Contents at a Glance

About the Author

About the Technical Reviewer

Acknowledgments

Introduction

image Part I: Basic Skills

image Chapter 1: Introduction and Installation

Understanding SUSE Linux Enterprise

Versions of SUSE

About Supported Linux

Working with SUSE Linux Enterprise 12 Modules

Installing SUSE Linux Enterprise Server 12

Performing a Basic Installation

Installing with a Custom Partition Scheme

Summary

image Chapter 2: Basic Skills

Exploring SLES Interfaces

Graphical or Not?

GNOME or KDE?

Exploring GNOME

GNOME Configuration Editor

Network Tools

Settings

Working with YaST

YaST vs. Configuration Files

YaST in This Book

YaST Interfaces

YaST Modules

Behind YaST

YaST Logging

YaST Configuration Files

Summary

image Part II: Administering SUSE Linux Enteprise Server

image Chapter 3: Managing Disk Layout and File Systems

Creating a Storage Volume

The Partition Table: GUID vs. MBR

Partitions or Logical Volumes?

Creating Partitions

Creating Logical Volumes

Creating and Mounting File Systems

Understanding File System Features

Creating and Mounting the File System

Managing File Systems

Checking and Repairing File Systems

XFS Tools

Btrfs Tools and Features

Managing Logical Volumes

Using LVM Snapshots

Resizing Logical Volumes

Creating Swap Space

Summary

image Chapter 4: User and Permission Management

Creating and Managing User Accounts

Users on Linux

Creating Users

Managing User Properties

Configuration Files for User Management Defaults

Managing Password Properties

Creating a User Environment

Creating and Managing Group Accounts

Understanding Linux Groups

Creating Groups

Managing Group Properties

Configuring Base Linux Permissions

Understanding File Ownership

Changing File Ownership

Understanding Base Linux Permissions

Applying Base Linux Permissions

Configuring Special Permissions

Working with Access Control Lists

Understanding ACLs

Applying ACLs

File System ACL Support

Working with Attributes

Summary

image Chapter 5: Common Administration Tasks

Managing Printers

Managing Printers from YaST

Command-Line Printer Management Tools

Managing Software

Understanding Repositories and Meta Package Handlers

Installing Software from YaST

Installing Software from the Command Line

Managing Jobs and Processes

System and Process Monitoring and Management

Managing Process Niceness

Scheduling Tasks

Configuring Logging

Understanding rsyslog

Reading Log Files

Configuring Remote Logging

Working with journal

Configuring logrotate

Summary

image Chapter 6: Hardening SUSE Linux

Using the YaST Security Center and Hardening

Working with sudo

Understanding sudo

Creating sudo Configuration Lines

Working in a sudo Shell

Replaying sudo Sessions

The Linux Audit Framework

Configuring Auditing from YaST

Understanding PAM

PAM Configuration Files

Understanding nsswitch

Securing SLES 12 with SELinux

SELinux Backgrounds

Understanding SELinux Components

The Policy

Installing SELinux on SUSE Linux Enterprise 12 FCS

Configuring SELinux

Managing SELinux

Troubleshooting SELinux

Switching to Enforcing Mode

Summary

image Chapter 7: Managing Virtualization on SLES

Understanding Linux Virtualization Solutions

Understanding the KVM Environment

Creating KVM Virtual Machines

Configuring the KVM Host

Creating Virtual Machines

Managing KVM Virtual Machines

Managing KVM Networking

Managing Virtual Machine Properties

Managing Virtual Machines from the Command Line

Summary

image Chapter 8: Managing Hardware, the Kernel, and the Boot Procedure

Managing the Linux Kernel

Glibc and System Calls

The Modular Kernel

Managing Hardware

Using lspic, lsusb, and lscpu

Understanding udev

The /dev Directory

Understanding the /sys File System

Managing the Boot Procedure

Understanding the Boot Procedure

Configuring GRUB2

Starting systemd

Applying Essential Troubleshooting Skills

Working with systemd

Understanding systemd

Managing systemd Services

Working with systemd Targets

Summary

image Part III: Networking SUSE Linux Enterprise Server

image Chapter 9: Configuring Network Access

Manual NIC Configuration

Managing Device Settings

Managing Address Configuration

Managing Routes

Name Resolving

Understanding Wicked

Using YaST for NIC Configuration

Accessing Basic Network Configuration from YaST

Using ethtool Options

Changing Routing and Name Resolution from YaST

Managing Interfaces from YaST

Configuring IPv6

Troubleshooting Networking

Checking the Network Card

Checking DNS

Configuring SSH

Enabling the SSH Server

Using the SSH Client

Using PuTTY on Windows Machines

Configuring Key-Based SSH Authentication

Using Graphical Applications with SSH

Using SSH Port Forwarding

Summary

image Chapter 10: Securing Internet Services: Certificates and SUSE Firewall

Setting Up a Firewall

SUSE Firewall or iptables?

Setting Up a Firewall with SUSE Firewall

Understanding SUSE Firewall Core Components

Using YaST to Set Up a Firewall

Allowed Services

Understanding Masquerading

Setting Up Masquerading

Broadcast

Logging Level

Custom Rules

Checking SUSE Firewall Configuration

Working with SSL Certificates

Understanding SSL

Configuring the YaST Certificate Authority

Creating Certificates

Understanding Certificate Exports

Working with Externally Signed Certificates

Summary

image Chapter 11: Basic Network Services: xinetd, NTP, DNS, DHCP, and LDAP

xinetd

The xinetd Service

The xinetd.conf File

The xinetd Include Files

NTP

Understanding Linux Time

Setting Time on SLES

Managing NTP from the Command Line

Using ntpq and ntpdc for NTP Server Management

DNS

Setting Up DNS with YaST

Manual DNS Server Management

DHCP

Understanding DHCP

Configuring DHCP with YaST

Manual DHCP Configuration

Monitoring and Testing DHCP Functionality

Configuring the DHCP Relay Service

LDAP

Understanding LDAP

Setting Up an LDAP Server with YaST

Populating the LDAP Database

LDAP Client Configuration

Summary

image Chapter 12: Setting Up a LAMP Server

Configuring Apache from YaST

Setting Up a Web Server with Basic Settings

Configuring Virtual Hosts

Apache Modules

Manual Apache Configuration

default-server.conf

httpd.conf

Virtual Host Configuration Files

SSL Configuration Files

Setting Up Authentication

Apache Logs

Configuring the Database Part of the LAMP Server

MariaDB Base Configuration

Performing Simple Database Administration Tasks

Managing Users

MariaDB Backup and Restore

Summary

image Chapter 13: File Sharing: NFS, FTP, and Samba

Introducing the File Sharing Protocols

NFS

Setting Up an NFS Server with YaST

Managing the NFS Service

Creating Shares in /etc/exports

Mounting NFS Shares

FTP

Setting Up an FTP Server from YaST

Manually Configuring the vsftpd Server

Using an FTP Client

About sftp

Samba

Configuring Samba with YaST

Understanding Samba Security Settings

Manually Setting Up Samba

Samba Printing

Summary

image Part IV: Advanced SUSE Linux Enterprise Server Administration

image Chapter 14: Introduction to Bash Shell Scripting

Getting Started: Shell Scripting Fundamentals

Elements of a Good Shell Script

Executing the Script

Working with Variables and Input

Understanding Variables

Variables, Subshells, and Sourcing

Working with Script Arguments

Prompting for Input

Using Command Substitution

Substitution Operators

Changing Variable Content with Pattern Matching

Performing Calculations

Using Control Structures

Using if. . .then. . .else

Case

Using while

Using until

Using for

Summary

image Chapter 15: Performance Monitoring and Optimizing

Performance Monitoring

Interpreting What’s Going On: top

CPU Monitoring with top

Memory Monitoring with top

Understanding swap

Process Monitoring with top

Understanding Linux Memory Allocation

Analyzing CPU Performance

Using vmstat

Analyzing Memory Usage

Monitoring Storage Performance

Understanding Network Performance

Optimizing Performance

Using /proc and sysctl

Using a Simple Performance Optimization Test

CPU Tuning

Tuning Memory

Tuning Storage Performance

Network Tuning

Optimizing Linux Performance Using Cgroups

Summary

image Chapter 16: Creating a Cluster on SUSE Linux Enterprise Server

The Need for High-Availability Clustering

Architecture of the Pacemaker Stack

Before Starting

Hostname Resolution

Configure SSH

Time Synchronization

Configuring Shared Storage

Setting Up an iSCSI Target

Setting Up the Base Components

Networks Without Multicast Support

Understanding crm_mon Output

Using the Cluster Management Tools

CRM Shell

Hawk

Specifying Default Cluster Settings

no-quorum-policy

default-resource-stickiness

stonith-action

Setting Up STONITH

Different Solutions

Setting Up Hypervisor-Based STONITH

Setting Up Shared Disk-Based STONITH

Clustering Resources

Clustering an Apache File Server

Using a Cluster File System

LVM in Cluster Environments

Fine-Tuning the Cluster with Constraints

Managing Resources

Resource Cleanup

Resource Migration

Starting and Stopping Resources

Using Unmanaged State for Maintenance

Use Case: Creating an Open Source SAN with Pacemaker

Configuring RAID 1 over the Network with DRBD

Creating the Configuration

Working with the DRBD Device

Troubleshooting the Disconnect State

Working with Dual Primary Mode

Integrating DRBD in Pacemaker Clusters

Testing

Adding an iSCSI Target to the Open Source SAN

Setting Up the LVM Environment

Setting Up the iSCSI Target in the Cluster

Summary

image Chapter 17: Creating a SLES 12 Installation Server

Understanding the Components

Configuring an Online Repository

Creating the PXE Boot Configuration

Using AutoYaST

Summary

image Chapter 18: Managing SUSE Linux

Preparing SUSE Manager Installation

Installing SUSE Manager

Creating the Base Configuration

Using the Setup Wizard from the Web Console

Managing Package Synchronization

Registering SUSE Manager Clients

Creating Activation Keys

The Bootstrap Script

Troubleshooting and Unregistering Registered Systems

Working with System Groups

Managing Software Channels in SUSE Manager

Understanding Software Staging

Patching and Updating Systems

Using OSA Dispatcher

Managing Configuration with SUSE Manager

Auto-Installation of Systems

Creating Auto-Installation Profiles

Configuring DHCP and TFTP

Using SUSE Manager Monitoring

SUSE Manager Preparation

Preparing the Registered Servers for Monitoring

Analyzing Monitoring

Using SUSE Manager Proxy

Using Organizations

Summary

Index

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset