Como instalar NTP en centos 7

Network Time Protocol es un protocolo de Internet para sincronizar los relojes de los sistemas informáticos a través del enrutamiento de paquetes en redes con latencia variable.

# yum install ntp ntpdate

# ntpdate -u 0.pool.ntp.org

# vi /etc/ntp.conf

# For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).

driftfile /var/lib/ntp/drift

# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default nomodify notrap nopeer noquery

# Permit all access over the loopback interface.  This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1 
restrict ::1

# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap
restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap
restrict 192.168.70.0 mask 255.255.255.128 nomodify notrap
restrict 172.16.1.0 mask 255.255.255.240 nomodify notrap
restrict 10.0.1.0 mask 255.255.255.248 nomodify notrap

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server 0.centos.pool.ntp.org iburst
server 1.centos.pool.ntp.org iburst
server 2.centos.pool.ntp.org iburst
server 3.centos.pool.ntp.org iburst

#broadcast 192.168.1.255 autokey # broadcast server
#broadcastclient   # broadcast client
#broadcast 224.0.1.1 autokey  # multicast server
#multicastclient 224.0.1.1  # multicast client
#manycastserver 239.255.254.254  # manycast server
#manycastclient 239.255.254.254 autokey # manycast client

# Enable public key cryptography.
#crypto

includefile /etc/ntp/crypto/pw

# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography. 
keys /etc/ntp/keys

# Specify the key identifiers which are trusted.
#trustedkey 4 8 42

# Specify the key identifier to use with the ntpdc utility.
#requestkey 8

# Specify the key identifier to use with the ntpq utility.
#controlkey 8

# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats

# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor

# systemctl enable ntpd
# systemctl start ntpd

# ntpdate -u mi-servidorntp.local
# ntpdate -u 172.16.0.2

Como instalar tu sitio .onion en Centos 7

Una vez que tengas instalado el servidos debes tenerconfigurada al menos una interfaz de red que tenga asignada una IP y que tenga conectividad hacia la LAN.

Cuando tengas acceso a internet busca actualizar el servidor con el comando yum, así:

# yum update

Instalar un servidor web

Instalar PHP para tu servidor web lighttpd

# yum install php php-fpm lighttpd-fastcgi php-gd php-mysql php-tidy php-xmlrpc php-common php-cli php-xml

# vi /etc/php-fpm.d/www.conf

user = lighttpd
group = lighttpd

systemctl enable php-fpm.service
systemctl start php-fpm.service

vi /etc/php.ini

cgi.fix_pathinfo=1

vi /etc/lighttpd/modules.conf

include conf.d/fastcgi.conf

vi /etc/lighttpd/conf.d/fastcgi.conf

fastcgi.server += ( ".php" =>
        ((
                "host" => "127.0.0.1",
                "port" => "9000",
                "broken-scriptfilename" => "enable"
        ))
)

# systemctl restart lighttpd.service

Instalar una base de datos

Instalar Tor en Centos 7

# vi /etc/yum.repos.d/tor.repo

[tor]
name=Tor repo
enabled=1
baseurl=https://deb.torproject.org/torproject.org/rpm/el/7/$basearch/
gpgcheck=1
gpgkey=https://deb.torproject.org/torproject.org/rpm/RPM-GPG-KEY-torproject.org.asc

[tor-source]
name=Tor source repo
enabled=1
autorefresh=0
baseurl=https://deb.torproject.org/torproject.org/rpm/el/7/SRPMS
gpgcheck=1
gpgkey=https://deb.torproject.org/torproject.org/rpm/RPM-GPG-KEY-torproject.org.asc

vi /etc/yum.repos.d/epel.repo

enabled=1
exclude=tor
gpgcheck=1

yum update
yum list | grep tor

tor.x86_64                                  0.2.5.10-tor.2.rh7_0_1406  tor      
tor-debuginfo.x86_64                        0.2.5.10-tor.2.rh7_0_1406  tor

yum install tor

# adduser operador-tor
# passwd operador-tor

# su - operador-tor
$ tor

$ tor
Nov 10 16:33:46.424 [notice] Tor v0.2.5.10 (git-52198c0e51a1a8c1) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1e-fips and Zlib 1.2.7.
Nov 10 16:33:46.424 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
Nov 10 16:33:46.424 [notice] Read configuration file "/etc/tor/torrc".
Nov 10 16:33:46.436 [notice] Opening Socks listener on 127.0.0.1:9050
Nov 10 16:33:46.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.
Nov 10 16:33:46.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.
Nov 10 16:33:46.000 [notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster.
Nov 10 16:33:46.000 [notice] Bootstrapped 0%: Starting
Nov 10 16:33:46.000 [notice] Bootstrapped 5%: Connecting to directory server

# systemctl disable tor.service

Ajustando lighttpd para Tor

vi /etc/lighttpd/lighttpd.conf

server.bind = "127.0.0.1"

# systemctl restart lighttpd.service

# yum install lynx
# lynx 127.0.0.1

                              Powered by lighttpd
   LIGHTTPD - fly light.

   Powered by GNU/Linux
   Powered by Lighttpd

Creando un Hidden Service en Tor

vi /etc/tor/torrc

#HiddenServiceDir /var/lib/tor/hidden_service/
#HiddenServicePort 80 127.0.0.1:80

HiddenServiceDir /home/operador-tor/hidden_service1/
HiddenServicePort 80 127.0.0.1:11131

# su - operador-tor
$ mkdir hidden_service1
$ exit

# vi /etc/lighttpd/lighttpd.conf

$SERVER["socket"] == ":11131" {
        server.document-root       = "/var/www/hidden_service1"
}

# mkdir /var/www/hidden_service1

# echo "Mi Hidden Service 1" >  /var/www/hidden_service1/index.html

# systemctl restart lighttpd.service

# lynx 127.0.0.1:11131

#su - operador-tor
$ tor &

Bootstrapped 80%: Connecting to the Tor network
Bootstrapped 85%: Finishing handshake with first hop
Bootstrapped 90%: Establishing a Tor circuit
Tor has successfully opened a circuit. Looks like client functionality is working.
Bootstrapped 100%: Done

$ cat /home/operador-tor/hidden_service1/hostname
u22cnvxoljbnkffs.onion

Linux server monitoring en Centos

Un vistazo general con top

Un top con mas funciones: htop

Monitorear los discos con iotop

Monitorear las interfaces de Red con iftop

Cuando requieres ver casi todo: nmon

Como instalar Lighttpd en Centos 7

# yum install lighttpd

# systemctl start lighttpd.service

# firewall-cmd --permanent --zone=public --add-service=http
# firewall-cmd --reload