RHCSA day3 with NFSSERVER nov22

[root@localhost ~]# history
    1  useradd bob
    2  su - bob
    3  find / -user bob
    4  mkdir /root/userfiles; find / -user bob -exec cp {} /root/userfiles/ \;
    5  man find
    6  touch rtp{1..3}
    7  ls
    8  history
    9  git
   10  visudo
   11  export EDITOPR=/bin/nano
   12  visudo
   13  export EDITOR=/bin/nano
   14  visudo
   15  export EDITOR=
   16  visudo
   17  grep linda /etc/passwd
   18  useradd linda
   19  echo password | passwd --stdin linda
   20  su - linda
   21  visudo
   22  su - linda
   23  cd /etc/sudoers.d
   24  vim bob
   25  id student
   26  visudo
   27  cd
   28  curl -O https://raw.githubusercontent.com/sandervanvugt/rhcsa/master/countdown.sh
   29  ls
   30  cat countdown.sh
   31  vim countdown
   32  countdown 12
   33  echo $PATH
   34  ./countdown 12
   35  ls -l countdown
   36  chmod +x countdown
   37  ./countdown 12
   38  ln countdown /usr/bin/
   39  vim /etc/login.defs
   40  cd /etc/skel
   41  ls -al
   42  touch nothideen
   43  cd
   44  useradd lucy
   45  ls -la /home/lucy/
   46  usermod --help | less
   47  passwd --help | less
   48  cat /etc/passwd
   49  usermod -aG wheel bob
   50  usermod --help
   51  vim /etc/group
   52  countdown 16
   53  vim /etc/login.defs
   54  cd /etc/skel/
   55  touch newfile
   56  vim /etc/login.defs
   57  pwd
   58  useradd anna
   59  useradd anouk
   60  useradd lisa
   61  useradd linda
   62  usermod --help
   63  usermod -p password anouk
   64  grep anouk /etc/shadow
   65  for u in anna anouk linda lisa; do echo password | passwd --stdin $u; done
   66  passwd --help
   67  vim /etc/shadow
   68  vim /etc/default/useradd
   69  groupadd profs
   70  groupadd students
   71  usermod -aG profs anna
   72  usermod -aG profs anouk
   73  usermod -aG student linda
   74  usermod -aG student lisa
   75  id linda
   76  usermod -G wheel linda
   77  id linda
   78  usermod -aG student linda
   79  id linda
   80  grep student /etc/group
   81  vim /etc/group
   82  cd /home
   83  ls -l
   84  ls -l /etc/hosts
   85  cd
   86  vim permissions.txt
   87  mkdir /data/sales/2022
   88  mkdir -p /data/sales/2022
   89  cd /data/sales
   90  touch myfile
   91  cd 2022
   92  touch myother
   93  cd ../..
   94  chmod -r 000 data
   95  chmod -r 700 sales
   96  chmod --help
   97  chmod -R 700 sales
   98  ls -ld sales/
   99  chmod -R +x sales
  100  cd sales
  101  ls
  102  ls -l
  103  cd 2022/
  104  ls -l
  105  cd ..
  106  chmod -R -x sales
  107  ls -l sales/
  108  chmod -R +X sales
  109  ls -ld sales/
  110  ls -l sales/
  111  history
  112  mkdir profs
  113  mkdir students
  114  chown :profs profs
  115  ls -l
  116  chgrp sales sales
  117  chgrp students students
  118  ls -l
  119  chmod 770 *
  120  ls -l
  121  chmod o+w,g-rx sales
  122  ls -l
  123  su - anna
  124  chmod g+s /data/profs
  125  su - anna
  126  su - anouk
  127  chmod +t /data/profs
  128  su - anouk
  129  umask
  130  su - anna
  131  countdown 14
  132  cd
  133  mkdir -p /mydata/profs
  134  mkdir -p /mydata/students
  135  cd /mydata
  136  chgrp students students
  137  chgrp profs profs
  138  chmod 770 *
  139  #umask 007
  140  poweroff
  141  lsblk
  142  poweroff
  143  fdisk /dev/sda
  144  mount /dev/sda3 /mnt
  145  mkfs.xfs /dev/sda3
  146  mount /dev/sda3 /mnt
  147  cd /mnt
  148  touch hello_partition3
  149  mkdir /whatever
  150  vim /etc/fstab
  151  mount -a
  152  mount
  153  fdisk /dev/sda
  154  lsblk
  155  mkfs.ext4 /dev/sda5
  156  mkfs.xfs /dev/sda6
  157  mkdir /ext4 /xfs
  158  vim /etc/fstab
  159  vim /etc/default//grub
  160  grub2-mkconfig -o /boot/grub2/grub.cfg
  161  reboot
  162  journalctl -xb
  163  lsblk
  164  vim /etc/fstab
  165  history
  166  poweroff
  167  cat /etc/fstab
  168  lsblk
  169  vim /etc/fstab
  170  lsblk
  171  fdisk /dev/sdc
  172  blkid
  173  vim /etc/fstab
  174  findmnt --verify
  175  vim /etc/fstab
  176  findmnt --verify
  177  vim /etc/fstab
  178  swapon -a
  179  vim /etc/fstab
  180  history
  181  findmnt --verify
  182  reboot
  183  exit
  184  which init
  185  ls -l /sbin/init
  186  date
  187  hwclock --systohc
  188  timedatectl status
  189  timedatectl list-timezones
  190  timedatectl set-timezone Africa/Lusaka
  191  timedatectl status
  192  vim /etc/chrony.conf
  193  systemctl restart chronyd
  194  chronyc sources
  195  history
  196  exit
  197  history
  198  exit
  199  lsblk
  200  fdisk /dev/sdb
  201  lsblk
  202  pvcreate /dev/sdb7
  203  pvs
  204  vgcreate --help | less
  205  vgcreate -s 8M vgdata /dev/sdb7
  206  vgs
  207  vgdisplay vgdata
  208  lvcreate -n lvdata -L 1G vgdata
  209  echo $(( 127 * 8 ))
  210  lvcreate -n lvdata -l 100%FREE vgdata
  211  lvs
  212  mkfs.ext4 /dev/vgdata/lvdata
  213  mkdir /lvdata
  214  vim /etc/fstab
  215  mount -a
  216  mount
  217  tail -1 /etc/fstab
  218  ls -l /dev/mapper/vgdata-lvdata /dev/vgdata/lvdata
  219  history
  220  lsblk
  221  vgcreate vgfiles /dev/sdb8
  222  lvcreate -l 255 -n lvfiles /dev/vgfiles
  223  mkfs.ext4 /dev/vgfiles/lvfiles
  224  df -h
  225  mkdir /lvfiles
  226  vim /etc/fstab
  227  mount -a
  228  df -h
  229  vgs
  230  vgextend vgfiles /dev/sdb9
  231  vgs
  232  lvextend -r -l 50%FREE /dev/vgfiles/lvfiles
  233  lvextend -r -l +50%FREE /dev/vgfiles/lvfiles
  234  df -h
  235  countdown 1
  236  history
  237  history -w
  238  lsblk
  239  fdisk /dev/sdb
  240  lsblk
  241  pvcreate /dev/sdb7
  242  pvs
  243  vgcreate --help | less
  244  vgcreate -s 8M vgdata /dev/sdb7
  245  vgs
  246  vgdisplay vgdata
  247  lvcreate -n lvdata -L 1G vgdata
  248  echo $(( 127 * 8 ))
  249  lvcreate -n lvdata -l 100%FREE vgdata
  250  lvs
  251  mkfs.ext4 /dev/vgdata/lvdata
  252  mkdir /lvdata
  253  vim /etc/fstab
  254  mount -a
  255  mount
  256  tail -1 /etc/fstab
  257  ls -l /dev/mapper/vgdata-lvdata /dev/vgdata/lvdata
  258  history
  259  lsblk
  260  vgcreate vgfiles /dev/sdb8
  261  lvcreate -l 255 -n lvfiles /dev/vgfiles
  262  mkfs.ext4 /dev/vgfiles/lvfiles
  263  df -h
  264  mkdir /lvfiles
  265  vim /etc/fstab
  266  mount -a
  267  df -h
  268  vgs
  269  vgextend vgfiles /dev/sdb9
  270  vgs
  271  lvextend -r -l 50%FREE /dev/vgfiles/lvfiles
  272  lvextend -r -l +50%FREE /dev/vgfiles/lvfiles
  273  df -h
  274  countdown 1
  275  history
  276  history -w
  277  fdisk /dev/sdb
  278  fdisk -l /dev/sdb
  279  vgcreate vgdemo /dev/sdb10
  280  lvcreate -L 500M -n lvdemo /dev/vgdemo
  281  vgs
  282  vgextend vgdemo /dev/sdb11
  283  pvs
  284  vgs
  285  lvextend -L +250M /dev/vgdemo/lvdemo /dev/sdb11
  286  pvs
  287  mkfs.ext4 /dev/vgdemo/lvdemo
  288  mount /dev/vgdemo/lvdemo /mnt
  289  df -h
  290  dd if=/dev/zero of=/mnt/bigfile bs=1M count=550
  291  pvs
  292  pvmove -v /dev/sdb11 /dev/sdb10
  293  pvs
  294  vgreduce vgdemo /dev/sdb11
  295  vgs
  296  countdown 15
  297  getenforce
  298  setenforce permissive
  299  getenforce
  300  setenforce disabled
  301  reboot
  302  getenforce
  303  setenforce enforcing
  304  reboot
  305  echo STARTING SELINUX DEMO
  306  dnf install httpd
  307  systemctl start httpd
  308  ps Zaux | grep http
  309  cd /var/www
  310  ls -Z
  311  cd html
  312  vim index.html
  313  systemctl restart httpd
  314  curl localhost
  315  getenforce
  316  vim /etc/httpd/conf/httpd.conf
  317  mkdir /web
  318  vim /web/index.html
  319  systemctl restart httpd
  320  curl localhost
  321  getenforce
  322  setenforce permissive
  323  curl localhost
  324  setenforce enforcing
  325  grep AVC /var/log/audit/audit.log
  326  ls -Zd /var/www/html
  327  man semanage-fcontext
  328  # semanage fcontext -a -t httpd_sys_content_t "/web(/.*)?"
  329         # restorecon -R -v /web
  330  semanage fcontext -a -t httpd_sys_content_t "/web(/.*)?"
  331  ls -dZ /web
  332  restorecon -Rv /web
  333  curl localhost
  334  getenforce
  335  history
  336  cd /etc/selinux/targeted/contexts/files/
  337  ls
  338  cat file_contexts.local
  339  grep -A 20 ^DocumentRoot /etc/httpd/conf/httpd.conf
  340  countdown 13
  341  cp /etc/hosts ~
  342  ls -Z ~/hosts
  343  cp ~/hosts /web/
  344  ls -Z /web/hosts
  345  rm -f /web/hosts
  346  mv ~/hosts /web/
  347  ls -lZ /web/
  348  restorecon -Rv /web
  349  semanage fcontext -l -C
  350  man -k _selinux
  351  dnf search selinux
  352  dnf install selinux_policy_doc
  353  dnf install selinux-policy-doc
  354  man -k _selinux
  355  man -k _selinux | wc
  356  man httpd_selinux
  357  vim /etc/httpd/conf/httpd.conf
  358  systemctl restart httpd
  359  systemctl status httpd.service
  360  setenforce permissive
  361  systemctl restart httpd
  362  grep AVC /var/log/audit/audit.log
  363  man semanage-port
  364  #semanage port -a -t http_port_t -p tcp 82
  365  semanage port -a -t http_port_t -p tcp 82
  366  setenforce enforcing
  367  systemctl restart httpd
  368  ps aux | grep http
  369  ss -tunap
  370  getsebool -a | wc
  371  getsebool -a | grep ftp
  372  setsebool -P ftpd_anon_write on
  373  dnf provides */sealert
  374  journalctl | grep sealert
  375  sealert -l 67c9ceac-7db2-4ec5-a04e-078aa410cf5c | less
  376  journalctl | grep sealert
  377  journalctl | grep sealert | less
  378  sealert -l a9161c4a-f92d-4198-b94c-9e366d009115 | less
  379  countdown 1
  380  cd /boot
  381  ls
  382  find . -name "grub.cfg"
  383  reboot
  384  touch hh
  385  mount -o remount,rw /
  386  systemctl isolate graphical.target
  387  lsblk
  388  df -h
  389  stratis pool list
  390  vim /etc/hosts
  391  ssh student@nfsserver
  392  dnf install nfs-utils
  393  showmount -e nfsserver
  394  mount nfsserver:/share /mnt
  395  mount nfsserver:/nfsshare /mnt
  396  mount nfsserver:/nfsdata /mnt
  397  mount
  398  exit
  399  dnf install -y autofs
  400  vim /etc/auto.master
  401  vim /etc/auto.misc
  402  vim /etc/auto.master
  403  vim /etc/auto.files
  404  showmount -e nfsserver
  405  vim /etc/auto.files
  406  systemctl restart autofs
  407  ls /
  408  cd /files
  409  ls -a
  410  cd data
  411  mount
  412  vim /etc/auto.master
  413  vim /etc/auto.users
  414  systemctl restart autofs
  415  cd /users
  416  cd ldapuser1
  417  cd ..
  418  cd ldapuser2
  419  exit
  420  history

######NFSSERVER
[root@nfsserver ~]# history
    1  vim /etc/default/grub
    2  grub2-mkconfig -o /boot/grub2/grub.cfg
    3  reboot
    4  hostnamectl set-hostname nfsserver.example.com
    5  exit
    6  dnf install nfs-utils
    7  mkdir -p /nfsdata /home/ldap/ldapuser{1..9}
    8  vim /etc/exports
    9  systemctl enable --now nfs-server
   10  showmount -e localhost
   11  for i in nfs mountd rpc-bind; do firewall-cmd --add-service $i --permanent; done
   12  firewall-cmd --reload
   13  exit
   14  history