rahulkathuria / linux-server-configuration Goto Github PK

Create an account on Amazon Web Services.

When you have been successfully logged in, launch the virtual machine and SSH into the instance.

Download the private key and move it to the .ssh folder.

To make the public key usable and secure, input $ chmod 600 ~/.ssh/AWSKey.pem

Now login into the server using $ ssh -i ~/.ssh/AWSKey.pem [email protected]

Now we have to add a new user grader after becoming the root user. $ sudo adduser grader will add a new user named grader.

To give sudo access to the grader, make a new file under etc directory using this $ sudo nano /etc/sudoers.d/grader and add this text to that file : grader ALL=(ALL:ALL) ALL.

Run these commands to update all packages and install finger.

• $ sudo apt-get update
• $ sudo apt-get upgrade
• $ sudo apt-get install finger

Open a new terminal and write this command in that terminal : $ ssh-keygen -f ~/.ssh/udacity_key.rsa

To read that public key, we have to use the cat command : $ cat ~/.ssh/udacity_key.rsa.pub

Copy this key, and now in the first terminal, we have to go to the grader's folder located under the home directory by $ cd /home/grader.

Now we have to create a ssh directory there by using $ mkdir .ssh and creating a file to store that public key : $ touch .ssh/authorized_keys

Paste that key that you copied from the second terminal into this file by editing it using $ nano .ssh/authorized_keys

Now start the service again using $ sudo service ssh restart

Now we can login into the remote VM through ssh using this command : ssh -i udacity_key.rsa [email protected]

Change the permissions using $ sudo chmod 700 /home/grader/.ssh and $ sudo chmod 644 /home/grader/.ssh/authorized_keys.

To enforce the password based authentication, change the text after PasswordAuthentication to no, Port line to 2200 and PermitRootLogin to no after running the command $ sudo nano /etc/ssh/sshd_config and restart the service again using the command written in point 14.

Now to configure the uncomplicated firewall, run these commands:

• $ sudo ufw allow 2200/tcp
• $ sudo ufw allow 80/tcp
• $ sudo ufw allow 123/udp
• $ sudo ufw enable

Now to deploy the application, run the following commands to install the necessary packages:

• $ sudo apt-get install apache2 libapache2-mod-wsgi git
• $ sudo a2enmod wsgi
• $ sudo apt-get install libpq-dev python-dev
• $ sudo apt-get install git
• $ sudo apt-get install postgresql postgresql-contrib
• $ sudo apt-get install python-pip
• $ sudo pip install Flask
• $ sudo pip install httplib2 oauth2client sqlalchemy psycopg2 sqlalchemy_utils

Now restart the service again, sudo service apache2 restart

Now to deploy the application, we have to clone it in a separate directory.

Write down the following commands in the terminal : * $ sudo mkdir /var/www/catalog * $ sudo chown -R grader:grader catalog * $ cd catalog * $ git clone https://github.com/RahulKathuria/Item-Catalog.git

Now we have to create a catalog.wsgi file:

• $ touch catalog.wsgi
• $ nano catalog.wsgi

Now write this code in the file: import sys import logging logging.basicConfig(stream=sys.stderr) sys.path.insert(0, "/var/www/catalog/") from catalog import app as application application.secret_key = 'supersecretkey'

Rename the application from project.py to init.py

Now to install the virtual machine, run the following commands:-

• Create a new User named catalog : # CREATE USER catalog WITH PASSWORD 'rahulkathuria';