Julian Lemmerich's Homenetwork wiki - knowledge_base:linux

add_sudo

Anonymous (anonymous@undisclosed.example.com) — 2022-01-24T06:26:12+00:00

Add user to sudoers su - usermod -aG sudo username danach neustarten

ansible-setup

Anonymous (anonymous@undisclosed.example.com) — 2025-03-06T14:52:43+00:00

Ansible Setup Client Kali bei Kali ist ansible in den default repos enthalten. sudo apt install ansible -y Debian sudo apt install software-properties-common python3-launchpadlib -y sudo apt-add-repository ppa:ansible/ansible sudo apt update && sudo apt install ansible -y

apt-cache

Anonymous (anonymous@undisclosed.example.com) — 2023-11-17T20:41:27+00:00

apt-cache Setup on Debian with apt-cacher-ng apt install apt-cacher-ng apt install avahi-daemon Client echo 'Acquire::http { Proxy "http://proxy:3142"; }' | sudo tee -a /etc/apt/apt.conf.d/proxy should also work automatically with apt install auto-apt-proxy

apt-local

Anonymous (anonymous@undisclosed.example.com) — 2024-10-23T21:43:02+00:00

Offline APT Repo downloading all the deb files apt update # recursive apt dependencies apt install apt-rdepends # this downloads all deb packages of dnsmasq and dependencies. Filter out debconf-2.0 because dependency is missing apt download $(apt-rdepends dnsmasq|grep -v "^ "|grep --invert-match debconf-2.0)

apt-repo

Anonymous (anonymous@undisclosed.example.com) — 2023-10-24T10:13:09+00:00

Host an apt repo Big thanks to Live system at pkg.julian-lemmerich.de/deb Setup sudo apt-get install -y dpkg-dev gpg Start at Step 2, i already have built .deb packages Adding a new package: ~ is root of webserver, like pkg.julian-lemmerich.de This Folder (

bash_cheatsheet

Anonymous (anonymous@undisclosed.example.com) — 2022-05-05T17:11:43+00:00

Bash Cheatsheet

debtree

Anonymous (anonymous@undisclosed.example.com) — 2025-05-07T08:14:16+00:00

Visualisierung von Deb Dependencies Um apt / deb dependencies zu visualisieren kann man debtree verwenden apt install debtree graphviz debtree | dot -Tpng > apt.png

dhcp

Anonymous (anonymous@undisclosed.example.com) — 2021-09-24T17:10:16+00:00

DHCP refresh CentOS 7 sudo dhclient -r sudo dhclient

file_details

Anonymous (anonymous@undisclosed.example.com) — 2021-09-24T17:10:16+00:00

File or Folder Details with stat stat stat kann einem informationen über eine datei oder einen ordner anzeigen. root@8947f6145151:/papermc# stat world File: world Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 801h/2049d Inode: 262367 Links: 9 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2021-02-27 16:15:04.339443357 +0000 Modify: 2021-03-02 08:39:50.832734301 +0000 Change: 2021-03-02 08:39:50.832734301 +0000 Bir…

golang-ppa

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T07:52:57+00:00

Golang via apt-repo often the apt sources for go are behind. The [go wiki]() links to [longsleep/golang-backports PPA](): sudo echo "deb https://ppa.launchpadcontent.net/longsleep/golang-backports/ubuntu jammy main" >> /etc/apt/sources.list.d/golang.list sudo echo "deb-src https://ppa.launchpadcontent.net/longsleep/golang-backports/ubuntu jammy main" >> /etc/apt/sources.list.d/golang.list sudo apt-k…

hostname

Anonymous (anonymous@undisclosed.example.com) — 2021-09-24T17:10:16+00:00

Change Hostname Ubuntu 18.04 Hostname is in /etc/hostname

install-ca

Anonymous (anonymous@undisclosed.example.com) — 2024-11-21T16:20:19+00:00

Install Certificate Authority (CA) cp cert.crt /usr/local/share/ca-certificates/cert.crt sudo update-ca-certificates

iptables

Anonymous (anonymous@undisclosed.example.com) — 2023-07-26T15:27:06+00:00

Linux IPtables Dieser Artikel von Digitalocean ist super: -P INPUT DROP droppt allen incoming traffic.
Das hießt auch looopback und conntrack! daher -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p icmp -j ACCEPT

jool

Anonymous (anonymous@undisclosed.example.com) — 2023-04-21T08:37:11+00:00

Jool apt install linux-headers-$(uname -r) apt update apt install jool-dkms jool-tools sysctl -w net.ipv4.conf.all.forwarding=1 sysctl -w net.ipv6.conf.all.forwarding=1 modprobe jool jool instance add "default" --iptables --pool6 64:ff9b::/96 ip6tables -t mangle -A PREROUTING -j JOOL --instance "default" iptables -t mangle -A PREROUTING -j JOOL --instance "default"

mac_m1_ubuntu

Anonymous (anonymous@undisclosed.example.com) — 2022-10-16T14:00:04+00:00

Mac M1 Ubuntu mit GUI

motd

Anonymous (anonymous@undisclosed.example.com) — 2023-09-06T12:34:04+00:00

MOTD and Issue MOTD erscheint bei login, /etc/issue erscheint auf dem „Sperrbildschirm“.

ntp

Anonymous (anonymous@undisclosed.example.com) — 2024-05-07T10:31:38+00:00

NTP sudo ntpdate pool.ntp.org WSL macht probleme. Angeblich gefixt in Kernel 5.10 Git commit echo -e "#! /bin/sh\n\nsudo ntpdate pool.ntp.org" > .git/hooks/pre-commit chmod +x .git/hooks/pre-commit

openvpn_router

Anonymous (anonymous@undisclosed.example.com) — 2023-08-09T09:22:13+00:00

Debian als OpenVPN Forwarder nutzen Plain Debian Setup, zwei Adapter (einer richtung Internet, einer für das lokale Netz). openvpn & net.ipv4.ip_forward=1 net.ipv6.conf.all.forwarding=1 Diese Configuration geht davon aus, dass iptables komplett leer ist. Kein UFW oder sonstiger schnickschnack. Wir wollen es hier auch nicht Sicher machen. Verkehr wird in alle Richtungen erlaubt. Das ist nur ein Router, keine Firewall Ansonsten einmal `iptables -F`

policy_route_application

Anonymous (anonymous@undisclosed.example.com) — 2023-08-02T12:12:05+00:00

Policy Route for one Application for example to bypass VPN for a single app: ip rule add fwmark 2 table 3 ip route add default via 10.0.0.1 table 3 ip route flush cache iptables -t mangle -A OUTPUT -p tcp --dport 465 -j MARK --set-mark 2 Maybe relax source path validation? See Stackoverflow!

remove_gui

Anonymous (anonymous@undisclosed.example.com) — 2023-03-27T09:13:49+00:00

Uninstall Desktop GUI Debian / Kali sudo apt purge $(tasksel --task-packages desktop-xfce)

ssh

Anonymous (anonymous@undisclosed.example.com) — 2024-11-04T21:49:59+00:00

SSH Debian Recommended config mkdir ~/.ssh cd ~/.ssh wget https://raw.githubusercontent.com/JM-Lemmi/JM-Lemmi/main/authorized_keys Port 22 #Port 22222 PermitRootLogin Prohibit-Password PasswordAuthentication no ChallengeResponseAuthentication no #Match Address 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 # PasswordAuthentication yes

start

Anonymous (anonymous@undisclosed.example.com) — 2021-09-24T17:10:16+00:00

Linux Subnamespaces: * Android * Docker * IP Configuration * Raspian * Turnkey Knowledge_Base:Linux * Add user to sudoers * Ansible Setup * apt-cache * Bash Cheatsheet * Bash set Terminal color * Change Hostname * Debian als OpenVPN Forwarder nutzen * DHCP refresh * File or Folder Details with stat * Golang via apt-repo * Host an apt repo * Install Certificate Authority (CA) * Install VBoxAdditions * Jool * Linux IPtables * Mac M1 Ubuntu mit GUI * MOTD and Issue * M…

tcpdump

Anonymous (anonymous@undisclosed.example.com) — 2021-09-24T17:10:16+00:00

Use tcpdump to show traversing ICMP packets tcpdump -i wg0 icmp

terminal_color

Anonymous (anonymous@undisclosed.example.com) — 2022-07-19T12:26:11+00:00

Bash set Terminal color If you want to temporarily set your terminal color to differentiate from other terminals: printf '\033[31m' sets to red

tmp_tmpfs

Anonymous (anonymous@undisclosed.example.com) — 2025-04-04T08:14:59+00:00

Move /tmp to tmpfs If a disk is dying and in read only mode, many applications will fail, such as b2 for backups, because they want to write to /tmp To just temporarily move /tmp to a RAM File System, you can use the following command mount -o mode=1777,nosuid,nodev -t tmpfs tmpfs /tmp

vboxadditions

Anonymous (anonymous@undisclosed.example.com) — 2022-01-31T10:36:06+00:00

Install VBoxAdditions insert cd sudo sh ./VBoxLinuxAdditions.run --nox11 Ubuntu Shared Folder On ubuntu to get permissions to the shared folder sudo adduser $USER vboxsf

vmwareadditions

Anonymous (anonymous@undisclosed.example.com) — 2024-05-22T07:42:24+00:00

VMWare WS Guest Additions sudo apt install -y open-vm-tools-desktop sudo apt update sudo reboot kali-tweaks



install virtalization additional stuff


sudo mount-shared-folders