Open main menu

CDOT Wiki β

Changes

OPS235 Lab 2 - Fedora17

13,716 bytes added, 12:29, 24 September 2018
no edit summary
[[Category:OPS235]][[Category:OPS235 Labs]]
={{Admon/caution|THIS IS AN OLD VERSION OF THE LAB|'''This is an archived version. Do not use this in your OPS235 Lab 2 GNU/Linux Installation - Fedora 13=course.'''}}
==Objectives=Fedora 17 Installation Methods (on Virtual Machines: fedora1, fedora2, fedora3) =
#To perform a GNU/Linux installation using the Fedora 13 distribution#To perform boot time customization and configuration#To obtain network configuration from a DHCP server#To secure the boot loader by adding password protection#To investigate GRUB boot loader configuration== Introduction ==
==Reference==* [httpA '''virtual machine''' is a software simulation of a computer which can be used as though it were actual hardware. It's possible to run multiple virtual machines on one computer, reducing hardware requirements and introducing flexibility. Some common uses of virtualization include://linuxmanpages.com/ man pages]** mount** rpm** hostname** uname** ps** ifconfig** netstat** route** nslookup** wc** grub
:* Resources '''Software testing''' -- Using multiple operating systems simultaneously on the weba single computer for testing and experimentation.:** [http://fedora.redhat'''Network simulation''' -- Testing network services, protocols, and security scenarios with a small number of computers.com/docs/release-notes/ Fedora Release Notes]:** [http://docs'''Isolation''' -- Protecting multiple sets of data by storing them on multiple virtual machines.fedoraprojectIf one of the virtual machines is compromised, the data on other virtual machines is still protected.org/install-guide/ Fedora Installation Guide]:** [http://www'''Server consolidation''' -- Reducing the number of physical servers in a network by moving physical machines to virtual machines.gnuThis saves hardware, administration, cooling, and electricity costs, and it can increase the utilization of hardware (by ensuring that the hardware is not under-loaded).org/software/grub/manual/html_node/Security.html#Security Protecting Grub]:** [http://opensource.sgi.com/LDP/HOWTO/Kernel'''Load-HOWTO/grubconf.html Grub Details balancing and Sample Config]** [http://www.aspencrypt.com/crypto101_hash.html Onedisaster recovery''' --way Hash Function]** [http://www.dedoimedo.com/It is possible to migrate virtual machines between different physical machines, to ensure that a workload is balanced across multiple computers/grub.html GRUB Tutorial]** [http://www.securitystats.com/tools/password, to allow routine hardware maintenance and upgrading, and to compensate for hardware failure or other disasters.php Password Security]
{|cellpadding="8" width=Required Material="100%"|- valign="top"|
* '''In this lab, you will create three virtual machines'''. This also gives you an opportunity to experiment with different ways of installing Fedora 13 x_64 Installation DVD - You can burn . Later in this onto course you will install another operating system distribution in a DVD-R in the Open Lab* SATA Hard Disk (the same one used for Lab 1)* USB Memory Stick (minimum 64M)virtual machine.
==Prerequisite==
* Completion of Lab 1You should already have both a '''Fedora installation DVD''' and a '''Fedora LIVE CD'''.
==Introduction==
In this labboth cases, the boot media (which you are going used to install load the installation software) and the installation source (the software that got installed) were the same: your CD/DVD provides both. However, the Fedora (GNU/and most other Linux Distributiondistributions) permits you to your hard disk from DVD.use any combination of boot media and installation media:
You need |{|border="1" cellpadding="3" width="100%"|-! Method! Boot Media! Install. Source|-! CD or DVD! &#10003;! &#10003;|-! Hard Disk! &#10003;! &#10003;|-! USB Flash Drive! &#10003;! &#10003;|-! Network (http/nfs repository)! &#10003;! &#10003;|-! PXE Network Boot! &#10003;! X|} |} == Objectives == * '''Understand Virtualization'''* '''Use KVM virtualization on Fedora'''* '''Use a number variety of installation methods:'''** Live Image Installation** Network Installation** Kickstart Installation* '''Understand the advantages and disadvantages of hard each type of installation, and be able to select the best installation method for a particular situation.'''  == Required Materials (Bring to All Labs) == * Fedora 17 LIVE CD* Fedora 17 x86_64 Installation DVD* SATA Hard Disk (in removable disk partitionstray)* USB Memory Stick* Lab Logbook  ==Prerequisites== * Completion and Instructor "Sign-off" of Lab 1: [[OPS235 Lab 1]]  ==Linux Command Online Reference==Each Link below displays online manpages for each command (via [http:/physical volumes /linuxmanpages.com/ http://linuxmanpages.com])::* '''virsh''' (Refer to Fedora Virtualization Guide link in the "Resources on the Web" section):* [http://linuxmanpages.com/man1/gzip.1.php gzip / gunzip]  == Resources on the Web =={|cellpadding="8" width="100%"|- valign="top"| '''Virtualization''':| '''Live Image Installation:'''| '''Network Installation:'''| '''Kickstart Installation:''' |- valign="top"|[http://docs.fedoraproject.org/virtualization-guide/f13/en-US/html/ Fedora Virtualization Guide]|* [http://docs.fedoraproject.org/en-US/Fedora/17/html/Fedora_Live_Images/ Fedora 17 Live Image Guide]* [http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Quick_Start_Guide/ Fedora 17 Installation Quick Start Guide]|[http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/ Fedora 17 Installation Guide]* [http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/ch-Preparing-x86.html#s1-steps-network-installs-x86/ Preparing for a Network Installation]* [http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/ch-Preparing-x86.html#s1-steps-network-installs-x86 Performing a Network Installation]|[http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/ Fedora 17 Installation Guide]* [http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/sn-automating-installation.html Automating the Installation with Kickstart]* [http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/ch-kickstart2.html Kickstart Installations]* [http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/ch-redhat-config-kickstart.html Kickstart Configurator] |} =Performing Lab 2=== Preparation == {{Admon/tip|Performing this Lab off the Seneca network (eg. at home)|'''It is recommended to perform this lab in one of Seneca College's labs'''. This lab uses servers which are on the Seneca network and which are not available from other locations (such as your home). If you attempt this lab from another location, adjust the belmont.senecac.on.ca URLs to point to another [http://mirrors.fedoraproject.org/publiclist Fedora mirror server] -- note that you may need to change the directory name as well as the server name. The installation: of the '''fedora3''' virtual machine <u>must</u> be done at Seneca.}} # '''Open a web-browser''', and open the '''OPS235 Lab #2 WIKI'''. '''<br /dev><br /sda1 >NOTE:''' You need to enter your "MySeneca" username and password to obtain a "wired" Internet connection (otherwise, you will not be able to perform the "groupinstall" command in the next step). Remember to perform a "wired-connection" (300Mlogging in with your MySeneca username and password via a web-browser)every time you boot-up your host machine...<br /><br /># Install the Fedora virtualization software: <code>yum groupinstall "Virtualization"</code> or <code>pkcon install @virtualization</code> The virtualization software installed is in three parts::* '''A system service named ''libvirtd''''' that manages the VMs.:* '''Tools to manage virtualization''', including the <code>virt-manager</code> graphical tool and the <code>virsh</code> command-line tool.:* The actual '''virtual machines''' themselves.<ol> <li value="3">Start the virtualization service: <code>service libvirtd start</code></li> <li>The firewall configuration is altered by the addition of the virtualization software. Restart the firewall so that these changes become active: <code>service iptables restart</code></li></devol> {{Admon/sda2 extended partitioncaution|Reboot your fedora host now|virt-manager may not work properly unless you reboot after installing the virtualization software.}} <ol> <li value="5">After rebooting your computer system, and logging back into your account, start the graphical tool by selecting the menu options '''Activities'''>'''Applications'''>'''System Tools'''>'''Virtual Machine Manager''' or by typing the command <code>virt-manager</devcode></sda5 li></ol> {{Admon/important|Run virt-manager as a regular user|Running virt-manager as root may not work due to configuration issues.}} == Investigation 1: Installing from a Live Disc == {{Admon/tip|Using an Image instead of a Live Disc|It is recommended that you perform this installation from your Fedora LIVE CD. As a matter of interest (300Mfor future reference), all created in Lab 1it is possible to install directly from the ISO file you used to burn your Live CD. You will create 4 new physical volumes during this labThere are many Internet tutorials that show the individual how to perform that task.}} ==== Introduction ====
After the installationIn this investigation, you will collect baseline information about install Fedora from your Fedora GNU/Linux systemlive disc, do some post installation configuration to prepare your system for and observe the remainder differences between this type of the labs, manipulate the GRUB configuration, installation and start using the systemDVD installation previously performed.
==Instructions== VM Details ====
# Insert and secure your SATA hard disk to the removable disk slot.* '''Name:''' fedora1# Power up the computer.* '''Boot media:''' Fedora Live CD# Insert the * '''Installation source:''' Fedora 13 x86_64 Installation DVD into the DVD drive.Live CD* '''Memory:''' 768MB* '''Disk space:''' 10GB# Reboot the system.* '''CPUs:''' 1
===Investigation 1: How do you install Fedora?= Screen-Shot Thumbnail Reference ===={{Admon/important | Logical Volume Management | Fedora uses a type of storage management called Logical Volume Management (LVM). In LVM, disk partitions are called Physical Volumes (PVs) and provide storage to a Volume Group (VG). This storage is then split into various Logical Volumes (LVs). The advantage to this scheme is that you can change LV size and you can add and remove PVs after installation. For example, you can add a new disk to your system and then increase the size of your existing filesystems using that extra disk space. ''Please be careful to enter all LVM information accurately, including the VG and LV names.'' We will investigate and manipulate LVM in future labs.}}
{{Admon/note | Installation Time Virtual Machine Screen Shots Thumbnails| The installation process will take about 15 minutes to complete when using DVD. Click While performing the Reboot button Virtual Machine setup, click on the screen thumbnails below to reboot the system after the installation is complete. There is provide a post installation setup after boot'''"visual reference"''' while performing this section.}}
{|cellpadding="8" width="100%"
# After booting from the Installation DVD, at the Welcome Screen choose "Install or upgrade an existing system" to launch the Graphical installation program and select the following options (you can use the media test to verify that your DVD burned correctly -- It will take some time -- otherwise, skip it)|[[Image:#* Language Virt- English#* Keyboard Configuration - Umanager1.S. Englishpng|thumb|125px| '''Virtual Machine Manager:''' Create a New Virtual Machine]]#* Type of devices|[[Image: Basic Storage Devices#* There should only be one storage drive listed Virt- select it#* If you get a warning that the drive may need to be initialized, it is because your drive is new and contains no partitition tablemanager2. Select "Re-Initialize"#* Set your hostname to - f13host (one word, no space, all lowercase)#* Root Password: enter a password png|thumb|100px|'''Step 1 of your own choosing. Pick one that is really, really hard to guess to protect your system. (Recommendation5: use the first letter and all the punctuation from ''' Create a favorite phrase or song verse. For example, "To be or not to be, that is the question!" could become the password "Tbontb,titq!").New Virtual Machine ]]#* Disk Partition Setup |[[Image:virtual- Specify a Custom Layout, and then set up the installation with this configuration:#** Find your existing 300MB partition (/dev/sda1). Edit this entry so that the mountpoint is /boot and is formatted as an ext3 filesystem.#** Don't touch the other existing 300M partition (/dev/sda5).#** Create 4 new LVM Physical Volumes that are 25000 MB in size. Set the File System Type to Physical Volume (LVM). Should be /dev/sda6 to /dev/sda9.#** Create an LVM Volume Groupmanager3. Set the Volume Group Name to png|thumb|100px|'''vg_mainStep 2 of 5:''' and set the Physical Extent size to Create a New Virtual Machine ]]|[[Image:virtual-manager4.png|thumb|100px|'''4MBStep 3 of 5:'''.Create a New Virtual Machine ]]#** Click on the Add button (within the "Make LVM Volume Group" window) to create a logical volume within that volume group|[[Image:#*** Mount point / (root), filesystem type ext4, logical volume name virtual-manager5.png|thumb|100px|'''rootStep 4 of 5:''', size 90GB (90000MB).#* Say yes to continue without Create a swap partition.New Virtual Machine ]]#* Say yes to format /dev/sda1.#* Accept Boot Loader defaults.#* Accept Graphical Desktop and repository defaults.# Proceed with the installation|[[Image:virtual-manager6. png|thumb|100px|'''Note how long it takes to perform the installation.Step 5 of 5:'''# Reboot using the controls on the screen. When the system starts, it will ask you some final configuration questions.#* Check the License Agreement. What license is used for the Fedora distribution? What activities do have restrictions and obligations?#* Create a user account for yourself using the same name as your learn account.New Virtual Machine ]]#* Set date and time. Normally, you would want to enable Network Time Protocol, but since we will be experimenting with the networking turned off in later labs, leave it disabled.#* Click on Do Not Send Hardware Profile.#* Finish the post-installation customization, wait for the login screen to appear, and then login to your Learn account.|}
Answer the Investigation 1 question in your lab log book.==== Steps ====
===Investigation # In the Virtual Machine Manger, click on the icon to ''Create a Virtual Machine'' in the upper-left corner: <br />(refer to '''Virtual Machine Manager''' thumbnail above).# A window will appear with the title ''New VM''. There are five steps to be completed; click Forward after each step:# '''Step 1 of 5:''' Enter the virtual machine (called '''fedora1''') name and select '''Local install media''' (refer to ''Step 1 of 5'' thumbnail above).# '''Step 2of 5: How many files packages ''' '''Insert the CDROM or DVD containing the Fedora Live Disc image. Wait a moment for the disc to be recognized''', then select '''Use CDROM or DVD''' as the install media. Set the ''OS type'' to '''Linux''' and files the ''Version'' to '''Fedora 17''' (refer to ''Step 2 of 5'' thumbnail above).<!-- {{Admon/tip|Using an ISO image|Instead of using a physical CD or DVD, you can use an ISO image of a CD or DVD. The virtualization software will make this ISO image appear like an actual CD within the virtual machine. Because hard disks are installed on faster then optical discs, this will work faster than an actual CD/DVD.}}{{Admon/note|Choosing the operating system?===type and version|The purpose of the ''OS type'' and ''Version'' fields is to fine-tune some of the virtual machine settings for best performance. The VM will work even if these are set incorrectly.}} --># '''Step 3 of 5:''' Set the memory to '''768 MB''' and the number of CPUs to '''1''' (refer to ''Step 3 of 5'' thumbnail above).# '''Step 4 of 5:''' This next step creates a disk file that will be used to simulate the virtual machine's disk drive. Select a size of '''10 GB''' and checkmark the box labeled '''Allocate entire disk now''' (refer to ''Step 4 of 5'' thumbnail above).# '''Step 5 of 5:''' Review the options that you have selected. '''Make a note of the storage location.''' If anything needs to be changed, use the ''Back'' button to go back and edit it; otherwise, click '''Finish''' (refer to ''Step 5 of 5'' thumbnail above).
For {{Admon/important|Removing and Recreating VMs|If for some reason the rest of user wants to remove a Virtual Machine, they can right-click the tasks VM, and select delete in this lab, you must login the Virtual Machine Manager. It is recommended to your system using your Learn account '''"delete the image file" in the remove VM dialog box when removing and execute all commands under your learn accountthen recreating a VM'''. Note: If you get a Permission Denied message when trying fail to execute a commandproperly remove the VM image file, then switch to it may affect the superuser account by running hard disk size for the command su - and type in new VM (i.e. use the password for "root"old smaller size. Once the intended command is executed, type "exit" Make certain to remove that VM image file prior to exit from recreating the superuser account and return to your regular Learn accountVM.|'''}}
Record the commands used and the output generated in each of the following steps:
# To find all the mount points, enter the command: <code>mount</code>#* Study the output and record all the mount points in your log book.# The name of the installation log file is <code>/root/install.log</code> -- It is an ASCII file (how can you be sure?) and can be viewed with the <code>less</code> command. # You can make use of this file to determine how many packages have been installed: complete the following command to count the number of packages listed in the installation log file:#* <code>grep ________________ {{Admon/root/install.log note| wc -l</code># Using the <code>rpm</code> command: you can also use the following commands to list all the installed packages, and the total number of packages installed:#* <code>rpm -q -a</code>#* <code>rpm -q -a Fedora LIVE CD Install Screen Shots Thumbnails| wc -l</code>#* <code>rpm -qa | wc -l</code># The <code>-q</code> option means query, and While performing the <code>-a</code> option means all (in other words, query all installed software packages). Did you get the same number of packages from the above two methods?# Some of the files on your system were installed with the software packages, and some were created by system activity (for example, by creating your Learn account and by logging in). If you know the package name (from the <code>Fedora 17 LIVE CD install.log</code>), you can list all the files that were installed from the package by using the following command:#* <code>rpm -q -l package_name</code># This combines the <code>-q</code> (query) option with the <code>-l</code> (list filenames) option.# You can pipe the outupt through <code>wc -l</code> to count the number of lines:#* <code>rpm -ql package_name| wc -l</code># Using what you learned in steps 3 and 4, get a count of the total number of files installed by all of the software packages click on your system.# To find out the name that you have assigned to your Linux system, enter the command: <code>hostname</code># To find out the kernel version of your GNU/Linux workstation and the date it was created, enter the command: <code>uname -r</code># To find out all the system processes running on your GNU/Linux workstation, enter the command: <code>ps -ef</code># To capture the list of all the system processes thumbnails below to provide a file called <code>ps.lst</code>, enter the command: <code>ps -ef > ps.lst''</code># Copy the '"visual reference"''' while performing this particular Fedora installation log file <code>/root/install.log</code> and the file ps.lst to a USB memory key, or scp to your matrix account as a backup.}}
{{Admon/tip |Updating Fedora| You need to complete a system update. Start the Firefox web browser, turn off popup window blocking (select ''Edit>Preferences'', then select the Content tab and uncheck the box to Block Popups), then login to SeneNET. Open a terminal and <code>su -</code> to start a shell as root. Enter the command <code>yum update</code> This will download and install all of the packages that have been updated since the installation DVD image was created. If you complete this command at Seneca it should run quite fast as Seneca College hosts a Fedora Repository mirror.}}cellpadding="8" width="100%"
<!-- {{Admon/tip |SELinux[[Image:fedoralive1.png|thumb|100px| The final task is to turn off SELinuxVirtual Machine will now start. SELinux is a Linux feature that provides a variety of security policies, including U]]|[[Image:failedtoload.Spng|thumb|140px| '''Ignore and close the "Failed To Load" dialog box'''. Department of Defense style mandatory access controls, through Search for the panel on the use upper-left-hand side of Linux Security Modules in the Linux kernelscreen. While it is certainly something you would leave on in a real world environment, it is beyond ]]|[[Image:fedoralive2.png|thumb|140px|Login to the scope of this course VM and does interfere with some of our activities. To disable SELinux, double-click on :<br /> '''Applications'''<br />>'''System =Tools'''<br /> Administration => SELinux Management'''Install to Hard Disk'''.]]|[[Image:selectstorage1. Set png|thumb|100px|Select '''Specialized Storage Devices''']]|[[Image:selectstorage2.png|thumb|100px|Select '''Virtio Block Device'''.]]|[[Image:finishcdinstall.png|thumb|100px|You will get the ''Firstboot'' configuration questions during the boot process.]]|}<ol> <li value="System Default Enforcing Mode8" to Disabled>'''The virtual machine will now start'''. Select the default menu item labelled: '''Start Fedora 17'''. Quit The virtual machine is running from the live disc at this point, and reboot your systemno software has been installed on the ''hard drive'' of the virtual machine.}} --</li></ol>
<ol> <li value=== Investigation 3"9">Login to the VM and click: What '''Applications'''>'''System Tools'''>'''Install to Hard Drive'''. The installation program, similar to the one used when installing Fedora in Lab 1, will appear. You will get a warning at one point during the installation process that the disk "May contain data" or "may need to be re-initialized" -- this is simply a runlevel? ===warning that the virtual disk is completely blank, and it is safe to proceed with the installation.</li></ol>
After {{Admon/note|Virtual Machine Screen Size|The virtual machine screen size will change resolution as it switches from text to graphics mode. Use the VM menu option View>Resize to VM to resize the window to show the kernel bootsentire VM display. If this is larger than your screen size, use View>Scale Display>Always to scale the image so it starts fits on your screen.}}<ol> <li value="10">During the installation process, when prompted for a single programstorage device, first select '''Specialized Storage Devices''', called and then select the '''Virtio Block Device''' option.<code/li>init </codeli>When prompted for the hostname, enter '''fedora1''', and when prompted for the timezone, select '''Toronto - Eastern Time Ontario''', and when asked about storage, select '''Use All Space'''. A running instance '''Use the default values for all other fields.''' Notice that the installer does not ask you what software should be installed; compare the installation time to the amount of a program time it took to do your Lab 2 installation. Record this information in the '''table contained in Investigation 4'''.</li> <li>When the installation is called a complete, click on the '''processreboot''' button at the bottom right-- the init process always has a process ID (PID) hand corner of 1. All other processes on the system are started by init, or they are started by processes started by initscreen.</li></ol>
Most current Linux systems use some variation of <ol> <li value="13">Start the VM from its disk image. This can be done graphically by selecting the Virual machine name, and then clicking on the '''Open''' button, and then click the '''play''' button when the init system originally developed for Unix System V next screen appears (called "sysvinit"or by selecting Virtual Machine>Run from the virtual machine menu). You will get the ''Firstboot'' configuration questions during the boot process (asking you to create a user, set the date and time, and optionally send the hardware profile to the Fedora Project) or . Create a newer version called "upstart"user with the same name as your Matrix account.</li> <li>Login using the new user account.</li></ol>
These {{Admon/note|Network / Service Considerations|Please perform the tasks below in order allow these Fedora systems employ the concept of "runlevels" -- groups of software that can to be selected, so that the system able to communicate with each other. '''Failure to properly perform these operations can be run cause problems in various modesfuture labs'''. In Fedora systems, these runlevels are used:|}}
<ol> <li value="15">Enable SSH access to your virtual machine with these commands (semi-colon allows commands to be run in sequence):<br /> <code>service sshd start; chkconfig sshd on</code></li> <li>Find out the IP address of your virtual machine: <code>ifconfig eth0</code> </li> <li>Enter the following command on your virtual machine to create a firewall exception to allow ssh traffic into the machine:<br /> <code>iptables -I INPUT -p tcp -s0/0 -d0/0 --dport 22 -j ACCEPT</code></li> <li>Confirm that you can ssh to your virtual machine from the host (your main Fedora installation): <code>ssh ''IPaddress''</code></li></ol> {{Admon/tip|Switch to Virtual Machine Manager Window|classIf you are currently in a Virtual machine, but want to switch to the Virtual Machine Manager Window, simply click '''Activities'''> '''Select the Virtual Machine manager window'''.}} '''Answer the Investigation 1 observations / questions in your lab log book.''' == Investigation 2: Installing from the Network == {{Admon/tip|Authenticate to the network|The rest of this lab uses network access.''' Be sure to authenticate to the network using your browser before proceeding'''.}} === Introduction === It is possible to install Fedora entirely from the network. In this investigation, you will install Fedora from a webserver on Seneca's LAN. ==== VM details ==== * '''Name:''' fedora2* '''Boot media:''' Network installation* '''Installation source:''' http://belmont.senecac.on.ca/fedora/releases/17/Fedora/x86_64/os/* '''Memory:''' 1024MB* '''Disk space:''' 20GB* '''CPUs:''' 1 ==== Steps ====# Create the VM (called '''fedora2''') as you did with the ''fedora1'' virtual machine, except:#* In '''step 1 of 5''', set the installation type to '''Network Install (HTTP, FTP, or NFS)'''.#* In '''step 2 of 5''', provide the location of the software source by providing the URL http://belmont.senecac.on.ca/fedora/releases/17/Fedora/x86_64/os/#* In '''step 2 of 5''', set the ''OS Type'' to '''Linux''' and ''Version'' to '''Fedora 17'''. # Observe the boot process. How is it different from booting from an optical disc (CD/DVD)?# Start the installation process (make certain to use information in the ''VM Details'' section above).# When you get to the disk partitioning step, select '''Use All Space''' and enable the checkbox labelled '''Review and modify partition layout'''.If an dialog box displays a permissions problem, then click yes to proceed. On the next screen, change the logical volumes as follows:#* Reduce the size of the root LV to '''8000 MB'''.#* '''Add a logical volume with a size of 2000 MB and a mountpoint of /home''' (you can name it whatever you want, and use '''ext4''' as the file-system type).# On the software selection screen, select '''Graphical Desktop'''.# '''On the same screen, select the "Fedora 17 - x86_64" and the "Fedora 17 - x86_64 - Updates". Leave "Installation Repo"mediawikiselected. ''DO NOT'' enable the " Test Updates" repository'''.# Complete the installation. Record the time taken to install, and compare this to the time taken by the previous installations.Record this information in the '''table contained in Investigation 4'''. '''Answer the Investigation 2 observations / questions in your lab log book.''' == Investigation 3: Installing from the Network using Kickstart == === Introduction === When Fedora is installed using the techniques you have used so far, the user is asked a number of questions. In some situations, it is better to provide the answers to these questions in a file rather than answer them individually. This type of file is called a ''kickstart'' file. In this investigation, a kickstart file is provided for you. You can also create or modify a kickstart file using a regular text editor or a graphical tool. ==== VM details ==== * '''Name:''' fedora3* '''Boot media:''' Network installation* '''Installation source:''' http://belmont.senecac.on.ca/fedora/releases/17/Fedora/x86_64/os/* '''Kickstart location:''' http://www.drivehq.com/file/df.aspx/shareID10606286/fileID1269952040/Fedora17-kickstart.cfg* '''Memory:''' 1024MB* '''Disk space:''' 15GB* '''CPUs:''' 1 ==== Steps ====# Create the VM as you did with the ''fedora2'' virtual machine, specifying a network install as before, except:#* In step 2 of 5, after entering the URL for the installation source, click on the '''URL Options''' control.#* Enter the Kickstart URL: http://www.drivehq.com/file/df.aspx/shareID10606286/fileID1269952040/Fedora17-kickstart.cfg # Observe the installation. How is it different from booting from an optical disc (CD/DVD)?# Complete the installation. Record the time taken to install, and compare this to the time taken by the previous installations. # What happens when the installation is finished?# '''Take a look at the kickstart file (using the URL you entered) to <u>determine</u> the root password as well as the name and password for the first user account'''.# Boot the virtual machine and log in (use the user ID and password information from the previous step). Compare the experience to the first time you booted the other virtual machines.Record this information in the '''table contained in Investigation 4'''. '''Answer the Investigation 3 observations / questions in your lab log book.''' == Investigation 4: Updating and Comparing the VMs == # In each VM, run this command: <code>yum update</code># Record the answers to these questions in your log book:#* How long did it take to run on each VM? How many packages were updated?#* Why does it take longer in some VMs than others? Complete the following table (and transfer into your lab2 log-book notes): {|border="1"width="100%" cellpadding="5"|-!Runlevel||f17host||fedora1||fedora2||fedora3|-|'''Installation Method'''||Installation Disc||Live Disc||Network Installation||Network Installation + Kickstart|-!Description|'''Packages Installed'''|| || || |||-|'''Updates Installed immediately after installation'''|| || || |||-|'''Software could be selected during installation'''|| || || |||-|'''Disk layout could be selected during installation'''|| || || |||-|'''No questions asked during installation'''|| || || |||-|'''Total installation time''' (after installation questions)|| || || ||
|-
|0'''Amount of disk space used'''|| || || ||Halt (powers off the system)
|-
|1'''Questions asked during first boot'''|| || || ||Single-user maintenance mode
|-
|3'''Advantages of this type of installation'''|| || || ||Network running, character-mode display only
|-
|5'''Disadvantages of this type of installation'''|| || || ||Network running, graphical user interface
|-
|6'''This type of installation is recommended for...'''|| || || ||Reboot
|}
{{Admon/note|Different runlevel systems|Various Linux distributions may use == Investigation 5: Managing Virtual Machines from the runlevel numbers differently. For example, on some Debian/Ubuntu systems, the default (standard) runlevel is 2.}} In order to implement runlevels, init uses a configuration file and a number of script files:Command Line ==
* <code>{{Admon/etc/inittab</code> is note|Manage virtual machines from the configuration file, which sets host|The commands used to manage virtual machines must be executed on the default runlevel.* <code>/etc/rc.d/init.d</code> is host (your disk pack) and not inside a directory of scriptsvirtual machine.}}
In order # Start the ''fedora1'' virtual machine, and stop the ''fedora2'' and ''fedora3'' virtual machines.# Switch to determine which of the startup scripts should be executed in each runlevelf19host machine, and open a shell terminal.# Enter these commands into your f19host machine and note the one directory per runlevel is created (result:#* <code>'''virsh list'''</etccode>#* <code>'''virsh list --all'''</rc.d/rccode>#* <code>'''Xvirsh list --inactive'''.d</code># Now, where shut-down your fedora1 VM normally, and close the fedora1 VM window. Make certain NOT to close the Virtual Machine Manager main window.# Switch to your terminal and issue the command: <code>'''Xvirsh start fedora1''' </code># Check to see if your fedora1 VM is the runlevel)now running. This directory is filled with symbolic links # Switch to the startup scripts in terminal and issue<code>/etc/rc.d/init.d'''virsh list --all'''</code>and confirm the status of the fedora1 VM.# There are other commands that can be used (such as suspend, or shutdown). The "shutdown" command may not always work since it sends a request to "shutdown virtual machine gracefully", but may not always work. Why do you think it is useful to have commands to manipulate VMs?
# To find out {{Admon/note|Virtual Machine Does not Shutdown from Command|If the value of Virtual machine fails to shutdown from the runlevel your GNU/Linux system goes into after boot, enter the command: <code>grep initdefault /etc/inittabvirsh shutdown</code># You should get a single line containing ":" as the field delimiter. The second field stores the value of the runlevel the init process will use after a reboot. Record the output in your log book.# A list of processes that should be running at a given runlevel command, then you can be found in go to the directory <code>/etc/rc.d/rc'''XVirtual Machine manager''' and '''halt'''.d</code> where or '''Xshutdown''' is within the VM itself, then you can click the runlevel. Do a directory listing of that directory and study what files are '''PowerOff''' button in there. Pay attention to the first three characters of each file nameVM window. They have special meaning You'll want to the system. Record your observation in your log book.# Make avoid a backup of the file /etc/inittab with the command: <code>cp /etc/inittab /etc/inittab.original</code># Edit the file <code>/etc/inittab</code> and change the default runlevel forced shutdown since those are equivalent to 3. Save yanking the change and reboot your system.# After cord out of the reboot, you should get wall on a "Text Login Screen". Login with your Learn account and type startx at the command prompt. Describe what happens in your log book.# Enter the command: <code>runlevel</code> -- this shows the previous and current runlevel. Record the values in your book.physical machine!|}}
'''Answer the Investigation 3 question5 observations / questions in your lab log book.'''
=== Investigation 46: What is the network configurationHow do I backup a virtual machine? ===
# To check {{Admon/important|Backing up VMs|There are two general processes in order to back up your images:<ol><li>'''Compressing your images''' (also recommended to backup up to external storage USB Key) using the '''gzip''' command.</li><li>'''Backup the network VM xlm configuration settings obtained from file''' (preferably to USB key) using '''virsh''' shell command to add VM to virtual machine manager list (in the DHCP serverevent that the HOST machine is "wiped" and re-installed, run but VM images and xml configuration files have been backed up external storage).</li></ol><br />Taking the following commands, describing time to backup the output in your log book:#* ifconfig#* route#* netstat -rn#* nslookup (at image of the > prompt, enter Operating System's file system allows the word user to return to a '''"serverrestoration point" (do not type ''' using the quotes) and record '''gunzip''' command in case something bad occurs to the outputOS during a lab. Type exit <br />Failure to leave nslookup).# Find take the following information time to make and confirm backups can result in the output of the above commands:#* MAC address (physical or hardware address) loss of lab work for the ethernet network interface#* The IP address (logical address) assigned by the DHCP server#* The default route (gateway)#* The DNS nameserverstudent!|}}
Answer # Shut down all of the virtual machines.# Change to the directory <code>/var/lib/libvirt/images/</code>. Note the size of the files in this directory. What do these files contain?# Make a compressed backup of the <code>fedora3.img</code> file to your home directory with this command: <code>'''gzip < fedora3.img > ~YourUserId/fedora3.img.backup.gz'''</code><br />('''Note: Make certain to use the redirection signs "<" and ">" properly in the command!'''){{Admon/caution| Make sure the backup is successful!|If there are any error messages, '''DO NOT''' proceed past this point. You're going to destroy your fedora3 virtual machine and restore it using the backup you have created -- if there are any problems with the Investigation backup, you will not have a working virtual machine, and will have to re-install it.}}<ol> <li value="4 ">Compare the size of the compressed and original files.</li> <li>Start the '''''fedora3''''' VM.</li> <li>'''Make certain that you are in your fedora VM and <u>not</u> in your Fedora main system!'''</li> <li>Wreck <u>only</u> your fedora 3 system! Try this command inside the fedora3 virtual machine: <code>'''rm -rf /*'''</code></li> <li>Shut down the VM. If you tried to start the Fedora3 VM, it would not boot since all system files have been removed!</li> <li>Restore the original image from the backup in your home directory by typing this command: <code>'''gunzip < ~YourUserId/fedora3.img.backup.gz > fedora3.img'''</code></li> <li>Restart the VM. Is it working normally?</li> <li>Create compressed backups of your other virtual machines.</li></ol><ol><li value="12">You should make a copy of the xml configuration file in case you "wipe" and re-install the host machine, and want to add a restored VM backups to the virtual machine manager list. We will demonstrate using the fedora 3 xml configuration file, and prove that a "clone" can be added to your list.Please perform the following step:<ol type="a"><li>Verify that you are in the directory: <code>/var/lib/libvirt/images/</code>.</li> <li>Execute the following command: <code>virsh dumpxml fedora3 >fedora3.xml</code></li> <li>Examine the file <code>fedora3.xml</code>. What does it contain? What format is it in?</li> <li>Make a copy of <code>fedora3.xml</code> called <code>fedora3a.xml</code>.</li> <li>Edit the file <code>fedora3a.xml</code>, making the following changes:</li></ol>::* Change the name (in the file, not the file name) to <code>fedora3a</code>::* Change at least one of the hexadecimal characters in the UUID. Do not change the length of the UUID. Valid hexadecimal characters are 0-9 and a-f.<ol type="a" > <li value="6">Issue this command: <code>virsh define fedora3a.xml</code> <li>Issue the command <code>virsh list --all</code> and record any changes. <li>Issue the command: <code>virsh undefine fedora3a</code> <li>List all of the virtual machines again, and note any changes. </li></ol> <li>For the remainder of these labs, it is assumed that you will backup <u>'''both'''</u> the images and xml configuration files for <u>'''all'''</u> Virtual machines, when asked to backup your virtual machines. It is also highly recommended to backup these files to an external storage device (eg. USB key) in case the host machine gets "wiped" and you need to rebuild your HOST machine and then restore your Virtual Machines...</li><li>Answer this question.in your log book:</li></ol>::* In order to fully back up a virtual machine, what information should be saved in addition to the virtual machine image?
=== Investigation 5: How do You Secure {{Admon/important|Backing up VMs|It is essential to back up your VMs at the Grub Boot Loader? ===end of each lab, so you can easily restore them if something goes wrong in the next lab.}}
By default, the Grub boot loader allows anyone with access to the computer at boot time to set the runlevel, or change {{Admon/tip|Shutting Down the boot parametersHost while Virtual Machines are Running|If you shut down your host system while virtual machines are running, which can allow them to influence the init process and which kernel image is loaded. Anyone with access to the boot prompt can therefore bypass security controls and control which software is loaded. For example, rebooting to runlevel 1, known as single user mode, gives the user root priveleges without the need for a password! Obviously, giving a non-administrator this much control can they will be dangeroussuspended, and it is wise to protect will resume the next time you boot loader with a secure passwordyour host system. }}
We will need to choose a password, encrypt with '''Answer the grub programs hash utility (called md5crypt), and add the encrypted hash of Investigation 6 observations / questions in your password to the grub configuration file, /etc/grublab log book.conf'''
{{Admon/important|Do not lose the GRUB password|If you lose the GRUB password you will not be able to change boot parameters when you boot the system. If you need to write it down, put it in a safe place, where no one will be able to tell what it is for.}}== Investigation 7: Kickstart Files ==
# Choose a suitable password. # Open the grub program by typing the command: <code>grub<{{Admon/code># At the grub prompttip|SSHD and Firewall|If you have restarted your virtual machine ''fedora1'', type in the command: <code>md5crypt</code># When prompted for a password, carefully type sshd server you started in your password. The program investigation 1 (step 15) will display the encrypted hash of your passwordno longer be running. Carefully write down In addition, the encrypted has.# Type the command: <code>quit</code> firewall will have reverted to exit the grub program.# Open the grub configuration file, <code>/etc/grubits original state.conf</code> for editing. (This file is actually linked In order to /boot/grub/grub.conf).# Carefully add the line: <code>password --md5 ''password-hashuse ''</code> (note: 'scp'password-hash'' is the hash , below, you generated with md5crypt) Place this line between the splashimage line and the title line. If there are other lines there, there is no will need to remove them. Just insert your password line as a new line.# Make sure you have not made a mistake. What you type in must match exactly the output from restart ssh and adjust the md5crypt commandfirewall again.# While you are editing the file you should also increase the timeout for grub to automatically boot the default OS. Edit the line <code>timeout=0<br /code> to <code>timeout=5<br /code> to give us more time to interrupt If students cannot backup their kickstart files using the process.# You should also ensure that the grub boot menu is not hidden. Add '''scp''' command, they can use a hash sign web-browser to access their Seneca e-mail with attachment (<code>#</code>copy kickstart file to their home directory first!) to the start of the line which reads: <code>hiddenmenu</code># Save the file and exit. Your Grub boot loader is now password protected.# Find For the section of [http://www.linux.com/archive/feature/53569 this article] that explains how to change the runlevel at boot time, and read it. Reboot your text-based Linux system"fedora3", trying students can use the '''mail''' command (refer to change the man command to runlevel 1 from the boot prompt, and see if the password protection worked.# From now on, when you want learn how to change boot parameters when you boot, you must type lowercase <code>p</code> at the boot prompt and enter the required passwordsend e-mail attachments).}}
== Completing When you perform a non-Kickstart installation, the Lab ==installation program creates a Kickstart file in the <code>/root</code> directory for reference.
Check off # Obtain the following items before asking kickstart files for all four of your instructor installations (your disk pack ''f17host'', plus the ''fedora1'', ''fedora2'', and ''fedora3'' virtual machines).# To prevent confusion, copy your kickstart files to kickstart filenames that describe their purpose (eg. kickstart_host, kickstart_fedora1, kickstart_fedora2, etc...)# Copy them all to check your labf17host system (tip:use <code>scp</code>), or use the hint in the tip box above to send via e-mail.# Compare these files. What are the differences? Similarities? (Tip: you may want to use tools such as <code>sdiff</code> to help with the comparison).# How could you use the kickstart file produced by the installation program to perform additional, identical installations?
* Task 1 - Install GNU'''Answer the Investigation 7 observations /Linux Workstation using Fedora * Task 2 - Collect system information after installationquestions in your lab log book.* Task 3 - Customize and configure boot time environment* Task 4 - Collect network information* Task 5 - Password protect Grub Bootloader'''
Arrange evidence for each of these items on your screen, then ask your instructor to review them and sign off on = Completing the lab's completion:Lab =
* Grub is password protected.* Can login with student's "learn" account* Has all the mount points* Has the package count* Has edited the default runlevel* Has the correct IP address ''Arrange evidence for each of these items on your screen, then ask your instructor to review them and MAC address* Find out sign off on the default route (gateway)* IP of the DNS name serverlab's completion:'''
== Preparing for the Quizzes ==# Three working virtual machines created.# Four kickstart files.# All virtual machines fully updated.# All virtual machines backed up.# Installation comparison table filled in.# Lab Logbook (lab2) notes filled-in.
# How many packages were installed?# How many files (correct to the nearest hundred) were installed?# How many mount points were used?# How many users were created automatically on your system (do not count your learn account)?# What is your learn account's UID and GID?# What is your learn account's home directory?# What is the home directory = Preparing for the user "root"?# How do you determine the host name of your GNU/Linux workstation?# What command can display the NIC's MAC address?# Which file contains the default "runlevel" value for your GNU/Linux workstation?Quizzes =
{{Admon/important|Unbind # What is the name of the Fedora installation program?# Which factors recorded in your MAC address|Before moving your disk pack table (above) were due to the type of installation performed, and which factors were due to another systemthe amount of software installed?# Which type of installation works best for confirming compatibility with hardware before installation? Why?# Which type of installation works best for installing large numbers of computers? Why?# What factors affect installation time?# How can you reduce the number of software updates required immediately after installation?# Why would you enable additional repositories during installation?# What does the file <code>/root/anaconda-ks.cfg</code> contain, [[Unbinding MAC Addresses on Fedora|unbind and how is it created?# How do you start and stop virtual machines?# How do you SSH into your MAC address]]virtual machines?# What is the purpose of and relationship between these pieces of software?#* libvirt#* libvirtd#* virsh#* virt-manager#* virt-install#* kvm# The kickstart installation (fedora3) was a network installation. Can a kickstart file be used with a DVD installation?# The kickstart installation (fedora3) was fairly fast.}}Why? Under what circumstances would it take a long time, even on a fast network?# What other types of installation sources are possible (besides Live Disc, Installation Disc, and Network?)