Strato VPS Linux

• € 5 / maand
• 1 CPU vCore
• 2 GB RAM
• 50 GS SSD
• 100 Mbit/s
• ∞ dataverkeer

Upgrade packages 24.04.2

admin@ubuntu:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 24.04.2 LTS
Release: 24.04
Codename: noble

sudo apt-get dist-upgrade

WinSCP sudo su connection for admin - 250606

• Clone a 'normal' sftp connection: Manage > Clone to New Site
• Then, in the 'Session' pane, click on Advanced...
• In the Environment section, click on SFTP
• In the Protocol options pane, add the SFTP server: sudo su -c /usr/lib/sftp-server
• click OK, then Save, and again OK

Error

Connection has been unexpectedly closed.

Server sent command exit status 127. 

Cannot initialize SFTP protocol. Is the host running an SFTP server?

OK          Reconnect          Help

Passwordless login for admin

• log in as root
• go to /usr/sbin

sudo visudo

admin ALL=(ALL) NOPASSWD: ALL

Mail - 250520

SSL - 250519

Users verwijderen

• userdel mosquitto
• userdel owntracks

Upgrade from Ubuntu 22.04 LTS to Ubuntu 24.04 LTS - 240214

sudo apt update
sudo apt upgrade
sudo apt dist-upgrade
sudo do-release-upgrade

Continue running under SSH?

This session appears to be running under ssh. It is not recommended to perform an upgrade over ssh currently because in case of failure it is harder to recover.

If you continue, an additional ssh daemon will be started at port '1022'.
Do you want to continue?

Herinstallatie - 240726

sudo su

su admin

OS

Locale

echo $LANG

Workaround

export LANG=en_US.UTF-8
export LANGUAGE=en_EN.UTF-8
export LC_ALL=en_US.UTF-8

Solution

LANG=en_US.UTF-8

root@stratoserver:~# locale-gen --purge
Generating locales (this might take a while)...
 en_US.UTF-8... done
Generation complete.

• https://help.ubuntu.com/community/EnvironmentVariables
• https://manpages.ubuntu.com/manpages/trusty/man8/locale-gen.8.html
• https://serverfault.com/questions/394610/remove-a-locale-in-ubuntu

• https://linoxide.com/fix-error-locale-cannot-set-lc_all-to-default-locale-no-such-file-or-directory/

Private & Public key (om zonder wachtwoord te kunnen inloggen)

• genereer met de PuTTY Key Generator (keygen) een public & een private key en sla de private key op
• laad in !PuTTY de gewenste configuratie
• Ga dan in de linkerkolom (Category) naar Connection > SSH > Auth
• Browse... dan in het panel 'Authentication parameters' naar de gegenereerde private key
• Op de server zelf heb je per user een public key nodig - voor root plaats je die in /root/.ssh/authorized_keys

Admin user

• Debian: How to Create a Sudo User on Debian {3 Easy Steps} (phoenixnap.com)
• Ubuntu: https://www.digitalocean.com/community/tutorials/how-to-create-a-new-sudo-enabled-user-on-ubuntu

Add the new user

adduser admin

adduser: The group 'admin' already exists.

adduser admin --ingroup admin

Add user to the sudo group

usermod -aG sudo admin

getent group sudo

Verify the new user has sudo access

su - admin

Private & Public key (om zonder wachtwoord te kunnen inloggen)

Using username "admin".
Server refused our key

No supported authentication methods available (server sent: publickey)

LAMP

sudo apt-get install lamp-server^ -y

Apache

nginx stoppen en autostart uitschakelen

killall nginx
sudo update-rc.d -f nginx disable

Apache starten en autostart inchakelen

admin@ubuntu:~$ sudo systemctl start apache2
admin@ubuntu:~$ sudo systemctl enable apache2

MySQL

admin@ubuntu:~$ sudo systemctl start mysql
admin@ubuntu:~$ sudo systemctl enable mysql

Beveiligen van MySQL

admin@ubuntu:~$ sudo mysql_secure_installation

• Would you like to setup VALIDATE PASSWORD component? ► 'y'
• There are three levels of password validation policy: Please enter 0 = LOW, 1 = MEDIUM and 2 = STRONG: 2 ► '2'
• Remove anonymous users? (Press y|Y for Yes, any other key for No) : 'y'
• Disallow root login remotely? (Press y|Y for Yes, any other key for No) : 'y'
• Remove test database and access to it? (Press y|Y for Yes, any other key for No) : 'y'
• Reload privilege tables now? (Press y|Y for Yes, any other key for No) : 'y'

sudo mysql -u root mysql

PHP 8.1

sudo apt-get install php php-opcache php-gd php-curl php-mysqlnd php-intl php-json php-ldap php-mbstring php-mysqlnd php-xml php-zip -y

phpMyAdmin

sudo apt-get install phpmyadmin

An error occurred while installing the database: 
mysql said: ERROR 1819 (HY000) at line 1: Your password does not satisfy the current policy requirements .

mysql> create user 'phpmyadmin'@'localhost' identified by 'ITScomplicated$_@123!';

PHP 8.3 én 7.4

sudo add-apt-repository ppa:ondrej/apache2
sudo add-apt-repository ppa:ondrej/php

sudo apt-get install php7.4 php7.4-opcache php7.4-gd php7.4-curl php7.4-mysqlnd php7.4-intl php7.4-json php7.4-ldap php7.4-mbstring php7.4-mysqlnd php7.4-xml php7.4-zip -y

sudo update-alternatives --config php

sudo a2dismod php8.1
sudo a2enmod php7.4
sudo systemctl restart apache2

Considering dependency mpm_prefork for php7.4:
Considering conflict mpm_event for mpm_prefork:
Considering conflict mpm_worker for mpm_prefork:
Module mpm_prefork already enabled
Considering conflict php5 for php7.4:
Enabling module php7.4.

Plesk

Drupal on your LAMP

Apache - virtual host

chown admin:admin srv

mkdir /srv/htdocs/boossy.example

<html>
  <head>
    <title>Example website</title>
  </head>
  <body>
    <h1>Hello World!</h1>
    <p>This is the landing page of <strong>Example.org </strong>.</p>
  </body>
</html>

sudo vi /etc/apache2/sites-available/boossy.example.conf

<VirtualHost *:80>
 ServerName boossy.example
 ServerAlias www.boossy.example 
 ServerAdmin webmaster@localhost
 DocumentRoot /srv/htdocs/boossy.example
 ErrorLog ${APACHE_LOG_DIR}/error.log
 CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

sudo a2ensite boossy.example

sudo a2dissite 000-default

sudo apache2ctl configtest

Set ServerName

127.0.0.1 server578

ServerName server578

sudo systemctl reload apache2

Overcome 403 Forbidden

    <Directory "/srv/htdocs/boossy.example">
       Order allow,deny
       Allow from all
       # New directive needed in Apache 2.4.3: 
       Require all granted
    </Directory>

Apache - Virtual host for a subdomain

123.456.789.012 mydomain.org sub.mydomain.org

MySQL - create a database

mysql> GRANT ALL PRIVILEGES ON *.* TO 'phpmyadmin'@'localhost' WITH GRANT OPTION;

Collation

• click on the name of your database in the left panel
• click on the tab Operations/Handelingen
• in the Collation/Collatie panel: choose utf8mb4_unicode_ci
• check the Change all tables collations/Wijzig alle tabelcollaties checkbox
• then click on the Go/Starten button

User

• Gebruikersnaam
• Servernaam: kies lokaal/local (localhost)
• Wachtwoord + Tik opnieuw in

• Bij Data, vink de volgende rechten aan (de bovenste vier): SELECT, INSERT, UPDATE, DELETE
• Bij Structuur, vink de volgende rechten aan (de bovenste vijf): CREATE, ALTER, INDEX, DROP, CREATE TEMPORARY TABLES

Install Drupal 7.82

• Make sure PHP 7.4 is enabled, as well as the accompanying Apache module (see above).

sudo a2enmod rewrite
sudo systemctl restart apache2
sudo apt install php-cli php-sqlite3

Choose profile

Choose language

Verify requirements

• File system - The directory sites/default/files does not exist. ...
  ► create it
  File system - The directory sites/default/files is not writable. ...
  ► correct the permissions:

chmod -R 777 files

• Settings file - The settings file does not exist
  ► copy sites/default/default.settings.php to settings.php
  Settings file - The settings file is not writable. ...
  ► correct the permissions:

chmod 777 settings.php

Set up database

Install profile

Configure site

• Zet sites/default/settings.php nu op enkel schrijven: r--r--r--
• e-mailadressen bij SITE INFORMATION en SITE MAINTENANCE ACCOUNT zijn verplichte velden

Finished

• Werk bij tot Drupal 7.101

Restore existing Drupal site on your LAMP

• http://vmg.boossy.org/index.php?q=user => works => Drupal's page serving mechanism is working properly
  (login gives the impression to fail, but succeeds)
• phpinfo() shows mod_rewrite is enabled

<?php
phpinfo();
?>

• .htaccess isn't used!

   <Directory "/srv/htdocs/vmg.boossy.org">
      AllowOverride All
      Order allow,deny
      Allow from all
      # New directive needed in Apache 2.4.3:
      Require all granted
   </Directory>

admin@ubuntu:~$ sudo mysql_secure_installation
...
Skipping password set for root as authentication with auth_socket is used by default.
...
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.

sudo mysql -u root mysql

ALTER USER 'root'@'localhost' IDENTIFIED BY 'password'

sudo apt install mysql-server

sudo service mysql status

sudo ss -tap | grep mysql

sudo mysql -u root --skip-password

sudo mysql -u root -p

:set fileformat=unix

# JAVA_OPTS="-Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true"
 JAVA_OPTS="-Xms384m -Xmx512m -XX:MetaspaceSize=128M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true"

core file size (blocks, -c) 0
...
max locked memory (kbytes, -l) 64
...

ulimit -c unlimited
ulimit -l 16384

# Note this file has been generated and will be overwritten if a
# logging subsystem has been defined in the XML configuration.

...
<wsdl-host>${jboss.bind.address:123.4.5.6}</wsdl-host>
...
<inet-address value="${jboss.bind.address.management:123.4.5.6}"/>
...
<inet-address value="${jboss.bind.address:123.4.5.6}"/>
...

/opt/wildfly/bin/launch.sh standalone standalone.xml 12.345.678.901

11:14:36,061 INFO [org.jboss.ws.common.management] (MSC service thread 1-1) JBWS022052: Starting JBossWS 5.1.5.Final (Apache CXF 3.1.6)
11:14:36,262 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://12.345.678.901:9990/management
11:14:36,275 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://12.345.678.901:9990
11:14:36,276 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly Full 10.1.0.Final (WildFly Core 2.2.0.Final) started in 5262ms - Started 331 of 577 services (393 services are lazy, passive or on-demand)

systemctl start wildfly
systemctl status wildfly

systemctl stop wildfly

DefaultTasksMax=infinity

sudo apt install apache2

Storage=persistent

apachectl -M

sudo a2enmod authz_groupfile
sudo a2enmod cgid
sudo a2enmod expires
sudo a2enmod headers
sudo a2enmod info
sudo a2dismod mpm_event
sudo a2enmod mpm_worker
sudo a2enmod proxy
sudo a2enmod proxy_fcgi
sudo a2enmod rewrite
sudo a2enmod ssl
sudo systemctl restart apache2

12.345.678.90 mijndomein.tld

root@www:~# apt -y install libapache2-mod-perl2

root@www:~# vi /etc/apache2/conf-available/mod_perl.conf
# create new
# for example, set PerlRun mode under the "/var/www/perl"
PerlSwitches -w
PerlSwitches -T
Alias /perl /var/www/perl
<Directory /var/www/perl>
    AddHandler perl-script .cgi .pl
    PerlResponseHandler ModPerl::PerlRun
    PerlOptions +ParseHeaders
    Options +ExecCGI
</Directory>

<Location /perl-status>
    SetHandler perl-script
    PerlResponseHandler Apache2::Status
    Require ip 127.0.0.1 10.0.0.0/24
</Location>

root@www:~# a2enconf mod_perl
Enabling conf mod_perl.
To activate the new configuration, you need to run:
  systemctl reload apache2

root@www:~# a2enmod cgid
Enabling module cgid.
To activate the new configuration, you need to run:
  systemctl restart apache2

root@www:~# systemctl restart apache2