Difference between revisions of "OPS235 Lab 5 - CentOS7"

From CDOT Wiki
Jump to: navigation, search
 
(200 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
{{Admon/caution|THIS IS AN OLD VERSION OF THE LAB|'''This is an archived version. Do not use this in your OPS235 course.'''}}
 
[[Category:OPS235]]
 
[[Category:OPS235]]
  
Line 4: Line 5:
  
 
==Purpose / Objectives of Lab 5==
 
==Purpose / Objectives of Lab 5==
 +
[[Image:disk-space.png|thumb|right|150px|Monitoring disk space and taking corrective action before problems arise is a critical operation for a system administrator.]]
  
The purpose of this lab is to discuss how a Linux sys admin can manage partitions including adjusting the size of their Linux systems if space is required. Various topics will be discussed including:
 
  
<br>
+
The purpose of this lab is to demonstrate how a Linux system administrator can monitor hard disk space availability, and to manage file system size via the Logical Volume Manager (LVM) application. This lab will also demonstrate how to manually mount (i.e. connect) and unmount (disconnect) partitions to file system directories, and demonstrate how to have partitions automatically mounted to directories upon Linux system startup.
:* Connecting and Disconnecting Directories to existing partitions ('''mount''', '''umount''').
+
 
 +
<u>Main Objectives</u>
 +
 
 +
:* Using '''LVM''' to '''resize partitions graphically and via command-line'''.
 +
:* Create, partition and format '''virtual hard disks''' to increase the size of a file system.
 +
:* Manually connect and disconnect directories (mount points) to existing partitions ('''mount''', '''umount''').
 
:* Monitoring Disk Space ('''df -h''').
 
:* Monitoring Disk Space ('''df -h''').
:* Using '''LVM''' to '''resize partitions graphically and via commands'''.
+
:* Create a Bash Shell script to '''monitor and report low disk size''' (run periodically in '''crontab''').
:* Create, partition and format '''virtual hard disks''' to increase the size of a file system.
 
:* Create a Bash Shell Script to '''monitor and report low disk size''' (run periodically in '''crontab''').
 
  
  
Line 34: Line 38:
 
|- valign="top"
 
|- valign="top"
 
|width="10%" |<u>LVM Information:</u>
 
|width="10%" |<u>LVM Information:</u>
*[http://linuxmanpages.com/man8/vgs.8.php vgs]<br>
+
*[http://man7.org/linux/man-pages/man8/vgs.8.html vgs]<br>
*[http://linuxmanpages.com/man8/lvs.8.php lvs]<br>
+
*[http://man7.org/linux/man-pages/man8/pvs.8.html pvs]<br>
*[http://linuxmanpages.com/man8/pvs.8.php pvs]<br>
+
*[http://man7.org/linux/man-pages/man8/lvs.8.html lvs]<br>
*[http://linuxmanpages.com/man8/vgdisplay.8.php vgdisplay]<br>
+
*[http://man7.org/linux/man-pages/man8/vgdisplay.8.html vgdisplay]<br>
*[http://linuxmanpages.com/man8/lvdisplay.8.php lvdisplay]<br>
+
*[http://man7.org/linux/man-pages/man8/pvdisplay.8.html pvdisplay]<br>
*[http://linuxmanpages.com/man8/pvdisplay.8.php pvdisplay]<br>
+
*[http://man7.org/linux/man-pages/man8/lvdisplay.8.html lvdisplay]<br>
 
|width="10%" |<u>LVM Management</u>
 
|width="10%" |<u>LVM Management</u>
 
*[http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-system-config-lvm.html system-config-lvm]<br>
 
*[http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-system-config-lvm.html system-config-lvm]<br>
*[http://linuxmanpages.com/man8/lvextend.8.php lvextend]<br>
+
*[http://man7.org/linux/man-pages/man8/lvextend.8.html lvextend]<br>
*[http://linuxmanpages.com/man8/lvcreate.8.php lvcreate]<br>
+
*[http://man7.org/linux/man-pages/man8/lvcreate.8.html lvcreate]<br>
*[http://linuxmanpages.com/man8/lvreduce.8.php lvreduce]<br>
+
*[http://man7.org/linux/man-pages/man8/lvreduce.8.html lvreduce]<br>
*[http://linuxmanpages.com/man8/pvcreate.8.php pvcreate]<br>
+
*[http://man7.org/linux/man-pages/man8/pvcreate.8.html pvcreate]<br>
*[http://linuxmanpages.com/man8/vgextend.8.php vgextend]<br>
+
*[http://man7.org/linux/man-pages/man8/vgextend.8.html vgextend]<br>
 
|width="10%" |<u>Miscellaneous</u>
 
|width="10%" |<u>Miscellaneous</u>
*[http://linuxmanpages.com/man8/mount.8.php mount]<br>
+
*[http://man7.org/linux/man-pages/man8/mount.8.html mount]<br>
*[http://linuxmanpages.com/man8/umount.8.php umount]<br>
+
*[http://man7.org/linux/man-pages/man8/umount.8.html umount]<br>
*[http://linuxmanpages.com/man8/mount.8.php df -h]<br>
+
*[http://man7.org/linux/man-pages/man1/df.1.html df]<br>
 +
*[http://man7.org/linux/man-pages/man1/du.1.html du]<br>
 +
*[http://www.lehman.cuny.edu/cgi-bin/man-cgi?awk+1 awk]<br>
 +
*[http://tldp.org/HOWTO/Partition/fdisk_partitioning.html fdisk]<br>
 +
*[http://www.cyberciti.biz/faq/howto-format-create-linux-filesystem/ mkfs]
 +
*[http://man7.org/linux/man-pages/man5/fstab.5.html /etc/fstab]
 +
*[http://code.tutsplus.com/tutorials/scheduling-tasks-with-cron-jobs--net-8800 Using crontab]
 +
 
 
|}
 
|}
  
 +
=INVESTIGATION 1: MANAGING FILE-SYSTEMS USING LVM=
 +
{| width="40%" align="right" cellpadding="10"
 +
|- valign="top"
 +
|{{Admon/note|VM Backups and Recovery|Most of these investigations will take place in your virtual machines. If you make a significant mistake, your virtual machine may not boot. Remember that you created backups of your virtual machines in Lab 2, and you can restore them if something goes wrong.<br /><br />'''Remember: if you did not create backups for all of your VMs, then you don't have any restoration points to fall-back to!'''|}}
 +
|}
 +
Monitoring and ensuring adequate space for a Linux file-system is considered to be a critical task for any system administrator. An application called '''LVM''' is a very useful tool for Linux system administrators to easily manage file systems - even when the computer system is running!
  
= INVESTIGATION 1: User/Group Management =
+
'''LVM''' ('''Logical Volume Management''') is used to manage hard disk drives / partitions for Linux and Unix systems. LVM provides more flexibility than just partitioning hard disks. '''Volume Groups''' are areas used to define '''Physical Volumes''' (i.e. hard disks, disk partitions, or other forms of storage devices). '''Logical Volumes''' are then used to relate directories (mount points) to a specific physical volume or for a "range" or "span" of physical volumes.
  
User account management is a very important operation that a Linux sysadmin does on a consistent basis. The sysadmin not only needs to add or remove user accounts by issuing commands, but may need to automate user account creations a large number (batch) of potential employees. There are many features with the Linux command to create new users including: specification of a home directory, type of shell used, name, password and time-limit (referred to as "aging") for a new user account. Remove user accounts also have options such as removing the user account but keeping the home directory for reference or evidence of "wrong-doing"
+
LVM allows more flexibility and growth potential for Linux systems (for example, having Logical volumes span multiple hard disks). CentOS uses LVM by default upon installation. Other Linux distributions may provide the capacity to install LVM,
  
In your ULI101 course, you learned to change permissions for directories and files relating to user, same group members and other group members. In this course, since you are the sysadmin with root privileges, you can create or remove groups as well as change the ownership of directories and files! We will now learn to perform key user account management operations in this section.
 
  
== Part 1: The /etc/passwd file ==
+
=== Part 1: Manage LVM Graphically===
 +
 
 +
[[Image:lvm1.png|thumb|500px|right|The '''system-config-lvm''' application allows the Linux system administrator to manage LVMs Graphically. Your LVM information for '''centos2''' VM should be similarly displayed.]]
 +
# Let's learn to administer (manage) our LVM graphically for our '''centos2''' Virtual Machine.
 +
# Launch your '''centos2''' VM and open a shell terminal.
 +
# CentOS provides a tool called '''system-config-lvm''' to graphically administer LVM.<br><br>'''NOTE:''' This tool may be replaced by a future graphical LVM management tool and is NOT currently available in the default repositories. We will now perform a "work-around" in order to make the system-config-lvm utility work in our system.<br><br>
 +
# Issue the following command to download the system-config-lvm rpm:<br><b><code><span style="color:#3366CC;font-size:1.2em;">wget https://kojipkgs.fedoraproject.org//packages/system-config-lvm/1.1.18/1.fc19/noarch/system-config-lvm-1.1.18-1.fc19.noarch.rpm</span></code></b><br>(Although it is an rpm file for the Fedora Distribution, it will also work for Centos7).<br><br>
 +
# Make certain that you are logged in as '''root'''.
 +
# Try issuing the command: <b><code><span style="color:#3366CC;font-size:1.2em;">rpm -i ./system-config-lvm-1.1.18-1.fc19.noarch.rpm</span></code></b><br>You should notice an error.
 +
# Use the '''yum install''' command to resolve the following dependencies:<ul><li><b><code><span style="color:#3366CC;font-size:1.2em;">yum install gnome-python2-bonobo</span></code></b></li><li><b><code><span style="color:#3366CC;font-size:1.2em;">yum install gnome-python2-gnome</span></code></b></li><li><b><code><span style="color:#3366CC;font-size:1.2em;">yum install usermode-gtk</span></code></b></li></ul><br>
 +
<ol>
 +
<li value="8">Re-issue the command: <b><code><span style="color:#3366CC;font-size:1.2em;">rpm -i ./system-config-lvm-1.1.18-1.fc19.noarch.rpm</span></code></b><br>It should work this time.</li><li>Run the command: <b><code><span style="color:#3366CC;font-size:1.2em;">system-config-lvm</span></code></b></li><li>On the left-hand side, you can click on the '''Volume Group''', '''Physical Volume''' and '''Logical Volumes''' and view their properties on the on the right-hand side.</li><li>Determine the current LVM configuration by clicking on the appropriate element and reading the properties in the right-hand panel -- write down the answers:
 +
<ol type="a">
 +
  <li>What are the names and sizes of the '''Volume Group'''?</li>
 +
  <li>What is the name and size of the '''Physical Volumes'''?</li>
 +
  <li>What are the names and sizes of the '''Logical Volumes'''?</li>
 +
  <li>Is there any space in the VG which is not allocated to a LV?<br><br></li>
 +
</ol>
 +
</li>
 +
<li>Click on '''Logical View''' (i.e. above home, root, swap) and then click '''Create New Logical Volume''' button. What happens? Why do you think this happened?<br><br>We will now create another partition ('''/dev/vda3''') using the '''fdisk''' utility, format this newly-created partition so we can create another logical volume called '''archive'''.<br><br> </li>
 +
  <li>Quit the '''system-config-lvm''' application.</li>
 +
  <li>In the terminal as root, issue the command: <b><code><span style="color:#3366CC;font-size:1.2em;">ls /dev/vd*</span></code></b><br><br>'''NOTE:''' If nothing displays, issue the command: '''ls /dev/sd*''' and use that device pathname '''/dev/sda''' instead.<br><br>
 +
  <li>Issue the command: <b><code><span style="color:#3366CC;font-size:1.2em;">fdisk /dev/vda</span></code></b><br>(or ''fdisk /dev/sda'' if the previous command didn't work)</li>
 +
  <li>At the fdisk prompt issue the command: '''p'''. What does this do?</li>
 +
  <li>Now issue the commands '''n''' (new partition), '''p''' (primary partition), '''3''' (i.e. next available partition number). When prompted for initial block, '''press enter to accept the default beginning block size''', and '''type: +2G''' at ending block (create 2GB for partition) and '''press enter'''. </li>
 +
  <li>At the fdisk prompt, issue the command '''p''' to review the partition information, then type '''w''' to save partition table and exit (ignore WARNING message).</li>
 +
  <li>You <u>'''must'''</u> restart your centos2 VM to allow changes to take effect</li>
 +
  <li>Open a terminal as root, and format your newly-created partition by issuing the command: <b><code><span style="color:#3366CC;font-size:1.2em;">mkfs -t ext4 /dev/vda3</span></code></b><br>(or ''mkfs -t ext4 /dev/sda3'')</li>
 +
</ol>
 +
{| width="40%" align="right" cellpadding="10"
 +
|- valign="top"
 +
|
 +
[[Image:lvm3.png|thumb|right|500px|What '''system-config-lvm''' display should appear after using '''fdisk''' to create new partition (/dev/sda3), '''formatting''' partition, '''adding partition to LVM''', and '''allocating partition''' to our default volume group.]]
 +
|
 +
[[Image:lvm4.png|thumb|right|200px|Creating a new logical volume from our newly created physical volume]]
 +
|}
 +
<ol>
 +
  <li value="21">'''Restart the system-config-lvm utility'''. Do you see a new /dev/sda3 partition under Physical Volumes?</li>
 +
  <li>To add the newly created partition, you need to add it into LVM to be used. '''Exit the system-config-lvm utility''' and '''issue the following command to add the partition into LVM:'''<br><b><code><span style="color:#3366CC;font-size:1.2em;">pvcreate /dev/vda3</span></code></b> (or ''pvcreate /dev/sda3'' ) (enter '''y''' to proceed - ignore warning)</li>
 +
  <li>'''Restart system-config-lvm'''. You should notice a section at the bottom indicating <u>Unallocated</u> Physical Volumes. Click on the <u>unallocated</u> partition /dev/vda3 and then click '''Add to Existing Volume Group''' (click on other button in next screen to continue). The screen should now show the partition ''/dev/vda3'' contained in our default Volume Group (refer to diagram on right-side for reference).</li>
 +
  <li>Click on Logical View (i.e. above home, root, swap), and then click on '''Create New Logical Volume''' button and fill out the details for this new logical volume including: size: '''1GB''', LV Properties: '''linear''', file system: '''ext4''' file system name: '''archive''', select '''mount''' and mount it at: '''/archive'''. Have the system create the directory ''/archive'' if it does not exist (Refer to diagram on right for reference).</li>
 +
  <li>Confirm that this new Logical Volume now exists by changing to the directory /archive. Did you need to restart your centos2 VM to confirm that the '''/archive''' directory is now on your '''centos2''' VM?</li>
 +
  <li>Use system-config-lvm to resize (i.e. edit) the '''archive''' logical volume to '''1.5 GB''' and verify your results.</li>
 +
</ol>
 +
 
  
# Look at the <b><code><span style="color:#3366CC;font-size:1.2em;">/etc/passwd</span></code></b> file.
+
'''Answer Part 1 observations / questions in your lab log book.'''
# Make note of the contents of that file.
 
# Read about the file: http://man7.org/linux/man-pages/man5/passwd.5.html
 
# Make sure you know what information each field contains.
 
# Why do you think there are so many users?
 
# Look at the names of the users. What do you think these user names represent? Are they people?
 
# What is the numeric user ID (UID) of the root user?
 
# The user IDs of real users (people) are different from the user IDs of system accounts. What is the pattern?
 
  
'''Answer the Part 1 observations / questions in your lab log book.'''
+
===Part 2: Managing LVM Via Command Line & Adding Virtual Hard Drives===
 +
[[Image:add_virtual_disk.png|thumb|400px|right|You can add virtual hard disks for a VM by changing to the '''Details''' section for the VM (as opposed to ''console''), click '''Add Hardware''', fill information in the '''Add New Virtual Hardware''' dialog box and clicking '''Finish'''.]]
 +
Let's say that you have run out of disk space on your '''centos3''' VM, and you need more space on the root file-system in order to host more web-pages, or to support a larger database. What are your options? Getting a replacement hard-drive would probably require re-installation of the operating system and/or backing up and restoring data on the old hard disk.
  
== Part 2: Adding users ==
+
Because we're using LVM we can avoid this problem. We can '''add a new <u>virtual</u> hard-drive''' (which will serve as a physical volume) to the volume group, and extend the root logical volume to make use of the new available space. Creating virtual hard drives is not only inexpensive, but a great way for students to learn now to simulate growing the size of the file system.
  
 +
'''Perform the following operations to increase the size of lv_root in centos3:'''
  
#Perform this part in your '''centos1''' VM.
 
# Read the man page for the <b><code><span style="color:#3366CC;font-size:1.2em;">useradd</span></code></b> command.
 
# Create three fictitious users (make-up their userids and full names. Give each of these newly-created users a password.
 
# Grep the <b><code><span style="color:#3366CC;font-size:1.2em;">/etc/passwd</span></code></b> file for each of the new users.
 
#* What is the '''home''' directory of each user?
 
#* What '''group''' is each user in?
 
#* What other information can you provide regarding these users?
 
#* Where are the '''passwords''' stored?
 
# Look at the man page for '''/etc/shadow''' using the command: <b><code><span style="color:#3366CC;font-size:1.2em;">man 5 shadow</span></code></b>
 
#* Grep the <b><code><span style="color:#3366CC;font-size:1.2em;">/etc/shadow</span></code></b> file for each of the new users.
 
#* Make note of this information.
 
# Create two new dummy users, <b><code><span style="color:#3366CC;font-size:1.2em;">ops235_1</span></code></b> and <b><code><span style="color:#3366CC;font-size:1.2em;">ops235_2</span></code></b>.
 
# Investigate the home directory of one of your new users.
 
#* What files are there? Be sure to include hidden files.
 
#* What do you think these files are used for?
 
#* How does the operating system determine which files are created in a new home account? The answer can be found here:<br>http://www.linuxhowtos.org/Tips%20and%20Tricks/using_skel.htm
 
#* Look at the files (including hidden files) in the template directory referred to in the article. Compare them to what is in a home directory for a new user. What do you notice?
 
#* Create a new file in this directory with the following command: <b><code><span style="color:#3366CC;font-size:1.2em;">touch foo</span></code></b>
 
#* Create a new user named <b><code><span style="color:#3366CC;font-size:1.2em;">foobar</span></code></b>, with the option to automatically create a home directory.
 
#* Look at the contents of foobar's home directory. What do you notice?
 
# Be sure to record your observations in your lab notes.
 
#Issue the man pages for the '''useradd''' command. Explain the purpose of using the '''-e''' option for the ''useradd'' command. Try to think what would be the purpose for a Linux sysadmin to use this option when creating new users.
 
  
'''Answer the Part 2 observations / questions in your lab log book.'''
+
# Perform this Part in your '''centos3''' VM.
 +
# Run the following commands and make note of the output:
 +
::<b><code><span style="color:#3366CC;font-size:1.2em;">ls /dev/vd*</span></code></b>
 +
::<b><code><span style="color:#3366CC;font-size:1.2em;">pvs</span></code></b>
 +
::<b><code><span style="color:#3366CC;font-size:1.2em;">vgs</span></code></b>
 +
::<b><code><span style="color:#3366CC;font-size:1.2em;">lvs</span></code></b>
 +
::<b><code><span style="color:#3366CC;font-size:1.2em;">df -h</span></code></b>
 +
<ol>
 +
<li value="3">Record the size of the volume group and the amount of free space</li>
 +
<li>At the top of your VM window (make certain <u>not</u> full screen mode) click the '''view''' menu and change view from '''Console''' to  <u>Details</u>''' .</li>
 +
<li>At the bottom left-hand corner, click '''Add Hardware''' and add a new storage device of '''2GBs''', make sure the '''Bus type''' is selected as: '''VirtIO disk'''.<br><br>'''NOTE: Make certain to click "select managed or other existing storage", and fill in the pathname circled in red as shown in the diagram on the right-hand-side.<br><br>'''</li>
 +
<li>Go back to the '''console''' view</li>
 +
<li>Issue the command: <b><code><span style="color:#3366CC;font-size:1.2em;">ls /dev/vd*</span></code></b>, what has changed?</li>
 +
<li>Use '''fdisk''' (''refer to how to use in Part 1'') to create a new single primary partition for '''/dev/vdb''' that fills the entire disk, save partition table (accepting defaults prompts would work), restart your '''centos3''' VM and then '''format''' that partition for file type: '''ext4'''.</li>
 +
<li>Now we'll make the new device a '''physical volume''', add it to the '''volume group''', and extend '''lv_root''':</li>
 +
</ol>
 +
:: <b><code><span style="color:#3366CC;font-size:1.2em;">pvcreate /dev/vdb1</span></code></b> (enter '''y''' to proceed - ignore warning)
  
== Part 3: Managing Groups ==
+
:: <b><code><span style="color:#3366CC;font-size:1.2em;">vgs</span></code></b> (to determine: ''name_of_volumegroup'')
  
#Remain in your '''centos1''' VM for this section.
+
:: <b><code><span style="color:#3366CC;font-size:1.2em;">vgextend ''name_of_volumegroup''   /dev/vdb1</span></code></b>
# Read the man page for the <b><code><span style="color:#3366CC;font-size:1.2em;">groupadd</span></code></b> and <b><code><span style="color:#3366CC;font-size:1.2em;">groupdel</span></code></b> commands.
 
# Note which option allows you to set the Group ID number ('''GID''') when you create a new group.
 
# Examine the file <b><code><span style="color:#3366CC;font-size:1.2em;">/etc/group</span></code></b>
 
#* Which values of GID are reserved for system accounts?
 
#* Which values of GID are reserved for non-system user accounts?
 
#* What is the lowest available GID number for non-system users?
 
#* What is the default group name of a new user?
 
#* Add a new group named <b><code><span style="color:#3366CC;font-size:1.2em;">ops235</span></code></b> with a GID of <b><code><span style="color:#3366CC;font-size:1.2em;">600</span></code></b>.
 
#* The management at your organization have concerns regarding some irresponsible users on your system.
 
#** Add a new group named '''investigation'''.
 
#** Look at '''/etc/group''' and note the GID of group called '''investigation'''.
 
#** What GID is given to a new group if you do not specify it?
 
#** In the file, add those users to the end of the concerned group (separate each user-name with a comma).
 
#** Those individuals have explained their actions to management and the crisis has been resolved. Delete the '''investigation''' group.
 
#** Look at '''/etc/group''' again and note the change.
 
  
'''Answer the Part 3 observations / questions in your lab log book.'''
+
:: <b><code><span style="color:#3366CC;font-size:1.2em;">lvextend -L +2G -r ''name_of_volumegroup''/lv_root</span></code></b>
  
== Part 4: Deleting / Modifying Users ==
+
{| width="40%" align="right" cellpadding="10"
 +
|- valign="top"
 +
|{{Admon/note|LVM Safeguards When Reducing File System Size|In older versions of LVM, the system administrator had to be careful when reducing the size of Linux file-systems using LVM. This usually required to separate operations:<ul><li>Reducing the file-system to make room (''resize2fs'')</li><li>Reduce the logical volume by using the '''lvreduce''' command</li></ul>This used to be performed to prevent a catastrophic loss of data if the logical volume was resize smaller than the available space on the file-system.<br>The newer LVM commands have "safeguards" (eg. option '''-r''' to prevent destroying the file-system (thus making the ''resize2fs'' command <u>obsolete</u>). '''|}}
 +
|}
  
#Remain in your '''centos1''' VM for this section.
+
<ol>
# Read the man page for the '''userdel''' command. Note which option automatically removes the users home directory when that user is deleted.
+
<li value="13">Now rerun the '''ls /dev/vd*''' , '''pvs''' , '''vgs''' , '''lvs''' and '''df -h''' commands.</li>
# Delete the user '''ops235_1''' using the command <b><code><span style="color:#3366CC;font-size:1.2em;">userdel ops235_1</span></code></b>
+
<li>Record the size of the volume group and the amount of free space. What has changed and what caused those changes?</li>
# Delete the user '''ops235'''_2 using the same command with the option which removes the home directory of the user.
+
<li>Among the changes, note that your root file-system is now 2GB bigger, and you have not even rebooted your machine since you used fdisk to create a partition!</li>
# Check the contents of the /home directory. What do you notice?
+
<li>Reduce the size of the '''lv_root''' partition by '''1GB''' by issuing the following command:<br><b><code><span style="color:#3366CC;font-size:1.2em;">lvreduce ''name_of_volumegroup''/lv_root  --size  -1G</span></code></b></li>Confirm that the file system has been reduced.</li><li>Increase the size of the '''lv_root''' partition by another '''1GB''' by issuing the command:<br><b><code><span style="color:#3366CC;font-size:1.2em;">lvextend ''name_of_volumegroup''/lv_root  --size  +1G</span></code></b></li>Confirm that the file system can been increased.</li><li>Record the LVM Management commands in your lab log-book.</li>
# Check the contents of the <b><code><span style="color:#3366CC;font-size:1.2em;">/etc/group</span></code></b> file. What do you notice?
+
</ol>
# Read the man page for the usermod command. Note which options change the user's full name, primary group, supplementary groups, and shell.
 
# Create a new user account called '''noobie''' for the employee: '''"Really Green"''' . Assign a password for that newly created user.
 
# Management has indicated that this employee be on on probation for 3 months. Use the '''usermod''' command to set the account for noobie to expire in 3 months from this day as part of the security policy of this organization.
 
# Add each of your new users to the group ops235 (in other words, add ops235 to each user as a supplementary group).
 
# Examine <b><code><span style="color:#3366CC;font-size:1.2em;">/etc/group</span></code></b>. What has changed?
 
# Use the '''usermod''' command to change the full name of the user account '''noobie''' from '''"Really Green"''' to '''"Outstanding Employee"'''. Examine the result of running that command in the <b><code><span style="color:#3366CC;font-size:1.2em;">/etc/passwd</span></code></b> file. What has changed?
 
# Use the '''usermod''' command to extend the use of their account for 5 years as of today.
 
# Be sure to record your observations in your lab notes.
 
  
'''Answer the Part 4 observations / questions in your lab log book.'''
 
  
=INVESTIGATION 2: Managing System Services and Run-levels=
+
'''Answer Part 2 observations / questions in your lab log book.'''
  
Many students may think that the following topic is small and "not a big deal". Those students may say, '''"How hard is running and stopping services?"'''
 
  
The process may not be hard, but knowing how to stop, start, restart and check the status of services is absolutely critical to a Linux server. '''Aside from learning to trouble-shoot problems''' by checking the status of running services, '''understanding how to manage services is critical to help protect a Linux server from penetration''' (this term is referred to as "'''Hardening a system'''"). Sometimes it is "what we don't know" that can harm us. One key element in hardening a computer system is to disable non essential networkng services to allow IDSs ('''Intrusion Detection Systems''') to focus on a narrower range of policy violations. A Debian-based penetration testing distribution called Kali (formerly referred to as '''BackTrax''') allows sysadmins and security professionals to identify vulnerabilities in their computer systems, and thus improve (harden) their systems against penetration. Learning to monitor the status, enable and disable networking services underlies the '''Backtrax''' motto:<br><br>'''''"The quieter you are, then more you will hear..."'''''<br><br>
+
= INVESTIGATION 2: ADDITIONAL FILE-SYSTEM OPERATIONS =
  
=== Part 1: How do we Manage System Services? ===
+
We take for granted that a file-system must be mounted (for example the root partition) in order for a Linux system to be usable upon system start-up. This was create automatically for the '''/archive''' mount point automatically when we used the system-config-lvm utility in the previous investigation. We need to learn now to do this manually by editing or adding an entry in the ''/etc/fstab'' file. The '''/etc/fstab''' (file system table) contains entries to mount various file systems automatically upon start-up of the Linux system.
  
We have seen that maintaining unneeded '''packages can be a security risk''' due to the unnecessary increase in the complexity of your system. Similarly, it is also unnecessarily hazardous, and even more so, to leave unneeded services running. In this investigation, we will learn how to '''control services, and turn off those services that we think are not necessary to help reduce security risks'''.}}
+
The Linux system administrator also has the ability to manually '''mount''' (connect) and '''un-mount''' (disconnect) partitions in order to perform maintenance on the file system (for example un-mounting the '''/home''' partition to install software and prevent users from logging in during that process).
  
#Use your '''centos2''' VM for this part.
 
<ol>
 
  <li value="2">Use the '''man''' pages to learn about the '''service''' command.</li><li>Issue the following Linux command:
 
      <ul>
 
        <li><b><code><span style="color:#3366CC;font-size:1.2em;">service --status-all</span></code></b></li>
 
      </ul>
 
  </li>
 
  <li>Note the services that are currently running.</li>
 
  <li>Use the command <b><code><span style="color:#3366CC;font-size:1.2em;">service iptables stop</span></code></b> to stop the service named '''iptables'''</li>
 
  <li>Run a command to verify that the '''iptables''' service has stopped.</li>
 
  <li>A newer method of managing services is by using '''systemd'''. It has the ability to manage dependent service in parallel and allow one service to be stopped without disrupting the other services. Here is a link that briefly explains how to use '''systemd''' (as opposed to tradition method: ''init'') and the '''systemctl''' command: [http://zenit.senecac.on.ca/wiki/index.php/Init_vs_systemd init vs systemd]</li>
 
  <li>If you reboot now - the iptables service will be turned back on. We don't want it on though, it causes students headaches. To turn it off permanently we need to use the '''chkconfig''' command:<br><b><code><span style="color:#3366CC;font-size:1.2em;">chkconfig iptables off</span></code></b></li>
 
  <li>Use the '''systemctl''' command (from the link above - showing examples) to verify that the '''iptables''' service is off ('''hint:''' issue command, and pipe to grep "'''iptables'''").
 
  <li>Reboot and confirm that it's no longer running.</li>
 
</ol>
 
  
'''Answer Part 1 observations / questions in your lab log book.'''
+
== Part 1: Mounting and Un-mounting Partitions ==
 +
[[Image:mount.png|thumb|700px|right|Using the '''mount''' command with no arguments displays file-systems that are already mounted. The Linux system administrator can use the '''mount''' and '''umount''' commands to connect and disconnect different partitions from the file-system to perform maintenance.]]
 +
# Perform this part in your '''centos2''' VM.
 +
# As you may recall in Part 1 of Investigation 1, we created another logical volume called '''archive''' using the graphical application '''system-config-lvm'''. This logical volume should be mounted (connected) to our existing file-system (2GB).
 +
# Issue the following command: <b><code><span style="color:#3366CC;font-size:1.2em;">mount</span></code></b>
 +
# What is the purposed of issuing this command without arguments? Can you see the '''/archive''' mount point?
 +
# Confirm that the directory named '''/archive''' is mounted.
 +
# You can use the '''umount''' command to unmount a file-system (eg. for maintenance purposes). Note the the name of the command is umount, <u>not</u> unmount.
 +
# Make certain you are not located in the /archive directory, and issue the following command to unmount the /archive directory:<br><b><code><span style="color:#3366CC;font-size:1.2em;">umount /archive</span></code></b>
 +
# Issue the '''mount''' command (without arguments) to confirm it has been unmounted.
 +
# View the contents of the file-system table /etc/fstab by issuing the following command:<br><b><code><span style="color:#3366CC;font-size:1.2em;">cat /etc/fstab</span></code></b>
 +
# Note the line that automatically mounts a file-system (''/dev/sda3'', type ''ext4'') to '''/archive'''. This was automatically performed for you via the '''system-config-lvm''' utility.
 +
# View and record the fields for the '''/archive''' mount in your lab logbook, and then issue the following command to reconnect or mount '''/archive''':<br><b><code><span style="color:#3366CC;font-size:1.2em;">mount &nbsp;  -t ext4 &nbsp;  /dev/centos_centos2/archive &nbsp;  /archive</span></code></b><br><br>'''NOTE:''' If you are having problem mounting, use the /dev pathname listing in your /etc/fstab file.<br><br>
 +
# Confirm that this file-system has been properly mounted. Note: You could have also issued the command: '''mount -a''' to <u>automatically</u> mount the file-systems contained in the '''/etc/fstab''' file.<br><br>Tip: If you had to do manually configure /etc/fstab (eg. only in text-based mode - centos3), you could have issued the command (as root):<br> <b><code><span style="color:#3366CC;font-size:1.2em;">echo "/dev/centos_centos2/archive    /archive  ext4  defaults 1 2" >> /etc/fstab</span></code></b><br>(although we don't need to do this, since it was already done).<br><br>
 +
# '''A curious question''': If root needs to unmount the '''/home''' directory for maintenance but we had to first login in graphically as a regular user, then su to "root", isn't our regular user still logged in so we can't un-mount the /home directory?!? How can we as a Linux System Administrator get around the problem (hint: you already learned it somewhere in lab3!!! Wow, using what we already taught can pay-off in the future ... lol!).
  
  
===Part 2: How do we Manage Runlevels?===
 
  
Running servers in graphical mode will make your system most likely to be penetrated. The X-windows framework can be vulnerable to attacks when these servers are connected to the Internet. This is why when you install server versions of Linux, they work in text-based mode only. Desktop versions of Linux are then installed on workstations (working in graphical mode) that connect to the server (for security reasons).
+
'''Answer the Part 1 observations / questions in your lab log book.'''
  
The Linux sysadmin can also change the run-level (or state) of a graphical Linux server to run in text-based mode and run the graphical mode by issuing a command when graphic mode is required. The run-level term is now deprecated in Fedora, and will likely be deprecated in RHEL/CentOS at some point as well, but for now this is what the industry is using.
 
  
 +
== Part 2: Monitoring Disk Space ==
 +
[[Image:disk_usage.png|thumb|500px|right|The '''df''' and '''du''' commands are useful tools for Linux system administrators to flag disk space issues and investigate their causes.]]
 +
Another essential duty of a Linux system administrator is to anticipate problems and take preventative measures to avoid computer system problems <u>before</u> that occur.
  
 +
Monitoring disk space activity helps provide Linux system administrators information to help take corrective action before problems can occur.
  
#Perform this part in both your '''centos2''' and '''centos3''' VMs.
+
# Remain in your '''centos2''' VM for this section.
<ol>
+
# Issue the command: <b><code><span style="color:#3366CC;font-size:1.2em;">df -h</span></code></b>
  <li value="2">Issue the following Linux command:
+
# Note the disk space usage for '''/''', '''/home''', and '''/archive''' partitions.
      <ul>
+
# If a partition is running out of available space, the Linux System Administrator can reallocate space among partitions or add another disk and grow the file system (like you did in a previous investigation). The administrator also can investigate the cause of low disk space. Two examples immediately come to mind: excessive use of space from users, and potential penetration from hackers.
        <li><b><code><span style="color:#3366CC;font-size:1.2em;">runlevel</span></code></b></li>
+
# To investigate excessive disk usage by regular users, you can obtain a total amount of disk usage for that user by issuing the command:<br><b><code><span style="color:#3366CC;font-size:1.2em;">du -hs /home/regularuserid</span></code></b>
      </ul>
+
# To provided a more detailed list of usage (file-by-file), issue the command:<br><b><code><span style="color:#3366CC;font-size:1.2em;">du -h /home/regularuserid | more</span></code></b>
  </li>
+
# If there is a recurring space usage problem with regular users, the Linux system administrator can impose quotas (caps on disk usage). This method is not taught in this course.
  <li>Note the difference in output between '''centos2''' and '''centos3'''.</li>
+
# The methods to monitor potential penetration to a Linux system are too numerous, and are taught in other coures (for example: SEC520). On method of monitoring potential penetration is to look for abnormally large files. Issue the command:<br><b><code><span style="color:#3366CC;font-size:1.2em;">find -P / -size +100000k</span></code></b>
  <li>You can use the '''init''' command to change the current run-level. See a list of runlevels [https://www.centos.org/docs/5/html/5.2/Installation_Guide/s2-init-boot-shutdown-rl.html here].</li><li> Use the '''man''' command to learn how to use the '''init''' command. Use this command to change the current run-level in '''centos2''' to '''3'''. What happened?</li>
+
# Did you see any files that are that size?
  <li>Issue the following Linux command:
+
# The next section will apply some of these tools we have discussed into a shell script and crontab entry to periodically monitor and contact the system administrator of potential disk space issues (before they become a serious problem).
    <ul>
 
      <li><b><code><span style="color:#3366CC;font-size:1.2em;">startx</span></code></b></li>
 
    </ul>
 
  </li>
 
  <li>What happens?</li>
 
  <li>Log-off your graphical system. You should return to your shell prompt.</li>
 
  <li>Using systemd requires a different method of setting text mode and graphical mode. You can refer to this link for future reference:  
 
[http://fedoraproject.org/wiki/Systemd#How_do_I_change_the_runlevel.3F How to Change Run-Levels with Systemd]</li><li>Restart your centos2 machine, and make certain that it runs in '''graphical''' mode</li>
 
  </li>Why would you want to make a graphical Linux system run in text-based mode?</li>
 
</ol>
 
  
  
'''Answer Part 2 observations / questions in your lab log book.'''
+
'''Answer the Part 2 observations / questions in your lab log book.'''
  
  
 
= INVESTIGATION 3: LOOKING AHEAD =
 
= INVESTIGATION 3: LOOKING AHEAD =
  
==Automating Routine Tasks (Shell Scripting)==
+
==Automating Routine Tasks (Scheduling The Running of Shell Script Via Crontab)==
 
{|width="40%" align="right" cellpadding="10"
 
{|width="40%" align="right" cellpadding="10"
 
|- valign="top"
 
|- valign="top"
|
+
|{{Admon/tip|Bash Shell Scripting Tips:|<br><ul><li>'''Using awk to Manipulate Text:'''<br><br>Legend has it that the '''awk''' command was invented by three C programmers that wanted to create a utility in Unix that had programming syntax more like C programming. People started to use the command and found it very useful for report generation and file repair or manipulation.<br><br>The command mimics a C program, with braces '''{  }''' that surround the action to perform based on records from a database file matching either test conditions, regular expressions, etc. Fields appear as numbers with $.<br><br>'''<u>Examples</u>:'''<br><br>''awk '{print}' data-file.txt''<br><br>''awk -F";" '{print $5,$3}' data-file.txt''<br><br>''awk -F"," '$4 &gt;&#61; 10000 {print $1, $2}' salary.txt''</li></ul>}}
{{Admon/tip|Bash Shell Scripting Tips:|<br><ul><li>'''The case statement:'''<br><br>The case statement is a control-flow statement that works in a similar way as the if-elif-else statement (but is more concise). This statement presents scenerios or "cases" based on values or regular expressions (not ranges of values like if-elif-else statements). After action(s) are taken for a particular scenerio (or "case"), a break statement (''';;''') is used to "break-out" of the statement (and not perform other actions). A default case (*) is also used to catch exceptions.<br><br><u>'''Examples (try in shell script):'''</u><br><br>''read -p "pick a door (1 or 2): " pick<br>case $pick in<br>&nbsp; 1) echo "You win a car!" ;;<br>&nbsp; 2) echo "You win a bag of dirt!" ;;<br>&nbsp; *) echo "Not a valid entry"<br>&nbsp;&nbsp;&nbsp;&nbsp; exit 1 ;;<br>esac''<br><br>''read -p "enter a single digit: " digit<br>case $digit in<br>&nbsp; [0-9]) echo "Your single digit is: $digit" ;;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;  *)&nbsp;echo "not a valid single digit"<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;  exit 1 ;;<br>esac''<br><br></li><li>'''The getopts function:'''<br><br></li></ul>The getopts function allows the shell scripter to create scripts that accept options (like options for Linux commands). This provides the Linux administrator with scripts that provide more flexibility and versatility. A built-in function called '''getopts''' (i.e. get command options) is used in conjunction with a '''while''' loop and a '''case''' statement to carry out actions based on if certain options are present when the shell script is run. The variable '''$OPTARG''' can be used if an option accepts text (denoted in the getopts function with an option letter followed by a colon. Case statement exceptions use the ''':)''' and '''\?)''' cases for error handling.<br><br>'''<u>Example of getopts</u>''' (try in script and run with options)<br><br>''while getopts abc: name<br>do<br>&nbsp; case $name in<br>&nbsp; &nbsp; a) echo "Action for option \"a\"" ;;<br>&nbsp; &nbsp; b) echo "Action for option \"b\"" ;;<br>&nbsp; &nbsp; c) echo "Action for option \"c\""<br>&nbsp; &nbsp; &nbsp; &nbsp; echo Value is: $OPTARG" ;;<br>&nbsp; &nbsp; :) echo "Error: You need text after -c option"<br>&nbsp; &nbsp; &nbsp; &nbsp; exit 1 ;;<br>&nbsp; &nbsp; \?) echo "Error: Incorrect option"<br>&nbsp; &nbsp; &nbsp; &nbsp; exit 1 ;;<br>esac''<br><br>}}
 
 
|}
 
|}
  
We will now use shell scripting to help automate the task for a Linux adminstrator to create regular user accounts.
+
This emphasis on this section focuses on how to run useful shell scripts or shell script that we have created at specific dates/times. It would be silly to expect a system administrator to stay up late (eg. 2 a.m.) to manually run a shell script to terminate processes or to re-boot Linux servers. Database files (tables) are used to provide instructions on how frequent shell scripts or commands can be run. The '''cron''' daemon is used to refer to these files and to run them on a pre-determined basis. The term '''cron''' comes from the old word '''chronograph''' meaning a special type of watch (actually a ''stop-watch'') to help monitor and schedule routine tasks.
 
 
 
 
#Download, study, and run the following shell script. Issue the command:<br><b><code><span style=" pointer-events:none;cursor:default;color:#3366CC;font-size:1.2em;">wget https://scs.senecac.on.ca/~murray.saul/user-create.bash</span></code></b>
 
#Try to understand what these Bash Shell scripts do, and then run the script as root. After running the shell script, view the contents of the '''/home''' directory to confirm.
 
  
  
Although the '''zenity''' command is a "user-friendly" way to run shell scripts, Linux administrators usually create shell scripts that resemble common Linux commands. In this lab, you will learn to create a shell script using the getopts function to make your shell script behave more like actual Linux commands (including the use of options). Refer to the notes section on the right-hand-side for reference about the '''case''' statement and the '''getopts''' function.
 
  
 +
#Perform this section in your '''c7host''' machine
 +
#Make certain you are logged in as '''root'''.
 +
#Download, study, and run the following shell script. Issue the command:<br><b><code><span style=" pointer-events:none;cursor:default;color:#3366CC;font-size:1.2em;">wget https://scs.senecac.on.ca/~murray.saul/monitor-disk-space.bash</span></code></b>
 +
#Try to understand what this Bash Shell script does (refer to man pages for the '''awk''' command), and then run the script as root.
  
<ol><li value="3">Open a Bash shell terminal and login as root.</li><li>Use the wget command to download the input file called user-data.txt by issuing the command:<br><b><code><span style="color:#3366CC;font-size:1.2em;">wget https://scs.senecac.on.ca/~murray.saul/user-data.txt</span></code></b></li><li>View the contents on the user-data.txt file to confirm there are 3 fields (username, fullname, and e-mail address)which are separated by the colon (:) symbol.<li><li>Use a text editor (such as <b><code><span style="color:#3366CC;font-size:1.2em;">vi</span></code></b> or <b><code><span style="color:#3366CC;font-size:1.2em;">nano</span></code></b>) to create a Bash Shell script called: <b><code><span style="color:#3366CC;font-size:1.2em;">createUsers.bash</span></code></b> in /root's home directory.</li><li>Enter the following text content into your text-editing session:</li></ol>
 
<code style="color:#3366CC;font-family:courier;font-size:.9em;margin-left:20px;">
 
<br>
 
&#35;!/bin/bash <br>
 
<br>
 
&#35; createUsers.bash<br>
 
&#35; Purpose: Generates a batch of user accounts (user data stored in a text file)<br>
 
&#35;<br>&#35; USAGE:<br>
 
&#35;<br>&#35; /root/createUsers.bash [-i {input-path}] <br>
 
&#35;<br>
 
&#35; Author: *** INSERT YOUR NAME ***<br>
 
&#35; Date:  *** CURRENT DATE ***<br>
 
<br>
 
if [ $PWD != "/root" ]  # only runs if in root's home directory<br>
 
then<br>&nbsp;echo "You must be in root's home directory." >&2<br>
 
&nbsp;exit 1<br>
 
fi<br>
 
if [ "$#" -eq 0 ] #  if no arguments after command<br>
 
then<br>
 
&nbsp;echo "You must enter an argument" >&2<br>
 
&nbsp;echo "USAGE: $0 [-i {input-path}]" >&2<br>
 
&nbsp;exit 2<br>
 
fi<br>
 
</code>
 
<br>
 
<ol><li value="6">Save your editing session, but remain in the text editor.</li><li>The code displayed below uses the getopt function set the input file pathname or check for invalid options or missing option text. Add the following code</li></ol>
 
<br>
 
<code style="color:#3366CC;font-family:courier;font-size:.9em;">
 
<br>
 
outputFlag="n"<br>
 
while getopts i: name<br>
 
do<br>
 
&nbsp;case $name in<br>
 
&nbsp; &nbsp;i) inputFile=$OPTARG ;;<br>
 
&nbsp; &nbsp;:) echo "Error: You need text after options requiring text"<br>
 
&nbsp; &nbsp; &nbsp; &nbsp;exit 1 ;;<br>
 
&nbsp; &nbsp;\?) echo "Error: Incorrect option"<br>
 
&nbsp; &nbsp; &nbsp; &nbsp; exit 1 ;;<br>
 
&nbsp;esac<br>
 
done<br>
 
</code>
 
<ol><li value="6">Save your editing session, but remain in the text editor.</li><li>The code displayed below uses logic to exit the script if the input file does not exist. Command substitution is used to store each line of the input file as a positional parameter. There is one subtle problem here: The full names of the users contain spaces which can create havoc when trying to set each line as a separate positional parameter. In this case the sed command is used to convert spaces to plus signs (+), which will be converted back later. Finally, a '''for''' loop is used to create each account ('''useradd''') and mail the user their account information ('''mail'''). Add the following code:</li></ol>
 
<br>
 
<code style="color:#3366CC;font-family:courier;font-size:.9em;">
 
<br>
 
if [ ! -f $inputFile ]<br>
 
then<br>
 
&nbsp; echo "The file pathname \"$inputFile\" is empty or does not exist" >&2<br>
 
&nbsp; exit 2<br>
 
fi<br>
 
<br>
 
set $(sed 's/ /+/g' $inputFile)  # temporarily convert spaces to + for storing lines as positional parameters<br>
 
<br>
 
for x<br>
 
do<br>
 
&nbsp; &nbsp; useradd -m -c "$(echo $x | cut -d":" -f2 | sed 's/+/ /g')" -p $(date | md5sum | cut -d" " -f1) $(echo $x | cut -d":" -f1)<br>
 
&nbsp; &nbsp; mail -s "Server Account Information" $(echo $x | cut -d":" -f3) <<+<br>
 
&nbsp; &nbsp; Here is your server account information:<br>
 
&nbsp; &nbsp; servername: myserver.senecac.on.ca<br>
 
&nbsp; &nbsp; username:  $(echo $x | cut -d":" -f1)<br>
 
&nbsp; &nbsp; password: $(date | md5sum | cut -d" " -f1)<br>
 
&nbsp; &nbsp; Regards,<br>
 
&nbsp; &nbsp; IT Department<br>
 
+<br>
 
done<br>
 
<br>
 
echo -e "\n\nAccounts have been created\n\n"<br>
 
exit 0<br>
 
</code>
 
  
 +
In order to automatically run the above-mentioned script periodically, you use the scheduler in Linux called '''crontab'''. The term crontab stands for '''Chronograph Tables''', where a chronograph is the old term for a timepiece (the forerunner of the modern watch). You can run the crontab command to schedule commands and shell script to be run in a number of different ways.
 +
<br><br>
 
<ol>
 
<ol>
<li value="8">Save, set permissions, and then run that shell script for the input text file '''user-data.txt'''. Did it work? Try running the script without an argument - What did it do? </li><li>You have completed lab4. Proceed to Completing The Lab, and follow the instructions for "lab sign-off".</li></ol>
+
  <li value="5">Quickly view the tutorial about the <b>[http://code.tutsplus.com/tutorials/scheduling-tasks-with-cron-jobs--net-8800 Using crontab]</b> file to understand the purpose of this
 +
  file and how to basically set up a schedule to run a shell script.</li>
 +
  <li>Issue the following command to setup a crontab entry for root:<br><b><code><span style=" pointer-events:none;cursor:default;color:#3366CC;font-size:1.2em;">crontab -e</span></code></b></li><li>Enter the following line in order to run at 6:00 on the first day of every month:<br><b><code><span style=" pointer-events:none;cursor:default;color:#3366CC;font-size:1.2em;">0 6 1 * * /root/monitor-disk-space.bash #Runs first day of each month (6:00 am)</span></code></b></li><li>'''Save''' the crontab entry.</li><li>Confirm that the entry was properly saved by issuing the following command:<br><b><code><span style=" pointer-events:none;cursor:default;color:#3366CC;font-size:1.2em;">crontab -l</span></code></b></li></ol>
  
 
'''Answer Investigation 3 observations / questions in your lab log book.'''
 
'''Answer Investigation 3 observations / questions in your lab log book.'''
  
= LAB 4 SIGN-OFF (SHOW INSTRUCTOR) =
+
= LAB 5 SIGN-OFF (SHOW INSTRUCTOR) =
{{Admon/important|Time for a new backup!|If you have successfully completed this lab, make a new backup of your virtual machines. Remember to also make a backup of the new second virtual disk drive on ''centos1'' -- you now have two virtual disks on ''centos1'', and therefore two image files, and therefore will need two backup files.}}
+
{{Admon/important|Time for a new backup, INCLUDING YOUR VIRTUAL HARD DRIVE!|If you have successfully completed this lab, make a new backup of your virtual machines. <br><br>'''Virtual hard-drives created in this lab are image files, and now need to be backed up as well!'''.}}
  
 
'''Arrange proof of the following on the screen:'''
 
'''Arrange proof of the following on the screen:'''
  
::<span style="color:green;font-size:1.5em;">&#x2713;</span> Account created on '''centos1''' VM.
+
<ol><li><span style="color:green;font-size:1.5em;">&#x2713;</span> '''centos2''' VM:<blockquote><ul><li>'''Logical Volume''', '''Physical Volume''', and '''Volume Group''' information </li><li>Contents of '''/etc/fstab''' file</li><li>Proof that '''/archive''' has been mounted</li></ul></blockquote><li><span style="color:green;font-size:1.5em;">&#x2713;</span> '''centos3''' VM:<blockquote><ul><li>Proof of virtual hard disk creation</li><li>'''Logical Volume''', '''Physical Volume''', and '''Volume Group''' information </li></ul></blockquote></li><li><span style="color:green;font-size:1.5em;">&#x2713;</span> '''c7host''' Machine:<blockquote><ul><li>Proof of creation of the shell script: '''monitor-disk-space.bash'''</li><li>Crontab entry for '''root''' account</li></ul></blockquote><li><span style="color:green;font-size:1.5em;">&#x2713;</span> '''Lab5''' log-book filled out.</li></ol>
::<span style="color:green;font-size:1.5em;">&#x2713;</span> List contents of '''/etc/group''' file (ops235 group) on '''centos1''' VM.
+
 
::<span style="color:green;font-size:1.5em;">&#x2713;</span> List contents of '''/etc/passwd''' file (created accounts) on '''centos1''' VM.
 
::<span style="color:green;font-size:1.5em;">&#x2713;</span> Display current run-level status on '''centos2''' VM.
 
::<span style="color:green;font-size:1.5em;">&#x2713;</span> Creation of your bash shell script called '''createUsers.bash'''
 
  
= Preparing for the Quizzes =
+
== Practice For Quizzes, Tests, Midterm &amp; Final Exam ==
  
# Describe all of the field in <code>'''/etc/passwd'''</code>
+
# What is a VG? PV? LV?  
# What is the command to create a user? What option to create a home directory for that user?
+
# What is the total size of the "main" VG on your system?
# What is the command to change the full name of an already-created user?
+
# How do you create an LV?
# What is the command to delete a user account? What option allows for the user's home directory to be removed as well?
+
# How do resize an LV?
# What is the command to create a group? What is the command (or steps) to include a user in a newly-created group?
+
# How would you add the disk partition '''/dev/sdb7''' to your volume group "main"?
# What is the purpose of <code>'''/etc/shadow'''</code>?
+
# How would you increase the size of the root filesystem by 50 MB?
# What is the purpose of <code>'''/etc/skel'''</code>?
+
# How can you determine if a partition has been mounted onto a system?
# What does the term run-level mean?
+
# How can you unmount an existing partition from the file-system?
# How to set the run-level of a Linux system to text-based only? How to set to graphical mode?
+
# How can you temporarily mount a partition on a file-system?
# What is the command to view the status of running services?
+
# How can you permanently mount a partition on a file-system upon boot-up?
# What is the command to start a service (like httpd, or sshd)?
+
# What are the separate elements (fields) of the '''/etc/fstab''' file?
# What is the command to start a service?
+
# Describe the tools that a Linux system administrator have to monitor disk space usage.
# Can a service be stopped and started by issuing just one command?
 
  
 
[[Category:OPS235]]
 
[[Category:OPS235]]
 
[[Category:OPS235 Labs]]
 
[[Category:OPS235 Labs]]

Latest revision as of 11:15, 27 November 2019

Stop (medium size).png
THIS IS AN OLD VERSION OF THE LAB
This is an archived version. Do not use this in your OPS235 course.

LAB PREPARATION

Purpose / Objectives of Lab 5

Monitoring disk space and taking corrective action before problems arise is a critical operation for a system administrator.


The purpose of this lab is to demonstrate how a Linux system administrator can monitor hard disk space availability, and to manage file system size via the Logical Volume Manager (LVM) application. This lab will also demonstrate how to manually mount (i.e. connect) and unmount (disconnect) partitions to file system directories, and demonstrate how to have partitions automatically mounted to directories upon Linux system startup.

Main Objectives

  • Using LVM to resize partitions graphically and via command-line.
  • Create, partition and format virtual hard disks to increase the size of a file system.
  • Manually connect and disconnect directories (mount points) to existing partitions (mount, umount).
  • Monitoring Disk Space (df -h).
  • Create a Bash Shell script to monitor and report low disk size (run periodically in crontab).


Minimum Required Materials

Removable Hard Disk Pack (SATA)
USB key
(for backups)
Lab5 Log Book

My Toolkit (CLI Reference)

LVM Information: LVM Management Miscellaneous

INVESTIGATION 1: MANAGING FILE-SYSTEMS USING LVM

Note.png
VM Backups and Recovery
Most of these investigations will take place in your virtual machines. If you make a significant mistake, your virtual machine may not boot. Remember that you created backups of your virtual machines in Lab 2, and you can restore them if something goes wrong.

Remember: if you did not create backups for all of your VMs, then you don't have any restoration points to fall-back to!

Monitoring and ensuring adequate space for a Linux file-system is considered to be a critical task for any system administrator. An application called LVM is a very useful tool for Linux system administrators to easily manage file systems - even when the computer system is running!

LVM (Logical Volume Management) is used to manage hard disk drives / partitions for Linux and Unix systems. LVM provides more flexibility than just partitioning hard disks. Volume Groups are areas used to define Physical Volumes (i.e. hard disks, disk partitions, or other forms of storage devices). Logical Volumes are then used to relate directories (mount points) to a specific physical volume or for a "range" or "span" of physical volumes.

LVM allows more flexibility and growth potential for Linux systems (for example, having Logical volumes span multiple hard disks). CentOS uses LVM by default upon installation. Other Linux distributions may provide the capacity to install LVM,


Part 1: Manage LVM Graphically

The system-config-lvm application allows the Linux system administrator to manage LVMs Graphically. Your LVM information for centos2 VM should be similarly displayed.
  1. Let's learn to administer (manage) our LVM graphically for our centos2 Virtual Machine.
  2. Launch your centos2 VM and open a shell terminal.
  3. CentOS provides a tool called system-config-lvm to graphically administer LVM.

    NOTE: This tool may be replaced by a future graphical LVM management tool and is NOT currently available in the default repositories. We will now perform a "work-around" in order to make the system-config-lvm utility work in our system.

  4. Issue the following command to download the system-config-lvm rpm:
    wget https://kojipkgs.fedoraproject.org//packages/system-config-lvm/1.1.18/1.fc19/noarch/system-config-lvm-1.1.18-1.fc19.noarch.rpm
    (Although it is an rpm file for the Fedora Distribution, it will also work for Centos7).

  5. Make certain that you are logged in as root.
  6. Try issuing the command: rpm -i ./system-config-lvm-1.1.18-1.fc19.noarch.rpm
    You should notice an error.
  7. Use the yum install command to resolve the following dependencies:
    • yum install gnome-python2-bonobo
    • yum install gnome-python2-gnome
    • yum install usermode-gtk

  1. Re-issue the command: rpm -i ./system-config-lvm-1.1.18-1.fc19.noarch.rpm
    It should work this time.
  2. Run the command: system-config-lvm
  3. On the left-hand side, you can click on the Volume Group, Physical Volume and Logical Volumes and view their properties on the on the right-hand side.
  4. Determine the current LVM configuration by clicking on the appropriate element and reading the properties in the right-hand panel -- write down the answers:
    1. What are the names and sizes of the Volume Group?
    2. What is the name and size of the Physical Volumes?
    3. What are the names and sizes of the Logical Volumes?
    4. Is there any space in the VG which is not allocated to a LV?

  5. Click on Logical View (i.e. above home, root, swap) and then click Create New Logical Volume button. What happens? Why do you think this happened?

    We will now create another partition (/dev/vda3) using the fdisk utility, format this newly-created partition so we can create another logical volume called archive.

  6. Quit the system-config-lvm application.
  7. In the terminal as root, issue the command: ls /dev/vd*

    NOTE: If nothing displays, issue the command: ls /dev/sd* and use that device pathname /dev/sda instead.

  8. Issue the command: fdisk /dev/vda
    (or fdisk /dev/sda if the previous command didn't work)
  9. At the fdisk prompt issue the command: p. What does this do?
  10. Now issue the commands n (new partition), p (primary partition), 3 (i.e. next available partition number). When prompted for initial block, press enter to accept the default beginning block size, and type: +2G at ending block (create 2GB for partition) and press enter.
  11. At the fdisk prompt, issue the command p to review the partition information, then type w to save partition table and exit (ignore WARNING message).
  12. You must restart your centos2 VM to allow changes to take effect
  13. Open a terminal as root, and format your newly-created partition by issuing the command: mkfs -t ext4 /dev/vda3
    (or mkfs -t ext4 /dev/sda3)
What system-config-lvm display should appear after using fdisk to create new partition (/dev/sda3), formatting partition, adding partition to LVM, and allocating partition to our default volume group.
Creating a new logical volume from our newly created physical volume
  1. Restart the system-config-lvm utility. Do you see a new /dev/sda3 partition under Physical Volumes?
  2. To add the newly created partition, you need to add it into LVM to be used. Exit the system-config-lvm utility and issue the following command to add the partition into LVM:
    pvcreate /dev/vda3 (or pvcreate /dev/sda3 ) (enter y to proceed - ignore warning)
  3. Restart system-config-lvm. You should notice a section at the bottom indicating Unallocated Physical Volumes. Click on the unallocated partition /dev/vda3 and then click Add to Existing Volume Group (click on other button in next screen to continue). The screen should now show the partition /dev/vda3 contained in our default Volume Group (refer to diagram on right-side for reference).
  4. Click on Logical View (i.e. above home, root, swap), and then click on Create New Logical Volume button and fill out the details for this new logical volume including: size: 1GB, LV Properties: linear, file system: ext4 file system name: archive, select mount and mount it at: /archive. Have the system create the directory /archive if it does not exist (Refer to diagram on right for reference).
  5. Confirm that this new Logical Volume now exists by changing to the directory /archive. Did you need to restart your centos2 VM to confirm that the /archive directory is now on your centos2 VM?
  6. Use system-config-lvm to resize (i.e. edit) the archive logical volume to 1.5 GB and verify your results.


Answer Part 1 observations / questions in your lab log book.

Part 2: Managing LVM Via Command Line & Adding Virtual Hard Drives

You can add virtual hard disks for a VM by changing to the Details section for the VM (as opposed to console), click Add Hardware, fill information in the Add New Virtual Hardware dialog box and clicking Finish.

Let's say that you have run out of disk space on your centos3 VM, and you need more space on the root file-system in order to host more web-pages, or to support a larger database. What are your options? Getting a replacement hard-drive would probably require re-installation of the operating system and/or backing up and restoring data on the old hard disk.

Because we're using LVM we can avoid this problem. We can add a new virtual hard-drive (which will serve as a physical volume) to the volume group, and extend the root logical volume to make use of the new available space. Creating virtual hard drives is not only inexpensive, but a great way for students to learn now to simulate growing the size of the file system.

Perform the following operations to increase the size of lv_root in centos3:


  1. Perform this Part in your centos3 VM.
  2. Run the following commands and make note of the output:
ls /dev/vd*
pvs
vgs
lvs
df -h
  1. Record the size of the volume group and the amount of free space
  2. At the top of your VM window (make certain not full screen mode) click the view menu and change view from Console to Details .
  3. At the bottom left-hand corner, click Add Hardware and add a new storage device of 2GBs, make sure the Bus type is selected as: VirtIO disk.

    NOTE: Make certain to click "select managed or other existing storage", and fill in the pathname circled in red as shown in the diagram on the right-hand-side.

  4. Go back to the console view
  5. Issue the command: ls /dev/vd*, what has changed?
  6. Use fdisk (refer to how to use in Part 1) to create a new single primary partition for /dev/vdb that fills the entire disk, save partition table (accepting defaults prompts would work), restart your centos3 VM and then format that partition for file type: ext4.
  7. Now we'll make the new device a physical volume, add it to the volume group, and extend lv_root:
pvcreate /dev/vdb1 (enter y to proceed - ignore warning)
vgs (to determine: name_of_volumegroup)
vgextend name_of_volumegroup /dev/vdb1
lvextend -L +2G -r name_of_volumegroup/lv_root
Note.png
LVM Safeguards When Reducing File System Size
In older versions of LVM, the system administrator had to be careful when reducing the size of Linux file-systems using LVM. This usually required to separate operations:
  • Reducing the file-system to make room (resize2fs)
  • Reduce the logical volume by using the lvreduce command
This used to be performed to prevent a catastrophic loss of data if the logical volume was resize smaller than the available space on the file-system.
The newer LVM commands have "safeguards" (eg. option -r to prevent destroying the file-system (thus making the resize2fs command obsolete).
  1. Now rerun the ls /dev/vd* , pvs , vgs , lvs and df -h commands.
  2. Record the size of the volume group and the amount of free space. What has changed and what caused those changes?
  3. Among the changes, note that your root file-system is now 2GB bigger, and you have not even rebooted your machine since you used fdisk to create a partition!
  4. Reduce the size of the lv_root partition by 1GB by issuing the following command:
    lvreduce name_of_volumegroup/lv_root --size -1G
  5. Confirm that the file system has been reduced.
  6. Increase the size of the lv_root partition by another 1GB by issuing the command:
    lvextend name_of_volumegroup/lv_root --size +1G
  7. Confirm that the file system can been increased.
  8. Record the LVM Management commands in your lab log-book.


Answer Part 2 observations / questions in your lab log book.


INVESTIGATION 2: ADDITIONAL FILE-SYSTEM OPERATIONS

We take for granted that a file-system must be mounted (for example the root partition) in order for a Linux system to be usable upon system start-up. This was create automatically for the /archive mount point automatically when we used the system-config-lvm utility in the previous investigation. We need to learn now to do this manually by editing or adding an entry in the /etc/fstab file. The /etc/fstab (file system table) contains entries to mount various file systems automatically upon start-up of the Linux system.

The Linux system administrator also has the ability to manually mount (connect) and un-mount (disconnect) partitions in order to perform maintenance on the file system (for example un-mounting the /home partition to install software and prevent users from logging in during that process).


Part 1: Mounting and Un-mounting Partitions

Using the mount command with no arguments displays file-systems that are already mounted. The Linux system administrator can use the mount and umount commands to connect and disconnect different partitions from the file-system to perform maintenance.
  1. Perform this part in your centos2 VM.
  2. As you may recall in Part 1 of Investigation 1, we created another logical volume called archive using the graphical application system-config-lvm. This logical volume should be mounted (connected) to our existing file-system (2GB).
  3. Issue the following command: mount
  4. What is the purposed of issuing this command without arguments? Can you see the /archive mount point?
  5. Confirm that the directory named /archive is mounted.
  6. You can use the umount command to unmount a file-system (eg. for maintenance purposes). Note the the name of the command is umount, not unmount.
  7. Make certain you are not located in the /archive directory, and issue the following command to unmount the /archive directory:
    umount /archive
  8. Issue the mount command (without arguments) to confirm it has been unmounted.
  9. View the contents of the file-system table /etc/fstab by issuing the following command:
    cat /etc/fstab
  10. Note the line that automatically mounts a file-system (/dev/sda3, type ext4) to /archive. This was automatically performed for you via the system-config-lvm utility.
  11. View and record the fields for the /archive mount in your lab logbook, and then issue the following command to reconnect or mount /archive:
    mount   -t ext4   /dev/centos_centos2/archive   /archive

    NOTE: If you are having problem mounting, use the /dev pathname listing in your /etc/fstab file.

  12. Confirm that this file-system has been properly mounted. Note: You could have also issued the command: mount -a to automatically mount the file-systems contained in the /etc/fstab file.

    Tip: If you had to do manually configure /etc/fstab (eg. only in text-based mode - centos3), you could have issued the command (as root):
    echo "/dev/centos_centos2/archive /archive ext4 defaults 1 2" >> /etc/fstab
    (although we don't need to do this, since it was already done).

  13. A curious question: If root needs to unmount the /home directory for maintenance but we had to first login in graphically as a regular user, then su to "root", isn't our regular user still logged in so we can't un-mount the /home directory?!? How can we as a Linux System Administrator get around the problem (hint: you already learned it somewhere in lab3!!! Wow, using what we already taught can pay-off in the future ... lol!).


Answer the Part 1 observations / questions in your lab log book.


Part 2: Monitoring Disk Space

The df and du commands are useful tools for Linux system administrators to flag disk space issues and investigate their causes.

Another essential duty of a Linux system administrator is to anticipate problems and take preventative measures to avoid computer system problems before that occur.

Monitoring disk space activity helps provide Linux system administrators information to help take corrective action before problems can occur.

  1. Remain in your centos2 VM for this section.
  2. Issue the command: df -h
  3. Note the disk space usage for /, /home, and /archive partitions.
  4. If a partition is running out of available space, the Linux System Administrator can reallocate space among partitions or add another disk and grow the file system (like you did in a previous investigation). The administrator also can investigate the cause of low disk space. Two examples immediately come to mind: excessive use of space from users, and potential penetration from hackers.
  5. To investigate excessive disk usage by regular users, you can obtain a total amount of disk usage for that user by issuing the command:
    du -hs /home/regularuserid
  6. To provided a more detailed list of usage (file-by-file), issue the command:
    du -h /home/regularuserid | more
  7. If there is a recurring space usage problem with regular users, the Linux system administrator can impose quotas (caps on disk usage). This method is not taught in this course.
  8. The methods to monitor potential penetration to a Linux system are too numerous, and are taught in other coures (for example: SEC520). On method of monitoring potential penetration is to look for abnormally large files. Issue the command:
    find -P / -size +100000k
  9. Did you see any files that are that size?
  10. The next section will apply some of these tools we have discussed into a shell script and crontab entry to periodically monitor and contact the system administrator of potential disk space issues (before they become a serious problem).


Answer the Part 2 observations / questions in your lab log book.


INVESTIGATION 3: LOOKING AHEAD

Automating Routine Tasks (Scheduling The Running of Shell Script Via Crontab)

Idea.png
Bash Shell Scripting Tips:

  • Using awk to Manipulate Text:

    Legend has it that the awk command was invented by three C programmers that wanted to create a utility in Unix that had programming syntax more like C programming. People started to use the command and found it very useful for report generation and file repair or manipulation.

    The command mimics a C program, with braces { } that surround the action to perform based on records from a database file matching either test conditions, regular expressions, etc. Fields appear as numbers with $.

    Examples:

    awk '{print}' data-file.txt

    awk -F";" '{print $5,$3}' data-file.txt

    awk -F"," '$4 >= 10000 {print $1, $2}' salary.txt

This emphasis on this section focuses on how to run useful shell scripts or shell script that we have created at specific dates/times. It would be silly to expect a system administrator to stay up late (eg. 2 a.m.) to manually run a shell script to terminate processes or to re-boot Linux servers. Database files (tables) are used to provide instructions on how frequent shell scripts or commands can be run. The cron daemon is used to refer to these files and to run them on a pre-determined basis. The term cron comes from the old word chronograph meaning a special type of watch (actually a stop-watch) to help monitor and schedule routine tasks.


  1. Perform this section in your c7host machine
  2. Make certain you are logged in as root.
  3. Download, study, and run the following shell script. Issue the command:
    wget https://scs.senecac.on.ca/~murray.saul/monitor-disk-space.bash
  4. Try to understand what this Bash Shell script does (refer to man pages for the awk command), and then run the script as root.


In order to automatically run the above-mentioned script periodically, you use the scheduler in Linux called crontab. The term crontab stands for Chronograph Tables, where a chronograph is the old term for a timepiece (the forerunner of the modern watch). You can run the crontab command to schedule commands and shell script to be run in a number of different ways.

  1. Quickly view the tutorial about the Using crontab file to understand the purpose of this file and how to basically set up a schedule to run a shell script.
  2. Issue the following command to setup a crontab entry for root:
    crontab -e
  3. Enter the following line in order to run at 6:00 on the first day of every month:
    0 6 1 * * /root/monitor-disk-space.bash #Runs first day of each month (6:00 am)
  4. Save the crontab entry.
  5. Confirm that the entry was properly saved by issuing the following command:
    crontab -l

Answer Investigation 3 observations / questions in your lab log book.

LAB 5 SIGN-OFF (SHOW INSTRUCTOR)

Important.png
Time for a new backup, INCLUDING YOUR VIRTUAL HARD DRIVE!
If you have successfully completed this lab, make a new backup of your virtual machines.

Virtual hard-drives created in this lab are image files, and now need to be backed up as well!.

Arrange proof of the following on the screen:

  1. centos2 VM:
    • Logical Volume, Physical Volume, and Volume Group information
    • Contents of /etc/fstab file
    • Proof that /archive has been mounted
  2. centos3 VM:
    • Proof of virtual hard disk creation
    • Logical Volume, Physical Volume, and Volume Group information
  3. c7host Machine:
    • Proof of creation of the shell script: monitor-disk-space.bash
    • Crontab entry for root account
  4. Lab5 log-book filled out.


Practice For Quizzes, Tests, Midterm & Final Exam

  1. What is a VG? PV? LV?
  2. What is the total size of the "main" VG on your system?
  3. How do you create an LV?
  4. How do resize an LV?
  5. How would you add the disk partition /dev/sdb7 to your volume group "main"?
  6. How would you increase the size of the root filesystem by 50 MB?
  7. How can you determine if a partition has been mounted onto a system?
  8. How can you unmount an existing partition from the file-system?
  9. How can you temporarily mount a partition on a file-system?
  10. How can you permanently mount a partition on a file-system upon boot-up?
  11. What are the separate elements (fields) of the /etc/fstab file?
  12. Describe the tools that a Linux system administrator have to monitor disk space usage.