IFOUND WIKI linux

linux:amanda_backup

2011-08-27T21:52:37+02:00

This article describes how to setup backup routines on a a debian server using http://www.zmanda.com/. It does backup from multiple destinations including windows shares, a remote server and local folders. The backup is placed on a local USB mounted disk as virtual tapes. The following setup describes my private setup, and is thus shared here to document my settings and hopefully help others setting up their backup.

linux:apache

2011-06-09T18:14:00+02:00

This article descripes some optimal settings when running apache on a VPS whith limited memory. The setup was testet on a VPS server from Surftown with aprox 1Gb memory. The symptoms was from time to time slow performance on the hosted websites. CPU usage was low, and memory utilization looked fine. These settings can probably help solving performance issues.

linux:apache2_htaccess

2012-02-12T17:32:23+02:00

This is valid for Apache2. Example of a .htaccess file AuthName "Restricted Area" Authtype Basic AuthUserFile /home/priv_mikkel/public_html/mikkelbundgaard/download/.htpasswd require valid-user Define passwd file Prompts for password $ htpasswd -c .htpasswd

linux:apache2_redirection

2011-06-09T18:39:36+02:00

Force HTTPS from global conf This section describes howto enforce a url redirection from regularly http to https, thus enforcing secure transport layer. The example below is used to ensure that phpmyadmin always uses https so passwords are not sent unencrypted. To do so, log in as root on server and ensure the rewrite and mod ssl modules in apache2 are installed, eg. use apt-get. To enable them if not enabled.

linux:apache2_ssl

2011-03-27T11:37:29+02:00

This will create a default secure site on your apache2 server. Create the file /etc/apache2/sites-available/default-ssl ServerAdmin webmaster@notfound.dk SSLEngine on SSLCertificateFile /etc/apache2/apache.pem DocumentRoot /var/www/ Options FollowSymLinks AllowOverride None Options Indexes FollowSymLinks MultiViews …

linux:apt

2011-12-04T18:37:51+02:00

To extract installed packages on your debian system dpkg --get-selections > /package-list sudo dpkg --set-selections < /package-list sudo apt-get -y update sudo apt-get dselect-upgrade links deselect

linux:automount

2011-11-18T21:58:09+02:00

Automount has a lot of features and advantages. On my system I use automount for an USB hard drive which I use for daily backups. However if I use fstab I need to unmount the drive if I want to connect the drive to another computer or just messing around with cables. With automount the drive is automounted when need and quickly umounted when not needed.

linux:create_vlan

2011-02-16T08:13:24+02:00

Create mac vlan $ ip link add link eth0 name vlan1 address 00:aa:bb:cc:dd:ee type macvlan Create vlan ip link add link eth0 name vlan1 type vlan id 5 source

linux:cups_hl2130

2011-10-20T17:33:48+02:00

First download the two files lpr and cups-wrapper. Files [lpr] [cups-wrapper] First install lpr with dpkg $ dpkg -i hl2130lpr-2.1.0-1.i386.deb Next install the cups-wrapper $ dpkg -i cupswrapperhl2130-2.0.4-2.i386.deb Next configure cups by login on to cups administration panel from your browser

linux:debian_boot_theme

2012-03-13T22:33:59+02:00

If you are tired of watching a text screen fly by while the computer boots and wants a bit more slick way of booting your pc, read on. Here is how to get a nice splash screen while booting your debian installation. This guide was written from the basis of this wiki and was adapted for my home environment.

linux:disable_ipv6

2010-11-07T13:35:01+02:00

For some unknown reasons Oracle / SUN Java and other programs on Debian doesn't work properly when IPv6 is enabled. To disable IPv6 bindings on debian edit /etc/sysctl.d/bindipv6.conf and disable ipv6. Set net.ipv6.bindv6only = 0. # This sysctl sets the default value of the IPV6_V6ONLY socket option. # # When disabled, IPv6 sockets will also be able to send and receive IPv4 # traffic with addresses in the form ::ffff:192.0.2.1 and daemons listening # on IPv6 sockets will also accept IPv4 con…

linux:dnssec

2011-10-18T17:40:59+02:00

configure dns dk-hostmaster guide

linux:firewall

2011-08-27T20:56:33+02:00

Firewall script for a non routing server. !#/bin/bash iptables -F iptables -Z iptables -X iptables -P FORWARD DROP iptables -P INPUT DROP iptables -P OUTPUT ACCEPT #Loopback interface iptables -A INPUT -i lo -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT # standard ports iptables -A INPUT -p icmp -j ACCEPT # ping iptables -A INPUT -p tcp --dport 22 -j ACCEPT # ssh iptables -A INPUT -p tcp --dport 25 -j ACCEPT # smtp ipta…

linux:ftp

2011-08-26T22:27:50+02:00

My sugestion is to use vsftp on debian if you need a ftp server, just remember password is sent in plain text unless you configure otherwise. $ apt-get install vsftpd

linux:fuse_mount

2011-06-12T10:49:57+02:00

Fuser is a module for the kernel which allows users to mount remote locations in home dirs. There exists several plugins and api to program fuser mount. To use fuse from userspace edit nano /etc/group Here I have added the user mikkel and foo fuse:x:120:mikkel,foo

linux:garmin

2011-08-13T10:17:16+02:00

I have for a long time been using turtlesport for tracking my workouts. However with new sites such as endomondo it is nice to share your workouts with friends and compete with them online. However endomondo and other sites doesn't support gmn files, so they requires to be converted before uploading. It unfortunately requires some overhead of work, but it works okay.

linux:gnome_thumbnails

2012-02-06T22:01:06+02:00

Sometimes Nautilus gets confused and doesn't display pictures with a thumbnail. Solution, remove the cache files. rm -rf ~/.thumbnails/

linux:gstreamer

2011-08-28T16:20:20+02:00

Colors are blue when displaying video A bug in the display settings sets the nvidia hue settings to -1000 resulting in video being displayed with blue colors. To resolve this follow these simple instructions. Open a shell an run $ gstreamer-properties

linux:hardening_your_environment

2011-08-08T17:58:20+02:00

SSH It is not always desireable to allow all users to logon through SSH. However you still need to have their user account on the system. Here is a way to limiting ssh access on your linux environments. It requires sshd and pam.d. Hardening SSH login By creating ssh.allow lists you are able to allow only a subset of users to login on your linux environment. Create a file in /etc/ssh/ssh.allow

linux:inotify

2012-01-14T17:08:01+02:00

Lsyncd / Inotify is a live syncronization tool which monitors changes in a folder and syncs it with a remote destination. inotify lsyncd

linux:install_iceweasel3_on_lenny

2011-08-26T20:50:53+02:00

To install Iceweasel 3 you need to use Backports package archives. Add the following to: /etc/apt.d/sources.list deb lenny-backports main contrib non-free Then as root run apt-get update To install packages from backports apt-get -t backports install

linux:lenovo_s10

2011-12-30T19:13:06+02:00

To install the native broadcom driver on debian, use module-assistant from shell. Log in as root and run. This should compile the native driver. This is tested on a Lenovo S10 Debian Testing. $ m-a a-i broadcom-sta Remember to check that /etc/modprobe.d/broadcom-sta-common.conf is created and the following modules are blaklistet.

linux:linkstation

2011-11-08T21:28:29+02:00

The link station comes with linux but ssh and telnet is shutdown by default. Heres a quick guide to fix this. telnet/ssh Install a fully fledged linux on the linkstation link

linux:linkstation_install

2012-02-23T20:44:50+02:00

This guide explains how to install Debian Squeeze on your linkstation LS-GL. Build on this guide * buffalo.nas-central.org From scratch This requires you disassemble the Linkstation and have fresh harddrive. I don't recommend using the original.

linux:mail_administration

2011-08-27T20:50:55+02:00

Ages ago I was running my own mail service and even hosting it for others as well. After some time I implemented spamassassin and needed to se if everyone had a spam folder. This script will run through all user accounts and check through Maildir of the folder .spam exists. Inside the script you can take action, eg. create necessary folders.

linux:merge_vcf

2011-02-21T21:56:21+02:00

I wanted to migrate all my contacts from an Exchange server and import them into my google contacts which is synced with my phone. From Outlook I managed to get 137 vcf file descriping my contacts I wanted to merge into Google contacts. It would be an tedious task to import them one by one.

linux:mysql

2011-08-27T20:57:45+02:00

dump mysql database for backup To backup mysql databases the easy way is to do a dump of the databases. Create a localuser eg. locbackup with permisson to dump the databases. The shell command is $ mysqldump -u john -pXXXX mydatabase > /tmp/mydb.sql

linux:network-manager

2011-08-27T17:57:57+02:00

Problem Network-manager reports that it is disabled in Gnome or from shell. Restarting the service or even rebooting the environment doesn't help. Solution Remove the NetworkManager.state file which preventss Network-manager from starting. log in as root and run from shell

linux:open_vpn

2010-12-29T18:21:57+02:00

This is an easy “howto” setup a vpn between two locations using a flashed linksys wrt54 router with DD-WRT firmware. The instructions are rudely copied from dd-wrt. prequesities * 2 routers flashed with dd-wrt with vpn link (eg. wrt54g linksys) * Openvpn installed

linux:ping_netbios_names

2011-03-10T17:44:05+02:00

Some times it is usefull to be ping netbios names from linux. To do so edit the file /etc/nsswitch.conf and add wins to hosts. Find the line hosts and add wins to the end of line. hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 wins

linux:portscan

2011-06-02T11:16:30+02:00

After setting up your host you should do a port scan to check which ports are open. $ nmap --v -A notfound.dk

linux:samsung_90x3a

2012-03-17T15:54:33+02:00

This mini guide explains how to get Debian up and running on a Samsung series 9 - 900×3. This guide is written on the basis of this guide found at here which was written for Fedora 16 but was easily adaptable for Debian Wheezy. There some few things currently not running out of the box after installing Debian, such as

linux:scanner_script

2011-01-16T14:24:38+02:00

To use my scanner from linux I use the following script for quick scanning. Extremely convenient. #!/bin/bash if [ $# -lt 1 ]; then echo "Usage: $0 " exit 1 fi CONVERT=/usr/bin/convert IMG_FILE=$1 OUTIMG=${IMG_FILE}.jpg SCANIMG=/usr/bin/scanimage #scan document echo -n "Start scanning, please wait" $SCANIMG -p --resolution 150 -x 210 -y 297 > "$IMG_FILE" #convert document echo -n "Converting image" $CONVERT "$IMG_FILE" "$OUTIMG" rm "$IMG_FILE"

linux:servers

2010-08-26T07:38:55+02:00

Currently i run the following servers Servernaming: Hydrogen.notfound.dk Wolfram.notfound.dk

linux:ssh

2011-08-27T20:43:16+02:00

SSH socks proxy Sometimes it can come in handy to create a socksproxy using ssh. Socks proxies are usefull from browsers and other programs you either want to shield or the only way to connect is through a socks proxy. from a linux shell run the following:

linux:sshfp

2011-10-18T17:38:47+02:00

It is now possible to use gratisdns with SSHFP. This adds an extra security layer, and enables you to verify your ssh server against the DNS. However it requires dnssec to work properly. More on how to configure your dns server here. Login togratisdns and configure your domain(s) for SSHFP.

linux:ssl_certificat

2011-03-16T19:54:58+02:00

To run IMAP-SSL on Debian you need to create a new certificate for use with imap-ssl. Follow the below instructions and you're quick up and running. #cd /root #/sbin/lidsadm -S -- -LIDS #openssl req -new -x509 -days 365 -nodes -out cert.pem -keyout key.pem #cp -a key.pem imapd-server.pem #cp -a key.pem pop3d-server.pem #cat cert.pem >> imapd-server.pem #cat cert.pem >> pop3d-server.pem #cp imapd-server.pem /etc/ssl/certs #cp pop3d-server.pem /etc/ssl/certs #/sbin/lidsadm -S …

linux:subversion

2011-08-27T19:54:29+02:00

Subversion is another version control system like CVS, GIT etc. They all differ in use and their own advantages and disvantages. Personally I prefer subversion over cvs. I have no experience with GIT or other version systems. Create your repository First SSH to the server you wish to create your repository on.

linux:torrentflux

2011-10-15T13:39:28+02:00

A lightweight torrent client. can be installed using apt-get. It can be configured to use sqlite. As default in debian it uses MySql. $ apt-get install torrentflux torrentflux

linux:tuning_wireless_tx

2011-01-19T16:56:22+02:00

Sometimes it is necessary to boost the transmission power on the wireless network card. the usage of iwconfig says interface txpower {NmW|NdBm|off|auto} Log in as root and run $ iwconfig ath0 txpower 500dBm The setting is not applicable on all network cards. But is worth trying.

linux:unison

2010-11-07T13:28:31+02:00

Use unison to keep to directories synced. I use unison to keep my home server synced with my laptop. Install unison using apt-get on both computers/servers from shell as root. $ apt-get update $ apt-get install unison Create a directory .unison in you home path, if it does not already exist.

linux:virtualbox

2010-11-04T20:28:35+02:00

Shell commands Restart virtual machine VBoxManage controlvm reset