作業記録 / vxd0001


vxd0001

OS: CenOS 4.2
●予定利用用途: Xen Domain-0

  • インストール情報
    HD構成
    /dev/hda1 /boot 190MB
    	 /dev/hda2	  /	  5.1GB
    	 /dev/hda3	  swap	  2048MB

GRUBインストール先: MBR
インストール構成: 最小構成+エディッタ(vim)+開発ツール
セキュリティ設定: ファイヤーウォールなし・SELinux無効
システム言語: 第1言語:日本語(ja-JP.UTF-8), 第2言語:英語(USA)
キーボードタイプ: 日本語(106)
rootパスワード: visard

  • 一時的にシステム言語を日本語から英語に変更
    linux# export LANG=C
  • ホスト名の変更
    linux# vi /etc/sysconfig/network
    HOSTNAME=vxd0001.visard.net
  • ホスト名の確認
    linux# hostname
  • コンソール解像度の変更(600*480→1024*720)
    linux# vi /boot/grub/grub.conf
    kernel /vmlinuz-2.6.9-22.EL ro root=LABEL=/1 vga=773
  • ユーザの追加+パスワード設定 linux# useradd visard
    linux# passwd visard
    > visard
    > visard
  • ユーザ・グループファイルのバックアップ linux# mkdir /root/default-conf
    linux# touch /root/default-conf/passwd.org
    linux# touch /root/default-conf/shadow.org
    linux# touch /root/default-conf/group.org
    linux# cat /etc/passwd > /root/default-conf/passwd.org
    linux# cat /etc/shadow > /root/default-conf/shadow.org
    linux# cat /etc/group > /root/default-conf/group.org
  • デフォルト自動起動デーモン・リストのバックアップ linux# touch /root/default-conf/chkconfig.org
    linux# chkconfig --list > chkconfig.org
  • 不要自動起動デーモンの停止 (例)linux# chkconhfig sendmail off
  • 自動起動デーモンの確認 linux# chkconfig --list
irqbalance      0:off   1:off   2:off   3:on    4:on    5:on    6:off
pcmcia          0:off   1:off   2:on    3:on    4:on    5:on    6:off
sendmail        0:off   1:off   2:off   3:off   4:off   5:off   6:off
bluetooth       0:off   1:off   2:off   3:off   4:off   5:off   6:off
netfs           0:off   1:off   2:off   3:off   4:off   5:off   6:off
cups            0:off   1:off   2:off   3:off   4:off   5:off   6:off
messagebus      0:off   1:off   2:off   3:on    4:on    5:on    6:off
rpcidmapd       0:off   1:off   2:off   3:off   4:off   5:off   6:off
rhnsd           0:off   1:off   2:off   3:off   4:off   5:off   6:off
nfs             0:off   1:off   2:off   3:off   4:off   5:off   6:off
saslauthd       0:off   1:off   2:off   3:off   4:off   5:off   6:off
iptables        0:off   1:off   2:on    3:on    4:on    5:on    6:off
xinetd          0:off   1:off   2:off   3:on    4:on    5:on    6:off
diskdump        0:off   1:off   2:off   3:off   4:off   5:off   6:off
cpuspeed        0:off   1:on    2:on    3:on    4:on    5:on    6:off
NetworkManager  0:off   1:off   2:off   3:off   4:off   5:off   6:off
syslog          0:off   1:off   2:on    3:on    4:on    5:on    6:off
xfs             0:off   1:off   2:on    3:on    4:on    5:on    6:off
nfslock         0:off   1:off   2:off   3:off   4:off   5:off   6:off
acpid           0:off   1:off   2:off   3:on    4:on    5:on    6:off
readahead       0:off   1:off   2:off   3:off   4:off   5:off   6:off
anacron         0:off   1:off   2:on    3:on    4:on    5:on    6:off
netplugd        0:off   1:off   2:off   3:off   4:off   5:off   6:off
netdump         0:off   1:off   2:off   3:off   4:off   5:off   6:off
gpm             0:off   1:off   2:off   3:off   4:off   5:off   6:off
rpcgssd         0:off   1:off   2:off   3:off   4:off   5:off   6:off
FreeWnn         0:off   1:off   2:off   3:off   4:off   5:off   6:off
yum             0:off   1:off   2:off   3:off   4:off   5:off   6:off
sshd            0:off   1:off   2:on    3:on    4:on    5:on    6:off
network         0:off   1:off   2:on    3:on    4:on    5:on    6:off
canna           0:off   1:off   2:on    3:on    4:on    5:on    6:off
portmap         0:off   1:off   2:off   3:off   4:off   5:off   6:off
ypbind          0:off   1:off   2:off   3:off   4:off   5:off   6:off
auditd          0:off   1:off   2:off   3:off   4:off   5:off   6:off
haldaemon       0:off   1:off   2:off   3:on    4:on    5:on    6:off
autofs          0:off   1:off   2:off   3:on    4:on    5:on    6:off
iiim            0:off   1:off   2:on    3:on    4:on    5:on    6:off
mdmonitor       0:off   1:off   2:off   3:off   4:off   5:off   6:off
atd             0:off   1:off   2:off   3:off   4:off   5:off   6:off
apmd            0:off   1:off   2:on    3:on    4:on    5:on    6:off
microcode_ctl   0:off   1:off   2:on    3:on    4:on    5:on    6:off
nscd            0:off   1:off   2:off   3:off   4:off   5:off   6:off
smartd          0:off   1:off   2:on    3:on    4:on    5:on    6:off
crond           0:off   1:off   2:on    3:on    4:on    5:on    6:off
kudzu           0:off   1:off   2:off   3:on    4:on    5:on    6:off
rawdevices      0:off   1:off   2:off   3:on    4:on    5:on    6:off
irda            0:off   1:off   2:off   3:off   4:off   5:off   6:off
isdn            0:off   1:off   2:off   3:off   4:off   5:off   6:off
readahead_early 0:off   1:off   2:off   3:off   4:off   5:off   6:off
mdmpd           0:off   1:off   2:off   3:off   4:off   5:off   6:off
ipmi            0:off   1:off   2:off   3:off   4:off   5:off   6:off
psacct          0:off   1:off   2:off   3:off   4:off   5:off   6:off
xinetd based services:
       krb5-telnet:    off
       echo:   off
       daytime:        off
       time-udp:       off
       chargen:        off
       time:   off
       kshell: off
       eklogin:        off
       rsync:  off
       gssftp: off
       klogin: off
       cups-lpd:       off
       echo-udp:       off
       daytime-udp:    off
       chargen-udp:    off
  • マルチ・ブートのためのブートローダ(GRUB)の編集

    # vi /boot/grub/menu.lst

    # grub.conf generated by anaconda

    #

    # Note that you do not have to rerun grub after making changes to this file

    # NOTICE: You have a /boot partition. This means that

    # all kernel and initrd paths are relative to /boot/, eg.

    # root (hd0,0)

    # kernel /vmlinuz-version ro root=/dev/hda2

    # initrd /initrd-version.img

    #boot=/dev/hda default=0

    #timeout=5 splashimage=(hd0,0)/grub/splash.xpm.gz

    #hiddenmenu title CentOS-4 (Xen Domain-0) (2.6.9-22.EL)

           root (hd0,0)
           kernel /vmlinuz-2.6.9-22.EL ro root=LABEL=/1 vga=773
           initrd /initrd-2.6.9-22.EL.img

title CentOS-4 (Xen Domain-U)

       root (hd0,4)
       chainloader +1

title SUSE-10 (Xen Domain-U)

       root (hd0,7)
       chainloader +1

title CenOS-4 (TEST)

       root (hd0,10)
       chainloader +1

IPアドレス(固定)の設定

# vi /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 BOOTPROTO=static HWADDR=00:90:96:55:7D:5B ONBOOT=yes TYPE=Ethernet

IPADDR=172.16.18.1 NETWORK=172.16.18.0 NETMASK=255.255.255.224 BROADCAST=172.16.18.31

IPアドレスの確認

# ifconfig

/etc/hostsファイルの編集

# vi /etc/hosts 127.0.0.1 localhost.localdomain localhost vxd0001.visard.net vxd0001 172.16.18.1 xvd0001.visard.net vxd0001

172.16.18.2 xvdu001.visard.net vxdu001 172.16.18.4 xvdu002.visard.net vxdu002 172.16.18.6 xvdu003.visard.net vxdu003

ファイルサーバ用パーティションの作成

# fdisk /dev/hda p n 14 w q

# sync; sync; sync

# shutdown -r now

ファイルサーバ用ファイルシステムの作成 mke2fs -j -c /dev/hda14e

システムアカウントファイル整合性チェック・スクリプトの作成

# mkdir /root/src-test

# touch /root/src-test/chkloaccount.sh

# mkdir /var/log/chkuser

# touch /var/log/chkuser/loaccount.log

# vi /root/src-test/chkloaccount.sh <以下を記述>

#! /bin/bash

echo "====================" >> /var/log/chkuser/loaccount.log date >> /var/log/chkuser/loaccount.log echo "Regular Accounting Coherence Check" >> /var/log/chkuser/loaccount.log echo "passwd file check" >> /var/log/chkuser/loaccount.log diff /etc/passwd /root/default-conf/passwd.org >> /var/log/chkuser/loaccount.log 2>&1 echo "group file check" >> /var/log/chkuser/loaccount.log diff /etc/group /root/default-conf/group.org >> /var/log/chkuser/loaccount.log 2>&1 echo "shadow file check" >> /var/log/chkuser/loaccount.log diff /etc/shadow /root/default-conf/shadow.org >> /var/log/chkuser/loaccount.log 2>&1 echo "===END==============" >> /var/log/chkuser/loaccount.log

# chmod 700 /root/src-test/chkloaccount.sh

cronへ登録

# crontab -e <以下を記述> 20 * * * * /root/shc-test/chkloaccount.sh

フラッシュメモリ利用手順 (1)マウントポイントの作成

# mkdir /mnt/flash1 (2)フラッシュメモリのマウント

# mount -t vfat /dev/sda1 /mnt/flash1

RPM-GPG-KEYのインポート

# rpm --import /usr/share/rhn/BETA-RPM-GPG-KEY

# rpm --import /usr/share/rhn/RPM-GPG-KEY-centos4

# rpm --import /usr/share/rhn/RPM-GPG-KEY-fedora

# rpm --import /usr/share/rhn/RPM-GPG-KEY

# rpm --import /usr/share/rhn/RPM-GPG-KEY-fedora-test

# rpm --import /usr/share/doc/centos-release-4/RPM-GPG-KEY-centos4

# rpm --import /usr/share/doc/centos-release-4/RPM-GPG-KEY