LinuxCBT Ubu14x Edition

English | 2015 | mp4 | H264 1356x766 | AAC 2 ch | 16 hrs 3 min | 2.54 GB

eLearning

Course Objective

Features | Installation | Deployment

- Discuss important features | attributes

- Obtain platform images

- Provision GUESTs on Hypervisor

- Perform server installation

- Clone server install

- Effect changes to cloned instance

- Confirm functionality of GUESTs

Post-Installation Exploration

- Explain typical boot sequence

- Discuss System V Runlevels

- Peruse Upstart Environment

- Identify key steps

- Evaluate results

Basic Linux | Unix Commands

- ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami

- alias, cat, file, chmod, chown, history, dd, blkid, lspci

- STDIN | STDOUT, UNIX Pipes, Redirection, Command Chaining

- ps, df, top, pagers

- head, tail, which, w, who, sudo, su, wall

- tar, gzip, bzip2

Common Tools | Files

- Discuss various relevant client utilities

- Networking: ping, netstat, mtr, telnet

- File Retrieval: Use WGET | Curl | LFTP to retrieve content

- Name Resolvers: host, nslookup, dig, /etc/hosts

- Checksum various content

- Explore Time Administration

- Replace 'ntpd' with 'chronyd'

- Discuss applicability

LSOF

- Use 'lsof' to expose file | socket usage

- Use lsof to identify various resources

- Discuss general usage | applicability

Secure Shell (SSH)

- Introduce default implementation

- Discuss TTY assignments

- Generate SSH PKI Usage Keys

- Migrate to PKI (Passwordless) AUTH

- Non-interactively transport content with SCP

- Interactively move content with SFTP

- Discuss enhanced 'root' configuration

- Ensure consistent PKI deployment

Screen | Perpetual TTYs

- Discuss caveats of default $SHELL access

- Spawn 'screen' instances

- Navigate 'screen' instances

- Detatch | Re-attach | Share 'screen' resources

- Spawn | Terminate 'screen' instances as desired

File Permissions | User Management

- Explain standard Linux (DAC) permissions

- Alter permissions as needed

- Test access to content

- Discuss Symbolic Links

- Implement Soft | Hard Links

- Examine behavior

User | Group Management

- Identify GUI | $SHELL User Management tools

- Explore: /etc/{passwd,shadow,group}

- Provision users | groups as needed

- Test functionality

- Modify accounts | groups as desired

- Confirm configuration

Storage Management

- Explore current storage configuration

- Provision additional storage as needed

- Mount | Test | Committ to: /etc/fstab

- Identify current SWAP environment

- Allocate SWAP as needed

- Enable | Committ to: /etc/fstab

- Logical Volume Management (LVM)

- Identify default configuration

- Provision LVM-dedicated storage

- Configure: PVs | VGs | LVs

- Extend storage as needed

- Reduce VG as needed

- Evaluate results

Package Management

- Identify key 'dpkg' | 'apt-get' | 'aptitude' features

- Enumerate stock package-set

- Update current packages

- Install and confirm packages as desired

SYSLOG Configuration

- Explore default configuration

- Discuss Syslog Rules

- Except facilities from catchall: /var/log/syslog

- Explore key logs

Cron Scheduler

- Explore default configuration

- Discuss scheduling parameters

- Write simple $SHELL script

- Schedule execution via Cron

- Alter schedule as desired

- Confirm expected behavior

IP Administration

- Expose Installed configuration

- Identify available tools | configuration

- Create interface aliases (sub-interfaces)

- Test communications | Ensure persistence

- Add IP ROUTE to access remote subnet

- Test routing

- Confirm persistence

DNS | DHCPD Implementation

- Discuss features and benefits

- Implement DNS Caching-Only services

- Explore default configuration

- Resolve recursively as needed

- Setup Primary DNS zone

- Replicate to Secondary DNS server

- Alter zone | Test replication

- Implement DHCP Server

- Dedicate VLAN | Test address assignment

Apache HTTPD Server

- Identify key Apache features

- Explore default environment

- Examine Apache logs configuration

- Provision IP-based Virtual Hosts

- Provision Name-based Virtual Hosts

- Ensure distinct logs

- Test Virtual Host connectivity

- Implement Apache SSL

Apache SSL Configuration

- Identify key Files and Tools

- Invoke default SSL configuration and evaluate

- Generate certificates for default instance

- Generate certs for virtual hosts and apply

- Test secure connectivity

Network Reconnaissance

- Install NMap

- Explore footprint

- Perform local reconnaissance

- Quickly identify available subnet-based nodes

- Comprehensive scan of select targets

- Examine log and identify weakspots

- Evaluate results

Packet Capturing

- Explore 'tcpdump' basics

- Capture wide variety of packets

- Use BPFs to reduce captured data

- Replay captures with 'tcpdump'

- Parse with BPFs as desired

- Parse captures with WireShark

Rescue /boot

- Unable to update key packages

- Kernel | INITRD | etc.

- Provision new Block Storage

- Enter Single-User Mode

- Synch /boot content

- Confirm all is well