Basic CentOS 7 Installation - Revision history

10.42.0.1 at 22:22, 3 February 2024

2024-02-03T22:22:51Z

← Older revision		Revision as of 22:22, 3 February 2024
Line 72:		Line 72:
	# get the standard /etc/hosts file		# get the standard /etc/hosts file
	curl $CONFIG/hosts -o /etc/hosts		curl $CONFIG/hosts -o /etc/hosts

	~~# install metricbeat~~
	~~curl -s $CONFIG/centos7/elastic.repo > /etc/yum.repos.d/elastic.repo~~
	~~yum -y install metricbeat~~
	~~curl -s $CONFIG/centos7/metricbeat.yml > /etc/metricbeat/metricbeat.yml~~

	# install the host/known_hosts synchronization		# install the host/known_hosts synchronization

DrEdWilliams at 12:56, 25 November 2021

2021-11-25T12:56:11Z

← Older revision		Revision as of 12:56, 25 November 2021
Line 85:		Line 85:
	reboot</pre>		reboot</pre>

	== ~~Final Configuration~~ ==		== Next Steps ==
	The ~~only remaining task~~ is ~~to load the ssh credentials for '''root'''~~ and ~~any user accounts. This~~ is ~~done by running the following command from each user account (assuming aslan is the reference source):~~		The rest of the installation process is not OS-dependent and is described [[Common Post-Install\|here]].

	~~scp -r aslan:.ssh $HOME~~

	~~This can also be pushed from aslan to the new system for each account:~~

	~~scp~~ -~~r ~/.ssh <new_host>:~~

	~~Passwords will be required for this action, but (if the copy is successful) no further passwords will be needed by ssh~~.

DrEdWilliams at 21:42, 17 December 2020

2020-12-17T21:42:21Z

← Older revision		Revision as of 21:42, 17 December 2020
Line 25:		Line 25:
	# - an administrator account 'ewilliam' was created during installation		# - an administrator account 'ewilliam' was created during installation

	CONFIG=http://~~kube202~~/config		CONFIG=http://config/config

	# first -- install all the basic necessities (some may already be there)		# first -- install all the basic necessities (some may already be there)

DrEdWilliams: updated script

2020-12-13T17:28:19Z

updated script

← Older revision		Revision as of 17:28, 13 December 2020
Line 72:		Line 72:
	# get the standard /etc/hosts file		# get the standard /etc/hosts file
	curl $CONFIG/hosts -o /etc/hosts		curl $CONFIG/hosts -o /etc/hosts

			# install metricbeat
			curl -s $CONFIG/centos7/elastic.repo > /etc/yum.repos.d/elastic.repo
			yum -y install metricbeat
			curl -s $CONFIG/centos7/metricbeat.yml > /etc/metricbeat/metricbeat.yml

			# install the host/known_hosts synchronization
			curl -s $CONFIG/host_check.sh > /etc/cron.hourly/host_check
			chmod +x /etc/cron.hourly/host_check

	# now reboot		# now reboot

DrEdWilliams: /* Basic system prep */

2020-12-01T00:42:33Z

Basic system prep

← Older revision		Revision as of 00:42, 1 December 2020
Line 12:		Line 12:
	Most of the initial configuration is now contained in a script that can be executed directly from the config server as root on the target system:		Most of the initial configuration is now contained in a script that can be executed directly from the config server as root on the target system:

	curl -s http://~~kube202~~/config/centos7-basic-config.sh \| bash		curl -s http://config/config/centos7-basic-config.sh \| bash

	The contents of this script are included here for reference, though updates to the script may occur without updates to this page:		The contents of this script are included here for reference, though updates to the script may occur without updates to this page:

DrEdWilliams: /* Basic system prep */

2020-11-29T21:15:05Z

Basic system prep

← Older revision		Revision as of 21:15, 29 November 2020
Line 14:		Line 14:
	curl -s http://kube202/config/centos7-basic-config.sh \| bash		curl -s http://kube202/config/centos7-basic-config.sh \| bash

	The contents of this script are included here for reference:		The contents of this script are included here for reference, though updates to the script may occur without updates to this page:

	<pre>#!/bin/sh		<pre>#!/bin/sh

DrEdWilliams: /* Basic system prep */

2020-11-27T21:28:33Z

Basic system prep

← Older revision		Revision as of 21:28, 27 November 2020
Line 10:		Line 10:

	== Basic system prep ==		== Basic system prep ==
	Most of the initial configuration is now contained in a script that can be executed directly from the config server:		Most of the initial configuration is now contained in a script that can be executed directly from the config server as root on the target system:

	curl -w http://kube202/config/centos7-basic-config.sh \| bash		curl -s http://kube202/config/centos7-basic-config.sh \| bash

	The contents of this script are included here for reference:		The contents of this script are included here for reference:

DrEdWilliams at 11:29, 10 September 2020

2020-09-10T11:29:46Z

← Older revision		Revision as of 11:29, 10 September 2020
Line 29:		Line 29:
	# first -- install all the basic necessities (some may already be there)		# first -- install all the basic necessities (some may already be there)
	yum -y install net-tools rsync zsh epel-release yum-cron yum-utils mlocate deltarpm		yum -y install net-tools rsync zsh epel-release yum-cron yum-utils mlocate deltarpm
	yum -y install sshfs nfs-utils ssmtp		yum -y install sshfs nfs-utils ssmtp psmisc
	yum -y remove firewalld postfix		yum -y remove firewalld postfix
	yum autoremove -y NetworkManager NetworkManager-libnm		yum autoremove -y NetworkManager NetworkManager-libnm

DrEdWilliams: major rework -- initialization now in a script on the config server.

2020-08-09T18:24:49Z

major rework -- initialization now in a script on the config server.

← Older revision		Revision as of 18:24, 9 August 2020
Line 10:		Line 10:

	== Basic system prep ==		== Basic system prep ==
	<pre>yum -y install net-tools rsync zsh epel-release yum-cron yum-utils mlocate deltarpm		Most of the initial configuration is now contained in a script that can be executed directly from the config server:

			curl -w http://kube202/config/centos7-basic-config.sh \| bash

			The contents of this script are included here for reference:

			<pre>#!/bin/sh
			#
			# script to do the basic install of a centos7 headless server
			#
			# Assumptions:
			# - this is run as root immediately after the install has completed
			# - the hostname has been set as desired before this script is run
			# - an administrator account 'ewilliam' was created during installation

			CONFIG=http://kube202/config

			# first -- install all the basic necessities (some may already be there)
			yum -y install net-tools rsync zsh epel-release yum-cron yum-utils mlocate deltarpm
	yum -y install sshfs nfs-utils ssmtp		yum -y install sshfs nfs-utils ssmtp
	yum -y remove firewalld postfix		yum -y remove firewalld postfix
	yum autoremove -y NetworkManager NetworkManager-libnm ~~# only if not using as graphic workstation~~		yum autoremove -y NetworkManager NetworkManager-libnm
	systemctl enable ~~yum~~-~~cron~~		systemctl enable --now yum-cron
	~~systemctl start~~ yum-cron		yum -y update
	yum -y update</~~pre~~>
			# now disable SELinux (no comment)
			sed -i 's/=enforcing/=disabled/g' /etc/selinux/config
			setenforce 0

			# make sudo passwordless for group wheel
			echo "%wheel ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/91-wheel-NOPASSWD

			# now that zsh is installed, make it the default
			chsh -s /bin/zsh
			chsh -s /bin/zsh ewilliam

			# copy the standard zsh config files
			curl -s $CONFIG/centos7/.zshrc -o /root/.zshrc
			curl -s $CONFIG/centos7/.zshrc -o /home/ewilliam/.zshrc
			chown ewilliam.ewilliam /home/ewilliam/.zshrc

			# load ssh known_hosts from the config server
			mkdir -p /root/.ssh
			curl -s $CONFIG/ssh/known_hosts -o /root/.ssh/known_hosts
			mkdir -p /home/ewilliam/.ssh
			curl -s $CONFIG/ssh/known_hosts -o /home/ewilliam/.ssh/known_hosts

			# get backup scripts
			curl -s $CONFIG/centos7/backup -o /etc/cron.daily/backup
			curl -s $CONFIG/centos7/rsync_backup.sh -o /usr/local/bin/rsync_backup.sh
			chmod +x /usr/local/bin/rsync_backup.sh

	~~Disable SELinux (no comment)~~		# configure log server
	~~<pre>sed~~ -~~i '~~s/~~=enforcing~~/~~=disabled/g'~~ /etc/~~selinux~~/~~config~~		curl -s $CONFIG/centos7/99-remotelog.conf -o /etc/rsyslog.d/99-remotelog.conf
	~~setenforce 0</pre>~~		systemctl restart rsyslog

	~~Reboot and verify everything comes up properly~~		# enable mail to the central email server
	~~reboot~~		echo "root: ewilliam@williams.localnet" >> /etc/aliases
			echo "ewilliam: ewilliam@williams.localnet" >> /etc/aliases

	~~== System Configuration ==~~		# get the standard /etc/hosts file
	~~Set~~ the ~~system hostname (if not set during installation)~~		curl $CONFIG/hosts -o /etc/hosts
	~~hostnamectl set~~-~~hostname <hostname>~~

	~~Enable passwordless sudo:~~		# now reboot
	* use visudo		reboot</pre>
	* search for 'wheel'
	* comment out that line
	* uncomment the one below it

	~~Set '''zsh''' as the default shell~~		== Final Configuration ==
	* chsh to ~~/bin/zsh (both root and ewilliam)~~		The only remaining task is to load the ssh credentials for '''root''' and any user accounts. This is done by running the following command from each user account (assuming aslan is the reference source):
	* copy '''~~ssh~~''' and ~~'''zsh''' config files~~ (~~both root and ewilliam~~)
	~~<pre>scp -r calormen~~:~~.ssh .~~
	~~scp calormen:.zshrc .~~
	~~scp calormen:.zlogin . </pre>~~

	~~Setup backup to central file server~~		scp -r aslan:.ssh $HOME
	* copy scripts from calormen
	~~<pre>~~scp ~~calormen~~:~~/etc/cron~~.~~daily/backup /etc/cron.daily~~
	~~scp calormen:/usr/local/bin/rsync_backup.sh /usr/local/bin/ </pre>~~
	* edit rsync_backup.sh, changing target directory and list of directories to backup
	* create target directory on storage1 if it doesn't exist
	* run /etc/cron.daily/backup to verify proper operation

	~~Enable connection~~ to the ~~central log server~~		This can also be pushed from aslan to the new system for each account:
	~~scp calormen~~:~~/etc/rsyslog.d/99-remotelog.conf /etc/rsyslog.d ; systemctl restart rsyslog~~

	~~Enable mail to central mail server~~		scp -r ~/.ssh <new_host>:
	~~<pre>echo "root: ewilliam@williams.localnet" >> /etc~~/~~aliases~~
	~~echo "ewilliam: ewilliam@williams~~.~~localnet" >> /etc/aliases~~<~~/pre~~>

	~~enable references to non-williamsnet addresses~~ for ~~development cluster~~		Passwords will be required for this action, but (if the copy is successful) no further passwords will be needed by ssh.
	~~scp aslan:/etc/hosts /etc/hosts~~

DrEdWilliams at 01:48, 30 July 2020

2020-07-30T01:48:35Z

← Older revision		Revision as of 01:48, 30 July 2020
Line 27:		Line 27:
	== System Configuration ==		== System Configuration ==
	Set the system hostname (if not set during installation)		Set the system hostname (if not set during installation)
	hostnamectl set-hostname <hostname>~~.williams.localnet~~		hostnamectl set-hostname <hostname>

	Enable passwordless sudo:		Enable passwordless sudo: