Difference between revisions of "OPS235 Lab 4 - Fedora17"
Chris Tyler (talk | contribs) (→Investigation 1: How are LVMs managed using system-config-lvm?) |
|||
(183 intermediate revisions by 9 users not shown) | |||
Line 1: | Line 1: | ||
[[Category:OPS235]][[Category:OPS235 Labs]] | [[Category:OPS235]][[Category:OPS235 Labs]] | ||
− | = | + | {{Admon/caution|THIS IS AN OLD VERSION OF THE LAB|'''This is an archived version. Do not use this in your OPS235 course.'''}} |
+ | = Storage Setup (prior to starting Lab 4) = | ||
− | At this point, having completed [[OPS235 Lab 3|Lab 3]] you should have the following disk storage setup: | + | At this point, having completed [[OPS235 Lab 3|Lab 3]] you should have <u>roughly</u> the following disk storage setup:<br /> |
+ | ('''Note:''' These results are output from the '''vgs''', '''lvs''', and '''pvs''' commands within each virtual machine. You will be using these commands in the following lab investigations)<br /><br /> | ||
− | * fedora1 | + | * '''fedora1''' |
This VM has a GUI and no free space in the VG. | This VM has a GUI and no free space in the VG. | ||
Line 18: | Line 20: | ||
/dev/vda2 vg_fedora1 lvm2 a- 9.80G 0 | /dev/vda2 vg_fedora1 lvm2 a- 9.80G 0 | ||
− | * fedora2 | + | * '''fedora2''' |
This VM has a GUI and free space in the VG. | This VM has a GUI and free space in the VG. | ||
Line 33: | Line 35: | ||
/dev/vda2 vg_fedora2 lvm2 a- 14.80G 4.07G | /dev/vda2 vg_fedora2 lvm2 a- 14.80G 4.07G | ||
− | * fedora3 | + | * '''fedora3''' |
This VM has no GUI installed. | This VM has no GUI installed. | ||
Line 48: | Line 50: | ||
/dev/vda2 vg_fedora3 lvm2 a- 9.80G 3.83G | /dev/vda2 vg_fedora3 lvm2 a- 9.80G 3.83G | ||
− | * | + | * '''f17host (i.e. "disk pack")''' |
Four PVs, minimum VG size 60G | Four PVs, minimum VG size 60G | ||
Line 56: | Line 58: | ||
20% of disk space unallocated to any partition (min 15G) | 20% of disk space unallocated to any partition (min 15G) | ||
− | = Logical Volume Management = | + | = Logical Volume Management (Continued) = |
− | {{Admon/note|Recovering VMs|Most of these investigations will take place in you virtual machines. If you make a significant mistake, your virtual machine may not boot. Remember that you created backups of your virtual machines in Lab 3, and you can restore them if something goes wrong.}} | + | {{Admon/note|Recovering VMs|'''Most of these investigations will take place in you virtual machines.''' If you make a significant mistake, your virtual machine may not boot. Remember that you created backups of your virtual machines in Lab 3, and you can '''restore them if something goes wrong'''.}} |
== Resources == | == Resources == | ||
− | Please read this page to get an overview of LVM: | + | '''Please read this page to get an overview of LVM:'''<br /><br />('''Note:''' It is recommended to return to this guide as a reference when performing the next several investigations).<br /><br /> |
* [[Logical Volume Management]] | * [[Logical Volume Management]] | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | == Investigation | + | == Investigation 1: How are LVMs are managed using Command-Line Tools == |
− | ''' | + | # You are going to repeat the same LVM management operations (as your did with the ''fedora2'' VM in '''lab3'''), but you will using command-line tools in the '''fedora 3''' VM. Since the fedora3 VM only operates in command-line mode, you will need to refer to the '''"Logical Volume Management"''' link above. |
− | # Determine the current LVM configuration using the <code>pvs</code>, <code>vgs</code>, and <code>lvs</code> command. | + | # Write down the exact commands used at each step, and record appropriate command output: |
− | # Grow the home filesystem to 2G using the command <code>lvextend</code> and <code>resize2fs</code>. | + | ## Determine the current LVM configuration using the <code>pvs</code>, <code>vgs</code>, and <code>lvs</code> command. |
− | # Create a new 2G LV containing an ext4 filesystem and mount it at /archive (use <code>lvcreate</code>, <code>mkfs</code>, <code>mount</code>, edit the file <code>/etc/fstab</code>, and then reboot to confirm automatic mount). | + | ## Grow the home filesystem to 2G using the command <code>lvextend</code> and <code>resize2fs</code>. |
− | # Copy the contents of <code>/etc</code> into <code>/archive</code>. | + | ## Create a new 2G LV containing an ext4 filesystem and mount it at /archive (use <code>lvcreate</code>, <code>mkfs</code>, <code>mount</code>, edit the file <code>/etc/fstab</code>, and then reboot to confirm automatic mount). |
− | # Shrink <code>lv_archive</code> to 1G (use <code>umount</code>, <code>resize2fs</code>, <code>lvreduce</code>, | + | ## Copy the contents of <code>/etc</code> into <code>/archive</code>. |
+ | ## Shrink <code>lv_archive</code> to 1G (use <code>umount</code>, <code>resize2fs</code>, <code>lvreduce</code>, and <code>mount</code>) | ||
− | == Investigation | + | == Investigation 2: How can a PV be added to an existing VG? == |
− | '''Add an additional 2 GB virtual disk to your ''fedora1'' system, and use it as an additional physical volume:''' | + | '''Add an additional 2 GB virtual disk to your ''<u>fedora1</u>'' system, and use it as an additional physical volume:''' |
# Start <code>virt-manager</code>. | # Start <code>virt-manager</code>. | ||
# Shutdown ''fedora1'' if it is running. | # Shutdown ''fedora1'' if it is running. | ||
# Open the console window for ''fedora1''. | # Open the console window for ''fedora1''. | ||
# Select the menu option View>Details. | # Select the menu option View>Details. | ||
− | # Click '' | + | # Click ''Add Hardware'' button at the bottom left-hand corner. |
− | # In the ''Adding | + | # In the ''Adding new virtual hardware'' window that appears, select a Hardware Type of ''"storage"'' and click ''"Forward"''. |
− | # | + | # Make certain option "Managed or other existing storage" is selected. Click on the ''Browse'' button, then click on ''New Volume''. |
− | # Give the new virtual disk file a name of <code>fedora1b</code>, with a ''Max Capacity'' and ''Allocation'' of 2000 MB. Click ''Finish''. | + | # Give the new virtual disk file a name of <code>fedora1b</code>, a format of ''raw'', with a ''Max Capacity'' and ''Allocation'' of 2000 MB. Click ''Finish''. |
− | # Select the new virtual disk file and click ''Choose Volume''. | + | # Select the new virtual disk file ''fedora1b.img'' and click ''Choose Volume''. |
# Select a device type of ''Virtio Disk''. | # Select a device type of ''Virtio Disk''. | ||
− | # Finish creating the new virtual disk. | + | # Finish creating the new virtual disk by clicking ''Forward'' and then ''Finish''. |
# Boot the system. You should now have both <code>/dev/vda</code> and <code>/dev/vdb</code>. | # Boot the system. You should now have both <code>/dev/vda</code> and <code>/dev/vdb</code>. | ||
− | # Record the size of the volume group and the amount of free space. | + | # Record the size of the volume group and the amount of free space (Hint: use a command that you learned in a previous lab). |
− | # Partition /dev/vdb with a single | + | # Partition /dev/vdb with a single partition that fills the whole disk. |
# Check the messages printed when <code>fdisk</code> exits -- you may need to reboot the system in order for the new partition table to take effect. | # Check the messages printed when <code>fdisk</code> exits -- you may need to reboot the system in order for the new partition table to take effect. | ||
# Run this command to format the physical volume: <code>pvcreate /dev/''vdb1''</code> | # Run this command to format the physical volume: <code>pvcreate /dev/''vdb1''</code> | ||
Line 125: | Line 106: | ||
{{Admon/tip|SELinux relabelling may be required|Your system may report that the files are not present in the new /home filesystem when they are clearly there. This is due to the Security-Enhanced Linux system (SELinux) preventing access to the files, because the files were tampered with (moved) and are no longer recognized as home directory content. You can fix this problem by restoring the file context labels so that SELinux accepts the files as valid home directory content: <code>restorecon -r /home</code>}} | {{Admon/tip|SELinux relabelling may be required|Your system may report that the files are not present in the new /home filesystem when they are clearly there. This is due to the Security-Enhanced Linux system (SELinux) preventing access to the files, because the files were tampered with (moved) and are no longer recognized as home directory content. You can fix this problem by restoring the file context labels so that SELinux accepts the files as valid home directory content: <code>restorecon -r /home</code>}} | ||
− | == Investigation | + | == Investigation 3: How can I use LVM to manage storage on my disk pack? == |
− | '''On your | + | '''On your <u>f17host</u> (i.e. "disk pack"), using your choice of the GUI and/or command-line tools:''' |
# Create a new logical partition ('''NOT a logical volume!''') - minimum 5G, leaving at least 10G free space in the extended partition. | # Create a new logical partition ('''NOT a logical volume!''') - minimum 5G, leaving at least 10G free space in the extended partition. | ||
# Add that partition as a PV into the existing VG (using the commands you used in the previous investigation). | # Add that partition as a PV into the existing VG (using the commands you used in the previous investigation). | ||
# Grow the root filesystem to fill the available space. | # Grow the root filesystem to fill the available space. | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
= User/Group Management = | = User/Group Management = | ||
− | == Investigation | + | == Investigation 4: The /etc/passwd file == |
# Look at the /etc/passwd file. | # Look at the /etc/passwd file. | ||
Line 212: | Line 124: | ||
# Why do you think there are so many users? | # Why do you think there are so many users? | ||
# Look at the names of the users. What do you think these user names represent? Are they people? | # Look at the names of the users. What do you think these user names represent? Are they people? | ||
+ | # What is the numeric user ID (UID) of the root user? | ||
+ | # The user IDs of real users (people) are different from the user IDs of system accounts. What is the pattern? | ||
− | == Investigation | + | == Investigation 5: Adding users == |
− | {{Admon/note|Use | + | {{Admon/note|Use f17host|Perform these steps in the '''f17host''' system. Due to a configuration issue, these steps may not work normally in the fedora1 virtual host (previous versions of this lab used fedora1 for this investigation).}} |
# Read the man page for the useradd command. | # Read the man page for the useradd command. | ||
Line 241: | Line 155: | ||
# Add your matrix account user to '''fedora3'''. | # Add your matrix account user to '''fedora3'''. | ||
− | == Investigation | + | == Investigation 6: Managing Groups == |
{{Admon/note|Use fedora1|Perform these steps in the '''fedora1''' virtual machine.}} | {{Admon/note|Use fedora1|Perform these steps in the '''fedora1''' virtual machine.}} | ||
Line 262: | Line 176: | ||
Be sure to record your observations in your lab notes. | Be sure to record your observations in your lab notes. | ||
− | == Investigation | + | == Investigation 7: Deleting users == |
{{Admon/note|Use fedora1|Perform these steps in the '''fedora1''' virtual machine.}} | {{Admon/note|Use fedora1|Perform these steps in the '''fedora1''' virtual machine.}} | ||
Line 271: | Line 185: | ||
# Delete the user ops235_2 using the same command with the option which removes the home directory of the user. | # Delete the user ops235_2 using the same command with the option which removes the home directory of the user. | ||
# Check the contents of the /home directory. What do you notice? | # Check the contents of the /home directory. What do you notice? | ||
− | # Check the contents of the /etc/group | + | # Check the contents of the /etc/group file. What do you notice? |
Be sure to record your observations in your lab notes. | Be sure to record your observations in your lab notes. | ||
− | + | == Investigation 8: Modifying users == | |
− | == Investigation | ||
{{Admon/note|Use fedora1|Perform these steps in the '''fedora1''' virtual machine.}} | {{Admon/note|Use fedora1|Perform these steps in the '''fedora1''' virtual machine.}} | ||
Line 288: | Line 201: | ||
− | == Investigation 13: Security Tip: Removing Unnecessary Users and Groups == | + | <!-- == Investigation 13: Security Tip: Removing Unnecessary Users and Groups == |
{{Admon/note|Use fedora1|Perform these steps in the '''fedora1''' virtual machine.}} | {{Admon/note|Use fedora1|Perform these steps in the '''fedora1''' virtual machine.}} | ||
Line 312: | Line 225: | ||
#* nfsnobody | #* nfsnobody | ||
#* nscd (if not using nscd) | #* nscd (if not using nscd) | ||
− | #* uucp | + | #* uucp --> |
− | |||
− | |||
= Completing the lab = | = Completing the lab = | ||
− | {{Admon/important|Time for a new backup!|If you have successfully completed this lab, make a new backup of your virtual machines. Remember to also make a backup of the new second virtual disk drive on ''fedora1''.}} | + | {{Admon/important|Time for a new backup!|If you have successfully completed this lab, make a new backup of your virtual machines. Remember to also make a backup of the new second virtual disk drive on ''fedora1'' -- you now have two virtual disks on ''fedora1'', and therefore two image files, and therefore will need two backup files.}} |
Arrange proof of the following on the screen: | Arrange proof of the following on the screen: | ||
# Two PVs on '''fedora1'''. | # Two PVs on '''fedora1'''. | ||
# Separate <code>/home</code> filesystem (on an LV) in '''fedora1'''. | # Separate <code>/home</code> filesystem (on an LV) in '''fedora1'''. | ||
− | + | <!-- # Unnecessary accounts and groups have been removed on '''fedora1'''. --> | |
− | # Unnecessary accounts and groups have been removed on '''fedora1'''. | ||
# Account created on '''fedora3''' matching your Matrix account. | # Account created on '''fedora3''' matching your Matrix account. | ||
− | # ''' | + | # List contents of '''/etc/group''' file (ops235 group). |
− | # | + | # List contents of '''/etc/passwd''' file (created accounts). |
− | |||
# Fresh backup of the virtual machines. | # Fresh backup of the virtual machines. | ||
Line 334: | Line 243: | ||
# What is a VG? PV? LV? | # What is a VG? PV? LV? | ||
− | |||
# What is the total size of the "main" VG on your system? | # What is the total size of the "main" VG on your system? | ||
# How do you create a LV? | # How do you create a LV? | ||
Line 341: | Line 249: | ||
# How would you increase the size of the root filesystem by 50 MB? | # How would you increase the size of the root filesystem by 50 MB? | ||
# What is the purpose of <code>/etc/fstab</code>? | # What is the purpose of <code>/etc/fstab</code>? | ||
− | # What | + | # What is the purpose of <code>/etc/shadow</code>? |
Latest revision as of 11:31, 24 September 2018
Contents
Storage Setup (prior to starting Lab 4)
At this point, having completed Lab 3 you should have roughly the following disk storage setup:
(Note: These results are output from the vgs, lvs, and pvs commands within each virtual machine. You will be using these commands in the following lab investigations)
- fedora1
This VM has a GUI and no free space in the VG. VG #PV #LV #SN Attr VSize VFree vg_fedora1 1 2 0 wz--n- 9.80G 0 LV VG Attr LSize lv_root vg_fedora1 -wi-ao 8.83G lv_swap vg_fedora1 -wi-ao 992.00M PV VG Fmt Attr PSize PFree /dev/vda2 vg_fedora1 lvm2 a- 9.80G 0
- fedora2
This VM has a GUI and free space in the VG. VG #PV #LV #SN Attr VSize VFree vg_fedora2 1 3 0 wz--n- 14.80G 4.07G LV VG Attr LSize lv_home vg_fedora2 -wi-ao 1.95G lv_root vg_fedora2 -wi-ao 7.81G lv_swap vg_fedora2 -wi-ao 992.00M PV VG Fmt Attr PSize PFree /dev/vda2 vg_fedora2 lvm2 a- 14.80G 4.07G
- fedora3
This VM has no GUI installed. VG #PV #LV #SN Attr VSize VFree vg_fedora3 1 3 0 wz--n- 9.80G 3.83G LV VG Attr LSize lv_home vg_fedora3 -wi-ao 1.00G lv_root vg_fedora3 -wi-ao 4.00G lv_swap vg_fedora3 -wi-ao 992.00M PV VG Fmt Attr PSize PFree /dev/vda2 vg_fedora3 lvm2 a- 9.80G 3.83G
- f17host (i.e. "disk pack")
Four PVs, minimum VG size 60G Single filesystem on vg_main/root, size 50G At least 10G available space in VG 20% of disk space unallocated to any partition (min 15G)
Logical Volume Management (Continued)
Resources
Please read this page to get an overview of LVM:
(Note: It is recommended to return to this guide as a reference when performing the next several investigations).
Investigation 1: How are LVMs are managed using Command-Line Tools
- You are going to repeat the same LVM management operations (as your did with the fedora2 VM in lab3), but you will using command-line tools in the fedora 3 VM. Since the fedora3 VM only operates in command-line mode, you will need to refer to the "Logical Volume Management" link above.
- Write down the exact commands used at each step, and record appropriate command output:
- Determine the current LVM configuration using the
pvs
,vgs
, andlvs
command. - Grow the home filesystem to 2G using the command
lvextend
andresize2fs
. - Create a new 2G LV containing an ext4 filesystem and mount it at /archive (use
lvcreate
,mkfs
,mount
, edit the file/etc/fstab
, and then reboot to confirm automatic mount). - Copy the contents of
/etc
into/archive
. - Shrink
lv_archive
to 1G (useumount
,resize2fs
,lvreduce
, andmount
)
- Determine the current LVM configuration using the
Investigation 2: How can a PV be added to an existing VG?
Add an additional 2 GB virtual disk to your fedora1 system, and use it as an additional physical volume:
- Start
virt-manager
. - Shutdown fedora1 if it is running.
- Open the console window for fedora1.
- Select the menu option View>Details.
- Click Add Hardware button at the bottom left-hand corner.
- In the Adding new virtual hardware window that appears, select a Hardware Type of "storage" and click "Forward".
- Make certain option "Managed or other existing storage" is selected. Click on the Browse button, then click on New Volume.
- Give the new virtual disk file a name of
fedora1b
, a format of raw, with a Max Capacity and Allocation of 2000 MB. Click Finish. - Select the new virtual disk file fedora1b.img and click Choose Volume.
- Select a device type of Virtio Disk.
- Finish creating the new virtual disk by clicking Forward and then Finish.
- Boot the system. You should now have both
/dev/vda
and/dev/vdb
. - Record the size of the volume group and the amount of free space (Hint: use a command that you learned in a previous lab).
- Partition /dev/vdb with a single partition that fills the whole disk.
- Check the messages printed when
fdisk
exits -- you may need to reboot the system in order for the new partition table to take effect. - Run this command to format the physical volume:
pvcreate /dev/vdb1
- Add the new physical volume to the existing volume group:
vgextend nameOfVolumeGroup /dev/vdb1
- Verify that the volume group is larger and has more free space.
Using that additional space, create a separate filesystem for /home
:
- Create the logical volume
lv_home
(1G ext4) - Find a way to move the contents of
/home
onto it. - Change your system configuration so that the new filesystem is mounted on
/home
from now on.
Investigation 3: How can I use LVM to manage storage on my disk pack?
On your f17host (i.e. "disk pack"), using your choice of the GUI and/or command-line tools:
- Create a new logical partition (NOT a logical volume!) - minimum 5G, leaving at least 10G free space in the extended partition.
- Add that partition as a PV into the existing VG (using the commands you used in the previous investigation).
- Grow the root filesystem to fill the available space.
User/Group Management
Investigation 4: The /etc/passwd file
- Look at the /etc/passwd file.
- Make note of the contents of that file.
- Read about the file: http://linux.die.net/man/5/passwd
- Make sure you know what information each field contains.
- Why do you think there are so many users?
- Look at the names of the users. What do you think these user names represent? Are they people?
- What is the numeric user ID (UID) of the root user?
- The user IDs of real users (people) are different from the user IDs of system accounts. What is the pattern?
Investigation 5: Adding users
- Read the man page for the useradd command.
- Create a new user account for each of your pod mates, using their learn account name as a user name. Give each user a password.
- Grep the /etc/passwd file for each of the new users.
- What is the home directory of each user?
- What group is each user in?
- What else do you know about each user?
- Where are the passwords stored?
- Look at the man page for /etc/shadow using the command man 5 shadow
- Grep the /etc/shadow file for each of the new users.
- Make note of this information.
- Create two new dummy users, ops235_1 and ops235_2.
- Investigate the home directory of one of your new users.
- What files are there? Be sure to include hidden files.
- What do you think these files are used for?
- How does the operating system determine which files are created in a new home account? The answer can be found here: http://www.linuxhowtos.org/Tips%20and%20Tricks/using_skel.htm
- Look at the files (including hidden files) in the template directory referred to in the article. Compare them to what is in a home directory for a new user. What do you notice?
- Create a new file in this directory with the following command:
touch foo
- Create a new user named foobar, with the option to automatically create a home directory.
- Look at the contents of foobar's home directory. What do you notice?
- Be sure to record your observations in your lab notes.
- Add your matrix account user to fedora3.
Investigation 6: Managing Groups
- Read the man page for the groupadd and groupdel commands.
- Note which option allows you to set the Group ID number (GID) when you create a new group.
- Examine the file /etc/group
- Which values of GID are reserved for system accounts?
- Which values of GID are reserved for non-system user accounts?
- 8 What is the lowest available GID number for non-system users?
- What is the default group name of a new user?
- Add a new group named ops235 with a GID of 600.
- You are angry at some irresponsible users on your system.
- Add a new group named idiots.
- Look at /etc/group and note the GID of idiots.
- What GID is given to a new group if if you do not specify it?
- Your anger has subsided. Delete the idiots group.
- Look at /etc/group again and note the change.
Be sure to record your observations in your lab notes.
Investigation 7: Deleting users
- Read the man page for the userdel command. Note which option automatically removes the users home directory when that user is deleted.
- Delete the user ops235_1 using the command
userdel ops235_1
- Delete the user ops235_2 using the same command with the option which removes the home directory of the user.
- Check the contents of the /home directory. What do you notice?
- Check the contents of the /etc/group file. What do you notice?
Be sure to record your observations in your lab notes.
Investigation 8: Modifying users
- Read the man page for the usermod command. Note which options change the user's full name, primary group, supplementary groups, and shell.
- Add each of your new users to the group ops235 (in other words, add ops235 to each user as a supplementary group).
- Examine
/etc/group
. What has changed? - Use the usermod command to associate each of your pod mates' full name to their user name, as shown in your text. With each change, examine their entries in the
/etc/passwd
file. What has changed? - Be sure to record your observations in your lab notes.
Completing the lab
Arrange proof of the following on the screen:
- Two PVs on fedora1.
- Separate
/home
filesystem (on an LV) in fedora1. - Account created on fedora3 matching your Matrix account.
- List contents of /etc/group file (ops235 group).
- List contents of /etc/passwd file (created accounts).
- Fresh backup of the virtual machines.
Preparing for the Quizzes
- What is a VG? PV? LV?
- What is the total size of the "main" VG on your system?
- How do you create a LV?
- How do you delete an LV?
- How would you add the disk partition
/dev/sdb7
to your volume group "main"? - How would you increase the size of the root filesystem by 50 MB?
- What is the purpose of
/etc/fstab
? - What is the purpose of
/etc/shadow
?