Linux on it-grossniklaus.ch

Alte Kernel gleich entfernen (package-cleanup --oldkernels)

Mon, 01 Jan 0001 00:00:00 +0000

welche Kernel haben wir zurzeit installiert?

rpm -q kernel

falls package-cleanup nicht installiert

sudo yum install yum-utils

alte Kernel entfernen

sudo package-cleanup --oldkernels --count=2

# in Zukunft immer automatisch entfernen
# /etc/yum.conf
installonly_limit=2

CentOS-7 in VirtualBox 5.2

Mon, 01 Jan 0001 00:00:00 +0000

Download

CentOS iso download

download (www.centos.org)

=> http://isoredirect.centos.org/centos/7/isos/x86_64/
=> http://linuxsoft.cern.ch/centos/7/isos/x86_64/ \

Icon  Name                                    Last modified      Size  Description
[DIR] Parent Directory                                             -
[TXT] 0_README.txt                            09-May-2018 22:16  2.4K
[   ] CentOS-7-x86_64-DVD-1804.iso            03-May-2018 23:07  4.2G
[   ] CentOS-7-x86_64-DVD-1804.torrent        11-May-2018 17:43   84K
[   ] CentOS-7-x86_64-Everything-1804.iso     07-May-2018 14:55  8.8G
[   ] CentOS-7-x86_64-Everything-1804.torrent 11-May-2018 17:43  176K
[   ] CentOS-7-x86_64-LiveGNOME-1804.iso      02-May-2018 20:21  1.3G
[   ] CentOS-7-x86_64-LiveGNOME-1804.torrent  11-May-2018 17:43   52K
[   ] CentOS-7-x86_64-LiveKDE-1804.iso        02-May-2018 20:28  1.8G
[   ] CentOS-7-x86_64-LiveKDE-1804.torrent    11-May-2018 17:43   71K
[   ] CentOS-7-x86_64-Minimal-1804.iso        03-May-2018 23:07  906M
[   ] CentOS-7-x86_64-Minimal-1804.torrent    11-May-2018 17:43   36K
[   ] CentOS-7-x86_64-NetInstall-1804.iso     03-May-2018 22:34  495M
[   ] CentOS-7-x86_64-NetInstall-1804.torrent 11-May-2018 17:43   20K
[TXT] sha1sum.txt                             09-May-2018 22:02  454
[TXT] sha1sum.txt.asc                         11-May-2018 17:12  1.3K
[TXT] sha256sum.txt                           09-May-2018 21:59  598
[TXT] sha256sum.txt.asc                       11-May-2018 17:12  1.4K

Erklärung der Files: 0_README.txt (linuxsoft.cern.ch)

Ein Paket einfrieren (apt-mark)

Mon, 01 Jan 0001 00:00:00 +0000

sudo apt-mark hold linux-image-3.2.0-4-amd64

Entfernen verwaister Konfigurations-Files (dpkg)

Mon, 01 Jan 0001 00:00:00 +0000

# Übersicht
dpkg -l | grep -E '^[^i]'

dpkg -l | awk  '/^rc/{print $2;}' | xargs --no-run-if-empty dpkg -P

EPEL Repository

Mon, 01 Jan 0001 00:00:00 +0000

http://www.cyberciti.biz/faq/installing-rhel-epel-repo-on-centos-redhat-7-x/

sudo yum install epel-release

danach z.B.:

sudo yum install phpMyAdmin
sudo yum install rlwrap

Epoch als Datum darstellen (date)

Mon, 01 Jan 0001 00:00:00 +0000

Wikipedia Unix Time

date -d @1435225258

Installation ohne die Recommends (apt-get)

Mon, 01 Jan 0001 00:00:00 +0000

nmap als Beispiel (=> kein X11 Zeugs)

sudo apt-get --no-install-recommends install nmap

Installation Oracle-xe-11.2

Mon, 01 Jan 0001 00:00:00 +0000

export LANG=C
sudo yum update

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# MATE benötigt weniger Resourcen als GNOME
sudo yum groupinstall "X Window system"
sudo yum install epel-release
sudo yum --enablerepo=epel -y groups install "MATE Desktop"
sudo systemctl set-default graphical.target

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# etwas Komfort
sudo yum install bash-completion
sudo yum install emacs mc
sudo yum install nmap wget
# sudo yum install epel-release
sudo yum install bash-completion-extras


sudo sh -c "echo '
[google-chrome]
name=google-chrome - \$basearch
baseurl=http://dl.google.com/linux/chrome/rpm/stable/\$basearch
enabled=1
gpgcheck=1
gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub
' > /etc/yum.repos.d/google-chrome.repo"

# sudo yum info google-chrome-stable
sudo yum install google-chrome-stable 



sudo rpm --import https://packages.microsoft.com/keys/microsoft.asc
sudo sh -c 'echo -e "[code]\nname=Visual Studio Code\nbaseurl=https://packages.microsoft.com/yumrepos/vscode\nenabled=1\ngpgcheck=1\ngpgkey=https://packages.microsoft.com/keys/microsoft.asc" > /etc/yum.repos.d/vscode.repo'
yum check-update
sudo yum install code 

# für CentOS (aber nicht CERN)
# wget https://centos7.iuscommunity.org/ius-release.rpm
# rpm -Uvh ius-release.rpm
# yum install git2u

sudo yum install git

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# virtualbox tools
sudo yum install dkms
sudo yum install kernel-headers kernel-devel

# virtualbox tools => use
sudo usermod --append --groups vboxsf zfi

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# OracleXE prerequisites
cat /proc/sys/kernel/shmmax
cat /proc/sys/kernel/shmall

sudo sh -c 'echo -e "kernel.shmmax=2147483648" >> /etc/sysctl.conf'
sudo sh -c 'echo -e "kernel.shmall=2097152"    >> /etc/sysctl.conf'
sudo sysctl -p  /etc/sysctl.conf


# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# swap (file)
sudo mkdir /var/swap/
#sudo dd if=/dev/zero of=/var/swap/swapfile bs=1024 count=524288
sudo dd if=/dev/zero of=/var/swap/swapfile bs=1024 count=2097152
sudo chmod 600 /var/swap/swapfile
sudo mkswap    /var/swap/swapfile
sudo swapon    /var/swap/swapfile

sudo sh -c 'echo -e "/var/swap/swapfile  swap swap  pri=1000 0 0" >> /etc/fstab'
sudo swapon

sudo yum install libaio bc unzip flex net-tools 
unzip -q oracle-xe-11.2.0-1.0.x86_64.rpm.zip
sudo rpm -ivh Disk1/oracle-xe-11.2.0-1.0.x86_64.rpm
sudo /etc/init.d/oracle-xe configure
sudo usermod --append --groups dba zfi
rm -rf Disk1/

cd /u01/app/oracle/product/11.2.0/xe/bin
. ./oracle_env.sh
. /u01/app/oracle/product/11.2.0/xe/bin/oracle_env.sh
sqlplus /nolog
exit

sqlplus / as sysdba
ALTER SYSTEM SET MEMORY_TARGET     = 800M SCOPE=spfile;
ALTER SYSTEM SET MEMORY_MAX_TARGET = 930M SCOPE=spfile;
ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;

startup force
show parameter target

unzip apex_18.1.zip
sudo mv apex/ /opt/

cd /opt/apex
sqlplus / as sysdba
@/u01/app/oracle/product/11.2.0/xe/apex/apxremov.sql
exit

sqlplus / as sysdba
@apexins SYSAUX SYSAUX TEMP /i/
exit

sqlplus / as sysdba
@apex_epg_config.sql /opt
exit

sqlplus / as sysdba
@apxchpwd
ADMIN
myPassword

sqlplus / as sysdba
SELECT version FROM dba_registry where comp_id='APEX';
exit

# The structure of the link to the Application Express administration services is as follows:
# http://host:port/pls/apex/apex_admin (Oracle HTTP Server with mod_plsql)
# http://host:port/apex/apex_admin     (Oracle XML DB HTTP listener with the embedded PL/SQL gateway)
# http://host:port/apex/apex_admin     (Oracle REST Data Services)
#  
# The structure of the link to the Application Express development interface is as follows:
# http://host:port/pls/apex (Oracle HTTP Server with mod_plsql)
# http://host:port/apex     (Oracle XML DB HTTP listener with the embedded PL/SQL gateway)
# http://host:port/apex     (Oracle REST Data Services)

sqlplus / as sysdba
EXEC DBMS_XDB.SETLISTENERLOCALACCESS(FALSE);
exit

# https://tecadmin.net/install-and-configure-haproxy-on-centos/
sudo yum install haproxy
sudo mkdir /etc/haproxy/ssl
sudo openssl req -x509 -nodes -days 3000 -newkey rsa:2048 -keyout /etc/haproxy/ssl/server.key -out /etc/haproxy/ssl/server.crt
sudo sh -c 'cat  /etc/haproxy/ssl/server.key /etc/haproxy/ssl/server.crt >  /etc/haproxy/ssl/server.pem'

# neues haproxy.cfg
haproxy -c -f /etc/haproxy/haproxy.cfg

sudo emacs /etc/rsyslog.conf
$ModLoad imudp
$UDPServerRun 514
$UDPServerAddress 127.0.0.1

sudo emacs /etc/rsyslog.d/haproxy.conf
local2.*    /var/log/haproxy.log

# chkconfig haproxy on
systemctl enable haproxy
systemctl start haproxy

service rsyslog restart
service haproxy restart

# sqldeveloper benötigt javaFX => openJDK geht nicht mehr (für CentOS)
sudo rpm -Uvh jdk-8u172-linux-x64.rpm
sudo rpm -Uvh sqldeveloper-18.2.0.183.1748-1.noarch.rpm
sudo rpm -Uvh datamodeler-18.2.0.179.0756-1.noarch.rpm

sqldeveloper
# => /usr/java/default

unzip sqlcl-18.2.0.zip 
sudo mv sqlcl /opt/

IUS Community Project

Mon, 01 Jan 0001 00:00:00 +0000

Durch das Einbinden von “Third Party Repositories” kann ein System gefährdet werden:

was rechtfertigt das Vertrauen?
welche Software wird ausgetascht?
ist der entstehende “Mix” wirklich zueinander kompatibel?

Ein Projekt scheint mir die naheliegenden Bedenken besonders ernst zu nehmen:

Sicher wird man ein zertifiziertes produktives System (RHES) nicht gefährden wollen - aber es kann sinnvoll sein ein CentOS basiertes System “Cherry Picking”-artig mit neueren Software-Komponenten zu versehen.

mariadb

Mon, 01 Jan 0001 00:00:00 +0000

sudo yum install mariadb-server mariadb
sudo systemctl start mariadb.service
sudo systemctl enable mariadb.service

sudo yum install mysql-connector-java