<<

NE-55187C System Administration

Summary

Duration Level Technology Delivery Method Training Credits

Non-Microsoft Products Classroom ILT 4 Days Beginner SATV and Technologies Virtual ILT

Introduction This hands-on 4-day Linux System Administration course teaches attendees how to administer, configure and upgrade Linux systems running one of the three major Linux distribution families (Red Hat, SUSE, Debian/Ubuntu). Focused on enterprise environments, it provides Linux system administrators with all the ools and concepts needed to efficiently build and manage a production Linux infrastructure. This course presents state-of-the-art techniques used in the industry and applies them in the context of practical labs.

Audience profile This course is intended for System administrators and users who already have at least some basic exposure to Linux or another -based constitute the target audience for this class. Anyone who is looking to acquire practical knowledge in the field of system administration in enterprise environments will save significant time by attending this course. It should also be considered a necessary step to be taken by anyone considering more advanced classes in our System Administration curriculum track. The concepts covered provide important building blocks for anyone looking to attend more advanced classes, in particular LFS311: Linux Network Management. Prerequisites Before attending this course, students must have the following technical knowledge: • Knowledge of the basic components of Linux • Familiarity with text editors (emacs, ) • Working knowledge of Bash scripting • Attendees should already have prior exposure to a Linux or UNIX system and practical experience with the command line interface at a level that is equivalent to what is covered in our free LFS101x - Introduction to Linux course (available on edX.org) • Basic tools such as text editors, file utilities and basic tasks are assumed to be well-understood prior to this course Course Objectives After completing this course, students will be able to: • Perform essential Linux commands such as installation, searches and manipulating files • Operate running Linux systems by managing the boot process, scheduling jobs, updating the system, monitoring system performance and managing security • Manage users and groups by adding/deleting/modifying, configuring LDAP and PAM, modifying user processes and resources • Ensure network performance via configuration, monitoring, tunnelling and routing of traffic • Configure services such as DNS, shares, SSH and SELinux/AppArmor as well as servers for DHCP and HTTP • Manage system storage by using partitions, logical volumes, phsyical volumes, ACLs, quotas and clustering Course Content Module 1: Introduction After completing this module, • FHS Linux Standard This module defines the students will be able to: Directory Tree organization responsible for Linux • Describe the mission of • root (/) directory and explains how it promotes, The Linux Foundation and • /bin protects, and advances Linux. its role in the Linux and • /dev Lessons: Open Source community • /etc • Linux Foundation • Configure the system for • /home • Linux Foundation Training safe use via the sudo • /lib and /lib64 • Linux Foundation command • /media Certifications • /mnt • Laboratory Exercises, Module 2: Linux Filesystem Tree • /opt Solutions and Resources Layout • /proc • E-Learning Course: This module explains how the Linux • /sys LFS201 Filesystem is organized and points • /root • Distribution Details out the key directories and their • /sbin Lab: Module 1 Labs roles. • /tmp • Configuring the System for Lessons • /usr sudo • Data Distinctions • /var • /run

Lab: Module 2 Labs • Understand the role and • Stress your Linux system • Change size of the default function of package and monitor results directories management systems • Monitor the performance of • Touring the /proc Filesystem • Understand and use RPM drives and file systems After completing this module, • Understand and use DKPG students will be able to: • Understand the role of Module 7: Linux Filesystems • Describe how the Linux revision control systems, This module explains how to work Filesystem is set up particularly git with Linux Filesystems, starting with • Demonstrate knowledge of the understanding that Linux treats how the key directories Module 5: Package Installers everything as a file. IT covers Virtual work This module explains how to use the filesystem (VFS), Filesystem Usage major package installers, including and Attributes, Major types (ext4, Module 3: Processes yum, zypper and APT. It also XFS, btrfs) and how to create, This module explains how to work explains the role that package format, mount, swap and repair with Linux processes. It begins with installers play in automating Filesystems. an overview of what processes are software management and dealing Lessons and how they work before with dependencies. • Filesystem Basics proceeding to illustrate how to Lessons • Virtual Filesystem (VFS) create, monitor, prioritize and limit • Package Installers • Available Filesystems processes. • yum • Filesystem Concepts Lessons • zypper • Disk and Filesystem Usage • Programs and Processes • APT • Extended Attributes • Process Limits Lab: Module 5 Labs • ext4 • Creating Processes • Basic yum commands • XFS ** • Process States • Using yum to find • btrfs ** • Execution Modes information about a Lab: Module 7 Labs • Daemons package • Defragmenting a system • niceness • Managing groups of • Modifying Filesystem • Libraries packages with yum parameters using tune2fs • Signals • Adding a new yum • Working with file attributes Lab: Module 3 Labs repository • Mounting options • Controlling Processes with • Basic zypper commands • Managing swap space ulimit • Using zypper to find • Filesystem quotas • Examining System V IPC information about a • Working with XFS Activity package • Working with btrfs • Examining Signal Priorities • Basic APT commands After completing this module, and Execution • Using APT to find students will be able to: After completing this module, information about a • Create Filesystems students will be able to: package • Format Filesystems • Describe the role of • Managing groups of • Mount Filesystems processes in Linux and packages using APT • Use swap partitions how they relate to After completing this module, • Manage Filesystem quotas programs students will be able to: • Repair Filesystems • Identify the different states • Describe the role that processes can take package installers play in • Monitor and limit processes managing the software Module 8: Partitioning and • Set process priority using update process Formatting Disks niceness values • Demonstrate proficiency This module explains how to work with APT, yum and zipper with disks in Linux by naming, partitioning and sizing them. Module 4: Package Management Lessons Systems Module 6: System Monitoring • Common Disk Types This module explains how to This module explains how to work • Disk Geometry with the major package monitor your Linux system and use • Partitioning management systems used in Linux tools to test it and report any issues. • Naming Disk Devices distributions. Covers both RPM and Lessons DKPG as well as the use of version • System Monitoring • Sizing up partitions control systems such as git. • Process Monitoring • Partition table editors Lab: Module 8 Labs Lessons • Memory Monitoring and • Software Packaging Tuning • Using a file as a disk partition image Concepts • Network Monitoring • Partioning a Disk Image file • RPM (Red Hat Package • I/O Monitoring • Using losetup and parted Manager) • I/O Scheduling ** • Partitioning a real hard disk • DPKG (Debian Package) • System Log Files After completing this module, • Revision Control Systems • sar ** students will be able to: Lab: Module 4 Labs Lab: Module 6 Labs • Partition disks • Using RPM • Using stress • Name disk drives • Rebuilding the RPM • Processes • Size partitions database • Monitoring Process States • Edit partition tables • Using DKPG • Invoking the OOM Killer • Version control with git • bonnie++ After completing this module, • fs mark Module 9: More on Linux students will be able to: After completing this module, Filesystems students will be able to:

This module expands on Module 8. • Creating Logical Volumes Docker as an example of container It explains how to create, format, After completing this module, technology. mount and check filesystems. students will be able to: Lessons Lessons • Understand, configure and • Containers • Creating and formatting monitor RAID • Docker filesystems • Create, resize and utilize • Docker Commands • Checking and Repairing Logical Volumes Lab: Module 14 Labs Filesystems • Work with LVM snapshots • Install and test Apache • Mounting filesystems (httpd) as a Docker • automount Module 12: Kernel Services and application • Swap Configuration After completing this module, • Filesystem Quotas ** This module explains how the Linux students will be able to: Lab: Module 9 Labs Kernel is configured, how the • Understand the basics of • Mounting Options modules and utilities work, the containers and container • Managing Swap Space function of sysctl and udev and applications • Filesystem Quotas Device Management. • Install and test a Docker After completing this module, Lessons application students will be able to: • Kernel Overview • Create and format a • Kernel Configuration Module 15: User and Group filesystem • sysctl Account Management • Repair a filesystem • Kernel Modules This module explains how to work • Mount/Unmount a • Module Utilities with users and groups in Linux. It filesystem • Module Configuration also covers how to work with • Understand and set up • udev and Device passwords, restricted shells, the filesystem quotas Management root account, Pluggable Lab: Module 12 Labs Authentication Modules (PAM), Module 10: Encrypting Disks • Manipulating system LDAP and SSH. This module explains how to tunables with sysctl. Lessons protect filesystems from prying • Changing the maximum • User Accounts eyes and protect the data they process ID • Management contain. • Working with Kernel • Passwords Lessons modules • Restricted Shells and • Filesystem Encryption • Working with udev Accounts ** • LUKS After completing this module, • The root Account • Using an Encrypted students will be able to: • Group Management Partition • Describe how the Linux • SSH Lab: Module 10 Labs Kernel is configured • PAM (Pluggable • Disk Encryption • Work with Kernel modules Authentication Modules) • Encrypted Swap • Manage devices • Authentication Process After completing this module, • Work with udev and sysctl • Configuring PAM students will be able to: • LDAP Authentication ** • Provide sound reasons for Module 13: Virtualization • File Permissions and using encryption and know Overview Ownership when it is called for This module explains Virtualization, Lab: Module 15 Labs • Understand how LUKS gives a brief history, and shows • Working with user operates through the use how to create and install a virtual accounts of cryptsetup machine. • Working with groups • Be able to set up and use Lessons • Configuring PAM encrypted filesystems and • Introduction to • Using chmod partitions Virtualization After completing this module, • Know how to configure the • Emulation students will be able to: system to mount encrypted • Hypervisors • Manage users and groups partitions at boot • libvirt by • QEMU adding/deleting/modifying Module 11: LVM and RAID • KVM them This module explains how to work Lab: Module 13 Labs • Configure and use LDAP with RAID and Logical Volume • Making Sure KVM is • Configure on use PAM Management (LVM). Properly Set up • Modify user processes and Lessons • Using virt-manager with resources • Logical Volume KVM to Install a Virtual • Appropriately use the root Management (LVM) Machine and Run it account • Volumes and Volume • Extra Credit: Doing from • Use SSH to securely Groups the command line access remote systems • Working with Logical After completing this module, Volumes students will be able to: Module 16: Networking • Resizing Logical Volumes • Create and install a virtual This module explains how to • LVM Snapshots ** machine conduct basic networking in Linux. • RAID ** It covers IP addresses, Hostnames, • RAID Levels ** Module 14: Containers Overview Network Interfaces, Routing and • Software RAID This module explains the basics of Name Resolution. Configuration ** what a container is, what Lessons Lab: Module 11 Labs application virtualization is, and • IP Addresses • Creating a RAID device • Hostnames

• Network Devices • GRUB Configuration Files • Understand enhanced • ip and ifconfig • The init Process security mode in Linux and • Network Configuration • systemd its importance in making Files • SysVinit Startup ** sure permissions are valid • Network Manager • chkconfig and service ** • Become familiar with the • Routing • Upstart ** two most used Linux • DNS and Hostname Lab: Module 18 Labs Security Modules Resolution • Boot into non-graphical • Network Diagnostics mode using GRUB Module 21: Local System Lab: Module 16 Labs • Add a new startup service Security • Static configuration of a with System V This module explains how to network interface • Add a new startup services secure systems against both • Adding a static hostname with system internal and external threats. It • Adding a network interface • Run Shutdown vs. Halt vs. covers how to identify risks and alias Reboot provides guidance on how to After completing this module, After completing this module, decide what protection is students will be able to: students will be able to: appropriate. Finally, it covers the • Explain how IP addresses • Manage startup process in basic types of security available function Linux (physical, filesystem, and security • Manipulate hostnames • Manage shutdown process modules e.g. SELinux). • Configure network in Linux Lessons interfaces • Local System Security • Creating a Security Policy • Route traffic persistently Module 19: Backup and and non-persistently Recovery Methods • Updates and Security • Perform network This module explains how to • Physical Security diagnostics backup data in Linux. It covers the • Filesystem Security tools that are used for backup and Lab: Module 21 Labs Module 17: Firewalls compression as well as for moving • Using SELinux This module explains how to work and copying files and also for • Security and mount options with firewalls in Linux. It covers restoring files. • Using umask both command line tools and GUI Lessons • Usint setuid and scripts tools as well as firewalld. Zones • Backup Basics After completing this module, and source management are • cpio ** students will be able to: discussed, as is service and port • tar • Describe the sources of management. • Compression: gzip, bzip2 threats to system security. Lessons and xz and Backups • Understand the • Firewalls • dd components important to • Interfaces • rsync creating a security policy. • firewalld • dump and restore ** • Demonstrate basic • Zones • mt ** familiarity with SELinux. • Source Management • Backup Programs ** • Service and Port Lab: Module 19 Labs Module 22: Basic Management • Using tar for backup Troubleshooting and System Lab: Module 17 Labs • Using cpio for backup Rescue • Installing firewalld • Using rsync for backup This module explains how to • Examining firewall-cmd After completing this module, conduct troubleshooting in Linux as • Adding services to a zone students will be able to: well as likely sources of issues. It • Using the firewall GUI • Describe the benefits of covers basic concepts in system After completing this module, backup up data rescue and recovery and how to students will be able to: • Demonstrate proficiency identify corrupted filesystems. • Describe the role and with common backup tools Lessons function of firewalls • Demonstrate proficiency • Troubleshooting Overview • Understand the most with common compression • Things to Check: commonly use tools tools Networking • Describe the function of • Boot Process Failures • Filesystem Corruption and zones Module 20: Linux Security Recovery • Implement services on Modules • Virtual Consoles zones This module explains how the Linux kernel enhances security through • Rescue Media and Troubleshooting Module 18: System Startup and the use of the Linux Security • System Rescue and Shutdown Modules framework, particularly Recovery This module explains how to with the deployment of SELinux. Lab: Module 22 Labs manage startup and shutdown Lessons processes in Linux. • Linux Security Modules • Preparing to use Lessons • SELinux Rescue/Recover media • Understanding the Boot • AppArmor • Recovering from a Sequence Lab: Module 20 Labs corrupted GRUB configuration • System Configuration Files • SELinux: Contexts • Recovering from a in /etc • Explore the apparmor password failure • Shutting down/Rebooting security the System After completing this module, • Recovering from partition table corruption • The Grand Unified Boot students will be able to: Loader

• Recovering using the • Describe the common • Identify the cause of install image sources of system issues. After completing this module, corruption/performance • Recover a system after students will be able to: issues. some of the most common types of issues

Associated Certifications & Exam On successful completion of this course students will receive a Torque IT attendance certificate.