'''Weight''': 3'''2.5% ''' of the overall grade

'''Due Date''': During Week 5 (in class)check with your professor

* Addresses in this network will start with '''172.3028.20105'''. The subnet mask must be '''255.255.255.0'''

#The name of this cloning-source VM will be called: '''seedlingpangaea'''.#You should use the options that you used in your lab1 to setup the static network, plus you should use the DOMAIN parameter to set the '''coniferouscontinents.treesearth.ops''' domain for your cloning-source.

::*Don't make the virtual drive too big: you will need space for it as well as space for the clones you from your cloning-source<br>('''2GB5 GB''' should be enough for any cloning-source and clone VM that you create for this assignment).::*The hostname for this server will be called: '''seedlingpangaea'''

{| class="wikitable" | style="margin-left:50px;style="border: 2px solid black;" | "! |- style="font-weight:bold; text-align:center;"| style="border: 2px solid black;" | Hostname !! / Domain| style="border: 2px solid black;" | Address !! | style="border: 2px solid black;" | Purpose

| '''spruce.coniferous.trees.ops''' style="background-color:#66cccc; border: 2px solid black;" | (your existing host / source) |style="background-color:#66cccc; border: 2px solid black;" | External Facing Address:''' DHCP assigned'''<br>Internal Virtual Bridge (virbr1):''' 172.3028.20105.1''' |style="background-color:#66cccc; border: 2px solid black;" | Your '''host''' machine

| style="background-color:#66cccc; border: 2px solid black;" | '''seedlingpangaea.coniferouscontinents.treesearth.ops''' |style="background-color:#66cccc; border: 2px solid black;" | '''172.3028.20105.100''' |style="background-color:#66cccc; border: 2px solid black;" | '''Cloning-source''' used to create other servers for other assignments.

<ol><li value="5">Make certain your cloning-source can connect to the Internet using the newer static configuration.</li><li>Run a '''yum update''' for this cloning-source.</li><li>Make certain that SELinux is set to '''enforcing'''(unless you're in Andrew or Hans' sections - then have it '''disabled''').</li><li>Set up an SSH server on this "cloning-source".</li><li> Make sure that '''PermitRootLogin''' is set to '''yes''' for this server.</li><li>Make ceratin certain that only the root account is permitted to login only using key authentication. If other users are required to be created in a later assignment, they should be permitted to log in with a their username and password.</li><li>Copy the same public key (already generated for your '''Host Machine''' for your '''root''' account in lab1) to the '''root''' account on your cloning-source.</li><li>Test to make certain that you can login from root on your host machine to your root account on the cloning-course ("seedlingpangaea") <u>'''without '''</u> being prompted for a pass-phrase.</li><li>If you have created a '''regular user''' when you installed this machine, '''<u>delete </u> that regular user''' (make certain to '''remove the regular user's home directory!''').</li></ol>

# Modify the '''iptables ''' to meet the following conditions:

:::<li>All outgoing traffic is allowed.</li>:::<li>Responses to any traffic the machine sends out are allowed.</li>:::<li>Traffic on the loopback interface is allowed.</li>:::<li>The host machine (and <b>only</b> the host machine) must be able to ssh to that cloning-source VM.</li>:::<li>ICMP traffic is allowed if it originated with the <b>local network only</b>.</li>:::<li>As this is acting as the secure basis for later machines, no other traffic should be allowed, and no response should be sent if any other traffic is received.</li>

# This shell script should store read each of any number of VM image file files in the "'''/var/lib/libvirt/images" ''' directory that has the extension ".qcow2" as a positional parameter to be used with a for loop. In this way, this shell script will safely backup any new VMs that are created later in this course, yet backup the existing labs and assignment VMs.

# Set execute permissions for this script, and '''run this Bash shell script prior to exiting your assignment work session to properly backup your cloning source'''. You should also make a copy of the backup on an external device (such as a USB key).

*'''Demonstrate working assignment to your instructor in class:'''<ol type="a"><li>Students need to can demonstrate their assignment functionality to their professor during a lab period (like you would for any lab for "sign-off").</li><li>Students are required to prepare everything ahead of time so that you can quickly demonstrate to your instructor that all required parts of your assignment are working.</li><li>Do do proceed to The idea of the next step until you have demonstrated demonstration of your assignment to your instructor is to check for errors that may cause problems when running the checking script.<br><br></li></ol> *Download and run a shell script to check your work (Depending on your OPS335 Instructor): 

::'''Peter Callaghan's Classes (Sections C &amp; D):'''<ul><li>Refer to instruction on Moodle to download *Download and run marking a shell script</li></ul>to check your work:

 ::'''Murray Saul's Classes (Sections A &amp; B):'''<ol><li>Login as '''root''' on your '''host''' machine.</li><li>Change to the '''/root/bin''' directory.</li><li>Make certain that your '''cloning-source VM is running'''.</li>Issue the following command to install e-mail on your '''host''' machine:<source>yum install mailx </source><li>Issue the command to download a checking script for your assignment to your '''host''' machine: <sourcebr><span style="font-family:courier;font-size:1em;color:#4d4dff">wget httphttps://matrix.senecac.onsenecacollege.ca/~murrayahad.saulmammadov/files/ops335OPS335/check-assn1-p1.bash</sourcespan><br><br></li><li>Set execute permissions and run the command: '''/root/bin/check-assn1-p1shell script.bash'''<br>(You shell script contents It will be mailed to your Seneca email and to your OPS335 instructor's Seneca email. If you do '''NOT''' receive an e-mail message in your Seneca email account, then there is create a problem, and tar file for you '''MUST''' rerun or contact your OPS335 instructor immediately.<br><br></li></ol>*'''Additional Assignment Information:'''<ol type="a"><li>This assignment is to be completed individually. '''Group submissions are not allowed'''.</li><li>Test upload as your machine to make sure it works. If a machine is not accessible (e.g. will not boot, can not be accessed through ssh from your host, etc.), or is otherwise non-functional, you may be told submission to '''resubmit'''blackboard.</li><li>'''Late submissions are a subject to a penalty of 10% per day'''.</li><ol>

| colspan=2 style="text-align:center;background-color:#cccccc;" |'''Student Demonstration (in class)'''(optional)

| Hostname set to: '''seedlingpangaea''' for cloning source only, domain name '''continents.earth.ops''' set as a network parameter

| cloningiptables -source VM can Other unexpected '''connect to the InternetINPUT'''traffic is blocked without response| style="text-align:right" | /1|-| iptables - all '''FORWARD''' traffic is blocked without response

| style="text-align:right" | /21

| style="text-align:right" | /21|-| Use of '''PV''' command for backup script| style="text-align:right" | /1