Linux – Removendo kernels antigos

10/05/2023 / jhonespetter

Tem um monte de kernel e quer efetuar uma limpeza?

[root@centos7 ~]# yum install yum-utils

[root@centos7 ~]# rpm -q kernel
kernel-3.10.0-514.10.2.el7.x86_64
kernel-3.10.0-514.16.1.el7.x86_64
kernel-3.10.0-514.21.1.el7.x86_64
kernel-3.10.0-514.26.2.el7.x86_64
kernel-3.10.0-693.2.2.el7.x86_64

[root@centos7 ~]# package-cleanup --oldkernels --count=2
Plugins carregados: fastestmirror
--> Executando verificação da transação
---> O pacote kernel.x86_64 0:3.10.0-514.10.2.el7 será removido
---> O pacote kernel.x86_64 0:3.10.0-514.16.1.el7 será removido
---> O pacote kernel.x86_64 0:3.10.0-514.21.1.el7 será removido

[root@centos7 ~]# rpm -q kernel
kernel-3.10.0-514.26.2.el7.x86_64
kernel-3.10.0-693.2.2.el7.x86_64

[root@centos7 ~]# yum install yum-utils

[root@centos7 ~]# rpm -q kernel

kernel-3.10.0-514.10.2.el7.x86_64

kernel-3.10.0-514.16.1.el7.x86_64

kernel-3.10.0-514.21.1.el7.x86_64

kernel-3.10.0-514.26.2.el7.x86_64

kernel-3.10.0-693.2.2.el7.x86_64

[root@centos7 ~]# package-cleanup --oldkernels --count=2

Plugins carregados: fastestmirror

--> Executando verificação da transação

---> O pacote kernel.x86_64 0:3.10.0-514.10.2.el7 será removido

---> O pacote kernel.x86_64 0:3.10.0-514.16.1.el7 será removido

---> O pacote kernel.x86_64 0:3.10.0-514.21.1.el7 será removido

[root@centos7 ~]# rpm -q kernel

kernel-3.10.0-514.26.2.el7.x86_64

kernel-3.10.0-693.2.2.el7.x86_64

Continue reading →

Linux – Compartilhando treinamento

07/05/2021 / jhonespetter

Quando iniciei meus estudos no mundo da informatica la em medados de 2009, um professor me perguntou se eu teria interesse em dar aula, diretamente respondi que não. Fui embora e fiquei refletindo sobre o quão agregador poderia ser dar aula para meu desenvolvimento pessoal e profissional, após esse entendimento dar aula entrou como meta…

Continue reading →

Linux – /boot do CentOS7 apagado

22/03/2021 / jhonespetter

Falaa pessoas. Faz tempo que não posto nada, então vou abrir um canivete que estava guardado e utilizei a alguns anos atras. Ai numa sexta-feira cai um chamado na sua fila, e pá deu a louca no cliente de apagar o diretório /boot do seu servidor SAMBA, abaixo a foto original que o cliente enviou:…

Continue reading →

Linux – Instalando o SMcli

18/01/2019 / jhonespetter

O que é o SMcli? Shell para interação com storages da Dell, IBM, onde coletamos informações, ou executamos alguma ação de criar lun, setar disco como spare, tirar snapshot da lun, etc. Instalação

[root@centos7]# wget https://downloads.dell.com/FOLDER04066625M/1/DELL_MDSS_Consolidated_RDVD_6_5_0_1.iso?uid=1a6ded0c-01de-433c-c074-4d9d58d89ddb&fn=DELL_MDSS_Consolidated_RDVD_6_5_0_1.iso
[root@centos7]# mount DELL_MDSS_Consolidated_RDVD_6_5_0_1.iso /mnt/cdroom/
[root@centos7]# cd /mnt/cdroom/linux/
[root@centos7]# ./mdss_install.bin

Descobrir storage na rede
[root@centos7]# SMcli -A

Listar os storages
[root@centos7]# SMcli -d

[root@centos7]# wget https://downloads.dell.com/FOLDER04066625M/1/DELL_MDSS_Consolidated_RDVD_6_5_0_1.iso?uid=1a6ded0c-01de-433c-c074-4d9d58d89ddb&fn=DELL_MDSS_Consolidated_RDVD_6_5_0_1.iso

[root@centos7]# mount DELL_MDSS_Consolidated_RDVD_6_5_0_1.iso /mnt/cdroom/

[root@centos7]# cd /mnt/cdroom/linux/

[root@centos7]# ./mdss_install.bin

Descobrir storage na rede

[root@centos7]# SMcli -A

Listar os storages

[root@centos7]# SMcli -d

Continue reading →

Linux – Compartilhamento simples com Samba no CentOS7

30/04/2018 / jhonespetter

Instalando e configurando o serviço

[root@centos]# yum install samba samba-client samba-common
[root@centos]# systemctl enable nmb smb
[root@centos]# adduser jhones
[root@centos]# passwd jhones
[root@centos]# groupadd samba
[root@centos]# usermod jhones -aG samba
[root@centos]# chmod 0770 /storage/
[root@centos]# chown root.samba /storage/
[root@centos]# vim /etc/samba/smb.conf

# See smb.conf.example for a more detailed config file or
# read the smb.conf manpage.
# Run 'testparm' to verify the config is correct after
# you modified it.

[global]
        workgroup = SAMBA
        security = user
        passdb backend = tdbsam
        map to guest = bad user
        printing = cups
        printcap name = cups
        load printers = yes
        cups options = raw

#[homes]
#        comment = Home Directories
#        valid users = %S, %D%w%S
#        browseable = No
#        read only = No
#        inherit acls = Yes

#[print$]
#        comment = Printer Drivers
#        path = /var/lib/samba/drivers
#        write list = root
#        create mask = 0664
#        directory mask = 0775

[opt]
        path = /opt
        valid users = root
        guest ok = no
        writable = yes
        browsable = yes
        create mask = 666
        directory mask = 777
        force directory mode = 0777
        force create mode = 0777

[storage]
        path = /storage
        valid users = @samba
        guest ok = no
        writable = yes
        browsable = yes
        create mask = 666
        directory mask = 777
        force directory mode = 0777
        force create mode = 0777

[root@centos]# systemctl start nmb smb
[root@centos]# smbpasswd -a jhones
[root@centos]# testparm

[root@centos]# yum install samba samba-client samba-common

[root@centos]# systemctl enable nmb smb

[root@centos]# adduser jhones

[root@centos]# passwd jhones

[root@centos]# groupadd samba

[root@centos]# usermod jhones -aG samba

[root@centos]# chmod 0770 /storage/

[root@centos]# chown root.samba /storage/

[root@centos]# vim /etc/samba/smb.conf

# See smb.conf.example for a more detailed config file or

# read the smb.conf manpage.

# Run 'testparm' to verify the config is correct after

# you modified it.

[global]

workgroup = SAMBA

security = user

passdb backend = tdbsam

map to guest = bad user

printing = cups

printcap name = cups

load printers = yes

cups options = raw

#[homes]

# comment = Home Directories

# valid users = %S, %D%w%S

# browseable = No

# read only = No

# inherit acls = Yes

#[print$]

# comment = Printer Drivers

# path = /var/lib/samba/drivers

# write list = root

# create mask = 0664

# directory mask = 0775

[opt]

path = /opt

valid users = root

guest ok = no

writable = yes

browsable = yes

create mask = 666

directory mask = 777

force directory mode = 0777

force create mode = 0777

[storage]

path = /storage

valid users = @samba

guest ok = no

writable = yes

browsable = yes

create mask = 666

directory mask = 777

force directory mode = 0777

force create mode = 0777

[root@centos]# systemctl start nmb smb

[root@centos]# smbpasswd -a jhones

[root@centos]# testparm

Cliente no Linux MODO1

[root@centos]# yum install cifs-utils
[root@centos]# mount.cifs //192.168.1.15/storage /mnt/storage -o username=jhones,password=123456

1 2	[root@centos]# yum install cifs-utils [root@centos]# mount.cifs //192.168.1.15/storage /mnt/storage -o username=jhones,password=123456

Cliente no Linux MODO2

[root@centos]# vim /etc/.storage
username=jhones
password=123456

[root@centos]# chmod 600 /etc/.storage
[root@centos]# mount -t cifs //192.168.1.15/storage /mnt/storage -o credentials=/etc/.storage

[root@centos]# vim /etc/.storage

username=jhones

password=123456

[root@centos]# chmod 600 /etc/.storage

[root@centos]# mount -t cifs //192.168.1.15/storage /mnt/storage -o credentials=/etc/.storage

E no /etc/fstab

//192.168.1.15/storage /mnt/storage cifs credentials=/etc/.storage,defaults 0 0

1	//192.168.1.15/storage /mnt/storage cifs credentials=/etc/.storage,defaults 0 0

Continue reading →

Linux – Ativar rc.local no CentOS7

12/03/2018 / jhonespetter

Bummm

[root@centos7]# chmod u+x /etc/rc.d/rc.local
[root@centos7]# systemctl start rc-local
[root@centos7]# systemctl enable rc-local
[root@centos7]# vim /etc/rc.local

#!/bin/bash
# THIS FILE IS ADDED FOR COMPATIBILITY PURPOSES
#
# It is highly advisable to create own systemd services or udev rules
# to run scripts during boot instead of using this file.
#
# In contrast to previous versions due to parallel execution during boot
# this script will NOT be run after all other services.
#
# Please note that you must run 'chmod +x /etc/rc.d/rc.local' to ensure
# that this script will be executed during boot.

# Iptables
/etc/firewall/firewall.sh start

touch /var/lock/subsys/local

[root@centos7]# chmod u+x /etc/rc.d/rc.local

[root@centos7]# systemctl start rc-local

[root@centos7]# systemctl enable rc-local

[root@centos7]# vim /etc/rc.local

#!/bin/bash

# THIS FILE IS ADDED FOR COMPATIBILITY PURPOSES

# It is highly advisable to create own systemd services or udev rules

# to run scripts during boot instead of using this file.

# In contrast to previous versions due to parallel execution during boot

# this script will NOT be run after all other services.

# Please note that you must run 'chmod +x /etc/rc.d/rc.local' to ensure

# that this script will be executed during boot.

# Iptables

/etc/firewall/firewall.sh start

touch /var/lock/subsys/local

Continue reading →

Linux – PHP7.1 como padrão no Apache

05/03/2018 / jhonespetter

1 – Instalar pacotes e iniciar serviços

[root@centos7]# rpm -ivh http://remi.xpg.com.br/enterprise/remi-release-7.rpm
[root@centos7]# yum -y install httpd php71-php-pecl-mysql php71-php-mysqlnd php71 php71-build php71-php php71-php-cli php71-php-common php71-php-fpm php71-php-gd php71-php-mbstring php71-php-mcrypt php71-php-pecl-zip php71-php-xml
[root@centos7]# systemctl start httpd php71-php-fpm
[root@centos7]# systemctl enable httpd php71-php-fpm

[root@centos7]# rpm -ivh http://remi.xpg.com.br/enterprise/remi-release-7.rpm

[root@centos7]# yum -y install httpd php71-php-pecl-mysql php71-php-mysqlnd php71 php71-build php71-php php71-php-cli php71-php-common php71-php-fpm php71-php-gd php71-php-mbstring php71-php-mcrypt php71-php-pecl-zip php71-php-xml

[root@centos7]# systemctl start httpd php71-php-fpm

[root@centos7]# systemctl enable httpd php71-php-fpm

2 – Alterar confs

[root@centos7]# vim /etc/httpd/conf.d/php.conf

<FilesMatch \.php$>
#    SetHandler application/x-httpd-php
        SetHandler "proxy:fcgi://127.0.0.1:9000"
</FilesMatch>

[root@centos7]# systemctl restart php71-php-fpm
[root@centos7]# mv /etc/httpd/conf.modules.d/10-php.conf /etc/httpd/conf.modules.d/10-php.conf.old
[root@centos7]# systemctl restart httpd

[root@centos7]# vim /etc/httpd/conf.d/php.conf

# SetHandler application/x-httpd-php

SetHandler "proxy:fcgi://127.0.0.1:9000"

</FilesMatch>

[root@centos7]# systemctl restart php71-php-fpm

[root@centos7]# mv /etc/httpd/conf.modules.d/10-php.conf /etc/httpd/conf.modules.d/10-php.conf.old

[root@centos7]# systemctl restart httpd

3 – Testar

[root@centos7]# echo '<?php phpinfo(); ?>' > /var/www/html/info.php
[root@centos7]# curl http://localhost/info.php | grep 'PHP Version' | tail -1 | sed -e 's/<[^>]*>//g'

1 2	[root@centos7]# echo '<?php phpinfo(); ?>' > /var/www/html/info.php [root@centos7]# curl http://localhost/info.php \| grep 'PHP Version' \| tail -1 \| sed -e 's/<[^>]*>//g'

Continue reading →

Linux – Bind DNSSEC

25/02/2018 / jhonespetter

1 – Gerar a chave e assinar

[root@centos7]# cd /var/named
[root@centos7]# dnssec-keygen -r /dev/urandom -f KSK -a RSASHA1 -b 1024 -n ZONE labs.eti.br
[root@centos7]# dnssec-signzone -S -z -o labs.eti.br db.labs.eti.br
Fetching KSK/ZSK 14212/RSASHA1 from key repository.
Verifying the zone using the following algorithms: RSASHA1.
Zone fully signed:
Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked
                    ZSKs: 0 active, 0 stand-by, 0 revoked
db.labs.eti.br.signed

[root@centos7 named]# ll *eti.br*
-rw-r--r-- 1 root root  543 Feb 19 06:57 db.labs.eti.br
-rw-r--r-- 1 root root 7569 Feb 25 10:17 db.labs.eti.br.signed
-rw-r--r-- 1 root root  167 Feb 25 10:17 dsset-labs.eti.br.
-rw-r--r-- 1 root root  430 Feb 18 21:12 Klabs.eti.br.+005+14212.key
-rw------- 1 root root 1010 Feb 18 21:12 Klabs.eti.br.+005+14212.private

[root@centos7]# cd /var/named

[root@centos7]# dnssec-keygen -r /dev/urandom -f KSK -a RSASHA1 -b 1024 -n ZONE labs.eti.br

[root@centos7]# dnssec-signzone -S -z -o labs.eti.br db.labs.eti.br

Fetching KSK/ZSK 14212/RSASHA1 from key repository.

Verifying the zone using the following algorithms: RSASHA1.

Zone fully signed:

Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked

ZSKs: 0 active, 0 stand-by, 0 revoked

db.labs.eti.br.signed

[root@centos7 named]# ll *eti.br*

-rw-r--r-- 1 root root 543 Feb 19 06:57 db.labs.eti.br

-rw-r--r-- 1 root root 7569 Feb 25 10:17 db.labs.eti.br.signed

-rw-r--r-- 1 root root 167 Feb 25 10:17 dsset-labs.eti.br.

-rw-r--r-- 1 root root 430 Feb 18 21:12 Klabs.eti.br.+005+14212.key

-rw------- 1 root root 1010 Feb 18 21:12 Klabs.eti.br.+005+14212.private

Observação Toda alteração feita no db.labs.eti.br deve após ser assinada e reiniciar o bind para a alteração entrar em vigor, caso contrário irá notar que toda alteração não irá entrar em vigor

[root@centos7]# dnssec-signzone -S -z -o labs.eti.br db.labs.eti.br
dnssec-signzone: warning: dns_dnssec_findmatchingkeys: error reading key file Klabs.eti.br.+157+38276.private: bad key type
Fetching KSK/ZSK 14212/RSASHA1 from key repository.
Verifying the zone using the following algorithms: RSASHA1.
Zone fully signed:
Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked
                    ZSKs: 0 active, 0 stand-by, 0 revoked
db.labs.eti.br.signed

[root@centos7]# systemctl restart named

[root@centos7]# dnssec-signzone -S -z -o labs.eti.br db.labs.eti.br

dnssec-signzone: warning: dns_dnssec_findmatchingkeys: error reading key file Klabs.eti.br.+157+38276.private: bad key type

Fetching KSK/ZSK 14212/RSASHA1 from key repository.

Verifying the zone using the following algorithms: RSASHA1.

Zone fully signed:

Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked

ZSKs: 0 active, 0 stand-by, 0 revoked

db.labs.eti.br.signed

[root@centos7]# systemctl restart named

2 – Adicionar os parametros no named.conf e alterar o file

[root@centos7]# vim /etc/named.conf

        /* DNSSEC */
        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

zone "labs.eti.br" {
        type master;
#       file "db.labs.eti.br";
        file "db.labs.eti.br.signed";
        allow-update { key rndc-key; };
        allow-transfer { 35.196.13.28; 10.142.0.3; };
};

[root@centos7]# systemctl restart named

[root@centos7]# vim /etc/named.conf

/* DNSSEC */

dnssec-enable yes;

dnssec-validation yes;

dnssec-lookaside auto;

zone "labs.eti.br" {

type master;

# file "db.labs.eti.br";

file "db.labs.eti.br.signed";

allow-update { key rndc-key; };

allow-transfer { 35.196.13.28; 10.142.0.3; };

};

[root@centos7]# systemctl restart named

…

Continue reading →

Linux – Bind externo primário CentOS7 e secundário Debian9

18/02/2018 / jhonespetter

Ambiente 1 – Preparar ambiente

[root@centos7]# yum -y update
[root@centos7]# firewall-cmd --add-port=53/udp --permanent && firewall-cmd --reload && firewall-cmd --list-port
[root@centos7]# firewall-cmd --add-port=53/tcp --permanent && firewall-cmd --reload && firewall-cmd --list-port
[root@centos7]# setenforce Permissive
[root@centos7]# vim /etc/selinux/config
[root@centos7]# yum -y install bind bind-chroot bind-utils net-tools
[root@centos7]# systemctl start named
[root@centos7]# systemctl enable named

[root@centos7]# yum -y update

[root@centos7]# firewall-cmd --add-port=53/udp --permanent && firewall-cmd --reload && firewall-cmd --list-port

[root@centos7]# firewall-cmd --add-port=53/tcp --permanent && firewall-cmd --reload && firewall-cmd --list-port

[root@centos7]# setenforce Permissive

[root@centos7]# vim /etc/selinux/config

[root@centos7]# yum -y install bind bind-chroot bind-utils net-tools

[root@centos7]# systemctl start named

[root@centos7]# systemctl enable named

2 – Configurar o /etc/named.conf

[root@centos7]# vim /etc/named.conf

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

options {
        listen-on port 53 { 127.0.0.1; 35.190.128.157; 10.142.0.2; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { localhost; any; };

        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/etc/rndc.key";

zone "labs.eti.br" {
        type master;
        file "db.labs.eti.br";
        allow-update { key rndc-key; };
        allow-transfer { 35.196.13.28; 10.142.0.3; };
};

zone "128.190.35.in-addr.arpa" {
        type master;
        file "db.128.190.35.in-addr.arpa";
        allow-update { key rndc-key; };
        allow-transfer { 35.196.13.28; 10.142.0.3; };
};

zone "13.196.35.in-addr.arpa" {
        type master;
        file "db.13.196.35.in-addr.arpa";
        allow-update { key rndc-key; };
        allow-transfer { 35.196.13.28; 10.142.0.3; };
};

[root@centos7]# named-checkconf -z
zone localhost.localdomain/IN: loaded serial 0
zone localhost/IN: loaded serial 0
zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
zone 0.in-addr.arpa/IN: loaded serial 0
zone labs.eti.br/IN: loaded serial 2018021802
zone 128.190.35.in-addr.arpa/IN: loaded serial 2018021802
zone 13.196.35.in-addr.arpa/IN: loaded serial 2018021801

[root@centos7]# vim /etc/named.conf

// named.conf

// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS

// server as a caching only nameserver (as a localhost DNS resolver only).

// See /usr/share/doc/bind*/sample/ for example named configuration files.

// See the BIND Administrator's Reference Manual (ARM) for details about the

// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

options {

listen-on port 53 { 127.0.0.1; 35.190.128.157; 10.142.0.2; };

listen-on-v6 port 53 { ::1; };

directory "/var/named";

dump-file "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query { localhost; any; };

recursion yes;

dnssec-enable yes;

dnssec-validation yes;

/* Path to ISC DLV key */

bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

pid-file "/run/named/named.pid";

session-keyfile "/run/named/session.key";

};

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

zone "." IN {

type hint;

file "named.ca";

};

include "/etc/named.rfc1912.zones";

include "/etc/named.root.key";

include "/etc/rndc.key";

zone "labs.eti.br" {

type master;

file "db.labs.eti.br";

allow-update { key rndc-key; };

allow-transfer { 35.196.13.28; 10.142.0.3; };

};

zone "128.190.35.in-addr.arpa" {

type master;

file "db.128.190.35.in-addr.arpa";

allow-update { key rndc-key; };

allow-transfer { 35.196.13.28; 10.142.0.3; };

};

zone "13.196.35.in-addr.arpa" {

type master;

file "db.13.196.35.in-addr.arpa";

allow-update { key rndc-key; };

allow-transfer { 35.196.13.28; 10.142.0.3; };

};

[root@centos7]# named-checkconf -z

zone localhost.localdomain/IN: loaded serial 0

zone localhost/IN: loaded serial 0

zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0

zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0

zone 0.in-addr.arpa/IN: loaded serial 0

zone labs.eti.br/IN: loaded serial 2018021802

zone 128.190.35.in-addr.arpa/IN: loaded serial 2018021802

zone 13.196.35.in-addr.arpa/IN: loaded serial 2018021801

3 – Configurar /var/named/db.labs.eti.br

root@centos7]# vim /var/named/db.labs.eti.br

$ORIGIN .
$TTL 86400 ; 1 dia
labs.eti.br     IN SOA  ns1.labs.eti.br. root.labs.eti.br. (
                                2018021803      ; serial
                                3600            ; refresh 1 hora
                                1800            ; retry 30 minutos
                                604800          ; expire 1 semana
                                86400           ; minimum 1 dia
                                )
                        NS      ns1.labs.eti.br.
                        NS      ns2.labs.eti.br.
$ORIGIN                 labs.eti.br.
@               IN TXT "v= spf1 a mx ip4 :35.190.128.157 -all "
                IN      MX      10 mail
ns1                     A       35.190.128.157
ns2                     A       35.196.13.28
mail                    A       35.190.128.157
www                     A       35.190.128.157
ftp                     CNAME   www
site2           CNAME   www
webmail         CNAME   mail


[root@centos7]# named-checkzone labs.eti.br /var/named/db.labs.eti.br
zone labs.eti.br/IN: loaded serial 2018021803
OK

root@centos7]# vim /var/named/db.labs.eti.br

$ORIGIN .

$TTL 86400 ; 1 dia

labs.eti.br IN SOA ns1.labs.eti.br. root.labs.eti.br. (

2018021803 ; serial

3600 ; refresh 1 hora

1800 ; retry 30 minutos

604800 ; expire 1 semana

86400 ; minimum 1 dia

)

NS ns1.labs.eti.br.

NS ns2.labs.eti.br.

$ORIGIN labs.eti.br.

@ IN TXT "v= spf1 a mx ip4 :35.190.128.157 -all "

IN MX 10 mail

ns1 A 35.190.128.157

ns2 A 35.196.13.28

mail A 35.190.128.157

www A 35.190.128.157

ftp CNAME www

site2 CNAME www

webmail CNAME mail

[root@centos7]# named-checkzone labs.eti.br /var/named/db.labs.eti.br

zone labs.eti.br/IN: loaded serial 2018021803

4 – Configurar /var/named/db.128.190.35.in-addr.arpa

[root@centos7]# vim /var/named/db.128.190.35.in-addr.arpa

$TTL 86400      ; 1 dia
@               IN SOA  ns1.labs.eti.br. root.labs.eti.br. (
                                        2018021802      ; serial
                                        3600            ; refresh 1 hora
                                        1800            ; retry 30 minutos
                                        604800          ; expire 1 semana
                                        86400           ; minimum 1 dia
                                        )
                                IN NS   ns1.labs.eti.br.
157                             IN PTR  ns1.labs.eti.br.


[root@centos7]# named-checkzone 128.190.35.in-addr.arpa /var/named/db.128.190.35.in-addr.arpa
zone 128.190.35.in-addr.arpa/IN: loaded serial 2018021802
OK

[root@centos7]# vim /var/named/db.128.190.35.in-addr.arpa

$TTL 86400 ; 1 dia

@ IN SOA ns1.labs.eti.br. root.labs.eti.br. (

2018021802 ; serial

3600 ; refresh 1 hora

1800 ; retry 30 minutos

604800 ; expire 1 semana

86400 ; minimum 1 dia

)

IN NS ns1.labs.eti.br.

157 IN PTR ns1.labs.eti.br.

[root@centos7]# named-checkzone 128.190.35.in-addr.arpa /var/named/db.128.190.35.in-addr.arpa

zone 128.190.35.in-addr.arpa/IN: loaded serial 2018021802

5 – Configurar /var/named/db.13.196.35.in-addr.arpa

[root@centos7]# vim /var/named/db.13.196.35.in-addr.arpa

$TTL 86400      ; 1 dia
@               IN SOA  ns2.labs.eti.br. root.labs.eti.br. (
                                        2018021801      ; serial
                                        3600            ; refresh 1 hora
                                        1800            ; retry 30 minutos
                                        604800          ; expire 1 semana
                                        86400           ; minimum 1 dia
                                        )
                                IN NS   ns2.labs.eti.br.
28                              IN PTR  ns2.labs.eti.br.


[root@centos7]# named-checkzone 13.196.35.in-addr.arpa /var/named/db.13.196.35.in-addr.arpa
zone 13.196.35.in-addr.arpa/IN: loaded serial 2018021801
OK

[root@centos7]# vim /etc/resolv.conf
# Generated by NetworkManager
nameserver 10.142.0.2
nameserver 10.142.0.3
nameserver 35.190.128.157
nameserver 35.196.13.28

[root@centos7]# systemctl restart named

[root@centos7]# vim /var/named/db.13.196.35.in-addr.arpa

$TTL 86400 ; 1 dia

@ IN SOA ns2.labs.eti.br. root.labs.eti.br. (

2018021801 ; serial

3600 ; refresh 1 hora

1800 ; retry 30 minutos

604800 ; expire 1 semana

86400 ; minimum 1 dia

)

IN NS ns2.labs.eti.br.

28 IN PTR ns2.labs.eti.br.

[root@centos7]# named-checkzone 13.196.35.in-addr.arpa /var/named/db.13.196.35.in-addr.arpa

zone 13.196.35.in-addr.arpa/IN: loaded serial 2018021801

[root@centos7]# vim /etc/resolv.conf

# Generated by NetworkManager

nameserver 10.142.0.2

nameserver 10.142.0.3

nameserver 35.190.128.157

nameserver 35.196.13.28

[root@centos7]# systemctl restart named

6 – Preparar ambiente

[root@debina9]# apt-get install bind9 bind9-doc bind9utils
[root@debina9]# systemctl start bind9
[root@debina9]# systemctl enable bind9

[root@debina9]# apt-get install bind9 bind9-doc bind9utils

[root@debina9]# systemctl start bind9

[root@debina9]# systemctl enable bind9

7 – Configurar /etc/bind/named.conf.local

[root@debina9]# vim /etc/bind/named.conf.local

//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";


zone "labs.eti.br" {
        type slave;
        file "db.labs.eti.br";
        masters { 10.142.0.2; 35.190.128.157; };
};

zone "128.190.35.in-addr.arpa" {
        type slave;
        file "db.128.190.35.in-addr.arpa";
        masters { 10.142.0.2; 35.190.128.157; };
};

zone "13.196.35.in-addr.arpa" {
        type slave;
        file "db.13.196.35.in-addr.arpa";
        masters { 10.142.0.2; 35.190.128.157; };
};


[root@debina9]# systemctl restart bind9
[root@debina9]# systemctl status bind9

[root@debina9]# vim /etc/resolv.conf
nameserver 10.142.0.3
nameserver 10.142.0.2
nameserver 35.196.13.28
nameserver 35.190.128.157

[root@debina9]# vim /etc/bind/named.conf.local

// Do any local configuration here

// Consider adding the 1918 zones here, if they are not used in your

// organization

//include "/etc/bind/zones.rfc1918";

zone "labs.eti.br" {

type slave;

file "db.labs.eti.br";

masters { 10.142.0.2; 35.190.128.157; };

};

zone "128.190.35.in-addr.arpa" {

type slave;

file "db.128.190.35.in-addr.arpa";

masters { 10.142.0.2; 35.190.128.157; };

};

zone "13.196.35.in-addr.arpa" {

type slave;

file "db.13.196.35.in-addr.arpa";

masters { 10.142.0.2; 35.190.128.157; };

};

[root@debina9]# systemctl restart bind9

[root@debina9]# systemctl status bind9

[root@debina9]# vim /etc/resolv.conf

nameserver 10.142.0.3

nameserver 10.142.0.2

nameserver 35.196.13.28

nameserver 35.190.128.157

8 – Testes https://www.whatsmydns.net/#NS/labs.eti.br

[root@centos7]# host 35.190.128.157
157.128.190.35.in-addr.arpa domain name pointer ns1.labs.eti.br.

[root@centos7]# host 35.196.13.28
28.13.196.35.in-addr.arpa domain name pointer ns2.labs.eti.br.

[root@centos7]# host 35.190.128.157

157.128.190.35.in-addr.arpa domain name pointer ns1.labs.eti.br.

[root@centos7]# host 35.196.13.28

28.13.196.35.in-addr.arpa domain name pointer ns2.labs.eti.br.

Continue reading →

Linux – Ações RAID com mdadm

29/01/2018 / jhonespetter

Criando partição para RAID, tipo 0xFD

[root@centos md1]# fdisk /dev/md2
Command (m for help): n
Select (default p): p
Command (m for help): t
Hex code (type L to list all codes): 8e
Command (m for help): w

[root@centos md1]# fdisk /dev/md2

Command (m for help): n

Select (default p): p

Command (m for help): t

Hex code (type L to list all codes): 8e

Command (m for help): w

Criando LVM

[root@centos md1]# pvcreate /dev/md2p1
  Physical volume "/dev/md2p1" successfully created.

[root@centos md1]# vgcreate vol_raid /dev/md2p1
  Volume group "vol_raid" successfully created

[root@centos md1]# lvcreate -l +100%FREE -n lv_raid vol_raid
  Logical volume "lv_raid" created.
  
[root@centos md1]# mkfs.xfs /dev/mapper/vol_raid-lv_raid

[root@centos md1]# mount /dev/mapper/vol_raid-lv_raid /md2/

[root@centos md1]# pvcreate /dev/md2p1

Physical volume "/dev/md2p1" successfully created.

[root@centos md1]# vgcreate vol_raid /dev/md2p1

Volume group "vol_raid" successfully created

[root@centos md1]# lvcreate -l +100%FREE -n lv_raid vol_raid

Logical volume "lv_raid" created.

[root@centos md1]# mkfs.xfs /dev/mapper/vol_raid-lv_raid

[root@centos md1]# mount /dev/mapper/vol_raid-lv_raid /md2/

Converter uma RAID1 para RAID5

[root@centos ~]# mdadm /dev/md2 --grow --level=5 --chunk=512
mdadm: level of /dev/md2 changed to raid5
mdadm: New chunk size (512K) does not evenly divide device size (1046976k)
mdadm: After shrinking any filesystem, "mdadm --grow /dev/md2 --size 1046528"
mdadm: will shrink the array so the given chunk size would work.

[root@centos ~]# mdadm --grow /dev/md2 --size 1046528
mdadm: component size of /dev/md2 has been set to 1046528K

[root@centos ~]# mdadm /dev/md2 --grow --chunk=512
chunk size for /dev/md2 set to 65536

[root@centos ~]# mdadm --grow /dev/md2 --raid-devices 3
mdadm: Need to backup 1024K of critical section..

[root@centos ~]# mdadm /dev/md2 --grow --level=5 --chunk=512

mdadm: level of /dev/md2 changed to raid5

mdadm: New chunk size (512K) does not evenly divide device size (1046976k)

mdadm: After shrinking any filesystem, "mdadm --grow /dev/md2 --size 1046528"

mdadm: will shrink the array so the given chunk size would work.

[root@centos ~]# mdadm --grow /dev/md2 --size 1046528

mdadm: component size of /dev/md2 has been set to 1046528K

[root@centos ~]# mdadm /dev/md2 --grow --chunk=512

chunk size for /dev/md2 set to 65536

[root@centos ~]# mdadm --grow /dev/md2 --raid-devices 3

mdadm: Need to backup 1024K of critical section..

Instalando mdadm

[root@centos]# yum search mdadm
[root@centos]# yum -y install mdadm.x86_64
[root@centos]# man mdadm

[root@centos]# yum search mdadm

[root@centos]# yum -y install mdadm.x86_64

[root@centos]# man mdadm

Parar uma RAID

[root@centos]# mdadm --stop /dev/md0
[root@centos]# watch -n1 cat /proc/mdstat

1 2	[root@centos]# mdadm --stop /dev/md0 [root@centos]# watch -n1 cat /proc/mdstat

Criar Raid0 (sdb + sdc) = md0 = raid0

[root@centos]# mdadm --create /dev/md0 --level=0 --raid-devices=2 /dev/sdb1 /dev/sdc1

1	[root@centos]# mdadm --create /dev/md0 --level=0 --raid-devices=2 /dev/sdb1 /dev/sdc1

Criar Raid1 (sdd + sde) = mdq = raid1

[root@centos]# mdadm --create /dev/md1 --level=1 --raid-devices=2 /dev/sdd1 /dev/sde1

1	[root@centos]# mdadm --create /dev/md1 --level=1 --raid-devices=2 /dev/sdd1 /dev/sde1

Criar Raid5 com um…

Continue reading →

JPCorp – Jhones Petter

Categoria: Linux

Linux – Removendo kernels antigos

Linux – Compartilhando treinamento

Linux – /boot do CentOS7 apagado

Linux – Instalando o SMcli

Linux – Compartilhamento simples com Samba no CentOS7

Linux – Ativar rc.local no CentOS7

Linux – PHP7.1 como padrão no Apache

Linux – Bind DNSSEC

Linux – Bind externo primário CentOS7 e secundário Debian9

Linux – Ações RAID com mdadm