1. Installation

  • Log in as delta on the tbhf-kvm-mrm server.

  • Note: Use --os—​variant=debian10 instead of --os-variant=debian11 to prevent
    the Unknown OS name 'debian11'. See 'osinfo-query os' for valid values error.

  • Enter the following commands at a Command Line.

    scp -p delta@tbhf-anc-mrm:/media/Windows/Images/Debian/debian-11.6.0-amd64-DVD-1.iso .
    sudo cp -a debian-11.6.0-amd64-DVD-1.iso /home/kvm/images
    
    sudo virt-install \
    --check all=off \
    --disk format=qcow2,path=/home/kvm/images/tbhf-tst-mrm.qcow2,size=100 \
    --extra-args="console=tty0 console=ttyS0,115200" \
    --graphics none \
    --location=/home/kvm/images/debian-11.6.0-amd64-DVD-1.iso \
    --name=tbhf-tst-mrm \
    --network bridge:br0 \
    --os-variant=debian10 \
    --ram=2048 \
    --vcpus=1
  • Step through the installation with the following choices.

  • Language: English

  • Country, territory or area: other

  • Continent or region: Asia

  • Country, territory or area: Thailand

  • Country to base default locale settings on: United States - en_US.UTF-8

  • Keymap to use: American English

  • Hostname: tbhf-tst-mrm

  • Domain name: smru.shoklo-unit.com

  • Root password: level 1 password

  • Re-enter password to verify: level 1 password

  • Full name for the new user: Delta

  • Username for your account: delta

  • Choose a password for the new user: level 2 password

  • Re-enter password to verify: level 2 password

  • Partitioning method: Guided - use entire disk

  • Select disk to partition: Virtual disk 1 (vda) - 107.4 GB Virtio Block Device

  • Partitioning scheme: All files in one partition (recommended for new users)

  • Partition disks: Finish partitioning and write changes to disk

  • Write the changes to disk? Yes

  • Scan extra installation media? No

  • Use a network mirror? No

  • Participate in the package usage survey? No

  • Uncheck Debian desktop environment.

  • Uncheck GNOME.

  • Check SSH server.

    Choose software to install:                     [ ] Debian desktop environment
                                                    [ ] ... GNOME
                                                    [ ] ... Xfce
                                                    [ ] ... GNOME Flashback
                                                    [ ] ... KDE Plasma
                                                    [ ] ... Cinnamon
                                                    [ ] ... MATE
                                                    [ ] ... LXDE
                                                    [ ] ... LXQt
                                                    [ ] web server
                                                    [*] SSH server
                                                    [*] standard system utilities
  • Choose software to install: Continue

  • Install the GRUB boot loader to your primary drive? Yes

  • Device for boot loader installation: /dev/vda

  • Select Continue to reboot and press Enter.

  • Press Ctrl + ] to quit the KVM guest console.

  • Type reset and press Enter to reset the terminal.

2. Configuration

  • Log in as delta on the tbhf-kvm-mrm server.

  • Enter the following commands at a Command Line.

    # Make vm start on boot.
    sudo virsh autostart --domain tbhf-tst-mrm
    sudo virsh list --all --autostart
    
    sudo virsh list --all
    sudo systemctl status libvirtd
    sudo ls -al /home/kvm/images
    sudo qemu-img info --force-share /home/kvm/images/tbhf-tst-mrm.qcow2

3. Console

  • Log in as delta on the tbhf-kvm-mrm server.

  • Type sudo virsh console --domain tbhf-tst-mrm and press Enter.

  • Press Enter to log in.

  • Do your thing.

  • Press Ctrl + ] to quit the KVM guest console.

4. VM Configuration

  • Log in as delta on the tbhf-kvm-mrm server.

  • Type sudo virsh console --domain tbhf-tst-mrm and press Enter.

  • Press Enter.

  • Log in as delta on the tbhf-tst-mrm server.

  • Type ip a and press Enter.

  • Note: Temporarily enable DNS and HTTP services for the IP address assigned by the DHCP server on the SMRU-EFW-MRM firewall.

  • Enter the following commands at a Command Line with root privileges.

    ip a
    
    scp -p delta@10.10.1.2:/media/Windows/Software/_Delta/delta-linux-tools-#.#.#-1-all.deb .
    dpkg -i delta-linux-tools-#.#.#-1-all.deb
    
    delta config apt                        # Configure apt repositories.
    delta config bash                       # Configure bash shell for each user.
    delta config cron                       # Configure cron jobs.
    delta config editor                     # Set default editor to vim.tiny for each user.
    delta config kernel net.ifnames=0       # Disable consistent network device names.
    delta config locale                     # Configure locale settings.
    
    delta setup inventory                   # Install and configure inventory.
    delta setup openssh                     # Install and configure openssh server.
    delta setup sudo                        # Install and configure sudo for each user.
    delta setup timezone                    # Install and configure time zone.
    
    delta setup systemd-ethernet 10.10.1.8 10.10.1.170 10.10.1.1 smru.shoklo-unit.com
  • Restart the virtual machine.

  • Press Ctrl + ] to quit the KVM guest console.

  • Log in as delta on the tbhf-tst-mrm server using PuTTY.

  • Note: Disable DNS and HTTP services for the IP address assigned by the DHCP server on the SMRU-EFW-MRM firewall.

  • Enter the following commands at a Command Line.

    ip a
    ip link list
    sudo systemctl --type service
    ls -al /etc/resolv.conf
    cat /etc/resolv.conf
    sudo apt-get update
    sudo apt-get upgrade
    sudo apt-get dist-upgrade
    sudo apt-get autoremove
    sudo apt-get autoclean
    
    cat /etc/debian_version
    df
    
    sudo apt-get --yes install net-tools    # Contains ifconfig command.
    sudo delta setup snmp-server 10.10.1.12 # Install and configure snmp server.
    sudo delta setup vim                    # Install and configure vim editor for each user.
    sudo delta config vim powershell        # Add powershell syntax highlighting.
    
    sudo grep -Ei --color=always "bad |brok|cann|crit|deni|err:|erro|fail|igno|insu|leak|lost|miss|not |such|unab|warn" /var/log/syslog
    sudo zgrep -i 'systemd-networkd-wait-online' /var/log/syslog*
    sudo zgrep -i 'lost carrier' /var/log/syslog*

5. CrowdStrike Sensor

5.1. Installation

  • Enter the following commands at a Command Line.

    scp -p delta@tbhf-anc-mrm:/media/Windows/Software/CrowdStrike/falcon-sensor_6.28.0-12502_amd64.deb .
    sudo apt-get install libnl-genl-3-200
    sudo dpkg -i falcon-sensor_6.28.0-12502_amd64.deb
    sudo /opt/CrowdStrike/falconctl -s --cid=<CID> --provisioning-token=<token> --tags="SMRU-Server"
    sudo systemctl start falcon-sensor
    ps -e | grep falcon-sensor
    sudo systemctl status falcon-sensor