構成図 Ver.5

HDD が７つになったので構成をちょっと変更して、すべてをひとつに纏める。
250GB x 1 : BOOT
2TB x 3 + 3TB x 3 : ZFS-DATA

事前にバックアップを取っておかなくてはならないものは

/etc/sysconfig/iptables
/etc/exports
/etc/fstab
/etc/samba/smb.conf
/etc/httpd/conf/httpd.conf
/etc/httpd/conf.d/virtualhost.conf
/etc/php.ini
/etc/my.cnf
/var/spool/cron/root

ぐらいかな？

SYSTEM INSTALL
1. minimum install
PREFERENCES
1. vi /etc/profile
  
  HISTSIZE=5000
2. date –set=’****/**/** **:**:**’
NETWORK
1. vi /etc/sysconfig/network-scripts/ifcfg-eth0
  
  BOOTPROTO=”static”
  ONBOOT=”yes”
  IPADDR=”192.168.1.2″
  NETMASK=”255.255.255.0″
  GATEWAY=”192.168.1.1″
2. vi /etc/sysconfig/iptables
  
  # -A RH-Firewall-1-INPUT -p 50 -j ACCEPT
  # -A RH-Firewall-1-INPUT -p 51 -j ACCEPT
  # -A RH-Firewall-1-INPUT -p udp –dport 5353 -d 224.0.0.251 -j ACCEPT
  # -A RH-Firewall-1-INPUT -p udp -m udp –dport 631 -j ACCEPT
  # -A RH-Firewall-1-INPUT -p tcp -m tcp –dport 631 -j ACCEPT
  # 上記 5 行をコメントアウト
  # SSH
  -A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp -s 192.168.1.0/24 –dport 22 -j ACCEPT
  # HTTP
  -A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp –dport 80 -j ACCEPT
  # NTP
  -A RH-Firewall-1-INPUT -m state –state NEW -m udp -p udp –dport 123 -j ACCEPT
  # HTTPS
  -A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp –dport 443 -j ACCEPT
  # MySQL
  -A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp -s 192.168.1.0/24 –dport 3306 -j ACCEPT
  # Zabbix-Agent
  -A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp -s 192.168.1.0/24 –dport 10050 -j ACCEPT
  # Zabbix-Trapper
  -A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp -s 192.168.1.0/24 –dport 10051 -j ACCEPT
  # 上記 7 項目を適宜追加
3. vi /etc/resolv.conf
  
  nameserver 192.168.1.1
SELINUX
1. vi /etc/selinux/config
YUM
1. vi /etc/yum.conf
  
  proxy=http://192.168.1.1:8080/
NTP
1. yum install ntp
2. vi /etc/ntp.conf
  
  server 192.168.1.1 iburst
3. /etc/init.d/ntpd start
4. chkconfig ntpd on
5. chkconfig ntpdate on
KEYRING
1. yum install openssh-clients
2. ssh-keygen -t rsa
3. mv /root/.ssh/id_rsa.pub /root/.ssh/id_rsa.pub.192.168.1.2
4. scp /root/.ssh/id_rsa.pub.192.168.1.2 root@192.168.1.1:/root/.ssh/
5. [ on 192.168.1.1 ]
  cat id_rsa.pub.192.168.1.2 >> authorized_keys
WGET
1. yum install wget
2. vi /etc/wgetrc
  
  http_proxy = http://192.168.1.1:8080/
ZFS (Under Construction)
1. zpool create tank sdb1
FSTAB (Under Construction)
NFS
1. yum install rpcbind nfs-utils
2. vi /etc/exports
  
  /mnt/books 192.168.1.0/24(rw,insecure,no_root_squash,sync)
  /mnt/visual 192.168.1.0/24(rw,insecure,no_root_squash,sync)
  /mnt/temp 192.168.1.0/24(rw,insecure,no_root_squash,sync)
3. /etc/init.d/rpcbind start
4. /etc/init.d/nfslock start
5. /etc/init.d/nfs start
SMB
1. adduser samba-user
2. passwd samba-user
3. yum install samba
4. pdbedit -a samba-user
5. vi /etc/samba/smb.conf
  
  [video-dir]
  comment = Video Dir
  path = /mnt/visual/video
  browseable = yes
  writable = yes
  valid users = samba-user
  force directory mode = 0777
  force create mode = 0777
6. /etc/init.d/smb start
7. chkconfig nmbd on
8. chkconfig smbd on
REPOSITORY
1. MYSQL-COMMUNITY
  1. cd /tmp
  2. wget http://dev.mysql.com/get/mysql-community-release-el6-5.noarch.rpm
  3. rpm -ivh mysql-community-release-el6-5.noarch.rpm
  4. vi /etc/yum.repos.d/mysql-community.repo
    
    enabled=0
2. RPMFORGE
  1. wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm
  2. rpm -ivh rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm
  3. vi /etc/yum.repos.d/rpmforge.repo
    
    enabled=0
3. EPEL
  1. cd /etc/pki/rpm-gpg/
  2. wget http://ftp.riken.jp/Linux/fedora/epel/RPM-GPG-KEY-EPEL-6
  3. vi /etc/yum.repos.d/epel.repo
    
    [epel]
    name=Extra Packages for Enterprise Linux (EPEL)
    baseurl=http://ftp.riken.jp/Linux/fedora/epel/6/$basearch/
    enabled=0
    gpgcheck=1
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
4. CENT-ALT
  1. cd /tmp
  2. wget http://mirror.sysadminguide.net/centalt/repository/centos/6/x86_64/centalt-release-6-1.noarch.rpm
  3. rpm -ivh centalt-release-6-1.noarch.rpm
  4. vi /etc/yum.repos.d/centalt.repo
    
    [CentALT]
    name=CentALT Packages for Enterprise Linux 6 – $basearch
    baseurl=http://mirror.sysadminguide.net/centalt/repository/centos/6/$basearch/
    enabled=0
    gpgcheck=0
5. NGINX
  1. cd /tmp
  2. wget http://nginx.org/packages/centos/6/noarch/RPMS/nginx-release-centos-6-0.el6.ngx.noarch.rpm
  3. rpm -ivh nginx-release-centos-6-0.el6.ngx.noarch.rpm
  4. vi /etc/yum.repos.d/nginx.repo
    
    enabled=0
LAMP
1. HTTPD (Under Construction)
  1. yum install –enablerepo=CentALT httpd
  2. cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.original
  3. vi /etc/httpd/conf/httpd.conf
    
    Timeout 20
    ServerName 192.168.0.2:80
    <Directory />
    AllowOverride All
    </Directory>
    AddDefaultCharset off
  4. /etc/init.d/httpd start
  5. chkconfig httpd on
  6. htdigest -c /var/www/.htdigest ‘DigestAuthArea’ AuthUser
  7. vi /etc/httpd/conf.d/virtual.conf
    
    <VirtualHost *:80>
    ServerAdmin webmaster@example.com
    DocumentRoot /www/docs/visual
    ServerName visual.example.com
    ErrorLog logs/visual.example.com-error_log
    CustomLog logs/visual.example.com-access_log common
    AuthType Digest
    AuthName “DigestAuthArea”
    AuthDigestDomain /visual/
    AuthUserFile /var/www/.htdigest
    Require user AuthUser
    </VirtualHost>
  8. /etc/init.d/httpd restart
2. PHP
  1. yum install php
  2. cp /etc/php.ini /etc/php.ini.original
  3. vi /etc/php.ini
    
    error_reporting = E_ALL & ~E_NOTICE
    date.timezone = ‘Asia/Tokyo’
  4. /etc/init.d/httpd restart
3. MYSQL
  1. yum install –enablerepo=mysql56-community mysql
  2. cp /etc/my.cnf /etc/my.cnf.original
  3. vi /etc/my.cnf
    
    sql_mode=NO_ENGINE_SUBSTITUTION
    # for Replication
    log-bin=mysql-bin
    server-id = 168001002
    max_connections = 1000
    #log = /var/log/mysql/query.log
  4. /etc/init.d/mysqld start
  5. chkconfig mysqld on
  6. mysql -u root -p
  7. > grant all privileges on *.* to username identified by ‘password’ with grant option;
  8. > quit
READYMEDIA (formerly MINIDLNA)
1. wget http://sourceforge.net/projects/minidlna/files/minidlna/1.1.3/minidlna-1.1.3_static.tar.gz/download
2. tar -zxvf minidlna_1.1.3_static.tar.gz -C /
3. vi /etc/minidlna.conf
  
  media_dir=V,/mnt/visual/video
  friendly_name=miniDLNA Server
4. vi /etc/rc.d/init.d/minidlna
  ファイル自体はココにあります。拡張子は削除して使用。
  
  #!/bin/bash
  #
  # ReadyMedia (formerly MiniDLNA)
  #
  # chkconfig: 345 95 5
  # description: ReadyMedia (formerly MiniDLNA) is server software with the aim of being fully compliant with DLNA/UPnP-AV clients.
  # processname: minidlnad# Source function library.
  . /etc/init.d/functionsRETVAL=0
  prog=”ReadyMedia (formerly MiniDLNA)”
  MINIDLNA=”/usr/sbin/minidlnad -R”if [ ! -x ${MINIDLNA} ] ; then
  echo -n “${MINIDLNA} not installed! ”
  # Tell the user this has skipped
  exit 5
  fistart() {
  echo -n $”Starting $prog: ”
  daemon $MINIDLNA
  RETVAL=$?
  [ $RETVAL -eq 0 ] && touch /var/lock/subsys/minidlna
  echo
  }stop() {
  echo -n $”Stopping $prog: ”
  killproc $MINIDLNA
  RETVAL=$?
  [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/minidlna
  echo
  }case “$1″ in
  start)
  start
  ;;
  stop)
  stop
  ;;
  reload|restart)
  stop
  sleep 2
  start
  RETVAL=$?
  ;;
  rebuild)
  stop
  [ $RETVAL -eq 0 ] && rm -f /var/cache/minidlna/files.db
  sleep 2
  start
  RETVAL=$?
  ;;
  status)
  status $MINIDLNA
  RETVAL=$?
  ;;
  *)
  echo $”Usage: $0 {start|stop|restart|reload|rebuild|status}”
  exit 1
  esacexit $RETVAL
5. chmod 755 /etc/rc.d/init.d/minidlna
6. chkconfig –add minidlna
7. /etc/init.d/minidlna start
MyDNS
1. crontab -e
  
  0 3 * * * wget -q -O /dev/null http://***ID***:***PASS***@www.mydns.jp/login.html
BIND or PowerDNS (Under Construction)
TRANSMISSION (Under Construction)
1. yum install transmission
GNOME DESKTOP
1. yum groupinstall “X Window System” “デスクトップ”
2. vi /etc/inittab
  
  id:5:initdefault:
PT3 (Under Construction)