Neil's Blog

(Linux) SNMP Client

Posted on 2018-02-16 Edited on 2022-03-28 In Linux

安裝SNMP Client
```
 sudo apt-get install snmp
```

SNMP Client config

2.1 設定檔 /etc/snmp/snmp.conf內容如下

 #MIB 所在資料夾
 mibdirs /usr/share/snmp/mibs/
 #使用的MIB
 mibs CISCO-C2900-MIB:TCP-MIB:UDP-MIB

也可使用export command改變環境變數-所在資料夾MIB,與MIB

 export MIBDIRS=/usr/share/snmp/mibs
 export MIBS=CISCO-C2900-MIB

SNMP Client Command 說明

 snmpget  -v 2c -c  <Server Community> <SNMP Server IP> <MIB>:<OID>
 snmpwalk  -v 2c -c  <Server Community> <SNMP Server IP> <MIB>:<OID> 
 snmpset  -v 2c -c  <Server Community> <SNMP Server IP> <MIB>:<OID> <Value Type> <Value>

其中2c為snmp version, 需與 sever 端配合,大多是 2c 版,Community習慣設 Public

(Linux)Redmine server - Project management & Issue tracking

Posted on 2018-02-16 Edited on 2022-03-28 In Linux , Software engineering , Project management , Issue tracking

環境：
- Ubuntu10.04
- Redmine2.4.1

設定MySQL

 CREATE DATABASE redmine CHARACTER SET utf8;
 CREATE USER 'redmine'@'localhost' IDENTIFIED BY 'my_password';
 GRANT ALL PRIVILEGES ON redmine.* TO 'redmine'@'localhost';

安裝RVM (Ruby Version Manager)與RubyGems (Ruby package manager)

 sudo adduser redmine
 sudo su redmine
 sudo apt-get install curl
 sudo su redmine
 curl -L https://get.rvm.io | bash -s stable
 source ~/.rvm/scripts/rvm
 echo "source ~/.rvm/scripts/rvm" >> ~/.bashrc
 rvm install 1.9.3
 rvm use 1.9.3
 ruby -v
 wget http://production.cf.rubygems.org/rubygems/rubygems-2.1.7.tgz
 tar zxvf rubygems-2.1.7.tgz
 cd rubygems-2.1.7/
 ruby setup.rb

使用RubyGems安裝bunlder

gem update –system
gem install bunlder

安裝Ruby rmagick與Ruby MySQL Adapter
- ruby rmagick
```
  sudo apt-get install imagemagick
  sudo apt-get install libmagickwand-dev
  gem install rmagick
```
- ruby mysql2
  
  sudo apt-get install libmysql-ruby libmysqlclient-dev
  gem install mysql2

安裝redmine

下載redmine,並解壓縮至至/home/redmine/redmine_site

  cd ~/redmine_site
  cp ./config/database.yml.example ./config/database.yml
  vim ./config/database.yml

  production:
    adapter: mysql2      (note: For Rails < 3.1 use mysql instead of mysql2)
    database: redmine
    host: localhost
    username: redmine
    password: my_password

  bundle install --without development test postgresql sqlite rmagick
  rake generate_secret_token RAILS_ENV=production
  rake db:migrate RAILS_ENV=production
  rake redmine:load_default_data

測試Redmine是否安裝成功 (http://localhost:3000/redmine/)
```
     ruby script/rails server webrick -e production
```

設定Redmine使用Apache2

 sudo vim /etc/apache2/http.conf

 Listen 8083
 <VirtualHost *:8083>
   ServerName Redmine
   DocumentRoot /home/redmine/redmine_site/public/
   <Directory /home/redmine/redmine_site/public/>
      Options Indexes ExecCGI FollowSymLinks
      Order allow,deny
      Allow from all
      AllowOverride all
   </Directory>
 </VirtualHost>

 gem install passenger --no-rdoc --no-ri
 passenger-install-apache2-module
 cd /etc/apache2/mods-available
 sudo vim passenger.conf

 PassengerRoot /home/redmine/.rvm/gems/ruby-1.9.3-p484/gems/passenger-4.0.25
 PassengerDefaultRuby /home/redmine/.rvm/wrappers/ruby-1.9.3-p484/ruby

 sudo vim passenger.load

 LoadModule passenger_module /home/redmine/.rvm/gems/ruby-1.9.3-p484/gems/passenger-4.0.25/buildout/apache2/mod_passenger.so

 cd /etc/apache2/mods-enabled
 sudo ln -s /etc/apache2/mods-available/passenger.conf
 sudo ln -s /etc/apache2/mods-available/passenger.load

(Linux) Radius Server

Posted on 2018-02-16 Edited on 2022-03-28 In Linux

https://zh.wikipedia.org/wiki/远端用户拨入验证服务
遠端用戶撥入驗證服務（RADIUS, Remote Authentication Dial In User Service）是一個AAA協議，意思就是同時兼顧驗證（authentication）、授權（authorization）及計費（accounting）三種服務的一種網路傳輸協議（protocol），通常用於網路存取、或流動IP服務，適用於局域網及漫遊服務。

1. 安裝Radius Server

    sudo apt-get install freeradius

2. 設定Radius Server

2.1 設定檔目錄 /etc/freeradius/

2.1.1 radiusd.conf (FreeRADIUS主要系統設定檔)

2.1.2 clients.conf (認證客戶端設定檔)

client <客戶端 IP Address>
{            
    secret = <Secret Key密鑰>            
    shortname = <客戶端代號>            
}

Ex:若有內部網路要使用該radius認證的話，可以在client.conf加入該IP，例如有一部AP的IP為192.168.1.00，則加入

client 192.168.1.100
{            
    secret    =     tseting123            
    shorename    =     private-network-1            
}

2.1.3 users (本地帳號及處理方式設定檔)

3. 啟動Radius Server

sudo /usr/sbin/freeradius -X

(Linux) PPPoE Server

Posted on 2018-02-16 Edited on 2022-03-28

安装 PPPoE Server

 sudo apt-get install pppoe

也可make安裝:rp-pppoe套件-官網：http://www.roaringpenguin.com/products/pppoerp-ppp

 sudo tar zxvf rp-pppoe-3.6.tar.gz -C /opt/
 sudo chown -R root:root /opt/rp-pppoe-3.6/

安裝軟體開發函示庫：

 sudo apt-get install libc6-dev

產生pppoe server程式

 sudo /opt/rp-pppoe-3.6/go

設定PPPoE Server

 sudo vim  /etc/ppp/option
 sudo vim /etc/ppp/options

新增帳號

 /etc/ppp/pap-secrets
 /etc/ppp/chap-secrets

設定forward(若無forward,Client即使拿到IP,Traffic也出不去)
```
 echo "1">/proc/sys/net/ipv4/ip_forward (用root执行)
```
啓動PPPoE Server:
```
 pppoe-server -I eth1 -L 192.168.1.1 -R 192.168.1.10 -N 200
```
-N :選用的網卡
-L IP : 指定interface 端的IP
-R IP: 發出去的IP
-N :連線數目

(Linux) PPPoE Server on Different VLAN

Posted on 2018-02-16 Edited on 2022-03-28 In Linux

設定不同VLAN在同張網卡:(VLAN 10 : eth0.10, VLAN 11 : eth0.11)

啓動PPPoE Server:

 pppoe-server -I eth0.10 -L 192.168.1.1 -R 192.168.1.10 -N 200
 pppoe-server -I eth0.11 -L 192.168.1.1 -R 192.168.1.10 -N 200

(Linux)(Git) Gitolite Server - Git ACL Server

Posted on 2018-02-16 Edited on 2022-03-28 In Linux , Software engineering , Revision control , Git

Server端

安裝git

     sudo apt-get install git-core git-doc gitk git-gui

Server端

安裝gitolite

  git clone git://github.com/ossxp-com/gitolite.git
  sudo mkdir -p /usr/local/share/gitolite/conf /usr/local/share/gitolite/hooks
  cd gitolite/src
  sudo ./gl-system-install /usr/local/bin \
  /usr/local/share/gitolite/conf /usr/local/share/gitolite/hooks

更改gl-setup
```
  sudo vi /usr/local/bin/gl-setup
```

其中

     GL_PACKAGE_CONF=/usr/local/share/gitolite/conf

Server端
- 增加系統使用者git
- 增加新群組git
- 設置使用者git為可登入shell
```
  sudo adduser --home /home/git --system --shell /bin/bash --group git
```
- 將使用者git加入使用者群組ssh,
  (其中ssh群組已經先被建立,且ssh server僅允許ssh群組可連入ssh server)
```
  sudo adduser git ssh
```
Client端
- 建立gitolite管理者使用憑證(admin.pub,admin),
- 並傳admin_name.pub至server端~/底下
Server端
- 安裝gitolite管理者使用憑證(admin.pub,admin))
```
  sudo su - git
  gl-setup ~/admin.pub
```
使用SSH憑證key1進行git clone gitolite-admin管理庫
```
 git clone git@server_ip:gitolite-admin
```
gitolite-admin管理庫
- conf/gitolite.conf 文件,設定git版本庫,分支等讀寫權限
- keydir/*.pub 用戶SSH公鑰
- 增加新用戶,只要將新用戶SSH公鑰加入keydir/中,再執行git push即可

Gerrit Server - Code Review Server on Linux

Posted on 2018-02-16 Edited on 2022-03-28 In Linux , Software engineering , Revision control , Git

安裝java執行環境

安裝MySQL Server

(Ubuntu)可至Ubuntu軟體中心 ,下載並安裝MySQL伺服器與MySQL管理員進行管理

設定MySQL

  mysql -u root -p
  CREATE USER 'gerrit'@'localhost' INDENTIFIED BY 'secret';
  CREATE DATABASE reviewdb;
  ALTER DATABASE reviewdb charset=latin1;
  GRANT ALL ON reviewdb.* TO 'gerrit'@'localhost';
  FLUSH PRIVILEGES;

安裝Apache Server

  sudo apt-get install apache2 apache2-dev

安裝Apache proxy模組

  sudo a2nemod proxy
  sudo a2nemod proxy_http

設定Apache Server代理登錄

  vim /etc/apache2/sites-available/default

或

     vim /etc/apache2/httpd.conf

 <!-- -->
     Listen 8082
     Listen 8083
     Listen 8084
     <VirtualHost *:8082>
       ServerName localhost
       ProxyRequests Off
       ProxyVia Off
       ProxyPreserveHost On
       <Proxy *>
          Order deny,allow
          Allow from all
       </Proxy>
       <Location /login/>
          AuthType Basic
          AuthName "Gerrit Code Review"
          AuthBasicProvider file
          AuthUserFile /home/gerrit/review_site/etc/gerrit.passwd
          Require valid-user
       </Location>
       AllowEncodedSlashes On
       ProxyPass / http://localhost:8081/ nocanon
     </VirtualHost>
     <VirtualHost *:8083>
       ServerName Redmine
       DocumentRoot /home/redmine/redmine_site/public/
       <Directory /home/redmine/redmine_site/public/>
          Options Indexes ExecCGI FollowSymLinks
          Order allow,deny
          Allow from all
          AllowOverride all
       </Directory>
     </VirtualHost>
     <VirtualHost *:8084>
       ServerName PhpMyAdmin
       DocumentRoot /usr/share/phpmyadmin
       <Directory /usr/share/phpmyadmin>
          Options Indexes ExecCGI FollowSymLinks
          Order allow,deny
          Allow from all
          AllowOverride all
       </Directory>
     </VirtualHost>

啟動Apache Server
```
  sudo /etc/init.d/apache2 restart
```

安裝Gerrit Server

建立Gerrit專用帳號

sudo adduser gerrit
sudo su gerrit
cd ~gerrit
安裝Gerrit V2.7 (下載Gerrit的.war包至/home/gerrit)

java -jar gerrit-2.7.war init -d review_site

設定Gerrit Server

  vim /home/gerrit/review_site/etc/gerrit.config

  [gerrit]
          basePath = git
          canonicalWebUrl = http://220.132.142.166:8082/
  [database]
          type = mysql
          hostname = localhost
          database = reviewdb
          username = gerrit
  [auth]
          type = HTTP
  [sendemail]
          smtpServer = smtp.gmail.com
          smtpServerPort = 465
          smtpEncryption = SSL
          smtpUser = xunyi.lee@gmail.com
  [container]
          user = gerrit
          javaHome = /usr/lib/jvm/java-7-oracle/jre
  [sshd]
          listenAddress = *:29418
  [httpd]
          listenUrl = proxy-http://localhost:8081/
  [cache]
          directory = cache
  [gitweb]
          cgi = /usr/share/gitweb/index.cgi

增加Gerrit 用戶

  sudo htpasswd -c /home/gerrit/review_site/etc/gerrit.passwd 用戶名稱

啟動Gerrir Server

  vim /home/gerrit/review_site/bin/gerrit.sh

  GERRIT_SITE=/home/gerrit/review_site
  NO_START=0

  /home/gerrit/review_site/bin/gerrit.sh restart
  sudo ln -s /home/gerrit/review_site/bin/gerrit.sh /etc/init.d/
  sudo /etc/init.d/gerrit.sh restart

Gerrit用戶認證
- 使用建立的Gerrit用戶帳號與密碼,登入Web,
- 第一個登入的帳號為Administrator,
- 進入setting填入Email認證,
- 並加入Public SSH Key

Gerrit增加Label-Verified

 mkdir tmp
 cd tmp
 git init
 git remote add origin ssh://admin@remote.site.com:29418/All-Projects
 git fetch origin refs/meta/config:refs/remotes/origin/meta/config
 git checkout meta/config
 vim project.config

 [label "Verified"]
         function = MaxWithBlock
         value = -1 Fails
         value = 0 No score
         value = +1 Verified

 git add *
 git config --global user.name "Neil Lee"
 git config --global user.email xunyi.lee@gmail.com
 git commit -m "Add label'verfied'"
 git push origin meta/config

設定Gerrit Web中使用中文註解

設定Gerrit MySQL Server連線設定

  vim /home/gerrit/review_site/etc/gerrit.config

  [database]
          type = mysql
          url = jdbc:mysql://localhost:3306/reviewdb?user=gerrit&useUnicode=true&characterEncoding=utf8

設定Gerrit database in MySQL Server

  mysql -u gerrit -p
  ALTER DATABASE reviewdb charset=utf8;
  use reviewdb;
  alter table account_diff_preferences engine=innodb;
  alter table account_external_ids engine=innodb;
  alter table account_group_id engine=innodb;
  alter table account_group_includes_by_uuid engine=innodb;
  alter table account_group_includes_by_uuid_audit engine=innodb;
  alter table account_group_members engine=innodb;
  alter table account_group_members_audit engine=innodb;
  alter table account_group_names engine=innodb;
  alter table account_groups engine=innodb;
  alter table account_id engine=innodb;
  alter table account_patch_reviews engine=innodb;
  alter table account_project_watches engine=innodb;
  alter table account_ssh_keys engine=innodb;
  alter table accounts engine=innodb;
  alter table change_id engine=innodb;
  alter table change_message_id engine=innodb;
  alter table change_messages engine=innodb;
  alter table changes engine=innodb;
  alter table patch_comments engine=innodb;
  alter table patch_set_ancestors engine=innodb;
  alter table patch_set_approvals engine=innodb;
  alter table patch_sets engine=innodb;
  alter table schema_version engine=innodb;
  alter table starred_changes engine=innodb;
  alter table submodule_subscriptions engine=innodb;
  alter table system_config engine=innodb;
  alter table tracking_ids engine=innodb;
  ALTER TABLE account_diff_preferences CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_external_ids CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_group_id CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_group_includes_by_uuid CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_group_includes_by_uuid_audit CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_group_members CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_group_members_audit CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_group_names CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_groups CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_id CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_patch_reviews CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_project_watches CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE account_ssh_keys CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE accounts CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE change_id CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE change_message_id CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE change_messages CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE changes CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE patch_comments CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE patch_set_ancestors CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE patch_set_approvals CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE patch_sets CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE schema_version CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE starred_changes CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE submodule_subscriptions CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE system_config CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;
  ALTER TABLE tracking_ids CONVERT TO CHARACTER SET utf8 COLLATE utf8_general_ci;

設定Gerrit提供gitweb瀏覽repo

安裝gitweb
```
  sudo apt-get install gitweb
```

設定gitweb

  vim /home/gerrit/review_site/etc/gerrit.config

  [gitweb]
          cgi = /usr/share/gitweb/index.cgi

(Linux)(Embeded system)(C)(C++)Remote debug by GDB server

Posted on 2018-02-16 Edited on 2022-03-28 In Programming language , Embeded system , Linux , C , C++

設定環境

Host (PC)(Ubuntu)
- 安裝Cross-Compile GDB & GDB Server
  - 下載GDB Source (內含GDB & GDB Server)
    http://www.gnu.org/software/gdb/download/
- Complier GDB
```
  cd <GDB source>
  ./configure
  make
```
- Cross-compiler GDB Server
```
  cd <GDB Src>/gdbserver
  ./configure --host=mipsel-linux
  make
```
- 安裝CGDB方便操作GDB
```
  sudo apt-get install cgdb
```
- Cross-compile with GCC Debug option “-g”
Target board
- 將放在target board
- 將放在target board

進行Remote debug

Target board

GDB Server 設定Listen Port

  <cross-compiled gdbserver> localhost:<port> <cross-compiled  application>

Host
- 使用CGDB啟動GDB
```
  cgdb -d <cross-compiled gdb> <cross-compiled application>
```
- 切換至GDB模式
  - CGDB與GDB模式互換
    - GDB->CGDB: 按下”esc”
    - CGDB->GDB: 按下”i”
  - GCC Debug command連上GDB Server
```
  target remote <target board IP>:<target board port>
```
- GCC Debug command
  - list (l) –顯示程式
  - continue (c) – 離開中斷點，繼續執行程式
  - run (r) – 開始執行程式
  - next (n) – Step over
  - next (s) – Step in

(Linux) DHCP server/ client on different VLAN

Posted on 2018-02-16 Edited on 2022-03-28 In Linux

1. Install DHCP Server

sudo apt-get install dhcp3-server

2. Configure DHCP Server

sudo vim /etc/dhcp3/dhcpd.confAdd following:

Add following

subnet 192.168.1.0 netmask 255.255.255.0 {
    range 192.168.1.1 192.168.1.200;
    option routers 192.168.1.254;
}
subnet 192.168.2.0 netmask 255.255.255.0 {
    range 192.168.2.1 192.168.2.200;
    option routers 192.168.2.254;
}

3. Add VLAN to ethernet card (VLAN 10 : eth0.10 ; VLAN 11 : eth0.11)

4. Use Ifconfig to set eth0.10, eth0.11 to different network segment

sudo ifconfig eth0.10 192.168.1.1 netmask 255.255.255.0
sudo ifconfig eth0.11 192.168.2.1 netmask 255.255.255.0

5. Enable/ Disable DHCP Server

sudo /etc/init.d/dhcp3-server start
sudo /etc/init.d/dhcp3-server stop
sudo /etc/init.d/dhcp3-server restart

6. Test by DHCP Clients

dhclient eth0.10
dhclient eth0.11

(Linux)(Bash)開始Bash script

Posted on 2018-02-16 Edited on 2022-03-28 In Programming language , Linux , Bash

Bash script

Linux console mode, 可使用shell script, 進行程式化的指令輸出

使用文字編輯器直接編輯.sh
vim a.sh

建立與執行Bash script

    chmod 777 a.sh
        ./a.sh

或者

    bash a.sh
    bash -x a.sh #Debug command

好用的Linux bash shell scipt手冊