Netkiller Linux 手札

Netkiller Linux Cookbook

Mr. Neo Chan, 陳景峰 (BG7NYT)

中國廣東省深圳市寶安區龍華鎮
518109
+86 755 29812080
+86 755 29812080
<netkiller@msn.com>

版權 © 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015 Netkiller(Neo Chan). All rights reserved.

版權聲明

轉載請與作者聯繫，轉載時請務必標明文章原始出處和作者信息及本聲明。

文檔出處:

http://netkiller.github.io

http://netkiller.sourceforge.net

微信掃瞄二維碼進入 Netkiller 微信訂閲號

QQ群：128659835 請註明“讀者”

內容摘要

本文檔講述Linux系統涵蓋了系統管理與配置包括：

對初學Linux的愛好者忠告

玩Linux最忌reboot（重新啟動）這是windows玩家壞習慣

Linux只要接上電源你就不要再想用reboot,shutdown,halt,poweroff命令,Linux系統和應用軟件一般備有reload,reconfigure,restart/start/stop...不需要安裝軟件或配置伺服器後使用reboot重新引導計算機

在Linux系統裡SIGHUP信號被定義為刷新配置檔案,有些程序沒有提供reload參數,你可以給進程發送HUP信號,讓它刷新配置檔案,而不用restart.通過pkill,killall,kill 都可以發送HUP信號例如: pkill -HUP httpd

我的系列文檔

編程語言

Netkiller Architect 手札	Netkiller Developer 手札	Netkiller PHP 手札	Netkiller Python 手札	Netkiller Testing 手札	Netkiller Cryptography 手札
Netkiller Perl 手札	Netkiller Docbook 手札	Netkiller Project 手札	Netkiller Java 手札	Netkiller DevOps 手札

操作系統

Netkiller Linux 手札	Netkiller Debian 手札	Netkiller CentOS 手札	Netkiller FreeBSD 手札	Netkiller Shell 手札	Netkiller Security 手札
Netkiller Web 手札	Netkiller Monitoring 手札	Netkiller Storage 手札	Netkiller Mail 手札	Netkiller Multimedia 手札

資料庫

Netkiller Database 手札

Netkiller PostgreSQL 手札

Netkiller MySQL 手札

Netkiller NoSQL 手札

Netkiller LDAP 手札

網絡設備及其他

Netkiller Network 手札

Netkiller Cisco IOS 手札

Netkiller H3C 手札

Netkiller Amateur Radio 手札

您可以使用iBook閲讀當前文檔

鳴謝

目錄

1. 本文目的
2. 內容簡介
3. 讀者對象
4. 作者簡介

I. System Administrator

1. Introduction

1.1. Linux 發行版本

1.1.1. Debian 衍生版本
1.1.2. Redhat 衍生版本
1.1.3. FreeBSD 包風格的Linux 發行版
1.1.4. Linux 下載排名

1.2. Distribution information

1.3. Linux Installation

1.3.1. HDD Partition

1.4. System Infomation

1.4.1. Cpu Bit

1.5. shutdown

1.6. Profile

1.6.1. shell

2.1. 編譯安裝內核

2.2. sysctl - configure kernel parameters at runtime

2.2.1. sysctl.d
2.2.2. vm.overcommit_memory

2.3.1. /sys/class/net/

2.4.1. 進程內存監控
2.4.2. ulimit 狀態

3. Package Management

3.1. apt-cache

3.1.1. search
3.1.2. depends
3.1.3. policy

3.2. Apt-Get

3.2.1. Search
3.2.2. Installation
3.2.3. Update
3.2.4. Remove

3.3. aptitude

3.4. Automatic Updates

3.5.1. -i|--install 安裝.deb包
3.5.2. -r|--remove 卸載.deb包
3.5.3. -L|--listfiles <package> ... List files `owned' by package(s). 列出包中的檔案
3.5.4. -l|--list [<pattern> ...] List packages concisely. 列出.deb包
3.5.5. Status
3.5.6. dpkg-deb - Debian package archive (.deb) manipulation tool
3.5.7. dpkg-reconfigure

3.6. Upgrading

3.6.1. GUI
3.6.2. CLI
3.6.3. CDROM

3.7. 製作.deb安裝包

3.7.1. checkinstall — Track installation of local software, and produce a binary manageable with your package management software.
3.7.2. dh_make - prepare Debian packaging for an original source archive
3.7.3. control

4. Device information

4.1. dmesg - print or control the kernel ring buffer

4.2. smartctl - Control and Monitor Utility for SMART Disks

4.3. lspci - list all PCI devices

4.4. lshw - list hardware

4.4.1. only show a certain class of hardware

4.5. hwinfo - Hardware Information

4.6. dmidecode - DMI table decoder

4.7. ethtool - Display or change ethernet card settings

4.8. usb device

4.9. lsscsi - list SCSI devices (or hosts) and their attributes

4.11. lsblk - list block devices

4.12. kudzu - detects and configures new and/or changed hardware on a system

5. udev - Linux dynamic device management

6. Kernel modules

6.1. modprobe - program to add and remove modules from the Linux Kernel

7.1. time zone

7.2. to change system date/time

7.2.1. NTP Server

7.3. Language

8. console / terminal

8.1. serial console
8.2. console timeout
8.3. TUI (Text User Interface)
8.4. framebuffer

9. Harddisk

9.1. 查看分區分區 UUID

9.2.1. Ext2

9.3. 臨時增加 swap 分區

9.4. Show partition

9.5. Create partition

9.6. Clone partition

9.7. Format partition

9.7.1. ext3
9.7.2. ReiserFS

9.8. estimate disk / directory / file space usage

9.9. Convert from ext3 to ext4 File system

9.10.1. 設置GTP磁碟
9.10.2. 查看分區
9.10.3. 創建分區
9.10.4. 刪除分區
9.10.5. 退出
9.10.6. mount

9.11. loop devices

9.11.1. losetup - set up and control loop devices

10. Removable Storage

10.1. usb flash

10.2. CD / DVD

10.2.1. Mount an ISO file
10.2.2. create iso file from CD
10.2.3. burner
10.2.4. ISO Mirror

11. File System

11.1. Mount partition

11.1.1. Mount
11.1.2. Umount
11.1.3. bind directory
11.1.4. /etc/fstab

11.2. RAM FS

11.3. tmpfs

11.4. ftp fs

11.5. SSHFS (sshfs - filesystem client based on SSH File Transfer Protocol)

11.6. davfs2 - mount a WebDAV resource as a regular file system

11.7. redisfs

11.8. File system test

11.8.1. ext4 vs btrfs
11.8.2. xfs vs jfs vs reiserfs
11.8.3. RAID10 (146G*8) vs EMC VNX 5300 (8G Fibre Channel)
11.8.4. Dell 2950(RAID5 500G SATA * 6) vs MD1200

12. Networking

12.1. Hostname

12.1.1. /etc/hostname
12.1.2. /etc/host.conf
12.1.3. /etc/hosts
12.1.4. hosts.allow / hosts.deny
12.1.5. /etc/resolv.conf

12.2. Network adapter

12.2.1. 介面名稱

12.3. Ethernet Interfaces

12.3.1. ifquery
12.3.2. DHCP
12.3.3. Static IP

12.5. Gateway

12.6. Configuring Name Server Lookups

12.7. IP forwarding(IP轉發)

12.8. bonding

12.8.1. Ubuntu

12.9. Finding optimal MTU

12.10. wireless

12.10.1. rfkill - tool for enabling and disabling wireless devices
12.10.2. iwlist - Get more detailed wireless information from a wireless interface
12.10.3. iwconfig - configure a wireless network interface
12.10.4. /proc/net/wireless

13. Logging

13.1. rsyslog

13.1.1. rsyslog.conf

13.2. logrotate - rotates, compresses, and mails system logs

13.2.1. /etc/logrotate.conf
13.2.2. /etc/logrotate.d/

13.3. syslog-ng

13.4. syslog, klogctl - read and/or clear kernel message ring buffer; set console_loglevel

13.4.1. /etc/sysconfig/syslog
13.4.2. /etc/syslog.conf
13.4.3. logger
13.4.4. To Log Messages Over UDP Network

14. Service

14.1. update-rc.d - install and remove System-V style init script links

14.2. invoke-rc.d - executes System-V style init script actions

14.3. runlevel

14.4. sysv-rc-conf

14.5. xinetd - replacement for inetd with many enhancements

14.5.1. tftpd

14.6. Scheduled Tasks

14.6.1. crontab - maintain crontab files for individual users
14.6.2. at, batch, atq, atrm - queue, examine or delete jobs for later execution

14.7. sv - control and manage services monitored by runsv

14.7.1. runsv
14.7.2. runsvdir

15. Process

15.1. top - display Linux tasks

15.2. ps - report a snapshot of the current processes

15.2.1. ps axef
15.2.2. ps -eo pid,cmd
15.2.3. ps jax
15.2.4. zombie process

15.3. mpstat

15.4. pstree - display a tree of processes

15.5.1. pgrep, pkill - look up or signal processes based on name and other attributes
15.5.2. pidof -- find the process ID of a running program.

15.6.1. &
15.6.2. Ctrl + Z
15.6.3. jobs
15.6.4. fg / bg
15.6.5. nohup - run a command immune to hangups, with output to a non-tty

15.7. ionice - get/set program io scheduling class and priority

15.8. /proc 目錄與進程的關係

16. Permission

16.1.1. Add a new user
16.1.2. remove an existed user
16.1.3. usermod - modify a user account
16.1.4. lock / unlock

16.2. Group

16.2.1. Add a new group
16.2.2. Add a user to the group
16.2.3. /etc/group

16.3. umask

16.4. Access Permissions

16.4.1. chown - change file owner and group
16.4.2. chgrp - change group ownership
16.4.3. chmod - change file access permissions

16.5. chattr - change file attributes on a Linux second extended file system

16.6. su - run a shell with substitute user and group IDs

16.7. sudo, sudoedit - execute a command as another user

16.7.1. NOPASSWD
16.7.2. 允許或禁止命令
16.7.3. Cmnd_Alias 用法

16.8. ACL - Access Control List

16.8.1. getfacl - get file access control lists
16.8.2. setfacl - set file access control lists
16.8.3. backup and restore

17.1. /etc/inputrc
17.2. /etc/shells

18. Bash Shell

18.1. bash - GNU Bourne-Again SHell

18.1.1. -n 檢查腳本是否有語法錯誤
18.1.2. -x 顯示詳細運行過程

18.2. Introduction

18.2.1. chsh - change login shell
18.2.2. test 命令
18.2.3. I/O 重定向
18.2.4. pipes (FIFOs)
18.2.5. mktemp - create a temporary file or directory 臨時目錄與檔案
18.2.6. History 命令歷史記錄
18.2.7. hash - hash database access method
18.2.8. prompt

18.3. variable

18.3.1. 表達式
18.3.2. Internal Environment Variables
18.3.3. set 設置變數
18.3.4. unset 變數銷毀
18.3.5. 設置變數預設值
18.3.6. export 設置全局變數
18.3.7. declare
18.3.8. 系統變數
18.3.9. Strings
18.3.10. Array
18.3.11. eval

18.4. conditions if and case

18.4.1. if
18.4.2. case

18.5. Loops for, while and until

18.5.1. for
18.5.2. while
18.5.3. until

18.6. Functions

18.6.1. Local variables

18.7. User interfaces

18.7.1. input

18.8. Example

18.8.1. 有趣的Shell
18.8.2. backup
18.8.3. CPU 核心數
18.8.4. Password
18.8.5. processes
18.8.6. Shell 技巧
18.8.7. to convert utf-8 from gb2312 code
18.8.8. 使用內存的百分比
18.8.9. 合併apache被cronlog分割的log檔案

19. Z Shell

19.1. installing Z shell

19.2. Starting file

19.2.1. ~/.zshrc

19.3. Prompting

19.4. Aliases

19.5. History

19.6.1. Home/End key

20. Shell command

20.1. Help Commands

20.1.1. man - an interface to the on-line reference manuals

20.2. getconf - Query system configuration variables

20.3. Directory and File System Related

20.3.1. dirname
20.3.2. filename
20.3.3. test - check file types and compare values
20.3.4. stat
20.3.5. mkdir - make directories
20.3.6. rename
20.3.7. touch
20.3.8. ls - list directory contents
20.3.9. cp - copy files and directories
20.3.10. rm - remove files or directories
20.3.11. df - report file system disk space usage
20.3.12. du - estimate file space usage
20.3.13. tac - concatenate and print files in reverse
20.3.14. split - split a file into pieces
20.3.15. find - search for files in a directory hierarchy

20.4. package / compress and decompress

20.4.1. tar — The GNU version of the tar archiving utility
20.4.2. cpio - copy files to and from archives
20.4.3. gzip
20.4.4. zip, zipcloak, zipnote, zipsplit - package and compress (archive) files
20.4.5. RAR
20.4.6. 7-Zip

20.5. date and time

20.5.1. 日期格式
20.5.2. -d --date=
20.5.3. weekday name
20.5.4. UTC

20.6. Numeric

20.6.1. 數值運算
20.6.2. seq - print a sequence of numbers
20.6.3. bc - An arbitrary precision calculator language

20.7. Text Processing

20.7.1. iconv - Convert encoding of given files from one encoding to another
20.7.2. 字元串處理命令expr
20.7.3. cat - concatenate files and print on the standard output
20.7.4. nl - number lines of files
20.7.5. od - dump files in octal and other formats
20.7.6. tr - translate or delete characters
20.7.7. cut - remove sections from each line of files
20.7.8. printf - format and print data
20.7.9. Free `recode' converts files between various character sets and surfaces.
20.7.10. /dev/urandom 隨機字元串
20.7.11. col - filter reverse line feeds from input
20.7.12. apg - generates several random passwords
20.7.13. head/tail
20.7.14. grep, egrep, fgrep, rgrep - print lines matching a pattern
20.7.15. sort - sort lines of text files
20.7.16. uniq
20.7.17. 行列轉換,表格操作
20.7.18. 反轉字元串或檔案內容

20.8. Logging

20.8.1. logger - a shell command interface to the syslog(3) system log module

20.9. Password

20.9.1. Shadow password suite configuration.
20.9.2. newusers - update and create new users in batch
20.9.3. chpasswd - update passwords in batch mode

20.10. binutils

20.10.1. strings - print the strings of printable characters in files.

22. Utility Programs

22.1. ed, red - text editor

22.2.1. 查找與替換
22.2.2. 批處理
22.2.3. line()

22.3. CURL - transfer a URL

22.3.1. 基本用法
22.3.2. data
22.3.3. connect-timeout
22.3.4. compressed
22.3.5. vhosts
22.3.6. http status
22.3.7. -A/--user-agent <agent string>
22.3.8. referer
22.3.9. -v
22.3.10. -o/--output <file>
22.3.11. -H/--header <line> Custom header to pass to server (H)
22.3.12. curl-config
22.3.13. FAQ

22.4.1. 處理列
22.4.2. printf
22.4.3. Pattern(字元匹配)
22.4.4. Built-in Variables
22.4.5. Built-in Functions
22.4.6. 過濾相同的行

22.5.1. 查找與替換
22.5.2. 編輯檔案
22.5.3. 內容打印
22.5.4. 編輯操作

22.6. expect

22.6.1. 模擬登錄 telnet 獲取Cisco配置
22.6.2. 模擬登錄 ssh
22.6.3. SCP

22.7. expect-lite - quick and easy command line automation tool

22.8. sshpass - noninteractive ssh password provider

22.9. Klish - Kommand Line Interface Shell (the fork of clish project)

22.9.1. 安裝Klish
22.9.2. 為用戶指定clish作為預設Shell
22.9.3. FAQ

22.10. Limited command Shell (lshell)

22.11. wget - retrieves files from the web

22.11.1. Logging and input file
22.11.2. HTTP options
22.11.3. Recursive download
22.11.4. --no-passive-ftp disable the "passive" transfer mode.

22.12.1. screen - screen manager with VT100/ANSI terminal emulation
22.12.2. tmux — terminal multiplexer
22.12.3. byobu - wrapper script for seeding a user's byobu configuration and launching a text based window manager (either screen or tmux)
22.12.4. htop - interactive process viewer
22.12.5. elinks
22.12.6. chat

22.13. parallel - build and execute shell command lines from standard input in parallel

23. Shell Terminal

23.1. terminal

23.1.1. resize - set TERMCAP and terminal settings to current xterm window size
23.1.2. tset, reset - terminal initialization
23.1.3. stty - change and print terminal line settings

23.2.1. Change the prompt color using tput

23.3. dialog

23.3.1. --inputbox

23.4. whiptail - display dialog boxes from shell scripts

23.4.1. --msgbox
23.4.2. --infobox
23.4.3. --yesno
23.4.4. --inputbox
23.4.5. --passwordbox
23.4.6. --textbox
23.4.7. --checklist
23.4.8. --radiolist
23.4.9. --menu
23.4.10. --gauge

III. Network Application

24. network tools

24.1. curl / w3m / lynx

25. Linux IP And Router

25.1. netmask

25.1.1. iptab
25.1.2. netmask - a netmask generation and conversion program

25.2. arp - manipulate the system ARP cache

25.2.1. display hosts
25.2.2. delete a specified entry
25.2.3. /proc/net/arp
25.2.4. /etc/ethers

25.3. iproute2

25.3.1. 添加路由
25.3.2. 刪除路由
25.3.3. 變更路由
25.3.4. 替換已有的路由
25.3.5. 增加預設路由
25.3.6. cache

25.4. 策略路由

25.5. 負載均衡

25.6. MASQUERADE

25.7. ip tunnel

25.9. Zebra

26. OpenNTPD

26.1. install

26.2. ntpdate

26.3. ntpd.conf / ntp.conf

26.3.1. server 配置
26.3.2. ntp 安全設置

27.1. DHCP Server
27.2. dhclient
27.3. release matching connections

28. DNS/Bind

28.1. 安裝 bind9

28.2. forwarders

28.3. Load Balancing

28.5. Master / Slave

28.5.1. master /etc/named.conf
28.5.2. slave /etc/named.conf
28.5.3. FAQ

28.6. DNS tools

28.6.1. dig - DNS lookup utility
28.6.2. nslookup - query Internet name servers interactively

28.7.1. OpenDNS
28.7.2. Google DNS

28.8. NamedManager

29. dnsmasq

29.1. Install

29.1.1. CentOS / Redhat
29.1.2. Debian / Ubuntu
29.1.3. Firewall 設置

29.2. /etc/dnsmasq.conf

29.3. dnsmasq.resolv.conf

29.4. dnsmasq.hosts

29.5. /etc/dnsmasq.d/dnsmasq.server.conf

29.6. /etc/dnsmasq.d/dnsmasq.address.conf

29.6.1. 域名劫持

30. rinetd — internet “redirection server”

30.1. rinetd install

30.1.1. ubuntu
30.1.2. centos

30.2. rinetd.conf

30.3. 防禦腳本

30.4. rinetd.log

31. News Group (innd)

31.1. User Authentication
31.2. usenet 管理
31.3. 通過SSL連接
31.4. src.rpm 安裝
31.5. 常用新聞組

32. IRC - Internet Relay Chat

32.1. IRC Protcol

32.2. IRC Commands

32.3. ircd-irc2 - The original IRCNet IRC server daemon

32.4. ircd-hybrid

32.5. IRC Client

32.5.1. ircII - interface to the Internet Relay Chat system
32.5.2. HydraIRC
32.5.3. XChat
32.5.4. Web IRC
32.5.5. Irssi - a modular IRC client for UNIX
32.5.6. F-IRC

33.1. ejabberd - Distributed, fault-tolerant Jabber/XMPP server written in Erlang

33.1.1. ejabberdctl

33.2. DJabberd

33.3. freetalk - A console based Jabber client

33.4. library

33.4.1. python-xmpp

34. Proxy Server

34.1. Apache Proxy

34.2. Squid - Internet Object Cache (WWW proxy cache)

34.2.1. 源碼安裝
34.2.2. debian/ubuntu 安裝
34.2.3. 配置
34.2.4. Squid 管理
34.2.5. 禁止頁面被Cache
34.2.6. Squid 實用案例
34.2.7. squid+icap+clamav

34.3. Web page proxy

34.3.1. Surrogafier
34.3.2. CGIproxy
34.3.3. PHPProxy
34.3.4. BBlocked
34.3.5. Glype
34.3.6. Zelune

34.4. SOCKS

34.4.1. Socks5
34.4.2. dante-server - SOCKS (v4 and v5) proxy daemon(danted)
34.4.3. SSH Socks5 Tunnel
34.4.4. hpsockd - HP SOCKS server

35. Firewall

35.1. TCP/IP 相關內核配置項

35.1.1. net.ipv4.ip_forward
35.1.2. net.ipv4.icmp_echo_ignore_all

35.2. iptables - administration tools for packet filtering and NAT

35.2.1. Getting Started
35.2.2. User-defined Chain
35.2.3. Common Chains Filtering
35.2.4. NAT
35.2.5. Module(模組)
35.2.6. IPV6
35.2.7. iptables-xml - Convert iptables-save format to XML
35.2.8. Example
35.2.9. access.log IP封鎖腳本

35.3. ulogd - The Netfilter Userspace Logging Daemon

35.4. ufw - program for managing a netfilter firewall

35.4.1. /etc/default/ufw
35.4.2. ip_forward
35.4.3. DHCP
35.4.4. Samba

35.5. Shorewall

35.5.1. Installation Instructions
35.5.2. Configuring Shorewall

35.6. Firewall GUI Tools

35.7. Endian Firewall

35.8. Smooth Firewall

35.9. Sphirewall

36. Stunnel - universal SSL tunnel

37. OpenSSH

37.1. 安裝 OpenSSH

37.2. /etc/ssh/

37.2.1. sshd_config
37.2.2. ssh_config
37.2.3. ~/.ssh/config

37.3. OpenSSH Tunnel

37.3.1. SOCKS v5 Tunnel

37.4. ssh-keygen — authentication key generation, management and conversion

37.4.1. .ssh/known_hosts

37.5. ssh-keyscan

37.6. ssh-copy-id - install your public key in a remote machine's authorized_keys

37.7. ssh-agent

37.7.1. ssh-add
37.7.2. Lock / Unlock agent
37.7.3. Set lifetime (in seconds) when adding identities.

37.8. OpenSSH for Windows

37.8.1. Putty Client

37.9.1. Pseudo-terminal will not be allocated because stdin is not a terminal.
37.9.2. 去掉 passphrase
37.9.3. 打印調試信息

38. VPN (Virtual Private Network)

38.1. OpenVPN (openvpn - Virtual Private Network daemon)

38.1.1. 源碼安裝
38.1.2. Openvpn Server
38.1.3. 吊銷(revoke)用戶證書
38.1.4. Openvpn Client
38.1.5. OpenVPN GUI for Windows
38.1.6. point-to-point VPNs
38.1.7. VPN 案例
38.1.8. OpenVPN安全

38.2. pptpd

38.2.1. FAQ

38.3. l2tpd - dummy package for l2tpd to xl2tpd transition

38.4. Ipsec VPN

38.4.1. ipsec-tools - IPsec tools for Linux
38.4.2. openswan - IPSEC utilities for Openswan
38.4.3. strongswan - IPSec utilities for strongSwan

38.5. N2N VPN

38.6. Hypersocket VPN

39. Point to Point

39.1. download

39.1.1. rtorrent - ncurses BitTorrent client based on LibTorrent
39.1.2. mldonkey-server - Door to the 'donkey' network
39.1.3. amule - client for the eD2k and Kad networks, like eMule

IV. Web Application

40. Apache httpd

40.1. Install

40.1.1. Quick install apache with aptitude
40.1.2. PHP 5
40.1.3. Compile and then install Apache
40.1.4. XAMPP

40.2. Module

40.2.1. Output a list of modules compiled into the server.
40.2.2. Core
40.2.3. mpm
40.2.4. Apache Log
40.2.5. mod_access
40.2.6. VirtualHost
40.2.7. Alias / AliasMatch
40.2.8. Redirect / RedirectMatch
40.2.9. Rewrite
40.2.10. Proxy
40.2.11. Deflate
40.2.12. Expires
40.2.13. Cache
40.2.14. usertrack
40.2.15. Charset
40.2.16. Dir
40.2.17. Includes
40.2.18. Apache Status
40.2.19. Mod Perl
40.2.20. mod_pagespeed -
40.2.21. Module FAQ
40.2.22. mod_setenvif
40.2.23. PHP 程序安全問題 php_admin_value
40.2.24. mod_spdy

40.3. 設置Apache實現防盜連

40.4. .htaccess

40.5. Error Prompt

40.5.1. Invalid command 'Order', perhaps misspelled or defined by a module not included in the server configuration
40.5.2. Invalid command 'AuthUserFile', perhaps misspelled or defined by a module not included in the server configuration

41. Lighttpd

41.1. 安裝Lighttpd

41.1.1. quick install with aptitude
41.1.2. yum install
41.1.3. to compile and then install lighttpd

41.2. /etc/lighttpd/lighttpd.conf

41.2.1. max-worker / max-fds
41.2.2. accesslog.filename
41.2.3. ETags
41.2.4. server.tag

41.3. Module

41.3.1. simple_vhost
41.3.2. ssl
41.3.3. redirect
41.3.4. rewrite
41.3.5. alias
41.3.6. auth
41.3.7. compress
41.3.8. expire
41.3.9. status
41.3.10. setenv
41.3.11. fastcgi
41.3.12. user-agent
41.3.13. spdy

41.4. 其他模組

41.4.1. mod_secdownload 防盜鏈

41.5. Example

41.5.1. s-maxage

42.1. Installing

42.1.1. Installing by apt-get under the debain/ubuntu
42.1.2. CentOS
42.1.3. installing by source
42.1.4. config test
42.1.5. rotate log

42.2. nginx 配置檔案

42.2.1. events
42.2.2. http 配置
42.2.3. server
42.2.4. fastcgi
42.2.5. Proxy
42.2.6. limit_zone
42.2.7. Nginx 變數

42.3.1. 405 Not Allowed?
42.3.2. 502 Bad Gateway?
42.3.3. 413 Request Entity Too Large
42.3.4. nginx: [emerg] "proxy_pass" cannot have URI part in location given by regular expression
42.3.5. proxy_pass
42.3.6. proxy_pass SESSION 丟失問題
42.3.7. [alert] 55785#0: *11449 socket() failed (24: Too many open files) while connecting to upstream

43. Apache Tomcat

43.1. Tomcat 安裝與配置

43.1.1. Tomcat 6
43.1.2. Tomcat 7
43.1.3. Java 8 + Tomcat 8
43.1.4. 防火牆配置
43.1.5. 啟動腳本
43.1.6. 同時運行多實例
43.1.7. Testing file
43.1.8. mod_jk
43.1.9. mod_proxy_ajp
43.1.10. RewriteEngine 連接 Tomcat

43.2. 配置 Tomcat 伺服器

43.2.1. server.xml
43.2.2. tomcat-users.xml
43.2.3. context.xml
43.2.4. logging.properties

43.3. 虛擬主機配置

43.3.1. 方案一
43.3.2. 方案二
43.3.3. Alias 別名
43.3.4. access_log
43.3.5. Context 配置

43.5. Init.d Script

43.5.1. Script 1
43.5.2. Shell Script 2

44.1. 安裝Resin

44.1.1. 直接使用
44.1.2. Debian/Ubuntu
44.1.3. 源碼安裝Resin

44.2. Compiling mod_caucho.so

44.3. resin.conf

44.3.1. Maximum number of threads
44.3.2. Configures the keepalive
44.3.3. ssl

44.4. virtual hosts

44.4.1. explicit host
44.4.2. regexp host
44.4.3. host-alias
44.4.4. configures a deployment directory for virtual hosts
44.4.5. Resources

44.5.1. java.lang.OutOfMemoryError: PermGen space

45. Application Server

45.1. Zope
45.2. JBoss - JBoss Enterprise Middleware

46. Web Server Optimization

46.1. ulimit

46.1.1. open files

46.2. khttpd

46.3. php.ini

46.3.1. Resource Limits
46.3.2. File Uploads
46.3.3. Session Shared
46.3.4. PATHINFO

46.4. APC Cache (php-apc - APC (Alternative PHP Cache) module for PHP 5)

46.5. Zend Optimizer

46.6. eaccelerator

47. varnish - a state-of-the-art, high-performance HTTP accelerator

47.1. Varnish Install

47.2. varnish utility

47.2.1. status
47.2.2. varnishadm
47.2.3. varnishtop
47.2.4. varnishhist
47.2.5. varnishsizes

47.3. log file

47.4. Varnish Configuration Language - VCL

47.4.1. unset / set

47.5. example

48. Apache Traffic Server

48.1. Install
48.2. Configure

49. Cherokee

49.1. Installing Cherokee

51. Other Web Server

51.1. Python SimpleHTTPServer

52. web 伺服器排名

52.1. HTTP狀態碼

V. Backup, Recovery, and Archiving Solutions

53. Logical Volume Manager (LVM)

53.1. 物理卷管理（physical volume）

53.1.1. pvcreate
53.1.2. pvdisplay
53.1.3. pvs

53.2. 卷組管理（Volume Group）

53.2.1. vgcreate
53.2.2. vgdisplay
53.2.3. vgs
53.2.4. vgchange
53.2.5. vgextend
53.2.6. vgreduce

53.3. 邏輯卷管理（logical volume）

53.3.1. lvcreate
53.3.2. lvdisplay
53.3.3. lvremove

53.4. Format

53.5. mount

53.5.1. lv
53.5.2. snapshot

53.6. snapshot backup

54. 檔案傳輸

54.1. 跨伺服器檔案傳輸

54.1.1. scp - secure copy (remote file copy program)
54.1.2. nc - TCP/IP swiss army knife

54.2. wget - retrieves files from the web

54.2.1. 下載所有圖片
54.2.2. mirror
54.2.3. reject
54.2.4. ftp 下載

54.3. axel - A light download accelerator - Console version

55. FTP (File Transfer Protocol)

55.1.1. pget
55.1.2. lftp 批處理

55.2. ncftp

55.2.1. batch command
55.2.2. ncftpget
55.2.3. ncftpput

55.3. FileZilla

55.4. vsftpd - The Very Secure FTP Daemon

55.4.1. 安裝 vsftpd
55.4.2. ftp 帳號的shell權限
55.4.3. vsftpd 認證模組
55.4.4. chroot
55.4.5. FAT

55.5. ProFTPD + MySQL / OpenLDAP 用戶認證

55.5.1. Proftpd + MySQL
55.5.2. Proftpd + OpenLDAP

55.6. Pure-FTPd + LDAP + MySQL + PGSQL + Virtual-Users + Quota

56. File Synchronize

56.1. rsync - fast remote file copy program (like rcp)

56.1.1. 安裝Rsync與配置守護進程
56.1.2. rsyncd.conf
56.1.3. upload
56.1.4. download
56.1.5. mirror
56.1.6. step by step to learn rsync
56.1.7. rsync examples
56.1.8. rsync for windows
56.1.9. 多進程 rsync 腳本
56.1.10. rsync 參數說明

56.2. tsync

56.3. Unison File Synchronizer

56.3.1. local
56.3.2. remote
56.3.3. config

56.4. csync2 - cluster synchronization tool

56.4.1. server
56.4.2. node
56.4.3. test
56.4.4. Advanced Configuration
56.4.5. 編譯安裝

56.5. synctool

57. File Share

57.1. NFSv4

57.1.1. Installation
57.1.2. exports

57.2. Parallel NFS(pNFS)

57.3. Samba

57.3.1. install
57.3.2. smb.conf
57.3.3. testparm - check an smb.conf configuration file for internal correctness
57.3.4. smbstatus - report on current Samba connections
57.3.5. smbpasswd - change a user's SMB password
57.3.6. nmblookup - NetBIOS over TCP/IP client used to lookup NetBIOS names
57.3.7. smbfs/smbmount/smbumount
57.3.8. smbclient - ftp-like client to access SMB/CIFS resources on servers
57.3.9. smbtar - shell script for backing up SMB/CIFS shares directly to UNIX tape drives
57.3.10. by Example
57.3.11. FAQ

58. Distributed File Systems

58.1. DRBD (Distributed Replicated Block Device)

58.1.1. disk and partition
58.1.2. Installation
58.1.3. configure
58.1.4. Starting
58.1.5. Using

58.2. Network Block Device protocol

58.2.1. nbd-server - Network Block Device protocol - server
58.2.2. nbd-client - Network Block Device protocol - client

58.3. GridFS

58.3.1. nginx-gridfs
58.3.2. lighttpd-gridfs

58.4. Moose File System

58.4.1. Master server installation
58.4.2. Backup server (metalogger) installation
58.4.3. Chunk servers installation
58.4.4. Users’ computers installation
58.4.5. Testing MFS

58.5. Hadoop - HDFS

58.5.1. 單機安裝
58.5.2. 分散式安裝
58.5.3. 二進制包安裝
58.5.4. FAQ

58.6.1. Installation on Ubuntu
58.6.2. Installation on CentOS
58.6.3. Block Devices

58.7. GlusterFS

58.7.1. glusterfs-server
58.7.2. glusterfs-client
58.7.3. Testing
58.7.4. RAID
58.7.5. Filesystem Administration
58.7.6. CentOS 6.3

58.8. Lustre

58.9. MogileFS

58.10. Kosmos distributed file system (KFS)

58.11. Coda

58.12. OpenAFS

59. Shared Storage

59.1. Oracle OCFS2

59.1.1. 安裝

59.3. fam & imon

60. Network Attached Storage(NAS 網絡附加存儲)

60.1. Network Storage - Openfiler

60.1.1. Accounts
60.1.2. Volumes
60.1.3. Quota
60.1.4. Shares

60.2. OpenMediaVault

60.3. FreeNAS

61. Backup / Restore

61.1. 備份策略

61.1.1. Incremental backup
61.1.2. Differential backup

61.2. dump / restore

61.3. Bacula, the Open Source, Enterprise ready, Network Backup Tool for Linux, Unix, Mac and Windows.

61.3.1. Install Backup Server
61.3.2. Install Backup Client

61.4. Amanda: Open Source Backup

61.5. Attic - 擁有重複數據刪除技術的備份軟件

61.5.1. 安裝 Attic
61.5.2. 快速開始

61.6. SafeKeep

61.7. Opendedup

62. inotify

62.1. inotify-tools

62.2. Incron - cron-like daemon which handles filesystem events

62.2.1. incrontab - inotify cron table manipulator
62.2.2. 使用說明

62.3. inotify-tools + rsync

62.4. pyinotify

VI. Monitoring

63.1. last, lastb - show listing of last logged in users

64.1. Memory
64.2. vmstat - Report virtual memory statistics
64.3. mpstat
64.4. pmap - report memory map of a process

65.1. uptime - Tell how long the system has been running.
65.2. top - display Linux tasks
65.3. atop - AT Computing's System & Process Monitor
65.4. htop - interactive process viewer

66. Processes

66.1. strace - trace system calls and signals

66.2. lsof - list open files

66.2.1. 監控檔案系統
66.2.2.
66.2.3. 用戶監控
66.2.4. 監控網絡
66.2.5. 監控進程
66.2.6. lsof 高級用法

67. Harddisk IO

67.1. input/output statistics

67.1.1. 5 秒監控一次

67.2. iotop - simple top-like I/O monitor

67.3. ionice - set or get process I/O scheduling class and priority

68. Network IO

68.1. netstat
68.2. ss
68.3. iftop - display bandwidth usage on an interface by host
68.4. iptraf - Interactive Colorful IP LAN Monitor
68.5. nload: Console application which monitors network traffic and bandwidth
68.6. bwm - Bandwidth Monitor

69. Service

69.1.1. nfsstat
69.1.2. nfswatch

69.2. apachetop

70. iptstate - A top-like display of IP Tables state table entries

71. 檔案監控

72. watchdog

74. Hardware

74.1. temperature/voltage/fan
74.2. mcelog - Decode kernel machine check log on x86 machines

75.1. gnokii

75.1.1. 安裝
75.1.2. 配置
75.1.3. 發送測試短信
75.1.4. 接收短信
75.1.5. 撥打電話

75.2. AT Commands

75.2.1. 發送短信
75.2.2. 語音通話

76. IPMI (Intelligent Platform Management Interface)

76.1. OpenIPMI

76.2. freeipmi

76.2.1. ipmiping
76.2.2. ipmimonitoring
76.2.3. ipmi-sensors
76.2.4. ipmi-locate

76.3. ipmitool - utility for controlling IPMI-enabled devices

76.3.1. ipmitool
76.3.2. sensor
76.3.3. ipmitool shell
76.3.4. ipmitool 訪問遠程主機
76.3.5. Get chassis status and set power state
76.3.6. Configure Management Controller
76.3.7. Example for iDRAC

77. Logs 分析

77.1.1. logwatch
77.1.2. nulog

77.2.1. Apache Log
77.2.2. Tomcat Log
77.2.3. awstats
77.2.4. webalizer
77.2.5. Sarg - Squid Analysis Report Generator
77.2.6. goaccess - Fast web log analyzer and interactive viewer.

77.3. rinetd.log

77.4. php-syslog-ng

77.5. Log Analyzer

77.6. Splunk

77.7. logstash - open source log management

77.8. Octopussy

77.9. eventlog-to-syslog

77.10. Apache Flume

78.1. jconsole
78.2. jps - Java Virtual Machine Process Status Tool
78.3. jinfo - Configuration Info
78.4. jstat - Java Virtual Machine Statistics Monitoring Tool
78.5. jHiccup

79. NET SNMP (Simple Network Management Protocol)

79.1. 安裝SNMP

79.1.1. Ubuntu
79.1.2. CentOS

79.2. 配置SNMP

79.2.1. community 配置
79.2.2. 定義可操作的範圍

79.3. SNMP 命令

79.3.1. snmpwalk
79.3.2. snmpget
79.3.3. snmptest

79.4. Cisco MBI

79.4.1. Cisco 3750
79.4.2. Cisco ASA 5550

80.1. Install Cacti for Ubuntu

80.2. Yum 安裝

80.3. Source Install

80.4. Web 安裝

80.5. Cacti plugins

80.5.1. Percona monitoring plugins

80.6. Template

80.6.1. Nginx
80.6.2. php-fpm
80.6.3. MySQL
80.6.4. Redis
80.6.5. Percona JMX Monitoring Template for Cacti

81.1. Install

81.1.1. Nagios core
81.1.2. Monitor Client nrpe
81.1.3. Monitoring Windows Machines
81.1.4. PNP4Nagios 圖表插件

81.2. 配置 Nagios

81.2.1. authorized
81.2.2. contacts
81.2.3. hostgroups
81.2.4. generic-service
81.2.5. SOUND OPTIONS
81.2.6. SMS 短信

81.3. 配置監控設備

81.3.1. routers
81.3.2. host
81.3.3. service

81.4. Nagios Plugins

81.4.1. check_ping
81.4.2. check_procs
81.4.3. check_users
81.4.4. check_http
81.4.5. check_mysql
81.4.6. Disk
81.4.7. check_tcp
81.4.8. check_log
81.4.9. check_traffic
81.4.10. Nagios nrpe plugins
81.4.11. check_nt
81.4.12. nsca - Nagios Service Check Acceptor
81.4.13.

81.5.1. Macro Name
81.5.2. 插件開發手冊

82.1. Installation Monitor Server

82.2. Installation Node

82.3. Additional Plugins

82.4. plugins

82.4.1. mysql
82.4.2. apache

83.1. Installing and Configuring Zabbix

83.1.1. Ubuntu
83.1.2. CentOS

83.2. web ui

83.3. zabbix-java-gateway - Zabbix java gateway

83.4. zabbix-agent

84. Ganglia

84.1. Server
84.2. Client
84.3. Plugin
84.4. Installing Ganglia on Centos

85. lvs-rrd

86.1. Installation

86.1.1. Ubuntu
86.1.2. CentOS

86.2. Web UI

86.3. Plugins

86.3.1. NetFlow

87. Observium

87.1. Installation

88. OpenTSDB

89. Graphite

90. Graphite - Scalable Realtime Graphing

91. BIG BROTHER

92. Big Sister

93. OpenNMS

94. Performance Co-Pilot

95. Clumon Performance Monitor

97. 商業軟件

98. Hyperic HQ

99. OSSIM,Spiceworks,FireGen,LANSweeper,OSSEC,HIDS

100. HawtIO

101. moloch

102. NetFlow

102.1. flow-tools - collects and processes NetFlow data

102.1.1. flow-capture
102.1.2. NetFlow into MySQL with flow-tools

102.2. netams - Network Traffic Accounting and Monitoring Software

102.2.1. netams-web

103. varnish - a state-of-the-art, high-performance HTTP accelerator

103.1. Varnish Install

103.2. varnish utility

103.2.1. status
103.2.2. varnishadm
103.2.3. varnishtop
103.2.4. varnishhist
103.2.5. varnishsizes

103.3. log file

103.4. Varnish Configuration Language - VCL

103.4.1. unset / set

103.5. example

104. Apache Traffic Server

104.1. Install
104.2. Configure

VII. Server Load Balancing

105. heartbeat

105.1. heartbeat+ldirectord

105.1.1. heartbeat
105.1.2. ldirectord
105.1.3. test

105.2. Pacemaker

106. Linux Virtual Server

106.1. 環境配置

106.2. VS/NAT

106.3. VS/TUN

106.4. VS/DR

106.4.1. 配置檔案

106.5. ipvsadm script

106.6. Timeout

106.7. debug

106.8. ipvsadm monitor

107. keepalived

107.1. 安裝
107.2. test
107.3. HAProxy and Keepalived (Virtual IP)

108. Piranha - Cluster administation tools

108.1. install

108.2. configure

108.3. real server

108.4. Example

108.4.1. Master
108.4.2. Slave
108.4.3. MySQL

109. HAProxy - fast and reliable load balancing reverse proxy

109.1. Installing

109.1.1. Ubuntu
109.1.2. CentOS

109.2. haproxy.cfg

109.2.1. stats
109.2.2. listen 方式
109.2.3. frontend/backend 方式
109.2.4. option
109.2.5. balance
109.2.6. server

109.3. Example 配置實例

109.3.1. HTTP 配置實例
109.3.2. Squid
109.3.3. haproxy + mysql 配置實例
109.3.4. HTTPS SSL證書卸載配置實例
109.3.5. 使用TCP模式實現SSL穿透

110. balance - Load balancing solution and generic tcp proxy

110.1. balance

110.1.1. 編譯安裝
110.1.2. Ubuntu 安裝
110.1.3. 測試安裝是否正確
110.1.4. 用法

110.2. BalanceNG

110.3. RBridge

111. Perlbal

111.1. install

112. Pacemaker

113. Example

113.1. 雙負載均衡的用法
113.2. 單台負載均衡的用法
113.3. 廣域網負載均衡的用法

VIII. Distributed Computing

114. Open Source Distributed Computing

114.1. Boinc (berkeley 分散式計算平台)

114.1.1. rc.local

114.2. ubuntu apt-get 安裝

114.3. CentOS 安裝

114.4. boinccmd

114.4.1. attach_project
114.4.2. nomorework | allowmorework 禁止下載任務 / 允許下載任務

115. Twitter Storm

115.1. 單機版
115.2. lein 安裝

116. High performance Computing

116.1. Distributed Computing

116.1.1. OpenMosix
116.1.2. OpenSSI

116.2. Parallel Computing

116.2.1. EnFusion
116.2.2. SCore
116.2.3. Beowulf

118. Tachyon

IX. Mail Server

119. Mail server constituent

119.1. mail user agent (MUA)

119.1.1. mutt - text-based mailreader supporting MIME, GPG, PGP and threading
119.1.2. alpine - Text-based email client, friendly for novices but powerful
119.1.3. fetchmail - SSL enabled POP3, APOP, IMAP mail gatherer/forwarder
119.1.4. GPG4WIN
119.1.5. Evolution

120. exim - meta-package to ease Exim MTA (v4) installation

120.1. install

120.1.1. ubuntu/debian
120.1.2. CentOS/Redhat

120.2. exim 命令

120.2.1. 刷新郵件隊列

120.3. 配置exim

120.3.1. /etc/aliases 別名配置

120.4.1. Mailing to remote domains not supported

121. postfix - High-performance mail transport agent

121.1. install

121.1.1. Ubuntu
121.1.2. CentOS

121.2. Rspamd

121.3. /var/log/maillog

121.3.1. 日誌統計

121.4.1. SMTP ERROR: RCPT TO command failed: 501 5.1.3 Bad recipient address syntax

122. 郵件原文

122.1. Subject Unicode
122.2. TO/CC/BCC
122.3. 正文
122.4. POP Sniffer
122.5. PHP mail()

123.1. HylaFAX

124.1. 通過SSH與控制台不能登錄

X. Security

125. Authentication

125.1. /etc/login.defs

125.2. PAM 插件認證

125.2.1. pam_tally2.so
125.2.2. pam_listfile.so
125.2.3. pam_access.so
125.2.4. pam_wheel.so

125.3. Network Authentication

125.3.1. Network Information Service (NIS)
125.3.2. OpenLDAP
125.3.3. Kerberos
125.3.4. FreeRADIUS (Remote Authentication Dial In User Service)
125.3.5. SASL (Simple Authentication and Security Layer)
125.3.6. GSSAPI (Generic Security Services Application Program Interface)

126. Sniffer

126.1. nmap - Network exploration tool and security / port scanner

126.1.1. HOST DISCOVERY
126.1.2. SCAN TECHNIQUES
126.1.3. PORT SPECIFICATION AND SCAN ORDER
126.1.4. SCRIPT SCAN
126.1.5. OS DETECTION
126.1.6. OUTPUT
126.1.7. MISC
126.1.8. Nmap Scripting Engine (NSE)

126.2. tcpdump - A powerful tool for network monitoring and data acquisition

126.2.1. 監控網絡適配器介面
126.2.2. 監控主機
126.2.3. 監控TCP連接埠
126.2.4. 監控協議
126.2.5. 輸出到檔案
126.2.6. 保存結果
126.2.7. Cisco Discovery Protocol (CDP)
126.2.8. 案例

126.3. cdpr - Cisco Discovery Protocol Reporter

126.4. nc - TCP/IP swiss army knife

126.5. Unicornscan，Zenmap，nast

126.6. netstat-nat - Show the natted connections on a linux iptable firewall

126.7. Tcpreplay

126.8. Wireshark

127. sqlmap - automatic SQL injection and database takeover tool

127.1. Installation

127.2. 開始入住實驗

127.2.1. 測試腳本
127.2.2. sqlmap.ini

127.3. Request參數

127.3.1. --method, --data
127.3.2. --cookie
127.3.3. --referer
127.3.4. --user-agent
127.3.5. --headers
127.3.6. --referer
127.3.7. auth
127.3.8. --proxy
127.3.9. --threads
127.3.10. --delay
127.3.11. --timeout

127.4. Injection

127.4.1. --dbms
127.4.2. --prefix
127.4.3. --postfix
127.4.4. --string
127.4.5. --regexp
127.4.6. --excl-str
127.4.7. --excl-reg

127.5. Techniques

127.5.1. --stacked-test
127.5.2. --time-test
127.5.3. --union-test
127.5.4. --union-tech
127.5.5. --union-use

127.6. Enumeration

127.6.1. dbs
127.6.2. --count
127.6.3. --dump/--dump-all
127.6.4. --sql-query
127.6.5. --sql-shell

127.7. Miscellaneous

127.7.1. --update
127.7.2. --save

128. Vulnerability Scanner

128.1. Nessus
128.2. OpenVAS

129. Injection & Penetration

129.1. Backtrack Linux

130. SELinux

130.1. getsebool - get SELinux boolean value
130.2. sestatus - SELinux status tool
130.3. setsebool - set SELinux boolean value
130.4. chcon - change file SELinux security context
130.5. rsync

131. Suricata Engine

133. fwknop

134. fwsnort

135. nftables

XI. Configuration Management(配置管理)

137. Ansible - SSH-based configuration management, deployment, and task execution system

137.1. install

137.2. Getting Started

137.3. ansible - run a command somewhere else

137.3.1. host-pattern
137.3.2. -a MODULE_ARGS, --args=MODULE_ARGS module arguments
137.3.3. -i INVENTORY, --inventory-file=INVENTORY specify inventory host file (default=/etc/ansible/hosts)
137.3.4. -m MODULE_NAME, --module-name=MODULE_NAME module name to execute (default=command)
137.3.5. -s, --sudo run operations with sudo (nopasswd)
137.3.6. -u REMOTE_USER, --user=REMOTE_USER connect as this user (default=root)
137.3.7. 使用實例

137.4. ansible-doc - Show Ansible module documentation

137.5. ansible-playbook - run an ansible playbook

137.5.1. 包含檔案用法

138. Capistrano

139. Puppet

139.1. Installing Puppet CentOS 6.3

139.2. Puppet 簽名

139.2.1. Agent 節點
139.2.2. Master 伺服器

139.3. test

139.3.1. Master
139.3.2. Agent

139.4. 配置檔案

139.4.1. /etc/sysconfig/puppet
139.4.2. /etc/puppet/fileserver.conf

139.5. manifests

139.5.1. node
139.5.2. group, user 用戶組管理
139.5.3. file
139.5.4. package
139.5.5. service
139.5.6. exec
139.5.7. cron

139.6. modules

139.7. firewall 配置

139.8. debug

139.8.1. master
139.8.2. node

139.9.1. err: Could not request certificate: No route to host - connect(2)
139.9.2. No help available unless you have RDoc::usage installed

140. SaltStack

140.1. 安裝 Salt Stack

140.1.1. 服務端安裝
140.1.2. 客戶端安裝
140.1.3. 防火牆配置
140.1.4. key 管理
140.1.5. 測試
140.1.6. Demo

140.2. salt-key - Salt key is used to manage Salt authentication keys

140.3. salt 命令

140.3.1. cmd
140.3.2. pkg.install
140.3.3. network.interfaces
140.3.4. salt example

140.4. /etc/salt/master

140.4.1. File Server settings
140.4.2. Pillar settings
140.4.3. Node Groups
140.4.4. File Server Backend

140.5. sls 腳本

140.5.1. pkg
140.5.2. service

140.6.1. Git fileserver backend is enabled in configuration but could not be loaded, is git-python installed

141.1. 安裝 Chef

141.1.1. CentOS

142. Cobbler

143. Cfengine

145. (R)?ex Deployment & Configuration Management

146. 基于Web的系統管理軟件

146.1. Webmin

146.1.1. webalizer

146.2. ajenti

XII. Virtualization

147. Docker

147.1. Installation

147.1.1. CentOS
147.1.2. Ubuntu

147.2. 鏡像

147.2.1.
147.2.2. 獲取鏡像
147.2.3. 列出本地鏡像
147.2.4. 創建鏡像
147.2.5. 保存和載入鏡像
147.2.6. 刪除本地鏡像

147.3. 容器

147.3.1. 啟動與終止容器
147.3.2. 進入容器
147.3.3. 導出和導入容器
147.3.4. 刪除容器

147.4. 倉庫

147.5. docker 命令

147.5.1. run
147.5.2. start / stop / restart
147.5.3. ps
147.5.4. top
147.5.5. inspect
147.5.6. images

148. vagrant - Tool for building and distributing virtualized development environments

XIII. Voice over IP

149. Gnu Gatekeeper

149.1. Gnu Gatekeeper Install

149.2. Gnu Gatekeeper Configure

149.3. Gnu Gatekeeper Test

149.3.1. Part I - Microsoft Windows NetMeeting
149.3.2. Part II - ohphone

150. OpenSIPS

150.1. 安裝 OpenSIPS

150.1.1. centos 6.5 預設安裝
150.1.2. 使用 yum.opensips.org 源安裝
150.1.3. 編譯安裝

150.2. 資料庫部署

150.2.1. DBTEXT
150.2.2. MySQL
150.2.3. PGSQL
150.2.4. Berkeley DB

150.3. 測試 opensips

151.1. Asterisk (OpenSource Linux PBX that supports both SIP and H.323)
151.2. FreeSWITCH
151.3. Yate - Yet Another Telephony Engine (includes SIP to H.323 translation)

152. VOCAL (includes a SIP to H.323 translator)

153. SIP/H.323 客戶端

153.1. linphone
153.2. Yate Client

XIV. X Window

154. install x window

154.1. xinput - utility to configure and test X input devices

155. X Setup

155.1. 取消開機啟動畫面
155.2. Automatic login
155.3. fonts 字型
155.4. disable x window

156. X Terminal

156.1. tsclient - Terminal Server Client supporting XDMCP, VNC and RDP

156.1.1. VNC
156.1.2. xdmcp

156.2. vinagre - a remote desktop viewer for the GNOME Desktop

156.3. rdesktop - A Remote Desktop Protocol client

156.3.1. -g: desktop geometry (WxH)
156.3.2. -f: full-screen mode
156.3.3. -A: enable SeamlessRDP mode
156.3.4. -z: enable rdp compression
156.3.5. -r: enable specified device redirection (this flag can be repeated)

156.4. tigervnc

156.5. TightVNC

157.1. Enable/Disable Auto Hide For Unity 2-D Launcher In Ubuntu 11.10

158. X Window System

158.1. Fluxbox
158.2. LXDE
158.3. Xfce
158.4. Xming X Server for Windows

159. X Application Software

159.1. ubuntu-restricted-extras

159.2. Keyboard Input Methods(輸入法)

159.3. 瀏覽器

159.3.1. Firefox
159.3.2. Chromium Web Browser

159.4. Download Software

159.5. PAC Manager

159.6. LibreOffice

159.7. VYM (View Your Mind)

159.8. greenshot

159.9. Window Switch

160. Office

160.1. Calc

160.1.1. 函數

161.1. 通過SSH與控制台不能登錄

A.1. 參考文檔
A.2. Red Hat 漏洞
A.3. National Vulnerability Database (NVD)
A.4. Red Hat Bug平台

B. 歷史記錄

表格清單

1.1. Linux partition
18.1. 檔案目錄表達式
18.2. 字元串表達式
18.3. 組合表達式
35.1. net.ipv4.ip_forward
60.1. Volume Group Management
7. 表格標題

範例清單

9.1. GPT Example
9.2. 創建擴展分區
12.1. bonding example
12.2. 命令行建立WiFi連結步驟
18.1. A "Power User" Prompt
18.2. A Prompt the Width of Your Term
18.3. The Elegant Useless Clock Prompt
18.4. Basic conditional example if .. then
18.5. Conditionals with variables
18.6. case
18.7. Functions with parameters sample
18.8. Using select to make simple menus
18.9. Using the command line
18.10. Reading user input with read
18.11. read
18.12. random password
20.1. backup(find + tar)
22.1. example for expect
22.2. example for expect
22.3. example 1
22.4. *.exp
22.5. parallel - build and execute shell command lines from standard input in parallel
23.1. whiptail - yesno
23.2. whiptail - inputbox
23.3. whiptail - passwordbox
23.4. whiptail - passwordbox
23.5. whiptail - example 1
23.6. whiptail - radiolist
35.1. connlimit 實例
35.2.
35.3. CentOS 5.6
38.1. openvpn.conf
38.2. server.conf
38.3. Openvpn 橋接模式伺服器配置實例
38.4. 雙網卡配置實例
38.5. client.conf
38.6. server.ovpn
38.7. client.ovpn
38.8. office.conf
38.9. home.ovpn
40.1. index.php
40.2. autolamp.sh
40.3. R=301
40.4. mod_perl.conf
41.1. /etc/init.d/lighttpd
41.2. lighttpd compress
41.3. lighttpd expire
41.4. fastcgi.conf
41.5. Cache
42.1. Expires Examples
42.2. nginx expires
42.3. Example: valid_referers
43.1. /etc/profile.d/java.sh
43.2. tomcat firewall
43.3. /etc/init.d/tomcat
43.4. /etc/rc.d/init.d/www
44.1. explicit host in resin.conf
44.2. regexp host in resin.conf
44.3. host-alias in the resin.conf
44.4. host-alias in a /var/www/hosts/foo/host.xml
44.5. host-alias-regexp in the resin.conf
44.6. shared database in host
44.7. rewrite-dispatch
47.1. default.vcl
56.1. examples
56.2. backup to a central backup server with 7 day incremental
56.3. backup to a spare disk
56.4. mirroring vger CVS tree
56.5. automated backup at home
56.6. Fancy footwork with remote file lists
56.7. /etc/csync2.cfg
58.1. nginx-gridfs
58.2. Mirror
58.3. Strip
73.1. nmon
77.1. config.php
77. mrtg
80.1. cacti config.php
81.1.
103.1. default.vcl
107.1. keepalived.conf
107.2. /etc/keepalived/keepalived.conf
108.1. piranha master
108.2. piranha slave
109.1. haproxy + mysql 配置實例
109.2. Haproxy MySQL (Master + Master)
122.1. Subject Unicode
125.1. /etc/pam.d/sshd - pam_tally2.so
125.2. /etc/pam.d/sshd - pam_listfile.so
139.1. puppetd
139.2. puppetca
140.1. salt command