Hack The Sec-Leading Resource Of Linux Tutorial: open_source

Open Source Disk Cloning/Backup Softwares for Linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
Free Backup Tools to Clone Linux System Disk</div>
<div style="text-align: center;">
 </div>
Clonezilla is a partition and disk imaging/cloning program similar to True Image® or Norton Ghost®. It helps you to do system deployment, bare metal backup and recovery. Two types of Clonezilla are available, Clonezilla live and Clonezilla SE (server edition). Clonezilla live is suitable for single machine backup and restore. While Clonezilla SE is for massive deployment, it can clone many (40 plus!) computers simultaneously. Clonezilla saves and restores only used blocks in the hard disk. This increases the clone efficiency. With some high-end hardware in a 42-node cluster, a multicast restoring at rate 8 GB/min was reported. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfGqfktDOlq1hInl-1uL8NMknuOcy0nS2Ut5hvoh5M8JA7mSpcCrPHIkCK3WycxNu-HF5WE2zr6q1GxSrNu4Wl_0KHiMI6VOKxZFUzq_lzLiukCGZ1En-ysSr3qRuErpirbNSRoFXmGNdj/s1600/maxresdefault.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="900" data-original-width="1600" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfGqfktDOlq1hInl-1uL8NMknuOcy0nS2Ut5hvoh5M8JA7mSpcCrPHIkCK3WycxNu-HF5WE2zr6q1GxSrNu4Wl_0KHiMI6VOKxZFUzq_lzLiukCGZ1En-ysSr3qRuErpirbNSRoFXmGNdj/s640/maxresdefault.jpg" width="640" /></a></div>
 
Features: 
Many File systems are supported: (1) ext2, ext3, ext4, reiserfs, reiser4, xfs, jfs, btrfs, f2fs and nilfs2 of GNU/Linux, (2) FAT12, FAT16, FAT32, NTFS of MS Windows, (3) HFS+ of Mac OS, (4) UFS of FreeBSD, NetBSD, and OpenBSD, (5) minix of Minix, and (6) VMFS3 and VMFS5 of VMWare ESX. Therefore you can clone GNU/Linux, MS windows, Intel-based Mac OS, FreeBSD, NetBSD, OpenBSD, Minix, VMWare ESX and Chrome OS/Chromium OS, no matter it's 32-bit (x86) or 64-bit (x86-64) OS. For these file systems, only used blocks in partition are saved and restored by Partclone. For unsupported file system, sector-to-sector copy is done by dd in Clonezilla. 
 
*LVM2 (LVM version 1 is not) under GNU/Linux is supported. 
 
*Boot loader, including grub (version 1 and version 2) and syslinux, could be reinstalled. 
 
*Both MBR and GPT partition formats of hard drive are supported. Clonezilla live also can be booted on a BIOS or uEFI machine. 
 
*Unattended mode is supported. Almost all steps can be done via commands and options. You can also use a lot of boot parameters to customize your own imaging and cloning. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZYt5Pqwii1PmH4y3v-UoSjPspg8VvFt-UBzEaw6r81DVgtzBVOhdoSFDjIf2G2O44nDESgLwka0U89fj1PjCcinPfc5oXFmKihWOn6p2589AzJKeOk5JqCb5UUwNiL1maKE8W4xwpIRQX/s1600/clonezilla.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="600" data-original-width="800" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZYt5Pqwii1PmH4y3v-UoSjPspg8VvFt-UBzEaw6r81DVgtzBVOhdoSFDjIf2G2O44nDESgLwka0U89fj1PjCcinPfc5oXFmKihWOn6p2589AzJKeOk5JqCb5UUwNiL1maKE8W4xwpIRQX/s1600/clonezilla.png" /></a></div>
 
*One image restoring to multiple local devices is supported. 
 
*Image could be encrypted. This is done with ecryptfs, a POSIX-compliant enterprise cryptographic stacked filesystem. 
 
*Multicast is supported in Clonezilla SE, which is suitable for massive clone. You can also remotely use it to save or restore a bunch of computers if PXE and Wake-on-LAN are supported in your clients. 
 
*The image file can be on local disk, ssh server, samba server, NFS server or WebDAV server. 
 
*AES-256 encryption could be used to secures data access, storage and transfer. 
 
*Based on Partclone (default), Partimage (optional), ntfsclone (optional), or dd to image or clone a partition. However, Clonezilla, containing some other programs, can save and restore not only partitions, but also a whole disk. 
 
 
*By using another free software drbl-winroll, which is also developed by us, the hostname, group, and SID of cloned MS windows machine can be automatically changed. 
You may download the latest version of Clonezilla <a href="http://clonezilla.org/downloads.php">here</a>. 
                                               <a href="http://clonezilla.org/downloads.php">DOWNLOAD</a> 
 
<h3 style="background-color: white; border: 0px; color: #333f49; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 1.25rem; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: 1.3; margin: 0px 0px 1.25rem; padding: 0px; vertical-align: baseline;">
dd (data duplicator) </h3>
Dd- Mighty Disk Destroyer. Many Admins fear and even cower when the letters DD are mentioned together DD can be your best friend. Being that you are a Linux Professional and or want to be a professional, you are sometimes faced with the need to clone, backup and or restore Hard Drive images On the Fly. Secondly, you many want to create backups of Hard Drives for future deployment. Lastly, sometimes you have a failing Hard Drive that needs to be migrated over to a good Hard Drive. 
 
dd command must be used with caution. This command is so powerful and could wipe your data if you use it the wrong way. 
 
 
For example: To clone disk 1 (/dev/sdb) to disk 2 (/dev/sda), use the following command: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># dd if=/dev/sdb of=/dev/sda status=progress</pre>
For More information about DD you can use bellow command from your terminal  
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># man dd</pre>
Or you can visit this website : - <a href="https://www.howtoforge.com/linux-dd-command/">Link </a> 
 
<h3 style="background-color: white; border: 0px; color: #333f49; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 1.25rem; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: 1.3; margin: 0px 0px 1.25rem; padding: 0px; vertical-align: baseline;">
Partclone</h3>
<div>
Partclone is a program similar to the well-known backup utility "Partition Image" a.k.a partimage. Partclone provides utilities to save and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition.</div>
<div>
 </div>
<div>
Partclone now supports ext2, ext3, ext4, hfs+, reiserfs, reiser4, btrfs, vmfs3, vmfs5, xfs, jfs, ufs, ntfs, fat(12/16/32), exfat, f2fs, nilfs. The available programs are:</div>
<div>
 </div>
<div>
partclone.btrfs</div>
<div>
partclone.ext2, partclone.ext3, partclone.ext4</div>
<div>
partclone.fat32, partclone.fat12, partclone.fat16</div>
<div>
partclone.ntfs</div>
<div>
partclone.exfat</div>
<div>
partclone.hfsp</div>
<div>
partclone.jfs</div>
<div>
partclone.reiserfs</div>
<div>
partclone.reiser4</div>
<div>
partclone.ufs (with SU+J)</div>
<div>
partclone.vmfs (v3 and v5)</div>
<div>
partclone.xfs</div>
<div>
partclone.f2fs</div>
<div>
partclone.nilfs2</div>
<div>
 </div>
<div>
Partclone support local and remote ssh server to store the backup image. </div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># partclone.ext4 -c -s /dev/sda1 -o ~/data1.img</pre>
</div>
<div>
The command will backup an ext4 partition (/dev/sda1) to data1.img image file. To restore from an image file, use the following command:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># partclone.ext4 -r -o /dev/sda1</pre>
</div>
<div style="text-align: center;">
<a href="https://partclone.org/download/">Download Partclone</a> </div>
 
<h3 style="background-color: white; border: 0px; color: #333f49; font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 1.25rem; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: 1.3; margin: 0px 0px 1.25rem; padding: 0px; vertical-align: baseline;">
Deepin Clone</h3>
<div>
Deepin Clone is a tool to backup and restore developed by Deepin Technology. It supports to clone, backup and restore disk or partition. And works with Deepin Recovery to fix the boot, partition and so on.</div>
<div>
 </div>
<div>
<div>
Project Location:</div>
<div>
Source Code Location: <a href="https://github.com/linuxdeepin/deepin-clone">https://github.com/linuxdeepin/deepin-clone</a></div>
<div>
 </div>
<div>
Beta Version Location: <a href="https://cr.deepin.io/#/admin/projects/deepin-clone">https://cr.deepin.io/#/admin/projects/deepin-clone</a></div>
</div>
 
<h3 style="background-color: white; border: 0px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: 1.3; margin: 0px 0px 1.25rem; padding: 0px; vertical-align: baseline;">
Redo Backup</h3>
Redo Bakcup is a Live CD tool to clone your drivers easily, Redo Backup is a free & Open Source Live System licensed under GPL 3 to do the job, Features are as the website says. 
 
<ul style="text-align: left;">
<li>Easy graphical user interface boots from CD in less than a minute</li>
<li>No installation needed; runs from a CD-ROM or a USB stick</li>
<li>Saves and restores Windows and Linux machines</li>
<li>Automatically finds local network shares</li>
<li>Access your files even if you can't log in</li>
<li>Recover deleted pictures, documents, and other files</li>
<li>Internet access with a full-featured browser to download drivers</li>
<li>Live CD download size is only about 250MB</li>
</ul>
 
<div style="text-align: center;">
<a href="http://redobackup.org/download.php">Download Redo Backup</a></div>
<h3 style="background-color: white; border: 0px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: 1.3; margin: 0px 0px 1.25rem; padding: 0px; vertical-align: baseline;">
Mondo Rescue</h3>
Mondo is reliable. It backs up your GNU/Linux server or workstation to tape, CD-R, CD-RW, DVD-R[W], DVD+R[W], NFS or hard disk partition. In the event of catastrophic data loss, you will be able to restore all of your data [or as much as you want], from bare metal if necessary. Mondo is in use by Lockheed-Martin, Nortel Networks, Siemens, HP, IBM, NASA's JPL, the US Dept of Agriculture, dozens of smaller companies, and tens of thousands of users. 
 
Mondo is comprehensive. Mondo supports LVM 1/2, RAID, ext2, ext3, ext4, JFS, XFS, ReiserFS, VFAT, and can support additional filesystems easily: just e-mail the mailing list with your request. It supports software raid as well as most hardware raid controllers. It supports adjustments in disk geometry, including migration from non-RAID to RAID. It supports BIOS and UEFI boot modes. Mondo runs on all major Linux distributions (Fedora, RHEL, OpenSUSE, SLES, Mageia, Debian, Ubuntu, Gentoo) and is getting better all the time. You may even use it to backup non-Linux partitions, such as NTFS. 
 
Mondo is free! It has been published under the GPL v2 (GNU Public License), partly to expose it to thousands of potential beta-testers but mostly as a contribution to the Linux community. 
 
<div style="text-align: center;">
<a href="http://www.mondorescue.org/downloads.shtml">Download Mondo </a></div>
<div>
 </div>
 
<h3 style="background-color: white; border: 0px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: 1.3; margin: 0px 0px 1.25rem; padding: 0px; vertical-align: baseline;">
doClone</h3>
DoClone is a free project developed in C++ for creating or restoring GNU/Linux systems images. It can also work on a LAN to transfer data within computers. This tool provides an easy way to manage the GNU/Linux installation in offices or schools, including machines with different hardware, e.g., different hard-disk sizes, using only the space required by the data. 
Features are as the website says. 
 
<ul style="text-align: left;">
<li>Supports 12 filesystems.</li>
<li>Supports 9 disk labels.</li>
<li>Clones disks or partitions with different sizes.</li>
<li>Clones selinux systems.</li>
<li>GRUB boot loader restoration.</li>
<li>Multiple cloning on a LAN.</li>
<li>UUID's and filesystem labels cloning.</li>
<li>Live cloning: a system can make images of itself.</li>
</ul>
<div>
This program is free software and is distributed under the GNU GPL v3 License.</div>
 
<div style="background-color: white; border: 0px none; color: #2d3134; font-family: "Lucida Grande", Verdana, Geneva, Arial, sans-serif; font-size: 14px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: 21px; padding: 10px 20px 10px 80px; vertical-align: baseline;">
Latest version is 0.8.0:  <a href="http://download.savannah.gnu.org/releases/doclone/doclone-0.8.0.tar.gz" style="border: 0px none; color: #45639f; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; padding: 0px; text-decoration-line: none; vertical-align: baseline;">Download</a></div>
<div>
<div style="background-color: white; border: 0px none; color: #2d3134; font-family: "Lucida Grande", Verdana, Geneva, Arial, sans-serif; font-size: 14px; font-stretch: inherit; font-variant-east-asian: inherit; font-variant-numeric: inherit; line-height: 21px; padding: 10px 20px 10px 80px; vertical-align: baseline;">
<a href="http://download.savannah.gnu.org/releases/doclone/" style="border: 0px none; color: #45639f; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; padding: 0px; text-decoration-line: none; vertical-align: baseline;">Explore the download directory</a></div>
</div>
 </div>

Open Source Disk Cloning/Backup Softwares for Linux

Free Backup Tools to Clone Linux System Disk Clonezilla is a partition and disk imaging/cloning program similar to True Image® or Norto...

How to Install Atom Text Editor on Linux

<div dir="ltr" style="text-align: left;" trbidi="on">
Install Atom Text Editor on Linux 
Atom is a free and open-source text and source code editor for OS X, <a href="http://www.hackthesec.co.in/search/label/Linux%20Tutorial">Linux</a>, and Windows with support for plug-ins written in <a href="http://www.hackthesec.co.in/search/label/Node.Js">Node.js</a>, and embedded Git Control, developed by GitHub. Atom is a desktop application built using web technologies.Most of the extending packages have free software licenses and are community-built and maintained. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3ARKzzefA1615wkkivoaLavT3Ij2jwwhHyB11xReXBrBJVBwQQDVc2sF2xB-KRawvyJW3lrG9efInnot5_flwBEH3Rl0mLtKtlROSqpgdL8oRx3IslHEjHPBNO670IGbA4gn2xPKkAlcZ/s1600/Atom-Text-editor_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3ARKzzefA1615wkkivoaLavT3Ij2jwwhHyB11xReXBrBJVBwQQDVc2sF2xB-KRawvyJW3lrG9efInnot5_flwBEH3Rl0mLtKtlROSqpgdL8oRx3IslHEjHPBNO670IGbA4gn2xPKkAlcZ/s1600/Atom-Text-editor_hackthesec.co.in.png" /></a></div>
 
Atom is based on Electron (formerly known as Atom Shell),a framework that enables cross-platform desktop applications using Chromium and Node.js. It is written in CoffeeScript and Less.It can also be used as an IDE. Atom was released from beta, as version 1.0, on June 25, 2015.Its developers call it a "hackable text editor for the 21st Century" 
Features 
 
<ul style="text-align: left;">
<li>Cross-platform editing – Atom works across operating systems. You can use it on OS X, Windows, or Linux.</li>
<li>Built-in package manager – Search for and install new packages or start creating your own—all from within Atom.</li>
<li>The smart autocompletion – Atom helps you write code faster with a smart, flexible autocomplete.</li>
<li>File system browser – Easily browse and open a single file, a whole project, or multiple projects in one window.</li>
<li>Multiple panes – Split your Atom interface into multiple panes to compare and edit code across files.</li>
<li>Find and replace – Find, preview, and replace text as you type in a file or across all your projects.</li>
</ul>
 
 
INSTALLATION  
To install Atom on Linux, you can download a <a href="https://atom.io/download/deb" target="_blank">Debian package</a> or <a href="https://atom.io/download/rpm" target="_blank">RPM package</a> either from the main Atom website at <a href="http://atom.io/">atom.io</a> or from the Atom project releases page at <a href="https://github.com/atom/atom/releases">https://github.com/atom/atom/releases</a> 
Install Atom on Debian, Ubuntu And Mint Linux 
We can install the Atom 1.3.1 Text Editor on Debian, Ubuntu And Mint Linux enter following command: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ wget https://github.com/atom/atom/releases/download/v1.3.1/atom-amd64.deb
$ sudo dpkg -i atom-amd64.deb</pre>
Install Atom on RHEL/CentOS and Fedora Linux 
 
To install Atom 1.3.1 Text Editor on RHEL/CentOS and Fedora Linux enter following command: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ wget https://github.com/atom/atom/releases/download/v1.3.1/atom.x86_64.rpm
$ sudo rpm -ivh atom.x86_64.rpm</pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUzjXwOoFEiXRbCYV62C9SUW7QKwiqSz1ADvtcsYw2kXpmMFAWp0BXjR54UDr5YBQgvHGKIfP7LTrTAm5IiCBBt6ajfqYdiHVFHRzC_Yjt8KChsrvlfrXkBeFX0CVbIg9DzrQl-oyYvdJA/s1600/Atom-v1.3.1-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUzjXwOoFEiXRbCYV62C9SUW7QKwiqSz1ADvtcsYw2kXpmMFAWp0BXjR54UDr5YBQgvHGKIfP7LTrTAm5IiCBBt6ajfqYdiHVFHRzC_Yjt8KChsrvlfrXkBeFX0CVbIg9DzrQl-oyYvdJA/s1600/Atom-v1.3.1-hackthesec.co.in.png" /></a></div>
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
 </div>

How to Install Atom Text Editor on Linux

Install Atom Text Editor on Linux Atom is a free and open-source text and source code editor for OS X, Linux , and Windows with support fo...

How to Use NODEQUERY to monitor server performance

<div dir="ltr" style="text-align: left;" trbidi="on">
Using NODEQUERY to monitor server performance 
NodeQuery provides a lightweight and easy to use linux server monitoring service. Get alerts and actively monitor the performance of your servers. 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBPeO61jkpM4xkCY9tAsp-p2HdWaUthMexdD27tFjhnlqkqTKb1rgamFBzZDOU469CqaQs7y0wBvddYRbok4cfr0okUD808vlTwH8fY61bKUm02EHo8d1Sd191im1dnbHa4Aq5ttyCvV8i/s1600/nodequery.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="412" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBPeO61jkpM4xkCY9tAsp-p2HdWaUthMexdD27tFjhnlqkqTKb1rgamFBzZDOU469CqaQs7y0wBvddYRbok4cfr0okUD808vlTwH8fY61bKUm02EHo8d1Sd191im1dnbHa4Aq5ttyCvV8i/s640/nodequery.jpg" width="640" /></a></div>
 
Anyway, I really like the simplicity of NodeQuery’s user interface and the way its display the data. 
How to setup NodeQuery monitoring agent on your server? 
 
SETUP USER AGENT 
 
Step 1 – Of course, you have to firstly signup for an account at NodeQuery website. <a href="https://nodequery.com/signup" target="_blank">Visit this link to go to their signup page</a>. 
Step 2 – Choose Beta Account, and then fill in your Full Name, Email Address and Password. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiC3GEfFWCifMoiEVHP2k5aw1T9U3uxVse-BQZW1Itln7qkQunv8YJAZBGyhagg3gu5AEUb2gvclCvuUOQNGEHWQmHRPmJIEvRwFeTejSCRMdzDmV7fQby-2EQ1Jw43XP7qDWR5Y4vmYEnN/s1600/nodequery.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiC3GEfFWCifMoiEVHP2k5aw1T9U3uxVse-BQZW1Itln7qkQunv8YJAZBGyhagg3gu5AEUb2gvclCvuUOQNGEHWQmHRPmJIEvRwFeTejSCRMdzDmV7fQby-2EQ1Jw43XP7qDWR5Y4vmYEnN/s1600/nodequery.png" /></a></div>
Just click on the blue Sign Up button. You'll be then asked to enter a challenge code. Just enter it, tick mark the "I agree to ToS," and click the Confirm button. 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMm_ByUt0C3uepQVc4EtQhyphenhyphenqVQSSanOF8qOdpD73l0YO6l1hPA7H8eiAxtkarsnGzyiHjWsES2F3jaBTcIKlFADGsh2EXOxZMZ8RlLXgYUe0dwz6niui9BTcp935VbrOwNf3-zk4mlLokt/s1600/registration_done_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMm_ByUt0C3uepQVc4EtQhyphenhyphenqVQSSanOF8qOdpD73l0YO6l1hPA7H8eiAxtkarsnGzyiHjWsES2F3jaBTcIKlFADGsh2EXOxZMZ8RlLXgYUe0dwz6niui9BTcp935VbrOwNf3-zk4mlLokt/s1600/registration_done_hackthesec.co.in.png" /></a></div>
 
Then Goto your mail box and active the registration link after that login your account you will see the bellow dashboard.. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbQjPpnV1y-T1MkaWQ2RBOX6-MTJK9-scK43uXdr-52y2rel2sqw_469AohbU-UlmhbEWounXegKrXE3DQ7PCicWlIr_r2i-xbctlx24QJl1coYF_C4mrXcB4Rz7vu1nZVfvNDyQ5DR-rs/s1600/nodequery_dashboard.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbQjPpnV1y-T1MkaWQ2RBOX6-MTJK9-scK43uXdr-52y2rel2sqw_469AohbU-UlmhbEWounXegKrXE3DQ7PCicWlIr_r2i-xbctlx24QJl1coYF_C4mrXcB4Rz7vu1nZVfvNDyQ5DR-rs/s1600/nodequery_dashboard.png" /></a></div>
 
Step 5 – Let's add your first server to monitor. Click on the New Server button / link. 
Step 6 – Now define your server name. It is strongly recommended to use your valid FQDN. 
You have to also decide how the system will send you alert when your server goes down. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuHNd6lY-FjLB1yGCiFB27IAtIG7y052jv3cCk6L6ybQ4Pm3ccYLhu3EsQLQBVO78uz40B61UWJTxg5xKQPdLvkF4rE_oek1rgV1_H0KmYYcKYrsDs1a_qZiOPbaZ4G4SppgAnAhXC-dbo/s1600/nodequery_serveradd_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuHNd6lY-FjLB1yGCiFB27IAtIG7y052jv3cCk6L6ybQ4Pm3ccYLhu3EsQLQBVO78uz40B61UWJTxg5xKQPdLvkF4rE_oek1rgV1_H0KmYYcKYrsDs1a_qZiOPbaZ4G4SppgAnAhXC-dbo/s1600/nodequery_serveradd_hackthesec.co.in.png" /></a></div>
Setup minimum threshold of when NodePing should send you alert. There are three major sections you can setup the threshold for system resource usage alert : System load, RAM usage, and Disk usage. 
 
Step 7 -After that You'll be given a command to install monitoring agent on your server. Just copy that command : 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6CU8ZiTDfSxKXTgpd2iAyXtNpiMw34mWcRNRatCfyX2OIrLJQFfWRJsUo_7UC7LimjasTXC4O2xLUrrhmje11v7U08o3rTFVNtGYSiiTcZA7iiQcCRoaDnboeZCkJzP3aXAtoRqYC9Naw/s1600/nodequery_agentinstall_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6CU8ZiTDfSxKXTgpd2iAyXtNpiMw34mWcRNRatCfyX2OIrLJQFfWRJsUo_7UC7LimjasTXC4O2xLUrrhmje11v7U08o3rTFVNtGYSiiTcZA7iiQcCRoaDnboeZCkJzP3aXAtoRqYC9Naw/s1600/nodequery_agentinstall_hackthesec.co.in.png" /></a></div>
Step 8 - Open up putty and login to your server as a user with sudo privilege. Issue the coped command there : 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpre6oah_6cnIhUpT3wIjVDmsW5eaS26l5vqzAS_QEzo5NjoWxIcZji2LMuUjjE4nUFtHzwdLHsdnGduHaHkcsU1CJLtj58sfj_tNJ0vshmBTuG8fX6Q28TQHWLITcF7-ocKtpn5g67PlH/s1600/nodequery_agent_install_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpre6oah_6cnIhUpT3wIjVDmsW5eaS26l5vqzAS_QEzo5NjoWxIcZji2LMuUjjE4nUFtHzwdLHsdnGduHaHkcsU1CJLtj58sfj_tNJ0vshmBTuG8fX6Q28TQHWLITcF7-ocKtpn5g67PlH/s1600/nodequery_agent_install_hackthesec.co.in.png" /></a></div>
Step 9 – Go back to NodeQuery dashboard and click on the Manage Servers button.  You’ll then notice your newly added server is there. However, the status would be Awaiting Data It's need some to for syncing.. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNa3XQfKUW32YBrVxINXZ6DKOKcl6znX4TGTuNBgVnXaR2ES3Z6Gjz6UM5aBQhMKEi7Sjd9aYogQr35FXce3NGuZ7YDyolqkc8SX_4CT0fHrR5MabmEsuLb00SOVuFqC4YLEgb0RRnbF8p/s1600/nodequery_serveradd_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNa3XQfKUW32YBrVxINXZ6DKOKcl6znX4TGTuNBgVnXaR2ES3Z6Gjz6UM5aBQhMKEi7Sjd9aYogQr35FXce3NGuZ7YDyolqkc8SX_4CT0fHrR5MabmEsuLb00SOVuFqC4YLEgb0RRnbF8p/s1600/nodequery_serveradd_hackthesec.co.in.png" /></a></div>
 
Just wait for approximately 3 minutes and refresh that page. You’ll then see a page similar to this one : 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQTGXK8oNGEcBNpCxjoFJJhL8zDJxfS0QlbGnxanAJjm7htw4mZF12cmlF0tJ7dofNNwqcNgv664oazR1-WEtGuaVXAviQYAz1qp1JwqWOpv79qe8yZK6KKcV7JcmC-5hDfet2PbQv27Pu/s1600/nodequery_active_node_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQTGXK8oNGEcBNpCxjoFJJhL8zDJxfS0QlbGnxanAJjm7htw4mZF12cmlF0tJ7dofNNwqcNgv664oazR1-WEtGuaVXAviQYAz1qp1JwqWOpv79qe8yZK6KKcV7JcmC-5hDfet2PbQv27Pu/s1600/nodequery_active_node_hackthesec.co.in.png" /></a></div>
Step 10 – You can then browse around to see detailed server performance stats monitored by NodeQuery : 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8NjxNlI1pTidb9iDydIbcp0uIyGBIt6ZGlzfZ4URfGowwTEXCQgqO9rOhnpOMNnt8_FpZyn2rHhbGXMTJbeQKF6X3sVIcBctv6VFUdUBQh2IjDmFDdU8J5rasZjfZNUjEplXOo1azSeCK/s1600/processes_manager_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8NjxNlI1pTidb9iDydIbcp0uIyGBIt6ZGlzfZ4URfGowwTEXCQgqO9rOhnpOMNnt8_FpZyn2rHhbGXMTJbeQKF6X3sVIcBctv6VFUdUBQh2IjDmFDdU8J5rasZjfZNUjEplXOo1azSeCK/s1600/processes_manager_hackthesec.co.in.png" /></a></div>
Network usage 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK0vut85MZeaJtjL3ZXuf2Y4YaFr8oj1UNPZL97wStbtg7vz4BYR82WmLBkiQ95TkDmE9v8f6zeB80DRHPC1QaS9xRdsYQ-n5NYmJEgDusnd5FlJxxXXy853vR5LexhV4g32gvevJmb36h/s1600/network_usage.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK0vut85MZeaJtjL3ZXuf2Y4YaFr8oj1UNPZL97wStbtg7vz4BYR82WmLBkiQ95TkDmE9v8f6zeB80DRHPC1QaS9xRdsYQ-n5NYmJEgDusnd5FlJxxXXy853vR5LexhV4g32gvevJmb36h/s1600/network_usage.png" /></a></div>
Network latency 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSPNvmiA3b6pomSU3_-PWxhZa55PctM3Pd2r7ZVRRi802JR935AO2PkymvjkPcZzYJxTTB98ht9RlLHe7Otr2bKsxujS713WvQTJXCQFzItXE-CqYs7dnT-x3JWOj0uWlDJp_xqlIc3Z-k/s1600/network_latency.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSPNvmiA3b6pomSU3_-PWxhZa55PctM3Pd2r7ZVRRi802JR935AO2PkymvjkPcZzYJxTTB98ht9RlLHe7Otr2bKsxujS713WvQTJXCQFzItXE-CqYs7dnT-x3JWOj0uWlDJp_xqlIc3Z-k/s1600/network_latency.png" /></a></div>
Average Load (CPU and Disk I/O) 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBtmf5uBER4qjvWeDSOyc0wm_mtr8w10j7rwMUyTGM_Yayx4GfSoMoeoi2XCr7kHJUTb6Hb_obVOYIy5PB8qd57k3p_CwSi7589yRCZ2E4eqEQw4ckulEcK9govPNFJxNiB2mZvfU1P1TN/s1600/average_load_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBtmf5uBER4qjvWeDSOyc0wm_mtr8w10j7rwMUyTGM_Yayx4GfSoMoeoi2XCr7kHJUTb6Hb_obVOYIy5PB8qd57k3p_CwSi7589yRCZ2E4eqEQw4ckulEcK9govPNFJxNiB2mZvfU1P1TN/s1600/average_load_hackthesec.co.in.png" /></a></div>
RAM Usage Stats 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJ27kWlhDewsMXvCc2lSJDbGx_0wN-2rIpmMdfbrYIjPuNZWnPOktlCKvCBPPxKyQDu5b8hd5e5oQPq3kRJtf0RUXRbl38gyhmHe7IhVZDT3FjJipKoqpTXYo_AnKkLJrOgZ6IotCE7dIq/s1600/ram_and_swap_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJ27kWlhDewsMXvCc2lSJDbGx_0wN-2rIpmMdfbrYIjPuNZWnPOktlCKvCBPPxKyQDu5b8hd5e5oQPq3kRJtf0RUXRbl38gyhmHe7IhVZDT3FjJipKoqpTXYo_AnKkLJrOgZ6IotCE7dIq/s1600/ram_and_swap_hackthesec.co.in.png" /></a></div>
Disk Usage 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3ijlrM7gpyNTe8QZMoUCvW30VNvK3yvhDnFTzwUJd51xDlIcVdbtXinDMX8SeGANf7Z0vYTZKI3S8UOSAgjsOFs3bc0rRKtYAmKMJfMP00JeyK_FM6lUmFj8E5-4iuV21-IsEoGqdQ8NH/s1600/disk_usage_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3ijlrM7gpyNTe8QZMoUCvW30VNvK3yvhDnFTzwUJd51xDlIcVdbtXinDMX8SeGANf7Z0vYTZKI3S8UOSAgjsOFs3bc0rRKtYAmKMJfMP00JeyK_FM6lUmFj8E5-4iuV21-IsEoGqdQ8NH/s1600/disk_usage_hackthesec.co.in.png" /></a></div>
 
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a> 
 </div>

How to Use NODEQUERY to monitor server performance

Using NODEQUERY to monitor server performance NodeQuery provides a lightweight and easy to use linux server monitoring service. Get alerts...

How to Install and Configure Puppet on CentOS 7 / RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
Install and Configure Puppet on CentOS 7 / RHEL 7 
<a href="http://www.hackthesec.co.in/search/label/puppet" target="_blank">Puppet </a>is an open-source configuration management tool. It runs on many Unix-like systems as well as on Microsoft Windows, and includes its own declarative language to describe system configuration. 
<div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7ox3PLkn1wWucxc5pzawlrlkniY2vrwbbOgxyDP-sdmzqZJGZ2SFjp5zooTXX2yUp5sQyeLRudJxODHJTH9A2VaD2BhxXfRVdLjfI41bjM14B0dxikkcksis0X-Jkkeu6x-1vPO9iI82y/s1600/Install-Puppet-in-CentOS_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7ox3PLkn1wWucxc5pzawlrlkniY2vrwbbOgxyDP-sdmzqZJGZ2SFjp5zooTXX2yUp5sQyeLRudJxODHJTH9A2VaD2BhxXfRVdLjfI41bjM14B0dxikkcksis0X-Jkkeu6x-1vPO9iI82y/s1600/Install-Puppet-in-CentOS_hackthesec.co.in.png" /></a></div>
 <a href="http://www.hackthesec.co.in/search/label/puppet" target="_blank">Puppet</a> is produced by Puppet Labs, founded by Luke Kanies in 2005. It is written in Ruby and released as free software under the GNU General Public License (GPL) until version 2.7.0 and the Apache License 2.0 after that. 
Puppet Master: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Operating system : CentOS 7 Minimal
IP Address       : 192.168.2.10
HostName         : server.hackthesec.local</pre>
Puppet client: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Operating System : CentOS 7 Minimal
IP Address       : 192.168.2.20
HostName         : client.hackthesec.local</pre>
Make sure your system (both puppet server and client) is able to resolve the hostname each other, either use /etc/hosts file or DNS server. 
 
 
To have a production ready puppet setup, we have to use apache with passenger. To get the passenger, download and place the repo file to /etc/yum.repos.d/ 
Note: Only on the master server. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; float: none !important; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# curl --fail -sSLo /etc/yum.repos.d/passenger.repo https://oss-binaries.phusionpassenger.com/yum/definitions/el-passenger.repo</pre>
<div>
To install the puppet master / agent, we would require to setup puppet repository on the all the nodes. Enable puppet labs repository by installing below rpm.</div>
<div>
Note: Run it on both master and agent nodes.</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># rpm -ivh https://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm</pre>
</div>
<div>
<div>
Install and Configure Puppet on CentOS 7:</div>
<div style="color: #333333;">
Now, its time to install puppet. Install the puppet server using below command.</div>
</div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; float: none !important; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# yum -y install puppet-server</pre>
<div>
As said earlier, we will configure puppet for master / agent architecture. So, this node will acts as a master node. Edit the puppet configuration file and modify the dns_alt_names.</div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# vi /etc/puppet/puppet.conf

[main]
dns_alt_names = server,server.hackthesec.local
certname = server.hackthesec.local</pre>
If this machine is the only puppet master in your environment, run below command to create the puppet master certificate. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet master --verbose --no-daemonize

Info: Creating a new SSL key for ca
Info: Creating a new SSL certificate request for ca
Info: Certificate Request fingerprint (SHA256): 81:C6:BB:8B:1D:71:4C:64:E1:13:54:1B:EC:CF:99:D8:85:90:D1:6C:E8:85:50:3E:03:41:BA:C5:47:A7:4C:E5
Notice: Signed certificate request for ca
Info: Creating a new certificate revocation list
Info: Creating a new SSL key for server.hackthesec.local
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for server.hackthesec.local
Info: Certificate Request fingerprint (SHA256): FF:BE:D4:9B:E4:12:83:79:AE:BE:50:17:76:5F:F5:CD:5F:53:EA:5D:AA:5D:87:9E:7C:C4:BC:1B:8A:C6:FA:5C
Notice: server.hackthesec.local has a waiting certificate request
Notice: Signed certificate request for server.hackthesec.local
Notice: Removing file Puppet::SSL::CertificateRequest server.hackthesec.local at '/var/lib/puppet/ssl/ca/requests/server.hackthesec.local.pem'
Notice: Removing file Puppet::SSL::CertificateRequest server.hackthesec.local at '/var/lib/puppet/ssl/certificate_requests/server.hackthesec.local.pem'
Notice: Starting Puppet master version 3.8.3</pre>
Once you get "Notice: Starting Puppet master version <VERSION>", press ctrl-C to kill the process. 
Configure a Production-Ready Web Server: 
Puppet comes with a basic puppet master web server, but this cannot be used for real-life loads. We must configure a production quality web server before we start managing our nodes with Puppet. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; float: none !important; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# yum -y install httpd httpd-devel mod_ssl ruby-devel rubygems gcc gcc-c++ pygpgme curl</pre>
<div>
Install Passenger and apache module.</div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# yum install -y mod_passenger</pre>
Create three directories for the application (a parent directory, a "public" directory, and a "tmp" directory), Copy the ext/rack/config.ru file from the Puppet source code into the parent directory and Set the ownership of the config.ru file. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# mkdir -p /usr/share/puppet/rack/puppetmasterd
[root@hackthesec server ~]# mkdir /usr/share/puppet/rack/puppetmasterd/public /usr/share/puppet/rack/puppetmasterd/tmp
[root@hackthesec server ~]# cp /usr/share/puppet/ext/rack/config.ru /usr/share/puppet/rack/puppetmasterd/
[root@hackthesec server ~]# chown puppet:puppet /usr/share/puppet/rack/puppetmasterd/config.ru</pre>
Add virtual host for puppet by creating the below configuration file. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# vi /etc/httpd/conf.d/puppetmaster.conf</pre>
Add below content into the virtual host file, change the  entries as per your environement. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># you probably want to tune these settings
PassengerHighPerformance on
PassengerMaxPoolSize 12
PassengerPoolIdleTime 1500
# PassengerMaxRequests 1000
PassengerStatThrottleRate 120

Listen 8140

<VirtualHost *:8140>
        SSLEngine on
        SSLProtocol             ALL -SSLv2 -SSLv3
        SSLCipherSuite          EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
        SSLHonorCipherOrder     on

SSLCertificateFile      /var/lib/puppet/ssl/certs/server.hackthesec.local.pem        SSLCertificateKeyFile   /var/lib/puppet/ssl/private_keys/server.hackthesec.local.pem        SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
        SSLCACertificateFile   /var/lib/puppet/ssl/ca/ca_crt.pem
        # If Apache complains about invalid signatures on the CRL, you can try disabling
        # CRL checking by commenting the next line, but this is not recommended.
        SSLCARevocationFile     /var/lib/puppet/ssl/ca/ca_crl.pem
        # Apache 2.4 introduces the SSLCARevocationCheck directive and sets it to none
        # which effectively disables CRL checking; if you are using Apache 2.4+ you must
        # specify 'SSLCARevocationCheck chain' to actually use the CRL.
        # SSLCARevocationCheck chain
        SSLVerifyClient optional
        SSLVerifyDepth  1
        # The `ExportCertData` option is needed for agent certificate expiration warnings
        SSLOptions +StdEnvVars +ExportCertData

# This header needs to be set if using a loadbalancer or proxy
        RequestHeader unset X-Forwarded-For

RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
        RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
        RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e

DocumentRoot /usr/share/puppet/rack/puppetmasterd/public
        RackBaseURI /
        <Directory /usr/share/puppet/rack/puppetmasterd/>
                Options None
                AllowOverride None
                Order allow,deny
                allow from all
        </Directory>
</VirtualHost>  </pre>
Restart apache server to take an effect of puppet virtual host, to do that, run following command on terminal. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# systemctl restart  httpd.service</pre>
Disable puppet service and enable apache server to auto start on system boot. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# systemctl disable puppet.service
[root@hackthesec server ~]# systemctl enable httpd.service</pre>
Firewall: 
Puppet listens on port no 8140; Configure the IP tables to allow it. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# firewall-cmd --zone=public --add-port=8140/tcp --permanent
[root@hackthesec server ~]# firewall-cmd --reload</pre>
Install Puppet on Agent Nodes: 
On your client machine, install puppet agent using below command. 
 
 
Note: You must have puppet repository configured on the agent nodes. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec client ~]# yum -y install puppet</pre>
Edit the puppet configuration file and set puppet master information on the client stanza. 
 
 
Note: Modify "server" value as per your environment. In my case, server is "server.hackthesec.local" 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec client ~]# vi /etc/puppet/puppet.conf

[agent]
server = server.hackthesec.local</pre>
Start puppet on agent node and make it to start automatically on system boot. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec client ~]# systemctl start  puppet.service
[root@hackthesec client ~]# systemctl enable puppet.service</pre>
You would get below events in the logs. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">05:46:45 client systemd: Starting Puppet agent...
05:46:46 client systemd: Started Puppet agent.
05:47:03 client systemd: Reloading.
05:49:10 client puppet-agent[2694]: Did not receive certificate</pre>
Sign the Agent Node's Certificate on Master Server: 
In an agent/master deployment, an admin must approve a certificate request for each agent node before that node can fetch configurations. Agent nodes will request certificates the first time they attempt to run. 
 
 
Log into the puppet master server and run below command to view outstanding requests. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert list
"server.hackthesec.local" (SHA256) 35:D1:B5:67:52:1C:1C:BH:6H:DD:3C:2E:B0:28:D7:15:52:95:32:95:1F:37:29:2G:5F:D7:4C:F5:DB:94:A1:B2</pre>
Run puppet cert sign to sign a request, or puppet cert sign –all to sign all pending requests. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert sign client.hackthesec.local

Notice: Signed certificate request for client.hackthesec.local
Notice: Removing file Puppet::SSL::CertificateRequest client.hackthesec.local at '/var/lib/puppet/ssl/ca/requests/client.hackthesec.local.pem'</pre>
Run the following command on client machine to check the certificate 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec client ~]# puppet agent -t

Info: Caching certificate for client.hackthesec.local
Info: Caching certificate_revocation_list for ca
Info: Caching certificate for client.hackthesec.local
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for client.hackthesec.local
Info: Applying configuration version '1445401911'
Info: Creating state file /var/lib/puppet/state/state.yaml
Notice: Finished catalog run in 0.09 seconds</pre>
That’s All. Now, you have successfully configured puppet master and an agent. 
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>

How to Install and Configure Puppet on CentOS 7 / RHEL 7

Install and Configure Puppet on CentOS 7 / RHEL 7 Puppet is an open-source configuration management tool. It runs on many Unix-like syste...

How to Add Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04

yum -y install puppet
</pre>
Install Puppet Agent on Ubuntu 14.04: 
Puppet agent, we have to configure Puppetlabs repository on Ubuntu 14.04. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">wget https://apt.puppetlabs.com/puppetlabs-release-trusty.deb
sudo dpkg -i puppetlabs-release-trusty.deb

sudo apt-get update

sudo apt-get install puppet
</pre>
Configure puppet agent on CentOS 7 / Ubuntu 14.04: 
Once the installation is done, we will need to update the "/etc/puppet/puppet.conf" file. 
 
There are two section on the agent node's puppet config file, a [main] and [master] section. Add the following settings to your [main] settings. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/puppet/puppet.conf</pre>
Comment or Delete "templatedir=$confdir/templates" line and enter your details Foreman (Puppet Master) in "server = hostname" line 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">[main]
logdir=/var/log/puppet
vardir=/var/lib/puppet
ssldir=/var/lib/puppet/ssl
rundir=/var/run/puppet
factpath=$vardir/lib/facter
#templatedir=$confdir/templates
### Add Below Lines ###
server = server.hackthesec.local
report = true
pluginsync = true</pre>
Edit /etc/default/puppet to enable puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/default/puppet</pre>
Setting this to "yes" allows the puppet agent service to run. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">START=yes</pre>
To enable and run puppet agent service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet resource service puppet ensure=running enable=true</pre>
Sign Puppet Agent certificate: 
Now, you will have to sign the certificates of puppet agents in order to work with Foreman, issue the following command to list down the unsigned certificates. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert list
"ubuntu.hackthesec.local" (SHA256) 35:D1:B5:67:52:1C:1C:BH:6H:DD:3C:2E:B0:28:D7:15:52:95:32:95:1F:37:29:2G:5F:D7:4C:F5:DB:94:A1:B2</pre>
In the above output, "ubuntu.hackthesec.local" is the puppet agent. To sign the certificate follow below command 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert sign ubuntu.hackthesec.local
Notice: Signed certificate request for ubuntu.hackthesec.local
Notice: Removing file Puppet::SSL::CertificateRequest ubuntu.hackthesec.local at '/var/lib/puppet/ssl/ca/requests/ubuntu.hackthesec.local.pem'</pre>
Console Mode: 
Open your Foreman web console, go to Infrastructure –> Smart proxies. Click Certificates button. 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUGlMe2UjdXBn2DDmn2QcJbRjLwa8rQTCYQN4s6nXK5rQAzCeF3H_99APJ3smwjMYNTRuuG74KRirK3p63DATPuJ5lvaGGBPLEnmcMo1N2cbT01mZr1aaNoYwSM5Ex_P10qEGH5wsUGT45/s1600/Puppet-Nodes-to-Foreman-Smart-Proxies-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUGlMe2UjdXBn2DDmn2QcJbRjLwa8rQTCYQN4s6nXK5rQAzCeF3H_99APJ3smwjMYNTRuuG74KRirK3p63DATPuJ5lvaGGBPLEnmcMo1N2cbT01mZr1aaNoYwSM5Ex_P10qEGH5wsUGT45/s1600/Puppet-Nodes-to-Foreman-Smart-Proxies-hackthesec.co.in.png" /></a></div>
You see  agent certificate (ubuntu.hackthesec.local) is pending to be signed. To sign, click Sign button. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEZDMnqfHwnNiEwh7QQY2UQALS34bO8_M6Sr26SbZlfVTDXBlnaKLD5l1Dwofy8UlTUgArDwGH_J2VauYMgSdznCEDdpWV4HuYDlZJPcgaX0nNLa1GinDis5lXfRNE-cmvymUeTno1aBxB/s1600/Puppet-Nodes-to-Foreman-Agent-Certificates-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEZDMnqfHwnNiEwh7QQY2UQALS34bO8_M6Sr26SbZlfVTDXBlnaKLD5l1Dwofy8UlTUgArDwGH_J2VauYMgSdznCEDdpWV4HuYDlZJPcgaX0nNLa1GinDis5lXfRNE-cmvymUeTno1aBxB/s1600/Puppet-Nodes-to-Foreman-Agent-Certificates-hackthesec.co.in.png" /></a></div>
After that your agent (ubuntu.hackthesec.local) is signed successfully. 
To verify the node go to Hosts –> All Hosts. Verify that the new node (ubuntu.hackthesec.local) has been added to Foreman. 
Troubleshooting 
In case if you want to remove the puppet agent from the Puppet master, run. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert clean ubuntu.hackthesec.local
Notice: Revoked certificate with serial 3
Notice: Removing file Puppet::SSL::Certificate ubuntu.hackthesec.local at '/var/lib/puppet/ssl/ca/signed/ubuntu.hackthesec.local.pem'
Notice: Removing file Puppet::SSL::Certificate ubuntu.hackthesec.local at '/var/lib/puppet/ssl/certs/ubuntu.hackthesec.local.pem'</pre>
In case, if you want to re-register the puppet agent that you just deleted in previous step. Follow the below procedure. 
 
Stop the puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">service puppet stop</pre>
Delete the puppet agent ssl directory. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">rm -rf /var/lib/puppet/ssl/certs</pre>
Start the puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">service puppet start</pre>
Now, you can go and run the "puppet cert list" command on Foreman (puppet master) server to see the signing request, approve it incase you required. 
 
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>