View source for Configure new RHEL-5.5 VM on IBM cloud

[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[New machine configuration]] > [[Configure new RHEL-5.5 VM on IBM cloud]]

==Converting private key to ppk file using puttygen==

#Download puttygen application from Internet
#Run puttygen and use 'Load' option to load supplied private key file.
#Then use 'Save private key' file to save private key in some safe location.

Note that by default IBM cloud images have root account disabled and allow only key based authentication for user named 'idcuser'. Hence we have to use the key file provided during VM creation to create PPK file and then use the PPK file to log into server using user 'idcuser'.



==Logging into server with help of PPK file==

# Start putty
# Type the VM IP address in the host name box.
# Go to 'Connection -&gt; Data'. Type Auto-login username as 'idcsser'
# Go to 'Connection -&gt; SSH -&gt; Auth'. Select 'Allow attempted changes of username in SSH-2' Also use Browse button and select PPK file generated using puttygen in above steps.
# Again go to Session and type some descriptive name for VM in 'Saved Sessions' box. Click on 'Save' to save current session settings.
# Click on 'open' to connect to VM using idcuser.



==Enabling login as root user==

# Change root shell to using '<tt>sudo /usr/sbin/usermod -s /bin/bash root</tt>' command.
# Try logging into root user using '<tt>sudo su -</tt>' command.
# Install vim using '<tt>yum install vim-enhanced</tt>' command.
# Edit '<tt>/etc/ssh/sshd_config</tt>' file and make following changes:
#:<pre>
#::PermitRootLogin yes
#::PasswordAuthentication yes
#::Comment line 'Allowedusers idcuser'
#:</pre>
# Use '<tt>passwd</tt>' command to set new root password.
# Use '<tt>service sshd restart</tt>' to allow root login using password through ssh

*Change putty profile and change Auto-login username to 'root' and use '<tt>cp /home/idcuser/.ssh/authorized_keys /root/.ssh/authroized_keys</tt>'



==Configuring bash profile to keep command history with timestamps==

# Go to folder '<tt>/etc/profile.d</tt>'.
# Create file named '<tt>history.sh</tt>' with following contents
#:<pre>
#:: #!/bin/sh
#:: HISTTIMEFORMAT="%y %m %d %T "
#:: HISTSIZE=100000
#:: HISTFILESIZE=100000
#:: export HISTTIMEFORMAT HISTSIZE HISTFILESIZE
#:</pre>
# <tt>chmod +x history.sh</tt>
# Use '<tt. ./history.sh</tt>'
# Type '<tt>history</tt>' command and verify that command history is being stored with timestamps.



==Changing VM hostname to something meaningful==

# Use '<tt>hostname &lt;new_hostname&gt;' command to change machine hostname.
# Edit file '<tt>/etc/sysconfig/network</tt>' and type same hostname in the file.
# Edit file '<tt>/etc/hosts</tt>' and type same hostname for 127.0.0.1. You can ensure that entries for old hostnames are removed.
# Exit from vm and connect back to it to verify that hostname has been changed.



==Configure denyhosts to prevent ssh bruteforce attempts==

Follow steps mentioned on [[Configuring new denyhosts server from source]]



==Allow ICMP echo packets using firewall==

# Edit file '<tt>/etc/sysconfig/iptables</tt>'
# Add line '<tt>-A INPUT -p icmp --icmp-type echo-request -j ACCEPT</tt>'
# <tt>service iptables restart</tt>


==Configuring rpmfusion repository==

# Use '<tt>rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-4.noarch.rpm</tt>' to enable epel on system
# Then download latest RHEL configuration file from http://www.rpmfusion.org/
# Install downloaded rpm using '<tt>rpm -ivh &lt;rpm_file&gt;</tt>' command



[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[New machine configuration]] > [[Configure new RHEL-5.5 VM on IBM cloud]]