Netkiller Linux 手札
		下一頁

Home | Mirror | Search

Netkiller Linux 手札

Netkiller Linux Cookbook

Mr. Neo Chan, 陳景峰 (BG7NYT)

中國廣東省深圳市寶安區龍華鎮
518109
+86 755 29812080
+86 755 29812080
<openunix@163.com>

版權 © 2006, 2007, 2008, 2009, 2010, 2011, 2012 Netkiller(Neo Chan). All rights reserved.

版權聲明

轉載請與作者聯繫，轉載時請務必標明文章原始出處和作者信息及本聲明。

文檔出處:

http://netkiller.sourceforge.net

http://netkiller.github.com

內容摘要

本文檔講述Linux系統涵蓋了系統管理與配置包括：

對初學Linux的愛好者忠告

玩Linux最忌reboot（重新啟動）這是windows玩家壞習慣

Linux只要接上電源你就不要再想用reboot,shutdown,halt,poweroff命令,Linux系統和應用軟件一般備有reload,reconfigure,restart/start/stop...不需要安裝軟件或配置伺服器後使用reboot重新引導計算機

在Linux系統裡SIGHUP信號被定義為刷新配置檔案,有些程序沒有提供reload參數,你可以給進程發送HUP信號,讓它刷新配置檔案,而不用restart.通過pkill,killall,kill 都可以發送HUP信號例如: pkill -HUP httpd

我的系列文檔

Netkiller Architect 手札	Netkiller Developer 手札	Netkiller Testing 手札	Netkiller Cryptography 手札	Netkiller Version 手札
Netkiller Linux 手札	Netkiller Debian 手札	Netkiller CentOS 手札	Netkiller FreeBSD 手札	Netkiller Security 手札
Netkiller Web 手札	Netkiller Monitoring 手札	Netkiller Storage 手札	Netkiller Mail 手札	Netkiller Shell 手札
Netkiller Database 手札	Netkiller PostgreSQL 手札	Netkiller MySQL 手札	Netkiller NoSQL 手札	Netkiller LDAP 手札
Netkiller Installation 手札	Netkiller Cisco IOS 手札	Netkiller Intranet 手札	Netkiller Multimedia 手札	Netkiller Docbook 手札
Netkiller Management 手札

您可以使用iBook閲讀當前文檔

鳴謝

目錄

1. 本文目的
2. 內容簡介
3. 讀者對象
4. 作者簡介

1. Introduction

1. Distribution Version

2. Distribution information

3. Linux Installation

3.1. HDD Partition

I. System Administrator

2. System Infomation

1. Cpu Bit

3. shutdown

1. shell

5. Introduction

1. Distribution Version

2. Distribution information

3. Linux Installation

3.1. HDD Partition

7. Package Management

1. apt-cache

1.1. search
1.2. depends
1.3. policy

2.1. Search
2.2. Installation
2.3. Update
2.4. Remove

3. aptitude

4. Automatic Updates

5.1. -i|--install 安裝.deb包

5.2. -r|--remove 卸載.deb包

5.3. -L|--listfiles <package> ... List files `owned' by package(s). 列出包中的檔案

5.4. -l|--list [<pattern> ...] List packages concisely. 列出.deb包

5.5. Status

5.6. dpkg-deb - Debian package archive (.deb) manipulation tool

5.6.1. -X, --vextract archive directory Extract and display the filenames contained by a package
5.6.2. -e, --control archive [directory] Extracts the control information files from a package archive into the specified directory.
5.6.3. -b, --build directory [archive|directory]

5.7. dpkg-reconfigure

6. Upgrading

6.1. GUI
6.2. CLI
6.3. CDROM

7. 製作.deb安裝包

7.1. checkinstall — Track installation of local software, and produce a binary manageable with your package management software.
7.2. dh_make - prepare Debian packaging for an original source archive
7.3. control

8. Device information

1. dmesg - print or control the kernel ring buffer
2. smartctl - Control and Monitor Utility for SMART Disks
3. lspci - list all PCI devices
4. dmidecode - DMI table decoder
5. ethtool - Display or change ethernet card settings
6. usb device
7. SCSI
8. HBA
9. kudzu - detects and configures new and/or changed hardware on a system

9. udev - Linux dynamic device management

10. Kernel modules

1. modprobe - program to add and remove modules from the Linux Kernel

1. time zone

2. to change system date/time

2.1. NTP Server

3. Language

12. console / terminal

1. serial console
2. console timeout
3. TUI (Text User Interface)
4. framebuffer

13. Harddisk

1. 查看分區分區 UUID

2.1.1. 查看卷標
2.1.2. 更改卷標

3. 臨時增加 swap 分區

4. Show partition

5. Create partition

6. Clone partition

7. Format partition

7.1. ext3
7.2. ReiserFS

8. estimate disk / directory / file space usage

9. Convert from ext3 to ext4 File system

10.1. 查看分區
10.2. 創建分區
10.3. 退出
10.4. mount

11. loop devices

11.1. losetup - set up and control loop devices

14. Removable Storage

1. usb flash

2. CD / DVD

2.1. Mount an ISO file
2.2. create iso file from CD
2.3. burner
2.4. ISO Mirror

15. File System

1. Mount partition

1.1. Mount
1.2. Umount
1.3. bind directory
1.4. /etc/fstab

5. SSHFS (sshfs - filesystem client based on SSH File Transfer Protocol)

6. davfs2 - mount a WebDAV resource as a regular file system

7. File system test

7.1. ext4 vs btrfs
7.2. xfs vs jfs vs reiserfs
7.3. RAID10 (146G*8) vs EMC VNX 5300 (8G Fibre Channel)
7.4. Dell 2950(RAID5 500G SATA * 6) vs MD1200

16. Networking

1. Hostname

1.1. /etc/hostname
1.2. /etc/host.conf
1.3. /etc/hosts
1.4. hosts.allow / hosts.deny
1.5. /etc/resolv.conf

2. Network adapter

3. Ethernet Interfaces

3.1. ifquery
3.2. DHCP
3.3. Static IP

6. Configuring Name Server Lookups

8.1. Ubuntu

9. Finding optimal MTU

10. 介面名稱

17. Logging

1. syslog, klogctl - read and/or clear kernel message ring buffer; set console_loglevel

1.1. /etc/sysconfig/syslog
1.2. /etc/syslog.conf
1.3. logger
1.4. To Log Messages Over UDP Network

2. logrotate - rotates, compresses, and mails system logs

2.1. /etc/logrotate.conf

2.2. /etc/logrotate.d/

2.2.1. apache2
2.2.2. mysql
2.2.3. cacti

3. remote syslog

3.1. syslog-ng
3.2. rsyslog

18. Service

1. update-rc.d - install and remove System-V style init script links

2. invoke-rc.d - executes System-V style init script actions

3. runlevel

4. sysv-rc-conf

5. xinetd - replacement for inetd with many enhancements

5.1. tftpd

6. Scheduled Tasks

6.1. crontab - maintain crontab files for individual users
6.2. at, batch, atq, atrm - queue, examine or delete jobs for later execution

7. sv - control and manage services monitored by runsv

7.1. runsv
7.2. runsvdir

19. Process

1. top - display Linux tasks

2. ps - report a snapshot of the current processes

2.1. ps axef
2.2. ps -eo pid,cmd
2.3. ps jax
2.4. zombie process

4. pstree - display a tree of processes

5.1. pgrep, pkill - look up or signal processes based on name and other attributes
5.2. pidof -- find the process ID of a running program.

6.1. &
6.2. Ctrl + Z
6.3. jobs
6.4. fg / bg
6.5. nohup - run a command immune to hangups, with output to a non-tty

7. ionice - get/set program io scheduling class and priority

20. Authentication

1.1. Add a new user

1.2. remove an existed user

1.3. usermod - modify a user account

1.4. lock / unlock

1.4.1. /etc/passwd

2.1. Add a new group
2.2. Add a user to the group
2.3. /etc/group

21. Permission

2. Access Permissions

2.1. chown - change file owner and group
2.2. chgrp - change group ownership
2.3. chmod - change file access permissions

3. chattr - change file attributes on a Linux second extended file system

4. su - run a shell with substitute user and group IDs

5. sudo, sudoedit - execute a command as another user

5.1. NOPASSWD
5.2. 允許或禁止命令
5.3. Cmnd_Alias 用法

6. ACL - Access Control List

6.1. getfacl - get file access control lists

6.2. setfacl - set file access control lists

6.2.1. set
6.2.2. default
6.2.3. remove

6.3. backup and restore

II. System Commands

22. Help Commands

1. man - an interface to the on-line reference manuals

1.1. manpath.config
1.2. 查看man手冊位置
1.3. 指定手冊位置

23. Directory and File System Related

2. filename

2.1. 排除副檔名
2.2. 取副檔名

3. test - check file types and compare values

5. mkdir - make directories

8. ls - list directory contents

9. cp - copy files and directories

9.1. copy directories recursively
9.2. overwrite an existing file

10. rm - remove files or directories

10.1. -bash: /bin/rm: Argument list too long
10.2. zsh: sure you want to delete all the files in /tmp [yn]?

11. df - report file system disk space usage

12. du - estimate file space usage

13. tac - concatenate and print files in reverse

14. find - search for files in a directory hierarchy

14.2. regex

14.5.1. 分別設置檔案與目錄的權限

14.6. -delete

14.8. xargs

14.9. 排除目錄

14.10. -mtime / -mmin

14.11. --newer

14.12. -print / -printf

24. package / compress and decompress

1. tar — The GNU version of the tar archiving utility

1.1. tar examples
1.2. gunzip
1.3. b2zip
1.4. compress
1.5. -t, --list
1.6. tar: Removing leading `/’ from member names
1.7. -C, --directory=DIR
1.8. --exclude
1.9. -T
1.10. 日期過濾
1.11. 保留權限
1.12. -r, --append
1.13. 遠程傳輸
1.14. 分卷壓縮

2. cpio - copy files to and from archives

4. zip, zipcloak, zipnote, zipsplit - package and compress (archive) files

25. date and time

1. 日期格式

2. -d --date=

2.1. 日期偏移量

2.1.1. day
2.1.2. month
2.1.3. year

2.2. 時間偏移

3. weekday name

26. Numeric

1. 數值運算
2. seq - print a sequence of numbers
3. bc - An arbitrary precision calculator language

27. Text Processing

1. iconv - Convert encoding of given files from one encoding to another

1.1. cconv - A iconv based simplified-traditional chinese conversion tool

2. 字元串處理命令expr

3. cat - concatenate files and print on the standard output

3.1. -s, --squeeze-blank suppress repeated empty output lines

4. nl - number lines of files

5. od - dump files in octal and other formats

5.1. 16進制

6. tr - translate or delete characters

7. cut - remove sections from each line of files

8. printf - format and print data

9. Free `recode' converts files between various character sets and surfaces.

10. /dev/urandom 隨機字元串

11. col - filter reverse line feeds from input

12. apg - generates several random passwords

13. head/tail

14. grep, egrep, fgrep, rgrep - print lines matching a pattern

14.1. 刪除空行

14.2. -v, --invert-match

14.3. Output control

14.3.1. -o, --only-matching show only the part of a line matching PATTERN
14.3.2. 遞歸操作
14.3.3. -c, --count print only a count of matching lines per FILE

14.4. Context control

14.4.1. -A, --after-context=NUM print NUM lines of trailing context
14.4.2. -B, --before-context=NUM print NUM lines of leading context
14.4.3. -C, --context=NUM print NUM lines of output context
14.4.4. --color

14.5. Regexp selection and interpretation

14.5.1. .*
14.5.2. 2010:(13|14|15|16)
14.5.3. []與{}

14.7. egrep

15. sort - sort lines of text files

15.1. 對列排序

17. 行列轉換,表格操作

17.1. column - columnate lists
17.2. paste - merge lines of files

28. Logging

1. logger - a shell command interface to the syslog(3) system log module

29. Password

1. Shadow password suite configuration.
2. newusers - update and create new users in batch
3. chpasswd - update passwords in batch mode

30. binutils

1. strings - print the strings of printable characters in files.

31. Utility Programs

1. ed, red - text editor

2.1. 查找與替換

2.2. 批處理

2.2.1. vi 批處理

2.3. line()

3.1. 處理列

3.2. printf

3.3. 查找檔案並刪除

3.4. Pattern(字元匹配)

3.4.1. Pattern, Pattern

3.5. Built-in Variables

3.5.1. NF

3.6. Built-in Functions

3.6.1. length

3.7. 過濾相同的行

4.1. find and replace

4.1.1. 正則
4.1.2. delete
4.1.3. aaa="bbb" 提取bbb

5. CURL - transfer a URL

5.1. 基本用法

5.3. connect-timeout

5.4. compressed

5.5. vhosts

5.6. http status

5.7. -A/--user-agent <agent string>

5.8. referer

5.10. -o/--output <file>

5.11. -H/--header <line> Custom header to pass to server (H)

5.11.1. Last-Modified / If-Modified-Since
5.11.2. ETag / If-None-Match
5.11.3. Accept-Encoding:gzip,defalte
5.11.4. HOST

6.1. 模擬登錄 telnet 獲取Cisco配置
6.2. 模擬登錄 ssh
6.3. SCP

7. wget - retrieves files from the web

7.1. HTTP options

7.1.1. --post-data=STRING use the POST method; send STRING as the data.

7.2. Recursive download

7.2.1. -r, --recursive specify recursive download.
7.2.2. -m, --mirror shortcut for -N -r -l inf --no-remove-listing.

7.3. --no-passive-ftp disable the "passive" transfer mode.

8. screen - screen manager with VT100/ANSI terminal emulation

9.1. tmux
9.2. htop - interactive process viewer
9.3. elinks
9.4. chat

32. Introduction

1. chsh - change login shell

2. test 命令

3. I/O 重定向

3.1. error 重定向

3.2. 使用塊記錄日誌

3.3. tee - read from standard input and write to standard output and files

3.3.1. nettee - a network "tee" program

3.4. 快速清空一個檔案的內容

4. pipes (FIFOs)

5. mktemp - create a temporary file or directory 臨時目錄與檔案

6. History 命令歷史記錄

6.1. .bash_history
6.2. .mysql_history

33. Bash Shell

1. bash - GNU Bourne-Again SHell

1.1. -n 檢查腳本是否有語法錯誤
1.2. -x 顯示詳細運行過程

3. Internal Environment Variables

4. variable

4.2. export / unset

4.3. declare

4.4. 系統變數

4.5. Strings

4.5.1. ##/#
4.5.2. %%/%
4.5.3. :n1:n2
4.5.4. #
4.5.5. example

5. conditions if and case

5.1. if
5.2. case

6. Loops for, while and until

6.1. for
6.2. while
6.3. until

7. Functions

7.1. Local variables

8. User interfaces

8.1. input

34. Z Shell

1. installing Z shell

2. Starting file

2.1. ~/.zshrc

3. Prompting

6.1. Home/End key

35. Shell TUI

1. terminal

1.1. resize - set TERMCAP and terminal settings to current xterm window size
1.2. tset, reset - terminal initialization
1.3. stty - change and print terminal line settings

3.1. --inputbox

4. whiptail - display dialog boxes from shell scripts

4.1. --msgbox
4.2. --infobox
4.3. --yesno
4.4. --inputbox
4.5. --passwordbox
4.6. --textbox
4.7. --checklist
4.8. --radiolist
4.9. --menu
4.10. --gauge

36. Example

1. 有趣的Shell

3. CPU 核心數

4. Password

5. processes

5.1. pid
5.2. kill
5.3. pgrep

6. Shell 技巧

6.1. 行轉列，再批評
6.2. for vs while
6.3. 遍歷字元串

IV. Network Application

37. network tools

1. curl / w3m / lynx

38. Linux IP And Router

1.1. iptab
1.2. netmask - a netmask generation and conversion program

2. arp - manipulate the system ARP cache

2.1. display hosts
2.2. delete a specified entry
2.3. /proc/net/arp
2.4. /etc/ethers

3. iproute2

3.1. 添加路由
3.2. 刪除路由
3.3. 變更路由
3.4. 替換已有的路由
3.5. 增加預設路由
3.6. cache

4. 策略路由

5. 負載均衡

6. MASQUERADE

7. ip tunnel

39. OpenNTPD

3. ntpd.conf / ntp.conf

3.1. server 配置
3.2. ntp 安全設置

1. DHCP Server
2. dhclient
3. release matching connections

41. DNS/Bind

1. 安裝 bind9

2. forwarders

3. Load Balancing

5. Master / Slave

5.1. master /etc/named.conf

5.1.1. /var/named/example.com.zone
5.1.2. /var/named/example.com.zone

5.2. slave /etc/named.conf

5.3.1. Master 更改後 Slave 不同步
5.3.2. Master 與 Slave 的 Test

6. DNS tools

6.1. dig - DNS lookup utility

6.1.1. any
6.1.2. ns
6.1.3. A
6.1.4. mx
6.1.5. cname
6.1.6. -x addr 反向解析

6.2. nslookup - query Internet name servers interactively

6.2.1. 刷新 DNS 解析緩存
6.2.2. 查看NS記錄
6.2.3. Mx 記錄

7.1. OpenDNS
7.2. Google DNS

42. dnsmasq

1.1. CentOS / Redhat
1.2. Debian / Ubuntu
1.3. Firewall 設置

2. /etc/dnsmasq.conf

3. dnsmasq.resolv.conf

4. dnsmasq.hosts

5. /etc/dnsmasq.d/dnsmasq.server.conf

6. /etc/dnsmasq.d/dnsmasq.address.conf

6.1. 域名劫持

43. rinetd — internet “redirection server”

1. rinetd install

1.1. ubuntu
1.2. centos

2. rinetd.conf

3. 防禦腳本

4. rinetd.log

44. Proxy Server

1. Apache Proxy

2. Squid - Internet Object Cache (WWW proxy cache)

2.1. 源碼安裝

2.2. debian/ubuntu 安裝

2.3. 配置

2.3.1. 正向代理
2.3.2. 代理伺服器
2.3.3. Squid作為反向代理Cache伺服器(Reverse Proxy)
2.3.4. 代理+反向代理

2.4. Squid 管理

2.4.1. squidclient
2.4.2. reset cache

2.5. 禁止頁面被Cache

2.6. Squid 實用案例

2.6.1. Squid Apache/Lighttpd 在同一台伺服器上
2.6.2. 用非 root 用戶守護 Squid

2.7. squid+icap+clamav

3. Web page proxy

3.1. Surrogafier
3.2. CGIproxy
3.3. PHPProxy
3.4. BBlocked
3.5. Glype
3.6. Zelune

4.1. Socks5
4.2. dante-server - SOCKS (v4 and v5) proxy daemon(danted)
4.3. SSH Socks5 Tunnel
4.4. hpsockd - HP SOCKS server

45. Firewall

1. sysctl - configure kernel parameters at runtime

1.1. net.ipv4.ip_forward
1.2. net.ipv4.icmp_echo_ignore_all

2. iptables - administration tools for packet filtering and NAT

2.1. Getting Started

2.1.1. CentOS/Redhat TUI 工具
2.1.2. Protocols
2.1.3. Interfaces
2.1.4. IP Addresses
2.1.5. Ports
2.1.6. IPTables and Connection Tracking

2.2. User-defined Chain

2.2.1. Chains List
2.2.2. Chains Refresh
2.2.3. Chains Admin

2.3. Common Chains Filtering

2.3.1. INPUT Rule Chains
2.3.2. OUTPUT Rule Chains
2.3.3. Forward
2.3.4. Malicious Software and Spoofed IP Addresses

2.4.1. Redirect
2.4.2. Postrouting and IP Masquerading
2.4.3. Prerouting
2.4.4. DNAT and SNAT
2.4.5. DMZ zone

2.5. Module(模組)

2.5.1. string
2.5.2. connlimit
2.5.3. limit

2.7. iptables-xml - Convert iptables-save format to XML

2.8. Example

2.9. access.log IP封鎖腳本

3. ulogd - The Netfilter Userspace Logging Daemon

4. ufw - program for managing a netfilter firewall

4.1. /etc/default/ufw
4.2. ip_forward
4.3. DHCP
4.4. Samba

5. Shorewall

5.1. Installation Instructions

5.1.1. Install using RPM
5.1.2. Install using apt-get

5.2. Configuring Shorewall

5.2.1. zones
5.2.2. policy
5.2.3. interfaces
5.2.4. masq
5.2.5. rules
5.2.6. params

6. Firewall GUI Tools

7. Endian Firewall

8. Smooth Firewall

46. Stunnel - universal SSL tunnel

47. VPN (Virtual Private Network)

1. OpenVPN (openvpn - Virtual Private Network daemon)

1.1. 源碼安裝

1.2. Openvpn Server

1.2.1. create keys for the server
1.2.2. create keys for the clients

1.3. 吊銷(revoke)用戶證書

1.4. Openvpn Client

1.5. OpenVPN GUI for Windows

1.5.1. Windows Server
1.5.2. Windows Client

1.6. point-to-point VPNs

1.7. VPN 案例

1.7.1. server and client vpn
1.7.2. Ethernet Bridging Example
1.7.3. IDC Example

2.1. FAQ

3. l2tpd - dummy package for l2tpd to xl2tpd transition

49. Point to Point

1. download

1.1. rtorrent - ncurses BitTorrent client based on LibTorrent
1.2. mldonkey-server - Door to the 'donkey' network
1.3. amule - client for the eD2k and Kad networks, like eMule

50. News Group (innd)

1. User Authentication
2. usenet 管理
3. 通過SSL連接
4. src.rpm 安裝
5. 常用新聞組

51. IRC - Internet Relay Chat

1. IRC Protcol

2. IRC Commands

3. ircd-irc2 - The original IRCNet IRC server daemon

4. ircd-hybrid

5. IRC Client

5.1. ircII - interface to the Internet Relay Chat system
5.2. HydraIRC
5.3. XChat
5.4. Web IRC

1. ejabberd - Distributed, fault-tolerant Jabber/XMPP server written in Erlang

1.1. ejabberdctl

2. DJabberd

3. freetalk - A console based Jabber client

4.1. python-xmpp

53. NET SNMP (Simple Network Management Protocol)

1. 安裝SNMP
2. snmpd.conf
3. 列出MBI
4. SNMP v3
5. Cacti
6. Cisco
7. Linux

54. Network Authentication

1. Network Information Service (NIS)

1.1. 安裝NIS伺服器
1.2. Slave NIS Server
1.3. 客戶機軟件安裝
1.4. Authentication Configuration
1.5. application example
1.6. Mount /home volume from NFS

2. OpenLDAP

2.1. Server
2.2. Client
2.3. User and Group Management

3. Kerberos

3.1. Kerberos 安裝

3.1.1. CentOS 安裝
3.1.2. Install by apt-get

3.2. Kerberos Server

3.3. Kerberos Client

3.4. Kerberos Management

3.4.1. ktutil - Kerberos keytab file maintenance utility
3.4.2. klist - list cached Kerberos tickets

3.5. OpenSSH Authentications

3.5.1. Configuring the Application server system
3.5.2. Configuring the Application client system

4. FreeRADIUS (Remote Authentication Dial In User Service)

4.1. ldap
4.2. mysql
4.3. WAP2 Enterprise

5. SASL (Simple Authentication and Security Layer)

6. GSSAPI (Generic Security Services Application Program Interface)

55. OpenSSH

1. 安裝 OpenSSH

2. /etc/ssh/

2.1. sshd_config

2.1.1. maximum number of authentication
2.1.2. disable root SSH login
2.1.3. 忽略known_hosts檔案
2.1.4. Automatic SSH / SSH without password
2.1.5. disable password authentication

2.2. ssh_config

2.2.1. ForwardAgent

3. OpenSSH Tunnel

3.1. SOCKS v5 Tunnel

4. ssh-keygen — authentication key generation, management and conversion

4.1. .ssh/known_hosts

5. ssh-copy-id - install your public key in a remote machine's authorized_keys

6. ssh-agent

6.1. ssh-add
6.2. Lock / Unlock agent
6.3. Set lifetime (in seconds) when adding identities.

7. OpenSSH for Windows

7.1. Putty Client

V. Web Application

1.1. Quick install apache with aptitude

1.1.1. command
1.1.2. rewrite module
1.1.3. PHP module
1.1.4. deflate module
1.1.5. ssl module
1.1.6. VirtualHost
1.1.7. ~userdir module - /public_html

1.3. Compile and then install Apache

1.3.1. Apache 安裝與配置
1.3.2. 優化編譯條件
1.3.3. PHP
1.3.4. Automation Installing

1.4.1. XAMPP for Linux
1.4.2. php5

2.1. Output a list of modules compiled into the server.

2.2.1. Listen
2.2.2. Filesystem and Webspace
2.2.3. Etag
2.2.4. 隱藏 Apache 版本信息

2.3. worker

2.4. Apache Log

2.4.1. LogLevel
2.4.2. LogFormat
2.4.3. Compressed
2.4.4. rotatelogs - Piped logging program to rotate Apache logs
2.4.5. cronolog
2.4.6. 日誌合併
2.4.7. 日誌歸檔
2.4.8. logger
2.4.9. other

2.5. mod_access

2.6. VirtualHost

2.6.1. ServerName/ServerAlias
2.6.2. rotatelogs

2.7. Alias / AliasMatch

2.8. Redirect / RedirectMatch

2.9. Rewrite

2.9.1. R=301
2.9.2. Rewrite + JkMount
2.9.3. Apache redirect domain.com to www.domain.com
2.9.4. 正則匹配副檔名

2.10. Proxy

2.10.1. Reverse proxy

2.11. Deflate

2.11.1. 測試 gzip,deflate 模組

2.12. Expires

2.13. Cache

2.13.1. mod_disk_cache
2.13.2. mod_mem_cache

2.14. usertrack

2.15. Charset

2.17. Includes

2.18. Apache Status

2.19. Mod Perl

2.20. mod_pagespeed -

2.21. Module FAQ

2.22. mod_setenvif

2.23. PHP 程序安全問題 php_admin_value

3. 設置Apache實現防盜連

4. Error Prompt

4.1. Invalid command 'Order', perhaps misspelled or defined by a module not included in the server configuration
4.2. Invalid command 'AuthUserFile', perhaps misspelled or defined by a module not included in the server configuration

57. Lighttpd

1. 安裝Lighttpd

1.1. quick install with aptitude

1.2. yum install

1.3. to compile and then install lighttpd

1.3.1. shell script

2. /etc/lighttpd/lighttpd.conf

2.1. max-worker / max-fds
2.2. accesslog.filename
2.3. ETags
2.4. server.tag

3.1. simple_vhost

3.3. redirect

3.4. rewrite

3.4.1. Lighttpd Rewrite QSA

3.7. compress

3.8. expire

3.9. status

3.10. setenv

3.10.1. Automatic Decompression

3.11. fastcgi

3.11.1. enable fastcgi
3.11.2. PHP
3.11.3. Python
3.11.4. Perl
3.11.5. Ruby

3.12. user-agent

4. 其他模組

4.1. mod_secdownload 防盜鏈

5.1. s-maxage

1. Installing

1.1. Installing by apt-get under the debain/ubuntu

1.2. CentOS

1.3. installing by source

1.4. config test

1.5. rotate log

1.5.1. log shell
1.5.2. /etc/logrotate.d/nginx

2.1. spawn-fcgi

2.2. php-fpm

2.2.1. php5-fpm
2.2.2. 編譯 php-fpm

3. worker_processes

5. http 配置

5.1. X-Forwarded-For

5.2. server

5.2.1. VirtualHost (虛擬主機)
5.2.2. location
5.2.3. ssl

5.3. expires

5.4. access

5.5. auth_basic

5.6. autoindex

5.8. rewrite

5.10. Cache

5.11. stub_status

5.12. server_tokens

5.13. add_header

5.13.1. Access-Control-Allow

5.14. valid_referers

6.1. request_filename + proxy_pass
6.2. proxy_cache
6.3. proxy_cache
6.4. expires
6.5. FAQ

7. 可用的全局變數

7.1. http_user_agent

7.1.1. 禁止非瀏覽器訪問

7.2. request_filename

59. Tomcat 安裝與配置

1. 安裝Tomcat

1.1. install java

1.2. install tomcat

1.2.1. tomcat-native

1.3. 同時運行多實例

1.4. Connector

1.4.1. server.xml
1.4.2. mod_jk
1.4.3. mod_proxy_ajp
1.4.4. RewriteEngine 連接 Tomcat

1.5. Testing file

2. 配置 Tomcat 伺服器

2.1. server.xml

2.1.1. compression
2.1.2. useBodyEncodingForURI
2.1.3. HTTPS
2.1.4. 隱藏Tomcat版本信息
2.1.5. vhost
2.1.6. access_log

2.2. tomcat-users.xml

2.3. logging.properties

3. Init.d Script

3.1. Script 1
3.2. Shell Script 2

1. 安裝Resin

1.1. 直接使用
1.2. Debian/Ubuntu
1.3. 源碼安裝Resin

2. Compiling mod_caucho.so

3. resin.conf

3.1. Maximum number of threads
3.2. Configures the keepalive
3.3. ssl

4. virtual hosts

4.1. explicit host
4.2. regexp host
4.3. host-alias
4.4. configures a deployment directory for virtual hosts
4.5. Resources

5.1. java.lang.OutOfMemoryError: PermGen space

61. Application Server

1. Zope
2. JBoss - JBoss Enterprise Middleware

62. Search Engine

1.1. Embedded Jetty

1.3. Tomcat

1.4. solr-php-client

1.5. multicore

1.6. 中文分詞

1.6.1. ChineseTokenizerFactory
1.6.2. CJK
1.6.3. mmseg4j
1.6.4. 中文分詞“庖丁解牛” Paoding Analysis

8. elasticsearch

63. Web Server Optimization

1.1. open files

2. Memcached

2.1. 編譯安裝
2.2. debian/ubuntu

4.1. Resource Limits
4.2. File Uploads
4.3. Session Shared
4.4. PATHINFO

5. APC Cache (php-apc - APC (Alternative PHP Cache) module for PHP 5)

6. Zend Optimizer

7. eaccelerator

64. varnish - a state-of-the-art, high-performance HTTP accelerator

1. Varnish Install

2. varnish utility

2.1. status

2.2. varnishadm

2.2.1. 清除緩存

2.3. varnishtop

2.4. varnishhist

2.5. varnishsizes

3. log file

4. Varnish Configuration Language - VCL

4.1. unset / set

65. Traffic Server

1. Install
2. Configure

66. Cherokee

1. Installing Cherokee

68. Other Web Server

1. Python SimpleHTTPServer

69. web 伺服器排名

1. HTTP狀態碼

VI. Backup, Recovery, and Archiving Solutions

70. Logical Volume Manager (LVM)

1. 物理卷管理（physical volume）

1.1. pvcreate
1.2. pvdisplay
1.3. pvs

2. 卷組管理（Volume Group）

2.1. vgcreate
2.2. vgdisplay
2.3. vgs
2.4. vgchange
2.5. vgextend
2.6. vgreduce

3. 邏輯卷管理（logical volume）

3.1. lvcreate

3.1.1. snapshot

3.2. lvdisplay

3.3. lvremove

3.3.1. snapshot

5.1. lv
5.2. snapshot

6. snapshot backup

71. Download Tools

1. wget - retrieves files from the web

1.1. 下載所有圖片
1.2. mirror
1.3. reject
1.4. ftp 下載

2. axel - A light download accelerator - Console version

72. FTP (File Transfer Protocol)

1.1. pget
1.2. lftp 批處理

2.1. batch command
2.2. ncftpget
2.3. ncftpput

3. FileZilla

4. vsftpd - The Very Secure FTP Daemon

4.1. ftp 帳號的shell權限

4.2. vsftpd 認證模組

4.2.1. pam_shells.so
4.2.2. virtual user
4.2.3. 虛擬用戶權限

4.3. chroot

4.3.1. local user
4.3.2. /etc/vsftpd/chroot_list
4.3.3. test

5. ProFTPD + MySQL / OpenLDAP 用戶認證

5.1. Proftpd + MySQL
5.2. Proftpd + OpenLDAP

6. Pure-FTPd + LDAP + MySQL + PGSQL + Virtual-Users + Quota

73. File Synchronize

1. 跨伺服器檔案傳輸

1.1. scp - secure copy (remote file copy program)
1.2. nc - TCP/IP swiss army knife

2. rsync - fast remote file copy program (like rcp)

2.1. 安裝Rsync與配置守護進程

2.1.1. install with source
2.1.2. install with aptitude
2.1.3. xinetd

2.2. rsyncd.conf

2.3. upload

2.4. download

2.5. mirror

2.6. step by step to learn rsync

2.7. rsync examples

2.7.1. rsync delete
2.7.2. backup to a central backup server with 7 day incremental
2.7.3. backup to a spare disk
2.7.4. mirroring vger CVS tree
2.7.5. automated backup at home
2.7.6. Fancy footwork with remote file lists

2.8. rsync for windows

2.9. 多進程 rsync 腳本

2.10. 數度限制

4. Unison File Synchronizer

4.1. local
4.2. remote
4.3. config

5. csync2 - cluster synchronization tool

5.1. server
5.2. node
5.3. test
5.4. Advanced Configuration
5.5. 編譯安裝

6. synctool

74. File Share

1.1. Installation

1.1.1. NFSv4 server
1.1.2. NFSv4 client

1.2. exports

1.2.1. Permission
1.2.2. Parameters
1.2.3. 實例參考

2.1. install

2.2. smb.conf

2.2.1. Security consideration

2.3. by Example

2.3.1. share
2.3.2. user
2.3.3. test

2.4. nmblookup - NetBIOS over TCP/IP client used to lookup NetBIOS names

2.5. smbfs/smbmount/smbumount

2.6. smbclient - ftp-like client to access SMB/CIFS resources on servers

2.6.1. 顯示共享目錄
2.6.2. 訪問共享資源
2.6.3. 用戶登錄

2.7. smbtar - shell script for backing up SMB/CIFS shares directly to UNIX tape drives

2.8.1. smbd/service.c:make_connection_snum(1013)

75. Distributed Filesystem

1. DRBD (Distributed Replicated Block Device)

1.1. disk and partition
1.2. Installation
1.3. configure
1.4. Starting
1.5. Using

2. Network Block Device protocol

2.1. nbd-server - Network Block Device protocol - server
2.2. nbd-client - Network Block Device protocol - client

3.1. nginx-gridfs
3.2. lighttpd-gridfs

4. Moose File System

4.1. Master server installation
4.2. Backup server (metalogger) installation
4.3. Chunk servers installation
4.4. Users’ computers installation
4.5. Testing MFS

5. GlusterFS

5.1. glusterfs-server

5.2. glusterfs-client

5.3. Testing

5.4.1. Mirror
5.4.2. Strip

5.5. Filesystem Administration

5.6. CentOS 6.3

7. Hadoop - HDFS

8. MogileFS

9.1. install

9.1.1. Ubuntu

10. Kosmos distributed file system (KFS)

12. OpenAFS

13. fam & imon

76. inotify

1. inotify-tools
2. Incron - cron-like daemon which handles filesystem events
3. inotify-tools + rsync
4. pyinotify

77. Network Storage - Openfiler

1. Accounts

2.2.1. Microsoft iSCSI Software Initiator

78. Backup / Restore

1. 備份策略

1.1. Incremental backup
1.2. Differential backup

2. Bacula, the Open Source, Enterprise ready, Network Backup Tool for Linux, Unix, Mac and Windows.

2.1. Install Backup Server
2.2. Install Backup Client

3. Amanda: Open Source Backup

4. Opendedup

VII. Monitoring

79. System Infomation

1. Cpu Bit

80. shutdown

81. Profile

1. shell

82. Introduction

1. Distribution Version

2. Distribution information

3. Linux Installation

3.1. HDD Partition

84. Package Management

1. apt-cache

1.1. search
1.2. depends
1.3. policy

2.1. Search
2.2. Installation
2.3. Update
2.4. Remove

3. aptitude

4. Automatic Updates

5.1. -i|--install 安裝.deb包

5.2. -r|--remove 卸載.deb包

5.3. -L|--listfiles <package> ... List files `owned' by package(s). 列出包中的檔案

5.4. -l|--list [<pattern> ...] List packages concisely. 列出.deb包

5.5. Status

5.6. dpkg-deb - Debian package archive (.deb) manipulation tool

5.6.1. -X, --vextract archive directory Extract and display the filenames contained by a package
5.6.2. -e, --control archive [directory] Extracts the control information files from a package archive into the specified directory.
5.6.3. -b, --build directory [archive|directory]

5.7. dpkg-reconfigure

6. Upgrading

6.1. GUI
6.2. CLI
6.3. CDROM

7. 製作.deb安裝包

7.1. checkinstall — Track installation of local software, and produce a binary manageable with your package management software.
7.2. dh_make - prepare Debian packaging for an original source archive
7.3. control

85. Device information

1. dmesg - print or control the kernel ring buffer
2. smartctl - Control and Monitor Utility for SMART Disks
3. lspci - list all PCI devices
4. dmidecode - DMI table decoder
5. ethtool - Display or change ethernet card settings
6. usb device
7. SCSI
8. HBA
9. kudzu - detects and configures new and/or changed hardware on a system

86. udev - Linux dynamic device management

87. Kernel modules

1. modprobe - program to add and remove modules from the Linux Kernel

1. time zone

2. to change system date/time

2.1. NTP Server

3. Language

89. console / terminal

1. serial console
2. console timeout
3. TUI (Text User Interface)
4. framebuffer

90. Harddisk

1. 查看分區分區 UUID

2.1.1. 查看卷標
2.1.2. 更改卷標

3. 臨時增加 swap 分區

4. Show partition

5. Create partition

6. Clone partition

7. Format partition

7.1. ext3
7.2. ReiserFS

8. estimate disk / directory / file space usage

9. Convert from ext3 to ext4 File system

10.1. 查看分區
10.2. 創建分區
10.3. 退出
10.4. mount

11. loop devices

11.1. losetup - set up and control loop devices

91. Removable Storage

1. usb flash

2. CD / DVD

2.1. Mount an ISO file
2.2. create iso file from CD
2.3. burner
2.4. ISO Mirror

92. File System

1. Mount partition

1.1. Mount
1.2. Umount
1.3. bind directory
1.4. /etc/fstab

5. SSHFS (sshfs - filesystem client based on SSH File Transfer Protocol)

6. davfs2 - mount a WebDAV resource as a regular file system

7. File system test

7.1. ext4 vs btrfs
7.2. xfs vs jfs vs reiserfs
7.3. RAID10 (146G*8) vs EMC VNX 5300 (8G Fibre Channel)
7.4. Dell 2950(RAID5 500G SATA * 6) vs MD1200

93. Networking

1. Hostname

1.1. /etc/hostname
1.2. /etc/host.conf
1.3. /etc/hosts
1.4. hosts.allow / hosts.deny
1.5. /etc/resolv.conf

2. Network adapter

3. Ethernet Interfaces

3.1. ifquery
3.2. DHCP
3.3. Static IP

6. Configuring Name Server Lookups

8.1. Ubuntu

9. Finding optimal MTU

10. 介面名稱

94. Logging

1. syslog, klogctl - read and/or clear kernel message ring buffer; set console_loglevel

1.1. /etc/sysconfig/syslog
1.2. /etc/syslog.conf
1.3. logger
1.4. To Log Messages Over UDP Network

2. logrotate - rotates, compresses, and mails system logs

2.1. /etc/logrotate.conf

2.2. /etc/logrotate.d/

2.2.1. apache2
2.2.2. mysql
2.2.3. cacti

3. remote syslog

3.1. syslog-ng
3.2. rsyslog

95. Service

1. update-rc.d - install and remove System-V style init script links

2. invoke-rc.d - executes System-V style init script actions

3. runlevel

4. sysv-rc-conf

5. xinetd - replacement for inetd with many enhancements

5.1. tftpd

6. Scheduled Tasks

6.1. crontab - maintain crontab files for individual users
6.2. at, batch, atq, atrm - queue, examine or delete jobs for later execution

7. sv - control and manage services monitored by runsv

7.1. runsv
7.2. runsvdir

96. Process

1. top - display Linux tasks

2. ps - report a snapshot of the current processes

2.1. ps axef
2.2. ps -eo pid,cmd
2.3. ps jax
2.4. zombie process

4. pstree - display a tree of processes

5.1. pgrep, pkill - look up or signal processes based on name and other attributes
5.2. pidof -- find the process ID of a running program.

6.1. &
6.2. Ctrl + Z
6.3. jobs
6.4. fg / bg
6.5. nohup - run a command immune to hangups, with output to a non-tty

7. ionice - get/set program io scheduling class and priority

97. Authentication

1.1. Add a new user

1.2. remove an existed user

1.3. usermod - modify a user account

1.4. lock / unlock

1.4.1. /etc/passwd

2.1. Add a new group
2.2. Add a user to the group
2.3. /etc/group

98. Permission

2. Access Permissions

2.1. chown - change file owner and group
2.2. chgrp - change group ownership
2.3. chmod - change file access permissions

3. chattr - change file attributes on a Linux second extended file system

4. su - run a shell with substitute user and group IDs

5. sudo, sudoedit - execute a command as another user

5.1. NOPASSWD
5.2. 允許或禁止命令
5.3. Cmnd_Alias 用法

6. ACL - Access Control List

6.1. getfacl - get file access control lists

6.2. setfacl - set file access control lists

6.2.1. set
6.2.2. default
6.2.3. remove

6.3. backup and restore

99. Network Management Software & Network Monitoring

1.1. webalizer

3.1. Install Cacti for Ubuntu
3.2. Source Install
3.3. Template

4.1. Install Nagios

4.2. 配置 Nagios

4.2.1. authorized
4.2.2. contacts
4.2.3. hostgroups
4.2.4. generic-service
4.2.5. SOUND OPTIONS
4.2.6. SMS 短信

4.3. 配置監控設備

4.3.1. routers
4.3.2. hosts / service

4.4. Monitor Client nrpe

4.4.1. Nagios3 nrpe plugins
4.4.2. nagios-nrpe-server

4.5. Monitoring Windows Machines

4.5.1. NSClient++
4.5.2. check_nt
4.5.3. Enable Password Protection

4.6. Nagios Plugins

4.6.1. http.cfg
4.6.2. mysql.cfg
4.6.3. Disk
4.6.4. tcp_udp.cfg
4.6.5. check_ping

4.7. PNP4Nagios

5.1. Installation Monitor Server

5.2. Installation Node

5.3. Additional Plugins

5.4. plugins

5.4.1. mysql
5.4.2. apache

6.1. Installing and Configuring Zabbix
6.2. web ui
6.3. zabbix-agent

7.1. Server
7.2. Client
7.3. Plugin
7.4. Installing Ganglia on Centos

9.1. Installation

9.1.1. Ubuntu
9.1.2. CentOS

9.2. Web UI

9.3. Plugins

9.3.1. NetFlow

10. Observium

10.1. Installation

11. OpenTSDB

12. Bandwidth

12.1. apt-get install
12.2. CentOS rpm/yum
12.3. source code
12.4. /etc/bandwidthd.conf

13. BIG BROTHER

14. OpenNMS

15. Performance Co-Pilot

16. Clumon Performance Monitor

18. 商業軟件

19. Hyperic HQ

20. OSSIM,Spiceworks,FireGen,LANSweeper,OSSEC,HIDS

21. Graphite

1.1. Quick install apache with aptitude

1.1.1. command
1.1.2. rewrite module
1.1.3. PHP module
1.1.4. deflate module
1.1.5. ssl module
1.1.6. VirtualHost
1.1.7. ~userdir module - /public_html

1.3. Compile and then install Apache

1.3.1. Apache 安裝與配置
1.3.2. 優化編譯條件
1.3.3. PHP
1.3.4. Automation Installing

1.4.1. XAMPP for Linux
1.4.2. php5

2.1. Output a list of modules compiled into the server.

2.2.1. Listen
2.2.2. Filesystem and Webspace
2.2.3. Etag
2.2.4. 隱藏 Apache 版本信息

2.3. worker

2.4. Apache Log

2.4.1. LogLevel
2.4.2. LogFormat
2.4.3. Compressed
2.4.4. rotatelogs - Piped logging program to rotate Apache logs
2.4.5. cronolog
2.4.6. 日誌合併
2.4.7. 日誌歸檔
2.4.8. logger
2.4.9. other

2.5. mod_access

2.6. VirtualHost

2.6.1. ServerName/ServerAlias
2.6.2. rotatelogs

2.7. Alias / AliasMatch

2.8. Redirect / RedirectMatch

2.9. Rewrite

2.9.1. R=301
2.9.2. Rewrite + JkMount
2.9.3. Apache redirect domain.com to www.domain.com
2.9.4. 正則匹配副檔名

2.10. Proxy

2.10.1. Reverse proxy

2.11. Deflate

2.11.1. 測試 gzip,deflate 模組

2.12. Expires

2.13. Cache

2.13.1. mod_disk_cache
2.13.2. mod_mem_cache

2.14. usertrack

2.15. Charset

2.17. Includes

2.18. Apache Status

2.19. Mod Perl

2.20. mod_pagespeed -

2.21. Module FAQ

2.22. mod_setenvif

2.23. PHP 程序安全問題 php_admin_value

3. 設置Apache實現防盜連

4. Error Prompt

4.1. Invalid command 'Order', perhaps misspelled or defined by a module not included in the server configuration
4.2. Invalid command 'AuthUserFile', perhaps misspelled or defined by a module not included in the server configuration

101. Lighttpd

1. 安裝Lighttpd

1.1. quick install with aptitude

1.2. yum install

1.3. to compile and then install lighttpd

1.3.1. shell script

2. /etc/lighttpd/lighttpd.conf

2.1. max-worker / max-fds
2.2. accesslog.filename
2.3. ETags
2.4. server.tag

3.1. simple_vhost

3.3. redirect

3.4. rewrite

3.4.1. Lighttpd Rewrite QSA

3.7. compress

3.8. expire

3.9. status

3.10. setenv

3.10.1. Automatic Decompression

3.11. fastcgi

3.11.1. enable fastcgi
3.11.2. PHP
3.11.3. Python
3.11.4. Perl
3.11.5. Ruby

3.12. user-agent

4. 其他模組

4.1. mod_secdownload 防盜鏈

5.1. s-maxage

1. Installing

1.1. Installing by apt-get under the debain/ubuntu

1.2. CentOS

1.3. installing by source

1.4. config test

1.5. rotate log

1.5.1. log shell
1.5.2. /etc/logrotate.d/nginx

2.1. spawn-fcgi

2.2. php-fpm

2.2.1. php5-fpm
2.2.2. 編譯 php-fpm

3. worker_processes

5. http 配置

5.1. X-Forwarded-For

5.2. server

5.2.1. VirtualHost (虛擬主機)
5.2.2. location
5.2.3. ssl

5.3. expires

5.4. access

5.5. auth_basic

5.6. autoindex

5.8. rewrite

5.10. Cache

5.11. stub_status

5.12. server_tokens

5.13. add_header

5.13.1. Access-Control-Allow

5.14. valid_referers

6.1. request_filename + proxy_pass
6.2. proxy_cache
6.3. proxy_cache
6.4. expires
6.5. FAQ

7. 可用的全局變數

7.1. http_user_agent

7.1.1. 禁止非瀏覽器訪問

7.2. request_filename

103. Tomcat 安裝與配置

1. 安裝Tomcat

1.1. install java

1.2. install tomcat

1.2.1. tomcat-native

1.3. 同時運行多實例

1.4. Connector

1.4.1. server.xml
1.4.2. mod_jk
1.4.3. mod_proxy_ajp
1.4.4. RewriteEngine 連接 Tomcat

1.5. Testing file

2. 配置 Tomcat 伺服器

2.1. server.xml

2.1.1. compression
2.1.2. useBodyEncodingForURI
2.1.3. HTTPS
2.1.4. 隱藏Tomcat版本信息
2.1.5. vhost
2.1.6. access_log

2.2. tomcat-users.xml

2.3. logging.properties

3. Init.d Script

3.1. Script 1
3.2. Shell Script 2

1. 安裝Resin

1.1. 直接使用
1.2. Debian/Ubuntu
1.3. 源碼安裝Resin

2. Compiling mod_caucho.so

3. resin.conf

3.1. Maximum number of threads
3.2. Configures the keepalive
3.3. ssl

4. virtual hosts

4.1. explicit host
4.2. regexp host
4.3. host-alias
4.4. configures a deployment directory for virtual hosts
4.5. Resources

5.1. java.lang.OutOfMemoryError: PermGen space

105. Application Server

1. Zope
2. JBoss - JBoss Enterprise Middleware

106. Search Engine

1.1. Embedded Jetty

1.3. Tomcat

1.4. solr-php-client

1.5. multicore

1.6. 中文分詞

1.6.1. ChineseTokenizerFactory
1.6.2. CJK
1.6.3. mmseg4j
1.6.4. 中文分詞“庖丁解牛” Paoding Analysis

8. elasticsearch

107. Web Server Optimization

1.1. open files

2. Memcached

2.1. 編譯安裝
2.2. debian/ubuntu

4.1. Resource Limits
4.2. File Uploads
4.3. Session Shared
4.4. PATHINFO

5. APC Cache (php-apc - APC (Alternative PHP Cache) module for PHP 5)

6. Zend Optimizer

7. eaccelerator

108. varnish - a state-of-the-art, high-performance HTTP accelerator

1. Varnish Install

2. varnish utility

2.1. status

2.2. varnishadm

2.2.1. 清除緩存

2.3. varnishtop

2.4. varnishhist

2.5. varnishsizes

3. log file

4. Varnish Configuration Language - VCL

4.1. unset / set

109. Traffic Server

1. Install
2. Configure

110. Cherokee

1. Installing Cherokee

112. Other Web Server

1. Python SimpleHTTPServer

113. web 伺服器排名

1. HTTP狀態碼

1. gnokii
2. AT Commands

115. IPMI (Intelligent Platform Management Interface)

1. OpenIPMI

2. freeipmi

2.1. ipmiping
2.2. ipmimonitoring
2.3. ipmi-sensors
2.4. ipmi-locate

3. ipmitool - utility for controlling IPMI-enabled devices

3.1. ipmitool

3.1.1. ubuntu
3.1.2. CentOS

3.2. sensor

3.3. ipmitool shell

3.4. ipmitool 訪問遠程主機

3.5. Get chassis status and set power state

3.6. Configure Management Controller

3.6.1. Management Controller status and global enables
3.6.2. Configure LAN Channels
3.6.3. Configure Management Controller users
3.6.4. Configure Management Controller channels

3.7. Example for iDRAC

3.7.1. 更改IP地址,子網掩碼與網關
3.7.2. 更改 iDRAC LCD 顯示屏
3.7.3. 更改 iDRAC 密碼
3.7.4. 關機/開機

116. NetFlow

1. flow-tools - collects and processes NetFlow data

1.1. flow-capture
1.2.

2. netams - Network Traffic Accounting and Monitoring Software

2.1. netams-web

117. Logs 分析

1. rinetd.log
2. php-syslog-ng
3. Log Analyzer
4. Splunk
5. logstash - open source log management

1. jconsole
2. jHiccup

VIII. Cluster

119. Linux Virtual Server

1. 環境配置

4.1. 配置檔案

4.1.1. Director
4.1.2. RealServer

5. ipvsadm script

8. ipvsadm monitor

120. keepalived

1. 安裝
2. test

121. heartbeat+ldirectord

1. heartbeat
2. ldirectord
3. test

122. Piranha - Cluster administation tools

2. configure

3. real server

4.1. Master
4.2. Slave
4.3. MySQL

123. HAProxy - fast and reliable load balancing reverse proxy

1. Installing

1.1. Ubuntu
1.2. CentOS

2. haproxy.cfg

2.2. listen 方式

2.3. frontend/backend 方式

2.4. option

2.4.1. httpclose
2.4.2. forwardfor
2.4.3. httpchk

2.5. balance

3. Example 配置實例

3.1. HTTP 配置實例

3.1.1. 插入Cookie會話保持

124. Perlbal

1. install

125. Example

1. 雙負載均衡的用法
2. 單台負載均衡的用法
3. 廣域網負載均衡的用法

IX. Security

126. Sniffer

1. nmap - Network exploration tool and security / port scanner

1.1. HOST DISCOVERY

1.1.1. -sP: Ping Scan - go no further than determining if host is online

1.2. SCAN TECHNIQUES

1.2.1. -sU: UDP Scan 掃瞄
1.2.2. -b <FTP relay host>: FTP bounce scan

1.3. PORT SPECIFICATION AND SCAN ORDER

1.3.1. -p <port ranges>: Only scan specified ports

1.4. SCRIPT SCAN

1.4.1. ftp-anon
1.4.2. mysql-info
1.4.3. http
1.4.4. snmp
1.4.5. SSHv1
1.4.6. --script-updatedb 更新腳本

1.5. OS DETECTION

1.5.1. -O: Enable OS detection 操作系統探測

1.6. OUTPUT

1.6.1. --open: Only show open (or possibly open) ports 操作系統探測

1.7.1. -6: Enable IPv6 scanning
1.7.2. -A: Enables OS detection and Version detection, Script scanning and Traceroute

1.8. Nmap Scripting Engine (NSE)

2. tcpdump - A powerful tool for network monitoring and data acquisition

2.1. 監控網絡適配器介面

2.2. 監控主機

2.3. 監控TCP連接埠

2.4. 監控協議

2.5. 輸出到檔案

2.6. 保存結果

2.7. Cisco Discovery Protocol (CDP)

2.8. 案例

2.8.1. 監控80連接埠與icmp,arp
2.8.2. monitor mysql tcp package
2.8.3. HTTP 包
2.8.4. 顯示SYN、FIN和ACK-only包

3. cdpr - Cisco Discovery Protocol Reporter

4. nc - TCP/IP swiss army knife

5. Unicornscan，Zenmap，nast

6. netstat-nat - Show the natted connections on a linux iptable firewall

7. Wireshark

127. sqlmap - automatic SQL injection and database takeover tool

1. Installation

2. 開始入住實驗

2.1. 測試腳本
2.2. sqlmap.ini

3. Request參數

3.1. --method, --data

3.2. --cookie

3.3. --referer

3.4. --user-agent

3.4.1. -a

3.5. --headers

3.6.1. --auth-type
3.6.2. --auth-cred

3.7. --proxy

3.9. --threads

3.10. --delay

3.11. --timeout

4. Injection

4.1. --dbms
4.2. --prefix
4.3. --postfix
4.4. --string
4.5. --regexp
4.6. --excl-str
4.7. --excl-reg

5. Techniques

5.1. --stacked-test
5.2. --time-test
5.3. --union-test
5.4. --union-tech
5.5. --union-use

6. Enumeration

6.1. dbs
6.2. --count
6.3. --dump/--dump-all
6.4. --sql-query
6.5. --sql-shell

7. Miscellaneous

7.1. --update
7.2. --save

128. Vulnerability Scanner

1. Nessus
2. OpenVAS

129. Injection & Penetration

1. Backtrack Linux

130. SELinux

1. getsebool - get SELinux boolean value
2. setsebool - set SELinux boolean value
3. chcon - change file SELinux security context
4. rsync

X. 運維自動化

131. ansible

1. install
2. Getting Started
3. ansible - run a command somewhere else
4. ansible-playbook - run an ansible playbook

132. Puppet

1. Installing Puppet CentOS 6.3

2. Puppet 簽名

2.1. Agent 節點
2.2. Master 伺服器

3.1. Master
3.2. Agent

4. 配置檔案

4.1. /etc/sysconfig/puppet
4.2. /etc/puppet/fileserver.conf

5. manifests

5.2. group, user 用戶組管理

5.2.1. group
5.2.2. user

5.3.1. ensure
5.3.2. source
5.3.3. owner, group, mode

5.4. package

5.5. service

7. firewall 配置

8.1. master
8.2. node

9.1. err: Could not request certificate: No route to host - connect(2)
9.2. No help available unless you have RDoc::usage installed

133. Cobbler

134. Cfengine

136. Voice over IP

1. Gnu Gatekeeper

1.1. Gnu Gatekeeper Install

1.2. Gnu Gatekeeper Configure

1.3. Gnu Gatekeeper Test

1.3.1. Part I - Microsoft Windows NetMeeting
1.3.2. Part II - ohphone

2. Asterisk (OpenSource Linux PBX that supports both SIP and H.323)

3. OpenSER SIP Server

XI. X Window

137. install x window

138. X Setup

1. 取消開機啟動畫面
2. Automatic login
3. fonts 字型
4. disable x window

139. X Terminal

1. tsclient - Terminal Server Client supporting XDMCP, VNC and RDP

1.1. VNC
1.2. xdmcp

2. vinagre - a remote desktop viewer for the GNOME Desktop

3. rdesktop - A Remote Desktop Protocol client

3.1. -g: desktop geometry (WxH)
3.2. -f: full-screen mode
3.3. -A: enable SeamlessRDP mode
3.4. -z: enable rdp compression
3.5. -r: enable specified device redirection (this flag can be repeated)

4. TightVNC

1. Enable/Disable Auto Hide For Unity 2-D Launcher In Ubuntu 11.10

141. X Window System

1. Fluxbox
2. LXDE
3. Xfce
4. Xming X Server for Windows

142. X Application Software

1. ubuntu-restricted-extras
2. Keyboard Input Methods(輸入法)
3. Firefox
4. Download Software
5. PAC Manager
6. LibreOffice
7. VYM (View Your Mind)
8. greenshot

143. Office

1.1. 函數

1. 通過SSH與控制台不能登錄

1. 參考文檔
2. Linux 下載排名
3. Ubuntu Server Edition
4. CentOS - The Community ENTerprise Operating System

B. 歷史記錄

表格清單

1.1. Linux partition
5.1. Linux partition
33.1. 檔案目錄表達式
33.2. 字元串表達式
33.3. 組合表達式
45.1. net.ipv4.ip_forward
77.1. Volume Group Management
82.1. Linux partition

範例清單

13.1. GPT Example
16.1. bonding example
23.1. backup(find + tar)
31.1. example for expect
31.2. example for expect
31.3. example 1
31.4. *.exp
33.1. A "Power User" Prompt
33.2. A Prompt the Width of Your Term
33.3. The Elegant Useless Clock Prompt
33.4. Basic conditional example if .. then
33.5. Conditionals with variables
33.6. case
33.7. Functions with parameters sample
33.8. Using select to make simple menus
33.9. Using the command line
33.10. Reading user input with read
33.11. read
35.1. whiptail - yesno
35.2. whiptail - inputbox
35.3. whiptail - passwordbox
35.4. whiptail - passwordbox
35.5. whiptail - example 1
35.6. whiptail - radiolist
36.1. random password
45.1. connlimit 實例
45.2.
45.3. CentOS 5.6
47.1. openvpn.conf
47.2. server.conf
47.3. client.conf
47.4. server.ovpn
47.5. client.ovpn
47.6. office.conf
47.7. home.ovpn
56.1. index.php
56.2. autolamp.sh
56.3. R=301
56.4. mod_perl.conf
57.1. /etc/init.d/lighttpd
57.2. lighttpd compress
57.3. lighttpd expire
57.4. fastcgi.conf
57.5. Cache
58.1. Expires Examples
58.2. nginx expires
58.3. Example: valid_referers
59.1. /etc/profile.d/java.sh
59.2. /etc/rc.d/init.d/www
60.1. explicit host in resin.conf
60.2. regexp host in resin.conf
60.3. host-alias in the resin.conf
60.4. host-alias in a /var/www/hosts/foo/host.xml
60.5. host-alias-regexp in the resin.conf
60.6. shared database in host
60.7. rewrite-dispatch
62.1. /etc/profile.d/java.sh
63.1. /etc/init.d/memcached
64.1. default.vcl
73.1. examples
73.2. backup to a central backup server with 7 day incremental
73.3. backup to a spare disk
73.4. mirroring vger CVS tree
73.5. automated backup at home
73.6. Fancy footwork with remote file lists
73.7. /etc/csync2.cfg
75.1. nginx-gridfs
75.2. Mirror
75.3. Strip
90.1. GPT Example
93.1. bonding example
99.1. mrtg
99.2. cacti config.php
100.1. index.php
100.2. autolamp.sh
100.3. R=301
100.4. mod_perl.conf
101.1. /etc/init.d/lighttpd
101.2. lighttpd compress
101.3. lighttpd expire
101.4. fastcgi.conf
101.5. Cache
102.1. Expires Examples
102.2. nginx expires
102.3. Example: valid_referers
103.1. /etc/profile.d/java.sh
103.2. /etc/rc.d/init.d/www
104.1. explicit host in resin.conf
104.2. regexp host in resin.conf
104.3. host-alias in the resin.conf
104.4. host-alias in a /var/www/hosts/foo/host.xml
104.5. host-alias-regexp in the resin.conf
104.6. shared database in host
104.7. rewrite-dispatch
106.1. /etc/profile.d/java.sh
107.1. /etc/init.d/memcached
108.1. default.vcl
120.1. keepalived.conf
122.1. piranha master
122.2. piranha slave
132.1. puppetd
132.2. puppetca

comments powered by Disqus

		下一頁
		自述