Disposer d'un espace de stockage sécurisé en RAID5.
mdadm --create /dev/md0 --level=raid5 --raid-devices=4 /dev/sdb1 /dev/sdc1 /dev/sdd1 /dev/sde1
Surveiller la création du raid
cat /proc/mdstat
Enfin ajouter les informations du raid dans la configuration:
mdadm --examine --scan >> /etc/mdadm.conf
Fichier /etc/mdadm.conf:
DEVICE /dev/sdb* DEVICE /dev/sdc* DEVICE /dev/sdd* ARRAY /dev/md0 devices=/dev/sdb1,/dev/sdc1,/dev/sdd1 ARRAY /dev/md1 devices=/dev/sdb2,/dev/sdc2,/dev/sdd2 ARRAY /dev/md2 devices=/dev/sdb3,/dev/sdc3,/dev/sdd3 MAILADDR root
smbpasswd -a <utilisateur>
Dans /etc/samba/smb.conf, ajouter la section suivante:
[stockage]
; comment = Public Stuff
path = /srv/stockage/1
public = yes
writable = yes
printable = no
write list = +dockers
Autoriser l'accès aux homedirs:
setsebool -P samba_enable_home_dirs on
Pour autoriser l'accès à des repertoires system:
setsebool -P samba_export_all_rw on
Fichier /etc/sysconfig/iptables:
# Firewall configuration written by system-config-firewall # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT # Pour Samba # NetBIOS Name Service -A INPUT -m state --state NEW -m udp -p udp --dport 137 -j ACCEPT # NetBIOS Datagram Service -A INPUT -m state --state NEW -m udp -p udp --dport 138 -j ACCEPT # NetBIOS Session Service -A INPUT -m state --state NEW -m tcp -p tcp --dport 139 -j ACCEPT # Microsoft Directory Service -A INPUT -m state --state NEW -m tcp -p tcp --dport 445 -j ACCEPT # Pour transmission -A INPUT -m state --state NEW -m tcp -p tcp --dport 9091 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 51413 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT