==== Linutop 3 ====

[[sidex_projet|Accueil]]

----

=== Configuration de base à effectuer en direct sur le Linutop 3 ===

# Passage en root
<code bash>
sudo su -
</code>

# définition du nouveau mot de passe root
<code bash>
passwd
</code>

# lancement auto du serveur ssh au démarrage du Linutop
<code bash>
services-blacklist del ssh
</code>

# Lancer "Paramètres Linutop"
<code>gksudo -k lconfeditor</code>

# Passage en mode sécurité minimale
Dans l'onglet "Sécurité", cocher "Persistant"

=== Peut être réalisé via une connexion ssh distante su l'Ip du Linutop 3 ===

# Install de mysql-server, phpmyadmin, joe
<code bash>
aptitude update
aptitude install mysql-server phpmyadmin joe htop
</code>

# Configurer le mot de passe root du serveur MySQL

{{:mysql_root_passwd.png}}

# Modif de la config de phpmyadmin
<code bash>
joe /etc/phpmyadmin/config.inc.php
</code>

modif de mysqli -> mysql

Si on veut autoriser une connexion a phpmyadmin sans sans passwd, décommenter la ligne 64...

<code bash>
/* Uncomment the following to enable logging in to passwordless accounts,
 * after taking note of the associated security risks. */
 // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
</code>

# relancer serveur apache2
<code bash>
/etc/init.d/apache2 restart
</code>

# install gestion de l'heure automatique

# https://help.ubuntu.com/8.04/serverguide/C/NTP.html
<code bash>
aptitude install ntp
</code>

# install de vncserver
<code bash>
aptitude install vnc4server
</code>

# Lancer vncserver une fois en ligne de commande

<code bash>
vncserver
</code>


# vncserver demander de définir le mot de passe de connexion

# Modifier /root/.vnc/xstartup pour le transforme comme cela 

<code bash>
#!/bin/sh

xrdb $HOME/.Xresources
xsetroot -solid grey
x-terminal-emulator -geometry 80x24+10+10 -ls -title "$VNCDESKTOP Desktop" &
#x-window-manager &
# Fix to make GNOME work
export XKL_XMODMAP_DISABLE=1
/etc/X11/Xsession
</code>


# lancement automatique de vnc server au demarrage
<code>
Copy the following into /etc/init.d/vncserver. The easiest way to do it is to copy it to your clipboard, 
run sudo -i && cat > /etc/init.d/vncserver && exit in a terminal, paste it in, and type CTRL-D. 
Be sure to change the USER variable to whatever user you want the VNC server to run under.
</code>

<code bash>
#!/bin/sh -e
### BEGIN INIT INFO
# Provides:          vncserver
# Required-Start:    networking
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
### END INIT INFO

PATH="$PATH:/usr/X11R6/bin/"

# The Username:Group that will run VNC
export USER="root"
#${RUNAS}

# The display that VNC will use
DISPLAY="1"

# Color depth (between 8 and 32)
DEPTH="16"

# The Desktop geometry to use.
#GEOMETRY="<WIDTH>x<HEIGHT>"
#GEOMETRY="800x600"
GEOMETRY="1024x768"
#GEOMETRY="1280x1024"

# The name that the VNC Desktop will have.
NAME="SIDExBOX-vnc-server"

OPTIONS="-name ${NAME} -depth ${DEPTH} -geometry ${GEOMETRY} :${DISPLAY}"

. /lib/lsb/init-functions

case "$1" in
start)
log_action_begin_msg "Starting vncserver for user '${USER}' on localhost:${DISPLAY}"
su ${USER} -c "/usr/bin/vncserver ${OPTIONS}"
;;

stop)
log_action_begin_msg "Stoping vncserver for user '${USER}' on localhost:${DISPLAY}"
su ${USER} -c "/usr/bin/vncserver -kill :${DISPLAY}"
;;

restart)
$0 stop
$0 start
;;
esac

exit 0
</code>

# Make the script executable with 

<code bash>
chmod +x /etc/init.d/vncserver
</code>

# Then, run 
<code bash>
update-rc.d vncserver defaults
</code>

This adds the appropriate symlinks to the vncserver script so that it is sent the start and stop commands at the appropriate time. 

Update: jpb writes that you may need to use sudo update-rc.d vncserver 99 instead if the job is running too early in the boot process.

To start the server without rebooting, run sudo /etc/init.d/vncserver start


:!: # L'adresse de connexion depis le viewer VNC est : **adresse_ip_serveur:1**


:!: # Modifier les droits d'accès sous **phpmyadmin**

<code sql>
INSERT INTO `mysql`.`user` (
`Host` ,
`User` ,
`Password` ,
`Select_priv` ,
`Insert_priv` ,
`Update_priv` ,
`Delete_priv` ,
`Create_priv` ,
`Drop_priv` ,
`Reload_priv` ,
`Shutdown_priv` ,
`Process_priv` ,
`File_priv` ,
`Grant_priv` ,
`References_priv` ,
`Index_priv` ,
`Alter_priv` ,
`Show_db_priv` ,
`Super_priv` ,
`Create_tmp_table_priv` ,
`Lock_tables_priv` ,
`Execute_priv` ,
`Repl_slave_priv` ,
`Repl_client_priv` ,
`Create_view_priv` ,
`Show_view_priv` ,
`Create_routine_priv` ,
`Alter_routine_priv` ,
`Create_user_priv` ,
`Event_priv` ,
`Trigger_priv` ,
`ssl_type` ,
`max_questions` ,
`max_updates` ,
`max_connections` ,
`max_user_connections`
)
VALUES (
'147.99.106.%', 'root', 'le_passwd', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'N', 'N', '', '0', '0', '0', '0'
);



INSERT INTO `mysql`.`host` (
`Host` ,
`Db` ,
`Select_priv` ,
`Insert_priv` ,
`Update_priv` ,
`Delete_priv` ,
`Create_priv` ,
`Drop_priv` ,
`Grant_priv` ,
`References_priv` ,
`Index_priv` ,
`Alter_priv` ,
`Create_tmp_table_priv` ,
`Lock_tables_priv` ,
`Create_view_priv` ,
`Show_view_priv` ,
`Create_routine_priv` ,
`Alter_routine_priv` ,
`Execute_priv` ,
`Trigger_priv`
)
VALUES (
'147.99.99.%', '%', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y'
);


INSERT INTO `mysql`.`db` (
`Host` ,
`Db` ,
`User` ,
`Select_priv` ,
`Insert_priv` ,
`Update_priv` ,
`Delete_priv` ,
`Create_priv` ,
`Drop_priv` ,
`Grant_priv` ,
`References_priv` ,
`Index_priv` ,
`Alter_priv` ,
`Create_tmp_table_priv` ,
`Lock_tables_priv` ,
`Create_view_priv` ,
`Show_view_priv` ,
`Create_routine_priv` ,
`Alter_routine_priv` ,
`Execute_priv` ,
`Event_priv` ,
`Trigger_priv`
)
VALUES (
'147.99.99.%', '%', 'root', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y'
);
</code>

:!: # Modification du fichier **/etc/mysql/my.cnf**

<code>
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
# bind-address            = 127.0.0.1
# Ecoute sur toutes les interfaces de la machine
bind-address            = 0.0.0.0
# Pas de tentative de résolution de noms
skip-name-resolve
#
</code>

# Relancer le serveur mysql
<code>
/etc/init.d/mysql restart
</code>

# Installation de l'interface PHP en ligne de commande pour la supervision du Linutop
<code>
wget http://ftp.toulouse.inra.fr/pub/saga/Linutop3/php5-cli_5.3.2-1ubuntu4.7_i386.deb
dpkg -i php5-cli_5.3.2-1ubuntu4.7_i386.deb
</code>

ou alors

<code>
aptitude install php5-cli
</code>


# Supprimer les fichiers cache générés par aptitude 
<code bash>
aptitude autoclean
aptitude clean
</code>



 ==== Linutop 3 ====

[[sidex_projet|Accueil]]