<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Conrey.org &#187; Virtualization</title>
	<atom:link href="http://www.conrey.org/?feed=rss2&#038;cat=17" rel="self" type="application/rss+xml" />
	<link>http://www.conrey.org</link>
	<description>Random thoughts about life, family, homebrew, and technology.</description>
	<lastBuildDate>Fri, 20 Aug 2010 20:39:02 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Getting Involved.  CIALUG2004 &#8211; vEXPERT 2010</title>
		<link>http://www.conrey.org/?p=931</link>
		<comments>http://www.conrey.org/?p=931#comments</comments>
		<pubDate>Thu, 10 Jun 2010 13:18:04 +0000</pubDate>
		<dc:creator>theron</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Virtualization]]></category>

		<guid isPermaLink="false">http://www.conrey.org/?p=931</guid>
		<description><![CDATA[First I&#8217;ve got to thank Scott Lowe for his blog post &#8220;Blogging for the right reasons&#8221; for the motivation to get this one wrapped up. It&#8217;s been sitting in my drafts for a while now, long enough that vEXPERT2010 was more than one other thing before. This is just my PoV, let me know what [...]]]></description>
			<content:encoded><![CDATA[<p>First I&#8217;ve got to thank <a href="http://www.twitter.com/scott_lowe">Scott Lowe</a> for his blog post &#8220;<a href="http://blog.scottlowe.org/2010/06/09/blogging-for-the-right-reasons/">Blogging for the right reasons</a>&#8221; for the motivation to get this one wrapped up.  It&#8217;s been sitting in my drafts for a while now, long enough that vEXPERT2010 was more than one other thing before.  This is just my PoV, let me know what you think!<br />
<span id="more-931"></span></p>
<p>Back in 2004, I thought I knew enough to be dangerous with IT.  Whether it was <a href="http://www.redhat.com">RedHat</a>, <a href="http://www.mandrake.com">Mandrake</a> (hey don&#8217;t judge), <a href="http://www.sun.com">Solaris</a>, that odd little <a href="http://www.vmware.com/support/pubs/gsx_pubs.html">GSX</a> box in the corner, or the suite of DoD software that I was supporting, I was pretty sure I knew what I was doing.  I knew these technologies pretty well.  Or so I thought.  I was already blogging, I had already moved my awesome geocities page to a early blogging platform, and was migrating again to some early version of <a href="http://www.wordpress.org">wordpress</a>, running on some shiny new desktop in my basement that was also my ipchains firewall.  I was ubercool.</p>
<p>After going to my first <a href="http://www.cialug.org/">CIALUG</a> meeting what I realized though was that I was missing the most important part of linux and opensource in general.  Open collaboration.  When I went home, something had changed.  Sure, I&#8217;d learned something, sure I&#8217;d talked about my awesome new mythtv box I was working on, but something different had happened.  There had been a fundamental shift in the importance in my mind of community.</p>
<p>For those of us active in any community, this cohesion can be a profound, life changing thing.  We get angry when people/companies threaten out culture, and the linux community, really, as a collective, isn&#8217;t the most socially elegant group out there.</p>
<p>When my work started focusing more and more around vmware, the blogging community that had sprouted up around vmware was something I could relate too.  There was that sense of community, that sense of passion that Scott writes about, and I was drawn to it.  It&#8217;s great being a part of a community, where you can contribute what you know, and continue to learn more yourself.</p>
<p>Along with a host of great blogs the VMUGs were (and still are) a great way for new (and existing) members of the community to reconnect, share information, and stay engaged.  The only thing that is glaringly different was and is that the VMUGs are run by vmware corp.  That&#8217;s just the way that it is, I&#8217;m not saying it&#8217;s bad or good, I&#8217;m just saying; that&#8217;s the way it is.</p>
<p>The elephant in the room with the vmware community as a whole is that we&#8217;re a community of use.  Although some of us exist inside the corp firewall of vmware or EMC proper, we don&#8217;t, as a community, develop the software.  We use it.  Nothing wrong with that, but there is a fundamental difference in the community surrounding vmware and the community surrounding linux distro X or software package X.  Even the wonderful and completely awesome work that is being done /w powershell is completely dependent on the existence of a financially viable company.  The code doesn&#8217;t stand separate.   (Some would point out here that &#8220;linux&#8221; in general isn&#8217;t really developed by the &#8220;community&#8221; at this point either.  Best left for a separate conversation I suppose)</p>
<p>This difference impacts the way we write, and what we write about.  We&#8217;re &#8220;users&#8221; and we await the latest feature, ready for that surprise shock and awe that accompanies it.  We like to be &#8220;in the know&#8221;, aware of the next feature that is going to come out before anyone else.  But when we do know. WE SHARE.  Sharing that information, the best configurations, a PS script, the awesomeness that is the <a href="http://vmcompack.codeplex.com/">community powerpack</a>, the <a href="http://nickapedia.com/2010/02/15/vsphere-mini-monitor-now-with-more-cowbell/">mini monitor by Nick Weaver</a>, these are the things that make our community work.  The forums are great, and the amount of data in there is insane.  Someone once said that the average time to get an answer to a well described problem on the vmware forums was under 10 minutes.  That&#8217;s free support for vmware, delivered in the best way possible.  From your peers.  From another person who has been there before.</p>
<p>Are you still with me? This brings me to the topic of Scott&#8217;s <a href="http://blog.scottlowe.org/2010/06/09/blogging-for-the-right-reasons/">post</a>.</p>
<p>While I blog, In my head, I instantly translated this to, &#8220;participating in the community for the right reasons.&#8221;  Why? He mentions twitter, and really, there are more places to get recognized by &#8220;Company X&#8221; than just via a blog and twitter.  And most people I know don&#8217;t just blog about tech stuff, heck, I don&#8217;t blog just about vmware or linux.  I blog about, well, just look up and to your right. <img src='http://www.conrey.org/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' />  </p>
<p>So how could someone participate for the wrong reasons?  I&#8217;m not an active participant in the forums, but there is <strong>REAL </strong>value in doing that.  I&#8217;m not the most regular attendee to our VMUGS, (I don&#8217;t like driving the distance of Paris to Brussels for a VMUG&#8230;&#8230;&#8230;shocked, I&#8217;m sure) but there is <strong>REAL</strong> value in participating in the VMUGs.  I&#8217;m not the most regular blogger, but again, to those that do, however often, there is <strong>REAL </strong>value in doing that.</p>
<p>That value, that <strong>sharing of knowledge</strong>, is important to those that also involved, or <strong>more importantly, to those that are just now trying to figure out how to get involved.</strong></p>
<p>I&#8217;ll wrap this up for the 2 of you that made it this far.  Participate in the vmware community however you can best contribute.  We don&#8217;t care what your reasons are, you may be an employee just doing your job, you may be a ROCKSTAR vmware admin with time to assist, you may be a published technical author, a vmware instructor, shoot, you may be all of the above, just get, and stay, involved.  We&#8217;ll all be better because of it.</p>
<p>And if you&#8217;re blogging for the wrong reasons, well, keep blogging.  you may surprise yourself down the road.  </p>
<p>In my head, if we start to judge the <strong>why</strong> people are writing, the potential creeps in where we&#8217;re setting an elitist bar that tries to separate out an &#8220;us&#8221; from &#8220;them&#8221;.  I&#8217;ve never seen that play out well in any community that I&#8217;ve been a part of.  That growing number of blogs you see that concerns you?  Chances are they are people that look up to you, so <strong>get personal</strong>.  If you have a concern, ask them. </p>
<p>And to the email I got from the person asking if they may be looked at differently for starting a blog after Scott&#8217;s post,  the answer is <strong>NO</strong>.  A resounding <strong>NO</strong>.  <a href="http://www.youtube.com/watch?v=VZ2HcRl4wSk">DO IT</a>.  Honestly, we don&#8217;t care why you&#8217;re doing it, just <strong>get involved</strong>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.conrey.org/?feed=rss2&amp;p=931</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>VMware vEXPERT 2010&#8230;.. whoa.</title>
		<link>http://www.conrey.org/?p=913</link>
		<comments>http://www.conrey.org/?p=913#comments</comments>
		<pubDate>Sat, 05 Jun 2010 23:07:41 +0000</pubDate>
		<dc:creator>theron</dc:creator>
				<category><![CDATA[Virtualization]]></category>

		<guid isPermaLink="false">http://www.conrey.org/?p=913</guid>
		<description><![CDATA[I&#8217;m thrilled to announce that I&#8217;ve been selected as a vmware vEXPERT for 2010. What is it? From the vmware website: The VMware vExpert Award is given to individuals who have significantly contributed to the community of VMware users over the past year. vExperts are book authors, bloggers, VMUG leaders, tool builders, and other IT [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;m thrilled to announce that I&#8217;ve been selected as a vmware vEXPERT for 2010. What is it?  From the vmware website:<br />
<span id="more-913"></span></p>
<blockquote><p>The VMware vExpert Award is given to individuals who have significantly contributed to the community of VMware users over the past year. vExperts are book authors, bloggers, VMUG leaders, tool builders, and other IT professionals who share their knowledge and passion with others. These vExperts have gone above and beyond their day jobs to share their technical expertise and communicate the value of VMware and virtualization to their colleagues and community. </p></blockquote>
<p><img alt="" src="http://www.vmware.com/files_inline/images/vmw_logo_vmware-expert_250x100.gif" class="aligncenter" width="250" height="100" /> </p>
<p>Huge thanks to <a href="http://www.twitter.com/jtroyer">@jtroyer</a> and the folks that picked the winners this year.  I&#8217;m still in a bit of shock, I&#8217;m hugely exited for what&#8217;s in store for this year.  Looking at the list, I&#8217;m humbled to be included.  Thanks again vmware!</p>
<p>-Theron</p>
]]></content:encoded>
			<wfw:commentRss>http://www.conrey.org/?feed=rss2&amp;p=913</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Backup: Chicken Little in the Unified Data Center starring Joe Skorupa of Gartner</title>
		<link>http://www.conrey.org/?p=898</link>
		<comments>http://www.conrey.org/?p=898#comments</comments>
		<pubDate>Tue, 11 May 2010 02:48:23 +0000</pubDate>
		<dc:creator>theron</dc:creator>
				<category><![CDATA[Virtualization]]></category>

		<guid isPermaLink="false">http://www.conrey.org/?p=898</guid>
		<description><![CDATA[NOTE:This is a repost/archival post of an article written by Steve Chambers posted on his personal website, viewyonder.com, March 25th, 2010. This backup was made from a google cache of the post found here. For information on blogger&#8217;s rights, please visit the EFF. I read a brilliant blog post by J Michael Metz today about [...]]]></description>
			<content:encoded><![CDATA[<p><strong>NOTE:</strong>This is a repost/archival post of an article written by <a href="http://www.twitter.com/stevie_chambers">Steve Chambers</a> posted on his personal website, <a href="http://www.viewyonder.com">viewyonder.com</a>,  March 25th, 2010.  This backup was made from a google cache of the post found <a href="http://webcache.googleusercontent.com/search?q=cache:lJUWxuriHTYJ:viewyonder.com/2010/03/25/chicken-little-in-the-unified-data-center-starring-joe-skorupa-of-gartner/+view+yonder+fcoe+post&#038;cd=1&#038;hl=en&#038;ct=clnk&#038;gl=us&#038;client=firefox-a">here</a>.</p>
<p><a href="http://www.eff.org/issues/bloggers">For information on blogger&#8217;s rights, please visit the EFF.</a></p>
<p><span id="more-898"></span></p>
<p><div class="wp-caption alignleft" style="width: 205px"><img alt="" src="http://www.markpeterdavis.com/.a/6a00e0098c505188330115709e7fba970b-450wi" width="190" height="193" /><p class="wp-caption-text">DCB? FCoE? Eh?</p></div>I read a brilliant blog post by J Michael Metz today about the <a href="http://go2.wordpress.com/?id=725X1342&#038;site=jmichelmetz.wordpress.com&#038;url=http%3A%2F%2Fwww.gartner.com%2FDisplayDocument%3Fref%3DclientFriendlyUrl%26id%3D1319413">recent Gartner report on FCoE</a> by <a href="http://www.gartner.com/AnalystBiography?authorId=24834">Joe Skorupa</a>.  Of the many great lines and counter arguments in the post, likening Gartner to Chicken Little was comically accurate in my humble opinion, and is a typical analyst response to anything new and innovative: remember the scare stories about virtualization?  If you listened to guys like Joe, would you ever get anything done?</p>
<p>Please go and <a href="http://jmichelmetz.wordpress.com/2010/03/19/gartner-on-fcoe/">read the post yourself</a>, but here’s the general outline to give you a flavour:</p>
<li><strong>Define your terms</strong> – looks like Joe don’t know the difference between DCB and FCoE
<li><strong>Learning how to count</strong> – convergence increases components!  Does Joe think that virtualization increases physical server counts too?
<li><strong>Financial barriers</strong> – well, this is crap in crap out.  If you have more stuff (you don’t) then it’s more expensive (it isn’t)
<li><strong>Increased complexity</strong> – because it’s new?  because the teams, tools aren’t set up for it?
<li><strong>Hard to debug</strong> &#8211; crap in/out again, especially if you don’t understand DCB and FCoE.
<li><strong>Sublime to surreal</strong> – don’t do it because you might not get the benefit, but don’t rule them out.  What the hell does that mean?
<li><strong>Missed opportunities</strong> – when you don’t have an axe to grind, nor a hidden agenda, what’s the real opportunity?
<li><strong>Myopic strawmen</strong> – what about ETS?
<p>Don’t forget that the ten-page Gartner report can be yours for $200.  Yes, that’s $20 a page.  The good times must be back!</p>
<p>If Joe can sell just nine of those reports he might want to invest in <a href="http://www.soltechnology.com/Fibre-Channel-over-Ethernet-FCoE.htm">this FCoE course</a>.</p>
<p>Related posts:</p>
<p>   1. <a href="http://viewyonder.com/2009/08/23/the-z-factor-scaling-deep-in-the-data-center/">The Z-Factor: Scaling deep in the data center</a><br />
   2. <a href="http://viewyonder.com/2010/03/28/dont-be-a-chicken-cram-your-eggs-into-vsphere-on-ucs/">Don’t be a chicken, cram your eggs into vSphere on UCS</a><br />
   3. <a href="http://viewyonder.com/2009/07/12/data-center-consolidation-road-to-unified-computing-service-analysis/">Understanding and untangling the data center spaghetti</a><br />
   4. <a href="http://viewyonder.com/2009/07/12/unified-computing-unified-people-process-and-technology/">Unified Computing = Unified People, Process and Technology</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.conrey.org/?feed=rss2&amp;p=898</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>UEC &#8220;Cloud in a Box&#8221; from Canonical</title>
		<link>http://www.conrey.org/?p=808</link>
		<comments>http://www.conrey.org/?p=808#comments</comments>
		<pubDate>Fri, 09 Apr 2010 23:06:52 +0000</pubDate>
		<dc:creator>theron</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Virtualization]]></category>

		<guid isPermaLink="false">http://www.conrey.org/?p=808</guid>
		<description><![CDATA[With all of the development going on in the Ubuntu ecosystem today, one of the more interesting developments in my opinion is the Ubuntu Enterprise Cloud. UEC is a great way for existing (or new) Ubuntu/Canonical users/customers to build out a supported virtual machine hosting platform that utilizes the same tools as Amazon&#8217;s EC2 to [...]]]></description>
			<content:encoded><![CDATA[<p />With all of the development going on in the <a href="http://www.ubuntu.com">Ubuntu</a> ecosystem today, one of the more interesting developments in my opinion is the <a href="http://www.ubuntu.com/cloud/private">Ubuntu Enterprise Cloud</a>.  UEC is a great way for existing (or new) <a href="http://www.ubuntu.com">Ubuntu</a>/<a href="http://www.canonical.com/">Canonical</a> users/customers to build out a <a href="http://www.ubuntu.com/cloud/support">supported</a> virtual machine hosting platform that utilizes the same tools as <a href="http://aws.amazon.com/ec2/">Amazon&#8217;s EC2</a> to manage it.  This type of private cloud is extremely compelling, allowing you to setup an environment where your production environment is running on EC2, while utilizing the same tools, and images in a local test/dev environment.</p>
<p><span id="more-808"></span><br />
Alternatively, running everything locally, you can maintain the flexibility to move to another UEC deployment, or EC2 if required. </p>
<p /><a href="http://www.conrey.org/wp-content/uploads/2010/04/photo.jpg"><img src="http://www.conrey.org/wp-content/uploads/2010/04/photo-150x150.jpg" alt="" title="photo" width="150" height="150" class="alignright size-thumbnail wp-image-825" /></a>A couple of days ago I had lunch with a friend of mine, and he slyly slid across the table Canonical&#8217;s &#8220;Cloud in a Box&#8221;.</p>
<p>This is meant to be passed off to decision makers, to help higher ups understand the ease of installation, the stability and compatibility of the UEC platform, and Canonical&#8217;s support muscle behind it.</p>
<p>Split nicely into two simple parts, Deploy and Decide, we&#8217;ll quickly go over both sections.<br />
<a href="http://www.conrey.org/wp-content/uploads/2010/04/photo2.jpg"><img src="http://www.conrey.org/wp-content/uploads/2010/04/photo2-150x150.jpg" alt="" title="photo(2)" width="150" height="150" class="aligncenter size-thumbnail wp-image-819" /></a></p>
<p />The Deploy section walks through the simple installation steps to getting a EUC install running, as well as including an Ubuntu &#8220;Your Private Cloud 9.10&#8243; install disk.<br />
<a href="http://www.conrey.org/wp-content/uploads/2010/04/photo3.jpg"><img src="http://www.conrey.org/wp-content/uploads/2010/04/photo3-150x150.jpg" alt="" title="photo(3)" width="150" height="150" class="aligncenter size-thumbnail wp-image-820" /></a><a href="http://www.conrey.org/wp-content/uploads/2010/04/photo4.jpg"><img src="http://www.conrey.org/wp-content/uploads/2010/04/photo4-150x150.jpg" alt="" title="photo(4)" width="150" height="150" class="aligncenter size-thumbnail wp-image-821" /></a><a href="http://www.conrey.org/wp-content/uploads/2010/04/photo6.jpg"><img src="http://www.conrey.org/wp-content/uploads/2010/04/photo6-150x150.jpg" alt="" title="photo(6)" width="150" height="150" class="alignright size-thumbnail wp-image-823" /></a></p>
<p /><a href="http://www.conrey.org/wp-content/uploads/2010/04/photo5.jpg"><img src="http://www.conrey.org/wp-content/uploads/2010/04/photo5-150x150.jpg" alt="" title="photo(5)" width="150" height="150" class="alignleft size-thumbnail wp-image-822" /></a>Interesting for me is the List of Supported hardware for Ubuntu 9.10 Server Edition and UEC.  If you&#8217;re deploying this in your company, you&#8217;ll want the support Canonical can provide, and there&#8217;s a sizable list of hardware you can deploy on and get that support.  It&#8217;s interesting to note that Canonical provides support for their platform, as well as the software running on it.  Full solution support for this is key to a successful deployment.</p>
<p /><a href="http://www.conrey.org/wp-content/uploads/2010/04/photo8.jpg"><img src="http://www.conrey.org/wp-content/uploads/2010/04/photo8-150x150.jpg" alt="" title="photo(8)" width="150" height="150" class="alignright size-thumbnail wp-image-824" /></a>The other side, the Decide section, reads like a dead tree powerpoint presentation, listing bullet and talking points that describe/add clarity to the UEC story.  I particularly liked the &#8220;defining cloud computing&#8221; slide, as it clearly states the official canonical stance on where this product fits:</p>
<blockquote><p>At Canonical, we believe cloud computing is all about <a href="http://blog.gardeviance.org/2008/10/gang-up-now-before-aas-cloud-gets-you.html">Infrastructure as a Service</a>. Specifically, the approach to managing Infrastructure first pioneered on Amazon EC2 and S3.</p></blockquote>
<p>This reminds me to tell you to go listen to <a href="http://www.gardeviance.org/">Simon Wardley</a>.  <a href="http://www.youtube.com/watch?v=okqLxzWS5R4">Presentation Gold</a>.</p>
<p />What really separates Ubuntu cloud from other platforms based on Free and Open Source Software is really the community momentum, the scale of Amazon&#8217;s EC2, and the leadership vision to really make ubuntu the best virtual guest platform for applications.  That&#8217;s no small feat.  Today, Ubuntu is the most deployed Linux OS on Amazon&#8217;s public cloud, and it&#8217;s lead is growing.</p>
<p />Long story short: Canonical and Ubuntu are making a serious bid to be the next big enterprise linux distribution, and one of the major differentiators today is UEC.  With the impending release of <a href="http://www.ubuntu.com/testing/lucid/beta2">Ubuntu 10.04 LTS</a>, there is going to be an increased interest in Ubuntu&#8217;s private cloud offering.  <a href="http://www.novell.com/products/server/">Novell</a> and <a href="http://www.redhat.com">Redhat</a> should be taking notes.</p>
<p />Find out more about UEC: <a href="http://www.ubuntu.com/cloud/private">http://www.ubuntu.com/cloud/private</a><br />
Find our more about Eucalyptus: <a href=" http://www.eucalyptus.com/"> http://www.eucalyptus.com/</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.conrey.org/?feed=rss2&amp;p=808</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Deploying an Ubuntu Lucid VM on BlueLock&#8217;s Beta vCloud.</title>
		<link>http://www.conrey.org/?p=787</link>
		<comments>http://www.conrey.org/?p=787#comments</comments>
		<pubDate>Wed, 10 Mar 2010 20:01:09 +0000</pubDate>
		<dc:creator>theron</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Virtualization]]></category>

		<guid isPermaLink="false">http://www.conrey.org/?p=787</guid>
		<description><![CDATA[1st, kudos to bluelock for providing an Ubuntu template for use on their beta vCloud. Taking a stock Ubuntu template provided to Lucid costs about 2 bucks, that is, if they were charging us. Thanks guys! With that out of the way let&#8217;s get to the meat, if you&#8217;re deploying an ubuntu vm from the [...]]]></description>
			<content:encoded><![CDATA[<p>1st, kudos to <a href="http://www.bluelock.com">bluelock</a> for providing an Ubuntu template for use on their beta vCloud.  Taking a stock Ubuntu template provided to Lucid costs about 2 bucks, that is, if they were charging us. Thanks guys!  </p>
<p>With that out of the way let&#8217;s get to the meat, if you&#8217;re deploying an ubuntu vm from the current template (as of 10Mar10) there are a few security items I&#8217;d address right out of the gates after deploying a new VM.<br />
<span id="more-787"></span><br />
From the console, after logging in with the provided account information:</p>
<h2>0) turn on the firewall</h2>
<p><quote>sudo ufw enable</quote><br />
This will disable all inbound connections, and set the firewall to start automatically on boot.  We&#8217;ll go back and selectively open ports later.</p>
<h2>1) create a new user.</h2>
<p>In order to create a new user, from the command line, do the following:<br />
<quote>sudo adduser <username></quote><br />
answer the questions asked about the user, (this is you btw).  As we&#8217;ll be deleting the default user account, you&#8217;ll want to make sure that this new user is in the admin group, so that you can have sudo access.<br />
<quote> sudo usermod -g admin <username></quote><br />
Verify this worked by logging out, and logging in as your new user. (exit will log you out at this point)<br />
Once you&#8217;re logged back in as your new user, type:<br />
<quote> sudo -l -S</quote><br />
you should see the response that looks like this:<br />
<quote>User <username> may run the following commands on this host:<br />
    (ALL) ALL</quote><br />
with that done, </p>
<h2>2) delete the default bluelock user.</h2>
<p><quote>sudo userdel express</quote></p>
<h2>3)disable root ssh access</h2>
<p> I&#8217;m not sure why this is enabled by default, but certainly go in and edit your sshd.conf, look for the # Authentication: section, and disable the root account from being able to log in remotely via ssh.</p>
<p>sudo nano /etc/ssh/sshd_config</p>
<p>and change:<br />
<quote>PermitRootLogin yes</quote><br />
to<br />
<quote>PermitRootLogin no</quote></p>
<h2>4)change the root password</h2>
<p>Call me paranoid, but at this point I want to ensure that this template&#8217;s root account has a different root password than all the other ones that are deployed in bluelock.<br />
<quote>sudo su -</quote><br />
at this point, you&#8217;ll be root, to change the password, I suggest using the following website: https://www.grc.com/passwords.htm copy the bottom option (yes all of it) and type:<br />
<quote>passwd</quote><br />
and when prompted enter that long string.  You won&#8217;t be using it again, so don&#8217;t worry what it is. (thus the power of sudo)</p>
<h2>5)Change the default root mysql password</h2>
<p>You&#8217;ll want to follow the recommended procedure from bluelock and change your default mysql root password as well.<br />
<quote>sudo dpkg-reconfigure mysql-server-5.0</quote></p>
<h2>5)check for updates</h2>
<p>Get used to using aptitude.  It rocks.  I know, I know, apt-get works, but aptitude is the way to go.<br />
<quote>sudo aptitude update</quote><br />
Once your available package information has been updated, upgrade!<br />
<quote>sudo aptitude upgrade</qoute><br />
or combine the two together:<br />
<quote>sudo aptitude update &#038;&#038; sudo aptitude upgrade</quote><br />
select yes, and grab a cup of coffee.  This may take a few minutes. (BlueLock does have fat pipes, so this won&#8217;t take THAT long.)</p>
<h2>wait? what about my firewall?</h2>
<p>oh that&#8217;s right.  we want to enable access to some services now that we&#8217;ve taken care of some security stuff.  Get familar with the ufw commands.  This is a great simple firewall that ships by default with ubuntu now.</p>
<p>Let&#8217;s enable ssh and http access (as bluelock does ship their current ubuntu template with apache2 installed)</p>
<p><quote>sudo ufw enable ssh</quote><br />
<quote>sudo ufw enable http</quote></p>
<p>and let&#8217;s verify what we&#8217;ve enabled<br />
<quote>sudo ufw status</qoute><br />
should return something like:<br />
<quote>status: active</quote><br />
and a list of ports that are open.</p>
<h2>Break Break</h2>
<p>Couple of thoughts, I always move away from password based ssh logins to key based.  Rather than recreate the wheel, here&#8217;s a good tutorial that I use as well: http://www.debuntu.org/ssh-key-based-authentication</p>
<p>At this point we&#8217;re at a point where we&#8217;ve deployed a secure platform to move forward from. If you want to upgrade to a newer version of ubuntu read on!</p>
<h2>6)upgrade!</h2>
<p>Once you&#8217;ve applied all your updates, here&#8217;s the command to go out and see if there&#8217;s a newer version of ubuntu available:<br />
<quote>sudo do-release-upgrade</quote><br />
if you want to to check for development versions of Ubuntu, use:<br />
<quote>sudo do-release-upgrade -d</quote> </p>
<h2>7)rinse and repeat</h2>
<p>At this time, you can update and upgrade to your heart&#8217;s content to get to whatever version of Ubuntu you&#8217;re looking for.  I recommend doing the upgrade through the console to avoid any issues that may arise doing it via ssh.</p>
<p>Thanks for reading!</p>
<p><a href="http://www.twitter.com/theronconrey">-theron</a></p>
<p>(<a href="https://forums.bluelock.com/showthread.php?t=137">This has also been reposted over in the Tips, Tricks, Tutorials section of the BlueLock Forum</a>)</p>
]]></content:encoded>
			<wfw:commentRss>http://www.conrey.org/?feed=rss2&amp;p=787</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
