Changes

:* '''Correctly install the CentOS 7 FULL INSTALL DVD''' (not LIVE DVD) on your removable hard disk. * '''Record installation characteristics of CentOS 7 FULL INSTALL''' in a chart (contained in lab2 logbook chart) to compare with other installation methods performed in lab2.

:* '''Verify correct settings''' prior to proceeding with host installation stages.

:* '''Obtain Linux server information after installation''' to create a software asset report for later access.

:* '''Disable Linux Kernel security enhancements''' to allow easier internal networking connections (to be reactivated in a later lab).

:* Observe that '''Bash Shell Scripts can automate routine tasks'''.

{|width="100%"

| width="6040%" |{{Admon/tip|Access to Instructions for Lab1|Since you will performing a full install on your computer, you cannot use that computer to simultaneously view instructions while you perform the full install. Here are some suggestions to make this process easier:<ul> <li>'''Printout Lab1 instructions''' at home prior to performing Lab1</li> <li>'''Use a smart-phone, notebook, or netbook computer to view lab instructions''' (highly recommended)</li><li>If lab space availability is not an issue, '''use another computer termimal to view lab instructions''' while performing install</li><li>'''Follow step-by-step instructions from your OPS235 instructor''' (if demonstrated by instructor)</li></ul>|

{|width="100%"

  |width="5040%" |{{Admon/tip|Online Hands-on Linux Tutorials (recommended)|The following links online tutorial will allow you to practice Linux commands that you learned from ULI101as well as essential shell scripting skills. Login to your '''Matrix''' account, and issue the pathnames to run the online tutorial in Matrix:<br><ul> <li>Bash Shell Using the vi Text Editor:<br>'''/home/murray.saul/ Commandvi-line Editingtutorial'''<br><li>Linux Basics: [ ]<br>'''/home/murray.saul/linux-basics'''</li><li>Basic Linux CommandsShell Scripting - Part I (Scripting Basics): [ ]<br>'''/home/murray.saul/scripting-1'''</li></ul>|

For the next 3 investigations, you will learn how to install your Centos Full DVD onto your removable hard disk. You will customize your install to setup several separate partitions: <ul><li>'''/''' (The "root " partition)</li><li>'''/home''' (/Store regular user accounts), </home, li><li>'''/var/lib/libvirt/images ''' (to store virtual machine images to be created in lab2), and a </li><li>'''swap ''' partition.(Virtual Memory)</li></ul>

Make certain to record your observations of this install in the comparison chart for '''c7host ''' in your lab2 logbook.

 {|width="10040%" align="right" cellpadding="1510"|- valign="top"|colspan="2"|{{Admon/important |You're supposed to use this hard drive only for this course| But if you really need to use it for two courses, and the professor for the other (probably windows) course will allow it - ask your professor for help with partitioning.}}

# Restart the '''Newer computer, and models''' are labelled '''press the function key F10, press ENTER, and specify the device to bootHP Z230''' (eg. DVD drive).[[Image:lab2-logbook.png|thumb|right|100px|<br><br>'''comparison chartNOTES:''' in lab2 logbook.]]::<ul><li>If you are using the '''NOTE:<u>newer</u>''' model, allow the computer to boot up (<u>without</u> pressing F10 key) to boot from DVD.</li><li>Refer to the comparison chart in lab2 lab logbook, and fill in various installation information for '''c7host''' while you perform the installation (such as time it took to perform a full install, installation options, etc).<br><br></li></ul>

<li value="56">Select Power on the option computer again, and after booting from the CD, select from the installation menu: '''Test this Media & Install Centos7'''. Your DVD will be checked for defects<br><br>Note: If you experience unreadable display after you boot into your installed system, you can redo the install, but select from the install menu: ''<u>Troubleshooting</u>'' and then select ''<u>Install in Basic Graphics Mode</u>''.<br><br></li> <li>If the check is successfulNext, you will be prompted for a language. In the first screen, select language '''English''' with subselection '''English-Canada''' and then click the '''Continue''' button on the bottom right-hand screen.</li>

<li>Configure the following installation settings from the ''Install Summary Screen'':<br><br><b>DATE & TIME:</b><ul><li>Click on the Map to select Toronto area (you may also select from the drop-down menu section)</li><li>Click the <b>DONE</b> button at the top-right left corner to finish and return to the Installation Summary screen.</li></ul><br><b>NETWORK & HOSTNAME:</b><ul><li>Select the default Ethernet connection and click the button on the top right-hand side to change the setting from <b>OFF</b> to <b>ON</b>.</li><li>At the bottom rightleft-hand corner type the hostname: <b>c7host</b> (all lowercase letters)</li><li>Review your settings, then click the <b>DONE</b> button at the top-right left corner to finish and return to the Installation Summary screen.</li></ul><br><b>SOFTWARE SELECTION:</b><ul><li>Select the software packages labelled: <b>Gnome Desktop</b></li><li>Click the <b>DONE</b> button at the top-right left corner to finish and return to the Installation Summary screen.</li></ul><br></li> <li>Although the Centos installtion program can provide suggestions on how to partition your hard disk, you will be customizing partitions for your hard disk. This custom partitioning is important since it will have consequences on future labs that you perform (especially for lab2!).<br><br>Proceed to '''Part 2''' to customize your partitions.</li>

 {|cellpaddingwidth="40%" align="15right" widthcellpadding="100%10"

#The manual partitioning screen should appear. Change the option '''New mount points will use the following partition scheme''' from '''LVM''' to '''<u>Standard Partition</u>''' (you will not be using LVM for your c7host machine).

#It is recommended to rescan <span style="background-color:yellow">Change the hard disks by clicking on option '''New mount points will use the rescan button following partition scheme''' from '''LVM''' to '''<u>Standard Partition</u>''' (loop symbolyou will not be using LVM for your c7host machine)</span>.

#We will now create the root (/) partition. '''Click on the add button (plus) sign'''.<br>#In the '''Add a New Mount Point''' screen, enter select '''/''' as the mount-point (either by typing or selecting from drop-down menu), and enter '''30720''' in for partition size and click '''Add Mount Point''' button.# You will return to the previous dialog box.<br><span style="background-color:yellow">For the '''/''' partition, change the file-system type from '''xfs''' to '''ext4''' and make certain that the Device Type is set to Standard Partition (<u>not</u> LVM). You need to repeat this procedure for the ''/home'' and ''/var/lib/libvirt/images partitions'' as well)</span>.

#Select Recheck each of the created partitions, and make certain that the file-system type is changed from set to ''ext4''and the Device Type is set to 'xfs'Standard Partition'' to .#Finally, add a swap partition (Mount Point: swap) for '''ext416 GB'''.#Check that your partition settings are correct (you can ask your instructor or lab monitor to confirm), and then click '''Done ''' (possibly '''<u>twice</u>''') in order to proceed<br><br><span style="background-color:yellow">'''NOTE:''' If there is an error message associated with your created partitions, you may need to add a '''/boot/efi''' partition (as a new mount).The capacity should be: 2954MB (i.e. 2,954 MB). Once finished, click '''Done'''.<span><br><br>#A Summary of Changes screen will appear to show the partitioning operations that will be created. Click the '''Accept Changes''' button and click '''Begin Installation''' in the Installation Summary screen to proceed with the installation.| width#Start timing your host machine installation. =="50%" |{{Admon/tip|Mount Points and Linux File System Types|Similar to other Operating Systems like windows '''fat''' / '''vfat''' / '''ntfs''' file system types, it is good to know a few common file system types in Linux for comparisonPart 3:<br><ul><li><b>xfs:</b> &nbsp; Newer filesystem (fast transfer rates for large files, Journaling)</li><li><b>ext4:</b> &nbsp; Newer filesystem supporting large files and Journaling (used in for this lab)</li><li><b>ext2:</b> &nbsp; Stable filesystem popular for databases (no journaling)</li></ul>|}}Completing the Installation ==

{|width="40%" align="right" cellpadding="10"|- valign="top"|[[Image:partition_verificationcompleted.png|thumb|right|700px500px|Carefully verify partition mount-names This screen indicates that installation is complete. You should remove the install DVD and sizes prior to proceeding with install. Check [http://matrix.senecac.on.ca/~murray.saul/ops235/installation/ installation screenshots] link for verificationconfirm Centos7 boots from your removable hard drive.]]

#During the installation process, you will required to create a root password (for administration access) and create a regular user account. Click on '''Root Password''' and enter your root password. Think of an appropriate password and record that password somewhere in case you forget! An indicator will appear to show you how secure your password is. Retype your root password and click '''Done''' (you may have to click Done twice if your password is strong).#You need to create a regular user account. This account will be used to graphical log into your host machine. It is never recommended to graphically log into a graphical Linux/Unix system as root. It is better to log into a regualr user account, then run a command to login as root (you will learn how to do this later in this lab.#Click '''User Creation''' and enter your '''full name''', '''username''', and an appropriate '''password''' (and confirm password). Click '''Done''' to finish.#Remember to record this host installation information in the comparison chart in lab2.#When installation is complete, you will notice a message at the bottom of the screen stating: '''CentOS is now successfully installed and ready for you to use!'''#Click the Reboot button. Your DVD will briefly open in the DVD drive bay. Make certain to remove this installation DVD so that Centos will boot from your hard drive.#After the system reboots, login by clicking on your account name and entering the regular user password.<br><br>#The last phase of the installation process should now run:<ulol><livalue="14">Click Accept to confirm you will abide by the License and click Done.</li><li>Accept defaults to participate running KDump application that will report errors to developers for improvements to Centos7.</li><li>Select English as the default input source.</li><li>Quickly view Getting Started Resources, then close the help window.</li></ul><br>#Proceed to Investigation 2 to obtain basic information from your newly installed Centos Host machine.</li></ol>

{|cellpaddingwidth="40%" align="15right" widthcellpadding="100%10"

#Issue the following With older (ancient) versions of Linux, a user once may have been allowed to login to their graphical Linux command: <b><code><span style="color:#3366CC;fontsystem using '''root''' as their user-size:1name and their root password.2em;">login root</span></code></b>#Issue This has been determined to be a security risk and that option has been removed with many or all Linux command (learned in ULI101) to confirm the type of account you are currently usingoperating systems. What is the purpose of this account?#Exit Therefore, from this point onwards, you will be logging into your current regular user accountinstead and issuing a command to login as the ''root'' user. Which account are you now using?

#Issue the command <b><code><span style="color:#3366CC;font-size:1.3em;">su - </span></code></b> Issue the '''pwd''' and '''whoami''' commands to confirm your directory pathname. Remain in this account for What do you notice are the remainder of this lab.main differences between using '''su''' versus using '''su -''' ?# An installation log file called <b><code><span style="color:#3366CC;font-size:1.2em;">/var/log/anaconda/anaconda.packaging.log</span></code></b> has been created to record the installation of your c7host machine. This file is an ASCII file which can be viewed with the <b><code><span style="color:#3366CC;font-size:1.2em;">more</span></code></b> command.

:: <b><code><span style="color:#3366CC;font-size:1.2em;">grep ________________ ________________ -i packaging /var/log/anaconda/packaging.log | wc -l'''</span></code></b>

<li value="38">Issue that command displayed above. Does it work? If not, what account do you think you should be in? When you get the command working record this important information regarding commands and the admin account in your lab logbook.</li> <li>Using the <code>rpm</code> command: you can also use the following commands to list all the installed packages, and the total number of packages installed:</li>

<li value="410">The <code>'''-q'''</code> option means query, and the <code>'''-a'''</code> option means all (in other words, query all installed software packages). Did you get the same number of packages from the above two methods?</li> <li>Some of the files on your system were installed with the software packages, and some were created by system activity (for example, by creating your Learn account and by logging in). If you know the package name (from the <code>installpackaging.log</code>), you can list all the files that were installed from the package by using the following command:</li>

::<b><code><span style=" pointer-events:none;cursor:default;color:#3366CC;font-size:1.2em;">rpm -q -l package_namegedit</span></code></b> (where  <ol><li value="package_name12" represents >Issue the following command to obtain the name total number of the ''application'' or ''package'')files installed for gedit:<br><br></li></ol>::<b><code><span style=" pointer-events:none;cursor:default;color:#3366CC;font-size:1.2em;">rpm -ql gedit | wc -l</span></code></b>

<li value="613">This combines Using what you learned in steps 3, 4, and 7, get a count of the <code>'''-q'''</code> (query) option with total number of files installed by all of the <code>'''-l'''</code> (list filenames) optionsoftware packages on your system.</li> <li>You How can pipe the outupt through <code>'''wc -l'''</code> to count you explain why this number is a lot larger than the total number of lines:</li>packages installed? Record your answer in your lab logbook.

{|cellpaddingwidth="40%" align="15right" widthcellpadding="100%10"

#We will now collect networking information for your installed system. Your system may not be automatically connected to Seneca's network. Locate the network icon (on top right-hand panel). Click on that icon, and select: '''system eth0'''# Open a web-browser and log into Seneca's wired network. You will need to perform this set every time you start a new session with your computer to perform future labs.#Open a shell terminal.

:::<b><code><span style="pointer-events: none;cursor: default;color:#3366CC;font-size:1.2em;">nslookup</span></code></b> (at the > ''nslookup'' prompt, enter the word "'''server" (do not type the quotes) ''' and record the output. Type exit to leave nslookup).

<ol><li value="9">Run the commands <b><code><span style="color:#3366CC;font-size:1.2em;">hostname</span></code></b>, <b><code><span style="color:#3366CC;font-size:1.2em;">uname -rv</span></code></b>, <b><code><span style="color:#3366CC;font-size:1.2em;">ps -ef</span></code></b>, <b><code><span style="color:#3366CC;font-size:1.2em;">ifconfig</span></code></b>, and <b><code><span style="color:#3366CC;font-size:1.2em;">route -n</span></code></b> redirecting the output to add to a file in root's home directory called <b><code><span style="color:#3366CC;font-size:1.2em;">system.txt</span></code></b>.</li><li>Copy the installation log file <code>'''/var/log/anaconda/anaconda.packaging.log'''</code> and the file '''system.txt''' to a USB memory key, or '''scp''' to your matrix account as a backup.</li></ol>

{|cellpaddingwidth="40%" align="15right" widthcellpadding="100%10"

{{Admon/important|SELinux|SELinux stands for '''Security-Enhanced Linux'''. It is a component that helps to better secure the system to protect against intrusion (hackers). SELinux is enabled upon the default install of CentOS. SELinux can be a good thing, if you take care of it and know how it works. For this course it is strongly recommended that you '''disable SELinux by default''' because we won't have the time to reconfigure it every time the labs make it necessary.}}|}# Disabling SELinux is quite simple, just edit the file '''/etc/selinux/config''' and set SELINUX to disabled'''disable<u>d</u>'''.# Add additional text regarding disabling SELinux<br><br>.

 {|cellpaddingwidth="40%" align="15right" widthcellpadding="100%10"

You may have learned about creating and running Bash Shell Scripts Perform the following steps in your ULI101 course. Shell scripts help Linux users and system administrators to automatic repetitive tasks to become more efficient and to help them save time. You will be reviewing and building a basic Bash Shell script to generate your newly-installed Linux host '''c7host''' machine. Take time to view Shell Scripting Tips on the right-hand side, and run the online tutorial to learn how to create simple shell scripts.:

# Open a Shell terminal and use a text editor (such as <b><code><span style="color:#3366CC;font-size:1.2em;">vi</span></code></b> or <b><code><span style="color:#3366CC;font-size:1.2em;">nano</span></code></b>) to create a Bash Shell script called: <b><code><span style="color:#3366CC;font-size:1.2em;">reportmyreport.bash</span></code></b> in your current directory.# Enter Copy and paste the following text content below into your text-vi editing session:for your file report.bash<br> (how do you copy and paste efficiently in Linux?)<br>

<pre code style="color:#3366CC;font-family:courier;font-weightsize:bold;padding-left:4px.9em;margin-left:15px20px;"><br>&#35;!/bin/bash # Forces script to run in the bash shell<br><br>&# 35; Author: *** INSERT YOUR NAME ***<br>&# 35; Date: *** CURRENT DATE ***<br>&#35;<br>&# 35; Purpose: To present sysadmin to create an software inventory# Creates system info report containing selected elements<br>&#35;<br>&# 35; USAGE: ./reportmyreport.bash<br> <br>if [ $USER != "root" ] # checks to see only runs if user is logged in as root, and exits script if not<br>then <br>&nbsp;echo "You must be logged in as root to run the command." >&2 # <br>&2 is a "redirection trick" to convert output as stderr echo "Either login as root or issue command \"sudo ./report1.bash\"" >&2 nbsp;exit 1<br>fi<br></precode><br><ol><li value="4">Save your editing session, assign your reportthe '''myreport.bash ''' file read and execute permissions (at least for the owner) and run by typing: <br><b><code><span style="color:#3366CC;font-size:1.2em;">./reportmyreport.bash</span></code></b></li><li>Did it run? If not what do you think you need to do in order to run the Bash Shell Script?</li><li>Issue the command <b><code><span style="color:#3366CC;font-size:1.2em;">su-</span></code></b> and run the Bash shell againscript from the regular user's home directory (not root's home directory):<br><b><code><span style="color:#3366CC;font-size:1.2em;">~regularuserid/myreport. bash</span></code></b></li><li> Did it work?</li><li>Reopen your text-editing session for report'''~regularuserid/myreport.bash ''' and add the following lines of code to the bottom of the shell script file:</ol><br><pre code style="color:#3366CC;font-family:courier;font-weightsize:bold;padding-left:4px;margin-left:15px.9em;">&# 35; Create report title<br><br>echo "SOFTWARE ASSET SYSTEM REPORT FOR INSTALLED LINUX SYSTEM" > /root/report.txt<br>echo "Date: $(date +'%A %B %d, %Y (%H:%M:%p)')" >> /root/report.txt<br>echo >> /root/report.txt<br></code><br><ol><li value="8">Save and run the bash shell script. View the contents of the file called '''report.txt''' that was generated (I hope you are using the up arrow key to issue previously issued commands in order to save time!). Notice how the redirection symbol &gt; is used at the beginning of the report, and then the other redirection symbol &gt;&gt; is used to help "grow" the report with the other content.</li><li>The only remaining content of the report would be the system information. We can use a shell scripting trick called "command substitution" $( .. ) in order place results from an command to be used by another command (like echo). Re-edit the shell script and add the following code at the bottom of the shell script file:</li></ol><br><code style="color:#3366CC;font-family:courier;font-size:.9em;">echo >> /root/report.txt<br>echo "Hostname: $(hostname)" >> /root/report.txt<br>echo >> /root/report.txt<br>echo "Kernel Version: $(uname -rv)" >> /root/report.txt<br>echo >> /root/report.txt<br></code><br><ol><li value="10">Save, run the script, and view the ''report.txt'' contents (are you using tip that was given to save time?).</li><li>Edit the shell script and include output from the <b><code><span style="color:#3366CC;font-size:1.2em;">ps aux</span></code></b> and <b><code><span style="color:#3366CC;font-size:1.2em;">ifconfig</span></code></b> commands (with appropriate titles). Remember to redirect that output to add to the bottom of the file!</li><li>Save, run and confirm that the shell script is working correctly.</li><li>What would be the use of keeping this shell script as a Linux system administrator?</li></ol><ol><li value="14">Here are some more "complex" Bash Shell scripts, that perform the same task. Although you are not require to understand some of these other tricks, it is recommended that you view the contents of the scripts and save them for future consideration or exmaples.</li><li>The <b><code>wget</code></b> command can be used to quickly download files from the Internet. Issue the following command:<br><b><code><span style="pointer-events: none;cursor: default;color:#3366CC;font-size:1.2em;">wget https://scs.senecac.on.ca/~murray.saul/text-report.bash</span></code></b></li><li>Verify that the file '''text-report.bash''' was downloaded to your current directory.</li><li>Assign read and execute permissions for this file by issuing the command: <b><code><span style="color:#3366CC;font-size:1.2em;">chmod u+rx text-report.bash</span></code></b></li><li>Run this Bash Shell script by issuing the command: <b><code><span style="color:#3366CC;font-size:1.2em;">./text-report.bash</span></code></b></li><li>Check to see if it created a report in your current directory. What is the purpose of the report?</li><li>Use the <b>vi</b> text editor to view the contents of the file <b>text-report.bash</b>. Can you understand how this script works?<br><br></li><li>Use the <b><code>wget</code></b> command to download, study, and run the following shell scripts on-line:<blockquote><b><code><span style=" pointer-events:none;cursor:default;color:#3366CC;font-size:1.2em;">https://scs.senecac.on.ca/~murray.saul/report.bash<br>https://scs.senecac.on.ca/~murray.saul/report3.bash</span></code></b></blockquote></li><li>Try to understand what these Bash Shell scripts do.</li><li>You have completed lab1. Proceed to Completing The Lab, and follow the instructions for "lab sign-off".</li></ol>

[[Image:lab1_signoff.png|thumb|right|500px|Students should be prepared with a'''ll all required commands (system information) displayed in a terminal (or multiple terminals) prior to calling the instructor for signoff'''.]]

::<span style="color:green;font-size:1.5em;">&#x2713;</span> Contents of your '''Contents of your reportmyreport.bash ''' shell script::<span style="color:green;font-size:1.5em;">&#x2713;</span> proof of '''yum update''' performed on c7host::<span style="color:green;font-size:1.5em;">&#x2713;</span> '''SELinux''' is disabled on '''c7host'''

= ADDITIONAL PRACTICE = Practice For Quizzes, Tests, Midterm &amp; Final Exam ==

# List 3 2 ways that you can access your root account