Mr Zesty's Brain Dump: TurboLinux Setup

TurboLinux Setup

Post-install TurboLinux setup:

Update zlib to > 1.1.3 and OpenSSL to > 0.9.6d.

rpm -Fvh ftp://ftp.turbolinux.com/...

mv /etc/ssh/sshd_config /etc/ssh/sshd_config.old
rpm -Fvh ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/zlib-\*.i586.rpm \
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/openssh-\*.i586.rpm \
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/openssl-\*.i586.rpm \
ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/vixie-cron-\*.rpm \
&& /etc/rc.d/init.d/sshd restart

Time NTP Sync
1. Edit /etc/cron.hourly/timeresync
  /etc/rc.d/init.d/synctime start > /dev/null
  (NTP messages will fill up the /var/spool/mail/root otherwise)
Sendmail
1. Edit /etc/rc.d/init.d/sendmail
  Set daemon /usr/sbin/sendmail -bd -q1h to be daemon /usr/sbin/sendmail -q1h (Set sendmail to process queued messages, but not to listen to port 25 SMTP)
2. Create a symlink so the sendmail daemon is started automatically
  cd /etc/rc.d/rc3.d
  ln -s ../init.d/sendmail S80sendmail
  Start sendmail: ./S80sendmail start
3. [TL7] Edit /etc/rc.d/init.d/sendmail
  Set DAEMON=no
4. Run turboservice to adjust the sendmail startup.
resolv.conf
1. Set the search domain field

NIS

run /usr/sbin/authconfig

set /etc/nsswitch.conf back to

passwd:     files compat
shadow:     files compat
group:      files compat

shutdown beep
1. Make linux beep as its rebooting or shutting down (very usefull when you're running your server without a monitor!) Modify your /etc/rc.d/init.d/halt file:
  # Now halt or reboot. echo -en "\a" > /dev/tty0 sleep 2 echo "$message" [ -f /fastboot ] && echo "On the next boot fsck will be skipped." echo -en "\a" > /dev/tty0 eval $command -i -d
Radiusd
1. Shutdown radiusd /etc/rc.d/init.d/radiusd stop
2. Remove the radius packages
```
 rpm -qa | grep radius
 rpm -e radiusd-cistron
 rpm -e radiusreport
```
3. [TL7] Shutdown ALSA and MURASAKI /etc/rc.d/init.d/alsasound stop /etc/rc.d/init.d/murasaki stop
4. [TL7] Remove alsa-sound and murasaki
```
 rpm -qa | grep alsa
 rpm -e alsa-utils alsa-lib
 rpm -e murasaki
```
Disable Screen-blanking / Stop logging to screen
1. Add the following to your /etc/rc.d/rc.local file:
```
echo "Keep console quiet"
dmesg -n 1

echo "Disable Screen Blanking"
setterm -blank 0
```
LogRotate
1. Uncomment #compress in /etc/logrotate.conf
2. Add a section to the end of /etc/logrotate.conf for any other logs that should be rotated
```
/var/log/named {
    postrotate
        /usr/bin/killall -HUP syslogd
    endscript
}
```

inittab

Add --noclear to the mingetty line in /etc/inittab

# Run gettys in standard runlevels
1:2345:respawn:/sbin/mingetty --noclear vc/1

Install CURL
1. Download from curl.sourceforge.net
2. ./configure && make && make install
Re-enable Ctl-Alt-Del
1. Edit /etc/inittab
2. Uncomment the line that starts with
```
ca::ctrlaltdel:/sbin/shutdown -t3 -r now
```
3. Restart init
```
kill -HUP 1
```
Forward all server (root) mail to your admin account
1. echo "sysadmin@MrZesty.net" > /root/.forward
Reiserfs
- If you're using reiserfs (and no ext2 partions) you should touch /fastboot and remove any references to rm /fastboot from the /etc/rc.d/rc.sysinit script.
Install softdog (if not using heartbeat)
1. http://www.ibiblio.org/pub/Linux/system/daemons/watchdog/
2. Add to /etc/rc.d/rc.local
```
echo "Starting softdog timer"
/sbin/softdog
```

Configure Tripwire

http://www.tripwire.org

Root's Cron:

1 1 * * 1,3,5 /usr/sbin/tripwire -m c 2>/dev/null | mail -s "`hostname -f`: Tripwire Report" root

SHMFS
1. /etc/fstab
```
shmfs	/dev/shm	shm	defaults	0 0
```