SUSE Enterprise Administration

• Installations
  • Identify and obtain ISO images
  • Prep VM GUEST
  • Perform Desktop installation
  • Tweak Desktop environment
  • Publish repository via HTTP
  • Perform Server installation via HTTP
  • Confirm setup and tweak
  • Discuss various installation methods
  • Perform SSH-based installation
  • Perform VNC-based installation
  • Confirm installation images
  • Evaluate SystemD Target
  • Clone GUEST installation
  • Evaluate results of various installation methods
•  
• Basic Linux Skills - Command Line Interface (CLI) - BASH
  • Introduction to GNOME Terminal
  • Demonstrate usage of the following useful commands & concepts
  • ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami, man, info
  • alias, cat, file, chmod, chown, history
  • Standard in/out, UNIX Pipes, Redirection, Command Chaining
  • ps, df, free, vmstat, top, kill
  • less & more, head & tail, diff
  • which & whereis, w, who
  • Explore BASH configuration files
  • Use grep and awk to process text files
  • Archival & Compression Utilities: tar, gzip, bzip2, zip
  • Explore important facets of BASH environment
•  
• Common Network Clients
  • File Transfer Protocol (FTP) client
  • Install and use LFTP - FTP Client to connect to FTP resources
  • Mirror and reverse mirror using LFTP to synchronize data
  • Wget - HTTP/HTTPS/FTP connectivity
  • Explore SSH clients - Discuss features
  • Identify key SSH-client files (.known_hosts, public/private key pairs,etc.)
  • Use Secure Copy Protocol (SCP) to move data between systems non-interactively
  • Use Secure File Transfer Protocol (SFTP) to move data between systems interactively
  • Demonstrate how to generate Public/Private key (RSA/DSA) pairs using ssh-keygen
  • Copy public keys to remote systems using: ssh-copy-id
  • Demonstrate using SSHto authenticate to remote Linux hosts without passwords
  • Authenticate to remote Linux systems using alternate credentials
  • Generate Public Key/Private Key pairs for use with file and E-mail encryption
  • Demonstrate using E-mail client with GNU Privacy Guard (GPG) Open PGP for E-Mail encryption
  • Use ping, netstat, arp, telnet, traceroute, ifconfig - network diagnostics
  • Use dig, host, nslookup, whois name resolution clients
•  

• Users, Groups & Permissions
  • User and group creation & management concepts - passwd, shadow, group, gshadow files
  • Use lastlog to determine system-access to various terminals
  • Use YaST to create and manage users and groups
  • Use stat to ascertain file information
  • SETUID | SETGID | Sticky Bit
  • Discuss and Implement Hard and Symbolic links
•  
• SYSLOG | LOG ROTATE
  • Explore Boot log & System Log
    
  • Explanation of syslog facilities & levels
    
  • Discuss rSYSLOG features & enhancements
  • Demonstrate syslog administration
    
  • Enable rSYSLOG network listener
  • Explore automatic log rotation and customization via Logrotate
    
  • Configure Logrotate to rotate & compress sample log files
•  
• Storage Administration
  • Provision additional SWAP storage paritions and files
  • Identify allocated swap space to the kernel
  • Committ changes to /etc/fstab for persistence
  • Disable swapping with swapoff as necessary
  • Introduction to BTRFS File System
  • Explore BTRFS defaults
  • Administer important aspects of BTRFS
  • Discuss features and benefits of LVM
  • Implement Logical Volume Management (LVM)
  • Manage LVM via GUI and CLI
  • Evaluate results
•  

• Network - Physical & Logical Configuration
  • Identify key management tool
  • Explore interfaces across systems
  • Provision IP aliases and evaluate
  • Add network routes as needed
  • Confirm interface configuration
•  
• CRON - System Scheduler
  • Explore Cron Implementation
  • Explain scheduling options
  • Global and scope-based Cron options
  • Schedules jobs to run & examine the output
  • Configure individual Crontab entries
•  
• Implement Network Time Protocol Daemon (NTPD) Client/Server
  • Configure Network Time Protocol (NTP) to perform client/server time synchronization
  • Identify NTP bounded UDP interfaces
  • Synchronize with various NTP instancs
  • Confirm synchronization status
•  
• Dynamic Host Configuration Protocol (DHCP)
  • Provision dedicated broadcast domain
  • Configure DHCP scope
  • Discuss various options
  • Confirm functional configuration
  • Add reservations and test
•  
• Domain Name System (DNS)
  • Explore SUSE DNS configuration via YaST
  • Configure BIND as a caching-only DNS server
  • Implement Master DNS Zone
  • Configure Reverse Zone for local subnet
  • Implement Dynamic Domain Name System (DDNS) Zones (Forward/Reverse)
  • Explain DHCP and DNS update integration options
  • Integrate DHCP with DNS via Encypted Transaction Signatures (TSigs)
  • Evaluate results of BIND configuration using DIG & host
  • Implement DNS sub-domains (Third-level domains)
•  
• FTP Service
  • Install FTP Server
    
  • Explore common options
    
  • Test anonymous and authenticated connectivity
    
  • Disable anonymous access
    
  • CHROOT authenticated users | debug where required
•  
• Software Repository
  
  • Examine existing configuration
  • Provision HTTP repository | confirm HTTP access
    
  • Add Repos to configuration | evaluate
    
•  

• Apache HTTPD Server
  
  • Install Apache HTTPD
  • Confirm content delivery
  • Enable IP-based Virtual Hosts
    
  • Test access to various content
  • Transition to Name-based Virtual Hosts
  • Contrast with IP-based Virtual Hosts
•  
• Network Reconnaissance
  
  • Install NMap
  • Explore common features
  • Ascertain local resources
    
  • Contrast discrepancies
    
  • Find subnet-wide hosts
    
  • Perform comprehensive scan of subnet-wide hosts
    
•  
• GPG Content Protection
  
  • Discuss features
  • Generate usage keys
  • Share public keys
    
  • Encrypt and share content
    
  • Decrypt and confirm integrity
    
•  
• Packet Capturing
  
  • Discuss features
  • Capture various traffic
  • Store captures for analysis
    
  • Read captures with various filters
    
  • Capture using various BPFs
    
•  
• WireShark | Packet Analysis
  
  • Discuss Usage
  • Install WireShark
  • Analyze TCPDump captures
  • Reconstruct streams
    
  • Identify interesting packet characteristics
    
•  
• SuSE Firewall
  
  • Discuss features
  • Explore defaults
  • Apply custom rules
    
  • Apply rules to internal zone
    
  • Examine behavior
    
•  

Sums

• Various Tools
• Remote Confirmations
• File Metadata
• File Fragments
• Compress Content
• Archive Content
• DIR Hierarchy
• Password Sums
• Shared Secret
• Restrict History
• Downloaded Content
• Encrypt Content
• Site Credentials
• Site COOKIE
• Site COOKIE - Unique

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism