Filip

Linux

Základní balíčky pro chod vmware serveru

sudo apt update
sudo apt install htop mc ssh sudo wget curl git net-tools open-vm-tools

---

Možné zabezpečen server antivirem a firewalem

sudo apt update
sudo apt install clamav clamav-freshclam clamav-daemon ufw

• https://wiki.mikrotik.com/wiki/Use_Mikrotik_as_Fail2ban_firewall

Základní nastavení UFW

ufw allow ssh
ufw enable

---

Užitečný přikazy pro usnadnění práce

sudo apt update
sudo apt install fzf ncdu dos2unix

• fzf - Fuzzy finder better find
• ncdu - NCurses disk usage better du
• dos2unix - Smaže divý ^M ze souboru
• ll - Je to ls -l, musí se vytvořit alias

---

ZSH ZSH není dobrý s mc, radši používat nnn?

sudo apt install nnn

sudo apt update
sudo apt install zsh

Pro přenastavení BASH na ZSH pro účet

sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"

Stáhnutí theme a plugins

git clone --depth=1 https://github.com/romkatv/powerlevel10k.git ${ZSH_CUSTOM:-$HOME/.oh-my-zsh/custom}/themes/powerlevel10k
git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions
git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting

Propojení theme a plugins v configu .zshrc

ZSH_THEME="powerlevel10k/powerlevel10k"
plugins=(git nomad zsh-autosuggestions zsh-syntax-highlighting)

---

Vypnutí swap kvůli virtualizace kontejnerů

sudo swapoff -a; sudo swapon -a

---

Instalace pip3 pro pluginy pythonu

sudo apt update
sudo apt install python3-pip

Docker

Nastavení depositáře

sudo apt update
sudo apt install ca-certificates curl gnupg

sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg

echo \
 "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
 "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | \
 sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

---

Nainstalování dockeru bez compose

sudo apt update
sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin

---

Override system pro otevření socketu ven

sudo mkdir /etc/systemd/system/docker.service.d
touch /etc/systemd/system/docker.service.d/override.conf

/etc/systemd/system/docker.service.d/override.conf

[Service]
ExecStart=
ExecStart=/usr/bin/dockerd -H unix:///var/run/docker.sock -H tcp://IP_ADRESA:2735 --ipv6=false --tls=false

Restartování docker service

systemctl restart docker.socket

pozn - zkusit upravit cofig

Nomad

Instalace nomada

sudo apt-get update && \ sudo apt-get install wget gpg coreutils
wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
sudo apt-get update && sudo apt-get install nomad

---

Cli pluginy pro nomad

curl -L -o cni-plugins.tgz https://github.com/containernetworking/plugins/releases/download/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz
sudo mkdir -p /opt/cni/bin
sudo tar -C /opt/cni/bin -xzf cni-plugins.tgz

---

Config hcl file pro nastavení nomada

mkdir /var/log/nomad

# Full configuration options can be found at https://www.nomadproject.io/docs/configuration

bind_addr = "0.0.0.0"
data_dir  = "/opt/nomad/data"
datacenter = "NAZEV_TOHO_SERVER" 

enable_syslog = true
log_level = "INFO"
log_file = "/var/log/nomad/"

advertise {
  http = "{{GetInterfaceIP \"ens192\"}}"
  rpc  = "{{GetInterfaceIP \"ens192\"}}"
  serf = "{{GetInterfaceIP \"ens192\"}}"
}

server {
  enabled = true
  bootstrap_expect = 2
  server_join {
    retry_join = [ "IP_ADDRESA_JEDNOHO_SERVER", "IP_ADDRESA_DRUHEHO_SERVER" ]
    retry_interval = "15s"
  }
}

client {
  enabled = true
  servers = [ "localhost" ]
  cni_path = "/opt/cni/bin"
}

plugin "raw_exec" {
  config {
    enabled = true
  }
}

plugin "docker" {
  config {
    gc {
      dangling_containers {
        enabled = false
      }
    }
  }
}

---

Restartování a zanutí service nomada

systemctl enable nomad
systemctl restart nomad