• Minimal.iso = It contains minimum package that requires to a functional Linux system. Doesn’t contain GUI.

• Dvd.iso= It contains minimal packages plus some utility packages, basic development packages and contains GUI. It’s size is 3.7 GB that can fit in DVD.

Boot the system with the boot device and continue installation with selecting Install AlmaLinux 8.

Continue the installation with selecting the system language.

After choosing the system language, the setup page like the one below will appear.

The first thing to do is to set up the network. AlmaLinux needs an active internet connection to download base packages and other necessary files.

If connection can not be established with automatic dhcp settings, dhcp settings should be switched to manuel mode and ipv4 settings should be arranged according to the user’s information.

Next step is setting the root password, keyboard layout , time-date and disk partitioning. After the root password is set, set up time, date and keyboard layout. Inside the disk partitioning settings , select the disk that is going to be used and then click the Done button.

Next, before clicking the Begin Installation button, it should be chosen which packages are going to be installed in the Software Selection section.

If everything has been set correctly, there should be no warnings under the sections. After the steps are completed, you can start your installation by clicking the Begin Installation button. A proper setup page is as follows.

After the installation is complete, it is important to download the basic network packages as well. These packages can be installed with a single command. Other essential packages can be added to this command.

# yum install vim bind-utils net-tools wget rsync netctl openssh-server dnsutils atop

If problems are encountered while installing atop, it should be downloaded with the wget command.

# wget http://www.atoptool.nl/download/atop-2.1-1.i586.rpm

After the download process is completed, it can be seen which group packages of AlmaLinux are installed on the system with the following command and the missing ones should be downloaded in line with the user needs.

# yum group list

There is no GUI in the system due to minimal installation, if a GUI is needed: Download should be done with the Workstation option. This option will provide the user with the Gnome Desktop Environment, as well as most packages that should be on a Workstation.

# yum  group install workstation

After the download is completed, the desktop can be activated with the following command.

# startx &

The post How to Install AlmaLinux 8 appeared first on VeriTeknik.

The post AlmaLinux Beta Released appeared first on VeriTeknik.

Target:

Install iSCSI Utils if not available

Edit targets.conf

vi /etc/tgt/targets.conf

Paste the configuration below, change target name based on your needs

backing-store /dev/sdc1 
initiator-address 172.100.100.2 
# add more initiators if you need 
#initiator-address 172.50.50.2 
#incominguser username password

Enable tgtd service

chkconfig tgtd on

Start the service

service tgtd start

Note: If you don’t want any volume group to be automatically recognized by the operating system of the target, please filter the volume group to be seen on boot.
Edit /etc/lvm/lvm.conf and add this global_filter

global_filter = [ "a|^/dev/sdc1$|", "r/.*/" ]

The post Shared LVM iSCSI Server and Client configuration for CentOS appeared first on VeriTeknik.

Which PHP configure options should I use before compiling?

If you ever need to get the list of modules installed in your current PHP, type the following command via console:

php -m

So, take a list of your current configuration and check the configure list below in order to have a compatible compilation to your existing older version of PHP.

Advice: First of all, you should consider removing PHP packages from your server before compiling PHP, but be aware your codes will be visible till you install the compiled version to your server, consider shutting down your apache server for a while.

yum erase php*

Before downloading the code, install “Development Tools” by typing:

yum groupinstall "Development Tools"

and install other related header files:

yum install wget httpd-devel libtool-ltdl-devel libxml2-devel \
bzip2-devel net-snmp-devel openssl-devel pcre-devel \
curl-devel gd-devel mysql-devel libxslt-devel \
postgresql-devel gmp-devel systemd-devel

Download & install libmcrypt

cd /usr/src
wget http://downloads.sourceforge.net/project\
/mcrypt/Libmcrypt/2.5.8/libmcrypt-2.5.8.tar.gz
tar zxvf libmcrypt-2.5.8.tar.gz 
cd libmcrypt-2.5.8
./configure -libdir=/usr/lib64
make
make install

Download & extract PHP 7.0.4 release:

wget http://php.net/get/php-7.0.4.tar.gz/from/this/mirror
mv mirror /usr/src/php-7.0.4.tar.gz
cd /usr/src/
tar zxvf /usr/src/php-7.0.4.tar.gz 
cd php-7.0.4
./configure \
 --with-apxs2 \
 --with-curl=/usr/local/lib \
 --with-config-file-path=/etc \
 --with-config-file-scan-dir=/etc/php.d \
 --with-pic \
 --with-gd \
 --with-gettext \
 --with-jpeg-dir=/usr/local/lib \
 --with-freetype-dir=/usr/local/lib \
 --enable-sockets \
 --with-kerberos \
 --with-openssl \
 --with-mhash \
 --with-mcrypt=/usr/local/lib \
 --with-mysqli=/usr/bin/mysql_config \
 --with-pdo-mysql=/usr \
 --with-pdo-pgsql=/usr \
 --with-pcre-regex=/usr \
 --with-pear \
 --with-gmp \
 --with-pgsql \
 --with-png-dir=/usr/local/lib \
 --with-xsl \
 --with-zlib \
 --with-zlib-dir=/usr/local/lib \
 --with-iconv \
 --with-libxml-dir=/usr \
 --enable-bcmath \
 --enable-calendar \
 --enable-exif \
 --enable-ftp \
 --enable-gd-native-ttf \
 --enable-soap \
 --enable-sockets \
 --enable-mbstring \
 --enable-zip \
 --enable-wddx \
 --enable-shmop \
 --with-libdir=lib64 \
 --disable-debug \
 --with-bz2 \
 --enable-gd-native-ttf \
 --enable-xml \
 --with-snmp=/usr \
 --enable-json \
 --with-fpm-user=apache\
 --with-fpm-group=apache\
 --enable-fpm \
 --with-fpm-systemd

Make & Install by typing:

make
make install
cp php.ini-production /etc/php.ini

Run the following to enable systemd service for PHP:

cat <<< '
[Unit]
Description=The PHP FastCGI Process Manager - VeriTeknik
After=syslog.target network.target

[Service]
Type=notify
PIDFile=/var/run/php-fpm.pid
ExecStart=/usr/local/sbin/php-fpm --nodaemonize \
--fpm-config /etc/php-fpm.conf
ExecReload=/bin/kill -USR2 $MAINPID

[Install]
WantedBy=multi-user.target
' > /usr/lib/systemd/system/php-fpm.service
systemctl enable php-fpm

Get rid of obsolete settings:

sed -i 's#;date.timezone =.*#  date.timezone = "Europe/Istanbul"#' /etc/php.ini
sed -i 's#upload_max_filesize =.*#upload_max_filesize = 200M#' /etc/php.ini
sed -i 's#post_max_size =.*#post_max_size = 200M#' /etc/php.ini
cat <<< ' include=/etc/php-fpm.d/*.conf [global] pid = \ 
/run/php-fpm/php-fpm.pid error_log = /var/log/php-fpm/error.log \
daemonize = no ' > /etc/php-fpm.conf
mkdir /etc/php-fpm.d

You need to create the appropriate user account the fpm process will run on, as a sample, we use plugged as a user:

useradd plugged
chmod 755 /home/plugged

create the php-fpm process config for the specific site:

cat <<< '
[www]
listen = 127.0.0.1:9001
 
listen.allowed_clients = 127.0.0.1
listen.owner = plugged
listen.group = plugged
user = plugged
group = plugged
pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35

slowlog = /var/log/php-fpm/www-slow.log
 
catch_workers_output = yes
 
php_admin_value[error_log] = /home/plugged/logs/mphp_error.log
php_admin_flag[log_errors] = on
php_value[session.save_handler] = files
php_value[session.save_path] = /home/plugged/session
' > /etc/php-fpm.d/plugged.conf

mkdir /run/php-fpm/
mkdir /var/log/php-fpm/
touch /var/log/php-fpm/error.log
mkdir {/home/plugged/logs/,/home/plugged/session}
chown -R plugged:plugged /home/plugged
systemctl start php-fpm
sed -i 's/DirectoryIndex index.html.*/  DirectoryIndex index.html index.html.var index.php/' /etc/httpd/conf/httpd.conf

please let us know if you find any mistake

The post PHP 7 on CentOS 7 with PHP-FPM appeared first on VeriTeknik.

yum install epel-release
yum install net-tools, bind-utils # optional life savers 
rpm -Uvh http://mirror.veriteknik.net.tr/remi/enterprise/remi-release-7.rpm
yum install php70-php-fpm php70-php-cli php70-php-gd php70-php-json \
php70-php-mbstring php70-php-mcrypt php70-php-mysqlnd php70-php-xml
yum install nginx

 
Please note that if you need additional PHP packages, you can search them with the following command:

yum list php70-*
#Available Packages
#php70-php-opcache.x86_64
#.
#.
#php70-php-pecl-crypto.x86_64
#php70-php-pecl-geoip.x86_64 
#php70-php-pecl-imagick.x86_64
#php70-php-pecl-memcache.x86_64
#php70-php-pecl-xdebug.x86_64
#php70-php-pgsql.x86_64
#php70-php-soap.x86_64
#php70-php-xmlrpc.x86_64
#..
# and to install a package you desire, type the name:
yum install php70-php-pgsql

Run the following to enable systemd service for PHP-FPM:

systemctl enable php70-php-fpm
systemctl enable nginx

Disable SELINUX, set to disabled:

vi /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of three two values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
SELINUXTYPE=targeted

type SHIFT+ZZ to save and exit, and for the time beign type setenforce 0 to disable SELINUX temproray.
Next step is to get rid of obsolete settings:

sed -i 's#;date.timezone =.*#  date.timezone = \ 
"Europe/Istanbul"#' /etc/opt/remi/php70/php.ini
sed -i 's#upload_max_filesize =.*#upload_max_filesize = \
200M#' /etc/opt/remi/php70/php.ini
sed -i 's#post_max_size =.*#post_max_size = \
200M#' /etc/opt/remi/php70/php.ini

You need to create the appropriate user account the fpm process will run on, as a sample we use plugged as a user:

useradd plugged
chmod 755 /home/plugged
mkdir /home/plugged/{logs,public_html,session}
touch /home/plugged/logs/{mphp_error.log,php-fpm-slow.log}
chown -R vtt:vtt /home/plugged/public_html/

create the php-fpm process config for the specific site:

cat <<< '[plugged] 
listen = 127.0.0.1:9001
listen.allowed_clients = 127.0.0.1 
listen.owner = plugged 
listen.group = plugged 
user = plugged 
group = plugged 
pm = dynamic 
pm.max_children = 50 
pm.start_servers = 5 
pm.min_spare_servers = 5 
pm.max_spare_servers = 35 
slowlog = /home/plugged/logs/php-fpm-slow.log 
catch_workers_output = yes 
php_admin_value[error_log] = /home/plugged/logs/mphp_error.log 
php_admin_flag[log_errors] = on 
php_value[session.save_handler] = files 
php_value[session.save_path] = /home/plugged/session ' \
> /etc/opt/remi/php70/php-fpm.d/plugged.conf

Turn on PHP-FPM by typing:

systemctl start php70-php-fpm.service

If it fails to start, you can check the logs by typing
systemctl status php70-php-fpm.service

Also please check the service is running by typing netstat so if the port is open, you should see that:

netstat -tulpn | grep php-fpm
#tcp        0      0 127.0.0.1:9000          0.0.0.0:*               LISTEN      908/php-fpm: master 
#tcp        0      0 127.0.0.1:9001          0.0.0.0:*               LISTEN      908/php-fpm: master 

please let us know if you find any mistake

The post PHP 7 on CentOS 7 with PHP-FPM appeared first on VeriTeknik.

The first step of the configuration is on the nameserver, BIND on our case.

Create the relevant reverse DNS file on /var/named/rev and then edit the file:

cd /var/named/rev
touch 123.234.12
vim 123.234.12

The file contents should be like the following:

$TTL 3D
@       IN      SOA     ns1.rackdc.com. postmaster.rackdc.com. (
                        2018112201   ; Serial, todays date + todays serial
                        8H      ; Refresh
                        2H      ; Retry
                        4W      ; Expire
                        1D)     ; Minimum TTL
                                ; Created on http://root0.net 2005-10-27
                 NS             ns1.rackdc.com.
                 NS		ns2.rackdc.com.
                 
$ORIGIN 12.234.123.in-addr.arpa.


12		PTR		rackdc.com.

After configuring this file with correct details, edit the file /etc/named.conf to include the file you’ve just created.

vim /etc/named.conf

Add the following line in the file:

zone "12.234.123.in-addr.arpa" { notify yes; type master; file "/var/named/rev/123.234.12";allow-query { any; };};

Finally, restart the DNS service.

service named restart

It is important to complete this step before creating an object in RIPE.

The post How to add reverse DNS delegation for RIPE appeared first on VeriTeknik.

YOUR PERSONAL DATA MIGHT BE SUBJECTED TO PROCESSING

Your personal data that may be processed as stated in this notice are as follows:

• Identity Information

Name, surname, copy of ID card (name, surname, Turkish ID no, serial no, father’s name, mother’s name, birth place, date of birth, marital status, registered province-city-district-village, volume no, family serial no, issuing place, reason for issue, registration no, date issued, maiden name) gender,

• Contact Details

E-mail, mobile phone no, work phone no, work address, postal address, postal code, Facebook, Linkedin or Twitter accounts

• Financial Information

Bank account information, credit card no, expiry date, payment amount, payment date, currency, receipt explanation, debt, account receivables, balance, contract value, services provided, VAT information, service term, process of collection, Invoice Information Screen (Name, surname, invoice records, invoice ID, tax office, tax no, tax ID no, address, country, province, city, postal code, e-mail, invoice currency, VAT exemption information), Invoice Information Screen (account current),(Title, address, serial no, invoice ID, invoice type, invoice date, customer tax office/no/natural person, accounting transfer status, invoice status, account making choice, invoice class, dispatch note date, invoice foreign currency type/exchange rate, Code, explanation, count, price, amount, period, term, revenue type, amount, total, VAT rate, VAT, general total, Account Information Screen (Account no, payment type, automated payment, first and last 4 digits of card no, payment value, account start date, revenue type, whether or not management service is received, whether or not there is a contract in place, Open account, warning threshold, due date, source of sale, seller, domain, password, hosting package, account payment information; date, value, result (paid/unpaid), automated payment information; date, result (successful/unsuccessful), service information; purchased properties, current properties, host name, server name), Customer Account Current Card (market code, sales representative, name & surname, authorized distributor, head company, technician, payment method, collection method, delivery, current currency, types of risks, risk threshold, open account, checks & bonds, local currency, valid currency, current currency, company foreign currency, accounting connection definitions, accounting calculations, letter of guarantee account code, letter of guarantee account name, recorded exportation account code, mal. Mer. code, planning, risk group, group definition, agreement group, in-group company information, account current group, planning group code, kon. account current, exempt from late interest date and interest difference, barcode, collection rate, advance account current code, latest debt clear date, latest account current movement date, e-invoice user status, automated update, scenario, sender unit/currency, PO box tag, contract no, intergroup, DBS inclusive, main channel, channel group, channel detail, discount exclusive (except from discounts applied to customer), old account current code, new account current code, customer type, sales group, sales region name, BABS group, usage in BA-BS report, comments

• Sensitive Data

Photo, blood type and religion information on the copy of ID card or on driver’s license, and in some cases fingerprint

• Employment/Education Information

Employer company, position, school, faculty information, title

• Audial / Visual Data

Photo of natural person, voice recordings, camera recordings

• Other

Approved stamp duty statement, circular of signature, all customer data on panel.veriteknik.com (mother’s maiden name (as security question), SMS login verification (OTP), recorded references, father’s name, member type, discounts, e-bulletin, IP White list, services received, payment type, payment date, package, value), account type, account, subject, “type message” section, option to add files in support tickets on panel.veriteknik.com, OS, IP address, connection port, user name, password, used panels/database Access information, encountered issue, steps leading to the issue, “additional information” section in panel.

PURPOSES AND METHODS OF COLLECTING YOUR PERSONAL DATA

As Veriteknik Ltd. Şti. we collect your personal data verbally, physically or electronically for the performance of our sales agreement, to fulfill our legal obligations as a company, for reasons required per law, and for the Company’s legitimate interests. We collect your visual and establishment – name – date data through CCTV and server room visit forms signed by your side for our legal obligation to ensure workplace security and the Company’s legitimate interest. For the Company’s legitimate interest and efficiency for technical support, we collect your voice recordings during phone-calls. Progresses during a technical problem and information relavent gathered from customer/organization relationship are also beeing reported. We also gather your personal data via legal documents and notices we formally received in order to fulfill our legal obligations.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

We process your aforementioned and other personal data you provided for the purposes below:

To maintain our service provider-customer relation, especially;

• Starting sales process, meeting face to face, new sales, upsell and forming a contract with customers
• To provide services of set up and management of infrastructure, network, virtual and shared firewalls, web servers, set up and management of e-mail servers, set up and management of database servers, DNS and FTP server management, Windows and Linux operation systems management, web panel management, network management; firewall security devices management, switch and router management, back up services; file back up and restoration, image based management of server, monitoring, as requested.
• Customer support
• Sending e-mail to respond customer requests
• Informing customers regarding the operations to be conducted on their services and cabinets
• Manual and online money collection and holding records of money transfers.
• Relocation of the infrastructure in case of a natural disaster affecting Company headquarters
• Logging the hardware given to or taken from customers
• Management of receiving/sending processes of the hardware customers send.
• Providing monthly, daily and hourly management services
• Providing access permissions for natural person customers, and representatives and employees of legal entity customers to certain areas of the company and ensuring company security.
• Providing the customers with wireless internet they can use in the office quarters.

To ensure certain processes required by law, especially;

• Payment of stamp duty for sales agreement
• Sending final invoice to customers
• Fulfillment of customer return requests
• Preparation of invoice and note of expenses
• Organization of e-Archive invoices

To provide a better service for you, to improve ourselves, to carry out marketing and research activities;

• Being able to assess customer complaints and provide support to customer requests
• Achieving customer satisfaction
• Promotional use, providing communications material and improving brand recognition
• Enrolling customers to systems and creating customer account cards.
• Updating customer information
• Software development and updates/patches
• Logging money order payments
• Creating reports on various matters
• Managing customer visits, attending meetings with customers, informing customers on technical subjects
• Sharing communication information of representatives and customers (business card etc.)

For company management, continuation of work, application of company policies, especially;

• Ensuring workplace security
• Managing customer visits

To exercise our right of defense against legal demands, especially;

• Management of customer complaints

We process your personal data for the duration stipulated by relevant legislation or the maximum time required due to the purpose of processing and in any case for the duration of statutes of limitations.

TRANSFER OF TOUR PERSONAL DATA TO THIRD PARTIES IN THE COUNTRY

Your personal data are occasionally transferred to companies which are experts in their fields or to servers of the programs we use in order for us to perform certain activities:

• Your name, surname, invoice no, sum, payment date, and first and last 4 digits of your card are transferred to service provider banks for purposes of money collection, cancellation of invoice and money return.
• For the invoice operations through Finance Department related data are registered via the Wolvox, Orkestra and Zirve software.
• Customer name, surname, Turkish ID no, tax office, country, city, tax no and contract sum may be transferred to public accounting company in order to draft stamp duty statements and approve invoices.
• Only relevant personal data such as your name, surname and address are shared with courier company in order for the invoices to be delivered to customers.
• If the Company receives a police order/prosecutor writ, CCTV and voice recordings are transferred to relevant authorities to comply with legal duties.

Additionally, in order to exercise our right to defense we may duly provide your personal data to our attorneys and to relevant authorities to comply with a duly notified legal order such as court order, Customer Arbitration Committee order or evidence request.

TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES RESIDING ABROAD

• In the case of receiving domain name service; name, company, address, phone, fax no and e-mail information requested by Whois (domain name search engine) may be transferred to countries abroad which may or may not have sufficient protection.

YOUR RIGHTS

As per Article 11 of the Law, after you verify your identity, you will have the right to be informed about;

• whether or not the Company processes your personal data; and if so, to request information as to such processing
• the purpose of processing your personal data and whether they are used in accordance with the purpose
• whether or not your personal data have been transferred to third parties in the country or abroad; and if so, to request information as to whom your personal data is transferred to

Additionally, you have the right to request from the Company to correct your erroneous data and inform recipients of data to whom your personal data were transferred or may be transferred.

You may request from the Company to neutralize (delete, destroy or anonymize) your personal data within the scope of the conditions stipulated under Article 7 of the Law. You may also request from the Company to inform third parties to whom your personal data were transferred or may be transferred regarding your neutralization and/or correction request. However, we will be evaluating which neutralization method is the most appropriate, or whether applicable or not at the time of your request. You reserve the right to ask us which method is chosen and why we chose that method at any time.

You may object to your personal data analysis results, which were formed through a separate automated system, if such results are against your best interests.

You may request compensation for the damages that you may have suffered due to unlawful use of your data.

We will respond to your requests included in your application within thirty days and free of charge depending on the type of request. However, if the procedure requires an additional cost for the Company, we may request the fee designated in the Data Protection Board’s tariff under the Communiqué of Terms and Conditions for Application to Data Controller.

You must submit your application regarding processing of your personal data in writing or via KEP (Officially Registered E-mail Address) address, secure electronic signature, mobile signature or the e-mail address provided by you to the Company and stored in our records. The Company may require additional confirmation (via sending message to your registered phone, phone call etc.) depending on the nature and method of your application in order to determine whether the application is submitted by you and protect your rights. For example, if you submit an application via your e-mail registered in the company, we may contact you through another communication channel available to Company and ask to confirm that you are the applicant.

The post FAIR PROCESSING NOTICE FOR CUSTOMERS REGARDING THE PROTECTION OF PERSONAL DATA PURSUANT TO PROCEDURES AND PRINCIPLES OF LAW NO.6698 ON PROTECTION OF PERSONAL DATA (“LAW”) appeared first on VeriTeknik.

• After PCI-DSS v3.2, the SCC has announced v3.2.1. This update does not add new requirements, yet it contains updated dates and some technical clarification. PCI-DSS v3.2 will be valid through 31 December 2018 and retired at 1 January 2019.
• PCI-DSS v.3.2.1 updates will not affect PA-DSS. PA-DSS will remain at v3.2.
• PCI-HSM v1.x will expire at April 2019. Therefore it is best to use a device compatible with PCI-HSMv2.x at any PCI audit after April 2018. It would be wise to take the changes between PCI-HSM v1.x and v2.x (such as Key Lengths, usage of TR-31…) into account and revise your algorithms accordingly.
• For the list of PCI-HSM expiry dates, see PTS Device Testing and Approval Program Guide (https://www.pcisecuritystandards.org/documents/PTS_Program_Guide_v1-8.pdf) Appendix A.12.
• With PCI-DSS v3.1, mechanisms using SSL/early TLS are forced to be removed from the system at 30 June 2016. The industry’s response was that the date was too early, therefore the dates shifted from 30 June 2016 to 30 June 2018. As of 30 June 2018, you shouldn’t be using SSL/early TLS in your cryptographic algorithms.
• Since vulnerabilities and exploits due to the usage of SSL/early TLS are usually based on browsers (such as POODLE, BEAST), proving that there’s no such threat for them, POS POI devices can continue to use SSL/early TLS. Even if this is allowed, weak cipher usage (ex. RC4, MD5) is not allowed for these devices either.
• We’ve seen that for some of our customers the term SSL/early TLS is not clear enough. Safe TLS versions are TLS v1.1 and above. It should be noted that the recommended versions are TLS v1.2 and above.
• For further information about SSL/early TLS, please see PCI SSC’s relevant article: https://www.pcisecuritystandards.org/documents/Migrating-from-SSL-Early-TLS-Info-Supp-v1_1.pdf

The post Reminder About PCI-DSS and PCI-HSM appeared first on VeriTeknik.

Afcea is the abbreviation for Armed Forces Communications and Electronics Association. The professional association connects people, ideas and solutions globally. VeriTeknik’s main business areas involving Network Security, cryptology and secure communications are essential parts of the defense industry, besides VeriTeknik’s experience and knowledge on the HSM devices and network security will help development of national devices.

At a Glance

Veriteknik provides support to the development of Turkey in the Defense Industry, Fintech Solutions and IT sectors. Therefore, AFCEA and Veriteknik’s partnership is the key role to expand our technologies to a global scope.

AFCEA is a professional association that connects people, ideas and solutions globally. Because we are developing networking and educational opportunities and providing them in an ethical forum. This enables military, government, industry and academia to align technology and strategy to meet the needs of those who serve.

The post VeriTeknik, now a member of AFCEA! appeared first on VeriTeknik.

There is an easy way to learn GNU/Linux version in all distros. For CentOS, RedHat and other flavors you can use the code

cat /etc/redhat-release

Bu komut size aşağıdakine benzer bir cevap ile dönecektir:

[root@veriteknik ~]# cat /etc/redhat-release 
CentOS Linux release 7.5.1804 (Core)

Sunucunun Sanal ya da Fiziksel olduğunu nasıl anlarsınız

Sunucunun sanal ya da fiziksel olduğunu anlamanın birden çok yolu vardır. Sanallaştırma ortamları üzerinde kolayca sunucu göçü sağlamak için jenerik donanım isimleri kullanılmaktadır. Örneğin fiziksel bir sunucuda işlemcileri görüntülemek için kullandığınız kod aşağıdakine benzer bir çıktı verecektir:

root@veriteknik:~# cat /proc/cpuinfo 
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 62
model name      : Intel(R) Xeon(R) CPU E5-2687W v2 @ 3.40GHz
stepping        : 4
microcode       : 0x428
cpu MHz         : 3603.430
cache size      : 25600 KB
physical id     : 0
siblings        : 16
core id         : 1
cpu cores       : 8
apicid          : 2
initial apicid  : 2
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm cpuid_fault epb pti tpr_shadow vnmi flexpriority ept vpid fsgsbase smep erms xsaveopt dtherm ida arat pln pts
bugs            : cpu_meltdown spectre_v1 spectre_v2
bogomips        : 6800.13
clflush size    : 64
cache_alignment : 64
address sizes   : 46 bits physical, 48 bits virtual
power management:

Ne var ki, sanal bir sunucuda farklılıkları hemen keşfedebilirsiniz

[root@www ~]# cat /proc/cpuinfo 
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 15
model           : 6
model name      : Common KVM processor
stepping        : 1
microcode       : 0x1
cpu MHz         : 3399.998
cache size      : 16384 KB
physical id     : 0
siblings        : 4
core id         : 0
cpu cores       : 4
apicid          : 0
initial apicid  : 0
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx lm constant_tsc nopl xtopology eagerfpu pni cx16 x2apic hypervisor lahf_lm
bogomips        : 6799.99
clflush size    : 64
cache_alignment : 128
address sizes   : 40 bits physical, 48 bits virtual
power management:

model name satırında “Common KVM Processor” yazdığını göreceksiniz. Linux sistemlerde kullanılmakta olan KVM sanallaştırma sistemi açtığı bütün sanal sunucularda bu işlemci tipini kullanacaktır.

İşletim Sistemi Mimarisi

Günümüzde işletim sistemleri 32 bit ya da 64 bit olarak gelmektedir, kuracağınız uygulamaların da bu mimariye uygun olması gerekir. Mimariyi öğrenmek için:

root@veriteknik:~# uname -a
Linux veriteknik 4.15.17-1-pve #1 SMP PVE 4.15.17-9 (Wed, 9 May 2018 13:31:43 +0200) x86_64 GNU/Linux

Satırın en sonunda GNU/Linux yazısından önceki bölümde sistem mimarisini görebilirsiniz, x86_64 64 bit, x86_32 ise 32 bit işletim sistemini temsil etmektedir.

The post Get GNU/Linux Version and OS Details appeared first on VeriTeknik.