LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Virtualization and Cloud
User Name
Password
Linux - Virtualization and Cloud This forum is for the discussion of all topics relating to Linux Virtualization and Linux Cloud platforms. Xen, KVM, OpenVZ, VirtualBox, VMware, Linux-VServer and all other Linux Virtualization platforms are welcome. OpenStack, CloudStack, ownCloud, Cloud Foundry, Eucalyptus, Nimbus, OpenNebula and all other Linux Cloud platforms are welcome. Note that questions relating solely to non-Linux OS's should be asked in the General forum.

Notices

Reply
 
Search this Thread
Old 12-30-2013, 01:41 AM   #1
praneethdamera
LQ Newbie
 
Registered: Dec 2013
Posts: 15

Rep: Reputation: Disabled
Smile how to make a hardened operating system for my VM.


Hi,

Myself Praneeth, i want to make a webserver for my project and i need to make it full secure so, i want to use the hardened operating system for my VM, so please tell me the procedure for making it also give me the softwares link.

I also want to know the best Operating System to use for this:
requirement:
1. OS must use min RAM.
2. OS must use min HDD place. (if used more also no problem)
3. OS should be fast.
4. OS must support PHP, Mysql, Java, FTP for upload of file.

I have tried with Live CD of Linux 11, Live CD of Ubuntu 10. but failed is it has to use any other software.

Please give me the softwares links also to download and make it.

your help will me a new life for me, because im stuck here for the past 1 1/2 year.

----
Praneeth.
 
Old 12-30-2013, 02:53 AM   #2
salasi
Senior Member
 
Registered: Jul 2007
Location: Directly above centre of the earth, UK
Distribution: SuSE, plus some hopping
Posts: 3,919

Rep: Reputation: 778Reputation: 778Reputation: 778Reputation: 778Reputation: 778Reputation: 778Reputation: 778
Quote:
Originally Posted by praneethdamera View Post

your help will me a new life for me, because im stuck here for the past 1 1/2 year.
So, you have been stuck for 18 months, trying to harden a Linux operating system and have made no progress?

The inference from your post is that you believe that you know how to harden an operating system if it were not a VM, but somehow the fact that it is a VM is a big obstacle for you. Is that right?

Quote:
Originally Posted by praneethdamera View Post

I also want to know the best Operating System to use for this:
requirement:
1. OS must use min RAM.
2. OS must use min HDD place. (if used more also no problem)
3. OS should be fast.
4. OS must support PHP, Mysql, Java, FTP for upload of file.
That's a list that has limited utility in the real world. In any secure server, you want to minimise the attack surface, so that implies not installing anything above the bare minimum (no GUI. for example, none of things that normally you might think of as 'nice to have luxuries' that make working more comfortable). If stripped down to this state, essentially all Linux systems will be pretty minimalistic, so that prevents RAM consumption, HDD space consumption and speed from being differentiator capabilities, because they will all be just about equally stripped.

I can't think of anything which might legitimately be considered as a candidate OS that cannot support PHP, Mysql or Java. FTP you'll have to configure, but that shouldn't be a problem for someone in this position.

However....
  • It isn't clear, but, indirectly, your comments suggest a 'fit and forget' mentality; this is wrong.
  • Specifically, there is a good question to be asked about support and support periods and you haven't asked it.
  • You haven't exposed any of your thinking, or your experience, on operating systems in general. Specifically, what is your level of experience with server operating systems (which are you comfortable with?), what have you selected for which role(s) and why have you made those choices?
  • You haven't made clear whether you are asking about guest or host OS (or both), and that's fairly fundamental
  • No questions about the virtualisation system, and that's a surprise - perhaps you have already solved that (but then, why isn't it a pre-requisite?)
  • Java - yuk! PHP is ugly, but probably necessary, but Java's history as a security problem is well documented. Now, there are things that can be done to keep on top of that up to a point, but currently it seems unclear whether you have any cognisance of the problem and the measures that you should be preparing to take.
  • You haven't mentioned networking or firewalling, so presumably you have the network fully architected, the machine is in a DMZ if appropriate, and you have the firewalling all mapped out. That, at least, would be progress!
  • You have not mentioned what you would normally do to harden a system.
  • You have not mentioned any access control above and beyond the minimum. What is your philosophy on that?

Something about the network environment and what the machine is supposed to do would be very helpful here.

I have to suspect that there are real issues that need to be solved with your approach, but more details are needed in order to be sure.
 
1 members found this post helpful.
Old 12-30-2013, 06:55 AM   #3
praneethdamera
LQ Newbie
 
Registered: Dec 2013
Posts: 15

Original Poster
Rep: Reputation: Disabled
Smile MySelf & My Experience

hi,

i have no experience on making VM's but i have worked as a support engineer for a product which used to run on a VM of linux & it was hardened. after leaving that job i thought of making a VM like that, but before that i searched for softwares to make a vm and made VM's for Windows using virtual pc and worked on it i was successfull in creating & using it (it was not hardened). after that i wanted to make a VM with linux, i used Vbox.

My Profession is WebDesigning, im an more than a beginer for a linux OS (ie Intermediate), on VM as i said before i have started few months ago ie 20 months and after that i used to give some time from my profession for this and never thought i could have ask this in form, now in my new job i was trying for some CGI code and got to your forum and registered and posted today.

I WANT A VM FOR MY WEBDESIGNING WITH LEAST SPACE AND HIGH SPEED.

As my PC is an Old one
ie :
Pentium 4
512MB Ram
80GB HDD


also i want to know if i use this VM Portable is there any problem,
as i saw VBox is also available in portable form so may i use this in portable way in a 8/16GB Flash Drive.
 
Old 12-30-2013, 10:26 AM   #4
jefro
Guru
 
Registered: Mar 2008
Posts: 12,073

Rep: Reputation: 1518Reputation: 1518Reputation: 1518Reputation: 1518Reputation: 1518Reputation: 1518Reputation: 1518Reputation: 1518Reputation: 1518Reputation: 1518Reputation: 1518
There are already hundreds of pre-made virtual machines with software installed. One phrase to seek is virtual appliance. Vmware and virtualbox has links to them. Places like Turnkey http://www.turnkeylinux.org/ offer good starts. See also Susestudio http://susestudio.com/ http://lifehacker.com/5370209/use-su...s-from-scratch offer great tools.

Another way is to build your specific linux to your needs. Gentoo and LFS linux from scratch offer build options.
 
Old 12-31-2013, 12:59 AM   #5
praneethdamera
LQ Newbie
 
Registered: Dec 2013
Posts: 15

Original Poster
Rep: Reputation: Disabled
Smile Thank you

Thank You very much,

i will download from them and try it,
 
Old 01-15-2014, 01:25 AM   #6
praneethdamera
LQ Newbie
 
Registered: Dec 2013
Posts: 15

Original Poster
Rep: Reputation: Disabled
im not able to start them it just gives me blank when i start, i need to use a OS that uses low memory. i think they need more memory that's why they are not starting...

can u please tell me a best performance VM making steps..

and its softwates links...


RAM <= 128MB
HDD <= 8GB

S/W needed :
just i want a webserver(PHP), a DB & a FTP Server to upload my files to server.

Help Me PlZzz.....

Last edited by praneethdamera; 01-15-2014 at 01:27 AM. Reason: i missed some info..
 
Old 01-15-2014, 02:30 PM   #7
Habitual
Senior Member
 
Registered: Jan 2011
Distribution: Undecided
Posts: 3,618
Blog Entries: 1

Rep: Reputation: Disabled
Quote:
Originally Posted by praneethdamera View Post
I WANT A VM FOR MY WEBDESIGNING WITH LEAST SPACE AND HIGH SPEED.

As my PC is an Old one
ie :
Pentium 4
512MB Ram
80GB HDD
Not enough RAM
 
Old 01-15-2014, 11:56 PM   #8
praneethdamera
LQ Newbie
 
Registered: Dec 2013
Posts: 15

Original Poster
Rep: Reputation: Disabled
Thanks for your reply, I have already used a VM of Fedora (version i dont remember) which was hardened and had only softwares
1. Apache Server
2. MySQL Server
3. Radius Server

for which i used SSH for upload and edit purpose

i gave it 128MB RAM but its size was 20GB which has only command line interaction.

this was when i worked for a company but now i want to make a similar VM for my Product also so that i can make it portable to my clients using it in a USB.

if you want to say for creation it is not enough then i will use any friend machine with what it wants becoz i have frnd using i7 & i5 systems with more RAM and HDD but after making it i want it to run on less RAM and for storage it should use less space as i want it in a Flash Drive.

also tell me which OS Version is best for having secure also with less space taking. if u have the link give it to me i will download it...


help me any information on this is valuable for me...

Last edited by praneethdamera; 01-15-2014 at 11:57 PM. Reason: updated few info
 
Old 01-17-2014, 03:22 AM   #10
ReaperX7
Senior Member
 
Registered: Jul 2011
Location: California
Distribution: LFS-7.6, Slackware 14.1, FreeBSD 10.1
Posts: 3,822
Blog Entries: 15

Rep: Reputation: 1181Reputation: 1181Reputation: 1181Reputation: 1181Reputation: 1181Reputation: 1181Reputation: 1181Reputation: 1181Reputation: 1181
As an alternative suggestion you should look into possibly Hardened Gentoo or OpenBSD which are developed as secure. The is also Hardened LFS as well though the project has not been updated for a while.

OpenBSD is about as secure as it gets and runs well on VMs.

Last edited by ReaperX7; 01-17-2014 at 03:25 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Why to PC manufacturers make you purchase Window's operating system? hei14 Linux - Newbie 19 12-18-2013 02:53 PM
LXer: 10 Things That Make Ubuntu The Best Alternative Operating System LXer Syndicated Linux News 2 05-20-2011 10:18 AM
How Do You Make A Simple Linux Operating System Jamie Kugelmann Linux - Newbie 19 10-05-2008 09:38 PM
Linux 2.6.20 how to make into an operating System theinfidel Linux - Newbie 11 08-09-2007 02:16 PM
hardened linux from scratch glibc build hardened-specs.sh problem behmjoe Linux From Scratch 2 09-04-2005 03:06 PM


All times are GMT -5. The time now is 12:52 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration