96 lines
1.6 KiB
Markdown
96 lines
1.6 KiB
Markdown
# General
|
|
|
|
Update
|
|
|
|
```sh
|
|
dnf update
|
|
```
|
|
|
|
Set hostname
|
|
|
|
```sh
|
|
hostnamectl set-hostname moni-alma
|
|
```
|
|
|
|
Set up EPEL, follow the instructions:
|
|
|
|
* https://docs.fedoraproject.org/en-US/epel/getting-started/
|
|
|
|
And then install my favorites:
|
|
|
|
```sh
|
|
dnf install -y tmux htop ncdu neovim git
|
|
```
|
|
|
|
# Docker
|
|
|
|
Official instructions: https://docs.docker.com/engine/install/rhel/
|
|
|
|
Install docker:
|
|
|
|
```sh
|
|
dnf -y install dnf-plugins-core
|
|
dnf config-manager --add-repo https://download.docker.com/linux/rhel/docker-ce.repo
|
|
dnf install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
|
systemctl enable --now docker
|
|
```
|
|
|
|
Add the `moni` to the docker group:
|
|
|
|
```sh
|
|
usermod -aG docker moni
|
|
```
|
|
|
|
You need to log out and log back in and then test it:
|
|
|
|
```sh
|
|
# run without sudo
|
|
docker run -it --rm -p 8080:80 httpd:2.4
|
|
```
|
|
|
|
It will run in the foreground because we didn't pass `-d`.
|
|
|
|
Open your browser to:
|
|
|
|
* http://192.168.1.11:8080
|
|
* or http://192.168.1.10:8080 for the other server.
|
|
|
|
You can stop the container with CTRL+C. It should clean itself up (`--rm`).
|
|
|
|
Cleanup:
|
|
|
|
```sh
|
|
docker image prune --all --force
|
|
```
|
|
|
|
# SSH
|
|
|
|
```sh
|
|
nvim /etc/ssh/sshd_config
|
|
```
|
|
|
|
Uncomment/change these settings:
|
|
|
|
```conf
|
|
PermitRootLogin no
|
|
# PubkeyAuthentication yes <-- This is the detault, so you don't need to change this
|
|
PasswordAuthentication no
|
|
KbdInteractiveAuthentication no
|
|
```
|
|
|
|
Reload:
|
|
|
|
```sh
|
|
sudo systemctl reload sshd
|
|
```
|
|
|
|
# (If you're running Fedora or RHEL) Disable web console
|
|
|
|
Remove the web console and all the other stuff around it:
|
|
|
|
```sh
|
|
dnf -y remove cockpit*
|
|
firewall-cmd --permanent --remove-service=cockpit
|
|
firewall-cmd --reload
|
|
firewall-cmd --list-all
|
|
```
|