RHCSA day3 march 22

    1  mkdir /sda6
    2  vim /etc/fstab
    3  mount -a
    4  cp /etc/passwd /sda5
    5  cp /etc/motd /sda6
    6  history
    7  lsblk
    8  umount /dev/sda5
    9  vim /etc/fstab
   10  fdisk /dev/sda
   11  reboot
   12  journalctl -xb
   13  touch bb
   14  lsblk
   15  vim /etc/fstab
   16  blkid
   17  blkid | awk '/sda5/ { print $2 }'
   18  blkid | awk '/sda5/ { print $2 }' >> /etc/fstab
   19  vim /etc/fstab
   20  mount -a
   21  reboot
   22  blkid
   23  tune2fs --help
   24  tune2fs -L cow /dev/sda5
   25  blkid
   26  xfs_admin --help
   27  xfs_admin -L goat /dev/sda3
   28  umount /dev/sda3
   29  xfs_admin -L goat /dev/sda3
   30  mount -a
   31  blkid
   32  groupadd student
   33  groupadd students
   34  groupadd profs
   35  vim /etc/login.defs
   36  usermod -aG students lisa
   37  usermod -aG students linda
   38  id lisa
   39  usermod -aG profs anna
   40  usermod -aG profs anouk
   41  mkdir -p /data/profs /data/students
   42  cd /data
   43  ls -l
   44  usermod --help
   45  mkdir --help
   46  chown anna:students students/
   47  chown anna:profs profs/
   48  ls -l
   49  chmod 3770 *
   50  ls -l
   51  cd
   52  df -h
   53  dd if=/dev/zero of=/diskfile.img bs=1 count=2048
   54  dd if=/dev/zero of=/diskfile.img bs=1M count=2048
   55  ls -l /diskfile.img
   56  losetup -fP /diskfile.img
   57  losetup -a
   58  lsblk
   59  reboot
   60  lsblk
   61  losetup -a
   62  lsblk
   63  losetup -fP /diskfile.img
   64  lsblk
   65  ssh [email protected]
   66  cd /data
   67  getfacl sales
   68  cd sales
   69  ls
   70  ls -l
   71  cd ..
   72  setfacl -m -R g:sales:rx /data/sales
   73  setfacl -R -m g:sales:rx /data/sales
   74  ls -l sales/
   75  getfacl sales/lisa1
   76  man setfacl
   77  setfacl -R -x g:sales /data/sales
   78  ls -l sales
   79  setfacl -R -m g:account:rx /data/sales
   80  ls -l sales/
   81  getfacl sales/lisa1
   82  setfacl -R -x g:account /data/sales
   83  setfacl -R -m g:account:rX /data/sales
   84  ls -l sales/
   85  getfacl sales
   86  getfacl sales/lisa1
   87  setfacl -m d:g:account:rx /data/sales
   88  getfacl sales
   89  touch sales/root1
   90  getfacl sales/root1
   91  countdown 16
   92  df -h
   93  lsblk
   94  dd if=/dev/sr0 of=/rhel85.iso bs=1M
   95  df -h
   96  mkdir /repo
   97  vim /etc/fstab
   98  mount -a
   99  cd /repo
  100  ls
  101  cd BaseOS/
  102  ls
  103  ls Packages/
  104  ls repodata/
  105  cd ..
  106  cd
  107  yum repolist
  108  cd /etc/yum.repos.d/
  109  vim base.repo
  110  vim appstream.repo
  111  vim base.repo
  112  yum repolist
  113  vim appstream.repo
  114  yum repolist
  115  yum search btrfs
  116  yum search zsh
  117  yum install zsh
  118  seinfo
  119  yum provides */seinfo
  120  history
  121  cd
  122  yum module list
  123  yum module provides httpd
  124  yum module info postgresql
  125  yum module info postgresql | less
  126  yum module info --profile postgresql
  127  yum module list postgresql
  128  yum module install posgresql:9.6
  129  yum module install postgresql:9.6
  130  yum module install postgresql:9.6/server
  131  yum module enable postgresql:9.6
  132  man ifconfig
  133  ip a
  134  ip addr add dev ens160 10.0.0.10/24
  135  ip a
  136  ping 10.0.0.10
  137  ifconfig
  138  cat /etc/resolv.conf
  139  ip route show
  140  ip
  141  countdown 12
  142  df -h
  143  cd /repo
  144  ls
  145  ls BaseOS/Packages/
  146  ls BaseOS/repodata/
  147  cd /etc/yum.repos.d/
  148  cat base.repo
  149  cat appstream.repo
  150  yum repolist
  151  cd
  152  history
  153  systemctl status NetworkManager
  154  nmtui
  155  ip a
  156  fdisk /dev/sda
  157  lsblk
  158  pvcreate /dev/sda6
  159  xxd /dev/sda6 | less
  160  pvs
  161  vgcreate vgdata /dev/sda6
  162  vgs
  163  pvs
  164  vgremove vgdata
  165  vgs
  166  vgcreate --help | less
  167  vgcreate -s 8m vgdata /dev/sda6
  168  vgdisplay vgdata
  169  lvcreate -L 2G -n lvdata vgdata
  170  echo $(( 256 * 8 ))
  171  vgs
  172  echo $(( 255 * 8 ))
  173  lvcreate -l 255 -n lvdata vgdata
  174  lvs
  175  mkfs.xfs /dev/vgdata/lvdata
  176  mkdir /lvdata
  177  vim /etc/fstab
  178  mount -a
  179  mount | tail -1
  180  ls -l /dev/mapper/vgdata-lvdata /dev/vgdata/lvdata
  181  xxd /dev/sda6 | less
  182  history
  183  tail -1 /etc/fstab
  184  df -h
  185  vgs
  186  pvs
  187  gdisk /dev/nvme0n1
  188  lsblk
  189  vgextend rhel /dev/nvme0n1p1
  190  vgs
  191  lvextend -r -l +100%FREE /dev/rhel/root
  192  df -h
  193  xfs_growfs /dev/rhel/root
  194  countdown 12
  195  yum install -y httpd
  196  systemctl status httpd
  197  systemctl enable --now httpd
  198  systemctl status httpd
  199  systemctl stop httpd
  200  systemctl get-default
  201  systemctl set-default multi-user.target
  202  systemctl get-default
  203  reboot
  204  touch ccc
  205  mount
  206  mount -o remount,rw /
  207  touch hhh
  208  systemctl list-units
  209  systemctl list-units
  210  systemctl isolate rescue.target
  211  systemctl list-units
  212  systemctl reboot
  213  systemctl set-default graphical.target
  214  reboot
  215  journalctl
  216  cd /var/log
  217  ls
  218  mkdir journal
  219  ls journal/
  220  systemctl daemon-reload
  221  ls journal/
  222  vim  /etc/systemd/journald.conf
  223  journalctl
  224  sysctl -a
  225  sysctl -a | wc
  226  systemctl status tuned
  227  tuned-adm --help
  228  tuned-adm list
  229  tuned-adm profile_info desktop
  230  tuned-adm profile desktop
  231  tuned-adm list
  232  cd /usr/lib/tuned/
  233  ls
  234  cd desktop/
  235  ls
  236  vim tuned.conf
  237  cd
  238  free -m
  239  tuned-adm list
  240  reboot
  241  free -m
  242  vmstat 2 5
  243  gdisk /dev/nvme0n1
  244  lsblk
  245  partprobe
  246  lsblk
  247  free -m
  248  mkswap /dev/nvme0p2
  249  mkswap /dev/nvme0n1p2
  250  free -m
  251  swapon /dev/nvme0n1p2
  252  free -m
  253  vim /etc/fstab
  254  history
  255  reboot
  256  history
  257  yum install stratis-cli stratisd
  258  systemctl enable --now stratisd
  259  systemctl status stratisd
  260  lsblk
  261  fdisk /dev/sdb
  262  fdisk /dev/sdc
  263  lsblk
  264  stratis pool create mypool /dev/sdb1
  265  stratis pool list
  266  stratis fs create mypool myfs1
  267  stratis fs create mypool myfs2
  268  stratis fs list mypool
  269  stratis fs list mypool | awk '/myfs1/ { print $10 }'
  270  stratis fs list mypool | awk '/myfs1/ { print $10 }' >> /etc/fstab
  271  stratis fs list mypool | awk '/myfs2/ { print $10 }' >> /etc/fstab
  272  mkdir /myfs1 /myfs2
  273  vim /etc/fstab
  274  mount -a
  275  man 5 fstab
  276  man -k stratis
  277  mount
  278  df -h
  279  stratis pool list
  280  stratis fs list mypool
  281  cd /run/systemd/system/
  282  ls
  283  cd ../generator/
  284  ls
  285  lsblk
  286  cd
  287  yum install vdo kmod-kvdo
  288  man vdo
  289  #vdo create --name=vdo0 --device=/dev/sdb1 --vdoLogicalSize=10T
  290  vdo create --name=vdo1 --device=/dev/sdb2 --vdoLogicalSize=1T
  291  mkfs.xfs -K /dev/mapper/vdo1
  292  ls -l /dev/mapper/vdo1
  293  cd /usr/share/doc/vdo/examples/
  294  ls
  295  cd systemd/
  296  ls
  297  pwd
  298  vim VDO.mount.example
  299  mkdir /vdo1
  300  cp VDO.mount.example /etc/systemd/system/vdo1.mount
  301  cd /etc/systemd/system/
  302  vim vdo1.mount
  303  systemctl enable --now vdo1.mount
  304  systemctl status vdo1.mount
  305  mount
  306  reboot
  307  mount
  308  cd /run/systemd/generator/
  309  ls
  310  vim myfs1.mount
  311  cd /dev/disk
  312  ls
  313  ls -l by-uuid/
  314  blkid
  315  cd
  316  cd /run/systemd/generator/
  317  ls
  318  vim sda3.mount
  319  cd
  320  systemctl daemon-reload
  321  showmount -e 192.168.29.241
  322  mount 192.168.29.241:/myshare /mnt
  323  cd /mnt
  324  ls
  325  touch file100000
  326  cd
  327  ls -Z
  328  ps Zaux | grep http
  329  cd /var/www/
  330  ls -Z
  331  getenforce
  332  vim /etc/sysconfig/selinux
  333  cd
  334  mkdir /web
  335  vim /web/index.html
  336  vim /etc/httpd/conf/httpd.conf
  337  systemctl restart httpd
  338  curl localhost
  339  q!
  340  getenforce
  341  setenforce permissive
  342  curl localhost
  343  vim /etc/httpd/conf/httpd.conf
  344  systemctl restart httpd
  345  curl localhost
  346  getenforce
  347  setenforce enforcing
  348  curl localhost
  349  less /var/log/audit/audit.log
  350  grep AVC /var/log/audit/audit.log
  351  grep http /var/log/audit/audit.log
  352  reboot
  353  systemctl status auditd
  354  systemctl status auditd.service
  355  systemctl start auditd
  356  systemctl status auditd.service
  357  systemctl status httpd
  358  getenforce
  359  curl localhost
  360  grep AVC /var/log/audit/audit.log
  361  ls -ldZ /var/www/html
  362  ls -Z /web
  363  man semanage
  364  man semanage-fcontext
  365   # semanage fcontext -a -t httpd_sys_content_t "/web(/.*)?"
  366         # restorecon -R -v /web
  367  semanage fcontext -a -t httpd_sys_content_t "/web(/.*)?"
  368  ls -Zd /web
  369  restorecon -Rv /web
  370  curl localhost
  371  history
  372  ls -dZ /var/www/html/
  373  countdown 13
  374  history
  375  cd /etc/selinux/
  376  ls
  377  cd targeted/
  378  ls
  379  cd contexts/
  380  ls
  381  cd files
  382  pwd
  383  ls
  384  cat file_contexts.local
  385  cd
  386  man -k _selinux
  387  yum search selinux
  388  yum install -y selinux-policy-doc
  389  man -k _selinux
  390  man -k _selinux | wc
  391  man -k _selinux | grep http
  392  man apache_selinux
  393  journalctl | grep sealert
  394  sealert -l ceecd0da-9ddd-4c47-988e-c643a601d77b | less
  395  grep AVC /var/log/audit/audit.log
  396  getsebool -a | grep http
  397  setsebool -P httpd_use_nfs on
  398  ls -Z /etc/hosts
  399  cp /etc/hosts .
  400  rm /etc/hosts
  401  ls -Z hosts
  402  cp hosts /etc/hosts
  403  ls -Z /etc/hosts
  404  rm /etc/hosts
  405  mv hosts /etc/hosts
  406  ls -Z /etc/hosts
  407  restorecon /etc/hosts -v
  408  vim /etc/httpd/conf/httpd.conf
  409  systemctl restart httpd
  410  systemctl status httpd
  411  getenforce
  412  setenforce permissive
  413  systemctl restart httpd
  414  setenforce enforcing
  415  journalctl | grep sealert
  416  sealert -l 70cc8934-3dab-47b0-a2bb-f64630549047 | less
  417  semanage port -a -t http_port_t -p tcp 82
  418  getenforce
  419  systemctl restart httpd
  420  systemctl status httpd
  421  ss -Ztuna
  422  systemctl status firewalld
  423  firewall-cmd --list-all
  424  firewall-cmd --get-services
  425  firewall-cmd --add-service http
  426  firewall-cmd --add-service https
  427  firewall-cmd --list-all
  428  systemctl restart firewalld
  429  firewall-cmd --list-all
  430  firewall-cmd --add-service https --permanent
  431  firewall-cmd --add-service http --permanent
  432  firewall-cmd --list-all
  433  systemctl restart firewalld
  434  firewall-cmd --list-all
  435  cd /usr/lib/firewalld
  436  ls
  437  cd services/
  438  ls
  439  vim http.xml
  440  cp http.xml /etc/firewalld/services/sander.xml
  441  vim /etc/firewalld/services/sander.xml
  442  systemctl restart firewalld
  443  firewall-cmd --get-services
  444  cd ..
  445  ls
  446  cd zones/
  447  pwd
  448  ls
  449  cat work.xml
  450  cat public.xml
  451  cd
  452  vim /etc/default/grub
  453  grub2-mkconfig -o /boot/grub2/grub.cfg
  454  reboot
  455  history
  456  sleep 120; countdown 11
  457  systemctl status autofs
  458  yum install -y autofs
  459  systemctl enable --now autofs
  460  vim /etc/auto.master
  461  ls /
  462  vim /etc/auto.misc
  463  showmount -e 192.168.29.141
  464  showmount -e 192.168.29.241
  465  vim /etc/auto.master
  466  vim /etc/auto.nfsfiles
  467  systemctl restart autofs
  468  ls /
  469  cd /nfsfiles/
  470  mount
  471  ls -a
  472  cd data
  473  cat /etc/auto.nfsfiles
  474  showmount -e 192.168.29.241
  475  vim /etc/auto.nfsfiles
  476  systemctl restart autofs
  477  cd data
  478  ls
  479  pwd\
  480  pwd
  481  mount
  482  cd
  483  showmount -e 192.168.29.241
  484  vim /etc/auto.master
  485  vim auto.ldap
  486  vim /etc/auto.ldap
  487  systemctl restart autofs
  488  cd /home
  489  ls
  490  cd ldap
  491  ls
  492  cd ldapuser1
  493  pwd
  494  reboot
  495  mount -o remount,rw /
  496  cd /
  497  ls
  498  ls -a
  499  rm .autorelabel
  500  reboot
  501  history