The Perfect Server - OpenSUSE 11.1 [ISPConfig 3] - Page 3

4 Configure the Network settings

We use Yast, the OpenSuSE system management tool to reconfigure the network card settings. After the first boot, the system is configured to get the IP address with DHCP. For a server we will switch it to a static IP address.

Run

yast2

Select Network Devices > Network Settings:

Select your network card and then Edit:

Select Statically assigned IP Address and enter the IP address, subnet mask and hostname and save the changes by selecting Next:

Now select Hostname/DNS and enter the hostname (e.g. server1.example.com) and nameservers (e.g. 145.253.2.75 and 213.191.92.86):

Now select Routing and enter the default gateway and hit OK:

To configure the firewall, select Security and Users > Firewall in Yast:

I want to install ISPConfig at the end of this tutorial which comes with its own firewall. That's why I disable the default OpenSUSE firewall now. Of course, you are free to leave it on and configure it to your needs (but then you shouldn't use any other firewall later on as it will most probably interfere with the OpenSUSE firewall).

Select Disable Firewall Automatic Starting and Stop Firewall Now, then hit Next:

Hit Finish and leave Yast:

 

5 Install updates

Now we install the latest updates from the openSUSE repositories. Run

zypper update

And then reboot the server as you most likely installed some kernel updates, too:

reboot

 

6 Quota

To install quota, run

yast2 -i quota

Edit /etc/fstab to look like this (I added ,usrquota,grpquota to the mountpoints / and /srv):

vi /etc/fstab

/dev/sda1            swap                 swap       defaults              0 0
/dev/sda2            /                    ext3       acl,user_xattr,usrquota,grpquota        1 1
/dev/sda3            /srv                 ext3       acl,user_xattr,usrquota,grpquota        1 2
proc                 /proc                proc       defaults              0 0
sysfs                /sys                 sysfs      noauto                0 0
debugfs              /sys/kernel/debug    debugfs    noauto                0 0
devpts               /dev/pts             devpts     mode=0620,gid=5       0 0

Then run:

touch /aquota.user /aquota.group
chmod 600 /aquota.*
touch /srv/aquota.user /srv/aquota.group
chmod 600 /srv/aquota.*

mount -o remount /
mount -o remount /srv

quotacheck -avugm
quotaon -avug

Dont be worried if you see these error messages - they are normal when you run quotacheck for the first time:

quotacheck: WARNING - Quotafile //aquota.user was probably truncated. Cannot save quota settings...
quotacheck: WARNING - Quotafile //aquota.group was probably truncated. Cannot save quota settings...
quotacheck: Scanning /dev/sda2 [/] done
quotacheck: Checked 5286 directories and 45399 files
quotacheck: WARNING - Quotafile /srv/aquota.user was probably truncated. Cannot save quota settings...
quotacheck: WARNING - Quotafile /srv/aquota.group was probably truncated. Cannot save quota settings...
quotacheck: Scanning /dev/sda3 [/srv] done
quotacheck: Checked 7 directories and 4 files

 

7 Install some basic packes and the compilers that we need later

Run

yast2 -i findutils readline libgcc glibc-devel findutils-locate gcc flex lynx compat-readline4 db-devel wget gcc-c++ subversion make vim telnet cron iptables iputils man man-pages nano pico

Share this page:

24 Comment(s)

Add comment

Comments

From: at: 2009-03-30 17:01:25

this will work under openSUSE 11.0?

From: IzFazt at: 2009-07-10 20:31:34

This is the moment to unmark apparmor, before installing it. Although it is advised to de-install this later on it produces some unexplicable error at that time

From: at: 2009-04-15 09:55:31

The version of phpMyAdmin in the openSUSE repo seems to have changed. The version there now is:

phpMyAdmin-3.1.3.1-1.1.noarch.rmp

 I ran

"rpm -i http://download.opensuse.org/repositories/server:/php:/applications/openSUSE_11.1/noarch/phpMyAdmin-3.1.3.1-1.1.noarch.rpm"

it seems to work!

From: Anonymous at: 2009-05-24 13:45:26

The current version is now 3.1.5.1-1.1

From: itsonlyme at: 2009-07-10 22:53:36

it's now version 3.2.0-1.1

From: Wendy at: 2009-04-08 17:40:59

You may need to change to root folder before doing mysql secure:

 cd /

mysql_secure_installation

From: Anonymous at: 2009-03-29 17:22:30

i ran into a problem when i was trying to run..

 "mysql_secure_installation"

 so i found this fix hopefully it helps you out.

 "echo 'export PATH=$PATH:/Applications/MAMP/Library/bin' >> ~/.bash_profile"

From: itsonlyme at: 2009-07-10 20:52:26

I used 

maildrop-2.1.0-3.2.i586.rpm

because I could't find your version, hope that's ok....

From: itsonlyme at: 2009-07-10 21:16:53

and for pam-mysql-0-7RC1-tar-gz

I had to use

wget http://sourgeforge.net/projects/pam-mysql-0-7RC1-tar.gz

because that package has been moved

From: itsonlyme at: 2009-07-10 21:56:46

and better still, instead of :

......
cd /tmp
wget http://heanet.dl.... etc

just use :

rpm -i http://download.opensuse.org/repositories/home:/buschmann23/openSUSE_11.1/i586/pam_mysql-0.7RC1-11.1.i586.rpm

From: Anonymous at: 2009-09-28 18:11:10

 rpm --force -i http://download.opensuse.org/repositories/home:/atzewilms/openSUSE_11.1_Update/i586/maildrop-2.1.0-3.2.i586.rpm
warning: /var/tmp/rpm-xfer.OCxYJZ: Header V3 DSA signature: NOKEY, key ID 6530cd38
error: Failed dependencies:
        libcourierauth.so is needed by maildrop-2.1.0-3.2.i586
        libfam.so.0 is needed by maildrop-2.1.0-3.2.i586
        libgcc_s.so.1 is needed by maildrop-2.1.0-3.2.i586
        libgcc_s.so.1(GCC_3.0) is needed by maildrop-2.1.0-3.2.i586
        libgdbm.so.3 is needed by maildrop-2.1.0-3.2.i586
        libpcre.so.0 is needed by maildrop-2.1.0-3.2.i586
        libstdc++.so.6 is needed by maildrop-2.1.0-3.2.i586
        libstdc++.so.6(CXXABI_1.3) is needed by maildrop-2.1.0-3.2.i586
        libstdc++.so.6(GLIBCXX_3.4) is needed by maildrop-2.1.0-3.2.i586
        libstdc++.so.6(GLIBCXX_3.4.9) is needed by maildrop-2.1.0-3.2.i586

From: Cracklefish at: 2010-05-09 11:47:51

The current version can be got from:

rpm -i http://download.opensuse.org/repositories/server:/php/server_database_apache_openSUSE_11.1/i586/suphp-0.7.1-3.26.i586.rpm

However, this requires php5-fastcgi before it will load so I ran the  next statement and installed the php modules then ran the suphp install.

From: Cracklefish at: 2010-05-09 10:26:00

There seems to be a problem with the version of Getmail-4.17.0 on the openSUSE site, whatever version of Python I have tried it still gives a "requires Python <2.6..." message so here is what I did:

cd /tmp

wget http://pyropus.ca/software/getmail/old-versions/getmail-4.17.0.tar.gz

tar xvfz getmail-4.17.0.tar.gz

cd getmail-4.17.0

python setup.py build

python setup.py install

This was using Python 2.7b1 which is the end of life V2 Release Candidate. Apparently they will support this for 5 years. I've not tried the V3 versions on offer (if it a'int broke...!)

 

From: OvrFlote at: 2009-05-11 16:14:44

I am putting a script together (first attempt at scripting) that will do all of this for you, I have made the changes in the commands that the other users commented on.  This is just a personal project but if anyone is interested, send me an email. basically, I'm just coping and pasting from this tutorial to my script, since all of this runs from the command line. But I am wondering if the author of the tutorial has the end user download all of the packages seperately for a reason or is it just due to the amount of time it takes to install all the packages. In my script i put all of the needed packages in one "yast2 -i" command. Excellent tutorial though. Really helpful and dead on. Once this script is working, I will add Openfire, and Wowza to the mix.

From: Daniel Prez at: 2009-08-11 19:22:32

I installed everything like the how to explain. My system is function normally but i don't have DNS resolution, i'd like your script to compare with my instalation and see if i am doing something bad.

Thanks

Daniel Prez

From: mdconner at: 2009-08-18 14:38:54

Did you ever complete your project and have a working install config script?

From: at: 2009-04-23 15:36:00

This applies to the other package too... (you only mentioned the mysql sub-package)

 mydns-ng-1.2.8-5.1.i586.rpm

From: at: 2009-04-15 10:56:26

The current version of MYDNS is:

mydns-ng-mysql-1.2.8-5.1.i586.rpm

From: at: 2009-04-15 10:58:54

Should the line:

rm -f /tmp/ispconfig3_install

be:

rm -rf /tmp/ispconfig3_install

?

 

From: Emska at: 2009-06-06 11:41:00

Current fail2ban is  fail2ban-0.8.3-3.1.i586.rpm. To obtain it :

rpm -i http://download.opensuse.org/repositories/home:/leonardocf/openSUSE_11.1/i586/fail2ban-0.8.3-3.1.i586.rpm 

From: Anonymous at: 2009-08-09 22:39:43

Postfix not sending and not receiving any messages in this configuration . This is too low . In second Suse 11.1 tutorial is better postfix config.Please write more details how to create running email. Its my problem only?

.

From: Daniel Prez at: 2009-08-14 03:38:02

I had problems with virtual domains. In the apache log, the system says me that i'd been overlap when i created two or more sites, and that the first of these have been precedence.

Searching information in Internet i found that should delete the # in the line that virtualname *:80 in /etc/apache2/listen.conf.

But this is not everything, also i had to modify /etc/apache2/sites-available/name-site.vhost and write  the complete name in servername, for example www.name-site.com instead of *.name-site.com

I want help to the ispconfig create my new sites with these template in  /etc/apache2/sites-available/. If somebody knows how i can do it please !! write me.

Thanks to all pleople and the writers of this how to.

Daniel Prez

From: Ozgur Dagli at: 2009-09-11 10:02:52

You have to edit that "/etc/apache2/Listen.conf" to include these two lines.

Listen 80
NameVirtualHost *:80

First line is deafult listening port for global http server, you can add any other listening ports for special purposes. If you add any virtual servers differ than port 80, you have to add "Listen [XX]" and "NameVirtualHost *:[XX]" to your configuration.

"NameVirtualHost" parameter is required to apache for handling virtual domains...

From: Cracklefish at: 2010-05-09 12:22:23

Fail2ban doesn't appear to be available from SUSE anymore, I tracked down a SUSE version at:

rpm -i http://packman.mirrors.skynet.be/pub/packman/suse/11.1/i586/fail2ban-0.8.4-0.pm.1.1.i586.rpm