Creating Accounts from the Shell In this lesson, I want to show you how to create a new user account from within your shell. So I’m already logged into my terminal here as my standard user of deon training. If I want to create a new user, I have to do that using sudo because I have to be a root or an admin to create new users on a system. So let’s go ahead and use pseudo. We’re going to use add user, which is the command we want…

Understanding User Accounts Let’s talk about user accounts. Like most other modern operating systems, Linux is a multiuser operating system. This means that a single Linux computer can support many users. Each of these can have their own unique account. Now, in previous videos I’ve referred to accounts in passing but we really haven’t covered them in detail yet. In this video we’re going to describe the important account principles and some commands that can be used to work with these accounts. As we move further along in the course…

Network Protection These days, one of the most pressing issues involving technology revolves around system security and data protection. In this lesson, we’re going to discuss a few basic tips to help prevent your Linux system from getting compromised. First, shut down unused servers. Linux’s major security vulnerabilities aren’t inside of worms or viruses like they are with Windows. Instead, Linux risk is going to be sitting on the fact that outsiders can try to break in and abuse server programs that are running 24 hours a day, seven days…

Network Features Networking is a critical part of modern computing. Most Linux distributions are already capable of creating network connections automatically for you. On some rare occasions, though, this process simply doesn’t work right. Or there may be a need to tweak the connection or debug a problem that’s occurring. To begin, there are some common networking terms and definitions that we need to discuss. DNS is our first one. DNS is the domain Name system. And DNS is a global network of servers that translates between host names and…

Using Sticky Bits When investigating the Linux directory tree, there are going to be certain file types that are going to require special attention from you. Sometimes a user may just want to be aware that these special files exist and how they’re handled because they’re going to deviate from what is expected based on what has been previously covered in the other videos we’ve talked about. For example, a user could delete a file without having write permission to it. Now this may seem like a bug after all…

Setting Ownership Linux is a multiuser operating system like we’ve talked about before now, because of this we have lots of users accessing the same system so how does a user secure their files against unwanted access by those other users? Well. Linux handles these tasks through two types of features. When you’re dealing with files and directories, this is known as ownership and permission. Every file has an associate, owner or account with that file or directory it’s linked to. It as well as its associated group. Now, in…

VPC Network Peering Another way to connect networks across Google cloud platform is by using Vpc network peering. This can be used to connect networks which are in different projects as well as in different organizations. Vpc Network Peering differs very significantly in a structural way from shared Vpc. The main logical differences are the networks that are peered are administered illustratively separate, they have their own firewall rules and policies and can be administered separately. And the second point of difference is that you can peer networks from different…

Dedicated Interconnect Direct and Carrier Peering We saw earlier that there are three ways to interconnect your on premise network with a VPC on the Google Cloud platform. The first of these was the VPN, which can be used with or without cloud routers. The second is the dedicated interconnect, as opposed to a VPN. A dedicated interconnect does not use a tunnel over the Internet. Instead, it is a direct physical connection between Google’s network and your on premise network. The two networks that have been connected using a…

Cloud Router In order to avoid static routes, where you have to update the routing tables on your VPN in order to learn new networks, you will often use VPNs with cloud routers. The cloud router can be used to dynamically exchange route information between VPCs that you have on the Google Cloud platform and your on premise network. In addition to VPCs, Google also has a legacy network setup, which we’ll see briefly at the end of this section. Cloud routers work with both legacy networks as well as…

Lab: Bastion Host In this demo we will first create an application web server which will represent a service supplied to employees of a company. We will then prevent access from this web server out to the Internet by placing a firewall in between. Finally, we will create a maintenance server, also called a bastion host, which will be able to access this web server and we would test the connectivity to that server. We start off by provisioning a virtual machine which will represent our web server. So we…