CentOS 6

Acordeon para instalar, configurar y operar nuestro servidor CentOS 6.x

Configuracion basica

emacs /root/.bashrc /root/.emacs

cp /etc/sysconfig/network /etc/sysconfig/network.orig
emacs /etc/sysconfig/network

cp /etc/sysconfig/clock /etc/sysconfig/clock.orig
emacs /etc/sysconfig/clock

cp /usr/share/zoneinfo/Mexico/General /etc/localtime

Utilerias y editores de texto

yum install yum-utils.x86_64 screen.x86_64 emacs-nox.x86_64 vim-minimal.x86_64

Depositos EPEL y REMI

wget http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
wget http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
rpm -Uvh remi-release-6*.rpm epel-release-6*.rpm

cp /etc/yum.repos.d/remi.repo /etc/yum.repos.d/remi.repo.orig
emacs /etc/yum.repos.d/remi.repo

Actualizar sistema

yum update

Firewall

iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
iptables -A INPUT -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 8000:8999 -j ACCEPT
iptables -A INPUT -p tcp --dport 30000:50000 -j ACCEPT

iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT

/etc/init.d/iptables save

OpenSSH

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.orig
emacs /etc/ssh/sshd_config
/etc/init.d/sshd restart

Postfix

cp /etc/postfix/main.cf /etc/postfix/main.cf.orig
emacs /etc/postfix/main.cf
mv /etc/postfix/virtual /etc/postfix/virtual.orig
emacs /etc/postfix/virtual

postmap /etc/postfix/virtual
chkconfig postfix on
/etc/init.d/postfix start

PostgreSQL y PostGIS

wget http://yum.postgresql.org/9.3/redhat/rhel-6-x86_64/pgdg-centos93-9.3-1.noarch.rpm
rpm -Uvh pgdg-centos93-*.rpm
yum install postgis2_93.x86_64 postgresql93-server.x86_64 postgresql93-devel.x86_64 postgresql93.x86_64

service postgresql-9.3 initdb
chkconfig postgresql-9.3 on
/etc/init.d/postgresql-9.3 start

Configuración PostgreSQL

su - postgres -c psql
\password
\q

cp /var/lib/pgsql/9.3/data/pg_hba.conf /var/lib/pgsql/9.3/data/pg_hba.conf.orig
emacs /var/lib/pgsql/9.3/data/pg_hba.conf
/etc/init.d/postgresql-9.3 restart

Agregar GIS a una base de datos

CREATE EXTENSION postgis;

Parametros de configuración de Nginx (./configure)

 --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-mail --with-mail_ssl_module --with-file-aio --with-ipv6 --with-cc-opt='-O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic'

Nginx y PHP-FPM

emacs /etc/yum.repos.d/nginx.repo
yum install nginx.x86_64 php-fpm.x86_64

cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.orig
emacs /etc/nginx/nginx.conf

cp /etc/php-fpm.d/www.conf /etc/php-fpm.d/www.conf.orig
emacs /etc/php-fpm.d/www.conf

cp /etc/php.ini /etc/php.ini.orig
emacs /etc/php.ini

mkdir /var/lib/php/session
chown nginx:nginx /var/lib/php/session /var/log/nginx

chkconfig nginx on
/etc/init.d/nginx start
chkconfig php-fpm on
/etc/init.d/php-fpm start

Extensiones PHP

yum install php-pear.noarch php-devel.x86_64 make.x86_64
yum install php-pgsql.x86_64 php-mysql.x86_64 php-dba.x86_64
yum install php-mcrypt.x86_64 php-intl.x86_64 php-mbstring.x86_64 php-gd.x86_64
pecl install oauth

PHP Tesseract-OCR

curl https://raw.githubusercontent.com/grossws/tesseract-ocr-specs/master/utils/download_sources.sh | bash

cd ~/rpmbuild/SPECS
wget https://raw.githubusercontent.com/grossws/tesseract-ocr-specs/master/specs/leptonica.spec
yum-builddep leptonica.spec
rpmbuild -ba leptonica.spec
yum install ~/rpmbuild/RPMS/$(uname -m)/leptonica{,-devel}-1.69-*.rpm

cd ~/rpmbuild/SPECS
wget https://raw.githubusercontent.com/grossws/tesseract-ocr-specs/master/specs/tesseract.spec
wget https://raw.githubusercontent.com/grossws/tesseract-ocr-specs/master/specs/tesseract-langpack.spec
yum-builddep tesseract.spec
rpmbuild -ba tesseract.spec
yum install ~/rpmbuild/RPMS/$(uname -m)/tesseract{,-devel}-3.02-*.rpm
rpmbuild -ba tesseract-langpack.spec

Pendiente langpack

NodeJS y NPM

yum install nodejs.x86_64 npm.noarch

Git

yum install git.x86_64
mkdir /srv/repos

Ruby con RVM

groupadd rvm
curl -L https://get.rvm.io | sudo bash -s stable
source /etc/profile.d/rvm.sh
source ~/.bashrc
usermod -a -G rvm usuario
rvm install 2.0.0

Rails con RVM

gem install rails bundler

Nginx y Passenger

gem install passenger
rvmsudo passenger-install-nginx-module

Sudo

cp /etc/sudoers /etc/sudoers.orig
visudo

SFTP con chroot

Agregar grupo sftp y carpeta para usuarios:

groupadd sftp
mkdir /srv/sftp

Tocar en /etc/ssh/sshd_config:

Subsystem       sftp    internal-sftp
Match Group sftp
    ChrootDirectory /srv/sftp
    ForceCommand internal-sftp
    AllowTcpForwarding no

Reiniciar sshd:

/etc/init.d/sshd restart

Sitio codigo.labplc.mx

mkdir /srv/sites/codigo.labplc.mx
mkdir /srv/sites/codigo.labplc.mx/web
mkdir /srv/sites/codigo.labplc.mx/web/htdocs

mv /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.orig
emacs /etc/nginx/conf.d/default.conf

echo 'codigo.labplc.mx' > /srv/sites/codigo.labplc.mx/web/htdocs/index.html
echo '<?php phpinfo(); ?>' > /srv/sites/codigo.labplc.mx/web/htdocs/phpinfo.php

/etc/init.d/nginx restart

Instalar soporte para UUID postgresql

sudo yum install postgresql93-contrib

En sql editor:

CREATE EXTENSION "uuid-ossp";

Crear usuario de shell

useradd -u 100 -g 100 -G wheel -s /bin/bash -m manuel
passwd manuel

Crear carpeta publica en usuario de shell

chmod 711 /home/manuel
mkdir /home/manuel/public_html

Crear rol en PostgreSQL para usuario

createuser -U postgres -s -P manuel

Nuevo host virtual

mkdir /srv/sites/acopia.me
mkdir /srv/sites/acopia.me/web
mkdir /srv/sites/acopia.me/web/htdocs

Crear rol en PostgreSQL para aplicación web

createuser -U postgres -I -P acopiame

Crear base de datos para aplicación web

createdb -U postgres acopiame -O acopiame

Aplicaciones Rails/Laravel

mkdir /srv/sites/dev.codigo.labplc.mx
mkdir /srv/sites/dev.codigo.labplc.mx/web
mkdir /srv/sites/dev.codigo.labplc.mx/web/htdocs    
emacs /etc/nginx/conf.d/dev.conf

Crear deposito de Git local

groupadd -g 502 datos
usermod -a -G 502 manuel
mkdir /srv/repos/datos.git
git init --bare /srv/repos/datos.git --shared=group
chgrp -R datos /srv/repos/datos.git

Clonar deposito de datos en usuario de shell

git config --global user.name 'suNombre'
git config --global user.email 'suCorreo'
git clone /srv/repos/datos.git/
chmod 777 -R datos/web/views/_compile/ datos/web/cache/* datos/web/config/rate_limit/

En la carpeta datos se encuentra el deposito de usuario.dev

Usuario de SFTP

useradd -g sftp -d /srv/sftp/sivev -s /sbin/nologin sivev
passwd usuario

Instalación de MYSQL

yum install mysql-server
chkconfig mysqld on
/etc/init.d/mysqld start

Establecer password de ROOT:

mysqladmin -u root password 'new-password'
mysqladmin -u root -h codigo.labplc.mx password 'new-password'

Instalacion Pure-FTPd

yum install pure-ftpd
cp /etc/pure-ftpd/pure-ftpd.conf /etc/pure-ftpd/pure-ftpd.conf.orig
emacs /etc/pure-ftpd/pure-ftpd.conf
chkconfig pure-ftpd on
/etc/init.d/pure-ftpd start

Crear usuario:

pure-pw useradd usuario -u ftp -d ruta -m
chown ftp:ftp ruta

Elasticsearch

Agregar repo a yum:

rpm --import http://packages.elasticsearch.org/GPG-KEY-elasticsearch

Agregar en /etc/yum.repos.d/elasticsearch.repo:

[elasticsearch-1.2]
name=Elasticsearch repository for 1.2.x packages
baseurl=http://packages.elasticsearch.org/elasticsearch/1.2/centos
gpgcheck=1
gpgkey=http://packages.elasticsearch.org/GPG-KEY-elasticsearch
enabled=1

Instalar Elasticsearch:

yum install java-1.7.0-openjdk elasticsearch           

Agregar al inicio:

chkconfig elasticsearch on

Iniciar:

/etc/init.d/elasticsearch start