CentOS 8/FineTune: verschil tussen versies
Uit WaaaghPedia
< CentOS 8
Geen bewerkingssamenvatting |
Geen bewerkingssamenvatting |
||
Regel 34: | Regel 34: | ||
Draait u deze machine op en virtueel platform? Installeer dan de juiste Guest tools | Draait u deze machine op en virtueel platform? Installeer dan de juiste Guest tools | ||
* [[VMware/VMware_Tools#CentOS|VMware Tools]] | * [[VMware/VMware_Tools#CentOS|VMware Tools]] | ||
* [[XCP-NG/Guest-Tools|XCP-NG Guest-Tools]] | * [[XCP-NG/Guest-Tools|XCP-NG Guest-Tools]] | ||
'''SELinux Uitschakelen''' | '''SELinux Uitschakelen''' |
Versie van 7 mrt 2020 16:08
Maak nieuwe gebruiker en voeg deze in de sudoers groep
https://plusbryan.com/my-first-5-minutes-on-a-server-or-essential-security-for-linux-servers
Importeer SSH Sleutels
mkdir ~/.ssh touch ~/.ssh/authorized_keys chmod 700 ~/.ssh chmod 600 ~/.ssh/authorized_keys echo 'ssh-rsa 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 RonaldvanHeugten.nl Public SSH Key' >> ~/.ssh/authorized_keys
Extra beveiliging
#sudo sed -i /etc/ssh/sshd_config -r -e 's/^PermitRootLogin.*/PermitRootLogin no/g' sudo sed -i /etc/ssh/sshd_config -r -e 's/^ChallengeResponseAuthentication.*/ChallengeResponseAuthentication no/g' sudo sed -i /etc/ssh/sshd_config -r -e 's/^PasswordAuthentication.*/PasswordAuthentication no/g' sudo sed -i /etc/ssh/sshd_config -r -e 's/^UsePAM.*/UsePAM no/g' sudo sed -i /etc/ssh/sshd_config -r -e 's/^MaxAuthTries.*/MaxAuthTries 6/g' sudo systemctl reload sshd
Update CentOS
sudo yum clean all sudo yum check-update sudo yum update -y --disableplugin=fastestmirror
Auto Update
https://computingforgeeks.com/enable-automatic-software-updates-on-centos-rhel-8/
Install packages
yum install -y epel-release yum install -y yum-utils yum install -y screen yum install -y gcc yum install -y git yum install -y tar yum install -y unzip yum install -y curl yum install -y NetworkManager-tui yum install -y net-tools yum install -y wget yum install -y nano yum install -y htop echo 'alias vi="nano"' >> ~/.bashrc echo 'alias ll="ls -ls"' >> ~/.bashrc echo 'export PS1="\[\033[38;5;11m\]\u\[$(tput sgr0)\]\[\033[38;5;15m\]@\h\[$(tput sgr0)\]\[\033[38;5;6m\][\w]:\[$(tput sgr0)\]\[\033[38;5;15m\] \[$(tput sgr0)\]"' >> ~/.bashrc
Draait u deze machine op en virtueel platform? Installeer dan de juiste Guest tools
SELinux Uitschakelen
sed -i /etc/selinux/config -r -e 's/^SELINUX=.*/SELINUX=disabled/g'