1. Home
  2. Cloud
  3. How to set up your Fedora 28 x64 server

How to set up your Fedora 28 x64 server

About Fedora

Developed on a six-monthly release cycle, Fedora is an open-source, widely-used linux operating system that is purposed as a downstream breeding ground and test center of code ideas to fuel Red Hat Linux Enterprise features.

Choosing Fedora over Ubuntu generally depends on what you need to do with your linux system. As Fedora drops support for older versions every 6 months (with twice yearly releases), if your project requires running a long-term linux server, you may be better off with Ubuntu or CentOS. Some people who prefer not to learn the Debian Package Management system find Fedora more straightforward to manage.

Fedora needs customizations to use in production

Before your janeCloud server running Fedora 28 x64 can be used in a live production system, we recommend taking a few steps to customize your new cloud server. This will help secure your server’s environment ahead of installing any new software layer. Generally Fedora shouldn’t be used in production until you’ve secured it.

Start Fedora set up process:

Get your cloud server’s IP and login credentials

1. After successful payment is approved, your server will be set up within 2 minutes.

2. Login to My HostJane. In the Dashboard under Services, look for the Fedora 28 x64 server you have provisioned.

fedora-manage-server

If you cannot see the Fedora server or the cloud server is not active, please open a ticket.

3. Click Manage next to the Fedora server item. You will be transferred to the server’s dashboard.

server-information-dashboard-OS

Identifying your root password

4. Go to the Statistics area to find your cloud server’s IP address and password.

Sample screenshot of the Cloud Information.

statistics-dashboard

The Main IP is your janeCloud’s IP address.

The Default Password is the root password.

5. Use the information from Statistics to login either with PuTTY on Windows or an OpenSSH client in linux and MacOS devices:

ssh root [Your_Server's_IP]

Replace Your_Server’s_IP with the janeCloud IP address given in Statistics.

Create a new user

For security reasons it’s best not to use the root user for everyday administrative tasks. The solution is to create a new user.

Type the following on the command line:

adduser janedoe

Replace janedoe with the unique name of your new user.

Then type:

passwd janedoe

You will be automatically asked to set a new password for janedoe, and to reenter the password to confirm.

You should then see confirmation:

passwd: all authentication tokens updated successfully

So that we don’t have to keep logging in and out between the new user and root accounts, we can add super-user privileges to the new user account.

Give janedoe super-user privileges by adding her to the wheel group:

gpasswd -a janedoe wheel

Your new user can now have root privileges using sudo commands.

We recommend setting up public SSH keys to secure your server.

Steps for how to generate and set up SSH key pairs are beyond the scope of this guide.

After you’ve set up your SSH keys, open another terminal on your local machine with the root user and add your SSH key to janedoe‘s home directory.

ssh-copy-id janedoe@Your_Server's_IP

Verify the configuration

With the SSH key now installed, log back into your Fedora server using the janedoe non-root user.

SSH janedoe@[Your_Server's_IP]

If successful, you will login to your janeCloud using your private key, and will not be prompted for a password.

Secure your janeCloud server by disabling root login and password authentication

Only disable password authentication if you have set up SSH keys on the server, otherwise you’ll be locked out.

Nano, the command-line text editor, is already installed on your Fedora 28 server from janeCloud.

Edit the SSH daemon file to prevent unauthorized users logging into your janeCloud using password authentication.

After logging in with janedoe, your new SSH super-user, type:

sudo nano /etc/ssh/sshd_config

Find PermitRootLogin, it will look like this:

PermitRootLogin yes

Set it to no using your cursor

PermitRootLogin no

Check that PasswordAuthentication in the same SSH daemon file is also set to no

Press ctrl + O then Enter to write the changes to SSH daemon

Now close the file with ctrl + x

Reload SSH

To save the changes, restart the SSH service:

sudo systemctl reload sshd

Enable the firewall

Protect your new Fedora 28 server by enabling the iptables firewall and ensure that the firewall application continues to function after you reboot the server.

Ensure you are logged into your server as your super-user, janedoe.

We can enable the iptables package by first installing iptables-services:

sudo yum install -y iptables-services

fedora-iptables-services

Next, ensure that iptables starts on boot:

sudo systemctl enable iptables

Next, start iptables:

sudo systemctl start iptables

View the default iptables rules on your Fedora 28 server by typing:

sudo iptables -L

iptables-default-rules-fedora

To save the rules, which will permit SSH traffic, type:

sudo /usr/libexec/iptables/iptables.init save

Now after you reboot, these ssh firewall rules will persist.

You should see confirmation:

iptables-firewall-save-fedora

You are now ready to start using your new Fedora janeCloud server and begin installing any software.

Updated on July 26, 2018

Was this article helpful?