World Under Control

$ mysql -u root -p
mysql> create database db_phpdb3;
mysql> grant all privileges on db_phpbb3.* to 'phpbb3_user'@'127.0.0.1' identified by '654123';
mysql> FLUSH PRIVILEGES;
mysql> EXIT

$ curl -O -J -L http://prdownloads.sourceforge.net/phpbb/phpbb-3.0.12.tar.bz2

$ tar jxvf phpbb-3.0.12.tar.bz2 -C ~/Sites
$ chmod 644 ~/Sites/phpbb/config.php
$ open http://127.0.0.1/~james/phpbb &

$ rm -rf ~/Sites/phpbb/install

$ curl -O -J -L https://www.phpbb.com/customise/db/download/id_91456
$ tar jxvf mandarin_chinese_simpliefied_script_1.0.3.tar.bz2
$ cd mandarin_chinese_simpliefied_script_1.0.3/mandarin_chinese(simpliefied_script)_1.0.3
$ cp -r * ~/Sites/phpbb/

$ sudo yum update yum

$ su -

# echo 'sys-apps/yum ~amd64' >> /etc/portage/package.keywords
# echo 'dev-python/sqlitecachec ~amd64' >> /etc/portage/package.keywords
# echo 'app-arch/rpm sqlite' >> /etc/portage/package.use
# emerge -avuDN sys-apps/yum app-arch/rpm dev-python/m2crypto

# apt-get install -t experimental yum rpm python-m2crypto

# fdisk /dev/sda

# mkswap /dev/sda1
# mke2fs -j /dev/sda2
# mke2fs -j /dev/sda3

# mkdir /mnt/centos
# mount /dev/sda2 /mnt/centos
# mkdir /mnt/centos/boot
# mount /dev/sda3 /mnt/centos/boot
# swapon /dev/sda1

# mkdir -p /mnt/centos/var/lib/rpm
# rpm --root /mnt/centos --initdb

# rpm -ivh --nodeps --root /mnt/centos http://vault.centos.org/6.4/os/x86_64/Packages/centos-release-6-3.el6.centos.x86_64.rpm

# echo %_install_langs en:zh:zh_CN:zh_CN.UTF-8 >> /mnt/centos/etc/rpm/macros.lang

# yum --installroot /mnt/centos install yum --nogpgcheck

# mv /mnt/centos/etc/yum.repos.d/CentOS-Base.repo /mnt/centos/etc/yum.repos.d/CentOS-Base.repo.backup 
# wget -O /mnt/centos/etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo 
# yum makecache

# wget http://vault.centos.org/6.4/os/x86_64/images/install.img
# yum install squashfs-tools
# unsquashfs -d /mnt/centos install.img

# cp -L /etc/resolv.conf /mnt/centos/etc/resolv.conf

# mount --bind /dev /mnt/centos/dev
# mount -t proc none /mnt/centos/proc
# mount -t sysfs none /mnt/centos/sys

# chroot /mnt/centos /bin/bash

# rpmdb --rebuilddb -vv

# sed -i 's@^root:x:@root::@' /etc/passwd

# yum install shadow-utils
# pwconv

# cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

# cat > /etc/fstab  << EOF
/dev/sda1     swap          swap       defaults           0 0
/dev/sda2     /             ext3       defaults           1 1
/dev/sda3     /boot         ext3       defaults           1 2
/dev/cdrom    /mnt/cdrom    iso9660    noauto,ro          1 1
tmpfs         /dev/shm      tmpfs      defaults           0 0
devpts        /dev/pts      devpts     gid=5,mode=620     0 0
sysfs         /sys          sysfs      defaults           0 0
proc          /proc         proc       defaults           0 0
EOF

# mkdir -p /mnt/cdrom

# blkid /dev/sda2
# blkid /dev/sda3

# yum install kernel

# cat > /etc/sysconfig/network << EOF
NETWORKING=yes
HOSTNAME=bootstrap
EOF

# echo '127.0.0.1 bootstrap' >> /etc/hosts

# cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF
DEVICE=eth0
HWADDR=00:00:00:00:01
ONBOOT=yes
BOOTPROTO=static
TYPE=Ethernet
IPADDR=10.10.19.234
NETMASK=255.255.254.0
GETEWAY=10.10.18.254
EOF

# yum install dhclient

# cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF
DEVICE=eth0        
ONBOOT=yes
BOOTPROTO=dhcp
EOF

# cat /etc/resolv.conf
nameserver 208.67.222.222
nameserver 208.67.220.220

# yum install kbd
# echo KEYTABLE="/lib/kbd/keymaps/i386/qwerty/us.map.gz" >> /etc/sysconfig/keyboard

# yum install terminus-fonts-console

# setfont /lib/kbd/consolefonts/ter-g16f.psf.gz

# echo SYSFONT="/lib/kbd/consolefonts/ter-g16f.psf.gz" >> /etc/sysconfig/i18n

# yum install rsyslog crontabs cronie cronie-anacron

# yum install grub

# cat > /boot/grub/grub.conf << EOF
timeout 5
default 0

# (0) CentOS
title CentOS 6.4
root (hd0,1)
kernel /vmlinuz-2.6.32-358.18.1.el6.x86_64 root=/dev/sda2 ro
initrd /initrd-2.6.32-358.18.1.el6.x86_64.img
EOF

# grub-install /dev/sda

# grub
> root (hd0,1)
> setup (hd0)
> quit

# exit
# cd /
# umount /mnt/centos/dev
# umount /mnt/centos/proc
# umount /mnt/centos/sys
# umount /mnt/centos/boot
# umount /mnt/centos
# reboot

login: root

# yum install passwd

# passwd
passwd: unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 is not authorized to change the password of root

# setenforce 0

# cat > /etc/selinux/config << EOF
SELINUX=disabled
SELINUXTYPE=targeted
EOF
# ln -s /etc/selinux/config /etc/sysconfig/selinux

# passwd

# yum install sudo

# sed -i 's|^# %wheel  ALL=(ALL:ALL) NOPASSWD: ALL|%wheel  ALL=(ALL:ALL) NOPASSWD: ALL|' /etc/sudoers

# adduser easior -a wheel

# passwd easior

# reboot

login: easior
password: 

$ sudo yum install nano man-pages openssh

$ sudo rpm -ivh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm

$ sudo rpm -ivh http://download1.rpmfusion.org/free/el/updates/6/i386/rpmfusion-free-release-6-1.noarch.rpm 
$ sudo rpm -ivh http://download1.rpmfusion.org/nonfree/el/updates/6/i386/rpmfusion-nonfree-release-6-1.noarch.rpm

$ sudo yum install yum-plugin-priorities

priority=N

$ cat /etc/yum.repos.d/CentOS-Base.repo
# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client.  You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the 
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
#baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-6
priority=1

#released updates 
[update]
name=CentOS-$releasever - Updates
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
#baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-6
priority=1

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
#baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-6
priority=1

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-6
priority=2

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
#baseurl=http://mirror.centos.org/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-6
priority=2

$ su -c 'echo Lang="zh_CN.UTF-8" >> /etc/sysconfig/i18n'
$ sudo yum install wqy-micro-fonts wqy-bitmap-fonts

$ sudo rpm -ivh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
$ sudo yum clean all
$ sudo yum install fbterm

$ sudo yum install man-pages-zh-CN
$ fbterm

$ sudo yum install @Development\ Tools

$ sudo yum install kernel-devel kernel-headers

$ sudo yum install rpmdevtools
$ rpmdev-setuptree

$ wget http://dl.fedoraproject.org/pub/fedora/linux/releases/19/Everything/source/SRPMS/i/ibus-fbterm-0.9.1-16.fc19.src.rpm
$ rpm -ivh /ibus-fbterm-0.9.1-16.fc19.src.rpm

$ cd  ~/rpmbuild/SPECS
$ nano -w ibus-fbterm.spec
$ sudo yum install yum-utils
$ sudo yum-builddep ibus-fbterm.spec
$ rpmbuild -ba ibus-fbterm.spec
$ cd ../RPMS/x86_64
$ sudo rpm -ivh ibus-fbterm.*.rpm

$ sudo yum install fbida fbida-fbgs

$ sudo yum install fbgrab

$ sudo yum install w3m w3m-img links2

$ sudo yum install finch irssi

$ sudo yum install gpm
$ sudo service gpm start
$ sudo chkconfig gpm on

$ sudo wget http://download.virtualbox.org/virtualbox/rpm/rhel/virtualbox.repo -O /etc/yum.repos.d/virtualbox.repo

$ sudo yum install VirtualBox-4.2

$ sudo service vboxdrv setup

$ sudo yum install yum-utils

$ sudo package-cleanup --orphans

$ sudo package-cleanup --leaves

$ sudo yum install rpmconf
$ sudo rpmconf -a

$ sudo yum update yum --releasever=20 --disablerepo=* --enablerepo=fedora --enablerepo=updates-testing --disableplugin=presto

$ sudo yum update yum --releasever=20 --disablerepo=* --enablerepo=fedora --enablerepo=updates-testing --nogpgcheck --disableplugin=presto

$ sudo rpm --import https://fedoraproject.org/static/246110C1.txt

$ sudo yum distro-sync --releasever=20 --disablerepo=* --enablerepo=fedora --enablerepo=updates-testing --nogpgcheck --disableplugin=presto

$ sudo yum update python-pexec --releasever=20 --disablerepo=* --enablerepo=fedora --enablerepo=updates-testing --nogpgcheck --disableplugin=presto

$ sudo yum distro-sync --releasever=20 --disablerepo=* --enablerepo=fedora --enablerepo=updates-testing --nogpgcheck --disableplugin=presto --skip-broken

$ sudo yum repolist

$ sudo yum-config-manager --disable livna

$ sudo yum update "Minimal Install"

$ sudo grub2-install /dev/sda
$ su -c 'grub2-mkconfig -o /boot/grub2/grub.cfg'

$ su
# cd /etc/rc.d/init.d; for f in *; do [ -x $f ] && /sbin/chkconfig $f resetpriorities; done

$ sudo rpmconf -a

$ sudo reboot

$ VBoxManage createvm --name "Kali Dev" --register

$ VBoxManage list ostypes

$ VBoxManage modifyvm "Kali Dev" --ostype Debian_64 --memory 1024 --vram 36 --audio coreaudio --audiocontroller ac97 --acpi on --boot1 dvd --nic1 nat

$ VBoxManage createhd --filename "Kali Dev.vdi" --size 8192 --variant Standard
$ VBoxManage storagectl "Kali Dev" --name "SATA" --add sata --controller IntelAHCI
$ VBoxManage storageattach "Kali Dev" --storagectl "SATA" --port 0 --device 0 --type hdd --medium "Kali Dev.vdi"

这三条命令分别为客户机 Kali Dev 创建好了一个大小为 8 G的动态硬盘、将类型为 IntelAHCI 的 SATA 控制器关联到 Kali Dev 上、再将 8 G 的动态硬盘关联到了 Kali Dev 客户机。至此，客户机 Kali Dev 创建完成，可通过下述方式查看它的所有参数设定

$ VBoxManage showvminfo "Kali Dev"

$ cd ~/Downloads
$ wget http://mirrors.163.com/fedora/releases/18/Live/x86_64/Fedora-18-x86_64-Live-Desktop.iso

$ VBoxManage storageattach "Kali Dev" --storagectl "SATA" --port 1 --device 0 --type dvddrive --medium ~/Downloads/Fedora-18-x86_64-Live-Desktop.iso

$ VBoxManage startvm "Kali Dev"

$ ping http://www.kali.org

$ su -

# fdisk -l
# fdisk /dev/sda

#!/bin/bash
VMDISK="/dev/sda"
fdisk ${VMDISK} &> /dev/null  <<EOF
n
p
1

+512M
t
2
82
n
p
2


w
EOF

# chmod +x fdisk_vm.sh
# ./fdisk_vm.sh

# mkswap /dev/sda1
# mke2fs -j /dev/sda2

# mkdir /mnt/kali
# mount /dev/sda2 /mnt/kali

# swapon /dev/sda1

# cd ~/
# wget http://http.kali.org/kali/pool/main/d/debootstrap/debootstrap_1.0.48+kali1_all.deb

# ar -xf debootstrap_1.0.48+kali1_all.deb && tar zxvpf data.tar.gz -C /

# yum install binutils

# debootstrap --arch amd64 sid /mnt/kali http://http.kali.org/kali

# cp -L /etc/resolv.conf /mnt/kali/etc/resolv.conf

# mount -t proc none /mnt/kali/proc
# mount -t sysfs none /mnt/kali/sys
# mount -o bind /dev /mnt/kali/dev

# chroot /mnt/kali /bin/bash

# cat << EOF > /etc/apt/sources.list
## Kali Official Repositories
deb http://http.kali.org/kali kali main non-free contrib
deb-src http://http.kali.org/kali kali main non-free contrib
## Kali proposed updates
deb http://http.kali.org/kali kali-proposed-updates main non-free contrib
deb-src http://http.kali.org/kali kali-proposed-updates main non-free contrib
## Security updates
deb http://security.kali.org/kali-security kali/updates main contrib non-free
deb-src http://security.kali.org/kali-security kali/updates main contrib non-free
EOF

# cat << EOF > /etc/apt/sources.list
## Kali Official Repositories
deb http://http.kali.org/kali kali-dev main non-free contrib
deb-src http://http.kali.org/kali kali-dev main non-free contrib
EOF

# cat << EOF > /etc/apt/sources.list
## Kali Official Repositories
deb http://http.kali.org/kali kali-bleeding-edge main non-free contrib
deb-src http://http.kali.org/kali kali-bleeding-edge main non-free contrib
EOF

# cat << EOF > /etc/apt/sources.list
## Kali Official Repositories
deb http://http.kali.org/kali kali-rolling main non-free contrib
deb-src http://http.kali.org/kali kali-rolling main non-free contrib
## Security updates
deb http://security.kali.org/kali-security kali-rolling/updates main contrib non-free
deb-src http://security.kali.org/kali-security kali-rolling/updates main contrib non-free
EOF

# echo "## Debian Offical Mirrors
deb http://mirrors.163.com/debian sid main non-free contrib
deb-src http://mirrors.163.com/debian sid main non-free contrib"
>> /etc/apt/sources.list

# cat > /etc/apt/apt.conf.d/01apt << EOF
APT::Default-Release "sid"; 
APT::Get::Show-Upgraded "true"; 
APT::Get::Purge "true"; 
APT::Get::Show-Versions "true"; 
APT::Cache::NamesOnly "true";
EOF

# apt-get update

# apt-get install netselect-apt
# netselect-apt

W: GPG error: http://http.kali.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key)

# apt-key del 16126D3A3E5C1192
# apt-get update
# apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 16126D3A3E5C1192

# apt-get clean            # Remove cached packages
# cd /var/lib/apt
# mv lists lists.old       # Backup mirror info
# mkdir -p lists/partial   # Recreate directory structure
# apt-get clean
# apt-get update           # Fetch mirror info

# apt-get install tzdata

# dpkg-reconfigure tzdata

# nano -w /etc/timezone
Asia/Shanghai

# rm /etc/localtime
# cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

UTC=no

# apt-get install locales

# dpkg-reconfigure locales

# nano -w /etc/locale.gen
en_US.UTF-8 UTF-8
zh_CN.UTF-8 UTF-8
zh_CN.GB18030 GB18030
zh_CN.GB2312 GB2312
zh_CN.GBK GBK

# locale-gen

# apt-get install keyboard-configuration

debconf 会自动提示用户设置键盘布局。如果以后想修改的话，可执行下述命令

# dpkg-reconfigure keyboard-configuration

# apt-cache search linux-image

# apt-get install linux-image-3.7-trunk-amd64

# apt-cache search linux-source
# apt-get install linux-source-3.7

# apt-get source linux-3.7
# tar jxf linux-source-3.7.tar.bz2 -C /usr/src/

# nano -w /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 192.168.159.62
network 192.168.0.0
netmask 255.255.255.0
broadcast 192.168.0.255
gateway 192.168.159.1

# nano -w /etc/network/interfaces
auto lo
iface lo inet loopback

auto wlan0
iface wlan0 inet static
address 192.168.159.62
network 192.168.0.0
netmask 255.255.255.0
broadcast 192.168.0.255
gateway 192.168.159.1
wpa-essid yourssid
wpa-psk yourpassword

# nano -w /etc/network/interfaces
auto lo
iface lo inet loopback

auto wlan0
iface wlan0 inet dhcp

# apt-get install iw wpasupplicant wireless-tools

# nano -w /etc/resolv.conf
## A simple example /etc/resolv.conf:
nameserver 10.1.1.36
nameserver 192.168.9.100

# echo "KALI" > /etc/hostname

# echo "127.0.0.1 KALI" >> /etc/hosts

# invoke-rc.d networking restart

# passwd

# apt-get install sudo
# nano -w /etc/sudoers

%sudo  ALL=(ALL:ALL) NOPASSWD: ALL

# adduser easior -a sudo
# passwd easior

# cat /etc/fstab
/dev/sda1   none    swap        sw                0 0
/dev/sda2   /       ext4        noatime           0 1
/dev/cdrom  /mnt/cdrom iso9660  noauto,ro 0 0
proc        /proc   proc        defaults          0 0

# apt-get install grub2
# grub2-install /dev/hda
# update-grub

# exit
# umount /mnt/kali/dev
# umount /mnt/kali/sys
# umount /mnt/kali/proc
# umount /mnt/kali
# swapoff
# reboot

$ VBoxManage storageattach "Kali Dev" --storagectl "SATA" --port 1 --device 0 --type dvddrive --medium none
$ VBoxManage closemedium dvd ~/Downloads/Fedora-18-x86_64-Live-Desktop.iso

login: easior
password: 

$ sudo apt-get install gnome-core kali-defaults kali-root-login desktop-base

$ sudo apt-get install gdm3

$ gnome-shell --replace

$ gsettings set org.gnome.desktop.session session-name gnome

$ gsettings set org.gnome.desktop.session session-name gnome-fallback

$ sudo apt-get install nautilus nautilus-open-terminal

$ sudo apt-get install alsa-utils gnome-media

$ sudo apt-get install network-manager network-manager-gnome

$ sudo apt-get install netspeed

$ sudo apt-get install file-roller

$ sudo apt-get remove --purge gnash

$ sudo apt-get install iceweasel iceweasel-l10n-zh-cn

$ sudo apt-get install flashplugin-nonfree
$ sudo update-flashplugin-nonfree --install

$ sudo apt-get install evolution

$ sudo apt-get install gdebi

$ sudo apt-get install synaptic

$ sudo apt-get install software-center

$ sudo apt-get install packagekit gnome-packagekit

$ sudo apt-get install acpi acpid hibernate cpufreqd hotkeys

$ sudo apt-get install hotplug usbutils discover

$ sudo apt-get install hdparm 

$ sudo apt-get install rcconf

$ sudo apt-get install gnome-tweak-tool

$ sudo apt-get install tff-wqy-microhei tff-wqy-zenhei fonts-liberations ttf-mscorefonts-installer

$ mkdir -p ~/.fonts/truetype

$ sudo mkdir -p /usr/local/share/fonts/truetype

$ cp sim*.tt* ~/.fonts/truetype/

$ sudo apt-get install xfonts-utils
$ cd ~/.fonts/truetype/
$ mkfontscale
$ mkfontsdir

$ sudo nano -w /etc/X11/Xorg.conf.d/10-fonts.conf
FontPath "/usr/share/fonts/truetype/"
FontPath "~/.fonts/truetype/"

$ fc-cache -v -f

$ su 
# cat << EOF > /etc/default/locale
LC_ALL="zh_CN.UTF-8"
LANG="zh_CN.UTF-8"
EOF
$ su easior

export LANG=zh_CN.GB18030
export G_FILENAME_ENCODING=@GB18030
export LC_ALL=zh_CN.GB18030
export G_BROKEN_FILENAMES=1

$ sudo apt-get install manpages-zh

$ sudo apt-get install convmv iconv easytag

$ sudo apt-get install ibus ibus-rime

$ ibus-setup

$ sudo apt-get install build-essential gcc-4.8-multilib gcc-4.8-locales gcc-4.8-doc gdb automake libtool

$ sudo apt-get install python-dev python-vte python-appindicator

$ sudo apt-get install libgtk2.0-dev libgtk-3.0-dev devhelp libgtk2.0-doc

$ sudo apte-get install git gitg bzr subversion

$ sudo apt-get install bzip2 zip unzip gzip p7zip unrar arj 

$ sudo apt-get install gnome-keyring seahorse pinentry-gtk2 keychain

$ sudo apt-get install keepassX

$ sudo apt-get install amule transmission transmission-cli ftp gftp wget gwget

$ sudo apt-get install openssh-client xtightvncviewer rdesktop

$ wget http://download.teamviewer.com/download/teamviewer_linux_x64.deb
$ sudo dpkg -i teamviewer_linux_x64.deb

$ sudo apt-get install xchat pan liferea

$ sudo dpkg --add-architecture i386
$ sudo apt-get update

$ wget http://skype.tom.com/download/linux/skype-debian_4.2.0.11-1_i386.deb
$ sudo dpkg -i skype-debian_4.2.0.11-1_i386.deb

$ sudo apt-get upgrade
$ sudo apt-get install -f skype-debian

$ sudo apt-get install pcmanx-gtk2 qterm

$ sudo apt-get install nano emacs gedit

$ sudo apt-get install bluefish

$ sudo apt-get install evince

$ su -c "echo 'deb http://www.deb-multimedia.org/ sid main non-free
        deb-src http://www.deb-multimedia.org/ sid main non-free' >> /etc/apt/sources.list"
$ sudo apt-get update

W: GPG error: http://www.deb-multimedia.org sid InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 07DC563D1F41B907

$ sudo apt-key adv --keyserver pgp.mit.edu --recv-keys 07DC563D1F41B907

$ sudo apt-get update

$ sudo apt-get install acroread-chfonts acroread acroread-plugins

$ wget http://wdl.cache.ijinshan.com/wps/download/Linux/unstable/wps-office_8.1.0.3724~b1p2_i386.deb

$ sudo dpkg --add-architecture i386
$ sudo apt-get update

$ sudo dpkg -i wps-office_8.1.0.3724~b1p2_i386.deb

$ sudo apt-get install stardict-langdao-ec-gb stardict-oxford-gb stardict-xdict-ec-gb stardict-xdict-ce-gb stardict-langdao-ce-gb sdcv

$ sudo apt-get install gimp imagemagick eog

$ sudo apt-get install xchm chmsee

$ sudo apt-get install audacious mplayer smplayer gnome-mplayer 

$ sudo apt-get install avidemux cinelerra  lives pitivi winff ffmpeg

$ sudo apt-get install audacity mhwaveedit mencoder

$ sudo apt-get install brasero

$ sudo apt-get install gparted

$ su -c "echo 'deb https://linux.dropbox.com/debian sid main
           deb-src https://linux.dropbox.com/debian sid main' >> /etc/apt/source.list"

$ sudo apt-get install apt-transport-https

$ wget https://linux.dropbox.com/fedora/rpm-public-key.asc
$ sudo apt-key add rpm-public-key.asc
$ rm rpm-public-key.asc

$ sudo apt-get update

$ sudo apt-get install dropbox

$ sudo  apt-get install python-gpgme

$ su -c " echo 'deb http://dl.google.com/linux/chrome/deb/ stable main
                deb http://dl.google.com/linux/earth/deb/ stable main
                deb http://dl.google.com/linux/musicmanager/deb/ stable main
                deb http://dl.google.com/linux/talkplugin/deb/ stable main
                deb http://dl.google.com/linux/mod-pagespeed/deb/ stable main' >> /etc/apt-source.list"

$ wget https://dl-ssl.google.com/linux/linux_signing_key.pub
$ sudo apt-key add linux_signing_key.pub
$ rm linux_signing_key.pub

$ sudo apt-get update

$ sudo apt-get install google-chrome google-earth google-musicmanage google-talkplugin

有关 Debian 更多的第三方仓库，请看 https://wiki.debian.org/UnofficialRepositories 的介绍。

General setup  --->
    [*] Initial RAM filesystem and RAM disk (initramfs/initrd) support
    (/usr/share/v86d/initramfs) Initramfs source file(s)
Device Drivers ->
    Input Device Support --->
        <*> Event Interface
    <*> Connector - unified userspace <-> kernelspace linker  --->
    Graphics support  --->
        [*] Support for frame buffer devices  --->
            [*]   Enable firmware EDID
            <*>   Userspace VESA VGA graphics support
        Console display driver support --->
            [*] VGA text console
            [*]   Enable Scrollback Buffer in System RAM
            (64)    Scrollback Buffer Size (in KB)
            <*> Framebuffer Console support
            -*-   Map the console to the primary display device
            [ ]   Framebuffer Console Rotation
            [*]   Support for the Framebuffer Console Decorations
            [ ] Select compiled-in fonts

$ lsmod | grep fb
fbcon vesafb vga16b

$ sudo modprobe fbcon vesafb vga16b

$ sudo nano -w /etc/modules
fbcon vesafb vga16b

$ sudo apt-get install hwinfo
$ hwinfo --framebuffer | grep Mode

vga=0x317

$ sudo apt-get install fbset

$ sudo apt-get install console-setup console-data

$ sudo apt-get install fbterm ibus-fbterm

$ sudo apt-get console-tools

$ sudo apt-get install lynx links2 w3m w3m-img 

$ sudo apt-get install finch irssi

$ sudo apt-get install fbcat

$ sudo apt-get install fbi

$ sudo apt-get install fbida-fbgs

J、在 Kali Linux 中开启 SELinux 与 iptables 防火墙

配置 SELinux，需要确认 Linux 内核与文件系统是否支持。目前包括 btrfs、ext2、ext3、ext4、jfs 与 xfs 在内的文件系统都是支持 SELinux。其次，凡是基于 Debian 内核的 Linux 系统都是具备了运行 SELinux 的能力。但是，如果内核是自行编译的话，请务必确认内核选项 CONFIG_AUDIT 与 CONFIG_SECURITY_SELINUX 已经开启。如果不然，请重新编译内核。一切就绪之后就可以开始配置 SELinux 了。 先安装 SELinux 的基本工具集以及默认策略：

$ sudo apt-get install selinux-basics selinux-policy-default auditd

$ sudo selinux-activate

$ sudo check-selinux-installation

$ audit2why -al

$ sudo setenforce 1

或者可以在 /etc/default/grub 中增加 enforcing=1 参数到内核命令行然后重启系统永久生效。

防火墙服务有很多，这里以最简单的方式提供，先安装软件

$ sudo apt-get install iptables

$ sudo sh -c 'cat > /etc/iptables.rules << EOF
*filter

# Allows all loopback (lo0) traffic and drop all traffic to 127/8 that doesn't use lo0
-A INPUT -i lo -j ACCEPT
-A INPUT ! -i lo -d 127.0.0.0/8 -j REJECT

# Accepts all established inbound connections
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

# Allows all outbound traffic
# You could modify this to only allow certain traffic
-A OUTPUT -j ACCEPT

# Allows HTTP and HTTPS connections from anywhere (the normal ports for websites)
-A INPUT -p tcp --dport 80 -j ACCEPT
-A INPUT -p tcp --dport 443 -j ACCEPT

# Allows SSH connections 
# The --dport number is the same as in /etc/ssh/sshd_config
-A INPUT -p tcp -m state --state NEW --dport 22 -j ACCEPT

# Now you should read up on iptables rules and consider whether ssh access 
# for everyone is really desired. Most likely you will only allow access from certain IPs.

# Allow ping
#  note that blocking other types of icmp packets is considered a bad idea by some
#  remove -m icmp --icmp-type 8 from this line to allow all kinds of icmp:
#  https://security.stackexchange.com/questions/22711
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT

# log iptables denied calls (access via 'dmesg' command)
-A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7

# Reject all other inbound - default deny unless explicitly allowed policy:
-A INPUT -j REJECT
-A FORWARD -j REJECT

COMMIT
EOF'

$ sudo iptables-restore < /etc/iptables.rules
$ sudo iptables -L
$ netstat -nat

$ sudo sh -c 'cat > /etc/network/if-pre-up.d/iptables << EOF
#!/bin/bash

iptables-restore < /etc/iptables.rules
EOF'

防火墙服务配置完成。

K、最后，Kali Linux/Debian 的日常维护工作：

$ sudo apt-get update
$ sudo apt-get upgrade
$ sudo apt-get dist-upgrade

$ sudo yum install cgit

$ sudo nano -w /etc/httpd/conf.d/cgit.conf
#
# cgit configuration for apache
#

ScriptAlias /cgit /var/www/cgi-bin/cgit
Alias /cgit-data /usr/share/cgit/

<Directory "/usr/share/cgit/">
   AllowOverride None
   Options None
  <IfModule mod_authz_core.c>
       # Apache 2.4
       Require all granted
   </IfModule>
   <IfModule !mod_authz_core.c>
       # Apache 2.2
       Order allow,deny
       Allow from all
   </IfModule>
</Directory>

<Directory "/var/www/cgi-bin"> 
  AllowOverride None 
  Options ExecCGI FollowSymlinks
  <IfModule mod_authz_core.c>
       # Apache 2.4
       Require all granted
   </IfModule>
   <IfModule !mod_authz_core.c>
       # Apache 2.2
       Order allow,deny
       Allow from all
   </IfModule>
</Directory>

$ sudo nano -w /etc/cgitrc

# cgit config

css=/cgit/cgit.css
logo=/cgit/cgit.png

# if you don't want that webcrawler (like google) index your site
robots=noindex, nofollow

$ sudo service httpd restart

$ sudo nano -w /etc/cgitrc

#
# List of repositories.
# This list could be kept in a different file (e.g. '/etc/cgitrepos')
# and included like this:
#   include=/etc/cgitrepos

#repo.url=foo
#repo.path=/var/lib/git/foo.git
#repo.desc=the master foo repository
#repo.owner=fooman@example.com
#repo.readme=info/web/about.html

repo.url=MyRepo
repo.path=/var/lib/git/MyRepo.git
repo.desc=This is my git repository

$ sudo nano -w /var/lib/gitolite/.gitolite.rc

$ sudo find /path/to/the/repository/ -type d -exec chmod og+rx {} \;
$ sudo find /path/to/the/repository/ -type f -exec chmod og+r {} \;

$ sudo nano -w /etc/cgitrc

#
# information related to gitolite 
#

enable-git-config=1
enable-gitweb-owner=1
remove-suffix=1
project-list=/var/lib/gitolite/projects.list
scan-path=/var/lib/gitolite/repositories

$ sudo yum install highlight

$ sudo yum install gitolite

$ cat /etc/passwd | grep -i gitolite
gitolite:x:976:971:git repository hosting:/var/lib/gitolite:/bin/sh

$ cp ~/.ssh/id_rsa.pub /tmp/james.pub

$ chmod a+r /tmp/james.pub

$ systemctl status sshd

如果没有运行的话，请执行下述命令行，至于 SSH 端口之类的问题就不做赘述了：

$ sudo systemctl start sshd
$ sudo systemctl enable sshd

$ sudo -u gitolite -H gl-setup /tmp/james.pub

$ sudo ls /var/lib/gitolite/repositories
gitolite-admin.git  testing.git

$ cd
$ git clone gitolite@serverIP:gitolite-admin.git
$ cd gitolite-admin
$ cat conf/gitolite.conf
repo    gitolite-admin
        RW+     =   james

repo    testing
        RW+     =   @all

@testings testing james/testing
repo @testings

repo james/.+

repo james/.+$

perms [regex ...] = user1 [user2 ...]

@mainstream master developing testing

@myteam james alice

@admin james
@myteam james alice
@test alice

@testings james/testing alice/testing

@mainstream master developing

repo    james/.+$
        C                           =   @admin
        R       @mainstream         =   @test
        -                           =   bob
        RW                          =   @myteam bob

repo    testing @testings
        RW+                         =   @admin
        RW      master              =   bob
        RW      developing$         =   alice
        -                           =   bob
        RW      tmp/                =   @all
        RW      refs/tags/v[0-9]    =   alice

$ cd ~/gitolite-admin
$ cp /path/to/alice.pub keydir/
$ cp /path/to/bob.pub keydir/
$ nano -w conf/gitolite.conf
@admin james
@myteam james alice

repo    gitolite-admin
        RW+     =   @admin

repo    testing
        RW+     =   @all

repo    myproj
        RW+     =   @myteam
        RW+CD   =   @admin
        R       =   bob
$ git add conf/gitolite.conf keydir/alice.pub keydir/bob.pub
$ git commit -m 'new user and repo created.'
$ git push origin master

$ mkdir -p ~/myproj
$ cd ~/myproj
$ git init
$ echo "hello, Gitolite!" >> hello.txt
$ git add hello.txt
$ git commit -m 'initial commit.'
$ git remote add origin gitolite@serverIP:myproj.git
$ git push origin master

$ cd ~
$ git clone gitolite@serverIP:myproj.git
$ cd myproj
$ echo "hi, I'm Alice." >> hello.txt
$ git add hello.txt
$ git commit  -m 'say hello to Git Server."
$ git push origin master

再来让 Bob 试试 GIT 服务器的情况:

$ cd ~
$ git clone gitolite@serverIP:gitolite-admin.git

正常情况，Bob 无法克隆该仓库；

$ git clone gitolite@serverIP:testing.git
$ cd testing
$ echo 1 > index.txt
$ git add index.txt
$ git commit -m 'write permission for testing repo.'
$ git push origin master

这表明 Bob 拥有 testing.git 的读写权限；再来看

$ cd
$ git clone gitolite@serverIP:myproj.git
$ myproj
$ echo "hello, I'm Bob." >> hello.txt
$ git add hello.txt
$ git commit -m 'say hello to Gitolite.'
$ git push origin master

这表明 Bob 只能读取 myproj 但没有写权限。这几个操作表明 Gitolite 比较完美的控制了用户操作 GIT 服务器的权限。

$ sudo yum install highlight gitweb

$ rpm -qc gitweb
/etc/gitweb.conf
/etc/httpd/conf.d/git.conf

$ sudo nano -w /etc/gitweb.conf

our $projectroot="/var/lib/gitolite/repositories";
our $projects_list="/var/lib/gitolite/projects.list";

# Add highlighting at the end 
$feature{'highlight'}{'default'}= [1];

$ sudo usermod -a -G gitolite apache
$ sudo chmod g+r /var/lib/gitolite/projects.list
$ sudo chmod -R g+rx /var/lib/gitolite/repositories

$ sudo nano -w /var/lib/gitolite/.gitolite.rc

#$REPO_UMASK = 0077; # gets you 'rwx------'
#$REPO_UMASK = 0027; # gets you 'rwxr-x---'
$REPO_UMASK = 0022; # gets you 'rwxr-xr-x'

$ sudo service httpd restart

$ cd
$ cd gitolite-admin
$ nano -w conf/gitolite.conf
repo    gitolite-admin
        RW+     =   james

repo    testing
        testing "James" =   "Git repository for testing"
        RW+     =   @all
        R       =   gitweb
$ git add conf/gitolite.conf
$ git commit -m 'gitweb support for Gitolite.'
$ git push origin master

很明显，'R = gitweb' 这一行告诉 Gitolite 版本库 testing.git 启用 gitweb，这样 Gitolite 就会把 testing.git 写入 projects.list 文件；而 'testing "James" = "git repository for testing"' 这一行则是为了在网页中显示 testing 仓库的额外信息，也即仓库的创建者以及仓库的概述。其他版本库启用 gitweb 的设置完全类同，这里就不一一修改了。实际上，版本库的信息的设定也通过如下的命令来完成：

repo    testing
        config gitweb.owner         =   some person's name
        config gitweb.description   =   some description
        config gitweb.category      =   some category 

$ sudo yum install git-daemon

$ mv /usr/lib/systemd/system/git.service /usr/lib/systemd/system/git@.service

$ cat /usr/lib/systemd/system/git@.service
[Unit]
Description=Git Repositories Server Daemon
Documentation=man:git-daemon(1)
Wants=git.socket

[Service]
User=nobody
ExecStart=-/usr/libexec/git-core/git-daemon --base-path=/var/lib/gitolite/repositories --export-all --user-path=public_git --syslog --inetd --verbose
StandardInput=socket

$ ls -ald /var/lib/gitolite
drwxr-xr-- 5 gitolite gitolite 4096 Jul 29 22:31 /var/lib/gitolite

$ sudo usermod -a -G gitolite nobody
$ sudo chmod g+r -R /var/lib/gitolite/repositories

$ sudo systemctl start git.socket
$ sudo systemctl enable git.socket

$ netstat -nat | grep 9418

$ nano -w /etc/sysconfig/iptables

$ cd 
$ cd gitolite-admin
$ nano -w conf/gitolite.conf
repo    gitolite-admin
        RW+     =   james

repo    testing
        RW+     =   @all
        R       =   daemon
$ git add conf/gitolite.conf
$ git commit -m 'git daemon support for Gitolite.'
$ git push origin master

'R=daemon' 这一行就是告诉 Gitolite 为 git-daemon 生成 git-daemon-export-ok 文件。

好了，现在让我们做简单的测试：

$ git clone git://serverIP/testing.git