Install Docker

Install Docker First, to install SQL Server, you need to install Docker. If you already have it installed, go to the following command (as root)

# curl -s https://get.docker.com/ | sudo sh

Make sure the installation is complete

# docker version

With this check, if you get: Cannot connect to the Docker daemon. Is the docker daemon running on this host? Launch Docker using the command below:

# service docker start

Then enter the following command to automatically launch Docker at boot time:

# systemctl enable docker

Install SQL Server

Install SQL Server using the following command:

# docker run --restart always -e 'ACCEPT_EULA=Y' -e 'MSSQL_SA_PASSWORD=YourStrongP@SSW0RD' -e 'MSSQL_PID=Developer' -p 1433:1433 --name SQL_CONTAINER -d microsoft/mssql-server-linux

Below, it will be described in detail for what certain teams and their functions and application are responsible for:

• –restart always – Restarting the container if for any reason it is completed;
• -e ‘ACCEPT_EULA = Y’- This is a parameter that prompts you to accept the end user license agreement. If you do not agree, the installation will not continue.
• –e ‘MSSQL_PID = Developer’- This is the parameter for entering the license and product key. It can be used with Developer, Evaluationб Express, Web, Enterprise, Standard;
• –name SQL_CONTAINER – Specifies the name of the container;
• -d microsoft / mssql-server-linux- container image. If not specified, by default it will be installed with the latest version.

Checking Your Python Version

In order to go to upgrade your python, you need to check its version. This can be done using the following command:

python3 -V

If python is successfully installed on your server, then you should get something like this:

Python 3.6.7

Updating your Python Version

First, you need to install the required dependencies to compile the Python source code. This can be done using a special command, which is presented below:

yum groupinstall 'development tools' -y && yum install wget openssl-devel bzip2-devel libffi-devel xz-devel -y

After that, we recommend going to the Python source download page to find the latest gzip version of the source code. Replace the urls and filenames in this tutorial with the latest version. Then download your python

wget https://www.python.org/ftp/python/3.9.6/Python-3.9.6.tgz

After that, you need to unpack the archive that you just downloaded. You can do it like this:

tar xzf Python-3.9.6.tgz

Next, compile the Python source

cd Python-3.9.6 && ./configure --enable-optimizations

This is followed by the installation of your Python. Use the following command:

make altinstall

After that, a mandatory step for execution will be to check the name of your new Python executable file

ls /usr/local/bin/python*

Then Install the new default Python executable. Replace the two instances of /python3.9 in the following command with the name of your new Python executable

alternatives --install /usr/bin/python3 python3 /usr/local/bin/python3.9 1 && alternatives --set python3 /usr/local/bin/python3.9 && echo "2" | alternatives --config python

Update your PIP

An important step for this update is to update your pip.

/usr/local/bin/python3.9 -m pip install --upgrade pip

Then you should check the name of your new pip executable

ls /usr/local/bin/pip*

Set the new item as default. Use the name of your new pip executable in the following command:

alternatives --install /usr/bin/pip pip /usr/local/bin/pip3.9 1 && alternatives --set pip /usr/local/bin/pip3.9

After that, you need to check the current version of your installed Python. You can make sure like this:

python -V && pip -V

After that, you will be able to see the following:

Python-3.9.6
pip 21.2.3 from /usr/local/lib/python3.9/site-packages/pip (python 3.9)

Use the hostname utility

You need to change the hostname to another name of your choice. For instance:

hostname server_1

Edit /etc/hosts

Open the /etc/hosts file in your acceptable text editor:

nano /etc/hosts

Change the first line and replace your old hostname with the new one. Save the file and exit the editor.

Edit /etc/sysconfig/network

This file also contains your hostname. Open the /etc/sysconfig/network file in your favorite text editor. Change HOSTNAME=vps.hostry.com to your desired hostname. For example: HOSTNAME = server_1.

Check your Hostname

For this check, enter the following command:

hostname

The new hostname will be displayed in your ssh terminal.

Disable and uninstall SELinux

# setenforce 0
# yum remove selinux-policy\*
# rm -rf /etc/selinux/targeted /etc/selinux/config

Install SELinux

# yum install selinux-policy-targeted
# yum install selinux-policy-devel policycoreutils
# touch /.autorelabel; reboot

SELinux will detect the /.autorelabel file upon reboot, and then reconfigure all the files in the correct SELinux contexts. If you have many files in your virtual machine, then VPS may be unavailable for a long time.

Note!

If SELinux is not already installed, then you need to go to step 2 – installing SELinux. If SELinux is installed on your virtual server, then you need to remove it (to reset the policy to the default settings)

Installation

In order to install Ansible, you first need to install the EPEL repository. This can be done using a special command:

yum install epel-release

Then we advise you to update the packages on your CentOS distribution

yum -y update

After updating the packages, install Ansible with the yum extension using a special command:

yum -y install ansible

For correct and competent administration of severs on Windows, you need to install the following packages: python-pip, pywinrm and also pip itself.

The next step is to install the Python packages. This can be done using a special command:

yum -y install python-pip pip

In order to work with Ansible in the future, you need to check the installation. By entering the command:

ansible --version

Setup Ansible

First of all, it is recommended to update the packages on your CentOS:

yum -y update

Then go to the Ansible directory

cd /etc/ansible

Edit the hosts file in your favorite text editor

nano hosts

To configure Windows and its further use, it is necessary to do the following:

[windows]
server1.domain.local
server1.domain.local

Next, you need to create an encrypted vault that will contain access identifiers for the Windows server. To accomplish this, it is recommended that you create a new encrypted yml file. The file name must match the host group to which it will apply. In our case, the created windows group is called, which means that there will be a windows.yml file

mkdir group_vars
cd group_vars
ansible-vault create windows.yml

In the finish, you need to add the following parameters to your yml file

ansible_ssh_user: _your_ssh_user_
ansible_ssh_pass: _your_ssh_pass_
ansible_ssh_port: 5986
ansible_connection: winrm
ansible_winrm_server_cert_validation: ignore

To follow all the instructions in this article, you will need a busy copy of Hostry Vps. It will be designated under IP 185.186.xxxx.xxxx

System update

Before starting, update the system to the last stable available version with this command:

yum update -y

Install ArangoBD

Before installing, you will need to create a yum repository file. To do this, change the directory to /etc/yum.repos.d and create it arangodb.repo using the following command:

cd /etc/yum.repos.d
sudo nano /etc/yum.repos.d/arangodb.repo

Add the following text:

[arangodb]
name=ArangoDB Project
type=rpm-md
baseurl=https://strato1.arangodb.com/repositories/arangodb3/CentOS_7/
gpgcheck=1
gpgkey=https://strato1.arangodb.com/repositories/arangodb3/CentOS_7/repodata/repomd.xml.key
enabled=1

Save the file and update the system using this command:

sudo yum update -y

Then install ArangoDB with the following command:

sudo yum install arangodb3 -y

After installation is complete, start the ArangoDB service:

sudo systemctl start arangodb3

The status of ArangoDB can be checked as follows:

sudo systemctl status arangodb3

If everything went well, you should see the following output:

  ● arangodb3.service - SYSV: ArangoDB Server
   Loaded: loaded (/etc/rc.d/init.d/arangodb3)
   Active: active (running) since Tue 2016-11-01 21:40:43 IST; 2min 30s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 2766 ExecStart=/etc/rc.d/init.d/arangodb3 start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/arangodb3.service
       ├─2810 /usr/sbin/arangod --uid arangodb --gid arangodb --log.foreground-tty false --pid-file /var/run/arangodb/arangod.pid --temp.path ...
       └─2811 /usr/sbin/arangod --uid arangodb --gid arangodb --log.foreground-tty false --pid-file /var/run/arangodb/arangod.pid --temp.path ...

Nov 01 21:40:31 centOS-7 systemd[1]: Starting SYSV: ArangoDB Server...
Nov 01 21:40:43 centOS-7 arangodb3[2766]: Starting /usr/sbin/arangod:  starting up in daemon mode
Nov 01 21:40:43 centOS-7 systemd[1]: Started SYSV: ArangoDB Server.
Nov 01 21:40:43 centOS-7 arangodb3[2766]: changed working directory for child process to '/var/tmp'

Access ArangoDB CLI

ArangoDB comes with arangosh command-line utility for accessing the database. You can run this utility with the following command:

arangosh

When prompted for a password, enter the root password. You will see the following output:

                                     _     
  __ _ _ __ __ _ _ __   __ _  ___  ___| |__  
 / _` | '__/ _` | '_ \ / _` |/ _ \/ __| '_ \ 
| (_| | | | (_| | | | | (_| | (_) \__ \ | | |
 \__,_|_|  \__,_|_| |_|\__, |\___/|___/_| |_|
                       |___/                 

arangosh (ArangoDB 3.0.10 [linux] 64bit, using VPack 0.1.30, ICU 54.1, V8 5.0.71.39, OpenSSL 1.0.1e-fips 11 Feb 2013)
Copyright (c) ArangoDB GmbH

Pretty printing values.
Could not connect to endpoint 'http+tcp://127.0.0.1:8529', database: '_system', username: 'root'
Error message: '401: Unauthorized'

Type 'tutorial' for a tutorial or 'help' to see common examples
127.0.0.1:8529@_system> 

Allow ArangoDB through the firewall

By default, ArangoDB runs on port 8529, so you will need to enable this port through a firewall. You can do this by running the following command:

sudo firewall-cmd --permanent --add-port=8529/tcp

Next, you need to restart the firewall service so that these changes are saved and work. This can be done as follows:

sudo firewall-cmd --reload

Installation

Update the packages that are installed on your system

yum update -y

Download the installer to the /root directory

cd ~
wget -O installer.sh https://cyberpanel.net/install.sh

Next, restore the permissions and run the installer:

chmod 755 installer.sh
sh installer.sh

If everything went well, you can see the following output:

     CyberPanel Installer v2.0

  1. Install CyberPanel.

  2. Install Addons.

  3. Exit.


Please enter the number[1-3]: 

Type 1 then press ENTER

Further in the console you can see the following:

    CyberPanel Installer v2.0

  RAM check : 71/487MB (14.58%) 

  Disk check : 1/20GB (7%) (Minimal 10GB free space)

  1. Install CyberPanel with OpenLiteSpeed.

  2. Install Cyberpanel with LiteSpeed Enterprise.

  3. Exit.


Please enter the number[1-3]: 

Again, repeat what you did in the previous step, namely: Type 1, and then press ENTER. After that, the installer will automatically prompt you to install MariaDB. Choosing MariaDB 1.0 you stop on it, because it is the only supported version with a panel. Next, you will see the following output: (note that you always need to specify “y“)

Mirror server network is optimized for Asia Pacific region...
If you experience very slow download speed during installation, please try use mirror server on clean system...
Use mirror server [y/N]: y

Replace JS/CSS files to JS Delivr?
This may improve panel loading speed in Asia Pacific region... 
Please select [y/N]: y

Install Memcached extension for PHP?
Please select [y/N]: y      

Install LiteSpeed Memcached?
Please select [y/N]: y

Install Redis extension for PHP?
Please select [y/N]: y

Install Redis?
Please select [y/N]: y

After your yes agreement, CyberPanel will be installed along with its extensions. After which, the installer will display your administrator data:

###################################################################
                CyberPanel Successfully Installed                  

                Current Disk usage : 3/20GB (16%)                        

                Current RAM  usage : 233/487MB (47.84%)                         

                Installation time  : 0 hrs 3 min 24 sec                      

                Visit: https://(YOUR_SERVER_IP):8090                    
                Panel username: admin                              
                Panel password: 1234567                          
                Mysql username: root                               
                Mysql password: iPe2cEiSh7wEn7                       

            Please change your default admin password              

          If you change mysql password, please  modify file in     
         /etc/cyberpanel/mysqlPassword with new password as well   

              Website : https://www.cyberpanel.net                 
              Forums  : https://forums.cyberpanel.net              
              Wikipage: https://docs.cyberpanel.net                

            Enjoy your accelerated Internet by                  
                CyberPanel & OpenLiteSpeed                                       
###################################################################

Configure CyberPanel

Now, you need to go to the setting, it will take a few more moments. Visit your server IP address on the CyberPanel port (YOUR_SERVER_IP): 8090. There you will see the administrator login. Enter your username and password, as described above.

Next, click on the user menu bar next to the name “Cyber ​​Pan”. Selecting “Edit Profile” click on “admin” and on the drop-down menu “Modify User“. Next, successfully change the first name, last name, your password and email address.

Install fail2ban packages from the epel repository

If the epel package is not installed, enter the commands

user @ localhost: ~ $ sudo yum -y install epel-release

Afrer install fail2ban itself

user @ localhost: ~ $ sudo yum -y install fail2ban

Activate sshd protection in fai2ban settings

Open the file /etc/fail2ban/jail.conf for editing, in the first lines we find the lines

# [sshd] # enabled = true

Then delete the first characters ‘#’, it should work

[sshd]

enabled = true

Restart the service

user@localhost:~$ sudo systemctl restart fail2ban

Check the general status

user@localhost:~$ sudo fail2ban-client status

You should be see something like

Status
|- Number of jail: 1
`- Jail list: sshd

user@localhost:~$ sudo fail2ban-client status sshd

Status for the jail: sshd
|- Filter
| |- Currently failed: 0
| |- Total failed: 15
| - Journal matches: _SYSTEMD_UNIT=sshd.service + _COMM=sshd - Actions
|- Currently banned: 0
|- Total banned: 0
`- Banned IP list:

Do not check how the blocking works from the same IP from which you are already connected via SSH and configure fail2ban, you may lose connection for a long time).

We try to enter the wrong password 4 times to our host from any IP (for example, from 11.12.13.14). If everything works correctly for 5-6 times an unsuccessful login, the password will no longer be requested and the connection will be refused

user@localhost:~$ sudo fail2ban-client status sshd

Status for the jail: sshd
|- Filter
| |- Currently failed: 0
| |- Total failed: 20
| - Journal matches: _SYSTEMD_UNIT=sshd.service + _COMM=sshd - Actions
|- Currently banned: 1
|- Total banned: 1
`- Banned IP list: 11.12.13.14

If you want to remove any IP address from the block list, you can enter the command

user@localhost:~$ sudo fail2ban-client set sshd unbanip <IP>

Install Memcached

First you need to upgrade your CentOS

yum update -y

Next, install the official Memcached package as well as Libmemcached. It represents several utilities for working with Memcached.

yum install -y memcached libmemcached

To start Memcached at boot, you must use the systemctl command

systemctl enable memcached

Memcached Setup

At this stage, you need to connect Memcached with the local interface and disable the UDP port. This is to avoid potential DDOS attacks. Open the /etc/sysconfig/ memcached file in your favorite editor:

nano /etc/sysconfig/memcached

Next, find the line:

OPTIONS=""

Change this to the following:

OPTIONS="-l 127.0.0.1 -U 0"

Save the file and exit the editor. Next please restart Memcached, to use this changes

systemctl restart memcached

You can verify that it works using systemctl:

systemctl status memcached

The output will look like this:

● memcached.service - Memcached
Loaded: loaded (/usr/lib/systemd/system/memcached.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2019-04-04 17:01:41 UTC; 8s ago
Main PID: 31312 (memcached)
CGroup: /system.slice/memcached.service
        └─31312 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024 -l 127.0.0.1 -U 0

Apr 04 17:01:41 docs systemd[1]: Started Memcached.

You can verify that Memcached is only connected to the local interface and only listens for TCP connections using the ss command:

ss -plunt | grep memcached

tcp    LISTEN     0      128    127.0.0.1:11211                 *:*                   users:(("memcached",pid=31312,fd=26))

Verify Settings

You have now completed the setup and configuration of Memcached. You can verify the configuration using the memstat command from the libmemcached package

memstat --servers="localhost"

The output will look like this:

Server: localhost (11211)
    pid: 31312
    uptime: 385
    time: 1554397684
    version: 1.4.15
    libevent: 2.0.21-stable
    pointer_size: 64
    rusage_user: 0.006269
    rusage_system: 0.014105
    curr_connections: 1

...

CPULimit Installation Process

To quickly and successfully install this utility, you need make, screen, and wget. Then you need to install and, therefore, unpack the archive:

cd ~
wget https://astuteinternet.dl.sourceforge.net/project/limitcpu/limitcpu/cpulimit-2.5.tar.gz
tar -xvf cpulimit-2.5.tar.gz

The next step is to run make to start compiling CPULimit:

cd cpulimit-2.5

The next step is to run make to start compiling CPULimit:

make

When this process completes, a binary file will appear in the cpulimit-2.5 directory. In order for it to be available for the entire system, we will need to run the following command:

make install

Configuring CPULimit Using the Application

By entering the special top command it is possible to view the list of processes. They will look something like this

In order to close this display screen, you need to use the following combination: CTRL + A + D. And in order to enter again you can follow the following command:

screen -r limitcpu

The general format for running cpulimit looks like this:

cpulimit -p (PROCESS PID) -l (CPU %)