Komsan Kamsamur maprangzth

Fedora 36 Post Installation (For Software Developers)

Top N things you should do after installing or upgrading to your new Fedora 36 workstation.

Settings

Change Hostname

This article proved to be a decent starting point, but I was particularly interested in allowing password-based logins to OpenVPN using a username/password backed by FreeIPA (opposed to client certificates) as the identity provider.

IPA join your VPN machine: ipa-client-install --mkhomedir
Get a kerberos ticket: kinit
Create a Kerberos service principle and HBAC rule for openvpn access:

ipa service-add openvpn/`hostname`

Create new hbacrule in console, mark host as the VPN host, and whatever group you want to restrict access to:

Install Openvpn

sudo dnf install openvpn

Configure Path

mv myopenvpconfig /etc/openvpn/client/

Linux NetFilter, IP Tables and Conntrack Diagrams

IPTABLES TABLES and CHAINS

IPTables has the following 4 built-in tables.

1) Filter Table

Filter is default table for iptables. So, if you don’t define you own table, you’ll be using filter table. Iptables’s filter table has the following built-in chains.

Download CoovaChili from Github

On https://github.com/coova/coova-chilli/releases/tag/1.4

Install build dependencies

sudo apt install g++ automake autoconf libtool libltdl-dev gengetopt make cmake libssl-dev

Configure and make

./bootstrap

./configure --prefix=/usr --sysconfdir=/etc --enable-largelimits --enable-miniportal --enable-chilliredir --enable-layer3 --enable-multiroute --with-openssl --with-poll --enable-shared --enable-gardenext --enable-dhcpopt --enable-chillixml --enable-chilliproxy --enable-chilliradsec --enable-eapol --enable-extadmvsa --enable-uamdomainfile --enable-chilliscript --enable-pppoe

First let's update everything I am running all commands as sudo but you run with the level you want

sudo apt-get update -y && sudo apt-get upgrade -y

Now let's install Ruby

	#!/bin/bash
	logstash_response="$(curl --silent localhost:9600)"
	if echo $logstash_response \| grep -q '"status":"green"'
	then
	echo "Logstash is green. It's ok :-)"
	exit 0
	else
	echo "Logstash is not green :-( plz help"
	exit 1
	fi

	version: '3.7'

	services:

	# Elasticsearch Docker Images: https://www.docker.elastic.co/
	elasticsearch:
	image: docker.elastic.co/elasticsearch/elasticsearch:7.4.0
	container_name: elasticsearch
	environment:
	- xpack.security.enabled=false

	.ssh_deploy_template: &ssh_deploy_template
	# TEMPLATE - see https://docs.gitlab.com/ee/ci/yaml/README.html#anchors
	# ...

	# Here's the magic to get the code from the GitLab variable into a bash variable and then even executed on an SSH session
	script:
	# Put gitlab variable into shell variable to improve quote handling
	- CMD=$SCRIPT_CMD
	# Print for debugging
	- echo -e "Executing:\n$CMD"

	apt-get update

	apt-get install -y g++ automake autoconf libtool libltdl-dev gengetopt make cmake libssl-dev libjson-c2 libjson-c-dev

	git clone https://github.com/coova/coova-chilli

	cd coova-chilli

	git checkout 1.4