DEV Community: NeutronCloud

How to Install Caddy on Rocky Linux 8

NeutronCloud — Sun, 12 Sep 2021 09:27:56 +0000

In this article, we'll explain you how to install Caddy on Rocky Linux 8. Host your website on Caddy web server.

The Caddy web server is an open-source web server written in Go. It is designed around simplicity and security that comes with a number of features that are useful for hosting websites. Caddy is both a flexible, efficient static file server and a powerful, scalable reverse proxy.

Prerequisites

A Rocky Linux 8 installed cloud instance.
A root user access or normal user with administrative privileges.

Install Caddy on Rocky Linux 8

1. Keep the server up to date

# dnf update -y

2. Install Caddy

Following command will install and automatically starts and runs Caddy for you as a systemd service named caddy using our official caddy.service unit file.

# dnf install 'dnf-command(copr)'

# dnf copr enable @caddy/caddy

# dnf install caddy -y

Next, start and enable caddy.service using following command:

# systemctl start caddy && systemctl enable caddy

Configure Firewall

Assuming that you are using firewalld as your server's firewall, run following command to add the HTTP and HTTPS port in the firewall.

# firewall-cmd --add-port=80/tcp --permanent

# firewall-cmd --add-port=443/tcp --permanent

# firewall-cmd --reload

Now, navigate to your browser and enter your server IP or domain name:

http://Server-IP

OR

http://example.com

3. Configure Domain with Caddy

Before moving following, first set up domain's A/AAAA DNS record at your registrar or control panel.

Note: Replace neutroncloud.in with your domain name

Create a directory for your website files

# mkdir /usr/share/neutroncloud.in/

Now, open Caddy's configuration file and add your domain name and change website's root directory.

# vi /etc/caddy/Caddyfile

Replace :80 with your domain name and change the site root to /usr/share/neutroncloud.in/ as

Once you done with the changes reload the caddy.service to reflect the changes.

# systemctl reload caddy

Now, create a index.html file in /var/www/html/neutroncloud.in using following command:

# echo '<!doctype html><head><title>Hello from Caddy!</title></head><body><h1 style="font-family: sans-serif">This page is being served via Caddy</h1></body></html>' | sudo tee /usr/share/neutroncloud.in/index.html

Finally, refresh the page in your browser and you will see our newly created index.html.

In this article, we have seen how to install Caddy on Rocky Linux 8.

Deploy cloud servers in India

Install OpenSSL 1.1.1k on AlmaLinux 8

NeutronCloud — Fri, 27 Aug 2021 05:25:41 +0000

In this article, we'll explain how to install OpenSSL 1.1.1k on AlmaLinux 8.

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.

OpenSSL is licensed under an Apache-style license, which means that you are free to get and use it for commercial and non-commercial purposes subject to some simple license conditions. For a list of vulnerabilities, and the releases in which they were found and fixes, see our Vulnerabilities page.

Prerequisites

A AlmaLinux 8 installed cloud instance.
A root user access or normal user with administrative privileges.

Install OpenSSL 1.1.1k on AlmaLinux 8

1. Keep the server up to date

Always keep the server up to date the security purpose.

# dnf update -y

2. Install development tool

We need to install a development tool and few dependencies to install OpenSSL

# dnf group install 'Development Tools'

3. Install dependencies

# dnf install perl-core zlib-devel wget -y

4. Download OpenSSL 1.1.1k

We will download the latest stable version is the 1.1.1 series. This is also our Long Term Support (LTS) version, supported until 11th September 2023.

# cd /usr/local/src/

# wget https://www.openssl.org/source/openssl-1.1.1k.tar.gz

Now, extract the tar file

# tar -xzvf openssl-1.1.1k.tar.gz

5. Configure and build

Navigate to the extracted directory and configure, build, test and install OpenSSL in the default location /usr/local/ssl.

# cd openssl-1.1.1k

Configure it with PATH

# ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl shared zlib

Output:

Now, build

# make

# make test

# make install

6. Configure it shared libraries.

Once we have successfully installed OpenSSL, configure it shared libraries.

Naviagate to the /etc/ld.so.conf.d directory and create a configuration file.

# cd /etc/ld.so.conf.d/

# vi openssl-1.1.1k.conf

Add the following path in the config file

/usr/local/ssl/lib

Save and exit

Reload the dynamic link

# ldconfig -v

7. Configure OpenSSL Binary

Now, we are going to insert the binary of our new version of OpenSSL /usr/local/ssl/bin/openssl and replace the default openssl file.

First, take a backup of existed openssl file.

# mv /bin/openssl /bin/openssl.backup

Create new environment files for OpenSSL

# vi /etc/profile.d/openssl.sh

and add the following lines

OPENSSL_PATH="/usr/local/ssl/bin"
export OPENSSL_PATH
PATH=$PATH:$OPENSSL_PATH
export PATH

Save & exit

Make the newly created file executable

# chmod +x /etc/profile.d/openssl.sh

Reload the new OpenSSL environment file and check the default PATH

# source /etc/profile.d/openssl.sh
# echo $PATH

Now, let's verify the installation and version of the OpenSSL

# which openssl
# openssl version -a

Output will be similar like:

OpenSSL 1.1.1k  25 Mar 2021
built on: Thu Aug 19 06:33:43 2021 UTC
platform: linux-x86_64
options:  bn(64,64) rc4(16x,int) des(int) idea(int) blowfish(ptr) 
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DZLIB -DNDEBUG
OPENSSLDIR: "/usr/local/ssl"
ENGINESDIR: "/usr/local/ssl/lib/engines-1.1"
Seeding source: os-specific

That's it, the installation has been completed successfully.

In this article, we’ve learned how to install OpenSSL 1.1.1k on AlmaLinux 8.

Install and Configure Git Server on AlmaLinux 8

NeutronCloud — Fri, 27 Aug 2021 05:22:22 +0000

In this tutorial, we'll explain how to install and configure git server on AlmaLinux 8

Git is a distributed version-control system for tracking changes in source code during software development. It is designed for coordinating work among programmers, but it can be used to track changes in any set of files. Its goals include speed, data integrity, and support for distributed, non-linear workflows.

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency.

Install and Configure Git Server on AlmaLinux 8

There are two options to install Git.

Option 1 is install Git using dnf

1. Keep the server up-to-date

# dnf update -y

2. Install Git

# dnf install git -y

Option 2 is install git from source

You can download latest version of Git from release page. It make take longer time and will not be updated and maintained through the dnf package manager. But it will allow you to download a newer version, and will give you some control over the options that you can include.

First, install dependencies

# dnf groupinstall "Development Tools"
# dnf install gettext-devel openssl-devel perl-CPAN perl-devel zlib-devel wget -y

After the installation complete, go to release page and copy the download link. You can find tar.gz, right click on it and copy the link.

Now, download it in the server using wget command and rename it:

# wget https://github.com/git/git/archive/refs/tags/v2.33.0.tar.gz -O git.tar.gz

Once the download is complete, we can extract the tar file

# tar -zxf git.tar.gz

Now, go to that directory to begin configuring our build.

# cd git-*

We can check for everything that we need with the configure script that is generated by make configure. This script will also use a --prefix to declare /usr/local (the default program folder for Linux platforms) as the appropriate destination for the new binary, and will create a Makefile to be used in the following step.

# make configure
# ./configure --prefix=/usr/local

Makefiles are scriptable configuration files that are processed by the make utility. Our Makefile will tell make how to compile a program and link it to our CentOS installation so that we can execute the program properly.

# make install

We have built and installed Git successfully. To verify it check the version using following command:

# git --version

Set Up Git

Add user to handle the repositories:

# useradd git

Then give your Git user a password:

# passwd git

Log in as a git user

# su - git

Initiate a new empty repository using following command:

# git init --bare ~/hostnextra.git

Enable post-update hook by copying the sample file as follows:

# cd hooks/
# cp post-update.sample post-update

That's it for server side.

Now let's go to client side:

Install Git

# dnf install git -y

The installation is completed

Set up git

Submit inflammation about yourself so that commit messages will be generated with correct information attached:

# git config --global user.name "git"
# git config --global user.email "git@git-client.lab.com"

Create a directory where you can keep all your projects

# mkdir ~/dev
# cd ~/dev

Now, create a clone the hostnextra.git repository that we have created earlier in the server

# git clone git@git-server.lab.com:~/hostnextra.git hostnextra.git
Cloning into 'hostnextra.git'...
warning: You appear to have cloned an empty repository.

Go to respository

# cd hostnextra.git

You can see the repository is empty, so lets create some files

# echo "my test file" > file1.txt

Add these file to our git repository

# git add .

Commit the changes

# git commit -am "My First Commit"
[master 45fc94c] added test file
1 file changed, 1 insertion(+)
create mode 100644 file1.txt

Push these changes to the remote git repository at git-server.lab.com

# git push origin master

you will be asked for password, enter git user password

git@git-server.lab.com's password:
Counting objects: 2, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (2/2), done.
Writing objects: 100% (2/2), 235 bytes | 235.00 KiB/s, done.
Total 2 (delta 0), reused 0 (delta 0)
To git-server.lab.com:~/hostnextra.git
bc172aa..45fc94c master -> master

Verify the changes, access the git server and run following command to check the logs

# git log

We have successfully install and configure Git server on AlmaLinux 8

How to Install Redis on AlmaLinux 8

NeutronCloud — Sun, 04 Apr 2021 09:17:21 +0000

In this article, we have covered how to install Redis on AlmaLinux 8 and configure it. We will install redis-cli 5.0.3.

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker. It supports data structures such as strings, hashes, lists, sets, sorted sets with range queries, bitmaps, hyperloglogs, geospatial indexes with radius queries and streams.

Redis was designed for use by trusted clients in a trusted environment, and has no robust security features of its own. Redis does, however, have a few security features like a basic unencrypted password as well as command renaming and disabling.

We have covered installation and configuration of Redis.

Prerequisites

Cloud instance running AlmaLinux 8.
Root access or normal user with administrative privileges.

Install Redis on AlmaLinux 8

Step 1 - Keep the server up to date

# dnf update -y

Step 2 - Install Redis

Run following DNF package manager command to install Redis.

# dnf install redis -y

Step 3 - Change supervised directive from no to systemd

This is important configuration change to make in the Redis configuration file. supervised directive allows you to delivery an init system to manage Redis as a service.

# vi /etc/redis.conf

Find supervised and change it from no to systemd which will looks like:

# If you run Redis from upstart or systemd, Redis can interact with your
# supervision tree. Options:
# supervised no - no supervision interaction
# supervised upstart - signal upstart by putting Redis into SIGSTOP mode
# supervised systemd - signal systemd by writing READY=1 to $NOTIFY_SOCKET
# supervised auto - detect upstart or systemd method based on
# UPSTART_JOB or NOTIFY_SOCKET environment variables
# Note: these supervision methods only signal "process is ready."
# They do not enable continuous liveness pings back to your supervisor.
supervised systemd

Save and exit the Redis configuration file.

After editing the file, start and enable the Redis service:

# systemctl start redis

# systemctl enable redis

To verify that Redis has installed successfully, we can run following command:

# redis-cli ping

Output:

PONG

If this is the case, it means we now have Redis running on our server and we can begin configuring it to enhance its security.

Step 4 - Configure a Redit password

Configuring a Redis password enables one of its built-in security features — the auth command — which requires clients to authenticate before being allowed access to the database. Like the bind setting, the password is configured directly in Redis’s configuration file, /etc/redis.conf. Reopen that file:

# vi /etc/redis.conf

Find requirepass

# requirepass foobared

Uncomment it by removing the #, and change foobared to a very strong password of your choosing.

After setting the password, save and close the file then restart Redis:

# systemctl restart redis

To test that the password works, open the Redis client:

# redis-cli

A sequence of commands used to verify whether the Redis password is working is as follows. Before authenticating, the first command tries to set a key to a value:

127.0.0.1:6379> set key1 23

That won’t work as you have not yet authenticated, so Redis returns an error:

Output

(error) NOAUTH Authentication required.

The following command authenticates with the password specified in the Redis configuration file:

127.0.0.1:6379> auth your_redis_password

Redis will acknowledge that you have been authenticated:

Output

OK

After that, running the previous command again should be successful:

127.0.0.1:6379> set key1 23

Output

OK

The get key1 command queries Redis for the value of the new key:

127.0.0.1:6379> get key1

Output

"23"

This last command exits redis-cli. You may also use exit:

127.0.0.1:6379> quit

We have successfully seen how to install Redis on AlmaLinux 8 and configure it.