Xen Hypervisor Implementation

Intro to Xen Hypervisor Management

• Introduction - Xen - Features
  • Discuss features and benefits
  • Explain various hypervisor tiers
  • Compare and contrast supported GUEST models
  • Explain abstractions: DOM0 and DOMUs
  • Cover supported platforms, features and limitations
  • Discuss importance of VNC in Xen model
  • Explore classroom environment
•  
• Nework Bridging
  • Discuss networking concepts
  • Identify current configuration
  • Highlight ideal and common configuration
  • Explain inter-DOM communications
  • Implement Network Bridging
  • Confirm Bridge support
  • Reset as needed and evaluate
  • Ensure traffic flows normally
•  
• Xen Installation
  • Discuss concepts
  • Explain ideal storage configuration
  • Highlight affected system areas post-installation
  • Install Xen Hypervisor
  • Update boot environment
  • Peruse Xen footprint
  • Reset system accordingy and evaluate new environment
  • Use common Xen tools to ascertain system information
  • Discuss networking caveats
  • Confirm Network Bridge and general communications
•  
• Hardware Virtual Machine (HVM) DOMU | GUEST | VM
  • Discuss applicability
  • Provision target VM ISO image for installation
  • Allocate LVM storage for GUEST | DOMU
  • Preparge GUEST | DOMU configuration file
  • Highlight important directives for HVM functionality
  • Ensure key resources are present per DOMU
  • Create DOMU | GUEST
  • Debug unanticipated maladies
  • Complete DOMU OS installation and evaluate
  • Re-configure DOMU accordingly for initialization
  • Identify Xen Domains
  • Start Domain
  • Access DOMU remotely
  • Explore DOMU options
•  
• GUEST | DOMU | VM Management with XM
  • Identify key tools
  • Enumerate system details and known DOMUs
  • Ascertain useful Xen metadata
  • Find system availability and state data
  • Initiate console connections as needed
  • Identify busy DOMUs
  • Alter DOMU state as needed and evaluate
  • Peruse evaluated results
•  
• Virtual Manager | GUI
  • Discuss applicability
  • Install on Xen HOST
  • Test connectivity and debug accordingly
  • Alter Xend configuration as required
  • Ensure Virtual Manager connectivity
  • Explore interface and discuss relevant areas
  • Manage | Provision DOMUDiscuss findings
•  
• Para-Virtualised (PV) DOMUs | GUESTs | VMs with 'xen-tools'
  • Contrast with HVM DOMUs
  • Dicuss provisioning benefits
  • Install xen-tools
  • Configure pre-requisites as needed
  • Reset and ensure pre-requisites are available
  • Attempt to provision PV environment
  • Debug on-demand
  • Generate PV configuration and launch
  • Discuss PV environment caveats and benefits
  • Explore as needed
•  
• Prep XEN Host - Ubuntu 16x
  • Confirm Switch configuration - VLANs
  • Ensure Bridge Utilities are installed
  • Setup first network bridge for Xen
  • Tie bridge to Switch-based VLAN
  • Confirm communications
  • Install Xen and related tools
  • Confirm Xen installation - DOMs
•  
• Ubuntu | CentOS - Images
  • Explore 'xl' toolstack
  • Contrast with 'xm' toolstack
  • Create qemu-backed storage blocks
  • Discuss sparse storage
  • Define HVM Templates
  • Spawn VMs based on templates
  • Iterate through VM lifecycle with 'xl'
•  
• Storage Management - QEMU - qcow2
  • Add qemu-backed storage blocks
  • Allocate storage to target VMs
  • Initialize | Partition | LVM storage blocks
  • Confirm persistence
  • Resize qemu-backed storage blocks
  • Resize related storage stack and confirm
  • Resize qemu-backed '/' storage blocks
  • Redefine '/' mount point per VM
  • Confirm newly-extended storage
•  
• VM Networking | Hypervisor Bridging
  • Discuss caveats of randomly-assigned MACs per VM
  • Assign fixed MAC addresses to target VMs
  • Ensure consistent configuration based on static MACs
  • Explore initial bridge configuration
  • Confirm Switch-based VLAN configuration
  • Extend coniguration to multiple bridges tagged to appropriate VLANs
  • Confirm Switch-to-Hypervisor communications
•  
• L3 Segmentation | Firewalling | pfSense
  • Install pfSense VM instance
  • Ensure pfSense is tied to >= 2 Xen bridges
  • Confirm WAN | LAN firewall interfaces
  • Adjust rules to permit traffic flow
  • Confirm communications
  • Segregate VMs on either side of pfSense firewall instance
  • Confirm packet flow
  • Relegate VMs to original VLAN
  • Discuss options
•  

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism

zsync

• Discuss Features
• Prep Content
• Compression
• File Names