6th edition, for version 4.5
Abstract
Audience: this book is intended to help people prepare for the LPIC-2 exam. You will need to have at least 2 years of practical experience with Unix, preferably Linux. Though you may take the LPIC-2 exam without it, you should be an LPIC-1 alumnus to be allowed to the titles and rights that come with the LPIC-2 certification.
Approach: We wanted to create a set of documents that could help us and others to pass the LPIC-2 exams. This book contains all the information (and more) needed to pass the exam.
Sources: Our sources of information were partly acquired from material on the Internet. Also practical experience of the authors and others and research done by the authors are to be credited. We try to give credit where due, but are fallible. We apologize.
Caution
While every precaution was made in the preparation of this book, we
can assume no responsibility for errors or omissions. When you feel
we have not given you proper credit or feel we may have violated
your rights or when you have suggestions how we may improve our
work please notify us immediately at
<lpic2-editor@sue.nl> so we can take
corrective actions.
Organization of this book: This book has been organized to follow the Linux Professional Institute level 2 objectives for LPIC-2 certification revision 4.5.0 of February 13th, 2017. The detailed objectives are available via https://www.lpi.org/study-resources/lpic-2-201-exam-objectives/ and https://www.lpi.org/study-resources/lpic-2-202-exam-objectives/ .
In case new objectives are published, the book will follow shortly thereafter.
The authors use the DocBook documentation standard for this book.
- Preface
- 0. Capacity Planning (200)
- 1. Linux Kernel (201)
- Kernel Components (201.1)
- Key knowledge Areas:
- Terms and Utilities
- Different types of kernel images
- Overview of numbering schemes for kernels and patches
- Scheme up to 2.6.0 kernels
- Kernel Versioning since kernel version 2.6.0 and up to 3.0
- Kernel Versioning from version 3.0 to 4.0
- Kernel Versioning from 4.0
- XZ Compression
- What are kernel modules
- Compiling a Linux kernel (201.2)
- Key Knowledge Areas
- Terms and Utilities
- Getting the kernel sources
- Cleaning the kernel
- Creating a
.configfile - make
config - make
menuconfig - make
xconfigandgconfig - make
oldconfig - Compiling the kernel
- Installing the new kernel
- The initial ram disk (
initrd) - Manual
initrdcreation - Patching a Kernel
- Removing a kernel patch from a production kernel
- DKMS
- Dracut
- Kernel runtime management and troubleshooting (201.3)
- Customise, build and install a custom kernel and kernel modules
- Manipulating modules
- Configuring modules
- Module Dependency File
- kmod versus kerneld
- Building A Custom Kernel
- /proc filesystem
- Contents of
/,/boot, and/lib/modules - Tools and utilities to trace software and their system and library calls
- The bootprocess
- Hardware and Kernel Information
- udev
- Questions and answers
- 2. System Startup (202)
- 3. Filesystem and Devices (203)
- 4. Advanced Storage Device Administration (204)
- 5. Networking Configuration (205)
- 6. System Maintenance (206)
- 7. Domain Name Server (207)
- 8. HTTP Services (208)
- Basic Apache Configuration (208.1)
- Key Knowledge Areas
- Terms and utilities
- Installing the Apache web-server
- Modularity
- Run-time loading of modules (DSO)
- Monitoring Apache load and performance
- Enhancing Apache performance
- Apache
access_logfile - Apache
error_logfile - Restricting client user access
- Configuring authentication modules
- User files
- Group files
- Configuring mod_perl
- Configuring mod_php support
- The httpd binary
- Configuring Apache server options
- Apache Virtual Hosting
- Customizing file access
- Apache configuration for HTTPS (208.2)
- Key Knowledge Areas
- Terms and Utilities:
- Apache2 configuration files
- Encrypted webservers: SSL
- Directory /etc/ssl/
- How to create a SSL server Certificate
- Apache SSL Directives
- Creating and installing a self-signed certificate for Apache
- Other Apache Directives
- SSL with Apache Virtual Hosts
- SSL Security Issues
- Disabling of insecure protocols and ciphers
- Implementing Squid as a caching proxy (208.3)
- Implementing Nginx as a web server and a reverse proxy (208.4)
- Questions and answers
- 9. File Sharing (209)
- 10. Network Client Management (210)
- 11. E-Mail services (211)
- 12. System Security (212)
- Configuring a router (212.1)
- Key Knowledge Areas
- Terms and Utilities
- Private Network Addresses
- Network Address Translation (NAT)
- The Linux firewall, an overview
- Saving And Restoring Firewall Rules
- Port and/or IP forwarding
- Denial of Service (DoS) attacks
- Using /proc/sys/net/ipv4 (sysctl) to prevent simple DOS attacks
- Routed
- Tools, commands and utilities to manage routing tables
- ip6tables
- Managing FTP servers (212.2)
- Secure shell (SSH) (212.3)
- Security tasks (212.4)
- OpenVPN (212.5)
- Questions and answers
- A. LPIC Level 2 Objectives
- Bibliography
- Index
List of Figures
List of Tables
- 2.1. Runlevels and targets
- 3.1. Recap of the Linux file hierarchy
- 7.1. Major BIND components
- 7.2. Controlling
named - 7.3.
/etc/init.d/bindparameters - 9.1. Kernel options for NFS
- 9.2. Overview of exportfs
- 9.3. Overview of showmount
- 9.4. Some options for the nfsstat program
- 9.5. Overview of NFS-related programs and files
- 9.6. Overview of NFS protocol versions
- 10.1. The first two octets are 21.31
- 10.2. Company-wide services
- 10.3. Subnet-dependent Services
- 10.4. LDAP field operators
- 12.1. Valid chains per table
- A.1. LPIC Level 200 - 206 Objectives And Their Relative Weight
- A.2. LPIC Level 207 - 212 Objectives And Their Relative Weight