{"id":12899,"date":"2019-03-29T01:51:29","date_gmt":"2019-03-29T01:51:29","guid":{"rendered":"http:\/\/www.appservgrid.com\/paw92\/?p=12899"},"modified":"2019-03-29T01:51:29","modified_gmt":"2019-03-29T01:51:29","slug":"installation-of-ubuntu-16-04-server-edition-and-initial-ubuntu-server-setup","status":"publish","type":"post","link":"https:\/\/www.appservgrid.com\/paw92\/index.php\/2019\/03\/29\/installation-of-ubuntu-16-04-server-edition-and-initial-ubuntu-server-setup\/","title":{"rendered":"Installation of Ubuntu 16.04 Server Edition and Initial Ubuntu Server Setup"},"content":{"rendered":"

Ubuntu Server 16.04<\/strong>, also named\u00a0Xenial Xerus<\/strong>, has been released by Canonical and it\u2019s now ready for installation.<\/p>\n

The details about this new LTS version can be found on the previous article:\u00a0How to upgrade Ubuntu 15.10 to 16.04<\/a>.<\/p>\n

This topic will guide you on how you can install\u00a0Ubuntu 16.04 Server Edition<\/strong>\u00a0with\u00a0Long Time Support<\/strong>\u00a0on your machine.<\/p>\n

If you\u2019re looking for Desktop Edition, read our previous article:\u00a0Installation of Ubuntu 16.04 Desktop<\/a><\/p>\n

Requirements<\/h4>\n
    \n
  1. Ubuntu 16.04 Server ISO Image<\/a><\/li>\n<\/ol>\n

    Install Ubuntu 16.04 Server Edition<\/h3>\n

    1.<\/strong>\u00a0On the first step visit the above link and download the latest version of\u00a0Ubuntu Server ISO<\/strong>\u00a0image on your computer.<\/p>\n

    Once the image download completes, burn it to a CD or create a bootable USB disk using Unbootin (for BIOS machines) or\u00a0Rufus<\/strong>\u00a0(for\u00a0UEFI<\/strong>\u00a0machines).<\/p>\n

    2.<\/strong>\u00a0Place the bootable media intro the appropriate drive, start-up the machine and instruct the\u00a0BIOS\/UEFI<\/strong>\u00a0by pressing a special function key (F2<\/strong>,\u00a0F11<\/strong>,\u00a0F12<\/strong>) to boot-up from the inserted USB\/CD drive.<\/p>\n

    In a few seconds you will be presented with the first screen of Ubuntu installer. Select your language to perform the installation and hit\u00a0Enter<\/strong>\u00a0key to move to the next screen.<\/p>\n

    \n

    \"Choose<\/a><\/p>\n

    Choose Ubuntu 16.04 Server Installation Language<\/p>\n<\/div>\n

    3.<\/strong>\u00a0Next, select the first option,\u00a0Install Ubuntu Server<\/strong>\u00a0and press\u00a0Enter<\/strong>\u00a0key to continue.<\/p>\n

    \n

    \"Install<\/a><\/p>\n

    Install Ubuntu 16.04 Server<\/p>\n<\/div>\n

    4.<\/strong>\u00a0Select the language you with to install the system and press\u00a0Enter<\/strong>\u00a0again to continue further.<\/p>\n

    \n

    \"Select<\/a><\/p>\n

    Select Language for Ubuntu 16.04 Server<\/p>\n<\/div>\n

    5.<\/strong>\u00a0On the next series of screen choose your physical location from the presented list. If your location is different than the ones offered on the first screen, select other and hit\u00a0Enter<\/strong>\u00a0key, then select the location based on your continent and country. This location will be also used by the timezone system variable. Use the below screenshots as a guide.<\/p>\n

    \n

    \"Choose<\/a><\/p>\n

    Choose Location for Ubuntu 16.04 Server<\/p>\n<\/div>\n

    \n

    \"Select<\/a><\/p>\n

    Select Country Region<\/p>\n<\/div>\n

    \n

    \"Select<\/a><\/p>\n

    Select Area Location<\/p>\n<\/div>\n

    6.<\/strong>\u00a0Assign the locales and keyboard settings for your system as illustrated below and hit\u00a0Enter<\/strong>\u00a0to continue the installation setup.<\/p>\n

    \n

    \"Configure<\/a><\/p>\n

    Configure Locales<\/p>\n<\/div>\n

    \n

    \"Configure<\/a><\/p>\n

    Configure Keyboard Layout<\/p>\n<\/div>\n

    7.<\/strong>\u00a0The installer will load a series of additional components required for the next steps and will automatically configure your network settings in case you have a DHCP server on the LAN.<\/p>\n

    Because this installation is intended for a server it\u2019s a good idea to\u00a0setup a static IP address<\/a>\u00a0for your network interface.<\/p>\n

    \n

    To do this you can interrupt the automatic network configuration process by pressing on\u00a0Cancel<\/strong>\u00a0or once the installer reaches hostname phase you can hit on\u00a0Go Back<\/strong>\u00a0and choose to\u00a0Configure network manually<\/strong>.<\/p>\n

    \n

    \"Set<\/a><\/p>\n

    Set Ubuntu 16.04 Hostname<\/p>\n<\/div>\n

    \n

    \"Configure<\/a><\/p>\n

    Configure Network Manually<\/p>\n<\/div>\n

    8.<\/strong>\u00a0Enter your network settings accordingly (IP Address, netmask, gateway and at least two DNS nameservers) as illustrated on the below images.<\/p>\n

    \n

    \"Set<\/a><\/p>\n

    Set Static IP Address on Ubuntu 16.04<\/p>\n<\/div>\n

    \n

    \"Configure<\/a><\/p>\n

    Configure Network Mask for Ubuntu 16.04<\/p>\n<\/div>\n

    \n

    \"Configure<\/a><\/p>\n

    Configure Network Gateway for Ubuntu 16.04<\/p>\n<\/div>\n

    \n

    \"Configure<\/a><\/p>\n

    Configure Network DNS on Ubuntu 16.04<\/p>\n<\/div>\n

    9.<\/strong>\u00a0On the next step setup a descriptive hostname for your machine and a domain (not necessary required) and hit on\u00a0Continue<\/strong>\u00a0to move to the next screen. This step concludes the network settings.<\/p>\n

    \n

    \"Set<\/a><\/p>\n

    Set Ubuntu 16.04 Server Hostname<\/p>\n<\/div>\n

    \n

    \"Set<\/a><\/p>\n

    Set Ubuntu 16.04 Domain Name<\/p>\n

    10.<\/strong>\u00a0On this step the installer prompts you to setup a username and a password for your system. This username will be granted by the system with\u00a0sudo<\/strong>\u00a0powers, so, technically, this user will be the supreme administrator next to root account (which is disabled by default).<\/p>\n

    Thus, choose an inspired username, maybe hard to guess for security reasons, with a strong password and hit on\u00a0Continue<\/strong>. Choose not to encrypt your home directory and press\u00a0Enter<\/strong>\u00a0to continue further.<\/p>\n

    \n

    \"Setup<\/a><\/p>\n

    Setup User and Password<\/p>\n<\/div>\n

    11.<\/strong>\u00a0Next, the installer will automatically set your clock based on the physical location configured earlier. In case the location is correctly chosen hit on\u00a0Yes<\/strong>\u00a0to continue to disk partition layout.<\/p>\n

    \n

    \"Configure<\/a><\/p>\n

    Configure System Clock<\/p>\n<\/div>\n

    12.<\/strong>\u00a0On the next step you can choose the method that will be used to slice up your disk. For instance, if you need to create custom partition scheme (such as\u00a0\/home<\/strong>,\u00a0\/var<\/strong>,\u00a0\/boot<\/strong>\u00a0etc) choose Manual method.<\/p>\n

    For a general purpose server you can stick to\u00a0Guided with LVM<\/strong>\u00a0method as illustrated below, which automatically creates the partitions on your behalf.<\/p>\n

    \n

    \"Select<\/a><\/p>\n

    Select Partition Method<\/p>\n<\/div>\n

    13.<\/strong>\u00a0Next, select the disk that will be used by the installer to create partitions and press\u00a0Enter<\/strong>\u00a0key.<\/p>\n

    \n

    \"Select<\/a><\/p>\n

    Select Disk Partition<\/p>\n<\/div>\n

    14.<\/strong>\u00a0Answer with\u00a0Yes<\/strong>\u00a0at the next screen in order to commit changes to disk with LVM scheme and hit on\u00a0Continue<\/strong>\u00a0to use the entire disk space for guided partitions.<\/p>\n

    \n

    \"Add<\/a><\/p>\n

    Add Disk Partition Size<\/p>\n<\/div>\n

    \n

    \"Confirm<\/a><\/p>\n

    Confirm Disk Partition Changes<\/p>\n<\/div>\n

    15.<\/strong>\u00a0Finally, approve for the last time the changes to be written to disk by pressing on\u00a0Yes<\/strong>\u00a0and the installation will now begin. From this step on all the changes will be committed to disk.<\/p>\n

    \n

    \"Confirm<\/a><\/p>\n

    Confirm Disk Partition Changes<\/p>\n<\/div>\n

    \n

    \"Installing<\/a><\/p>\n

    Installing Ubuntu 16.04 Server<\/p>\n<\/div>\n

    16.<\/strong>\u00a0In case your system is behind a proxy or a firewall use the next screen to bypass the network restrictions, otherwise just leave it black and hit on\u00a0Continue<\/strong>.<\/p>\n

    \n

    \"Configure<\/a><\/p>\n

    Configure System Package Manager<\/p>\n<\/div>\n

    17.<\/strong>\u00a0Next, the installer will configure\u00a0apt<\/strong>\u00a0repositories and will install the selected software. After it finishes the installation tasks a new screen will appear which will ask you how to manage the upgrade process. Select\u00a0No<\/strong>automatic updates for now (you will manually select what updates are necessary) and hit\u00a0Enter<\/strong>\u00a0key to continue.<\/p>\n

    \n

    \"Manage<\/a><\/p>\n

    Manage Ubuntu 16.04 Upgrades<\/p>\n<\/div>\n

    18.<\/strong>\u00a0On the next step you will be asked to select what software to install. Select only standard system utilities and\u00a0OpenSSH<\/strong>\u00a0server (if you require remote access) by pressing the spacebar key and hit on\u00a0Continue<\/strong>.<\/p>\n

    \n

    \"System<\/a><\/p>\n

    System Software Selection<\/p>\n<\/div>\n

    19.<\/strong>\u00a0Once the installer finishes installing the software, a new screen will prompt you whether to install the\u00a0Grub<\/strong>boot loader to hard disk\u00a0MBR<\/strong>\u00a0(first\u00a0512<\/strong>\u00a0byte sector). Obviously without the GRUB you can\u2019t boot up your system after restart, so hit on\u00a0Yes<\/strong>\u00a0to continue with the installation.<\/p>\n

    \n

    \"Install<\/a><\/p>\n

    Install Grub Boot Loader<\/p>\n<\/div>\n

    20.<\/strong>\u00a0Finally, after the boot loader is written to\u00a0Hard Disk MBR<\/strong>, the installation process finishes.\u00a0Hit<\/strong>\u00a0on Continue to reboot the machine and remove the installation media.<\/p>\n

    \n

    \"Finish<\/a><\/p>\n

    Finish Ubuntu 16.04 Server Installation<\/p>\n<\/div>\n

    21.<\/strong>\u00a0After\u00a0reboot<\/strong>, login to your system console using the credentials configured during the installation process and you\u2019re good to go on production with your server.<\/p>\n

    \n

    \"Ubuntu<\/a><\/p>\n

    Ubuntu 16.04 Server Login Prompt<\/p>\n<\/div>\n

    That\u2019s all! Keep in mind that this version of Ubuntu has official maintenance support from Canonical until\u00a02021<\/strong>for hardware, bugs, software and security updates.<\/p>\n<\/div>\n<\/div>\n

    Initial Ubuntu Server Setup for Beginners<\/strong><\/h1>\n

    This tutorial will guide you on the first basic steps you need to configure on a new installed Ubuntu server in order to increase security and reliability for your server.<\/p>\n

    The configurations explained in this topic are almost the same for all Ubuntu server systems, regarding of the underlying OS platform, whether Ubuntu is installed on a bare-metal server, in a private virtual machine or a virtual machine spinned-out in a VPS public cloud.<\/p>\n

    Requirements<\/h4>\n
      \n
    1. Ubuntu Server Edition installation<\/a><\/li>\n<\/ol>\n

      Update and Upgrade Ubuntu System<\/h3>\n

      The first step you need to take care of in case of fresh installation of Ubuntu server or a new deployed Ubuntu VPS is to make sure the system and all system components, such as the kernel, the package manager and all other installed packages are up-to-date with the latest released versions and security patches.<\/p>\n

      To update Ubuntu server, to log in to server\u2019s console with an account with root privileges or directly as root and run the below commands in order to perform the update and upgrade process.<\/p>\n

      $ sudo apt update \r\n<\/pre>\n
      \n
      \"Update<\/a><\/p>\n
      Update Ubuntu Server<\/p>\n
      After running the update command, you will see the number of available packages for upgrading process and the command used for listing the packages upgrades.<\/p>\n
      $ sudo apt list --upgradable\r\n<\/pre>\n
      \n
      \"List<\/a><\/p>\n
      List Upgrade Ubuntu Packages<\/p>\n<\/div>\n
      After you\u2019ve consulted the list of packages available for upgrading, issue the below command to start system upgrade process.<\/p>\n
      $ sudo apt upgrade\r\n<\/pre>\n
      \n
      \"Upgrade<\/a><\/p>\n
      Upgrade Ubuntu Server Packages<\/p>\n<\/div>\n
      In order to remove all locally downloaded deb packages and all other\u00a0apt-get caches<\/a>, execute the below command.<\/p>\n
      $ sudo apt autoremove\r\n$ sudo apt clean\r\n<\/pre>\n
      \n
      \"Autoremove<\/a><\/p>\n
      Autoremove APT Packages and Cache<\/p>\n<\/div>\n
      Create New Account in Ubuntu<\/h3>\n
      By default, as a security measure, the root account is completely disabled in Ubuntu. In order to create a new account on the system, log in to the system with the account user with root privileges and create a new account with the below command.<\/p>\n
      This new account will be granted with root powers privileges via\u00a0sudo command<\/a>\u00a0and will be used to perform administrative tasks in the system. Make sure you setup a strong password to protect this account. Follow the\u00a0adduser<\/strong>\u00a0prompt to setup the user details and password.<\/p>\n
      $ sudo adduser ubuntu_user\r\n<\/pre>\n
      \n
      \"Create<\/a><\/p>\n
      Create User in Ubuntu<\/p>\n<\/div>\n
      If this account will be assigned to another system admin, you can force the user to change its password at the first log in attempt by issuing the following command.<\/p>\n
      $ sudo chage -d0 ubuntu_user\r\n<\/pre>\n
      For now, the new added user cannot perform administrative tasks via sudo utility. To grant this new user account with administrative privileges you should add the user to \u201csudo<\/strong>\u201d system group by issuing the below command.<\/p>\n
      $ sudo usermod -a -G sudo ubuntu_user\r\n<\/pre>\n
      By default, all users belonging to the \u201csudo<\/strong>\u201d group are allowed to execute commands with root privileges via\u00a0sudo utility<\/a>. Sudo command must be used before writing the command needed for execution, as shown in the below example.<\/p>\n
      $ sudo apt install package_name\r\n<\/pre>\n
      Test if the new user has the root privileges granted, by logging in to the system and run the\u00a0apt update<\/strong>command prefixed with sudo.<\/p>\n
      $ su - ubuntu_user\r\n$ sudo apt update\r\n<\/pre>\n
      \n
      \"Verify<\/a><\/p>\n
      Verify New User<\/p>\n<\/div>\n
      Configure System Hostname in Ubuntu<\/h3>\n
      Usually, the machine hostname is set-up during the system installation process or when the VPS is created in the cloud. However, you should change the name of your machine in order to better reflect the destination of your server or to better describe its final purpose.<\/p>\n
      In a large company, machines are named after complex naming schemes in order to easily identify the machine in datacenter\u2019s racks. For instance, if your Ubuntu machine will operate a mail server, the name of the machine should reflect this fact and you can setup machine hostname as\u00a0mx01.mydomain.lan<\/strong>, for example.<\/p>\n
      To show details about your machine hostname run the following command.<\/p>\n
      $ hostnamectl\r\n<\/pre>\n
      In order to change the name of your machine, issue\u00a0hostnamectl command<\/strong>\u00a0with the new name you will configure for your machine, as illustrated in the below excerpt.<\/p>\n
      $ sudo hostnamectl set-hostname tecmint\r\n<\/pre>\n
      Verify the new name of your system with one of the below commands.<\/p>\n
      $ hostname\r\n$ hostname -s\r\n$ cat \/etc\/hostname \r\n<\/pre>\n
      \n
      \"Set<\/a><\/p>\n
      Set Hostname in Ubuntu Server<\/p>\n<\/div>\n
      Setup SSH with Public Key Authentication in Ubuntu<\/h3>\n
      To increase system security degree of an Ubuntu server, you should set-up SSH public key authentication for an local account. In order to generate SSH Key Pair, the public and private key, with a specifying a key length, such as 2048 bits, execute the following command at your server console.<\/p>\n
      Make sure you\u2019re logged in to the system with the user you\u2019re setting up the SSH key.<\/p>\n
      $ su - ubuntu_user\r\n$ ssh-keygen -t RSA -b 2048\r\n<\/pre>\n
      \n
      \"Setup<\/a><\/p>\n
      Setup SSH Keys in Ubuntu<\/p>\n<\/div>\n
      While the key is generated, you will be prompted to add\u00a0passphrase<\/strong>\u00a0in order to secure the key. You can enter a strong passphrase or choose to leave the passphrase blank if you want to automate tasks via SSH server.<\/p>\n
      After the SSH key has been generated, you can copy the public key to a remote server by executing the below command. To install the public key to the remote SSH server you will need a remote user account with the proper permissions and credentials to log in to remote server.<\/p>\n
      $ ssh-copy-id remote_user@remote_server\r\n<\/pre>\n
      \n
      \"Copy<\/a><\/p>\n
      Copy SSH Key to Remote Server<\/p>\n<\/div>\n
      You should be able to automatically log in via SSH to the remote server using the public key authentication method. You won\u2019t need to add the remote user password while using SSH public key authentication.<\/p>\n
      After you\u2019ve logged in to the remote server, you can start to execute commands, such as\u00a0w command<\/strong>\u00a0to list ssh remote logged in users, as shown in the below screenshot.<\/p>\n
      Type exit in the console to close the remote SSH session.<\/p>\n
      $ ssh remote_user@remote_server\r\n$ w\r\n$ exit\r\n<\/pre>\n
      \n
      \"Verify<\/a><\/p>\n
      Verify SSH Passwordless Login<\/p>\n<\/div>\n
      To see the content of your public SSH key in order to manually install the key to a remote SSH server, issue the following command.<\/p>\n
      $ cat ~\/.ssh\/id_rsa.pub\r\n<\/pre>\n
      \n
      \"View<\/a><\/p>\n
      View SSH Key<\/p>\n<\/div>\n
      Secure SSH Server in Ubuntu<\/h3>\n
      In order to secure the SSH daemon you should change the default SSH port number from\u00a022<\/strong>\u00a0to a random port, higher than\u00a01024<\/strong>, and disallow remote SSH access to the root account via password or key, by opening SSH server main configuration file and make the following changes.<\/p>\n
      $ sudo vi \/etc\/ssh\/sshd_config\r\n<\/pre>\n
      First, search the commented line\u00a0#Port22<\/strong>\u00a0and add a new line underneath (replace the listening port number accordingly):<\/p>\n
      Port 2345\r\n<\/pre>\n
      Don\u2019t close the file, scroll down and search for the line\u00a0#PermitRootLogin yes<\/strong>, uncomment the line by removing the\u00a0#<\/strong>\u00a0sign (hashtag) from the beginning of the line and modify the line to look like shown in the below excerpt.<\/p>\n
      PermitRootLogin no\r\n<\/pre>\n
      \n
      \"Secure<\/a><\/p>\n
      Secure SSH Service<\/p>\n<\/div>\n
      Afterwards, restart the SSH server to apply the new settings and test the configuration by trying to log in from a remote machine to this server with the root account via the new port number. The access to root account via SSH should be restricted.<\/p>\n
      $ sudo systemctl restart sshd\r\n<\/pre>\n
      Also, run\u00a0netstat<\/a>\u00a0or\u00a0ss command<\/strong>\u00a0and filter the output via\u00a0grep<\/a>\u00a0in order to show the new listening port number for SSH server.<\/p>\n
      $ sudo ss -tlpn| grep ssh\r\n$ sudo netstat -tlpn| grep ssh\r\n<\/pre>\n
      \n
      \"Verify<\/a><\/p>\n
      Verify SSH Port<\/p>\n<\/div>\n
      There are situations where you might want to automatically\u00a0disconnect all remote SSH connections<\/a>\u00a0established into your server after a period of inactivity.<\/p>\n
      In order to enable this feature, execute the below command, which adds the\u00a0TMOUT<\/strong>\u00a0bash variable to your account\u00a0.bashrc<\/strong>\u00a0hidden file and forces every SSH connection made with the name of the user to be disconnected or dropped-out after 5 minutes of inactivity.<\/p>\n
      $ echo 'TMOUT=300' >> .bashrc\r\n<\/pre>\n
      Run\u00a0tail command<\/a>\u00a0to check if the variable has been correctly added at the end of\u00a0.bashrc<\/strong>\u00a0file. All subsequent SSH connections will be automatically closed after 5 minutes of inactivity from now on.<\/p>\n
      $ tail .bashrc\r\n<\/pre>\n
      In the below screenshot, the remote SSH session from drupal machine to Ubuntu server via ubuntu_user account has been timed out and auto-logout after 5 minutes.<\/p>\n
      \n
      \"Auto<\/a><\/p>\n
      Auto Disconnect SSH Sessions<\/p>\n<\/div>\n
      Configure Ubuntu Firewall UFW<\/h3>\n
      Every server needs a well configured firewall in order to secure the system at network level. Ubuntu server uses\u00a0UFW<\/strong>\u00a0application to manage the iptables rules on the server.<\/p>\n
      Check the status of UFW firewall application in Ubuntu by issuing the below commands.<\/p>\n
      $ sudo systemctl status ufw\r\n$ sudo ufw status\r\n<\/pre>\n
      \n
      \"Check<\/a><\/p>\n
      Check UFW Firewall Status<\/p>\n<\/div>\n
      Usually, the UFW firewall daemon is up and running in Ubuntu server, but the rules are not applied by default. Before enabling UFW firewall policy in you system, first you should add a new rule to allow SSH traffic to pass through firewall via the changed SSH port. The rule can be added by executing the below command.<\/p>\n
      $ sudo ufw allow 2345\/tcp\r\n<\/pre>\n
      After you\u2019ve allowed SSH traffic, you can enable and check UFW firewall application with the following commands.<\/p>\n
      $ sudo ufw enable\r\n$ sudo ufw status\r\n<\/pre>\n
      \n
      \"Open<\/a><\/p>\n
      Open SSH Port and Verify<\/p>\n<\/div>\n
      To add new firewall rules for other network services subsequently installed on your server, such as HTTP server, a mail server or other network services, use the below firewall commands examples as guide.<\/p>\n
      $ sudo ufw allow http  #allow http traffic\r\n$ sudo ufw allow proto tcp from any to any port 25,443  # allow https and smtp traffic\r\n<\/pre>\n
      To list all firewall rules run the below command.<\/p>\n
      $ sudo ufw status verbose\r\n<\/pre>\n
      \n
      \"Check<\/a><\/p>\n
      Check UFW Firewall Rules<\/p>\n<\/div>\n
      Set Ubuntu Server Time<\/h3>\n
      To control or query Ubuntu server clock and other related time settings, execute\u00a0timedatectl command<\/a>\u00a0with no argument.<\/p>\n
      In order to change your server\u2019s time zone settings, first execute\u00a0timedatectl command<\/strong>\u00a0with list-timezones argument to list all available time zones and, then, set the time zone of your system as shown in the below excerpt.<\/p>\n
      $ sudo timedatectl \r\n$ sudo timedatectl list-timezones \r\n$ sudo timedatectl set-timezone Europe\/Vienna\r\n<\/pre>\n
      \n
      \"Set<\/a><\/p>\n
      Set Ubuntu Timezone<\/p>\n<\/div>\n
      The new\u00a0systemd-timesyncd<\/strong>\u00a0systemd daemon client can be utilized in Ubuntu in order to provide an accurate time for your server across network and synchronize time with an upper time peer server.<\/p>\n
      To apply this new feature of Systemd, modify\u00a0systemd-timesyncd<\/strong>\u00a0daemon configuration file and add the closest geographically NTP servers to NTP statement line, as shown in the below file excerpt:<\/p>\n
      $ sudo nano \/etc\/systemd\/timesyncd.conf\r\n<\/pre>\n
      Add following configuration to\u00a0timesyncd.conf<\/strong>\u00a0file:<\/p>\n
      [Time]\r\nNTP=0.pool.ntp.org 1.pool.ntp.org\r\nFallbackNTP=ntp.ubuntu.com\r\n<\/pre>\n
      \n
      \"NTP<\/a><\/p>\n
      NTP Time Configuration<\/p>\n<\/div>\n
      To add your nearest geographically NTP servers, consult the NTP pool project server list at the following address:\u00a0http:\/\/www.pool.ntp.org\/en\/<\/a><\/p>\n
      Afterwards, restart the Systemd timesync daemon to reflect changes and check daemon status by running the below commands. After restart, the daemon will start to sync time with the new ntp server peer.<\/p>\n
      $ sudo systemctl restart systemd-timesyncd.service \r\n$ sudo systemctl status systemd-timesyncd.service\r\n<\/pre>\n
      \n
      \"Start<\/a><\/p>\n
      Start TimeSyncd Service<\/p>\n<\/div>\n
      Disable and Remove Unneeded Services in Ubuntu<\/h3>\n
      In order to get a list of all TCP and UDP network services up-and-running by default in your Ubuntu server, execute the\u00a0ss<\/strong>\u00a0or\u00a0netstat command<\/a>.<\/p>\n
      $ sudo netstat -tulpn\r\nOR\r\n$ sudo ss -tulpn\r\n<\/pre>\n
      \n
      \"List<\/a><\/p>\n
      List All Running Services<\/p>\n<\/div>\n
      Staring with\u00a0Ubuntu 16.10<\/strong>\u00a0release, the default DNS resolver is now controlled by\u00a0systemd-resolved<\/strong>\u00a0service, as revealed by the output of\u00a0netstat<\/strong>\u00a0or\u00a0ss commands<\/strong>.<\/p>\n
      You should also check the\u00a0systemd-resolved<\/strong>\u00a0service status by running the following command.<\/p>\n
      $ sudo systemctl status systemd-resolved.service\r\n<\/pre>\n
      \n
      \"Check<\/a><\/p>\n
      Check Systemd Resolved Status<\/p>\n<\/div>\n
      The\u00a0systemd-resolved<\/strong>\u00a0service binds on all enabled network interfaces and listens on ports\u00a053<\/strong>\u00a0and\u00a05355 TCP<\/strong>and\u00a0UDP<\/strong>.<\/p>\n
      Running\u00a0system-resolved<\/strong>\u00a0caching DNS daemon on a production server can be dangerous due to the numerous number of DDOS attacks performed by malicious hackers against unsecured DNS servers.<\/p>\n
      In order to stop and disable this service, execute the following commands.<\/p>\n
      $ sudo systemctl stop systemd-resolved\r\n$ sudo systemctl disable systemd-resolved\r\n<\/pre>\n
      \n
      \"Disable<\/a><\/p>\n
      Disable Systemd Resolved Service<\/p>\n<\/div>\n
      Verify if the service has been stopped and disabled by issuing\u00a0ss<\/strong>\u00a0or\u00a0netstat command<\/strong>. The systemd-resolved listening ports, 53 and 5355 TCP and UDP, should not be listed in netstat or ss command output, as illustrated in the below.<\/p>\n
      You should also reboot the machine in order to completely disable all systemd-resolved daemon services and restore the default\u00a0\/etc\/resolv.conf<\/strong>\u00a0file.<\/p>\n
      $ sudo ss -tulpn\r\n$ sudo netstat -tulpn\r\n$ sudo systemctl reboot\r\n<\/pre>\n
      \n
      \"Verify<\/a><\/p>\n
      Verify All Running Services<\/p>\n<\/div>\n
      Although, you\u2019ve disabled some unwanted networking services to run in your server, there are also other services installed and running in your system, such as\u00a0lxc<\/strong>\u00a0process and\u00a0snapd<\/strong>\u00a0service. These services can be easily detected via\u00a0ps<\/a>,\u00a0top<\/a>\u00a0or\u00a0pstree<\/strong>\u00a0commands.<\/p>\n
      $ sudo ps aux\r\n$ sudo top\r\n$ sudo pstree\r\n<\/pre>\n
      \n
      \"List<\/a><\/p>\n
      List Running Services in Tree Format<\/p>\n<\/div>\n
      In case you\u2019re not going to use LXC container virtualization in your server or start installing software packaged via Snap package manager, you should completely disable and remove these services, by issuing the below commands.<\/p>\n
      $ sudo apt autoremove --purge lxc-common lxcfs\r\n$ sudo apt autoremove --purge snapd\r\n<\/pre>\n
      That\u2019s all! Now, Ubuntu server is now prepared for installing additional software needed for custom network services or applications, such as installing and configuring a web server, a database server, a file share service or other specific applications.<\/p>\n
      Source<\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
      Ubuntu Server 16.04, also named\u00a0Xenial Xerus, has been released by Canonical and it\u2019s now ready for installation. The details about this new LTS version can be found on the previous article:\u00a0How to upgrade Ubuntu 15.10 to 16.04. This topic will guide you on how you can install\u00a0Ubuntu 16.04 Server Edition\u00a0with\u00a0Long Time Support\u00a0on your machine. If … <\/p>\n
      Continue reading “Installation of Ubuntu 16.04 Server Edition and Initial Ubuntu Server Setup”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-12899","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/12899","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/comments?post=12899"}],"version-history":[{"count":1,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/12899\/revisions"}],"predecessor-version":[{"id":12900,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/12899\/revisions\/12900"}],"wp:attachment":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/media?parent=12899"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/categories?post=12899"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/tags?post=12899"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}