174 lines
3.7 KiB
Markdown
174 lines
3.7 KiB
Markdown
# OpenBSD-Notes
|
|
|
|
Time saver scripts installing and configuring basic stuff on secure OpenBSD installations
|
|
|
|
### ksh
|
|
|
|
add stuff to `./profile`
|
|
|
|
- **aliases** coloring ls and grep, cd with many dots, git basic commands
|
|
- **prompt.ksh** coloring the prompt, adding git branch, latest exit code, [SSH]
|
|
- **srm.ksh** alias for real rm, show first 10 lines before delete aprovion
|
|
|
|
### netstat
|
|
|
|
shows net sockecks with parent pid and command
|
|
|
|
- **netstat-tulp.sh:** like the linux command netstat -tulp
|
|
|
|
```
|
|
# netstat-tulp.sh
|
|
PROTO LOCAL ADDRESS PID USER COMMAND
|
|
----- ------------------- -------- --------- -------
|
|
tcp4 192.168.0.2:22461 14372 root curl https://git.vaidis.eu/stevaidis
|
|
tcp4 192.168.1.1:22 34378 stevaidi sshd-session: stevaidis@ttyp1 (sshd-session)
|
|
tcp4 192.168.1.1:22 4220 root sshd-session: stevaidis [priv] (sshd-session)
|
|
udp4 *:0 27528 _iftop iftop
|
|
tcp4 *:22 64524 root sshd: /usr/sbin/sshd [listener] (sshd)
|
|
udp4 *:0 24588 _dhcp dhcpleased: frontend (dhcpleased)
|
|
udp4 *:0 34598 root /sbin/dhcpleased
|
|
udp6 *:0 71243 _slaacd slaacd: frontend (slaacd)
|
|
udp6 *:0 84073 root /sbin/slaacd
|
|
```
|
|
|
|
### Enviroment
|
|
- prompt : color prompt, git branch, latest exit Code
|
|
- navigation: color ls
|
|
- working : color grep, git aliases (ga, gs, gd, gc, gp)
|
|
|
|
### Packages
|
|
- **ggrep:** pair with shell alias, coloring grep output
|
|
- **vim:** zero plguns, molokai theme, common keymaps from popular distros, tabs,
|
|
- **git:** must
|
|
- **iftop:** monitor network traffic
|
|
- **tcpdump:** monitor network packages
|
|
- **curl:** http client
|
|
|
|
### Vim
|
|
- **.vim/colors/molokai.vim:** light modified black side numbers, black tabline, transparent
|
|
- **.vimrc:** common keymaps for file managers, tabs navigation, cursons, keymaps help screen
|
|
|
|
## Install
|
|
|
|
```
|
|
git clone
|
|
cd openbsd-onboard
|
|
./install.ksh
|
|
./install-firewall.ksh
|
|
./install-dhcp.ksh
|
|
./install-lamp.ksh
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
set -o vi
|
|
|
|
|
|
# WEB SERVER
|
|
|
|
WEB
|
|
|
|
```sh
|
|
# Configure
|
|
cp -p /etc/examples/httpd.conf /etc/
|
|
nvim /etc/httpd.conf
|
|
|
|
# Start
|
|
rcctl enable httpd
|
|
rcctl start httpd
|
|
rcctl status httpd
|
|
|
|
# Check
|
|
fstat | grep ':80'
|
|
httpd -n
|
|
|
|
# Test
|
|
|
|
```
|
|
|
|
PHP
|
|
|
|
```sh
|
|
pkg_info -Q php | grep 7.4
|
|
pkg_info -Q php | grep 8.1
|
|
pkg_add wget unzip composer git
|
|
pkg_add libxml xz png jpeg libiconv
|
|
|
|
pkg_add `pkg_info -Q php | grep 7.4.33 | grep -v debug`
|
|
# The following new rcscripts were installed:
|
|
#
|
|
# /etc/rc.d/apache2
|
|
# /etc/rc.d/netsnmpd
|
|
# /etc/rc.d/netsnmptrapd
|
|
# /etc/rc.d/php74_fpm
|
|
# /etc/rc.d/saslauthd
|
|
```
|
|
|
|
Database
|
|
|
|
```sh
|
|
# Installation
|
|
pkg_add mariadb-server php_mysqli php_pdo_mysql
|
|
|
|
# Start
|
|
rcctl enable mysqld
|
|
rcctl start mysqld
|
|
rcctl check mysqld
|
|
|
|
# Setup
|
|
mysql_install_db # create system tables and binary files
|
|
mysql_secure_installation # Enable socket at /var/run/mysql.sock
|
|
```
|
|
|
|
`/etc/my/cnf`
|
|
|
|
```ini
|
|
[client-server]
|
|
socket=/var/run/mysql/mysql.sock
|
|
port=3306
|
|
```
|
|
|
|
Test mysql
|
|
|
|
```sh
|
|
mysql -uroot -p1234 -e 'CREATE USER drupal@localhost IDENTIFIED BY "1234"'
|
|
mysql -uroot -p1234 -e 'CREATE DATABASE drupal'
|
|
mysql -uroot -p1234 -e 'GRANT ALL ON drupal.* TO drupal@localhost'
|
|
mysql -uroot -p1234 -e 'FLUSH PRIVILEGES'
|
|
```
|
|
|
|
Test php mysql
|
|
|
|
`/var/www/htdocs/test.php`
|
|
|
|
```php
|
|
<?php
|
|
$servername = "127.0.0.1";
|
|
$user = "drupal";
|
|
$pass = "1234";
|
|
$conn = new mysqli($servername, $user, $pass);
|
|
if ($conn->connect_error) {
|
|
die("Database Connection failed: " . $conn->connect_error);
|
|
}
|
|
echo "Database connected successfully, Congratulations ";
|
|
?>
|
|
```
|
|
|
|
```sh
|
|
curl http://localhost/test.php
|
|
```
|
|
|
|
HTTPD
|
|
|
|
```sh
|
|
```
|
|
|
|
|
|
|
|
|