Neo 4 Tech

distribution · Docker Desktop for Windows

[root@docker-ce ~]# dnf config-manager --add-repo=https://download.docker.com/linux/centos/docker-ce.repo
[root@docker-ce ~]# dnf list docker-ce
Available Packages
docker-ce.x86_64              3:19.03.5-3.el7                    docker-ce-stable
[root@docker-ce ~]#
[root@docker-ce ~]# dnf install docker-ce --nobest -y
[root@docker-ce ~]# systemctl start docker
[root@docker-ce ~]# systemctl enable docker
[root@docker-ce ~]# docker --version
Docker version 18.06.3-ce, build d7080c1
[root@docker-ce ~]#
[root@docker-ce ~]# docker run hello-world
[root@docker-ce ~]# dnf install curl -y
[root@docker-ce ~]# curl -L "https://github.com/docker/compose/releases/download/1.25.0/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
[root@docker-ce ~]# chmod +x /usr/local/bin/docker-compose
[root@docker-ce ~]# docker-compose --version
docker-compose version 1.25.0, build 0a186604
[root@docker-ce ~]#
> docker --version

Docker version 19.03.1

> docker run hello-world

docker : Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
1b930d010525: Pull complete
Digest: sha256:c3b4ada4687bbaa170745b3e4dd8ac3f194ca95b2d0518b417fb47e5879d9b5f
Status: Downloaded newer image for hello-world:latest

Hello from Docker!
This message shows that your installation appears to be working correctly.
...

> docker image ls

> docker container ls --all

> docker --help
> docker container --help
> docker container ls --help
> docker run --help

 > docker run --interactive --tty ubuntu bash

 docker : Unable to find image 'ubuntu:latest' locally
 latest: Pulling from library/ubuntu
 22e816666fd6: Pull complete
 079b6d2a1e53: Pull complete
 11048ebae908: Pull complete
 c58094023a2e: Pull complete
 Digest: sha256:a7b8b7b33e44b123d7f997bd4d3d0a59fafc63e203d17efedf09ff3f6f516152
 Status: Downloaded newer image for ubuntu:latest

 root@8aea0acb7423:/# hostname
 8aea0acb7423

 root@8aea0acb7423:/# exit
 >

 > docker container ls --all

 CONTAINER ID    IMAGE          COMMAND     CREATED          STATUS                      PORTS    NAMES
 8aea0acb7423    ubuntu         "bash"      2 minutes ago    Exited (0) 2 minutes ago             laughing_kowalevski
 45f77eb48e78    hello-world    "/hello"    3 minutes ago    Exited (0) 3 minutes ago             relaxed_sammet

 > docker run --detach --publish 80:80 --name webserver nginx

 Unable to find image 'nginx:latest' locally
 latest: Pulling from library/nginx

 fdd5d7827f33: Pull complete
 a3ed95caeb02: Pull complete
 716f7a5f3082: Pull complete
 7b10f03a0309: Pull complete
 Digest: sha256:f6a001272d5d324c4c9f3f183e1b69e9e0ff12debeb7a092730d638c33e0de3e
 Status: Downloaded newer image for nginx:latest
 dfe13c68b3b86f01951af617df02be4897184cbf7a8b4d5caf1c3c5bd3fc267f

 > docker container ls

 CONTAINER ID    IMAGE    COMMAND                   CREATED          STATUS          PORTS                 NAMES
 0e788d8e4dfd    nginx    "nginx -g 'daemon of…"    2 minutes ago    Up 2 minutes    0.0.0.0:80->80/tcp    webserver

 >  docker container stop webserver

 > docker container rm webserver laughing_kowalevski relaxed_sammet

> docker run alpine env

PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
HOSTNAME=b7edf988b2b5
TERM=xterm
HOME=/root
HTTP_PROXY=http://proxy.example.com:3128
http_proxy=http://proxy.example.com:3128
no_proxy=*.local, 169.254/16

> docker version

Client: Docker Engine - Community
 Version:           19.03.1
 API version:       1.40
 Go version:        go1.12.5
 Git commit:        74b1e89
 Built:             Thu Jul 25 21:17:08 2019
 OS/Arch:           windows/amd64
 Experimental:      true

Server: Docker Engine - Community
 Engine:
  Version:          19.03.1
  API version:      1.40 (minimum version 1.12)
  Go version:       go1.12.5
  Git commit:       74b1e89
  Built:            Thu Jul 25 21:17:52 2019
  OS/Arch:          linux/amd64
  Experimental:     true
 containerd:
  Version:          v1.2.6
  GitCommit:        894b81a4b802e4eb2a91d1ce216b8817763c29fb
 runc:
  Version:          1.0.0-rc8
  GitCommit:        425e105d5a03fabd737a126ad93d62a9eeede87f
 docker-init:
  Version:          0.18.0
  GitCommit:        fec3683

> kubectl config get-contexts
> kubectl config use-context docker-desktop

---
- name: Deploy Jenkins CI
hosts: jenkins_server
remote_user: vagrant
become: yes

roles:
  - geerlingguy.repo-epel
  - geerlingguy.jenkins
  - geerlingguy.git
  - tecris.maven
  - geerlingguy.ansible

- name: Deploy Nexus Server
hosts: nexus_server
remote_user: vagrant
become: yes

roles:
  - geerlingguy.java
  - savoirfairelinux.nexus3-oss

- name: Deploy Sonar Server
hosts: sonar_server
remote_user: vagrant
become: yes

roles:
  - wtanaka.unzip
  - zanini.sonar

- name: On Premises CentOS
hosts: app_server
remote_user: vagrant
become: yes

roles:
  - jenkins-keys-config
- name: Deploy Jenkins CI
hosts: jenkins_server
remote_user: vagrant
become: yes

roles:
  - geerlingguy.repo-epel
  - geerlingguy.jenkins
  - geerlingguy.git
  - tecris.maven
  - geerlingguy.ansible

---
- name: Install Java
hosts: app_server
become: yes
become_user: root
roles:
  - geerlingguy.java

- name: Download Application from Repo
hosts: app_server
tasks:
  - get_url:
      force: yes
      url: "{{ lookup('env','ARTIFACT_URL') }}"
      dest: "/tmp/{{ lookup('env','APP_NAME') }}.jar"
  - stat:
      path: "/tmp/{{ lookup('env','APP_NAME') }}.jar"

- name: Setup Spring Boot
hosts: app_server
become: yes
become_user: root
roles:
  - { role: pellepelster.springboot-role,
      spring_boot_file: "{{ lookup('env','APP_NAME') }}.jar",
      spring_boot_file_source: "/tmp/{{ lookup('env','APP_NAME') }}.jar",
      spring_boot_application_id: "{{ lookup('env','APP_NAME') }}"
  }
def artifactUrl = "http://${NEXUS_URL}/repository/ansible-meetup/${repoPath}/${version}/${pom.artifactId}-${version}.jar"

withEnv(["ARTIFACT_URL=${artifactUrl}", "APP_NAME=${pom.artifactId}"]) {
  echo "The URL is ${env.ARTIFACT_URL} and the app name is ${env.APP_NAME}"

  // install galaxy roles
  sh "ansible-galaxy install -vvv -r provision/requirements.yml -p provision/roles/"       

  ansiblePlaybook colorized: true,
  credentialsId: 'ssh-jenkins',
  limit: "${HOST_PROVISION}",
  installation: 'ansible',
  inventory: 'provision/inventory.ini',
  playbook: 'provision/playbook.yml',
  sudo: true,
  sudoUser: 'jenkins'
}
$ sudo mkfs.ext4 -i 16400 /dev/sdc1

$ sudo mkfs.ext4 -i  196800 /dev/sdc1

$ sudo mkfs.ext4 -T largefile /dev/device
OR
$ sudo mkfs.ext4 -T largefile4 /dev/device

$ df -i
OR
$ df -iT

$ sudo netstat -tulpn
OR
$ sudo ss -tulpn
$ sudo watch netstat -tulpn
OR
$ sudo watch ss -tulpn
getent passwd 0

getent group root wheel adm admin

getent passwd | cut -d : -f 1 | xargs groups

Pure root is user id "0".

All the users in the system are in the /etc/passwd file:
less /etc/passwd

Those who are root have "0" as the user id, which is the 3rd column. Those with "0" as the group (4th column) may also have some root privileges.

Next, you'll want to look at the groups, and see who is an additional member of the "root" or "wheel" or "admin" groups:
less /etc/group

Users listed in those groups could have some root privileges, especially via the "sudo" command.

The final thing you will want to check is the "sudo" config and see who is listed as having authorisation to run this command. This file itself is well documented so I won't reproduce it here:
less /etc/sudoers

To print all users
perl -n -e '@user = split /:/ ; print "@user[0]\n";' < /etc/passwd

To print only those users with UID 0, being as others have said, the users with implicit root privileges:
perl -n -e '@user = split /:/ ; print "@user[0]\n" if @user[2] == "0";' < /etc/passwd

# sestatus

# setenforce 0

# setenforce Permissive

# vi /etc/selinux/config

SELINUX=disabled

# reboot
# init 0
# telinit 0

# sestatus

ssh root@server_ip_address

adduser username

passwd username

Set password prompts:
Changing password for user username.
New password:
Retype new password:
passwd: all authentication tokens updated successfully.

usermod -aG wheel username

su - username

sudo command_to_run

sudo ls -la /root

Output:
[sudo] password for username:

C:\>nltest /?
 Usage: nltest [/OPTIONS]
C:\nltest /trusted_domains
C:\nltest /dclist:nom_domain
   C:\>nltest /finduser:Alex
   Domain Name: nom_domain
   Trusted DC Name \\SRV-D02
   The command completed successfully

dpkg -l | grep ssl

sudo apt-get install openssl

sudo mkdir /etc/apache2/ssl

sudo /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem

<IfModule mod_ssl.c>

Listen 443

</IfModule>

sudo nano /etc/apache2/sites-available/default-ssl

<IfModule mod_ssl.c>

<VirtualHost _default_:443>

ServerAdmin webmaster@localhost

DocumentRoot /var/www

<Directory />

Options FollowSymLinks

AllowOverride None

</Directory>

<Directory /var/www/>

Options Indexes FollowSymLinks MultiViews

AllowOverride None

Order allow,deny

allow from all

</Directory>

ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/

<Directory "/usr/lib/cgi-bin">

AllowOverride None

Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch

Order allow,deny

Allow from all

</Directory>

ErrorLog /var/log/apache2/error.log

# Possible values include: debug, info, notice, warn, error, crit,

# alert, emerg.

LogLevel warn

CustomLog /var/log/apache2/ssl_access.log combined

#   SSL Engine Switch:

#   Enable/Disable SSL for this virtual host.

SSLEngine on

SSLCertificateFile /etc/apache2/ssl/apache.pem

</VirtualHost>

</IfModule>

a2enmod ssl

a2ensite default-ssl

sudo /etc/init.d/apache2 restart

sudo yum remove -y docker \
                  docker-client \
                  docker-client-latest \
                  docker-common \
                  docker-latest \
                  docker-latest-logrotate \
                  docker-logrotate \
                  docker-engine

sudo yum install -y yum-utils \
  device-mapper-persistent-data \
  lvm2

sudo yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/centos/docker-ce.repo

sudo yum -y install docker-ce

sudo systemctl start docker && sudo systemctl enable docker

sudo usermod -aG docker cloud_user

$ sudo apt-get update
$ sudo apt-get upgrade
$ ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       validlft forever preferredlft forever
    inet6 ::1/128 scope host 
       validlft forever preferredlft forever
2: ens192:  mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:50:56:01:1e:8c brd ff:ff:ff:ff:ff:ff
    inet 10.10.20.31/24 brd 10.10.20.255 scope global ens192
       validlft forever preferredlft forever
    inet6 fe80::250:56ff:fe01:1e8c/64 scope link 
       validlft forever preferredlft forever
3: ens224:  mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether 00:50:56:01:1e:8e brd ff:ff:ff:ff:ff:ff
$ sudo vim /etc/network/interfaces
# The secondary network interface
auto [second_nic_label]
iface [second_nic_label] inet static
        address 10.10.20.32
        netmask 255.255.255.0

$ sudo systemctl restart networking
$ sudo ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       validlft forever preferredlft forever
    inet6 ::1/128 scope host 
       validlft forever preferredlft forever
2: ens192:  mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:50:56:01:1e:8c brd ff:ff:ff:ff:ff:ff
    inet 10.10.20.31/24 brd 10.10.20.255 scope global ens192
       validlft forever preferredlft forever
    inet6 fe80::250:56ff:fe01:1e8c/64 scope link 
       validlft forever preferredlft forever
3: ens224:  mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:50:56:01:1e:8e brd ff:ff:ff:ff:ff:ff
    inet 10.10.20.32/24 brd 10.10.20.255 scope global ens224
       validlft forever preferredlft forever
    inet6 fe80::250:56ff:fe01:1e8e/64 scope link 
       validlft forever preferredlft forever

$ sudo apt-get install python-jinja2 python-pip libssl-dev
$ sudo pip install --upgrade pip
$ sudo pip install ansible
$ sudo pip install kolla-ansible==6.0.0.0rc2
$ sudo cp -r /usr/local/share/kolla-ansible/etc_examples/kolla /etc/kolla
$ sudo vim /etc/kolla/globals.yml
kolla_base_distro: "centos"
kolla_install_type: "binary"
openstack_release: "pike"
kolla_internal_vip_address: "10.10.20.33"
kolla_external_vip_address: "10.10.20.30"
network_interface: "[first_nic_label]"
neutron_external_interface: "[second_nic_label]"
kolla_enable_tls_external: "yes"
kolla_external_fqdn_cert: "{{ nodeconfigdirectory }}/certificates/haproxy.pem"
$ sudo kolla-ansible certificates
$ sudo mkdir -p /etc/kolla/config/nova
$ sudo vim /etc/kolla/config/nova/nova-compute.conf
[libvirt]
virt_type = qemu
cpu_mode = none
$ sudo kolla-genpwd
$ sudo kolla-ansible \
-i /usr/local/share/kolla-ansible/ansible/inventory/all-in-one \
bootstrap-servers
localhost: ok=40   changed=20   unreachable=0    failed=0
$ sudo kolla-ansible pull
$ sudo kolla-ansible prechecks \
-i /usr/local/share/kolla-ansible/ansible/inventory/all-in-one
localhost: ok=83   changed=1    unreachable=0    failed=0
$ sudo kolla-ansible deploy \
-i /usr/local/share/kolla-ansible/ansible/inventory/all-in-one
$ sudo docker ps -a
$ sudo kolla-ansible post-deploy
$ sudo pip install python-openstackclient
$ sudo vim /usr/local/share/kolla-ansible/init-runonce
EXT_NET_CIDR='10.10.20.0/24'
EXT_NET_RANGE='start=10.10.20.110,end=10.10.20.254'
EXT_NET_GATEWAY='10.10.20.1'
$ sudo -s
# source /etc/kolla/admin-openrc.sh
# cd /usr/local/share/kolla-ansible/ && ./init-runonce
$ sudo grep keystone_admin_password /etc/kolla/passwords.yml
$ sudo kolla-ansible destroy --yes-i-really-really-mean-it
$ cd /usr/local/share/kolla-ansible/tools
$ sudo ./stop-containers
$ cd /usr/local/share/kolla-ansible/tools
$ sudo ./cleanup-containers
$ cd /usr/local/share/kolla-ansible/tools
$ sudo ./cleanup-host
$ cd /usr/local/share/kolla-ansible/tools
$ sudo ./cleanup-images
sudo apt-get update
sudo apt-get upgrade
sudo apt-get install git

Allow that installation to complete.

Clone devstack

We're going to use git to clone devstack. To do this, go back to your terminal window and issue the following two commands:
cd /
sudo git clone https://git.openstack.org/openstack-dev/devstack master

Next, we have to copy the sample configuration file and set a password to be used for automated deployment. To complete this task, issue the following commands:
cd devstack
sudo cp samples/local.conf local.conf

Now we must set the automated deployment password. Open the local.conf file with the command:
sudo nano local.conf

Search for the password variable section and ensure it reflects the following (YOURPASSWORD is the actual password you want to use):
ADMIN_PASSWORD=YOURPASSWORD
MYSQL_PASSWORD=$ADMIN_PASSWORD
RABBIT_PASSWORD=$ADMIN_PASSWORD
SERVICE_PASSWORD=$ADMIN_PASSWORD

Create a user and start the installation

It's time to run a few scripts. The first script will create a new user for devstack. The command to run this script is:
sudo /devstack/tools/create-stack-user.sh

Once the script completes, you'll need to change the permissions of the devstack folder with the command:
sudo chown -R stack:stack /devstack

It's time to run the installation script—this must be run as the stack user by first issuing the command sudo su stack. After you change to the stack user, kick off the install with the command /devstack/stack.sh. This command will take at least 30 minutes to complete.

When the command finally completes, you will be given an IP address (the address of the server), as well as two usernames (the admin password was created in the local.conf file). Open a browser, point it to http://SERVER_IP_ADDRESS/dashboard, and log in with the given credentials. You will be presented with the OpenStack Dashboard (Figure A).

Congratulations! You're ready to create and deploy.

yum install ansible

infra ~ # cat /etc/hosts
127.0.0.1       localhost.localdomain localhost
10.21.27.11     cluster1.adrien.lan cluster1
10.21.27.12     cluster2.adrien.lan cluster2
10.21.27.125    rhelsrv1
10.21.27.127    rhelsrv2
10.21.27.130    debsrv1
10.21.27.121    debsrv2

infra ~ # ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
d8:de:8e:f9:a4:44:07:a7:ec:dc:ed:81:10:ef:1e:b8 root@rhelsrv1
The key's randomart image is:
+--[ RSA 2048]----+
|                 |
|                 |
|        o .      |
|       + *       |
|      . S o      |
|       = B o     |
|        * B o    |
|       . O o .   |
|        E.+ .    |
+-----------------+

infra ~ # ssh-copy-id rhelsrv1
infra ~ # ssh-copy-id rhelsrv2
infra ~ # ssh-copy-id cluster1
infra ~ # ssh-copy-id cluster2
infra ~ # ssh-copy-id debsrv1
infra ~ # ssh-copy-id debsrv2

infra ~ # cd /etc/ansible

[rhel]
rhelsrv1
rhelsrv2
[cluster]
cluster1
cluster2
[sambaservers]
debsrv1
debsrv2

ansible -m ping all

cluster1 | success >> {
    "changed": false, 
    "ping": "pong"
}
cluster2 | success >> {
    "changed": false, 
    "ping": "pong"
}
rhelsrv2 | success >> {
    "changed": false, 
    "ping": "pong"
}
rhelsrv1 | success >> {
    "changed": false, 
    "ping": "pong"
}
debsrv2 | success >> {
    "changed": false,
    "ping": "pong"
}
debsrv1 | success >> {
    "changed": false,
    "ping": "pong"
}

ansible -m yum -a 'name=htop state=present' rhelsrv2

rhelsrv2 | success >> {
    "changed": true,
    "msg": "warning: /var/cache/yum/x86_64/7/epel/packages/htop-1.0.3-3.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 352c64e5: NOKEY\nImporting GPG key 0x352C64E5:\n Userid     : \"Fedora EPEL (7) <epel@fedoraproject.org>\"\n Fingerprint: 91e9 7d7c 4a5e 96f1 7f3e 888f 6a2f aea2 352c 64e5\n Package    : epel-release-7-2.noarch (@extras)\n From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7\n",
    "rc": 0,
    "results": [
        "Loaded plugins: fastestmirror, langpacks\nLoading mirror speeds from cached hostfile\n * base: mirror.ate.info\n * epel: epel.mirrors.ovh.net\n * extras: mirror.ate.info\n * updates: mirror.skylink-datacenter.de\nResolving Dependencies\n--> Running transaction check\n---> Package htop.x86_64 0:1.0.3-3.el7 will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package         Arch              Version                Repository       Size\n================================================================================\nInstalling:\n htop            x86_64            1.0.3-3.el7            epel             87 k\n\nTransaction Summary\n================================================================================\nInstall  1 Package\n\nTotal download size: 87 k\nInstalled size: 181 k\nDownloading packages:\nPublic key for htop-1.0.3-3.el7.x86_64.rpm is not installed\nRetrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7\nRunning transaction check\nRunning transaction test\nTransaction test succeeded\nRunning transaction\n  Installing : htop-1.0.3-3.el7.x86_64                                      1/1 \n  Verifying  : htop-1.0.3-3.el7.x86_64                                      1/1 \n\nInstalled:\n  htop.x86_64 0:1.0.3-3.el7                                                     \n\nComplete!\n"
    ]
}

ansible -m portage -a 'name=htop state=present' cluster

cluster1 | success >> {
    "changed": false,
    "msg": "Packages already present."
}
cluster2 | success >> {
    "changed": false,
    "msg": "Packages already present."
}

ansible -m apt -a 'name=htop' debsrv1

debsrv1 | success >> {
    "changed": true,
    "stderr": "",
    "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nSuggested packages:\n  strace ltrace\nThe following NEW packages will be installed:\n  htop\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 74.9 kB of archives.\nAfter this operation, 216 kB of additional disk space will be used.\nGet:1 http://ftp.fr.debian.org/debian/ wheezy/main htop amd64 1.0.1-1 [74.9 kB]\nFetched 74.9 kB in 0s (286 kB/s)\nSelecting previously unselected package htop.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 40200 files and directories currently installed.)\r\nUnpacking htop (from .../htop_1.0.1-1_amd64.deb) ...\r\nProcessing triggers for menu ...\r\nProcessing triggers for man-db ...\r\nSetting up htop (1.0.1-1) ...\r\nProcessing triggers for menu ...\r\n"
}

ansible -m yum -a 'name=* state=latest' rhel

- name: Texte qui décris votre tâche
  module: option=value

# htop.yml
---
- hosts: cluster
  tasks:
    - name: 1. install htop
      portage: name=htop state=present

ansible-playbook htop.yml

PLAY [cluster] **************************************************************** 
GATHERING FACTS *************************************************************** 
ok: [cluster2]
ok: [cluster1]
TASK: [1. install htop] ******************************************************* 
changed: [cluster1]
changed: [cluster2]
PLAY RECAP ******************************************************************** 
cluster1                   : ok=2    changed=1    unreachable=0    failed=0   
cluster2                   : ok=2    changed=1    unreachable=0    failed=0   

PLAY [cluster] **************************************************************** 
GATHERING FACTS *************************************************************** 
ok: [cluster2]
ok: [cluster1]
TASK: [1. install htop] ******************************************************* 
ok: [cluster1]
ok: [cluster2]
PLAY RECAP ******************************************************************** 
cluster1                   : ok=2    changed=0    unreachable=0    failed=0   
cluster2                   : ok=2    changed=0    unreachable=0    failed=0  

# lamp-centos.yml
---
- hosts: rhel
  handlers:
    - name: restart httpd
      service: name=httpd state=restarted
  tasks:
    - name: 1. Installation Apache
      yum: name=httpd state=present
    - name: 2. Installation PHP
      yum: name=php state=present
    - name: 3. Installation extensions PHP
      yum: name={{item}} state=present
      with_items:
       - php-pdo
       - php-mysql
       - php-soap
       - php-gd
       - php-pear-MDB2-Driver-mysqli
    - name: 4. Installation de MariaDB
      yum: name=mariadb-server
    - name: 5. Démarrage Apache
      service: name=httpd state=running enabled=yes
    - name: 6. Démarrage MariaDB
      service: name=mariadb state=running enabled=yes
    - name: 7. Installation index
      copy: src=lamp-centos.yml.index.php dest=/var/www/html/index.php
      notify:
        - restart httpd
    - name: 8. Ajout de la règle de pare-feu
      action: command /usr/bin/firewall-cmd --permanent --add-port=80/tcp
    - name: 9. Redémarrer le pare-feu
      service: name=firewalld state=restarted

infra ansible# ansible-playbook lamp-centos.yml
PLAY [rhel] *******************************************************************
GATHERING FACTS ***************************************************************
ok: [rhelsrv1]
ok: [rhelsrv2]
TASK: [1. Installation Apache] ************************************************
changed: [rhelsrv1]
changed: [rhelsrv2]
TASK: [2. Installation PHP] ***************************************************
changed: [rhelsrv1]
changed: [rhelsrv2]
TASK: [3. Installation extensions PHP] ****************************************
changed: [rhelsrv2] => (item=php-pdo,php-mysql,php-soap,php-gd,php-pear-MDB2-Driver-mysqli)
changed: [rhelsrv1] => (item=php-pdo,php-mysql,php-soap,php-gd,php-pear-MDB2-Driver-mysqli)
TASK: [4. Installation de MariaDB] ********************************************
changed: [rhelsrv1]
changed: [rhelsrv2]
TASK: [5. Démarrage Apache] ***************************************************
changed: [rhelsrv2]
changed: [rhelsrv1]
TASK: [6. Démarrage MariaDB] **************************************************
changed: [rhelsrv1]
changed: [rhelsrv2]
TASK: [7. Installation index] *************************************************
changed: [rhelsrv1]
changed: [rhelsrv2]
TASK: [8. Ajout de la règle de pare-feu] **************************************
changed: [rhelsrv2]
changed: [rhelsrv1]
TASK: [9. Redémarrer le pare-feu] *********************************************
changed: [rhelsrv2]
changed: [rhelsrv1]
NOTIFIED: [restart httpd] *****************************************************
changed: [rhelsrv2]
changed: [rhelsrv1]
PLAY RECAP ********************************************************************
rhelsrv1                   : ok=11    changed=10    unreachable=0    failed=0
rhelsrv2                   : ok=11    changed=10    unreachable=0    failed=0

# samba-debian.yml
---
- hosts: sambaservers
  handlers:
    - name: restart samba
      service: name=samba state=restarted
  tasks:
    - name: 1. Installer samba
      apt: name=samba state=present
    - name: 2. Démarrer service samba
      service: name=samba state=running enabled=yes
    - name: 3. Création du dossier public
      command: mkdir -p /srv/samba/commun
    - name: 4. Correction des droits
      file: path=/srv/samba/commun owner=root group=users mode=0777
    - name: 5. Modification du fichier smb.conf
      lineinfile: dest=/etc/samba/smb.conf backup=yes line="include /etc/samba/smb.conf.ansible"
    - name: 6 Copier le fichier personnalisé de samba
      copy: src=samba-debian.yml.smb.conf.ansible dest=/etc/samba/smb.conf.ansible
      notify:
        - restart samba

[commun]
        comment = Partage de fichiers commun
        browseable = yes
        public = yes
        path = /srv/samba/commun
        writable = yes

infra ansible # ansible-playbook samba-debian.yml

PLAY [sambaservers] ***********************************************************
GATHERING FACTS ***************************************************************
ok: [debsrv1]
ok: [debsrv2]
TASK: [1. Installer samba] ****************************************************
ok: [debsrv1]
changed: [debsrv2]
TASK: [2. Démarrer service samba] *********************************************
ok: [debsrv1]
ok: [debsrv2]
TASK: [3. Création du dossier public] *****************************************
changed: [debsrv1]
changed: [debsrv2]
TASK: [4. Correction des droits] **********************************************
ok: [debsrv1]
ok: [debsrv2]
TASK: [5. Modification du fichier smb.conf] ***********************************
ok: [debsrv1]
changed: [debsrv2]
TASK: [6 Copier le fichier personnalisé de samba] *****************************
ok: [debsrv1]
changed: [debsrv2]
NOTIFIED: [restart samba] *****************************************************
changed: [debsrv2]
PLAY RECAP ********************************************************************
debsrv1                    : ok=7    changed=1    unreachable=0    failed=0
debsrv2                    : ok=8    changed=5    unreachable=0    failed=0

Position Binaire	Valeur octale	Droits	Signification
000	0	- - -	Aucun droit
001	1	- -x	Exécutable
010	2	- w -	Ecriture
011	3	- w x	Ecrire et exécuter
100	4	r - -	Lire
101	5	r - x	Lire et exécuter
110	6	r w -	Lire et écrire
111	7	r w x	Lire écrire et exécuter

Type d'utilisateurs	Propriétaire	Groupe	Les autres
Droits	r w x	r - x	- - x
Position Binaire	111	101	001
Valeur Octale	7	5	1

Type d'utilisateurs	Propriétaire	Groupe	Les autres
Droits	r w -	r - -	r - -
Position Binaire	110	100	100
Valeur Octale	6	4	4

Type d'utilisateurs	Propriétaire	Groupe	Les autres
Droits	r w -	r w -	r w -
Position Binaire	110	110	110
Valeur Octale	6	6	6

Type d'utilisateurs	Propriétaire	Groupe	Les autres
Droits	r w x	- - -	- - -
Position Binaire	111	000	000
Valeur Octale	7	0	0

-rw-r--r--	signifie que c'est un fichier dont les droits sont définis 644.
drwx------	signifie que c'est un dossier dont les droits sont définis en 700
lrwxrwxrwx	signifie que c'est un lien dont les droits sont définis en 777

Neo 4 Tech

How to Install Docker CE on CentOS 8 and RHEL 8

Step 1: Enable Docker CE Repository

Step 2: Install Docker CE using dnf command

Step 3: Verify and test Docker CE Engine

Step 4: Install Docker Compose

Get started with Docker for Windows

Test your installation

Explore the application

Docker Settings dialog

General

Resources

ADVANCED

FILE SHARING

SHARED DRIVES ON DEMAND

PROXIES

NETWORK

Docker Engine

Command Line

EXPERIMENTAL FEATURES

Kubernetes

Reset

Troubleshoot

Switch between Windows and Linux containers

Dashboard

Docker Hub

Two-factor authentication

Adding TLS certificates

How do I add custom CA certificates?

How do I add client certificates?

Integrating Ansible with Jenkins in a CI/CD process

The infrastructure architecture

Example Pipeline Flow

Ansible Playbooks

Infrastructure provisioning

Application deployment

Tips and tricks

How to Increase Disk Inode Number in Linux

How to Watch TCP and UDP Ports in Real-time

List All Open Ports in Linux

Watch TCP and UDP Open Ports in Real-Time

How to list all users with root

How to Disable SELinux on CentOS 8

How to Temporarily Disable SELinux on CentOS 8

How to Permanently Disable SELinux on CentOS 8

How To Create a Sudo User on CentOS

Steps to Create a New Sudo User

Tester les relations d’approbations Active Directory avec NLTEST

Afficher les options de NLTEST

C:\>nltest /? Usage: nltest [/OPTIONS]

Tester une relation d’approbation entre deux domaines Active Directory

Lister tous les contrôleurs d’un domaine

Trouver à quel domaine un compte utilisateur appartient

Windows Server 2016 Active Directory Administrative Center

Windows Server 2016 Active Directory Administrative Center

How to change DNS server in CentOS 7

Installer et configurer le module ssl pour Apache2

Vérifier que les paquets nécessaires sont déjà installés (libssl0.9.8, openssl, ssl-cert) :

Création d’un certificat auto-signé

Configuration spécifique d’apache

Activation finale et redémarrage du serveur apache

Sysinternals Suite

Sysinternals Suite

Download Sysinternals Suite (25.4 MB)

Download Sysinternals Suite for Nano Server (5 MB)

Introduction

La gestion des droits sous GNU/Linux (Chmod & Chown)

I - La commande CHmod

Les types d'utilisateurs

Les types de droits

II - Correspondances des droits en binaire/octale et leurs significations

III - Récapitulatif des différentes valeurs possibles fréquemment utilisées

644 - Lecture, écriture pour le propriétaire / Lecture pour les autres

666 - Lecture, écriture pour tout le monde

700 - Lecture, écriture, execution juste pour le propriétaire

705 - Le propriétaire à tous les droits / Le groupe aucun / Les autres lire et executer

755 - Le propriétaire à tous les droits / Les autres lire et executer

764 - Tous droits pour le propriétaire / Lecture, écriture pour le groupe / Lecture seule pour les autres

774 - Tous les droits pour le propriétaire et le groupe / Lecture seule pour les autres

775 - Tous les droits pour le propriétaire et le groupe / Lecture et exécution pour les autres