Linux – Bind DNSSEC

25/02/2018 / jhonespetter

1 – Gerar a chave e assinar

[root@centos7]# cd /var/named
[root@centos7]# dnssec-keygen -r /dev/urandom -f KSK -a RSASHA1 -b 1024 -n ZONE labs.eti.br
[root@centos7]# dnssec-signzone -S -z -o labs.eti.br db.labs.eti.br
Fetching KSK/ZSK 14212/RSASHA1 from key repository.
Verifying the zone using the following algorithms: RSASHA1.
Zone fully signed:
Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked
                    ZSKs: 0 active, 0 stand-by, 0 revoked
db.labs.eti.br.signed

[root@centos7 named]# ll *eti.br*
-rw-r--r-- 1 root root  543 Feb 19 06:57 db.labs.eti.br
-rw-r--r-- 1 root root 7569 Feb 25 10:17 db.labs.eti.br.signed
-rw-r--r-- 1 root root  167 Feb 25 10:17 dsset-labs.eti.br.
-rw-r--r-- 1 root root  430 Feb 18 21:12 Klabs.eti.br.+005+14212.key
-rw------- 1 root root 1010 Feb 18 21:12 Klabs.eti.br.+005+14212.private

[root@centos7]# cd /var/named

[root@centos7]# dnssec-keygen -r /dev/urandom -f KSK -a RSASHA1 -b 1024 -n ZONE labs.eti.br

[root@centos7]# dnssec-signzone -S -z -o labs.eti.br db.labs.eti.br

Fetching KSK/ZSK 14212/RSASHA1 from key repository.

Verifying the zone using the following algorithms: RSASHA1.

Zone fully signed:

Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked

ZSKs: 0 active, 0 stand-by, 0 revoked

db.labs.eti.br.signed

[root@centos7 named]# ll *eti.br*

-rw-r--r-- 1 root root 543 Feb 19 06:57 db.labs.eti.br

-rw-r--r-- 1 root root 7569 Feb 25 10:17 db.labs.eti.br.signed

-rw-r--r-- 1 root root 167 Feb 25 10:17 dsset-labs.eti.br.

-rw-r--r-- 1 root root 430 Feb 18 21:12 Klabs.eti.br.+005+14212.key

-rw------- 1 root root 1010 Feb 18 21:12 Klabs.eti.br.+005+14212.private

Observação Toda alteração feita no db.labs.eti.br deve após ser assinada e reiniciar o bind para a alteração entrar em vigor, caso contrário irá notar que toda alteração não irá entrar em vigor

[root@centos7]# dnssec-signzone -S -z -o labs.eti.br db.labs.eti.br
dnssec-signzone: warning: dns_dnssec_findmatchingkeys: error reading key file Klabs.eti.br.+157+38276.private: bad key type
Fetching KSK/ZSK 14212/RSASHA1 from key repository.
Verifying the zone using the following algorithms: RSASHA1.
Zone fully signed:
Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked
                    ZSKs: 0 active, 0 stand-by, 0 revoked
db.labs.eti.br.signed

[root@centos7]# systemctl restart named

[root@centos7]# dnssec-signzone -S -z -o labs.eti.br db.labs.eti.br

dnssec-signzone: warning: dns_dnssec_findmatchingkeys: error reading key file Klabs.eti.br.+157+38276.private: bad key type

Fetching KSK/ZSK 14212/RSASHA1 from key repository.

Verifying the zone using the following algorithms: RSASHA1.

Zone fully signed:

Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked

ZSKs: 0 active, 0 stand-by, 0 revoked

db.labs.eti.br.signed

[root@centos7]# systemctl restart named

2 – Adicionar os parametros no named.conf e alterar o file

[root@centos7]# vim /etc/named.conf

        /* DNSSEC */
        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

zone "labs.eti.br" {
        type master;
#       file "db.labs.eti.br";
        file "db.labs.eti.br.signed";
        allow-update { key rndc-key; };
        allow-transfer { 35.196.13.28; 10.142.0.3; };
};

[root@centos7]# systemctl restart named

[root@centos7]# vim /etc/named.conf

/* DNSSEC */

dnssec-enable yes;

dnssec-validation yes;

dnssec-lookaside auto;

zone "labs.eti.br" {

type master;

# file "db.labs.eti.br";

file "db.labs.eti.br.signed";

allow-update { key rndc-key; };

allow-transfer { 35.196.13.28; 10.142.0.3; };

};

[root@centos7]# systemctl restart named

…

Continue reading →

Linux – Bind externo primário CentOS7 e secundário Debian9

18/02/2018 / jhonespetter

Ambiente 1 – Preparar ambiente

[root@centos7]# yum -y update
[root@centos7]# firewall-cmd --add-port=53/udp --permanent && firewall-cmd --reload && firewall-cmd --list-port
[root@centos7]# firewall-cmd --add-port=53/tcp --permanent && firewall-cmd --reload && firewall-cmd --list-port
[root@centos7]# setenforce Permissive
[root@centos7]# vim /etc/selinux/config
[root@centos7]# yum -y install bind bind-chroot bind-utils net-tools
[root@centos7]# systemctl start named
[root@centos7]# systemctl enable named

[root@centos7]# yum -y update

[root@centos7]# firewall-cmd --add-port=53/udp --permanent && firewall-cmd --reload && firewall-cmd --list-port

[root@centos7]# firewall-cmd --add-port=53/tcp --permanent && firewall-cmd --reload && firewall-cmd --list-port

[root@centos7]# setenforce Permissive

[root@centos7]# vim /etc/selinux/config

[root@centos7]# yum -y install bind bind-chroot bind-utils net-tools

[root@centos7]# systemctl start named

[root@centos7]# systemctl enable named

2 – Configurar o /etc/named.conf

[root@centos7]# vim /etc/named.conf

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

options {
        listen-on port 53 { 127.0.0.1; 35.190.128.157; 10.142.0.2; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { localhost; any; };

        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/etc/rndc.key";

zone "labs.eti.br" {
        type master;
        file "db.labs.eti.br";
        allow-update { key rndc-key; };
        allow-transfer { 35.196.13.28; 10.142.0.3; };
};

zone "128.190.35.in-addr.arpa" {
        type master;
        file "db.128.190.35.in-addr.arpa";
        allow-update { key rndc-key; };
        allow-transfer { 35.196.13.28; 10.142.0.3; };
};

zone "13.196.35.in-addr.arpa" {
        type master;
        file "db.13.196.35.in-addr.arpa";
        allow-update { key rndc-key; };
        allow-transfer { 35.196.13.28; 10.142.0.3; };
};

[root@centos7]# named-checkconf -z
zone localhost.localdomain/IN: loaded serial 0
zone localhost/IN: loaded serial 0
zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
zone 0.in-addr.arpa/IN: loaded serial 0
zone labs.eti.br/IN: loaded serial 2018021802
zone 128.190.35.in-addr.arpa/IN: loaded serial 2018021802
zone 13.196.35.in-addr.arpa/IN: loaded serial 2018021801

[root@centos7]# vim /etc/named.conf

// named.conf

// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS

// server as a caching only nameserver (as a localhost DNS resolver only).

// See /usr/share/doc/bind*/sample/ for example named configuration files.

// See the BIND Administrator's Reference Manual (ARM) for details about the

// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

options {

listen-on port 53 { 127.0.0.1; 35.190.128.157; 10.142.0.2; };

listen-on-v6 port 53 { ::1; };

directory "/var/named";

dump-file "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query { localhost; any; };

recursion yes;

dnssec-enable yes;

dnssec-validation yes;

/* Path to ISC DLV key */

bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

pid-file "/run/named/named.pid";

session-keyfile "/run/named/session.key";

};

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

zone "." IN {

type hint;

file "named.ca";

};

include "/etc/named.rfc1912.zones";

include "/etc/named.root.key";

include "/etc/rndc.key";

zone "labs.eti.br" {

type master;

file "db.labs.eti.br";

allow-update { key rndc-key; };

allow-transfer { 35.196.13.28; 10.142.0.3; };

};

zone "128.190.35.in-addr.arpa" {

type master;

file "db.128.190.35.in-addr.arpa";

allow-update { key rndc-key; };

allow-transfer { 35.196.13.28; 10.142.0.3; };

};

zone "13.196.35.in-addr.arpa" {

type master;

file "db.13.196.35.in-addr.arpa";

allow-update { key rndc-key; };

allow-transfer { 35.196.13.28; 10.142.0.3; };

};

[root@centos7]# named-checkconf -z

zone localhost.localdomain/IN: loaded serial 0

zone localhost/IN: loaded serial 0

zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0

zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0

zone 0.in-addr.arpa/IN: loaded serial 0

zone labs.eti.br/IN: loaded serial 2018021802

zone 128.190.35.in-addr.arpa/IN: loaded serial 2018021802

zone 13.196.35.in-addr.arpa/IN: loaded serial 2018021801

3 – Configurar /var/named/db.labs.eti.br

root@centos7]# vim /var/named/db.labs.eti.br

$ORIGIN .
$TTL 86400 ; 1 dia
labs.eti.br     IN SOA  ns1.labs.eti.br. root.labs.eti.br. (
                                2018021803      ; serial
                                3600            ; refresh 1 hora
                                1800            ; retry 30 minutos
                                604800          ; expire 1 semana
                                86400           ; minimum 1 dia
                                )
                        NS      ns1.labs.eti.br.
                        NS      ns2.labs.eti.br.
$ORIGIN                 labs.eti.br.
@               IN TXT "v= spf1 a mx ip4 :35.190.128.157 -all "
                IN      MX      10 mail
ns1                     A       35.190.128.157
ns2                     A       35.196.13.28
mail                    A       35.190.128.157
www                     A       35.190.128.157
ftp                     CNAME   www
site2           CNAME   www
webmail         CNAME   mail


[root@centos7]# named-checkzone labs.eti.br /var/named/db.labs.eti.br
zone labs.eti.br/IN: loaded serial 2018021803
OK

root@centos7]# vim /var/named/db.labs.eti.br

$ORIGIN .

$TTL 86400 ; 1 dia

labs.eti.br IN SOA ns1.labs.eti.br. root.labs.eti.br. (

2018021803 ; serial

3600 ; refresh 1 hora

1800 ; retry 30 minutos

604800 ; expire 1 semana

86400 ; minimum 1 dia

)

NS ns1.labs.eti.br.

NS ns2.labs.eti.br.

$ORIGIN labs.eti.br.

@ IN TXT "v= spf1 a mx ip4 :35.190.128.157 -all "

IN MX 10 mail

ns1 A 35.190.128.157

ns2 A 35.196.13.28

mail A 35.190.128.157

www A 35.190.128.157

ftp CNAME www

site2 CNAME www

webmail CNAME mail

[root@centos7]# named-checkzone labs.eti.br /var/named/db.labs.eti.br

zone labs.eti.br/IN: loaded serial 2018021803

4 – Configurar /var/named/db.128.190.35.in-addr.arpa

[root@centos7]# vim /var/named/db.128.190.35.in-addr.arpa

$TTL 86400      ; 1 dia
@               IN SOA  ns1.labs.eti.br. root.labs.eti.br. (
                                        2018021802      ; serial
                                        3600            ; refresh 1 hora
                                        1800            ; retry 30 minutos
                                        604800          ; expire 1 semana
                                        86400           ; minimum 1 dia
                                        )
                                IN NS   ns1.labs.eti.br.
157                             IN PTR  ns1.labs.eti.br.


[root@centos7]# named-checkzone 128.190.35.in-addr.arpa /var/named/db.128.190.35.in-addr.arpa
zone 128.190.35.in-addr.arpa/IN: loaded serial 2018021802
OK

[root@centos7]# vim /var/named/db.128.190.35.in-addr.arpa

$TTL 86400 ; 1 dia

@ IN SOA ns1.labs.eti.br. root.labs.eti.br. (

2018021802 ; serial

3600 ; refresh 1 hora

1800 ; retry 30 minutos

604800 ; expire 1 semana

86400 ; minimum 1 dia

)

IN NS ns1.labs.eti.br.

157 IN PTR ns1.labs.eti.br.

[root@centos7]# named-checkzone 128.190.35.in-addr.arpa /var/named/db.128.190.35.in-addr.arpa

zone 128.190.35.in-addr.arpa/IN: loaded serial 2018021802

5 – Configurar /var/named/db.13.196.35.in-addr.arpa

[root@centos7]# vim /var/named/db.13.196.35.in-addr.arpa

$TTL 86400      ; 1 dia
@               IN SOA  ns2.labs.eti.br. root.labs.eti.br. (
                                        2018021801      ; serial
                                        3600            ; refresh 1 hora
                                        1800            ; retry 30 minutos
                                        604800          ; expire 1 semana
                                        86400           ; minimum 1 dia
                                        )
                                IN NS   ns2.labs.eti.br.
28                              IN PTR  ns2.labs.eti.br.


[root@centos7]# named-checkzone 13.196.35.in-addr.arpa /var/named/db.13.196.35.in-addr.arpa
zone 13.196.35.in-addr.arpa/IN: loaded serial 2018021801
OK

[root@centos7]# vim /etc/resolv.conf
# Generated by NetworkManager
nameserver 10.142.0.2
nameserver 10.142.0.3
nameserver 35.190.128.157
nameserver 35.196.13.28

[root@centos7]# systemctl restart named

[root@centos7]# vim /var/named/db.13.196.35.in-addr.arpa

$TTL 86400 ; 1 dia

@ IN SOA ns2.labs.eti.br. root.labs.eti.br. (

2018021801 ; serial

3600 ; refresh 1 hora

1800 ; retry 30 minutos

604800 ; expire 1 semana

86400 ; minimum 1 dia

)

IN NS ns2.labs.eti.br.

28 IN PTR ns2.labs.eti.br.

[root@centos7]# named-checkzone 13.196.35.in-addr.arpa /var/named/db.13.196.35.in-addr.arpa

zone 13.196.35.in-addr.arpa/IN: loaded serial 2018021801

[root@centos7]# vim /etc/resolv.conf

# Generated by NetworkManager

nameserver 10.142.0.2

nameserver 10.142.0.3

nameserver 35.190.128.157

nameserver 35.196.13.28

[root@centos7]# systemctl restart named

6 – Preparar ambiente

[root@debina9]# apt-get install bind9 bind9-doc bind9utils
[root@debina9]# systemctl start bind9
[root@debina9]# systemctl enable bind9

[root@debina9]# apt-get install bind9 bind9-doc bind9utils

[root@debina9]# systemctl start bind9

[root@debina9]# systemctl enable bind9

7 – Configurar /etc/bind/named.conf.local

[root@debina9]# vim /etc/bind/named.conf.local

//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";


zone "labs.eti.br" {
        type slave;
        file "db.labs.eti.br";
        masters { 10.142.0.2; 35.190.128.157; };
};

zone "128.190.35.in-addr.arpa" {
        type slave;
        file "db.128.190.35.in-addr.arpa";
        masters { 10.142.0.2; 35.190.128.157; };
};

zone "13.196.35.in-addr.arpa" {
        type slave;
        file "db.13.196.35.in-addr.arpa";
        masters { 10.142.0.2; 35.190.128.157; };
};


[root@debina9]# systemctl restart bind9
[root@debina9]# systemctl status bind9

[root@debina9]# vim /etc/resolv.conf
nameserver 10.142.0.3
nameserver 10.142.0.2
nameserver 35.196.13.28
nameserver 35.190.128.157

[root@debina9]# vim /etc/bind/named.conf.local

// Do any local configuration here

// Consider adding the 1918 zones here, if they are not used in your

// organization

//include "/etc/bind/zones.rfc1918";

zone "labs.eti.br" {

type slave;

file "db.labs.eti.br";

masters { 10.142.0.2; 35.190.128.157; };

};

zone "128.190.35.in-addr.arpa" {

type slave;

file "db.128.190.35.in-addr.arpa";

masters { 10.142.0.2; 35.190.128.157; };

};

zone "13.196.35.in-addr.arpa" {

type slave;

file "db.13.196.35.in-addr.arpa";

masters { 10.142.0.2; 35.190.128.157; };

};

[root@debina9]# systemctl restart bind9

[root@debina9]# systemctl status bind9

[root@debina9]# vim /etc/resolv.conf

nameserver 10.142.0.3

nameserver 10.142.0.2

nameserver 35.196.13.28

nameserver 35.190.128.157

8 – Testes https://www.whatsmydns.net/#NS/labs.eti.br

[root@centos7]# host 35.190.128.157
157.128.190.35.in-addr.arpa domain name pointer ns1.labs.eti.br.

[root@centos7]# host 35.196.13.28
28.13.196.35.in-addr.arpa domain name pointer ns2.labs.eti.br.

[root@centos7]# host 35.190.128.157

157.128.190.35.in-addr.arpa domain name pointer ns1.labs.eti.br.

[root@centos7]# host 35.196.13.28

28.13.196.35.in-addr.arpa domain name pointer ns2.labs.eti.br.

Continue reading →

Linux – Ações RAID com mdadm

29/01/2018 / jhonespetter

Criando partição para RAID, tipo 0xFD

[root@centos md1]# fdisk /dev/md2
Command (m for help): n
Select (default p): p
Command (m for help): t
Hex code (type L to list all codes): 8e
Command (m for help): w

[root@centos md1]# fdisk /dev/md2

Command (m for help): n

Select (default p): p

Command (m for help): t

Hex code (type L to list all codes): 8e

Command (m for help): w

Criando LVM

[root@centos md1]# pvcreate /dev/md2p1
  Physical volume "/dev/md2p1" successfully created.

[root@centos md1]# vgcreate vol_raid /dev/md2p1
  Volume group "vol_raid" successfully created

[root@centos md1]# lvcreate -l +100%FREE -n lv_raid vol_raid
  Logical volume "lv_raid" created.
  
[root@centos md1]# mkfs.xfs /dev/mapper/vol_raid-lv_raid

[root@centos md1]# mount /dev/mapper/vol_raid-lv_raid /md2/

[root@centos md1]# pvcreate /dev/md2p1

Physical volume "/dev/md2p1" successfully created.

[root@centos md1]# vgcreate vol_raid /dev/md2p1

Volume group "vol_raid" successfully created

[root@centos md1]# lvcreate -l +100%FREE -n lv_raid vol_raid

Logical volume "lv_raid" created.

[root@centos md1]# mkfs.xfs /dev/mapper/vol_raid-lv_raid

[root@centos md1]# mount /dev/mapper/vol_raid-lv_raid /md2/

Converter uma RAID1 para RAID5

[root@centos ~]# mdadm /dev/md2 --grow --level=5 --chunk=512
mdadm: level of /dev/md2 changed to raid5
mdadm: New chunk size (512K) does not evenly divide device size (1046976k)
mdadm: After shrinking any filesystem, "mdadm --grow /dev/md2 --size 1046528"
mdadm: will shrink the array so the given chunk size would work.

[root@centos ~]# mdadm --grow /dev/md2 --size 1046528
mdadm: component size of /dev/md2 has been set to 1046528K

[root@centos ~]# mdadm /dev/md2 --grow --chunk=512
chunk size for /dev/md2 set to 65536

[root@centos ~]# mdadm --grow /dev/md2 --raid-devices 3
mdadm: Need to backup 1024K of critical section..

[root@centos ~]# mdadm /dev/md2 --grow --level=5 --chunk=512

mdadm: level of /dev/md2 changed to raid5

mdadm: New chunk size (512K) does not evenly divide device size (1046976k)

mdadm: After shrinking any filesystem, "mdadm --grow /dev/md2 --size 1046528"

mdadm: will shrink the array so the given chunk size would work.

[root@centos ~]# mdadm --grow /dev/md2 --size 1046528

mdadm: component size of /dev/md2 has been set to 1046528K

[root@centos ~]# mdadm /dev/md2 --grow --chunk=512

chunk size for /dev/md2 set to 65536

[root@centos ~]# mdadm --grow /dev/md2 --raid-devices 3

mdadm: Need to backup 1024K of critical section..

Instalando mdadm

[root@centos]# yum search mdadm
[root@centos]# yum -y install mdadm.x86_64
[root@centos]# man mdadm

[root@centos]# yum search mdadm

[root@centos]# yum -y install mdadm.x86_64

[root@centos]# man mdadm

Parar uma RAID

[root@centos]# mdadm --stop /dev/md0
[root@centos]# watch -n1 cat /proc/mdstat

1 2	[root@centos]# mdadm --stop /dev/md0 [root@centos]# watch -n1 cat /proc/mdstat

Criar Raid0 (sdb + sdc) = md0 = raid0

[root@centos]# mdadm --create /dev/md0 --level=0 --raid-devices=2 /dev/sdb1 /dev/sdc1

1	[root@centos]# mdadm --create /dev/md0 --level=0 --raid-devices=2 /dev/sdb1 /dev/sdc1

Criar Raid1 (sdd + sde) = mdq = raid1

[root@centos]# mdadm --create /dev/md1 --level=1 --raid-devices=2 /dev/sdd1 /dev/sde1

1	[root@centos]# mdadm --create /dev/md1 --level=1 --raid-devices=2 /dev/sdd1 /dev/sde1

Criar Raid5 com um…

Continue reading →

Windows – Comandos/Acessos rápidos

22/01/2018 / jhonespetter

Se você é igual eu que demora tempão pra achar as coisas nos Windows, isso irá ajudar: Interfaces de rede

ncpa.cpl

ncpa.cpl

Conexão área de trabalho remota

mstsc

mstsc

Painel de controle

control

control

Gerenciador de dispositivos

devmgmt.msc

1	devmgmt.msc

Gerenciador de tarefas

taskmgr

taskmgr

Adicionar/Remover programas

cppwiz.cpl

1	cppwiz.cpl

Monitor de desempenho

perfmon.msc

1	perfmon.msc

Certificados…

Continue reading →

Linux – Criando uma ISO com mkisofs

20/01/2018 / jhonespetter

[root@centos tmp]# mkisofs -v -J -pad -R -o centos7.iso /mnt/cdrom/
xorriso 1.4.8 : RockRidge filesystem manipulator, libburnia project.

Drive current: -outdev 'stdio:centos7.iso'
Media current: stdio file, overwriteable
Media status : is blank
Media summary: 0 sessions, 0 data blocks, 0 data, 25.5g free
Added to ISO image: directory '/'='/mnt/cdrom'
xorriso : UPDATE : 482 files added in 1 seconds
xorriso : UPDATE : 482 files added in 1 seconds
xorriso : UPDATE :  0.02% done
xorriso : UPDATE :  1.21% done
xorriso : UPDATE :  4.31% done
xorriso : UPDATE :  8.33% done, estimate finish Sat Jan 20 13:48:38 2018
xorriso : UPDATE :  13.45% done, estimate finish Sat Jan 20 13:48:33 2018
xorriso : UPDATE :  17.88% done, estimate finish Sat Jan 20 13:48:31 2018
xorriso : UPDATE :  22.98% done, estimate finish Sat Jan 20 13:48:30 2018
xorriso : UPDATE :  28.13% done, estimate finish Sat Jan 20 13:48:29 2018
xorriso : UPDATE :  33.24% done, estimate finish Sat Jan 20 13:48:29 2018
xorriso : UPDATE :  38.39% done, estimate finish Sat Jan 20 13:48:28 2018
xorriso : UPDATE :  43.51% done, estimate finish Sat Jan 20 13:48:28 2018
xorriso : UPDATE :  48.60% done, estimate finish Sat Jan 20 13:48:28 2018
xorriso : UPDATE :  53.62% done, estimate finish Sat Jan 20 13:48:28 2018
xorriso : UPDATE :  58.71% done, estimate finish Sat Jan 20 13:48:27 2018
xorriso : UPDATE :  63.77% done, estimate finish Sat Jan 20 13:48:26 2018
xorriso : UPDATE :  68.42% done, estimate finish Sat Jan 20 13:48:26 2018
xorriso : UPDATE :  73.11% done, estimate finish Sat Jan 20 13:48:26 2018
xorriso : UPDATE :  78.17% done, estimate finish Sat Jan 20 13:48:26 2018
xorriso : UPDATE :  83.01% done, estimate finish Sat Jan 20 13:48:26 2018
xorriso : UPDATE :  87.76% done, estimate finish Sat Jan 20 13:48:26 2018
xorriso : UPDATE :  92.18% done
xorriso : UPDATE :  97.13% done
ISO image produced: 405203 sectors
Written to medium : 405203 sectors at LBA 0
Writing to 'stdio:centos7.iso' completed successfully.

[root@centos tmp]# mkisofs -v -J -pad -R -o centos7.iso /mnt/cdrom/

xorriso 1.4.8 : RockRidge filesystem manipulator, libburnia project.

Drive current: -outdev 'stdio:centos7.iso'

Media current: stdio file, overwriteable

Media status : is blank

Media summary: 0 sessions, 0 data blocks, 0 data, 25.5g free

Added to ISO image: directory '/'='/mnt/cdrom'

xorriso : UPDATE : 482 files added in 1 seconds

xorriso : UPDATE : 0.02% done

xorriso : UPDATE : 1.21% done

xorriso : UPDATE : 4.31% done

xorriso : UPDATE : 8.33% done, estimate finish Sat Jan 20 13:48:38 2018

xorriso : UPDATE : 13.45% done, estimate finish Sat Jan 20 13:48:33 2018

xorriso : UPDATE : 17.88% done, estimate finish Sat Jan 20 13:48:31 2018

xorriso : UPDATE : 22.98% done, estimate finish Sat Jan 20 13:48:30 2018

xorriso : UPDATE : 28.13% done, estimate finish Sat Jan 20 13:48:29 2018

xorriso : UPDATE : 33.24% done, estimate finish Sat Jan 20 13:48:29 2018

xorriso : UPDATE : 38.39% done, estimate finish Sat Jan 20 13:48:28 2018

xorriso : UPDATE : 43.51% done, estimate finish Sat Jan 20 13:48:28 2018

xorriso : UPDATE : 48.60% done, estimate finish Sat Jan 20 13:48:28 2018

xorriso : UPDATE : 53.62% done, estimate finish Sat Jan 20 13:48:28 2018

xorriso : UPDATE : 58.71% done, estimate finish Sat Jan 20 13:48:27 2018

xorriso : UPDATE : 63.77% done, estimate finish Sat Jan 20 13:48:26 2018

xorriso : UPDATE : 68.42% done, estimate finish Sat Jan 20 13:48:26 2018

xorriso : UPDATE : 73.11% done, estimate finish Sat Jan 20 13:48:26 2018

xorriso : UPDATE : 78.17% done, estimate finish Sat Jan 20 13:48:26 2018

xorriso : UPDATE : 83.01% done, estimate finish Sat Jan 20 13:48:26 2018

xorriso : UPDATE : 87.76% done, estimate finish Sat Jan 20 13:48:26 2018

xorriso : UPDATE : 92.18% done

xorriso : UPDATE : 97.13% done

ISO image produced: 405203 sectors

Written to medium : 405203 sectors at LBA 0

Writing to 'stdio:centos7.iso' completed successfully.

Continue reading →

pfSense – VPN IPSEC entre Endian e pfSense

28/12/2017 / jhonespetter

1 – Observações Utilizar no maximo 8 caracteres na Pre-Shared Key Adicionar as regras de firewall na interface IPSEC do pfSense e no SYSTEM ACCESS do Endian 2 – Mapeamento das configurações pfSense Endian firewall General Information IPsec settings (Dead Peer Detection) Key Exchange version IKEv1 Ping delay (in seconds) 30 Internet…

Continue reading →

Linux – Autofs

16/10/2017 / jhonespetter

Autofs é uma forma de montar um disco sob demanda, um exemplo simples seria um disco com objetivo de backup ao qual é requisitado somente um período do dia e o restante fica em standby, ou seja, desmontado. A configuração dele por padrão utiliza dois arquivos, criando primeiro o arquivo “MAP” como exemplo /etc/nome.master com…

Continue reading →

Linux – Alterar o UUID e Label do disco

09/10/2017 / jhonespetter

EXT4 Para alterar o UUID do disco utilizamos o tune2fs para efetuar a alteração e o uuidgen para gerar um UUID:

[root@centos ~]# blkid | grep ext4
/dev/mapper/vol--ext4-lv--ext4: UUID="dabdd9a3-2436-48e2-a772-2ad7eee42de0" TYPE="ext4"

[root@centos ~]# tune2fs /dev/mapper/vol--ext4-lv--ext4 -U $(uuidgen)
tune2fs 1.42.9 (28-Dec-2013)

[root@centos ~]# blkid | grep ext4
/dev/mapper/vol--ext4-lv--ext4: UUID="26b0f173-d7de-46df-915e-4acb1535104a" TYPE="ext4"

[root@centos ~]# blkid | grep ext4

/dev/mapper/vol--ext4-lv--ext4: UUID="dabdd9a3-2436-48e2-a772-2ad7eee42de0" TYPE="ext4"

[root@centos ~]# tune2fs /dev/mapper/vol--ext4-lv--ext4 -U $(uuidgen)

tune2fs 1.42.9 (28-Dec-2013)

[root@centos ~]# blkid | grep ext4

/dev/mapper/vol--ext4-lv--ext4: UUID="26b0f173-d7de-46df-915e-4acb1535104a" TYPE="ext4"

Abaixo adicionar ou alterar o label

[root@centos ~]# e2label /dev/mapper/vol--ext4-lv--ext4 disco-do-ext4

[root@centos ~]# blkid | grep ext4
/dev/mapper/vol--ext4-lv--ext4: LABEL="disco-do-ext4" UUID="26b0f173-d7de-46df-915e-4acb1535104a" TYPE="ext4"

[root@centos ~]# e2label /dev/mapper/vol--ext4-lv--ext4 disco-do-ext4

[root@centos ~]# blkid | grep ext4

/dev/mapper/vol--ext4-lv--ext4: LABEL="disco-do-ext4" UUID="26b0f173-d7de-46df-915e-4acb1535104a" TYPE="ext4"

XFS Para alterar o UUID do disco utilizamos o xfs_admin para efetuar a alteração e o uuidgen para gerar um UUID:

[root@centos ~]# blkid | grep vol--xfs-lv--xfs
/dev/mapper/vol--xfs-lv--xfs: UUID="b070f40f-bade-4558-b017-14870dd222bc" TYPE="xfs"

[root@centos ~]# xfs_admin -U $(uuidgen) /dev/mapper/vol--xfs-lv--xfs
Clearing log and setting UUID
writing all SBs
new UUID = 846f1765-eaa7-42e6-9a1b-3da83df46a65

[root@centos ~]# blkid | grep vol--xfs-lv--xfs
/dev/mapper/vol--xfs-lv--xfs: UUID="846f1765-eaa7-42e6-9a1b-3da83df46a65" TYPE="xfs"

[root@centos ~]# blkid | grep vol--xfs-lv--xfs

/dev/mapper/vol--xfs-lv--xfs: UUID="b070f40f-bade-4558-b017-14870dd222bc" TYPE="xfs"

[root@centos ~]# xfs_admin -U $(uuidgen) /dev/mapper/vol--xfs-lv--xfs

Clearing log and setting UUID

writing all SBs

new UUID = 846f1765-eaa7-42e6-9a1b-3da83df46a65

[root@centos ~]# blkid | grep vol--xfs-lv--xfs

/dev/mapper/vol--xfs-lv--xfs: UUID="846f1765-eaa7-42e6-9a1b-3da83df46a65" TYPE="xfs"

…

Continue reading →

Linux – Compilando kernel CentOS e Debian

03/10/2017 / jhonespetter

Compiling the kernel Use the following sequence of make commands to build and install the kernel and modules: make clean make zImage/bzImage (utilizando somente o make sem os dois parâmetros por padrão é compilado no modo bzImage) make modules make modules_install make clean The “clean” argument removes old output files that may exist from…

Continue reading →

Linux – Grub2 no CentOS6

02/10/2017 / jhonespetter

Ai você ta la no seu CentOS6 e descobre que ta no Grub Legacy, sabendo das melhorias que possuí no Grub2 e você [ta com tempo] então resolve atualizar pro Grub2: 1 – Backup nunca é demais, então faça o seu jovem 2 – No CentOS6 não tem em nenhum repositório o pacote então nos…

Continue reading →