, the physical server is of no concern to us, we work at the OS level.

You are free to virtualize your Linux educational environment using any tool set that you have available to you. If you are doing this at home, I would recommend Oracle VirtualBox as it is free, very easy to use and extremely powerful. It will work great for this. You can use VMware Workstation, Fusion, Parallels or similar to virtualize on your desktop or laptop. If you have access to a type 1 hypervisor, even better, as this will mimic exactly how you would work in a production environment. If you have the resources to have a dedicated server for learning (this could be anything from an old desktop that you put together yourself to a massive HP Proliant or Dell PowerEdge server) then I highly recommend installing an enterprise type 1 hypervisor and performing this course in that manner. Any enterprise hypervisor is free and will work just fine: VMware ESXi, Microsoft Hyper-V, KVM or Xen / XenServer.

In my own lab I will be doing all of the examples on the Linux-based KVM hypervisor-based Scale HC3 cluster, so all of my screenshots will be from that system. Yours will look differently but the basic functionality, especially as it pertains to this class, will be identical. If you are working with a Xen-based system offering optionally full paravirtualization or HVM modes, choose HVM for this course.

Of course you could also do nearly everything the same working from a Linux instance on a cloud platform such as Amazon Web Services, Azure, Rackspace, Digital Ocean, Softlayer or Vultr, but we do not want to add any additional complications arising from platform differences, non-standard base images and such so if possible, save that for more advanced lessons.

We will start by building a base, minimum system image and making that into a template to make things easier and faster in the future. But we cannot do anything until we have our first VM of Linux, so here we go.

First we need to download a CentOS installation DVD image. CentOS has a download site here: https://www.centos.org/download/

Choose the Minimum Install ISO. At the time of this writing, this is CentOS 7 release 1511. But all CentOS 7 should be the same for our purposes.

We need very few resources for our Linux VM. In fact we could easily work with a single vCPU and less than 512MB of RAM. But we probably do not need to be that tight with our resources. We will bump up to 1GB of RAM for our default system.

When installing CentOS, I often use the text-based installer only because it is more reliably going to work. The graphical installer is essentially identical but can have problems based on resolution or graphic capabilities and is less reliable. I will show the graphical installer here as it is more common and less intimidating.

CentOS VM Setup on Scale HC3

In this screenshot I show the Scale HC3 VM setup options that I will use for CentOS 7. Just one vCPU and just one GB of RAM. Notice that we only need a 20GB drive, even that is excessive. I like 20GB today, but you can get away with much less. If you have the option, thin provision so that it does not matter. You can see my boot ISO here, CentOS 7 Minimum 1511.

If you are not on Scale obviously your screenshot will look a little different than this, but the basics will be the same. If you need specific details on a different hypervisor, post questions in the thread below.

Now we can "Create" and start up our VM and begin our install. Unlike some desktop distributions, CentOS does not load into a "live" environment (Linux Mint does this, for example) and immediately will present the option to install.

CentOS VM Config

Once we start our new CentOS VM and view it from the console we can step through the installation process. Our first screen is time sensitive. Once it comes up we need to select Install CentOS 7 using the cursor keys and hit enter.

CentOS Installation Screen 1

Once the installation begins we will first have to choose our languages. This is all very self explanatory. Simply select yours and click to continue.

centos 7 choose language

Next we come to our general configuration screen. For advanced users there is a lot that we can select on this screen. As this is our first time we are going to stick to the minimum.

centos 7 options

Notice that under "System" there is a yellow triangle on "Installation Destination". CentOS 7 will always make us verify that we want to install to the disk to avoid accidents. So we have to click on "Installation Destination" so that we can verify the drive.

CentOS 7 Drive Selection

If you are doing a default installation like I am, coming to the drive selection screen should pick the only available drive automatically (this is the 20GB drive, labelled vda when using my KVM-based Scale system here) with no intervention needed. You can just click "Done" to return to the previous screen. If for some reason this does not happen automatically you will need to select the drive on this screen before clicking done.

And we are back to the screen that we had before but the yellow triangle is gone now.

CentOS 7 Drive Selected

To make things easy, we will set up our networking now as well so that it is available to us as soon as the system comes up. We are assuming that you have DHCP working on your network at this point. Click on "Network & Host Name" to continue.

This is the default screen that we will see when we first see the screen:

CentOS Networking

We just have two easy changes to make. In the "Host name" field, fill in your hostname. Mine is lab-lnx-centos.lab.ntg.co. I have a DNS domain already that I use for my environment (lab.ntg.co), if you do not have one you can make one up like .mylab. The only other thing that we must do is look for the networking "on/off" switch in the top right. It should be off by default. Click on this so that it turns to "on". One you do this the Ethernet (eth0) settings should say "Connected" and details about your IP addressing assigned via DHCP should appear.

CentOS Updated Networking

That is all that we needed to do, we are now free to continue with the installation!

centos 7 installation

Set the root password, this is self explanatory. Be sure not to forget this password, either!

We are going to optionally create a user account that we will use, as well. I am going to make a user name "student" that is going to be an administrator. See the configuration in the screen shot below. Please configure a "student" user just as this. Use your own password for this and, again, don't forget it.

CentOS 7 Make User

After this we need only wait for the installation process to complete. CentOS 7 Minimum is pretty small and this generally happens very quickly.

Once the installation is complete it will ask you to click "Reboot". Do so and our system should reboot and come up to a log in prompt. Put in "root", hit enter and then put in the password that was set for root a few steps ago. If all went according to plan we should be logged into our new CentOS 7 Linus virtual machine and ready to continue our class!

centos 7 installation complete

Part of a series on Linux Systems Administration by Scott Alan Miller

scottalanmiller

scottalanmiller

Using "take a picture if login attempts fail" technology, a number of ruthless hackers have been caught red handed trying to casually get in to unwatched laptops.

http://www.sadanduseless.com/2016/06/cat-hackers/

scottalanmiller

From SMB IT Journal:
The History of Array Splitting
One Big RAID 10: A New Standard in Server Storage
Choosing RAID in 2013
Choosing a RAID Level by Drive Count
Understanding Hardware and Software RAID
Nearly As Good is Not Better
Hot Spare or a Hot Mess
When No Redundancy Is More Reliable
Spotlight on SMB Storage
DAC: Dreaded Array Confusion
Comparing RAID 10 and RAID 01
What is RAID 100
The Software RAID Inflection Point

From MangoLassi:
Understanding RAID 5 with Solid State Drives
Why We Do No Preemptively Replace Hard Drives in a RAID Array
The Software RAID Inflection Point
Understanding Hybrid RAIDs
Matching Drives for RAID
What is RAID 10

From Other Sources:
ZDNet: Why RAID 6 Stops Working in 2019
ZDNet: Why RAID 5 Stops Working in 2009
ZDNet: Sorry About Your Broken RAID 5
ZDNet: Has RAID 5 Really Stopped Working
ZDNet: Don't Use RAID 5 on Small Arrays
Everything You Know About Disks Is Wrong
ACM: Triple-Parity RAID and Beyond
Understanding the RAID Penalty
Practical RAID Performance
Practical RAID Decision Making
Why Non-Uniform URE Distribution May Make Parity RAID Riskier Than Previously Thought
What You Need to Know About Growing a RAID Array
NetApp Implementation of Double Parity RAID: RAID-DP
Scott Alan Miller on One Big RAID 10 at SpiceCorps DFW on YouTube

Academic:
The Mathematics of RAID 6, Anvin

Discussions:
What Makes Parity RAID Safe on SSDs but Not Traditional HDs

This is the famous "RAID Link Blast" that gets used so often. I will attempt to update it when new articles are found to be added to the list. Very handy RAID reference to have.

scottalanmiller

NTG Turns Twenty

Starting in February, 1999 NTG has been one awesome, wild adventure

Happy birthday and congratulations to NTG and the awesome NTG team. Starting as the unassuming Renaissance-West Consulting, a small Upstate New York MSP by @AndyW and @scottalanmiller - NTG has come a very long way. RW was acquired by Nicklin Associates in June, 1999 where the company became primarily a SaaS vendor. By April, 2000 the IT and software engineering team of Nicklin Associates was split off on its own again, this time as Niagara Telecom.

Niagara Telecom, Inc. continued as primarily a SaaS vendor, with its own software engineering and IT / operations functions, until 2005 when NTI rebranded as Niagara Technology Group, as it is still often known today. Niagara Technology Group shifted focus from primarily software engineering and SaaS to IT outsourcing and MSP services.

A finally rebranding came in 2010 when the ntg.co domain was acquired and the company changed their image to simply NTG. There have been so many adventures, opportunities, ups, downs, changes, surprises, good times and tough times. It has been an amazing ride and I can't imagine life without NTG and the NTG family.

Today NTG is am amazing family of people. We love working together, we love what we do. We are growing, adapting, and I can't be more excited about the next twenty years. NTG is now legally NTG LLC, and is based in Texas rather than New York, and much of our team is all over the world. And less than one year ago, NTG acquired MangoLassi adding even more to the exciting future of the company.

Happy birthday, happy anniversary, and a big thanks to everyone who is in today or who has been a part of this awesome group. I know that I am going to miss people, and there are so many that have worked with NTG over the years, but are no longer on the active roster, you are not forgotten but we can't mention everyone here.

Just some of NTG's current, active roster who are here on ML... thank you so much for being part of the family...

@Dominica
@pchiodo
@Romo
@gjacobse
@Joy
@MarigabyFrias
@valentina
@Suyeins
@tonyshowoff
@JeremyRichardson
@Karlita
@animal
@SonshineAcres
@njd5040
@Jaguar
@EddieJennings
Anny
@scottalanmiller

And our adopted family members...

@CCWTech
@LilAng
@LtWilhelm

There are so many partners, friends, part timers, on calls, future team members, retirees, old timers, new timers, interns... thank you all.

Cheers

scottalanmiller

https://itsfoss.com/learn-linux-for-free/

scottalanmiller

A very common task with Linux, or any UNIX server, is building an NFS File Server (or NAS, as many people would call it.) NFS is the most common network file protocol in the UNIX world and is cross-platform, easy to use and very efficient.

For this project, to keep things simple, I'm just going to build a basic CentOS 7 server with 100GB of storage on XFS on LVM, which gives me a highly robust, high performance, very scalable filesystem with snapshot and other features.

This is purely a lab system to be blown away later, so I can share all details.

NFS Fileserver on Scale HC3

Just a single vCPU, 2GB RAM and the system is named "SAM-UserNAS". Very simple but this will provide us with a solid file server for our needs.

Our disk setup is pretty simple, during installation I make a single 84GB logical volume to be mounted on /data that will house our file server data.

Data Volume on CentOS 7 Install

We can start by prepping the packages on the server:

yum -y update
yum -y install nfs-utils

Then we can configure the NFS services:

systemctl enable rpcbind
systemctl enable nfs-server
systemctl start rpcbind

Now we will set up the file space:

mkdir /data/users
chmod 777 /data/users

We need to, of course, open the system firewall to allow NFS traffic to pass to the server.

firewall-cmd --permanent --zone=public --add-service=nfs
firewall-cmd --reload

The configuration of our NFS file server is help in the /etc/exports file. We can edit this to include the directory that we want to share:

vi /etc/exports

And we will add this line. The IP range in question is the internal LAN for this example:

/data/users    10.100.42.0/24(rw,sync,no_root_squash,no_all_squash)

After we set up the share we can start the service now that it has something to do.

systemctl start nfs-server

And there we go, we have an NFS share already available from our new NFS file server.

scottalanmiller

AFter a decade of hell, our house in NY finally sold five minutes ago. It's all done.

scottalanmiller

Pretty excited. A big cluster will be arriving sometime tomorrow. The office tells me that there is unlikely time for it to get all hooked up until Thursday but hopefully we can get it unboxed and ready at least, tomorrow. This is our new lab platform and you should be seeing new lab projects soon as we get new capacity for doing large projects.

New toys!!