VPSの設定メモ


ユーザ作成

# adduser username
# passwd username
# visudo
+ username ALL=(ALL) NOPASSWD: ALL
+ Defaults    env_keep += "PATH"
+ # Defaults    secure_path = /sbin:/bin:/usr/sbin:/usr/bin
- Defaults    secure_path = /sbin:/bin:/usr/sbin:/usr/bin

ssh公開鍵登録

# login username
$ mkdir .ssh
$ chmod 700 .ssh
$ echo 'hoge' >> .ssh/authorized_keys
$ chmod 600 .ssh/authorized_keys

sshサーバ設定

$ sudo vi /etc/ssh/sshd_config
Port, PermitRootLogin, PasswordAuthentication
$ sudo /etc/init.d/sshd restart

色々入れる

$ sudo yum -y install zsh wget tmux tig python-setuptools
$ sudo easy_install pip
$ sudo pip install --allow-external percol --allow-unverified percol percol
$ sudo pip install diff-highlight

git

$ sudo yum -y install zlib-devel perl-devel gettext gcc curl-devel
$ cd /tmp
$ git clone https://github.com/git/git.git
$ cd git
$ make configure
$ ./configure --prefix=/usr/local
$ make all
$ sudo make install

dotfiles

$ ssh-keygen
$ git clone --recursive [email protected]:tigberd/dotfiles.git
$ cd dotfiles
$ ./install.sh
$ chsh -s /bin/zsh

rubyをコンパイル

$ sudo yum -y install gcc zlib-devel openssl-devel sqlite sqlite-devel
$ cd /tmp
$ wget http://cache.ruby-lang.org/pub/ruby/2.1/ruby-2.1.1.tar.gz
$ tar zxvf ruby-2.1.1.tar.gz
$ cd ruby-2.1.1
$ ./configure
$ make
$ sudo make install
$ sudo gem install bundler

vim

$ sudo yum -y install mercurial ncurses-devel lua lua-devel perl-devel python-devel
$ cd /tmp
$ hg clone https://vim.googlecode.com/hg/ vim
$ cd vim
$ ./configure --enable-multibyte --with-features=huge --disable-selinux \
    --prefix=/usr/local \
    --enable-luainterp=yes --with-lua-prefix=/usr \
    --enable-rubyinterp=yes \
    --enable-pythoninterp=yes --with-python-config-dir=/usr/lib64/python2.6/config
$ make
$ sudo make install

ufw

$ cd /tmp
$ wget https://launchpad.net/ufw/0.33/0.33/+download/ufw-0.33.tar.gz
$ tar zxvf ufw-0.33.tar.gz
$ cd ufw-0.33
$ sudo python ./setup.py install
$ sudo chmod -R g-w /etc/ufw /lib/ufw /etc/default/ufw /usr/sbin/ufw
$ sudo service iptables stop
$ sudo service ip6tables stop
$ sudo chkconfig --del iptables
$ sudo chkconfig --del ip6tables
$ sudo vi /etc/rc.d/rc.local
+ ufw enable
$ sudo vi /etc/ufw/ufw.conf
+ ipv6=no