RHCSA day3 jan22

###### setting up an NFS server
   19  mkdir /data
   20  cd /data
   21  touch file{1..10}
   22  ls
   23  cd ..
   24  mkdir -p /home/ldap/ldapuser{1..10}
   25  ls /home/ldap
   26  vim /etc/exports
   27  systemctl disable --now firewalld
   28  systemctl enable --now nfs-server
   29  systemctl status nfs-server
   30  showmount -e localhost
   31  history
[root@control /]# cat /etc/exports
/data	*(rw,no_root_squash)
/home/ldap	*(rw,no_root_squash)

###### all other commands
[root@server ~]# history
    1  su - lisa
    2  history
    3  lsblk
    4  poweroff
    5  lsblk
    6  su - linda
    7  xxd -l 512 /dev/nvme0n1
    8  fdisk /dev/nvme0n1
    9  lsblk
   10  mount /dev/nvme0n1p3 /mnt
   11  mkfs.xfs /dev/nvme0n1p3
   12  mount /dev/nvme0n1p3 /mnt
   13  mount
   14  cd /mnt
   15  touch hellomount
   16  ls
   17  history
   18  fdisk /dev/nvme0n1
   19  fdisk /dev/nvme0n1p1
   20  fdisk /dev/nvme0n1
   21  lsblk
   22  cat /proc/partitions
   23  partprobe
   24  reboot
   25  lsblk
   26  mount
   27  df -h
   28  mkdir /mypart
   29  vim /etc/fstab
   30  mount -a
   31  df -h
   32  mkfs.ext4 /dev/nvme0n1p5
   33  mkfs.xfs /dev/nvme0n1p6
   34  mkdir /xfs
   35  mkdir /ext4
   36  vim /etc/fstab
   37  mount -a
   38  df -h
   39  vim /etc/fstab
   40  fdisk /dev/nvme0n1
   41  reboot
   42  lsblk
   43  vim /etc/fstab
   44  blkid
   45  grep UUID /etc/fstab
   46  cat /etc/fstab
   47  xfs_admin --help |less
   48  xfs_admin -L goat /dev/nvme0n1p5
   49  blkid
   50  vim /etc/fstab
   51  vim /etc/default/grub
   52  grub2-mkconfig -o /boot/grub2/grub.cfg
   53  reboot
   54  lsblk
   55  df -h
   56  blkid
   57  history
   58  sysctl -t help
   59  systemctl -t help
   60  man pkexec
   61  man polkit
   62  find / -name "polkit"
   63  cd /etc/polkit-1/
   64  ls
   65  cd rules.d/
   66  ls
   67  vim 50-default.rules
   68  cd /usr/lib/polkit-1/
   69  ls
   70  cd
   71  pkexec visudo
   72  groupadd students
   73  groupadd profs
   74  vim /etc/login.defs
   75  for i in linda lisa anna anouk; do userdel -rf $i; done
   76  cat /etc/passwd
   77  for i in linda lisa anna anouk; do userdel -rf $i; done
   78  #for i in linda lisa anna anouk; do user $i; done
   79  ls /home
   80  cd /data/account/
   81  ls -l
   82  useradd -G students linda
   83  useradd -G students lisa
   84  useradd -G profs anna
   85  useradd -G profs anouk
   86  id anna
   87  id lisa
   88  mkdir /data/profs /data/students
   89  cd /data
   90  ls -l
   91  chown anna:profs profs
   92  chown anna:students studnets
   93  chown anna:students students/
   94  chmod 3770 {profs,students}
   95  ls -l
   96  history | tail -12
   97  history
   98  vim /etc/fstab
   99  ls
  100  ls -l
  101  su - lisa
  102  su - anouk
  103  setfacl -R -m g:profs:rx /data/students/
  104  getfacl /data/students/
  105  cd students/
  106  ls -l
  107  ls -ld .
  108  man setfacl
  109  #setfacl -x g:staff file
  110  cd ..
  111  setfacl -R -x g:profs /data/students
  112  ls -l students/
  113  setfacl -R -m g:profs:rX /data/students/
  114  setfacl students/
  115  getfacl students/
  116  getfacl students/lisa1
  117  getfacl students/
  118  cd students/
  119  ls -l
  120  getfacl lisa2
  121  su - lisa
  122  getfacl lisa3
  123  setfacl -m d:g:profs:rx /data/students
  124  su - linda
  125  history
  126  yum install nmap -y
  127  df -h
  128  lsblk
  129  poweroff
  130  ./countdown 12
  131  ./countdown 13
  132  lsblk
  133  mkdir /isos
  134  fdisk /dev/nvme0n6
  135  lsblk
  136  mkfs.xfs -L isos /dev/nvme0n6p1
  137  vim /etc/fstab
  138  tail -1 /etc/fstab
  139  mount -a
  140  df -h
  141  dd if=/dev/sr0 of=/isos/rhel85.iso bs=1M
  142  df -h
  143  history
  144  mkdir /repo
  145  vim /etc/fstab
  146  mount -a
  147  vim /etc/fstab
  148  mount -a
  149  ls /repo/
  150  history
  151  tail -2 /etc/fstab
  152  df -h
  153  yum repolist
  154  cd /etc/yum.repos.d/
  155  ls
  156  cat redhat.repo
  157  vim base.repo
  158  cd /repo
  159  ls
  160  cat media.repo
  161  vim appstream.repo
  162  cd
  163  cd /etc/yum.repos.d/
  164  ls
  165  vim appstream.repo
  166  yum repolist
  167  cd /repo
  168  ls
  169  ls -l $(which dnf)
  170  ls -l $(which yum)
  171  yum provides */semanage
  172  vim appstream.repo
  173  cd /etc/yum.repos.d/
  174  vim appstream.repo
  175  yum provides */semanage
  176  seinfo
  177  history
  178  yum module list
  179  yum module list | less
  180  yum module provides httpd
  181  yum module info postgresql
  182  yum module info postgresql | less
  183  yum module info --profile postgresql
  184  yum module list postgresql
  185  yum install @postgresql:9.6/devel
  186  yum install httpd
  187  yum module enable postgresql:9.6
  188  nmtui
  189  ip a
  190  nmtui
  191  ip a
  192  ifconfig
  193  ip a
  194  ifconfig -a
  195  ifconfig /all
  196  man ifconfig
  197  ip -s link
  198  ifconfig
  199  man ifconfig
  200  rpm -qf $(which ifconfig)
  201  rpm -ql net-tools
  202  rpm -ql net-tools | grep bin
  203  yum remove net-tools
  204  ip addr add dev ens160 11.0.0.11/24
  205  ip a
  206  ip route show
  207  ip route add 20.0.0.0/24 via 192.168.29.9
  208  ip route show
  209  nmtui
  210  cd
  211  ./countdown 12
  212  sysctl -a
  213  sysctl -a | wc
  214  systemctl status tuned
  215  tuned-adm list
  216  tuned-adm profile desktop
  217  tuned-adm --help
  218  cd /usr/lib/tuned/
  219  ls
  220  cd throughput-performance/
  221  ls
  222  vim tuned.conf
  223  pwd
  224  ls -ld /etc/tuned/
  225  mkdit /etc/tuned/sander
  226  mkdir /etc/tuned/sander
  227  cp tuned.conf /etc/tuned/sander/
  228  systemctl restart tuned
  229  tuned-adm list
  230  yum provides */tuned
  231  yum groups list
  232  fdisk /dev/nvme0n1
  233  lsblk
  234  pvcreate --help
  235  pvcreate /dev/nvme0n1p6
  236  pvs
  237  pvdisplay
  238  vgcreate --help | less
  239  vgcreate -s 4M vgdata /dev/nvmen0p6
  240  vgcreate -s 4M vgdata /dev/nvme0n1p6
  241  vgs
  242  pvs
  243  lvcreate --help | less
  244  lvcreate -L 1G -n lvdata vgdata
  245  pvs
  246  lvcreate -l 100%FREE -n lvdata vgdata
  247  lvs
  248  mkfs.ext4 /dev/vgdata/lvdata
  249  mkdir /lvdata
  250  vim /etc/fstab
  251  mount -a
  252  mount
  253  ls -l /dev/vgdata/lvdata /dev/mapper/vgdata-lvdata
  254  \ls -l /dev/vgdata/lvdata /dev/mapper/vgdata-lvdata
  255  history
  256  xxd /dev/nvme0n1p6 | less
  257  history
  258  lvs
  259  vgs
  260  fdisk /dev/nvme0n1
  261  lsblk
  262  vgextend vgdata /dev/nvme0n1p7
  263  vgs
  264  lvextend /dev/vgdata/lvdata -L +1G
  265  lvs
  266  df -h
  267  mount | grep data
  268  resize2fs /dev/mapper/vgdata-lvdata
  269  df -h
  270  history
  271  vim /etc/fstab
  272  reboot
  273  vim /etc/fstab
  274  exit
  275  fdisk /dev/nvme0n1
  276  mount /dev/nvme0n1p8 /mnt
  277  df -h
  278  cd /mnt
  279  ls
  280  cd
  281  free -m
  282  echo $(( 1151 + 1824 ))
  283  echo $(( 1151 + 1824 + 733 ))
  284  less /proc/meminfo
  285  fdisk /dev/nvme0n1
  286  free -m
  287  mkswap /dev/nvme0n1p9
  288  vim /etc/fstab
  289  swapon -a
  290  free -m
  291  fdisk /dev/nvme0n1
  292  vim /etc/fstab
  293  reboot
  294  pwd
  295  touch /root/linda
  296  exit
  297  history
  298  visudo
  299  su - linda
  300  passwd linda
  301  su - linda
  302  visudo
  303  su - linda
  304  yum install vsftpd
  305  systemctl status vsftpd
  306  systemctl start vsftpd
  307  systemctl status vsftpd
  308  systemctl enable --now vsftpd.service
  309  systemctl get-default
  310  systemctl list-dependencies graphical.target
  311  ls -ld /usr/lib/systemd/ /etc/systemd /run/systemd/
  312  cd /usr/lib/systemd/
  313  ls
  314  cd system
  315  ls
  316  vim vsftpd.service
  317  journalctl
  318  journalctl -u vsftpd
  319  journalctl -xb
  320  less /var/log/messages
  321  vim /etc/systemd/journald.conf
  322  cd /var/log
  323  ls
  324  mkdir journal
  325  ls journal/
  326  systemctl daemon-reload
  327  ls journal/
  328  cat /etc/fstab
  329  cd /run/systemd/
  330  ls
  331  cd generator/
  332  ls
  333  cat /etc/fstab
  334  cat mypart.mount
  335  cp mypart.mount /etc/systemd/system/
  336  cd /etc/systemd/system/
  337  ls
  338  vim mypart.mount
  339  cat /usr/lib/systemd/system/vsftpd.service
  340  vim mypart.mount
  341  vim /etc/fstab
  342  systemctl enable --now mypart.mount
  343  reboot
  344  df -h
  345  stratis pool
  346  stratis fs
  347  history
  348  ./countdown 12
  349  tail -1 /proc/mounts
  350  mkdir /lab4
  351  cd /lab4/
  352  yum provides */yumdownloader
  353  yum install yum-utils
  354  yumdownloader nmap
  355  ls
  356  rpm -qp --scripts nmap-7.70-6.el8.x86_64.rpm
  357  yum provides */createrepo
  358  yum install createrepo_c
  359  ls
  360  createrepo .
  361  ls
  362  vim /etc/yum.repos.d/lab4.repo
  363  yum repolist
  364  history
  365  yum provides */user*
  366  yum list all | grep nmap
  367  lsblk
  368  yum install vdo kmod-kvdo
  369  man vdo
  370  vdo create --name=vdo1 --device=/dev/nvme0n3 --vdoLogicalSize=1T
  371  mkfs.xfs -K /dev/mapper/vdo1
  372  cd /dev/mapper/
  373  ls -l
  374  cd /usr/share/doc/vdo/examples/
  375  tre
  376  tree
  377  cat systemd/VDO.mount.example
  378  cp systemd/VDO.mount.example /etc/systemd/system/vdo.mount
  379  mkdir /vdo
  380  cd /etc/systemd/system/
  381  vim vdo.mount
  382  systemctl enable --now vdo.mount
  383  mount
  384  reboot
  385  mount | grep vdo
  386  systemctl cat vdo.mount
  387  systemctl status vdo.service
  388  showmount -e 192.168.29.185
  389  vim /etc/hosts
  390  showmount -e server
  391  mount server:/data /mnt
  392  ls /mnt
  393  cd /mnt
  394  umount /mnt
  395  cd /
  396  umount /mnt
  397  vim /etc/hosts
  398  mount nfsserver:/data /mnt
  399  cd /mnt
  400  ls
  401  touch rootfile
  402  cat /proc/mounts
  403  vim /etc/fstab
  404  cd /
  405  umount /mnt
  406  mount -a
  407  reboot
  408  ./countdown 13
  409  ip a
  410  nmtui
  411  vim /etc/hosts
  412  tail -1 /etc/fstab
  413  cd /run/systemd/generator/
  414  ls
  415  vim mnt.mount
  416  cd
  417  ./countdown 13
  418  getenforce
  419  vim /etc/sysconfig/selinux
  420  setenforce permissive
  421  getenforce
  422  setenforce enforcing
  423  yum install -y httpd
  424  yum install -y curl
  425  systemctl enable --now httpd
  426  ps Zaux | grep http
  427  ls -Z /var/www
  428  cd /var/www/html/
  429  vim index.html
  430  systemctl restart httpd
  431  ls -Z index.html
  432  curl localhost
  433  mkdir /web
  434  vim /web/index.html
  435  ls -Z /web
  436  vim /etc/httpd/conf/httpd.conf
  437  systemctl restart httpd
  438  curl localhost
  439  getenforce
  440  setenforce permissive
  441  getenforce
  442  curl localhost
  443  vim /etc/httpd/conf/httpd.conf
  444  systemctl restart httpd
  445  curl localhost
  446  setenforce enforcing
  447  curl localhost
  448  man semanage-fcontext
  449  ls -dZ /web
  450  semanage fcontext -a -t httpd_sys_content_t "/web(/.*)?"
  451  ls -dZ /web
  452  cd /etc/selinux/targeted/contexts/files/
  453  ls
  454  cat file_contexts.local
  455  restorecon -Rv /web
  456  ls -dZ /web
  457  getenforce
  458  curl localhost
  459  history
  460  journalctl | grep sealert
  461  sealert -l 2c2e9d3a-27ca-422f-a45d-37e7b979fb20
  462  sealert -l 2c2e9d3a-27ca-422f-a45d-37e7b979fb20 | less
  463  man -k _selinux
  464  yum search selinux | less
  465  yum search selinux | grep doc
  466  yum install -y selinux-policy-doc
  467  man -k _selinux
  468  man -k _selinux | grep http
  469  man httpd_selinux
  470  cd
  471  getsebool -a | wc
  472  getsebool -a | grep ftp
  473  yum install -y vsftpd
  474  vim /etc/vsftpd/vsftpd.conf
  475  vim /etc/httpd/conf/httpd.conf
  476  systemctl restart httpd
  477  systemctl status httpd.service
  478  setenforce permissive
  479  systemctl restart httpd
  480  grep sealert /var/log/messages
  481  sealert -l 38026f7f-3469-48d8-aaf8-ab8db29d6821 | less
  482  #semanage port -a -t PORT_TYPE -p tcp 82
  483  semanage port -a -t http_port_t -p tcp 82
  484  setenforce enforcing
  485  systemctl restart httpd
  486  systemctl status firewalld
  487  firewall-cmd --list-all
  488  firewall-cmd --get-services
  489  firewall-cmd --add-service http --permanent
  490  firewall-cmd --add-service http
  491  firewall-cmd --list-all
  492  history
  493  reboot
  494  mount
  495  mount -o remount,rw /
  496  cd /
  497  rm /.autorelabel
  498  restorecon -Rv /
  499  reboot
  500  history