Linux server initialization configuration process

王林
Release: 2019-12-11 17:07:04
Original
3768 people have browsed it

Linux server initialization configuration process

Change the root password

The root account does not have a password by default. For security reasons, initialize one first

passwd
Copy after login

Create Linux administrator account

When using a Linux server, try not to use the root account. To handle daily operations, we create a new administrator account.

First, add a user group (my customized admin here).

addgroup admin
Copy after login

Then, add a new user (assumed to be www).

useradd -d /home/www -s /bin/bash -m www
Copy after login

In the above command, the parameter d specifies the user's home directory, the parameter s specifies the user's shell, and the parameter m indicates that if the directory does not exist, create the directory.

Free learning video tutorial sharing: linux video tutorial

Next, set the password of the new user.

passwd www
Copy after login

Add new user (www) to user group (admin).

usermod -a -G admin www
Copy after login

Next, set sudo permissions for the new user.

sudo vi /etc/sudoers
Copy after login

Find the following line.

root ALL=(ALL:ALL) ALL
Copy after login

Below this line, add another line.

root    ALL=(ALL:ALL) ALL
www    ALL=(ALL) NOPASSWD: ALL
Copy after login

The above NOPASSWD means that you do not need to enter a password when switching sudo. For security reasons, a password can also be enforced.

root    ALL=(ALL:ALL) ALL
www    ALL=(ALL:ALL) ALL
Copy after login

Finally, log out as the root user first, and then log in as the new user.

Configure SSH service

Save your computer’s ssh public key to the server’s ~/.ssh/authorized_keys file

Use the following command directly

ssh-copy-id -i ~/.ssh/id_rsa.pub root@123.456.78
Copy after login

Then, enter the server and edit the SSH configuration file /etc/ssh/sshd_config.

sudo cp /etc/ssh/sshd_config ~     (备份,复原时使用)
sudo vi /etc/ssh/sshd_config
Copy after login

In the configuration file, change the default port 22 of SSH. Suppose you use 25000

Port 25000
Copy after login

Then, check whether several settings are set as follows, making sure to remove the # sign in front.

Linux server initialization configuration process

The above mainly prohibits root user login and password login.

After saving, exit file editing.

Next, change the permissions of the authorized_keys file.

sudo chmod 600 ~/.ssh/authorized_keys && chmod 700 ~/.ssh/
Copy after login

Restart SSHD

sudo service ssh restart
Copy after login

or

sudo /etc/init.d/ssh restart
Copy after login

Running environment configuration

Check the regional settings of the server.

locale
Copy after login

If the result is not en_US.UTF-8, it is recommended to set it to it.

sudo locale-gen en_US en_US.UTF-8 en_CA.UTF-8
sudo dpkg-reconfigure locales
Copy after login

Then, update the software

sudo apt-get update
sudo apt-get upgrade
Copy after login

Finally, make some security settings as needed, such as setting up a firewall and closing ports other than HTTP, HTTPs, and SSH.

Recommended related articles and tutorials: linux tutorial

The above is the detailed content of Linux server initialization configuration process. For more information, please follow other related articles on the PHP Chinese website!

source:php.cn
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Popular Tutorials
More>
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template