ubuntu_steps
This is an old revision of the document!
Start with “bare” ubuntu
Install vim
apt -y install vim
Temporarily allow SSH root access for setup
sudo sed -i -E '/^\s*#?\s*PermitRootLogin\s+.*/d' /etc/ssh/sshd_config && echo 'PermitRootLogin yes' | sudo tee -a /etc/ssh/sshd_config
Change root password
sudo passwd root
Fix bash history in .bashrc (also repeat this for root) Remember go to the local home directory first
sed -i -E '/^\s*HISTSIZE=.*$/c\HISTSIZE=-1' .bashrc && sed -i -E '/^\s*HISTFILESIZE=.*$/c\HISTFILESIZE=-1\nPROMPT_COMMAND="history -a; history -n; $PROMPT_COMMAND"' .bashrc source .bashrc
vi /etc/ssh/sshd_config systemctl restart ssh
vi /etc/audit/auditd.conf vi /etc/audit/audit.rules systemctl stop systemd-journald-audit.socket systemctl disable systemd-journald-audit.socket
Verify UFW is inactive
ufw status Status: inactive
cd /etc/netplan/ vi 01-network-manager-all.yaml netplan try vi /etc/cloud/cloud.cfg.d/subiquity-disable-cloudinit-networking.cfg mv 01-network-manager-all.yaml 01-netcfg.yaml netplan try vi 01-netcfg.yaml netplan try
47 cd /etc/ 48 less issue 49 less issue.net
50 cd update-motd.d/ 52 less 50-motd-news 54 chmod a-x *
57 vi 50-landscape-sysinfo
185 apt get apache 186 apt install apache2 189 systemctl start apache2 192 cd /var/www/html/ 197 vi index.html
207 apt install mariadb-server 208 systemctl start mariadb.service 209 mysql_secure_installation 212 mysql -uroot -p
217 apt install libapache2-mod-php php-mysql 218 cd /etc/apache2/mods-enabled/ 221 vi dir.conf 222 systemctl restart apache2 223 systemctl status apache2 224 apt search php- | less 225 ls 226 cd 227 cd /var/www/html/ 228 ls -al 229 vi cam.html 230 vi save_photo.php 231 mkdir uploads 232 ps -ef 233 chown www-data uploads/ 234 ls -al 235 ls 236 cd /var/www/ 237 ls 238 cd html/ 239 ls 240 vi cam.html 241 ls 242 \rm cam.html 243 vi p.php 244 vi c2.html 245 ls a-l 246 ls 247 ls -al uploads/ 248 pwd 249 service apache2 restart 250 ls 251 vi p.php 252 ls 253 vi index.html 254 cd 255 ls 256 penssl genrsa -aes128 -out private.key 2048 257 openssl genrsa -aes128 -out private.key 2048 258 openssl req -nodes -new -x509 -keyout server.key -out server.cert 259 ls 260 mkdir keys 261 mv server.* keys 262 cd keys/ 263 ls 264 openssl req -new -days 999 -key private.key -out request.csr 265 ls 266 openssl req -new -days 999 -key server.key -out server.csr 267 openssl x509 -in server.csr -out certificate.crt -req -signkey server.key -days 999 268 ls -l 269 cd /etc/apache2/ 270 ls 271 cd conf-available/ 272 ls 273 vi ssl-params.conf 274 cd ../sites-available/ 275 ls 276 ls 277 mv certificate.crt server.crt 278 ls 279 openssl x509 -inform DER -outform PEM -in server.crt -out server.crt.pem 280 ls 281 openssl rsa -in server.key -text > private.pem 282 openssl x509 -inform PEM -in server.crt > public.pem 283 ls 284 mkdir /etc/ssl/hot 285 mv server.* /etc/ssl/hot/ 286 ls 287 mv * /etc/ssl/hot/ 288 ls -l /etc/ssl/hot/ 289 pwd 290 vi /var/www/html/p.php 291 ls 292 ls -al 293 cd 294 cd /var/www/html/ 295 ls 296 service apache2 restart 297 ls 298 ls -l 299 vi default-ssl.conf 300 a2enmod ssl 301 a2enconf ssl-params 302 a2ensite default-ssl 303 apache2ctl configtest 304 vi /etc/apache2/conf-enabled/ssl-params.conf 305 apache2ctl configtest 306 vi /etc/apache2/conf-enabled/ssl-params.conf 307 apache2ctl configtest 308 systemctl restart apache2 309 ls 310 cd /var/www/ 311 ls 312 cd html/ 313 ls 314 ls 315 vi c2.html 316 vi /var/log/apache2/error.log 317 find / > /tmp/fl.txt 318 vi /etc/php/7.4/apache2/php.ini 319 ls 320 ls /tmp/ 321 ls -al 322 ls uploads/ 323 cd /var/log/ 324 ls 325 vi /etc/php/7.4/apache2/php.ini 326 echo -ne '\e]4;4;#0000FF\a' 327 ls 328 echo -ne '\e]4;4;#8888FF\a' 329 ls 330 vi /etc/php/7.4/apache2/php.ini 331 echo -e "\e]P46495ED" 332 ls 333 vi /etc/php/7.4/apache2/php.ini 334 ls -al 335 vi /etc/bash.bashrc 336 ls -al 337 grep php.log /tmp/fl.txt 338 vi /etc/php/7.4/apache2/php.ini 339 ls a-l 340 ls -al 341 touch php.loh 342 touch php.log 343 ls -al 344 rm php.loh 345 chmod a+x php.log 346 ls -al 347 chmod a+w php.log 348 chmod a-x php.log 349 ls -al 350 service apache2 restart 351 ls -al 352 cd /var/www/html/ 412 apt install nmap
ubuntu_steps.1747975906.txt.gz · Last modified: 2025/05/23 04:51 by kenson