[LinuxCBT] LinuxCBT EL-7x Edition [2015, RUS]

Содержание

Features | Installations
Discuss features of RedHat® | CentOS Enterprise Linux 7
Explore installation options
Perform GUI installation
Perform Text-Mode Installation
Provision Network Installation repository
Perform Network Installation
Perform Kickstart Installation
Peruse Rescue Mode
Basic $SHELL Tools
'pwd', 'touch', 'stat', 'ls', 'id'
'echo', 'cat', 'head', 'tail', 'more', 'less'
'cp', 'mv' - transport content as needed
'tty' - Discuss terminals
'tar' - explore features and advantages of tarballs
'gzip', 'bzip2', 'zip' - Compress content
Use checksums to validate data pre|post-transmissions
'file' - discuss logic used to ascertain file type
'dd' - generate content as desired
Use 'w' commands
'ps' - explore process lists
free & top - explore process management with top
Process lines with: 'grep'
Process fields with: 'awk'
Explore 'sed' - streams processing
User and group management concepts
SystemD | System Control
Discuss new framework
Contrast with INITD
Identify FS footprint
Alter system run-states via system control
Manage services as needed
Peruse INITD support
Storage Administration | File System (FS) Semantics | Features | Usage
Discuss latest default FS implementation
Identify common FS object types
Discuss the benefits of Symbolic Links
Implement a variety of Soft Links and evaluate characteristics
Contrast Soft && Hard Links
Implement Hard Links and evaluate characteristics
Manipulate both Link forms and evaluate
Identify current virtual memory environment
Implement file-based additional virtual memory
Allocate partitions to virtual memory usage
Enable | Disable virtual memory as required
Explore default XFS implementation
Provision XFS storage blocks as needed
Expand XFS blocks as required
Explore default Logical Volume Management (LVM) Environment
Provision LVM storage components
Aggregate components into accessible blocks as desired
Manipulate LVM storage on-demand
CRON - System Scheduler
Peruse Cron Implementation
Examine schedule options
System-wide && User-wide Cron Jobs
Run jobs as needed
Check Cron status periodically
Syslog | Log Rotation Facilities
Explore LOG rules engine
Examine OS-provisioned LOG entries
Archive LOGs to remote system
Peruse Logrotate environment
Rotate LOGs as needed
Examine results
Common | Invaluable Network Tools
'ping' - availability
'mtr' - interhost paths and metrics
'telnet' - TCP socket availability
'netstat' - examine sockets
'arp' - L2 broadcast domain (VLAN) neighbors
'dig', 'nslookup', 'host' - name resolution tools
'wget', 'curl' - content retrieval agents
Time Administration | ChronyD
Examine default environment
Contrast with prior versions
Explore 'chronyd' time service
Contrast 'chronyd' with 'ntpd'
Configure 'chronyd' to permit internal synching
Ensure synchronized time across nodes
YUM | Package Management
Discuss features
Contrast with 'rpm'
Compare with similar tools
Explore default environment with 'yum'
Install | Remove packages as needed
Apply updates where applicable
Provision internal PROD YUM Repository
Ensure functionality
Manage packages
IP Administration
Discuss features
Contrast with 'ifconfig' | alias method
Discuss 'NetworkManager' && 'ifcfg-*' scripts
Peruse appropriate config tree
Examine important directives
Add IP resources dynamically
Committ desired resources to persist
Test persistance of IP resources
DHCPD | BIND DNS | Services
Provision dedicated virtual DHCP subnet
Setup DHCPD with basic configuration
Ensure address assignation
Trace administered resources
Provision DNS Caching-Only service
Test relayed resolution of proxied requests
Setup Primary DNS service && Test
Replicate Primary DNS records to Secondary instance
Test replication and resolution across nodes
FTP Server
Identify && provision secure FTP server service
Explore default configuration
Alter configuration to suit hypothetical security policy
CHROOT user principles to heighten security
Test configuration
Move data
HTTPD Server
Discuss features
Implement HTTPD server
Explore default configuration
Identify important directories, files and directives
Configure IP-based Virtual Hosts && Test configuration
Update configuration to support Name-based Virtual Hosts
Contrast configurations
Use 'apachectl' to validate && effect configuration changes
MariaDB | RDBMS
Explain implementation - features | benefits
Implement on targets
Secure instances and test access
Explore defaults
Provision simple DB container with table and sample data
Test access
Purge sample DB container
NMAP | Reconnaissance
Discuss features
Install NMap
Explore footprint
Analyze locally-published resources
Contrast with routable resources
Explore broadcast domain
Perform a variety of scans to obtain more intel
LOG results for post-processing
Packet Capturing
Discuss sample use-cases
Capture default traffic set
LOG captured traffic for post-processing
Tune captures with BPF filters
Post-process with TCPDump && WireShark
FirewallD
Discuss implementation
Relate to IPTables
Install GUI management tool
Explore default policies
Contrast Run-Time && Permanent Policies
Enter 'Panic' mode in hypothetical situation
Resume normal communications
Define PROD service group for rules-aggregation
Apply PROD service group and test communications
MISC
Intro to SELinux Implementation
Examine default SSH behavior
Restrict SSH access to SFTP only connections
Enforce file nomenclature via SSH
Test functionality