{"id":317,"date":"2022-01-31T08:59:51","date_gmt":"2022-01-31T08:59:51","guid":{"rendered":"https:\/\/virtualall.sk.website.tuke.sk\/?p=317"},"modified":"2026-09-11T14:45:52","modified_gmt":"2026-09-11T14:45:52","slug":"instalacia-sablonz-centos-stream-9-pre-vra-7-6","status":"publish","type":"post","link":"https:\/\/virtualall.sk\/en\/2022\/01\/instalacia-sablonz-centos-stream-9-pre-vra-7-6\/","title":{"rendered":"CentOS Stream 9 Template for VRA"},"content":{"rendered":"\n

Vytvorenie \u0161abl\u00f3ny opera\u010dn\u00e9ho syst\u00e9mu CENTOS stream pre syst\u00e9m vmware automation mus\u00ed sp\u013a\u0148a\u0165 ur\u010dit\u00e9 po\u017eiadavky \u010di u\u017e zabezpe\u010denia pr\u00edpadne implementovanie bezpe\u010dnostn\u00fdch polit\u00edk danej organiz\u00e1cie alebo \u0161pecifick\u00fdch nastaven\u00ed. Medzi hlavn\u00e9 nastavenia, ktor\u00e9 je potrebn\u00e9 urobi\u0165 je zamedzenia vykon\u00e1vania opera\u010dn\u00e9ho syst\u00e9mu periodick\u00fdch oper\u00e1ci\u00ed, ktor\u00e9 vy\u0165a\u017euj\u00fa syst\u00e9mov\u00e9 zdroje. Pri klonovan\u00fdch VM by doch\u00e1dzalo napr\u00edklad k vytvoreniu rovnak\u00fdch serverov s rovnak\u00fdmi machine-ID \u010do by sp\u00f4sobovalo chybovos\u0165 pri pride\u013eovan\u00ed IP adries alebo kol\u00edzi\u00e1m v sieti.<\/p>\n\n\n\n

Nastavenie VM vo VMware<\/p>\n\n\n\n

\"CentOS
Vypnutie Secure Boot<\/figcaption><\/figure><\/div>\n\n\n\n
\"CentOS<\/figure><\/div>\n\n\n\n
\"CentOS
Vypnutie SWAP File<\/figcaption><\/figure><\/div>\n\n\n\n
sched.swap.vmxSwapEnabled   false<\/code><\/pre>\n\n\n\n
In\u0161tal\u00e1cia opera\u010dn\u00e9ho syst\u00e9mu:<\/strong><\/p>\n\n\n\n
\"CentOS<\/figure>\n\n\n\n
Vyber verzie opera\u010dn\u00e9ho syst\u00e9mu pre verziu desktop je potrebne vybra\u0165: “Workstation”<\/p>\n\n\n\n
\"CentOS<\/figure>\n\n\n\n
Nastavenie \u010dasovej z\u00f3ny a NTP serverov<\/p>\n\n\n\n
\"CentOS<\/figure>\n\n\n\n
Nastavenie Root hesla a povolenie prihl\u00e1senia cez SSH (root \u00fa\u010det je potrebn\u00fd pre verziu server)<\/p>\n\n\n\n
\"CentOS<\/figure>\n\n\n\n
Vytvorenie \u00fa\u010dtu pod ktor\u00fdm sa bude prihlasova\u0165 pou\u017e\u00edvate\u013e:<\/p>\n\n\n\n
\"CentOS<\/figure>\n\n\n\n
  1. Aktualiz\u00e1cia syst\u00e9mu:<\/strong><\/li><\/ol>\n\n\n\n
    yum update\nyum upgrade<\/code><\/pre>\n\n\n\n
    2. Nastavenie SSH<\/strong><\/p>\n\n\n\n
    Povolenie SSH root prihl\u00e1senia a zak\u00e1zanie \u00fa\u010dtu vmware pre verziu server<\/p>\n\n\n\n
    nano \/etc\/ssh\/sshd_config.d\/01-permitrootlogin.conf<\/code><\/pre>\n\n\n\n
    PermitRootLogin yes\nDenyUsers vmware<\/code><\/pre>\n\n\n\n
    Regener\u00e1cia SSH k\u013e\u00fa\u010dov po vytvoren\u00ed \u0161abl\u00f3ny<\/p>\n\n\n\n
    nano \/etc\/rc.local<\/code><\/pre>\n\n\n\n
    SSHKEYGEN=\/usr\/bin\/ssh-keygen\n\nif [ ! -f \/etc\/ssh\/ssh_host_rsa_key ]; then\n    $SSHKEYGEN -q -t rsa  -f \/etc\/ssh\/ssh_host_rsa_key -N \"\" \\\n        -C \"\" < \/dev\/null > \/dev\/null 2> \/dev\/null\n    echo \"Created \/etc\/ssh_host_rsa_key\"\nfi\n\nif [ ! -f \/etc\/ssh\/ssh_host_dsa_key ]; then\n    $SSHKEYGEN -q -t dsa  -f \/etc\/ssh\/ssh_host_dsa_key -N \"\" \\\n        -C \"\" < \/dev\/null > \/dev\/null 2> \/dev\/null\n    echo \"Created \/etc\/ssh_host_dsa_key\"\nfi<\/code><\/pre>\n\n\n\n
    Zmazanie aktu\u00e1lnych k\u013e\u00fa\u010dov:<\/p>\n\n\n\n
    rm -f \/etc\/ssh\/ssh_host_*<\/code><\/pre>\n\n\n\n
    3. In\u0161tal\u00e1cia dodato\u010dn\u00fdch kni\u017en\u00edc, zak\u00e1zanie firewallu<\/strong><\/p>\n\n\n\n
    yum install -y perl\nsystemctl disable firewalld\nsystemctl disable cloud-init<\/code><\/pre>\n\n\n\n
    4. Zmazanie do\u010dasn\u00fdch s\u00faborov a vypnutie SWAP part\u00edcie<\/strong><\/p>\n\n\n\n
    yum clean all\necho \"\" | sudo tee \/etc\/machine-id >\/dev\/null\nrm -rf \/tmp\/*\nrm -rf \/var\/tmp\/*\nif [ -f \/var\/log\/audit\/audit.log ]; then\n    cat \/dev\/null > \/var\/log\/audit\/audit.log\nfi\nif [ -f \/var\/log\/wtmp ]; then\n    cat \/dev\/null > \/var\/log\/wtmp\nfi\nif [ -f \/var\/log\/lastlog ]; then\n    cat \/dev\/null > \/var\/log\/lastlog\nfi\nif [ -f \/var\/log\/cron ]; then\n    cat \/dev\/null > \/var\/log\/cron\nfi\nif [ -f \/var\/log\/messages ]; then\n    cat \/dev\/null > \/var\/log\/messages\nfi\nsudo swapoff --all\nsudo sed -ri '\/\\sswap\\s\/s\/^#?\/#\/' \/etc\/fstab\nhistory -c\nhistory -w\nsudo shutdown -h now<\/code><\/pre>\n\n\n\n
    5. Konvertovanie vytvoren\u00e9ho syst\u00e9mu ako \u0161abl\u00f3nu:<\/p>\n\n\n\n
    \"CentOS<\/figure><\/div>\n\n\n\n
    \n\n\n\n
    S\u00favisiace n\u00e1vody<\/h2>\n\n\n\n