Fedora Server Administration Guides

Author: Peter Boy (pboy) | Creation Date: 2021-03-10 | Last update: N/A | Related Fedora Version(s): 33

First Draft! Please comment on server mailing list

What You Find Here

Basic installation and system administration is covered by Fedora’s overall Installation Guide (link) and System Administration Guide (link). But there are several of Fedora Server specific topics which are not included. There are such basic items as harddisk partitioning to more advanced security considerations up to virtualisation.

Basic System Installation

(to be decided: alternatively: expand Fedora central Installation and System Administration Guides)

Disk Partitioning

What default partitioning does
Raid system
Hard disk larger as 2 TB in Raid set ups
UEFI boot

Networking

Static configuration, appropriate for servers
Post F32 network config file locations

Post Installation security enhancements

Installing fail2ban (short step-by-step installation guide the Fedora way)
Disabling ssh password based login for all users but a small number of fallbacks (short guide how to do)
Protecting Cockpit password login
Don’t deactivate SELinux but resolve issues (link to cockpit SELinux page and description how to resolve on CLI (or link) )
Reduce the number of system users (If certain system users are required, move each (or all) to a lightweight system container, e.g. systemd-nspawn, or even a (semi-lightweight) Cloud Image VM)
Would be nice to offer some configurable Ansible scripts for those repetitive tasks (downloadable from server-wg home page)
links to existing script at github system roles und a guide how to use that script for this purpose

Specific System Administration Tasks

Cockpit

recommended documentation for specific types of installation / use case
how to secure access / login page (integration into fail2ban, access via ssh tunnel, access via VPN)

SELinux issues

How to fix

How to manage storage

Further topics of this kind to be added