Objectifs

Disposer d'un espace de stockage sécurisé en RAID5.

 mdadm --create /dev/md0 --level=raid5 --raid-devices=4 /dev/sdb1 /dev/sdc1 /dev/sdd1 /dev/sde1
 

Surveiller la création du raid

 cat /proc/mdstat
 

Enfin ajouter les informations du raid dans la configuration:

 mdadm --examine --scan >> /etc/mdadm.conf

Fichier /etc/mdadm.conf:

DEVICE  /dev/sdb*
DEVICE  /dev/sdc*
DEVICE  /dev/sdd*
ARRAY   /dev/md0 devices=/dev/sdb1,/dev/sdc1,/dev/sdd1
ARRAY   /dev/md1 devices=/dev/sdb2,/dev/sdc2,/dev/sdd2
ARRAY   /dev/md2 devices=/dev/sdb3,/dev/sdc3,/dev/sdd3
MAILADDR root

 smbpasswd -a <utilisateur>

Dans /etc/samba/smb.conf, ajouter la section suivante:

        [stockage]
;       comment = Public Stuff
        path = /srv/stockage/1
        public = yes
        writable = yes
        printable = no
        write list = +dockers

Autoriser l'accès aux homedirs:

 setsebool -P samba_enable_home_dirs on
 

Pour autoriser l'accès à des repertoires system:

 setsebool -P samba_export_all_rw on

Fichier /etc/sysconfig/iptables:

# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT

# Pour Samba
# NetBIOS Name Service
-A INPUT -m state --state NEW -m udp -p udp --dport 137 -j ACCEPT 
# NetBIOS Datagram Service
-A INPUT -m state --state NEW -m udp -p udp --dport 138 -j ACCEPT
# NetBIOS Session Service
-A INPUT -m state --state NEW -m tcp -p tcp --dport 139 -j ACCEPT
# Microsoft Directory Service
-A INPUT -m state --state NEW -m tcp -p tcp --dport 445 -j ACCEPT

# Pour transmission
-A INPUT -m state --state NEW -m tcp -p tcp --dport 9091 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 51413 -j ACCEPT

-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT