Duration
5 days
Outline
- 1. Advanced User Management
Managing users and groups from GUI and the command line
Quotas
Password aging
Setting the password policy
Configuring password aging and password length
Configuring password complexity and limiting reused password usage
Configuring login failures
Sudoers
visudo
- 2. Security
Introducing SELinux
Installing SELinux
SELinux mode
SELinux policy
SELinux files and processes
Domain transition
SELinux users
Restricting access to su or sudo
Restricting permissions to run scripts
Restricting access to services
SELinux audit logs
SELinux troubleshooting
- 3. Linux for Different Purposes
Configuring a gateway server
Setting up a VPN server
Implementing BIND as a DNS server
Setting up a web server using Apache-MySQL-PHP
Setting up an FTP server
Securing Apache and FTP with OpenSSL
- 4. Mail Server with Postfix
Setting up and configuring of Postfix mail server
Setting up MariaDB for virtual domains and users
Setting up a mail tool (Dovecot) to retrieve mails
Securing the mail server using SSL/TLS
- 5. Monitoring and Logging
Open source monitoring tools
Ganglia
OpenNMS
Zabbix
Zenoss
Nagios
Icinga
Setting up Nagios as a monitoring server
Tools to set up a logging server
Rsyslog
Syslog-ng
Setting up and configuring Syslog-ng
- 6. Virtualization
The basics of virtualization on Linux
Full virtualization
Paravirtualization
Setting up Xen on CentOS 7
Setting up KVM for full virtualization on CentOS 7
Setting up VirtualBox virtualization on CentOS 7
Setting up Docker on CentOS 7
Establishing services’ high availability using HAProxy
- 7. Cloud Computing
An overview of cloud computing
Software as a Service
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)
Cloud computing services
Public cloud
Private cloud
Hybrid cloud
Introducing OpenStack
OpenStack compute
OpenStack networking
OpenStack storage
Components of OpenStack
Installing and configuring OpenStack
- 8. Configuration Management
Introducing configuration management
Open source configuration management tools
Chef
SaltStack (Salt)
Ansible
Puppet
Installing and configuring Ansible
- 9. Some Additional Tricks and Tools
SSH for remote connection
Securing SSH and the root login configuration
SSH key-based authentication
Setting up Samba and NFS for file sharing
Introducing the Linux system and network monitoring tools
Programme scope, delivery arrangements and suitability are confirmed during enquiry.