From TrustixWiki

Trustix home page
TrustixFAQ

Contents 1 Installation 2 Upgrading 3 The Trustix Cook Book 3.1 Generic System 3.1.1 Console 3.1.2 Network Settings 3.1.3 Kernel upgrades 3.1.4 Diskless system 3.1.5 Desktop environment 3.1.6 Laptop environment 3.1.7 File systems 3.2 System Administration 3.2.1 Building Custom Packages 3.2.2 Backup 3.2.3 Power 3.2.4 Disk 3.2.5 Network and Hardware monitoring 3.2.6 Web based interfaces 3.3 File and printing services 3.3.1 CUPS - Common Unix Printing System 3.3.2 Fax Server 3.3.3 File Servers 3.4 Databases 3.5 Mail Services 3.5.1 SMTP, POP3, and IMAP servers 3.5.2 Mail content filtering 3.5.3 Mail clients 3.5.4 Other email services 3.6 Web Services 3.6.1 Apache 3.6.2 Web Content Filtering and Caching 3.6.3 Java and J2EE 3.7 Network Services 3.8 Secure access 3.8.1 Trustix as a firewall 3.8.2 VPN 3.9 Software Development 3.10 Clients 3.11 VMware 3.12 Miscellaneous

Installation

• Booting and installing from CD
• Trustix Install With PXE, forget those floppies and CDroms.
• Automating installs with Kickstart
• TSL 2.2 kickstart and a floppy
• Setting up TSL with BackupExec
• Post Installation
  • FirstBoot - Things to do on first boot
  • SuToRoot- Having trouble su - to root? read this...
  • StartingDaemons - How to start httpd and so on automatically
  • ChangeMaildir - How to change trustix default mail delivery folder.
• Locales / Languages
  • LocaleInstallation
• Common problems

Upgrading

• UpgradingHowto - How to upgrade from older releases to newer releases
• SwUp features of the Trustix software updater

The Trustix Cook Book

Here are recipes created by Trustix users to help you manage your Trustix system.

Generic System

This section contains recipes for generic system - typically basic configuration

Console

• SerialConsole Remote management via serial port
• SpecialCharacters How to use special non-english characters

Network Settings

• Setting the IP address manually
• Setting speed and duplex
• Network boot scripts including vlan config and bridging
• Simple Bridging setup
• Disable IPv6
• Setting up IPv6 hosts and routing

Kernel upgrades

• Upgrading TSL 2.2 systems to kernel 2.6
• Building new kernels for TSL 3.0
• Removing old and unwanted kernels

Diskless system

• Installing TSL into a chroot
• Booting TSL from an NFS-root

Desktop environment

• Making TSL into a desktop
  • Installing Gnome
  • Installing and using Enlightenment
• ALSA sound system

Laptop environment

• Setting up TSL on a Laptop
• Wireless network

File systems

• Using Udev for dynamic /dev population

System Administration

Building Custom Packages

• RPM Build custom packages from SRPM files.

Backup

• Backups Tapes and disk-to-disk copy.

Power

• UPS - UninterruptiblePowerSupply setup
• APCUPSd Setup and install APCUPSd

Disk

• EVMS volume management

Network and Hardware monitoring

• lm sensors read power, temperature, fan speed and more via sensors built in to your motherboard
• mrtg Multi Router Traffic Grapher - graph throughput of SNMP-enabled devices and more
• rrd tool record data collected from lm sensors (and more) and display results in Web pages
• Smokeping latency measurement tool using rrdtool
• Smartmontools monitor and report on condition of drives
• iptraf is a very nice tool to online network monitoring
• SNMP
• Swatch
• Snort

Web based interfaces

Webmin is a Web-based system administration tool.

• How to enable ssl for webmin
• How to Speed up Webmin
• CP+ is a version of webmin. You can buy a support license for it. See cpplus.trustix.com

File and printing services

CUPS - Common Unix Printing System

• Configure CUPS
  • Add Printer

Fax Server

• Setting up HylaFAX

File Servers

Trustix makes a useful secure fileserver. The main alternatives;

• FTP Server - most suited for file transfers over the internet, uses unix permissions, even on windows.
• NFS - while notoriously an insecure protocol, it is quite efficient and exports unix permissions.
• Samba - or windows server, if you like, is the way to go in a hybrid linux/windows environment, recent version also export unix permission.
  • Windows File Server
  • Primary Domain Controller
  • Samba and ADS

Databases

• Oracle

Mail Services

The lists.trustix.org setup uses Postfix, Amavis, SpamAssassin and Mailman.

SMTP, POP3, and IMAP servers

SMTP is the protocol for sending mail and POP/IMAP for receiving/reading mail. Postfix and qmail are SMTP servers. Courier, Cyrus and uw-imap support POP/IMAP services.

Postfix, cyrus, courier, and uw-imap are all packages available for TSL. Qmail is not.

• Postfix Mail Server
  • Postfix, CourierIMAP and LDAP
  • Postfix and SASL
    • Postfix and SASL/TLS
    • Postfix and SASL with MySQL backend
  • Postfix and CyrusIMAP
  • Postfix, Cyrus, Mysql, Amavisd-new, Spamassassin
  • MySQL, postfix and courier-imap virtual mailserver
• Courier
  • Courier IMAP
  • Courier POP3
  • Courier with MySQL
  • Courier with SSL
• Cyrus with SSL
• UW-Imap
  • uw-imap POP3
• Qmail is not part of TSL but can be installed.

Mail content filtering

• SpamAssassin
• Amavisd with ClamAV and SpamAssassin
• Razor-Setup for use with SpamAssassin and Amavisd
• Bogofilter
• automated filtering using SQLgrey and SPF

Mail clients

• mutt -- curses based text mail client
• pine -- curses based text mail client -- not supported but can be installed
• squirrelmail -- not supported but easy to install (from contrib)
  • vacation
  • poppasswd
• IlohaMail -- an alternative to squirrelmail (my personal favourite)

Other email services

• Lotus Domino groupware

Opensource groupware options?

Web Services

Apache

• Using Apache with SSL and creating your certificate
• Enabling or disabling suexec
• Active Directory Authentication with Apache
• Creating your Your Own WIKI server
• Rebuilding to support mod logio
• PHP
  • Enable PHP in Apache
  • Enable MySQL support in PHP
  • Enable msSQL support in PHP4
  • Enable GD support in PHP
• Installing Apache Tomcat

Web Content Filtering and Caching

• SQUID Caching Proxy Server
• DansGuardian
• DansGuardian with ClamAV
• SquidGuard

Java and J2EE

• Installing Sun's JDK
• Installing Apache Tomcat.
• Installing Mod JK.

Network Services

• DHCP Dynamic host configuration protocol
• DNS Domain Name Service
• NIS Network Information Service
• OpenLDAP Lightweight Directory Access Protocol
• NTP Network Time Protocol

Secure access

• SSH secure shell
• Securing SSH
• Restrict SSH per user
• Use key based authentication
• ScpOnly

Trustix as a firewall

• FirewallSettings
• FireHol - Contrib Firewall tool - anyone with a small howto?

VPN

A VPN is a "virtual private network".

• CipeVPN
• FreeSWAN
• OpenVPN
• HomeOfficeVPN

Software Development

• CVS
  • Running a CVS pserver in a chroot environment with cvsd
• Git
• Perl with CPAN
• Subversion
• Common Compliation Problems

Clients

• irssi tips and tricks

VMware

• VMware Introduction
• TSL as host
• TSL as guest

Miscellaneous

• SystemWideCrontab
• Glossary
• TrustixSnowDevelopment
• AboutThisWiki and how to use it.
• SandBox - Here you can test editing with Wiki