linux installation checklist

Upload: mohammad-rana

Post on 06-Apr-2018

216 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/3/2019 Linux Installation CheckList

    1/11

    Linux Installation CheckList

    Scope :The following document outlines the installion of Redhat Linux 7.2on PCs:Requirements:

    1. IP Adress of system2. Valid DNS name3. DNS name of NIS masters and their IP address4. Default router IP Address5. Add the system to netgroup.

    Procedure:

    1. Make sure that the system can boot from cdrom and boot from thefirst cdrom.

    2. Select english as the language for installation3. Select the keyboard defaults as shown

  • 8/3/2019 Linux Installation CheckList

    2/11

    4. Select the approaprite mouse for your system as shown in figure:

  • 8/3/2019 Linux Installation CheckList

    3/11

    5. In the Welcome screen select next and in the install options windowselect custom:

  • 8/3/2019 Linux Installation CheckList

    4/11

    6. In the Partition Menu Select Manually Partition with Disk Druid.

    7. Delete all unwanted partitions.

    8. Create partitions as per requirements and disk size , there must beat least one root partition and a swap partition. like the figures below

  • 8/3/2019 Linux Installation CheckList

    5/11

  • 8/3/2019 Linux Installation CheckList

    6/11

    9. Boot loader installation: Make sure use LILO as the boot loader is

    selected and install boot record on Master Boot Record (MBR).Default boot image is Red Hat Linux. Next

    10.Network Configuration: Select activate on boot, fill up all the fields,an example is shown in the figure below . Next.

    11.

    12. Firewall Configuration: Select no firewall. Next

    13. Language Support Selection: Select English (USA)

    14. Time Zone Selection: Click on worldmap somewhere nearcalcutta.Next.

    15. Account Configuration: Enter the root password and confirm it.Donot add any local accounts. Next.

    16. Authentication Configuration: Uncheck Enable MD5 passwords andEnable shadow passwords. Check Enable NIS, and type miel as theNIS Domain and type the NIS slave server for that network.

  • 8/3/2019 Linux Installation CheckList

    7/11

    17.Select Package Groups: Select all packages .

    18. Xconfiguration part 1: Most probably the installation will recognisethe display card, in event if it does not recognise the display card,select the display adapter .Next.

    19. Preparing to install package:Next, the installation will display theprogress bar.

    20. Boot disk Creation:Put an empty floppy ,Next or you can skip bootdisk creation by selecting Skip boot disk creation.

    21. Xconfiguration part 2 (Monitor Selection &Custom X Configuration) :Select your monitor , Choose the Color density (true color) andscreen resolution (1024x768). Select the Desktop enviroment asGNOME and the login type as graphical. Next.

    22. With this the operating system is installed. Reboot.

    System File Changes:

    1. Logon to the . Linux System as root 2. cd /etc/rc2.d3. /S80sendmail stop4.

    mv S80sendmail ORIG .S80sendmail.OSORG5. cd /6. vi /etc/passwd and check if any account(other than root) uid 0 exists,

    if so, remove the account and save the file.7. cd /var/spool/cron/crontabs and check if uucp file exists, if so delete

    the uucp file.8. cp -p /etc/nsswitch.conf /etc/ORIG.nsswitch.conf.ORG.LINUX9. ftp the nsswitch.conf file from

    akash:/disk1/Patches/SystemFileChanges/LINUX7.1 directory.(Senate Only)

    10. vi /etc/nsswitch.conf and modify the file which should contain thefollowing lines only, Delete other lines.

    ## /etc/nsswitch.conf## An example Name Service Switch config file. This file should be# sorted with the most-used services at the beginning.#

  • 8/3/2019 Linux Installation CheckList

    8/11

    # The entry '[NOTFOUND=return]' means that the search for an# entry should stop if the search in the previous entry turned# up nothing. Note that if the search failed due to some other

    reason# (like no NIS server responding) then the search continues with

    the # next entry.## Legal entries are:## nisplus or nis+ Use NIS+ (NIS version 3)# nis or yp Use NIS (NIS version 2), also called YP# dns Use DNS (Domain Name Service)# files Use the local files# db Use the local database (.db) files# compat Use NIS on compat mode

    # hesiod Use Hesiod for user lookups# [NOTFOUND=return] Stop searching if not found so far#

    # To use db, put the "db" in front of "files" for entries you want to

    be# looked up first in the databases#

    passwd: files nis (If it is nisplus setup use nisplus instead of

    nis)

    shadow: files nisgroup: files nis

    hosts: dns files

    bootparams: files nis

    ethers: files nisnetmasks: files nisnetworks: files nisprotocols: files nisrpc: files nisservices: files nis

    netgroup: files nis

    publickey: files nis

    automount: files nis

  • 8/3/2019 Linux Installation CheckList

    9/11

    aliases: files nis

    11.Make sure the /etc/exports file does not contain any rw for everyone.The

    FileSystems should be exported to respective netgroup only. The

    syntax ofexports file entry is as follows

    /usr2 @mot(rw)/disk1 @ssdgrp(rw)

    12. Make sure the / filesystem is not exported.13. vi /etc/ftpusers and add root and save the file.14. vi /etc/default/telnetd and add "BANNER=""" and save the file.15.mv /etc/issue /etc/ORIG.issue.ORG.LINUX16. mv /etc/issue.net /etc/ORIG.issue.net.ORG.LINUX17.

    vi /etc/issue

    Red Hat Linux release 7.2 (Enigma)Kernel \r on an \m

    Add the following lines after the above two lines

    Notice: This computer resource is the property of Motorola.Authorized

    persons may use Motorola computer resources only for approved

    purposes. Misuse or misappropriation of such resources isprohibited.

    Motorola reserves the rigt to audit, access and inspect electroniccommunications and data created, stored, or transmitted on itscomputer resources in accordance with applicable law. Motorola alsoreserves the right to add necessary files and modify the configura-tion of any connected computer or system to ensure the security andintegrity of its computer resources.

    BY COMPLETING THE LOGON PROCESS YOU ARE

    ACKNOWLEDGING ANDCONSENTING TO THE PROVISIONS OF THIS NOTICE AND POLICY

    SOP E-62.IF YOU ARE NOT AN AUTHORIZED USER, PLEASE DISCONTINUE THE

    LOGINPROCESS NOW. If you need further information, please visit

    banner.mot.comOr contact your local help desk.

  • 8/3/2019 Linux Installation CheckList

    10/11

    Leave two blank lines and save the file.

    18. cp -p /etc/issue /etc/issue.net

    19.Make sure there is no /etc/hosts.equiv and /.rhosts files, if so deletethese files if not required, if required read the man pages and use theproper syntax, it should not contain +

    20. cd /etc/rc2.d

    21.mv /etc/rc2.d/K50snmpd /etc/rc2.d/ORIG.K50snmpd.ORG.LINUX

    22. mv /etc/rc3.d/K50snmpd /etc/rc3.d/ORIG.K50snmpd.ORG.LINUX

    23. Run chkconfig command to disable the following services in LINUX

    System

    1. 1. chkconfig echo off2. 2. chkconfig finger off3. 3. chkconfig rexec off4. 4. chkconfig swat off5. 5. chkconfig tftp off6. 6. chkconfig chargen off7. 7. chkconfig chargen-udp off8. 8. chkconfig daytime off9. 9. chkconfig daytime-udp off10.

    10.chkconfig echo-udp off11. 11.chkconfig time off

    12. 12.chkconfig time-udp off13. 13.chkconfig comsat off14. 14.chkconfig talk off15. 15.chkconfig rusersd off16. 16.chkconfig rstatd off17. 17.chkconfig snmpd off

    24. Make sure the above said 16 services are disabled. To check those

    services, run the command chkconfig --list andenter, it will display the status. For example:

    chkconfig --list echo

    echo off (Systems ouput for the above command)

  • 8/3/2019 Linux Installation CheckList

    11/11