1. Installation
-
Log in as delta on the tbhf-kvm-mrm server.
-
Note: Use --os—variant=debian10 instead of --os-variant=debian11 to prevent
the Unknown OS name 'debian11'. See 'osinfo-query os' for valid values error. -
Enter the following commands at a Command Line.
scp -p delta@tbhf-anc-mrm:/media/Windows/Images/Debian/debian-11.6.0-amd64-DVD-1.iso . sudo cp -a debian-11.6.0-amd64-DVD-1.iso /home/kvm/images sudo virt-install \ --check all=off \ --disk format=qcow2,path=/home/kvm/images/tbhf-tst-mrm.qcow2,size=100 \ --extra-args="console=tty0 console=ttyS0,115200" \ --graphics none \ --location=/home/kvm/images/debian-11.6.0-amd64-DVD-1.iso \ --name=tbhf-tst-mrm \ --network bridge:br0 \ --os-variant=debian10 \ --ram=2048 \ --vcpus=1 -
Step through the installation with the following choices.
-
Language: English
-
Country, territory or area: other
-
Continent or region: Asia
-
Country, territory or area: Thailand
-
Country to base default locale settings on: United States - en_US.UTF-8
-
Keymap to use: American English
-
Hostname: tbhf-tst-mrm
-
Domain name: smru.shoklo-unit.com
-
Root password: level 1 password
-
Re-enter password to verify: level 1 password
-
Full name for the new user: Delta
-
Username for your account: delta
-
Choose a password for the new user: level 2 password
-
Re-enter password to verify: level 2 password
-
Partitioning method: Guided - use entire disk
-
Select disk to partition: Virtual disk 1 (vda) - 107.4 GB Virtio Block Device
-
Partitioning scheme: All files in one partition (recommended for new users)
-
Partition disks: Finish partitioning and write changes to disk
-
Write the changes to disk? Yes
-
Scan extra installation media? No
-
Use a network mirror? No
-
Participate in the package usage survey? No
-
Uncheck Debian desktop environment.
-
Uncheck GNOME.
-
Check SSH server.
Choose software to install: [ ] Debian desktop environment [ ] ... GNOME [ ] ... Xfce [ ] ... GNOME Flashback [ ] ... KDE Plasma [ ] ... Cinnamon [ ] ... MATE [ ] ... LXDE [ ] ... LXQt [ ] web server [*] SSH server [*] standard system utilities -
Choose software to install: Continue
-
Install the GRUB boot loader to your primary drive? Yes
-
Device for boot loader installation: /dev/vda
-
Select Continue to reboot and press Enter.
-
Press Ctrl + ] to quit the KVM guest console.
-
Type
resetand press Enter to reset the terminal.
2. Configuration
-
Log in as delta on the tbhf-kvm-mrm server.
-
Enter the following commands at a Command Line.
# Make vm start on boot. sudo virsh autostart --domain tbhf-tst-mrm sudo virsh list --all --autostart sudo virsh list --all sudo systemctl status libvirtd sudo ls -al /home/kvm/images sudo qemu-img info --force-share /home/kvm/images/tbhf-tst-mrm.qcow2
3. Console
-
Log in as delta on the tbhf-kvm-mrm server.
-
Type
sudo virsh console --domain tbhf-tst-mrmand press Enter. -
Press Enter to log in.
-
Do your thing.
-
Press Ctrl + ] to quit the KVM guest console.
4. VM Configuration
-
Log in as delta on the tbhf-kvm-mrm server.
-
Type
sudo virsh console --domain tbhf-tst-mrmand press Enter. -
Press Enter.
-
Log in as delta on the tbhf-tst-mrm server.
-
Type
ip aand press Enter. -
Note: Temporarily enable DNS and HTTP services for the IP address assigned by the DHCP server on the SMRU-EFW-MRM firewall.
-
Enter the following commands at a Command Line with root privileges.
ip a scp -p delta@10.10.1.2:/media/Windows/Software/_Delta/delta-linux-tools-#.#.#-1-all.deb . dpkg -i delta-linux-tools-#.#.#-1-all.deb delta config apt # Configure apt repositories. delta config bash # Configure bash shell for each user. delta config cron # Configure cron jobs. delta config editor # Set default editor to vim.tiny for each user. delta config kernel net.ifnames=0 # Disable consistent network device names. delta config locale # Configure locale settings. delta setup inventory # Install and configure inventory. delta setup openssh # Install and configure openssh server. delta setup sudo # Install and configure sudo for each user. delta setup timezone # Install and configure time zone. delta setup systemd-ethernet 10.10.1.8 10.10.1.170 10.10.1.1 smru.shoklo-unit.com -
Restart the virtual machine.
-
Press Ctrl + ] to quit the KVM guest console.
-
Log in as delta on the tbhf-tst-mrm server using PuTTY.
-
Note: Disable DNS and HTTP services for the IP address assigned by the DHCP server on the SMRU-EFW-MRM firewall.
-
Enter the following commands at a Command Line.
ip a ip link list sudo systemctl --type service ls -al /etc/resolv.conf cat /etc/resolv.confsudo apt-get update sudo apt-get upgrade sudo apt-get dist-upgrade sudo apt-get autoremove sudo apt-get autoclean cat /etc/debian_version df sudo apt-get --yes install net-tools # Contains ifconfig command. sudo delta setup snmp-server 10.10.1.12 # Install and configure snmp server. sudo delta setup vim # Install and configure vim editor for each user. sudo delta config vim powershell # Add powershell syntax highlighting. sudo grep -Ei --color=always "bad |brok|cann|crit|deni|err:|erro|fail|igno|insu|leak|lost|miss|not |such|unab|warn" /var/log/syslog sudo zgrep -i 'systemd-networkd-wait-online' /var/log/syslog* sudo zgrep -i 'lost carrier' /var/log/syslog*
5. CrowdStrike Sensor
5.1. Installation
-
Enter the following commands at a Command Line.
scp -p delta@tbhf-anc-mrm:/media/Windows/Software/CrowdStrike/falcon-sensor_6.28.0-12502_amd64.deb . sudo apt-get install libnl-genl-3-200 sudo dpkg -i falcon-sensor_6.28.0-12502_amd64.deb sudo /opt/CrowdStrike/falconctl -s --cid=<CID> --provisioning-token=<token> --tags="SMRU-Server" sudo systemctl start falcon-sensor ps -e | grep falcon-sensor sudo systemctl status falcon-sensor