Linux LPI Level 2 (LPIC-2) °ê»Ú»{¥iÃҮѽҵ{
½Òµ{²ºÙ¡GLPI Level 2 (LPIC-2) Training Course (Fedora version 41)

¦X®æ«O»Ù¡G¾Ç­û­Y¦Ò¸Õ¤£¦X®æ¡A¥»¤¤¤ß§¡·|¥N¥I¦Ò¸Õ¶O¡A¥O¾Ç­û¥i ¥b¶O­«¦Ò ¡I¸Ô±¡...

Linux ¬O¤@®M§K¶O¤Î¦h¥\¯àªº§@·~¨t²Î¡A°£¤F¥i´£¨ÑÀɮפΥ´¦L¦øªA¾¹ (File and Print Server) ¤§ªA°È¥~¡ALinux ¤S¥i¥H¥Î§@¬[³]ºô¯¸¦øªA¾¹ (Web Server)¡B¶l¥ó¦øªA¾¹ (Mail Server)¡B¥N²z¤H¦øªA¾¹ (Proxy Server) µ¥¡A¦A¥[¤W¨ä°ª«×ªºÃ­©w©Ê¡A©Ò¥H²{®É¨ü¨ì¦U¤èªºÅwªï¡C¦³¨Ç¤½¥q¬°¤FÅý Linux¦w¸Ë¤è«K¡A±N³\¦hªº³nÅé²Õ¦X°_¨Ó»P Linux kernel ¥]¸Ë¦¨ Linux distributions¡A³o´N¬O§Ú­Ì¤@¯ë¤ñ¸û±`Å¥¨ìªº Turbolinux¡BRedHat¡BFedora ¥H¤Î OpenLinux µ¥¦UºØ¤£¦Pªº Linux Distributions¡C¤£¦P Distributions ªº°ò¥»¾Þ§@¬O¤j¦P¤p²§ªº¡A¦Ó¥»¤¤¤ß·|±Ð±Â²{®É³Ì¬y¦æªº Fedora¡C

LPI ¥þ¦W¬O Linux Professional Institute¡A¬O¤@­Ó¨Ó¦Û¥[®³¤jªº«D¦È§Q Linux ±M·~¹ÎÅé¡C¥Ñ©ó LPI ªº¦Ò¸Õ¶O¥Î¸û¬°¦X²z¡A¦Ò¸Õ¨î«×¤Î¤º®e¥ç¸û»ô¥þ¡A©Ò¥H LPI ªº¦Ò¸Õ¨î«×·|¤ñ¨ä¥L Linux ¦Ò¸Õ¨î«×§ó¾A¦X­»´äªº¹ê»ÚÀô¹Ò¡A¦Ó§Ú­Ì¥ç¹w­p·|¦³¶V¨Ó¶V¦h¤H¿ï¾Ü¦Ò LPI ªº¦Ò¸Õ¡C

¥»½Òµ{±N±Ð±Â Linux ºôµ¸ªº¶i¶¥¾Þ§@¤ÎºÞ²z¡A¯à¤j¤j±j¤Æ§Aªº Linux §Þ³N¡C­×²¦¥»½Òµ{«á¡A¾Ç­û¥i¦Ò¨ú LPI Level 2 (LPIC-2) °ê»Ú»{¥iÃҮѡC¥»½Òµ{Äw³Æ¦h®É¡Aºë¤ß½s±Æ¡C¥Ñ¤W°ó¡B·Å²ß¡B¹ê²ß¡B°µ¸ÕÃD¡B¦Ò¸Õ¬ã²ß¦Ü³Ì«á¦Ò¸Õ¡A§¡¬°§A«×¨­­q³y¡A§@¥X¦³¨t²Îªº½s±Æ¡C°È¨D¯u¥¿±ÐÃѧA¡A¤S¥O§A¦Ò¸Õ¤Î®æ¡C

¥u­n§A¾Ö¦³¦³®Äªº LPIC-1 ÃҮѤΩó¤U¦C2­Ó¬ì¥Ø¨ú±o¦X®æ¦¨ÁZ¡A«K¥iÀò LPI ¹{µo LPIC-2 Linux Engineer ÃҮѡG

¥»¤¤¤ß¬° LPI «ü©wªº¦Ò¸Õ¸Õ³õ¡C³ø¦Ò®É½Ð­P¹q¥»¤¤¤ß¡Aµn°O±ý³ø¦Ò¤§¬ì¥Ø¡B¦Ò¸Õ¤é´Á¤Î®É¶¡ (³Ì§Ö¥i§Y¤é³ø¦Ò)¡C¦Ò¸Õ¶O¬°¨C¬ì HK$1,640¡CÁ{¦Ò¸Õ«e¦Ò¥Í¶·¥X¥Ü¨­¥÷ÃÒ¤Îú¥I¦Ò¸Õ¶O¡C

¦Ò¸ÕÃD¥Ø¥Ñ¿D¬w¦Ò¸Õ¤¤¤ß¶Ç°e¨ì§A­nÀ³¦Òªº¹q¸£¡A¦Ò¸Õ®É¥H¹q¸£§@µª¡C©Ò¦³¦Ò¸ÕÃD¥Ø§¡¬°­^¤å¡A¦Ò¸ÕÃD¥Ø¬°³æ¶µ¿ï¾ÜÃD©Î¦h¶µ¿ï¾ÜÃD¡C§@µª§¹¦¨«á·|¥ß§Y¥X²{¦¨ÁZ³ø§i¡Aµ²ªG§Y¦Ò§Yª¾¡I¦Ò¸Õ¤£¦X®æ«K¥i­«·s³ø¦Ò¡A¤£­­¦¸¼Æ¡C±ýª¾¹D§@µª®É¶¡¡BÃD¥ØÁ`¼Æ¡B¦X®æ¤À¼Æµ¥¸Ô²Ó¦Ò¸Õ¸ê®Æ¡A¥iÂsÄý¥»¤¤¤ßºô­¶ "¦U¬ì¦Ò¸Õ¤À¼Æ¸ê®Æ"¡C

LPIC-2 Exam 201-450

1. Linux Kernel and Modules
1.1 Linux Kernel Overview
1.2 Kernel Architectures
1.3 Kernel Versioning
1.3.1 Before Version 1.0
1.3.2 Before Version 2.6
1.3.3 Version 2.6 and after
1.4 Requirements for Compiling Kernel
1.5 Configuring Kernel Options
1.6 Compiling Kernel Image Modules
1.7 Installing Modules and Kernel Image
1.8 Setting Up Symbolic Links
1.9 Booting the New Kernel
1.10 Compiling Additional Kernel Modules
1.11 More About Make Targets for Compiling Kernel / Modules
1.12 Getting Information About Modules
1.13 Dynamic Kernel Module Support (DKMS)
1.14 Enforcing Module Signing
1.15 Patching Kernel
1.15.1 About Kernel Patch File
1.16 Patching Kernel Source Code

2. GRUB 2 and initramfs
2.1 GRUB2
2.1.1 Booting with GRUB2
2.1.2 Basic Usage of GRUB2 Command Prompt
2.1.3 GRUB2 Directories and Files
2.1.4 Configuring GRUB2
2.1.5 Setting Default Entry for GRUB2
2.1.6 Booting in EFI / UEFI Environment
2.1.7 Loading GRUB2 from Other Devices and Overview of Other Boot Loaders
2.2 Init RAM Disk / RAM File System
2.2.1 Overview
2.2.2 Init RAM Disk Image
2.2.3 Init RAM FS Image
2.3 dracut
2.3.1 dracut Overiew
2.3.2 Examining a dracut Init RAM FS File
2.3.3 Creating a dracut Init RAM FS File

3. systemd and udev
3.1 systemd
3.1.1 Traditional Init Overview
3.1.2 systemd Overview
3.1.3 Managing Runlevels
3.1.4 systemd Journal
3.1.5 systemd services
3.1.6 Control Groups (°Ñ¦Ò³¹¸`)
3.1.7 Basic Working of systemd
3.2 udev
3.2.1 udev Overview
3.2.2 udev rules
3.2.3 udevadm

4. Managing Disks and File Systems
4.1 Linux Software RAID
4.1.1 RAID-Linear (also called JBOD i.e "Just a Bunch Of Disks")
4.1.2 RAID-0
4.1.3 RAID-1
4.1.4 RAID-4
4.1.5 RAID-5
4.1.6 RAID-6
4.1.7 Linux RAID-10
4.2 Logical Volume Manager (LVM)
4.2.1 Introduction to Logical Volume Manager
4.2.2 Creating PV, VG and LV
4.2.3 Extending and Reducing LV
4.2.4 Extending and Reducing VG
4.2.5 Snapshot Volume
4.2.6 LVM over RAID
4.3 More About RAID / LVM
4.3.1 Configuring fstab
4.3.2 Moving RAID / LVM Disks to Another Machines (°Ñ¦Ò³¹¸`)
4.3.3 Exporting and Importing LVM Disks (°Ñ¦Ò³¹¸`)
4.4 Auto-Mounting
4.4.1 Automounting by AutoFS
4.4.2 Automounting by systemd (°Ñ¦Ò³¹¸`)
4.5 Encrypted File System Overview
4.6 More About FileSystems
4.6.1 btrfs
4.6.2 ISO 9660 Extensions
4.7 FileSystems Optimized for SSD

5. Networking for Linux
5.1 Networking Service Overview
5.2 Networking Manager Overview
5.3 Maintaining Network Interface
5.4 NetworkManager Brief Overview
5.4.1 Using nmcli to get information:
5.4.2 Using nmcli to up / down an interface and turning network on / off:
5.4.3 Re-reading Configuration for Interface:
5.4.4 Modifying Interface Configuration through nmcli:
5.5 Configuring Routes
5.6 Configuring Additional IP Addresses
5.6.1 Configuring IP Aliases
5.6.2 Using ip addr add
5.7 Configuring IPv6
5.7.1 Basic Configuration
5.7.2 About EUI-48 and Privacy Extension
5.8 Managing ARP and MAC Address
5.9 Configuring for Wireless Network
5.9.1 Using iw
5.9.2 Using NetworkManager

6. System Backup and Recovery
6.1 BackUp Overview
6.2 Tools for Backing Up
6.2.1 cp
6.2.2 tar (Tape ARchive utility)
6.2.3 rsync
6.3 System Recovery
6.3.1 Use of Rescue Initramfs Image:
6.3.2 Use of Dracut / Kernel Parameters:
6.3.3 Using Fedora DVD¡¦s Rescue Tool:

LPIC-2 Exam 202-450

1. DHCP
1.1 DHCP Basics
1.1.1 Discovering the DHCP server and obtaining an IP address
1.1.2 Renewing an IP address
1.1.3 DHCP Options
1.1.4 Backward Compatibility
1.1.5 Usage
1.2 Configuring dhcpd
1.2.1 Basic Configuration
1.2.2 Basic configuration for DHCPv6
1.2.3 Configuration for Multihomed Server
1.3 IPv6 Router Advertisement
1.4 Configuring radvd
1.5 More About Assigning IPv6 Addresses to Clients (°Ñ¦Ò³¹¸`)
1.5.1 Device that sends RAs
1.5.2 Assigning Additional IPv6 Settings through DHCPv6
1.5.3 Internet Access with Dynamic IPv6 Addressing

2. Domain Name System (DNS)
2.1 DNS Basics
2.2 DNS Client Configuration
2.3 Configuring a DNS Server for the Domain ¡§systematic.com¡¨ Name Servers
2.4 Customizing Settings for a Caching Name Servers
2.5 More Resource Records
2.5.1 CNAME
2.5.2 MX
2.5.3 PTR
2.5.4 Other Resource Records
2.6 DNS Options
2.6.1 Basic Options
2.7 Zone Transfer
2.8 Security Features for DNS
2.8.1 TSIG
2.8.2 Introduction to DNSSEC
2.9 Dynamic Updates (°Ñ¦Ò³¹¸`)
2.9.1 Updating through nsupdate:
2.9.2 Updating through ISC dhcpd :
2.9.3 Using LDAP as backend :

3. Web Server
3.1 Web Service and Web Server Overview
3.2 Installing Apache Web Server
3.3 Basic Apache Web Server Configuration
3.4 Apache URL Mapping
3.4.1 Alias
3.4.2 Redirect
3.5 Apache Filesystem Container and Directives for Access Control
3.5.1 Directory / File Container
3.5.2 Require directive
3.5.3 Options directive
3.5.4 AllowOverride directive
3.6 Loading Additional Apache¡¦s Module e.g. PHP
3.7 Apache Named-Based Virtual Host
3.8 Enabling SSL in Apache
3.9 Apache Monitoring and Tuning
3.9.1 Logging
3.9.2 Tuning
3.9.3 ErrorDocument
3.10 Nginx
3.10.1 Overview
3.10.2 Installing and Basic Configuration Setting for Nginx
3.10.3 Configuring Basic Servers and Reverse Proxy in Nginx
3.11 SELinux Context and Booleans for Web Server (°Ñ¦Ò³¹¸`)

4. Squid Proxy Server
4.1 Squid Basics
4.2 Installing and Running Squid with Default Configuration
4.3 Access Control
4.3.1 acl
4.3.2 http_access
4.4 Cache
4.5 Other Modes / SSL features (°Ñ¦Ò³¹¸`)
4.5.1 Transparent Caching Mode
4.5.2 Accelerator Mode
4.5.3 ssl_bump Overview

5. Mail and Related Services
5.1 Mail Services Basics
5.2 MTA Choices Overview
5.3 Postfix Installation and Basic Configuration
5.4 Dovecot Installation and Basic Configuration for POP and IMAP
5.5 Sending and Receiving Mails with Evolution
5.6 Using Dovecot as LDA
5.6.1 Overview about LDA and Procmail
5.6.2 Configuring Dovecot as LDA
5.6.3 Sieve Overview
5.6.4 Configuring Dovecot LDA to use Sieve
5.7 Overview of Other postfix features
5.7.1 SSL / TLS
5.7.2 User Authentication
5.7.3 Realtime Blackhole List
5.7.4 Tunning for Bounce Messages:
5.7.5 Smarthost
5.7.6 Logging
5.7.7 Virtual Domains

6. File Services and LDAP
6.1 FTP
6.1.1 FTP Daemon Overview
6.1.2 FTP Prototocl Overview
6.1.3 Installing and Using vsFTPd
6.1.4 Basic vsftpd Configuration
6.1.5 About Pure-FTPd
6.2 NFS
6.2.1 Introduction to NFS
6.2.2 Components for NFS
6.2.3 Configuring and Using NFSv4
6.2.4 Configuring and Using NFSv3
6.3 Samba (Windows File Sharing)
6.3.1 Introduction to Samba
6.3.2 Accessing Window¡¦s Shared Folder by Linux using Samba Client
6.3.3 Sharing Folder from Linux using Samba Server to Windows
6.3.4 More about Samba 4
6.4 LDAP
6.5 Installing and Setting up OpenLDAP
6.6 Adding Entries with LDIF File
6.7 A Quick Test of Using LDAP for Linux Authentication
6.7.1 Other configuration setup for slpad

7. PAM (Pluggable Authentication Modules)
7.1 PAM Overview
7.2 Simple Testing for PAM
7.3 Examining Some Existing PAM Configuration Settings
7.4 Examples of Modifying PAM Settings - vsftpd Virtual Users

8. Netfilter Firewall
8.1 NetFilter Chains and Tables
8.2 Filtering Rules
8.3 Connection Tracking
8.4 Examining default Firewall Settings in Fedora 15
8.5 Maintaining Rules / Policy in a Chain
8.6 Configuring NAT
8.6.1 Masquerade
8.6.2 Source NAT (SNAT)
8.6.3 Destination NAT (DNAT)
8.7 Exercise for ¡§iptables¡¨ command
8.8 FirewallD
8.8.1 More about Zones
8.8.2 Exercise for Configuring Zones and NAT

9. Security / Network Related Services and Tools
9.1 OpenVPN
9.1.1 VPN Overview
9.1.2 A Very Simple Example of Configuring OpenVPN
9.2 Securing sshd
9.2.1 Protocol
9.2.2 Root Login
9.2.3 Password Authentication
9.2.4 Allow SFTP with chroot only for Specific Users
9.2.5 Allow / Disallow all kinds of SSH access for Specific Users
9.3 Security Tools / Services
9.3.1 Fail2Ban
9.3.2 Chroot Jail
9.3.3 netstat / ss
9.3.4 nmap
9.3.5 netcat / ncat / nc
9.3.6 mtr
9.4 Intrusion Detection System (IDS)
9.4.1 OpenVAS Overview
9.4.2 Snort Overview

Supplement 1 - Installing and Setup Fedora

• About Fedora
• Installing Vmware Workstation Player
• Downloading Fedora 25
• Installing and Configuring ServerA ¡V Fedora 25 Server
• Installing and Configuring ClientB ¡V Fedora 25 Workstation
• Starting and Stopping ServerA / ClientB
• Connecting ServerA / ClientB through SSH
• Setup a Local Yum Repository Using an ISO Image

Supplement 2 - IPv6

• IPv6 Overview (°Ñ¦Ò)
• Normal IPv6 Format
• Compressed IPv6 Format
• IPv6 Unicast Address (°Ñ¦Ò)
• Aggregatable Global Address
• Site-Local Address
• Link-Local Address
• IPv4-Compatible IPv6 Address
• Configuring IPv6 in Linux
• Manual Configuring IPv6 Global Address
• AutoConfiguration
• Commands for IPv6
• Adding additional IPv6 address to an interface
• Viewing and making changes to IPv6 routing table
• Viewing IPv6 firewall
• Connectivity checking
• Checking / Enabling IPv6 Forwarding
• Viewing IPv6 connections and listening ports
• Managing network through the new ¡§ip¡¨ and ¡§ss¡¨ command

Supplement 3 - Policy-Based Routing with iproute2

Supplement 4 - BIND DNS View

Supplement 5 - About Network Address Translation (°Ñ¦Ò¸ê®Æ)

• Public IP addresses
• Private IP Address
• Source NAT
• Connection Tracking for NAT
• Translation Involved in our NAT exercises
• Loading Modules for NAT

Supplement 6 - More About VPN (°Ñ¦Ò¸ê®Æ)

• Muli-Connections OpenVPN using Certificates
• SSH Forwarding