https://raymii.org/s/tags/centos.xml RSS feed for tag centos on Raymii.org https://raymii.org/s/articles/Lets_Encrypt_Directadmin.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/articles/Lets_Encrypt_Directadmin.html Let's Encrypt is a new certificate authority, recognized by all major browsers. They make it a breeze to set up TLS certificates for your web server. And for free! Let's Encrypt is supported by major players like Mozilla, Akamai, Cisco, the EFF, the Internet Security Research Group and others. Let's Encrypt provides free, automatic and secure certificates so that every website can be secured with an SSL certificate. This article shows you how to setup Let's Encrypt with the DirectAdmin web control panel. The guide is generic, so it works for other controlpanels as well. For now it works with the beta, and required some linux knowledge and root access to the hosting server. Sun, 11 Jan 2015 00:00:00 GMT Wed, 24 Feb 2016 00:00:00 GMT https://raymii.org/s/articles/Lets_Encrypt_Directadmin_Now_Built_In.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/articles/Lets_Encrypt_Directadmin_Now_Built_In.html Let's Encrypt is a new certificate authority, recognized by all major browsers. They make it a breeze to set up TLS certificates for your web server. And for free! Let's Encrypt is supported by major players like Mozilla, Akamai, Cisco, the EFF, the Internet Security Research Group and others. Let's Encrypt provides free, automatic and secure certificates so that every website can be secured with an SSL certificate. This article shows you how to setup Let's Encrypt with the DirectAdmin web control panel. DirectAdmin now supports Lets Encrypt natively since 1.50, so no more ssh fiddling, just via the control panel, for all the users on the server. Wed, 24 Feb 2016 00:00:00 GMT Wed, 24 Feb 2016 00:00:00 GMT https://raymii.org/s/snippets/Deborphan_cleanup_until_no_more_orphaned_packages_left.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/Deborphan_cleanup_until_no_more_orphaned_packages_left.html Deborphan removes packages it thinks your system doesn't need anymore. It is a great tool for package cleanup and maintenance. Sometimes, after cleaning up the packages, it will find new packages that are orphaned (because you just cleaned up). This is a small script that cleans up with deborphan until there is nothing more to cleanup. Mon, 11 Jan 2016 00:00:00 GMT Mon, 11 Jan 2016 00:00:00 GMT https://raymii.org/s/snippets/Find_all_services_using_libssl_to_restart_after_an_OpenSSL_update.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/Find_all_services_using_libssl_to_restart_after_an_OpenSSL_update.html When you update OpenSSL, the software that currently has the ssl libraries loaded in memory do not automatically load the updated libraries. A full system reboot resolves that problem, but sometimes that is not possible. This command shows you all the software that has loaded the libraries, allowing you to restart only those services. If you don't restart or reload after an update, the software might still be vulnerable to issues that the update fixed. Tue, 14 Jul 2015 00:00:00 GMT Tue, 14 Jul 2015 00:00:00 GMT https://raymii.org/s/articles/virt-install_introduction_and_copy_paste_distro_install_commands.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/articles/virt-install_introduction_and_copy_paste_distro_install_commands.html virt-install is a command line tool for creating new KVM , Xen or Linux container guests using the libvirt hypervisor management library. It allows you to create a VM and start an installation from the command line. This article has a few copy pastable getting started examples for different distro's. Sun, 08 Feb 2015 00:00:00 GMT Sun, 08 Feb 2015 00:00:00 GMT https://raymii.org/s/tutorials/IPSEC_vpn_with_CentOS_7.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/tutorials/IPSEC_vpn_with_CentOS_7.html This is a guide on setting up an IPSEC VPN server with CentOS 7 using StrongSwan as the IPsec server and for authentication. It has a detailed explanation with every step. We choose the IPSECP protocol stack because of recent vulnerabilities found in pptpd VPNs and because it is supported on all recent operating systems by default. More than ever, your freedom and privacy when online is under threat. Governments and ISPs want to control what you can and can't see while keeping a record of everything you do, and even the shady-looking guy lurking around your coffee shop or the airport gate can grab your bank details easier than you may think. A self hosted VPN lets you surf the web the way it was intended: anonymously and without oversight. Tue, 30 Dec 2014 00:00:00 GMT Tue, 30 Dec 2014 00:00:00 GMT https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_on_CentOS_-_Red_Hat_Enterprise_Linux_or_Scientific_-_Linux_6.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_on_CentOS_-_Red_Hat_Enterprise_Linux_or_Scientific_-_Linux_6.html Not available. Mon, 01 Dec 2014 00:00:00 GMT Mon, 01 Dec 2014 00:00:00 GMT https://raymii.org/s/articles/Check_servers_for_the_Poodle_bug.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/articles/Check_servers_for_the_Poodle_bug.html The POODLE CVE-2014-3566 bug is a new bug discovered by Google in the SSLv3 protocol. The fix is easy, disable support for SSLv3. See https://cipherli.st for a good list of SSL ciphers. You can use this check from the shell to check your servers. This command can easily be automated with other shell scripts. It also allows you to check your services without exposing them to an external checking website. Tue, 14 Oct 2014 00:00:00 GMT Tue, 14 Oct 2014 00:00:00 GMT https://raymii.org/s/articles/Configserver_Firewall_and_Security_CSF_LFD.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/articles/Configserver_Firewall_and_Security_CSF_LFD.html his page covers my notes about csf and lfd. csf is an easy SPI iptables firewall suite. lfd is the login failure daemon, which scans log files for failed authentication and blocks the IP's doing that. This page covers installation, populair command line options and popular config file options. Sun, 12 Oct 2014 00:00:00 GMT Sun, 12 Oct 2014 00:00:00 GMT https://raymii.org/s/articles/Patch_CVE-2014-6271_Shellshock_with_Ansible.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/articles/Patch_CVE-2014-6271_Shellshock_with_Ansible.html This is a simple ansible playbook to patch Debian, CentOS, Ubuntu and derivatives for the Shellshock vulnerability (CVE-2014-6271). Wed, 24 Sep 2014 00:00:00 GMT Wed, 24 Sep 2014 00:00:00 GMT https://raymii.org/s/snippets/CentOS_5_CA_Certificate_Bundle_Update.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/CentOS_5_CA_Certificate_Bundle_Update.html This simple snippet shows you how to update the root ca certificate bundle on CentOS 5. Some websites have certificates signed by authorities not in the default bundle and those websites will not work with tools like git, curl, wget or anything else that uses https. Sun, 06 Jul 2014 00:00:00 GMT Sun, 06 Jul 2014 00:00:00 GMT https://raymii.org/s/tutorials/Openstack-Swift-Objectstore-FTP-Access.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/tutorials/Openstack-Swift-Objectstore-FTP-Access.html This is a guide on accessing the Openstack Swift Object Storage system using an FTP client. Openstack Swift has a beautiful API which you can program to. However, sometimes it is handy to quickly be able to access your Swift/Objectstore data without programming around it. We will use ftp-cloudfs to do this. There is also Softlayers swftp, but that does not support Keystone Authentication (2.0). ftp-cloudfs does support this. The OS X Cyberduck FTP client also has Openstack Swift support, however that is a native implementation, not using FTP. With ftp-cloudfs we can use any ftp client, from Filezilla to midnight commander. Sun, 25 May 2014 00:00:00 GMT Sun, 25 May 2014 00:00:00 GMT https://raymii.org/s/tutorials/Encrypted_Duplicity_Backups_to_Openstack_Swift_Objectstore.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/tutorials/Encrypted_Duplicity_Backups_to_Openstack_Swift_Objectstore.html This is a guide on backing up your data to an Openstack Swift (Objectstore) instance using Duplicity. It provides encrypted backups using gpg so that you can safely use any public cloud storage to store them. This tutorial is for Ubuntu and CentOS and includes initial setup plus a script to automate it all. We will be using the Dutch provider CloudVPS, which is a non american company, so your data is more safe than it is with a provider that is vulnerable to the patriot act. Although your data is already encrypted with GPG, you can never be to sure. CloudVPS provides 10GB free ObjectStore, if you have VPS with them, the data is stored on at least 3 machines in 3 locations and they have a boatload of certifications. Mon, 19 May 2014 00:00:00 GMT Mon, 19 May 2014 00:00:00 GMT https://raymii.org/s/snippets/Remove_Old_CentOS_RHEL_Kernels.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/Remove_Old_CentOS_RHEL_Kernels.html This small article will show you how to remove unused kernels in Red Hat or CentOS. This is sometimes necessary because the /boot partition can fill up. Sat, 18 Jan 2014 00:00:00 GMT Sat, 18 Jan 2014 00:00:00 GMT https://raymii.org/s/tutorials/Screenfetch_installation_tutorial.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/tutorials/Screenfetch_installation_tutorial.html This tutorial will show you how to install screenfetch, a bash information tool. It displays handy system information at login, including distro name, kernel, uptime, cpu, ram and nice distro-based artwork. The tutorial includes support for bash and zsh, for every supported linux OS (ubuntu, centos, arch, redhat, solusOS, linux mint and more.) Sat, 09 Mar 2013 00:00:00 GMT Sat, 09 Mar 2013 00:00:00 GMT https://raymii.org/s/snippets/Systemd_Rosetta_Reference.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/Systemd_Rosetta_Reference.html A reference for systemd, for sysadmins who love plain old init. Sun, 10 Feb 2013 00:00:00 GMT Sun, 10 Feb 2013 00:00:00 GMT https://raymii.org/s/snippets/CentOS_Save_iptables_restorecon_error.html?utm_medium=rss&utm_source=raymii&utm_campaign=tagrss https://raymii.org/s/snippets/CentOS_Save_iptables_restorecon_error.html On a default CentOS installation, when trying to execute the iptables save command you can get an error like iptables: Saving firewall rules to /etc/sysconfig/iptables: /etc/init.d/iptables: line 274: restorecon: command not found. Read this article to find out how to fix it. Wed, 23 Jan 2013 00:00:00 GMT Wed, 23 Jan 2013 00:00:00 GMT