Bob Mottram 11 gadus atpakaļ
vecāks
revīzija
6f6baed33c
1 mainītis faili ar 17 papildinājumiem un 204 dzēšanām
  1. 17
    204
      beaglebone.txt

+ 17
- 204
beaglebone.txt Parādīt failu

232
 Then make a new user.  It's a bad idea to add users to the sudo group, because that then means that an attacker potentially only needs to know one password in order to get administrator access to the system.  With no sudoers an attacker needs to know, or be able to obtain, two separate passwords to be able to really compromise the system.
232
 Then make a new user.  It's a bad idea to add users to the sudo group, because that then means that an attacker potentially only needs to know one password in order to get administrator access to the system.  With no sudoers an attacker needs to know, or be able to obtain, two separate passwords to be able to really compromise the system.
233
 
233
 
234
 #+BEGIN_SRC: bash
234
 #+BEGIN_SRC: bash
235
-adduser /username/
235
+adduser myusername
236
 #+END_SRC
236
 #+END_SRC
237
 
237
 
238
 Exit from the ssh login by typing "exit" a couple of times, then ssh back in as the new user.  Make sure you use a difficult to guess password/phrase, or ideally a randomly generated password used together with a password manager such as KeepassX.
238
 Exit from the ssh login by typing "exit" a couple of times, then ssh back in as the new user.  Make sure you use a difficult to guess password/phrase, or ideally a randomly generated password used together with a password manager such as KeepassX.
1173
 -- Richard Stallman, Free Software Foundation
1173
 -- Richard Stallman, Free Software Foundation
1174
 #+END_VERSE
1174
 #+END_VERSE
1175
 
1175
 
1176
-*** Installation
1176
+*** Friendica
1177
+**** Installation
1177
 #+BEGIN_SRC: bash
1178
 #+BEGIN_SRC: bash
1178
 apt-get install mysql-server php5-common php5-cli php5-curl php5-gd php5-mysql php5-mcrypt
1179
 apt-get install mysql-server php5-common php5-cli php5-curl php5-gd php5-mysql php5-mcrypt
1179
 #+END_SRC
1180
 #+END_SRC
1243
 service cron restart
1244
 service cron restart
1244
 #+END_SRC
1245
 #+END_SRC
1245
 
1246
 
1246
-*** Backups
1247
+**** Backups
1247
 
1248
 
1248
 Make sure that the database gets backed up.  By using cron if anything goes wrong then you should be able to recover the database either from the previous day or the previous week.
1249
 Make sure that the database gets backed up.  By using cron if anything goes wrong then you should be able to recover the database either from the previous day or the previous week.
1249
 
1250
 
1298
 chmod +x /etc/cron.weekly/friendicabackup
1299
 chmod +x /etc/cron.weekly/friendicabackup
1299
 #+END_SRC
1300
 #+END_SRC
1300
 
1301
 
1301
-*** Recommended configuration
1302
+**** Recommended configuration
1302
 **** Admin
1303
 **** Admin
1303
 To get to the admin settings you will need to be logged in with the admin email address which you specified at the beginning of the installation procedure.  Depending upon the theme which you're using "/admin/" will be available either as an icon or on a drop down menu.
1304
 To get to the admin settings you will need to be logged in with the admin email address which you specified at the beginning of the installation procedure.  Depending upon the theme which you're using "/admin/" will be available either as an icon or on a drop down menu.
1304
 
1305
 
1318
 Under *display settings* select your desktop and mobile themes.
1319
 Under *display settings* select your desktop and mobile themes.
1319
 
1320
 
1320
 Once you have connected to enough friends it's also a good idea to use the "/export personal data/" option from here.  This will save a file to your local system, which you can import into another friendica node if necessary.
1321
 Once you have connected to enough friends it's also a good idea to use the "/export personal data/" option from here.  This will save a file to your local system, which you can import into another friendica node if necessary.
1321
-*** To access from an Android device
1322
+**** To access from an Android device
1322
 **** App
1323
 **** App
1323
 Open a browser on your device and go to https://f-droid.org/ then download and install the F-Droid apk.  If you then open F-Droid you can search for and install the Friendica app.
1324
 Open a browser on your device and go to https://f-droid.org/ then download and install the F-Droid apk.  If you then open F-Droid you can search for and install the Friendica app.
1324
 
1325
 
1544
 
1545
 
1545
 #+BEGIN_SRC: bash
1546
 #+BEGIN_SRC: bash
1546
 apt-get install ircd-hybrid
1547
 apt-get install ircd-hybrid
1547
-#+END_SRC
1548
-
1549
-This will install the IRC server and run it on ports (6666.6669) TCP
1550
-You can connect to the server by visiting 127.0.0.1 with your irc client
1551
-————————————————————————————————
1552
-
1553
-Because hybrid doesn’t support OpenSSL by default, you have to do a manual patch to get it working
1554
-
1555
-1- First we OpenSSL package for ssl certificate
1556
-
1557
-#+BEGIN_SRC: bash
1558
-apt-get install openssl libssl-dev
1559
-#+END_SRC
1560
-
1561
-2- Second we need hybrid source to patch it:
1562
-
1563
-#+BEGIN_SRC: bash
1564
-mkdir hybrid; cd hybrid
1565
-apt-get install openssl libssl-dev
1566
-apt-get source ircd-hybrid
1567
-#+END_SRC
1568
-
1569
-To enable SSL
1570
-
1571
-#+BEGIN_SRC: bash
1572
-emacs ircd-hybrid-*/debian/rules
1573
-#+END_SRC
1574
-
1575
-Add at the top:
1576
-
1577
-#+BEGIN_SRC: bash
1578
-USE_OPENSSL = 1
1579
-#+END_SRC
1580
-
1581
-So the file should looks like:
1582
-
1583
-#+BEGIN_SRC: bash
1584
-1# ...
1585
-2# Some useful stuff to edit here.
1586
-3# Beware: TOPICLEN may not exceed 390.
1587
-4NICKLEN = 15
1588
-5TOPICLEN = 350
1589
-6MAXCLIENTS = 200
1590
-7USE_OPENSSL = 1
1591
-8# ...
1592
-#+END_SRC
1593
-
1594
-Rebuild the deb-file and install it:
1595
-
1596
-#+BEGIN_SRC: bash
1597
-cd ircd-hybrid-*
1598
-apt-get install build-essential debhelper dpatch docbook-to-man flex bison libpcre3-dev
1599
-dpkg-buildpackage -rfakeroot -uc -b
1600
-cd ..
1601
-dpkg -i ircd-hybrid_*.deb
1602
-#+END_SRC
1603
-
1604
-Edit connect, listen and operator:
1605
-
1606
-#+BEGIN_SRC: bash
1607
 emacs /etc/ircd-hybrid/ircd.conf
1548
 emacs /etc/ircd-hybrid/ircd.conf
1608
 #+END_SRC
1549
 #+END_SRC
1609
 
1550
 
1610
-Edit the connect section.
1551
+Set *name* to the name of your server, and set a description.
1611
 
1552
 
1612
-#+BEGIN_SRC: c
1613
-connect {
1614
-        /* name: the name of the server */
1615
-        name = "myircdomainname.com";
1553
+Set a *network_name* and *network_desc*.
1616
 
1554
 
1617
-        /* host: the host or IP to connect to.  If a hostname is used it
1618
-         * must match the reverse dns of the server.
1619
-         */
1620
-        host = "127.0.0.1";
1555
+Set max_clients to 20.
1621
 
1556
 
1622
-        /* passwords: the passwords we send (OLD C:) and accept (OLD N:).
1623
-         * The remote server will have these passwords reversed.
1624
-         */
1625
-        send_password = "password";
1626
-        accept_password = "password";
1557
+Within the admin section set your *name* and *email*.
1627
 
1558
 
1628
-        /* compressed: controls whether traffic is compressed via ziplinks.
1629
-         * By default this is disabled
1630
-         */
1631
-        compressed = yes;
1632
-};
1559
+Within the *listen* section set host to your fixed IP address (in the earlier
1560
+sections it was 192.168.1.60).
1633
 
1561
 
1634
-/* listen {}: contain information about the ports ircd listens on (OLD P:) */
1635
-listen {
1636
-/* port: the specific port to listen on. if no host is specified
1637
- * before, it will listen on all available IPs.
1638
- *
1639
- * ports are seperated via a comma, a range may be specified using ".."
1640
- */
1641
-
1642
-/* port: listen on all available IPs, ports 6665 to 6669 */
1643
-host = "127.0.0.1";
1644
-port = 6665 .. 6669;
1645
-
1646
-/* sslport: ports to accept ONLY ssl connections on */
1647
-flags = ssl;
1648
-port = 6697
1649
-};
1650
-#+END_SRC
1651
-
1652
-Generate a password for the IRC operator using mkpasswd tool
1653
-
1654
-#+BEGIN_SRC: bash
1655
-mkpasswd -Hmd5
1656
-#+END_SRC
1657
-
1658
-Search for operator block and change it to look like this:
1659
-
1660
-#+BEGIN_SRC: c
1661
-# ...
1662
-operator {
1663
-/* name: the name of the oper */
1664
-name = "root";
1665
-
1666
-/* user: the user@host required for this operator. CIDR is not
1667
- * supported. multiple user="" lines are supported.
1668
- */
1669
-user = "*@*";
1670
-
1671
-/* password: the password required to oper. By default this will
1672
- * need to be encrypted using '/usr/bin/mkpasswd'.
1673
- * WARNING: Please do not mix up the 'mkpasswd' program from
1674
- * /usr/sbin with this one. If you are root, typing 'mkpasswd'
1675
- * will run that one instead and you will receive a strange error.
1676
- *
1677
- * MD5 is supported. If you want to use it, use mkpasswd -Hmd5.
1678
- */
1679
-password = "#MD5 PASSWORD HERE#";
1680
-# ...
1681
-#+END_SRC
1562
+Within the *auth* section set user = "*@192.168.1.60" - or whatever the fixed IP address of the BBB is on your network.
1682
 
1563
 
1683
 Save and exit.
1564
 Save and exit.
1684
 
1565
 
1686
 service ircd-hybrid restart
1567
 service ircd-hybrid restart
1687
 #+END_SRC
1568
 #+END_SRC
1688
 
1569
 
1689
-Now open ports 6665 to 6669 on your internet router/firewall.
1690
-
1691
-After connecting to IRC server you should see something like this:
1692
-
1693
-#+BEGIN_SRC: bash
1694
-23:50 -!- - hybrid7.debian.local Message of the Day -
1695
-23:50 -!- -         _,met$$$$$gg.       ircd-hybrid 7.2.2
1696
-23:50 -!- -      ,g$$$$$$$$$$$$$$$P.    -----------------
1697
-23:50 -!- -    ,g$$P""       """Y$$.".
1698
-23:50 -!- -   ,$$P'              `$$$.  If you are seeing this, you have
1699
-23:50 -!- - ',$$P       ,ggs.     `$$b: installed the ircd-hybrid package and
1700
-23:50 -!- - `d$$'     ,$P"'   .    $$$  you are now connected to your new IRC
1701
-23:50 -!- -  $$P      d$'     ,    $$P  server -- congratulations.
1702
-23:50 -!- -  $$:      $$.   -    ,d$$'
1703
-23:50 -!- -  $$;      Y$b._   _,d$P'    Since you have just installed the
1704
-23:50 -!- -  Y$$.    `.`"Y$$$$P"'       package, there are some things you
1705
-23:50 -!- -  `$$b      "-.__            should do before going any further:
1706
-23:50 -!- -   `Y$$b
1707
-23:50 -!- -    `Y$$.                    1. Edit /etc/ircd-hybrid/ircd.conf to
1708
-23:50 -!- -      `$$b.                  suit your needs. Beware some options have
1709
-23:50 -!- -        `Y$$b.               been removed or moved into other blocks in
1710
-23:50 -!- -          `"Y$b._            the configuration file since
1711
-23:50 -!- -             `""""           ircd-hybrid 7.0.3.
1712
-23:50 -!- -
1713
-23:50 -!- -                             2. Edit /etc/ircd-hybrid/ircd.motd (this
1714
-23:50 -!- -                             MOTD) to suit your needs. You are free
1715
-23:50 -!- -                             to use this Debian swirl under the
1716
-23:50 -!- -                             Debian Open Use Logo License. :)
1717
-23:50 -!- -
1718
-23:50 -!- -                             3. Restart the server using invoke-rc.d
1719
-23:50 -!- -                             ircd-hybrid restart.
1720
-23:50 -!- -
1721
-23:50 -!- -                             -- Joshua Kwan
1722
-23:50 -!- -                             -- Aurélien GÉRÔME
1723
-23:50 -!- End of /MOTD command.
1724
-#+END_SRC
1725
-
1726
-We can change the motd message by editing */etc/ircd-hybrid/ircd.motd*
1727
-Hint: Don’t forget to restart the service */etc/init.d/ircd-hybrid restart*
1728
-
1729
-Now if your have ever used IRC before you will be familiar with NickServ and ChanServ, well these are addons services for IRC and they come in vary useful when configuring chat channels and users.
1730
-We we will use hybserv and to install it:
1731
-
1732
-#+BEGIN_SRC: bash
1733
-apt-get install hybserv
1734
-#+END_SRC
1735
-
1736
-Then edit /etc/hybserv/hybserv.conf to look like this, remember to change #MD5 PASSWORD HERE# to the other password we setup earlier:
1737
-
1738
-#+BEGIN_SRC: bash
1739
-O:*@*:#MD5 PASSWORD HERE#:root:segj
1740
-A:YOUR NAME
1741
-N:irc.example.com:Hybrid services
1742
-S:password:127.0.0.1:6667
1743
-#+END_SRC
1744
-
1745
-now we need to restart the ircd and hybrid server to make things work:
1746
-
1747
-#+BEGIN_SRC: bash
1748
-/etc/init.d/ircd-hybrid restart
1749
-/etc/init.d/hybserv restart
1750
-#+END_SRC
1751
-
1752
-And that’s it you should have a Basic IRC server running with the NickServ and ChanServ bots running.
1753
-
1754
 Try to connect to the IRC and identify yourself as an operator.
1570
 Try to connect to the IRC and identify yourself as an operator.
1755
 
1571
 
1756
 In irssi:
1572
 In irssi:
1757
 
1573
 
1758
 #+BEGIN_SRC
1574
 #+BEGIN_SRC
1759
-/connect -ssl irc.example.com 6667 ircpassowrd YourNick
1575
+/connect mydomainname.com
1576
+/join #mychannel
1577
+/msg -servername chanserv REGISTER #mychannel channelpassword
1578
+/msg -servername chanserv set #mychannel mlock +k channelpassword
1760
 #+END_SRC
1579
 #+END_SRC
1761
 
1580
 
1762
-/join #spatula
1763
-/msg -servername chanserv REGISTER #spatula channelpassword
1764
-/msg -servername chanserv set #spatula mlock +k channelpassword
1765
-
1766
 ** Install Gopher
1581
 ** Install Gopher
1767
 Gopher is an old internet protocol which originated a few years before the web and is purely text based.  It can be quite fun to build a gopher site and browse the gopherverse.  One thing to keep in mind is that there is no security with gopher, so any text transmitted is trivially interceptable by systems such as [[https://en.wikipedia.org/wiki/XKeyscore][Xkeyscore]] or deep packet inspection.
1582
 Gopher is an old internet protocol which originated a few years before the web and is purely text based.  It can be quite fun to build a gopher site and browse the gopherverse.  One thing to keep in mind is that there is no security with gopher, so any text transmitted is trivially interceptable by systems such as [[https://en.wikipedia.org/wiki/XKeyscore][Xkeyscore]] or deep packet inspection.
1768
 
1583
 
2248
 
2063
 
2249
 With a web browser visit your domain and enter an administrator username and password.
2064
 With a web browser visit your domain and enter an administrator username and password.
2250
 
2065
 
2251
-** Install Gitlab
2252
-
2253
 ** Install Tripwire
2066
 ** Install Tripwire
2254
 
2067
 
2255
 Tripwire will try to detect any intrusions into your system. It's a good idea to install it after you have installed all of the other programs which you intend to use.
2068
 Tripwire will try to detect any intrusions into your system. It's a good idea to install it after you have installed all of the other programs which you intend to use.