2 - Raspberry PI Community Projects

More documents

Recommendations

Info

350 The Debian Administrator's Handbook nagios-nrpe-server on the hosts where local tests need to run. The laer gets its configuration from /etc/nagios/nrpe.cfg. This file should list the tests that can be started remotely, and the IP addresses of the machines allowed to trigger them. On the Nagios side, enabling these remote tests is a simple maer of adding matching services using the new check_nrpe command.
Page 2 and 3:
The Debian Administrator's Handbook
Page 4 and 5:
3.1.3 Integration with Other Linux/
Page 6 and 7:
6.5 Checking Package Authenticity .
Page 8 and 9:
9.4.1 Administrating On a Web Inter
Page 10 and 11:
11.5 Seing Up Windows Shares with S
Page 12 and 13:
14.2 Firewall or Packet Filtering .
Page 14 and 15:
B.2.2 The User's Home Directory . .
Page 17 and 18:
Foreword Linux has been garnering s
Page 19 and 20:
Book Structure Following the struct
Page 21 and 22:
While we were obviously satisfied w
Page 23 and 24:
Tobias Gruetzmacher, Tournier Simon
Page 26 and 27:
Keywords Objective Means Operation
Page 28 and 29:
1.1. What Is Debian? CULTURE Origin
Page 30 and 31:
TOOL Installer debian-installer is
Page 32 and 33:
COMMUNITY Upstream author, or Debia
Page 34 and 35:
➨ http://www.opensource.org/licen
Page 36 and 37:
1.3.1. The Debian Developers Debian
Page 38 and 39:
with the changelog.gz file (or equi
Page 40 and 41:
were only lile challenges at the be
Page 42 and 43:
can always fine-tune these paramete
Page 44 and 45:
PERSPECTIVE Debian for multimedia A
Page 46 and 47:
Each specific service has its own s
Page 48 and 49:
tool. Whether used in graphical or
Page 50 and 51:
Figure 1.2 Compilation of a package
Page 52 and 53:
their work. The next step is the in
Page 54 and 55:
28 The Debian Administrator's Handb
Page 56 and 57:
Keywords Falcot Corp SMB Strong Gro
Page 58 and 59:
We have envisioned this case study
Page 60 and 61:
Several factors have dictated this
Page 62:
• A survey of several French serv
Page 65 and 66:
Chapter Analyzing the Existing Setu
Page 67 and 68:
Figure 3.1 Coexistence of Debian wi
Page 69 and 70:
Figure 3.2 Database backups Each se
Page 71 and 72:
HARDWARE Next-generation PC Most re
Page 74 and 75:
Keywords Installation Partitioning
Page 76 and 77:
BACK TO BASICS A catch-up course in
Page 78 and 79:
copy the previously downloaded ISO
Page 80 and 81:
of the two, and GRUB, a more modern
Page 82 and 83:
Figure 4.3 Selecting the country 4.
Page 84 and 85:
4.2.9. Configuring the Clock If the
Page 86 and 87:
(swap) will be stored. This task is
Page 88 and 89:
Figure 4.9 Guided partitioning The
Page 90 and 91:
IN PRACTICE Shrinking a Windows par
Page 92 and 93:
“Create a volume group”, to whi
Page 94 and 95:
Figure 4.12 Selecting a Debian mirr
Page 96 and 97:
accessible from the boot menu. You
Page 98:
TIP Debian thinks of speakers of no
Page 101 and 102:
Chapter Packaging System: Tools and
Page 103 and 104:
Chapter 7, Solving Problems and Fin
Page 105 and 106:
SHA1: 350a8a7a43fe182d54f3b7d73b803
Page 107 and 108:
5.2.1.2. Conflicts: the Conflicts f
Page 109 and 110:
Figure 5.1 Use of a Provides field
Page 111 and 112:
name. This directory also includes
Page 113 and 114:
postinst and similar scripts. But t
Page 115 and 116:
-----BEGIN PGP SIGNED MESSAGE-----
Page 117 and 118:
and a set of upstream patches contr
Page 119 and 120:
Updating database of manual pages .
Page 121 and 122:
which the file comes; --status pack
Page 123 and 124:
Iceweasel is a redesign of the Mozi
Page 125 and 126:
handles other packaging formats, es
Page 127 and 128:
Chapter Maintenance and Updates: Th
Page 129 and 130:
The syntax of the last field depend
Page 131 and 132:
6.1.1.2. The Backports From backpor
Page 133 and 134:
6.2.1. Initialization For any work
Page 135 and 136:
6.2.3. System Upgrade Regular upgra
Page 137 and 138:
it can be configured through severa
Page 139 and 140:
TIP Comments in /etc/apt/ preferenc
Page 141 and 142:
6.4. Frontends: aptitude, synaptic
Page 143 and 144:
like aptitude has always done. It c
Page 145 and 146:
aptitude's log will only contain a
Page 147 and 148:
“Authentication” tab in the Sei
Page 149 and 150:
compiled by the package maintainers
Page 151 and 152:
Figure 6.3 Upgrading with update-ma
Page 153 and 154:
IN PRACTICE The Falcot Corp case Fa
Page 155 and 156:
purpose is editing. Browsing this c
Page 157 and 158:
Chapter Solving Problems and Findin
Page 159 and 160:
Man pages not only document program
Page 161 and 162:
The navigation controls in the docu
Page 163 and 164:
constraints... 7.2. Common Procedur
Page 165 and 166:
7.2.3. Asking for Help on a Mailing
Page 168 and 169:
Keywords Configuration Localization
Page 170 and 171:
This chapter reviews everything inc
Page 172 and 173:
The questions are relevant to the p
Page 174 and 175:
to 1 Gb/s). The most widely used ca
Page 176 and 177:
A connection by telephone modem req
Page 178 and 179:
Network Manager knows how to handle
Page 180 and 181:
TIP Bypassing DNS Since application
Page 182 and 183:
8.4.3. Modifying an Existing Accoun
Page 184 and 185:
The creation of an account populate
Page 186 and 187:
8.7. Printer Configuration Printer
Page 188 and 189:
Configuration of the bootloader mus
Page 190 and 191:
oot=/dev/sda # the partition that c
Page 192 and 193:
kernel /vmlinuz root=/dev/sda2 init
Page 194 and 195:
The timezone, configured during ini
Page 196 and 197:
GOING FURTHER GPS modules and other
Page 198 and 199:
A complete list of known filesystem
Page 200 and 201:
8.10.1. Introduction and Prerequisi
Page 202 and 203:
the choices saved in the .config fi
Page 204 and 205:
$ ls ../*.deb ../linux-image-2.6.32
Page 206:
This requires, however, that lilo b
Page 209 and 210:
Chapter Unix Services 9 Contents Sy
Page 211 and 212:
• checking the integrity of files
Page 213 and 214:
By default, Debian uses four differ
Page 215 and 216:
BACK TO BASICS Client, server A sys
Page 217 and 218:
that requires frequent connections
Page 219 and 220:
For any connection established on t
Page 221 and 222:
When the VNC session is closed, rem
Page 223 and 224:
There are two ways of presenting ri
Page 225 and 226:
Webmin is used through a web interf
Page 227 and 228:
• news: Usenet subsystem message
Page 229 and 230:
9.6. The inetd Super-Server Inetd (
Page 231 and 232:
SECURITY Restricting cron or atd Yo
Page 233 and 234:
# Restart the IRC proxy after each
Page 235 and 236:
update the quotas in the absence of
Page 237 and 238:
of backups can be kept in a small a
Page 239 and 240:
The Falcot Corp administrators are
Page 241 and 242:
• ACTION: the action correspondin
Page 243 and 244:
ATTRS{rev}==" " ATTRS{state}=="runn
Page 245 and 246:
ATTENTION Graphics card and standby
Page 247 and 248:
Chapter Network10 Infrastructure Co
Page 249 and 250:
sent through to the masqueraded con
Page 251 and 252:
CULTURE SSL and TLS The SSL protoco
Page 253 and 254:
crt for the public certificate, key
Page 255 and 256:
10.2.1.2. Configuring the OpenVPN S
Page 257 and 258:
fast. Installing an IKE daemon (for
Page 259 and 260:
pptpd is the PPTP server for Linux.
Page 261 and 262:
## some defaults nodefaultroute pro
Page 263 and 264:
GOING FURTHER Optimal configuration
Page 265 and 266:
# (/proc/sys/net/ipv6/conf/all/acce
Page 267 and 268:
so that a security vulnerability in
Page 269 and 270:
Example 10.12 Excerpt of /etc/bind/
Page 271 and 272:
} option broadcast-address 192.168.
Page 273 and 274:
10.8.2. Remote Diagnosis: nmap nmap
Page 275 and 276:
The packet currently displayed was
Page 277 and 278:
Chapter 11 Network Services: Postfi
Page 279 and 280:
the ISP's SMTP server, which is alw
Page 281 and 282:
alias_database = hash:/etc/aliases
Page 283 and 284:
virtual_mailbox_base = /var/mail/vh
Page 285 and 286:
The last two rules reject any messa
Page 287 and 288:
The reject_unlisted_recipient rule
Page 289 and 290:
failed messages later), especially
Page 291 and 292:
# Unfiltered addresses postmaster@f
Page 293 and 294:
Note that the SASL database was cre
Page 295 and 296:
Apache is a modular server, and man
Page 297 and 298:
# New log format including (virtual
Page 299 and 300:
11.2.3.2. Restricting Access The Al
Page 301 and 302:
➨ http://www.falcot.com/cgi-bin/a
Page 303 and 304:
RPC services register to a director
Page 305 and 306:
option, which disables this behavio
Page 307 and 308:
The package also proposes identifyi
Page 309 and 310:
1 5 Specifies the character set and
Page 311 and 312:
username = user password = password
Page 313 and 314:
11.6.3. Configuring a Filter squid
Page 315 and 316:
objectClass: dcObject objectClass:
Page 317 and 318:
Question Answer LDAP server Uniform
Page 319 and 320:
and so on). The answer to the “co
Page 321 and 322:
go into deeper detail for some conc
Page 323 and 324:
Chapter Advanced12 Administration C
Page 325 and 326: CULTURE Independent or inexpensive?
Page 327 and 328: RAID-5 RAID-5 addresses the asymmet
Page 329 and 330: Filesystem label= OS type: Linux Bl
Page 331 and 332: there will be a synchronization pha
Page 333 and 334: [...] Update Time : Thu Sep 30 15:5
Page 335 and 336: Fortunately, these lines can be gen
Page 337 and 338: # pvdisplay "/dev/sdb2" is a new ph
Page 339 and 340: Allocation inherit Read ahead secto
Page 341 and 342: # cat /etc/fstab [...] /dev/vg_crit
Page 343 and 344: [...] # df -h /srv/base/ Filesystem
Page 345 and 346: • The remaining partitions, sda7
Page 347 and 348: that gets started) is known as dom0
Page 349 and 350: or Mandriva). Other methods include
Page 351 and 352: # xm list Name ID Mem VCPUs State T
Page 353 and 354: known as control groups, by which d
Page 355 and 356: into a separate switch, with the co
Page 357 and 358: done. INIT: Entering runlevel: 3 St
Page 359 and 360: 12.2.3.2. Network Configuration Jus
Page 361 and 362: is accessible from all interfaces;
Page 363 and 364: We will only give a rough overview
Page 365 and 366: • from the network; preseeding th
Page 367 and 368: 12.3.3. Simple-CDD: The All-In-One
Page 369 and 370: 12.4. Monitoring Monitoring is a ge
Page 371 and 372: Finally, when a plugin is invoked w
Page 373 and 374: According to its type, each object
Page 375: check_command } define service{ use
Page 379 and 380: Chapter Workstation13 Contents Conf
Page 381 and 382: (==) Matched vesa as autoconfigured
Page 383 and 384: administrator makes explicit change
Page 385 and 386: Figure 13.1 The GNOME desktop For a
Page 387 and 388: Figure 13.3 The Xfce desktop 13.4.
Page 389 and 390: Figure 13.5 The KMail email soware
Page 391 and 392: them in its main section. Rather th
Page 393 and 394: Since the IRC protocol is very old,
Page 395 and 396: ing on these formats, only the ones
Page 398 and 399: Keywords Firewall Netfilter IDS/NID
Page 400 and 401: 14.1. Defining a Security Policy CA
Page 402 and 403: BACK TO BASICS Firewall A firewall
Page 404 and 405: ➨ http://www.faqs.org/rfcs/rfc777
Page 406 and 407: The previous section lists availabl
Page 408 and 409: of the /etc/network/interfaces file
Page 410 and 411: The gnome-system-monitor and qps gr
Page 412 and 413: # debsums -p /var/cache/apt/archive
Page 414 and 415: a desktop machine is far from being
Page 416 and 417: Figure 14.4 Automatic transitions b
Page 418 and 419: ➨ http://wiki.debian.org/SELinux
Page 420 and 421: Similarly, TCP/UDP ports are labele
Page 422 and 423: ## Domain allowed to transition. ##
Page 424 and 425: 1 3 Those interfaces define the mya
Page 426 and 427:
e confined. In any case, you will h
Page 428 and 429:
possible, but if the web applicatio
Page 430 and 431:
14.5.6. Physical Security There is
Page 432 and 433:
following sections), then isolating
Page 434 and 435:
www.falcot.com 200.58.141.84 - - [2
Page 436 and 437:
Keywords Backport Rebuild Source pa
Page 438 and 439:
15.1. Rebuilding a Package from its
Page 440 and 441:
TOOL fakeroot In essence, the packa
Page 442 and 443:
the package is created in the curre
Page 444 and 445:
- contacts for each department. . T
Page 446 and 447:
The second entry matches the first
Page 448 and 449:
means that signatures need not be v
Page 450 and 451:
• In a similar fashion, debc allo
Page 452 and 453:
documents; this is no longer the ca
Page 454 and 455:
Keywords Future Improvements Opinio
Page 456 and 457:
16.1. Upcoming Developments Weeks (
Page 459 and 460:
Appendix Derivative Distributions A
Page 461 and 462:
➨ http://www.knopper.net/knoppix/
Page 463 and 464:
Appendix Short Remedial Course B Co
Page 465 and 466:
B.1.3. Searching for Files and with
Page 467 and 468:
• /usr/: applications; this direc
Page 469 and 470:
TOOL Setup, the BIOS configuration
Page 471 and 472:
These programs have a -v option, th
Page 473 and 474:
B.4.5. Rights Management Unix-like
Page 475 and 476:
IN PRACTICE A concrete example Let'
Page 477 and 478:
Index _ .d, 110 .desktop, 357 .htac
Page 479 and 480:
BackupPC, 210 bash, 158 Basic Input
Page 481 and 482:
Debian Maintainer, 425 Debian Polic
Page 483 and 484:
GECOS, 154 General Public License,
Page 485 and 486:
Kopete, 367 krdc, 194 krfb, 194 Kub
Page 487 and 488:
kernel modules, 185 mondo, 212 moni
Page 489 and 490:
ping, 378 pipe, 448 pipe, named pip
Page 491 and 492:
name, 240 NTP, 169 SMTP, 252 web, 2
Page 493 and 494:
V Venema, Wietse, 204 version, comp
show all

2 - Raspberry PI Community Projects

Create successful ePaper yourself

Delete template?

Save as template?