2주차

Transcription

1 2 주차 하드마운트 / 포맷 / 포맷별장단점 Vsftpd 설치 / samba 설치 / 계정권한관리 / 파일권한관리

2 openssh-server 설정 편하게진행하기위해서 root 계정접속가능설정 아래설정을하지않으면일반계정으로접근하여 sudo 나 su 명령을사용해야함. nano /etc/ssh/sshd_config PermitRootLogin yes service ssh restart

3 물리하드파티션정보확인 (/dev/sdx) ls /dev grep sd sda sda1 sda2 sda5

4 /dev 에잡히는하드디스크파티션정보 하드디스크전체 sda sdb sdc sdd sde sdf 하드디스크의파티션 sda1 sda2 sda3. sdb1 sdb2 sdb3.. 씨디롬 cdrom0 cdrom1 cdrom2 파티션을생성하지않고전체를포맷할수있음 mkfs.ext4 /dev/sda ( 비추천 )

5 물리하드파티션정보확인 (fdisk) fdisk -l Disk /dev/sda: 50 GiB, bytes, sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0x61385b62 Device Boot Start End Sectors Size Id Type /dev/sda1 * G 83 Linux /dev/sda G 5 Extended /dev/sda G 82 Linux swap / Solaris root@debian:~#

6 새로운하드추가 ( 버추얼박스 )

7 새로운하드추가 ( 버추얼박스 ) 완료

8 추가한하드확인 ls /dev/ grep sd sda sda1 sda2 sda5 sdb fdisk -l Disk /dev/sda: 50 GiB, bytes, sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0x61385b62 Device Boot Start End Sectors Size Id Type /dev/sda1 * G 83 Linux /dev/sda G 5 Extended /dev/sda G 82 Linux swap / Solaris Disk /dev/sdb: 64 GiB, bytes, sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes root@debian:~#

9 하드파티션생성하기 (fdisk) fdisk /dev/sdb Welcome to fdisk (util-linux ). Changes will remain in memory only, until you decide to write them. Be careful before using the write command. Device does not contain a recognized partition table. Created a new DOS disklabel with disk identifier 0xad2ff97f. Command (m for help): 파티션생성 n / 파티션제거 d

10 전체용량을잡는파티션생성 (fdisk) Command (m for help): n // 새로만들기 Partition type p primary (0 primary, 0 extended, 4 free) e extended (container for logical partitions) // 파티션타입선택 Select (default p): p // primary 로선택 Partition number (1-4, default 1): 1 // 파티션넘버 1번선택 First sector ( , default 2048): // 그냥엔터치면 2048 Last sector, +sectors or +size{k,m,g,t,p} ( , default ): // 그냥엔터치면최대치 Created a new partition 1 of type 'Linux' and of size 64 GiB. // 파티션생성됨 Command (m for help): w // 지금작업을디스크에기록하는과정 The partition table has been altered. Calling ioctl() to re-read partition table. Syncing disks.

11 마운트방법 (mount) ntfs : ( 파일엑세스에데몬사용 ) apt-get install ntfs-3g mount t ntfs /dev/sdb1 /media/volume1 fat : mount t fat /dev/sdb1 /media/volume1 ext4 : mount t ext4 /dev/sdb1 /media/volume1 xfs : ( 파일시스템엑세스에데몬사용 ) apt-get install xfsprogs mount t xfs /dev/sdb1 /media/volume1

12 파티션 EXT4 로포맷 (mkfs) mkfs.ext4 /dev/sdb1 mke2fs (29-Aug-2014) Creating filesystem with k blocks and inodes Filesystem UUID: 3eea1c67-e8e4-4d4e-8a33-8e20a979936d Superblock backups stored on blocks: 32768, 98304, , , , , , , , , , Allocating group tables: done Writing inode tables: done Creating journal (32768 blocks): done Writing superblocks and filesystem accounting information: done

13 파티션포맷 (mkfs) ntfs : ntfs-3g 패키지필요 mkfs.ntfs /dev/sdb1 (-f 옵션으로빠른포맷가능 ) ext4 : mkfs.ext4 /dev/sdb1 xfs : mkfs.xfs /dev/sdb1

14 마운트하기 (mount) mkdir /media/volume1 mount -t ext4 /dev/sdb1 /media/volume1 ls /media/volume1 lost+found mount t [ 타입 ] [ 장치 ] [ 경로 ]

15 마운트되었는지간단히확인 df -h Filesystem Size Used Avail Use% Mounted on /dev/sda1 48G 696M 45G 2% / udev 10M 0 10M 0% /dev tmpfs 201M 4.4M 196M 3% /run tmpfs 501M 0 501M 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 501M 0 501M 0% /sys/fs/cgroup /dev/sdb1 63G 52M 60G 1% /media/volume1 root@debian:~#

16 파일하나써보기 touch /media/volume1/test ls /media/volume1/ lost+found test

17 재부팅시에도자동마운트설정 (fstab,rc.local) nano /etc/fstab /dev/sdb1 /media/volume1 ext4 defaults 0 0 ( 비추천 ) root@debian:~# nano /etc/rc.local mount -t ext4 /dev/sdb1 /media/volume1

18 하드가여러개? UUID 마운트 blkid /dev/sda1: UUID="ce0c a9-a90a-e2ee51975d29" TYPE="ext4" PARTUUID="61385b62-01" /dev/sda5: UUID="a6ed915b-04b8-46ac-8fca-21d07b1615e4" TYPE="swap" PARTUUID="61385b62-05" /dev/sdb1: UUID="3eea1c67-e8e4-4d4e-8a33-8e20a979936d" TYPE="ext4" PARTUUID="ad2ff97f-01" UUID="3eea1c67-e8e4-4d4e-8a33-8e20a979936d /media/volume1 ext4 defaults 0 0

19 언마운트 (umount) umount /media/volume1 옵션 : -l lazy umount -f force umount

20 ftp 서버설치하기 ( 패키지목록갱신 ) root@debian:~# apt-get update Hit jessie/updates InRelease Ign jessie InRelease Hit jessie/updates/main Sources Get:1 jessie-updates InRelease [145 kb].. Hit jessie/main Translation-en Fetched 158 kb in 7s (22.5 kb/s) Reading package lists... Done root@debian:~#

21 ftp 서버설치하기 (vsftpd) apt-get install vsftpd Reading package lists... Done Building dependency tree Reading state information... Done The following extra packages will be installed: dialog openssl ssl-cert Suggested packages: ca-certificates openssl-blacklist The following NEW packages will be installed: dialog openssl ssl-cert vsftpd 0 upgraded, 4 newly installed, 0 to remove and 2 not upgraded. Need to get 1,092 kb of archives. After this operation, 3,047 kb of additional disk space will be used. Do you want to continue? [Y/n] y. root@debian:~#

22 서버설정하기 nano /etc/vsftpd.conf write_enable=yes local_umask=0 둘중에하나 service vsftpd restart systemctl start vsftpd

23 계정추가하기 adduser test Adding user `test'... Adding new group `test' (1001)... Adding new user `test' (1001) with group `test'... Creating home directory `/home/test'... Copying files from `/etc/skel'... Enter new UNIX password: Retype new UNIX password: passwd: password updated successfully Changing the user information for test Enter the new value, or press ENTER for the default Full Name []: Room Number []: Work Phone []: Home Phone []: Other []: Is the information correct? [Y/n]

24 계정홈폴더지정 nano /etc/passwd test:x:1001:1001:,,,:/media/volume1:/bin/bash

25 파일질라로접근해보기

26 권한문제 만든 test 파일이삭제가되지않음 폴더권한을설정해야함 ls -li total lrwxrwxrwx 1 root root 6 Oct 20 00:26 cdrom -> cdrom drwxr-xr-x 2 root root 4096 Oct 20 00:26 cdrom0 2 drwxr-xr-x 3 root root 4096 Oct 30 13:07 volume1 root@debian:/media#

27 ls li 정보 drwxr-xr-x 3 root root rwx r-xr r-x ( 소유자 / 그룹 / 기타 ) 그리고소유자는 root, 그룹은 root test 계정은 test 그룹에속해있어서상기파일에대한액세스가불가능함

28 권한해결? 파일및폴더권한을 777 로수정 ( 혹은 770) 소유자를 test 로혹은 test 그룹으로설정 계정 test 를 root 그룹에넣고그룹권한을 rwx 로설정 ( 아니면그룹을생성해서그그룹에사용자추가및폴더권한수정 ) 읽기 4 / 쓰기 2 / 실행 1 읽기쓰기실행 : 7 읽기쓰기 : 6 실행만 : 1 쓰기만 : 2

29 test 계정을 users 그룹에추가및폴더권한수정 adduser test users Adding user `test' to group `users'... Adding user test to group users Done. chown root:users -R volume1 chmod g+rwx -R volume1

30 권한정보다시확인 ls -li total lrwxrwxrwx 1 root root 6 Oct 20 00:26 cdrom -> cdrom drwxr-xr-x 2 root root 4096 Oct 20 00:26 cdrom0 2 drwxrwxr-x 3 root users 4096 Oct 30 13:07 volume1 root@debian:/media#

31 ftp 로다시접근 ( 삭제업로드가능 )

32 지정된홈폴더말고상위폴더까지읽기가능 CHROOT 기능활성화

33 chroot 기능활성화 nano /etc/vsftpd.conf chroot_local_user=yes allow_writeable_chroot=yes service vsftpd restart

34 service vsftpd restart 가안될때 무슨문제인지모르겠지만 아래의방법으로 kill 하고시작한다. ps -ef grep vsftpd root :34? 00:00:00 /usr/sbin/vsftpd /etc/vsftpd.conf root :35 pts/1 00:00:00 grep vsftpd root@debian:~# kill 1601

35 다시 FTP 서버접근 상위폴더가홈폴더로고정됨 상위로올라가지못함

36 삼바서버설치하기 apt-get install samba Reading package lists... Done Building dependency tree Reading state information... Done The following extra packages will be installed: 0 upgraded, 85 newly installed, 0 to remove and 2 not upgraded. Need to get 24.5 MB of archives. After this operation, 118 MB of additional disk space will be used. Do you want to continue? [Y/n]

37 삼바서버설정하기 nano /etc/samba/smb.conf [volume1] comment = quipu server on VirtualBox ( 접속시알림말 ) path = /media/volume1 ( 공유할경로 ) valid users = test ( 계정 ) writable = yes ( 쓰기가능 ) directory mask = 0777 ( 디렉터리권한 ) create mask = 0777 ( 파일권한 )

38 삼바계정추가하기 실계정과별도 smbpasswd -a test New SMB password: Retype new SMB password: Added user test.

39 삼바서비스재시작 service smbd restart service nmbd restart

40 윈도우에서삼바접근하기 \\debian \\ ( 호스트이름혹은아이피주소 ) 네트워크드라이브연결

41 홈폴더가보인다? 아래의설정해제

42 디렉터리구조

43 권한설정 / 파일복사 / 심링크 chmod chown ln -s rm rf mkdir touch echo grep ps

44 유용한패키지 htop / iftop / mc

45 감사합니당 문의 : 카카오톡 djj9405