{"id":1554,"date":"2020-09-15T00:15:23","date_gmt":"2020-09-14T22:15:23","guid":{"rendered":"https:\/\/blog.mhasin.eu\/?p=1554"},"modified":"2021-03-11T21:15:43","modified_gmt":"2021-03-11T20:15:43","slug":"vra-ubuntu-20-04-template","status":"publish","type":"post","link":"https:\/\/blog.mhasin.eu\/?p=1554","title":{"rendered":"VRA ubuntu 20.04 template"},"content":{"rendered":"\n

Instalacia UBUNTU minimalna verzia<\/p>\n\n\n\n

vytvorenie root hesla:<\/p>\n\n\n\n

passwd root<\/code><\/pre>\n\n\n\n
Update systemu<\/p>\n\n\n\n
apt update\napt upgrade<\/code><\/pre>\n\n\n\n
Nastavenie SSH<\/p>\n\n\n\n
nano \/etc\/ssh\/sshd_config\n<\/code><\/pre>\n\n\n\n
Zmena parametra:<\/p>\n\n\n\n
PermitRootLogin yes<\/code><\/pre>\n\n\n\n
Instalacia open-vm-tools<\/p>\n\n\n\n
net-tools_1.60-26ubuntu1_amd64<\/a>Stiahnu\u0165<\/a><\/div>\n\n\n\n
wget https:\/\/blog.mhasin.eu\/wp-content\/uploads\/2020\/09\/net-tools_1.60-26ubuntu1_amd64.zip\n apt install unzip\n unzip net-tools_1.60-26ubuntu1_amd64.zip\n apt install .\/net-tools_1.60-26ubuntu1_amd64.deb\n rm -rf net-tools_1.60-26ubuntu1_amd64.*\napt-mark hold net-tools<\/code><\/pre>\n\n\n\n
Uprava bugu openp-vm-tools<\/p>\n\n\n\n
mkdir \/etc\/dhcp3<\/code><\/pre>\n\n\n\n
zmazanie maschine ID<\/p>\n\n\n\n
rm \/var\/lib\/dbus\/machine-id\nln -s \/etc\/machine-id \/var\/lib\/dbus\/machine-id\necho \"\" > \/etc\/machine-id<\/code><\/pre>\n\n\n\n
Zmazanie netplan<\/p>\n\n\n\n
rm -rf \/etc\/netplan\/*<\/code><\/pre>\n\n\n\n
Odstranenie cloud-init<\/p>\n\n\n\n
sudo cloud-init clean --logs<br> sudo touch \/etc\/cloud\/cloud-init.disabled\nsudo rm -rf \/etc\/netplan\/50-cloud-init.yaml\nsudo apt purge cloud-init network-manager -y\nsudo apt autoremove -y\nsudo sed -i 's\/Before=cloud-init-local.service\/After=dbus.service\/g' \/lib\/systemd\/system\/open-vm-tools.service\nsudo sed -i 's\/D \/tmp 1777 root root -\/#D \/tmp 1777 root root -\/g' \/usr\/lib\/tmpfiles.d\/tmp.conf \napt install ifupdown<\/code><\/pre>\n\n\n\n
unlink \/etc\/resolv.conf\nnano \/etc\/resolv.conf\n\nnameserver 147.232.3.2\nnameserver 147.232.16.16\nnameserver 8.8.8.8<\/code><\/pre>\n\n\n\n
Odstr\u00e1nenie vytvoren\u00fdch ssh k\u013e\u00fa\u010dov<\/p>\n\n\n\n
rm -rf \/etc\/ssh\/ssh_host_*<\/code><\/pre>\n\n\n\n
Zabezpe\u010denie automatick\u00e9ho generovanie ssh k\u013e\u00fa\u010dov pri prvom \u0161tarte syst\u00e9mu<\/p>\n\n\n\n
sudo tee \/etc\/rc.local >\/dev\/null <<EOL\n#!\/bin\/sh -e\n#\n# rc.local\n#\n# This script is executed at the end of each multiuser runlevel.\n# Make sure that the script will \"\" on success or any other\n# value on error.\n#\n# In order to enable or disable this script just change the execution\n# bits.\n#\n\n# By default this script does nothing.\ntest -f \/etc\/ssh\/ssh_host_dsa_key || dpkg-reconfigure openssh-server\nexit 0\nEOL\n\n# make the script executable\nsudo chmod +x \/etc\/rc.local\ndpkg-reconfigure openssh-server<\/code><\/pre>\n\n\n\n
Aktivovane systemd slu\u017eby rc.local<\/p>\n\n\n\n
sudo nano \/etc\/systemd\/system\/rc-local.service<\/code><\/pre>\n\n\n\n
[Unit]\n Description=\/etc\/rc.local Compatibility\n ConditionPathExists=\/etc\/rc.local\n\n[Service]\n Type=forking\n ExecStart=\/etc\/rc.local start\n TimeoutSec=0\n StandardOutput=tty\n RemainAfterExit=yes\n SysVStartPriority=99\n\n[Install]\n WantedBy=multi-user.target<\/code><\/pre>\n\n\n\n
Povolenie sp\u00fa\u0161\u0165ania rc.local v systemd<\/p>\n\n\n\n
sudo systemctl enable rc-local<\/code><\/pre>\n\n\n\n
Nastavenie ssh aby startovalo az po rc.local<\/p>\n\n\n\n
nano \/etc\/systemd\/system\/sshd.service<\/code><\/pre>\n\n\n\n
After=network.target auditd.service rc-local.service<\/code><\/pre>\n\n\n\n
Restart systemd<\/p>\n\n\n\n
systemctl daemon-reload<\/code><\/pre>\n\n\n\n
Definovanie DNS serverov v systemd resolver:<\/p>\n\n\n\n
nano \/etc\/systemd\/resolved.conf<\/code><\/pre>\n\n\n\n
[Resolve]\nDNS=147.232.3.2 147.232.16.16\n<\/code><\/pre>\n\n\n\n
Nastavenie NTP klienta na lok\u00e1lny NTP server<\/p>\n\n\n\n
sudo apt-get install ntp<\/code><\/pre>\n\n\n\n
Pridanie vlastn\u00e9ho NTP serveru sa vykon\u00e1va v konfigura\u010dnom s\u00fabore:<\/p>\n\n\n\n
sudo nano \/etc\/ntp.conf<\/code><\/pre>\n\n\n\n
Je potrebn\u00e9 prida\u0165 parameter ur\u010duj\u00faci n\u00e1\u0161 NTP server do konfigura\u010dn\u00e9ho s\u00faboru.<\/p>\n\n\n\n
server ntp.tuke.sk prefer iburst<\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Aktivovane systemd slu\u017eby NTP:<\/p>\n\n\n\n
sudo systemctl enable ntp<\/code><\/pre>\n\n\n\n
Bloknutie ssh na ucer vmware (iba pri server edicii)<\/p>\n\n\n\n
nano \/etc\/ssh\/sshd_config<\/code><\/pre>\n\n\n\n
Pridanie parametra:<\/p>\n\n\n\n
DenyUsers vmware<\/code><\/pre>\n\n\n\n
Odstr\u00e1nenie APT cache<\/p>\n\n\n\n
sudo apt clean<\/code><\/pre>\n\n\n\n
Zru\u0161enie SWAP oddielu<\/p>\n\n\n\n
sudo swapoff --all\nsudo sed -ri '\/\\sswap\\s\/s\/^#?\/#\/' \/etc\/fstab<\/code><\/pre>\n\n\n\n
Fin\u00e1lne vymazanie hist\u00f3rie termin\u00e1lu a vypnutie opera\u010dn\u00e9ho syst\u00e9mu<\/p>\n\n\n\n
rm -rf \/tmp\/*\nhistory -c\nhistory -w\nsudo shutdown -h now<\/code><\/pre>\n\n\n\n
<\/p>\n
 \t
 \t\t \t\t\"\"<\/a> \t\t  <\/span> \t\tSend article as PDF<\/span> \t\t  <\/span> \t\t \t\t \t<\/form> <\/div>","protected":false},"excerpt":{"rendered":"Instalacia UBUNTU minimalna verzia vytvorenie root hesla: Update systemu Nastavenie SSH Zmena parametra: Instalacia open-vm-tools Uprava bugu openp-vm-tools zmazanie maschine ID Zmazanie netplan Odstranenie cloud-init Odstr\u00e1nenie vytvoren\u00fdch ssh k\u013e\u00fa\u010dov Zabezpe\u010denie automatick\u00e9ho generovanie ssh k\u013e\u00fa\u010dov pri prvom \u0161tarte syst\u00e9mu Aktivovane systemd slu\u017eby rc.local Povolenie sp\u00fa\u0161\u0165ania rc.local v systemd Nastavenie ssh aby startovalo az po rc.local Restart systemd Definovanie DNS serverov v systemd resolver: Nastavenie NTP klienta na lok\u00e1lny NTP server Pridanie vlastn\u00e9ho NTP serveru sa vykon\u00e1va…\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"arc_restricted_post":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-1554","post","type-post","status-publish","format-standard","hentry","category-vmware"],"_links":{"self":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1554"}],"version-history":[{"count":9,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1554\/revisions"}],"predecessor-version":[{"id":1928,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/1554\/revisions\/1928"}],"wp:attachment":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}