Solaris11x Administration

• Installation | Features
  • Discuss features of Solaris® 11
  • Explore Topology
  • Provision virtual resources
  • Live Media Installation
  • Evaluate Installation
  • Text Installation
  • Automated Installation
  • Contrast Installation methods
  • Identify installed resources
•  
• Post-Installation Tasks
  • Sysconfig - Reconfigure system as needed
  • Explore Boot Environment
  • INIT - Follow Boot Cycle
•  
• Service Management Facility (SMF)
  • Explore implementation of service management
  • Contrast with SYSV method
  • Identify key files and daemons
  • Identify managed services
  • Explore properties of services
  • Manipulate services as needed
  • Effect changes to running system
•  
• $SHELL Basics | Navigation | Key Commands
  • Explore default $SHELL environment
  • Expose key variables
  • Review semantics: I/O | Redirection | etc.
  • Identify and use important UNIX commands
  • Apply command chaining
  • Use logical ANDing and ORing to achieve desired results
•  
• User | Group Management
  • Identify key files and commands
  • Explore current configuration
  • Discuss important user | group properties
  • Provision additional users | groups
  • Use GUI to manage user | group | role resources
  • Explore GUI environment
•  
• Package Management
  • Discuss current framework
  • Compare current framework to open source methods
  • Use GUI to explore and manipulate packages
  • Explore and use CLI package management utilities
  • Find | Add | Remove Packages
  • Evalaute results
•  

• UNIX Permissions
  • Discuss UNIX Discretionary Access Control (DAC) standard model
  • Identify applicable permissions on system objects
  • Manipulate permissions to suit current conditions
  • Test permissions across users | groups
  • Implement permissions as needed
•  
• CRON Scheduler
  • Discuss applicability
  • Explore system defaults
  • Discuss supported schedules
  • Schedule jobs as needed
  • Ensure automated functionality
  • Debug as needed
•  
• Network Stack Administration
  
  • Explore network settings | statistics | sockets with: 'netstat'
    
  • Discuss networking concepts applicable to Solaris
    
  • Complete an overview of network stack implemenation
  • Contrast stack implementation with prior versions
  • IP Administration basics - configuration - static
  • Dynamic IP Administration configuration
  • Conjoin dynamic and static configurations as needed
  • Provision additionaly IP subnet as needed
  • Explore IPv6 support
  • Committ new settings and evaluate
•  
• Storage Administration - UFS | SWAP | ZFS | TMPFS
  • Review storage basics as implemented by Solaris
  • Explore current configuration
  • Provision UFS slices as needed
  • Dynamically allocate SWAP as needed
  • Confirm rolling SWAP allocation
  • Introduction to ZFS Administration
  • Discuss ZFS basics applicable to all installations
  • Add | Extend ZFS storage pool as required
  • Take ZFS snapshots as needed
  • Confirm snapshots and footprint
  • Clone ZFS resources as needed - Discuss use-cases
  • Discuss ZFS streams
  • Implement in-memory TMPFS
  • Evaluate storage modifications
•  
• Network Time Protocol (NTP)
  • Discuss importance of optimal time synchronization
  • Identify default configuration
  • Locate internal | external time resources
  • Configure NTP to synch accordingly
  • Debug common synch issues related to system suspension
  • Manually synch time as needed to reduce skew
  • Confirm reliability of NTP hierarchy
  • Ensure all nodes use NTP persistently
•  
• Secure Communications
  • Identify important SSH utilities and features
  • Create secure remote terminals with SSH
  • Move data non-interactively with SCP
  • Use SFTP to secure data transmissions
  • Configure PKI, passwordless authentication
  • Confirm seamless PKI based authentication
•  
• Content Transfer Utilities
  • Synchronize content securely using RSYNC
  • Fetch content using WGET
  • Use cURL to fetch content
  • Contrast WGET and cURL
  • Install and use gFTP to graphically interact with: FTP | SFTP servers
•  
• Archival | Compression Utilities
  • Generate sample content for compression and archiving
  • Use GZIP to compress content for storage | transport
    
  • Compare source and compressed content footprints
  • Transfer content using RSYNC and evaluate performance
    
  • Use BZIP2 to compress content for dual purposes
  • Contrast BZIP2 footprint with GZIP
  • Archive content for convenience using TAR
  • Evaluate and discuss findings
•  
• Terminal Multiplexer
  • Identify use cases for screen multiplexer
  • Explore default environment and possible caveats
  • Use 'screen' to spawn multiplexed environment
  • Navigate environment using escape sequences
  • Attach | Detach | Kill | Re-spawn sessions as needed
  • Share screen sessions from various nodes
  • Allow process to persist across connections
  • Evaluate benefits
•  
• SYSLOG - Configuration
  • Explore defaults
  • Explain facilities and levels
  • Trap data as needed
  • Centralize SYSLOG dumps to LOG_HOST
  • Replicate SYSLOG dumps for redundancy
  • Explore LOG Rotation defaults
•  
• Extraction | Parsing Tools
  • Extract lines of interest with GREP
  • Parse fields of interest with AWK
  • Modify streams with SED
  • Combine tools to parse and manipulate content as needed
•  
• DNS Clients | Server | Configuration
  • Explore client resolution environment: key files and defaults
  • Use various clients to resolve inquiries for local and public resources
  • Implement DNS caching-only services
  • Test forwarded resolution of requests via caching-only DNS instance
  • Implement Primary DNS zone
  • Confirm resolution of authoritative records from Primary DNS zone
  • Replicate DNS zone to secondary servers
  • Confirm replicated results to secondary servers
  • Update records and confirm across nodes
  • Provision reverse IPv[4|6] records
  • Confirm reverse resolution of both protocols
•  
• FTP Services
  • Introduction to FTP services
  • Implement FTP server
  • Explore configuration - defaults
  • Test connectivity
  • Manipulate various FTP server options and confirm results
•  
• NFS Services
  • Discuss use-cases
  • Implement NFS shares
  • Mount NFS shares on clients and test accessibility
  • Vary share options and confirm on clients
  • Evaluate results
•  
• TFTPD Services
  • Discuss the benefits of TFTPD
  • Implement TFTPD server
  • Move data using standard TFTP client
  • Confirm appropriate permissions and highlight caveats
  • Archive infrastructure configuration via TFTPD
  • Confirm results
•  
• SMB Services
  • Discuss features & benefits
  • Contrast with Samba Server
  • Identify SMB resources
  • Implement SMB server
  • Test accessibility via SMB | CIFS
•  
• Apache - Web Services - HTTPD
  • Introduction to Apache HTTPD
  • Identify default configuration
  • Publish Apache manual
  • Configure and expore $USER directories
  • Discuss Apache LOGs and configurabiljity
  • Implement IP-based Virtual Hosts (VHosts)
  • Implement Name-based VHosts
  • Contrast applicability and configurability of various VHosts
•  
• Zones
  • Discuss virtualization options
  • Highlight benefits of zones
  • Discuss features and restrictions
  • Implement zones
  • Confirm connectivity to zones
•  

• Security
  • Introduction to Roles Based Access Control (RBAC)
  • Identify default roles and associated privileges
  • Contrast RBAC with DAC
  • Explain how RBAC augments DAC
  • Install NMap security scanner
  • Perform reconnaissance on all nodes
  • Identify potential vulnerabilities
  • Take steps to strengthen overall security posture of nodes
•  

Sums

• Various Tools
• Remote Confirmations
• File Metadata
• File Fragments
• Compress Content
• Archive Content
• DIR Hierarchy
• Password Sums
• Shared Secret
• Restrict History
• Downloaded Content
• Encrypt Content
• Site Credentials
• Site COOKIE
• Site COOKIE - Unique

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism