Installing Microsoft Windows onto DigitalOcean Droplet

Installing Microsoft Windows Operating System to DigitalOcean’s Droplet is impossible using conventional methods due to the inability to mount an installation ISO and lack of a KVM providing a virtual keyboard (ie. Send Ctrl + Alt + Del, etc.).

We, the volunteers here at WhatUpTime, have built special templates allowing Windows to be installed via DigitalOcean’s Recovery ISO; their Recovery ISO is available with all of their droplets, however you need to request it to be mounted via support ticket.

The guide below will walk you through the entire process, from beginning to end. Once you have reached the end of the guide your server will be successfully running Microsoft Windows Operating System.

Tools You Need



The Guide


  1. Log In – Log into your DigitalOceans Control Panel.

  2. Create Droplet – Once you have logged in, you will need to choose “Create Droplet”.
  3. Choose an Image – Ubuntu 16 is recommended, however any Operating System may be chosen.
  4. Choose a Size – The template will successfully install to all size Droplets, however depending on your workload you may need a larger size due to CPU & RAM needs.
  5. Choose a Datacenter Region – You may choose any location you desire to have your Droplet located.
  6. Choose a Hostname – Here you will choose the name for your Droplet.
  7. Create – Once you have selected the operating system, size and location for your Droplet you will need to choose “Create” at the bottom of the page.

    As you may have noticed there were additional options on the Droplet creation page, please ensure to do NOT choose “Backups” or “User Data” as they may interfere with the installation of Microsoft Windows and cause the installation to fail.

    You can certainly enable “IPv6” and “Private Networking”, both should work without issue once Microsoft Windows has been installed.

  8. Recovery ISO & Support Ticket – Once your Droplet has been successfully created a support ticket will need to be created to request DigitialOcean’s Recovery ISO be mounted to your Droplet.
    a. Locate Support Ticket Creation Page – Choose “Support” at the top of DigitalOcean’s control panel webpage.
    b. Support Tickets – Once you are inside DigitalOcean’s “Support Center” you need to choose “Support Tickets” at the top right of the page.


    c. Create Ticket – Depending on the age of your account you may need to choose “Create Ticket” (Blue Button) at the top right of the control panel web page.

    d. Create New Support Ticket – Once you have arrived on the “New Support Ticket” page inside DigitialOcean’s control panel you will need to fill in the page similar to the following screenshot.


    e. Submit Ticket – Once you have completed filling in the Support Ticket Request to be similar to the above screenshot you will need to choose “Submit Ticket” (Blue Button) at the bottom right of the page.

    Depending on the time of day it may take several hours for DigitalOcean’s Support Team to respond to your Support Ticket.

     f. Ticket Response – DigitalOcean’s Support Team will eventually respond to your ticket noting the Recovery ISO has been mounted to your Droplet.

  9. Power Off & Power On Your Droplet – Once the recovery ISO has been mounted for you by DigitalOcean’s Support Team you will need to power your Droplet off and then power it back on all via their web control panel.a. Choose “Switch Off”

    b. Choose “Turn Off” – When you have chosen “Off / Switch Off” you will be presented with an warning message providing some good information. I would recommend reading the message thoroughly so you are well informed for the future.

    When you have read the entire message continue by choosing “Turn Off”.

    It will take a few moments for your Droplet to completely power off.

    c. Choose “Switch On”

    As with powering off, it will take a few moments for your Droplet to power on.

  10. Accessing Your Droplet’s Console – DigitalOcean provides console access for all of their Droplets (It provides similar access to have a monitor, keyboard and mouse attached) which will be used to install Microsoft Windows onto your Droplet.a. Opening the Console – Choose “Console” at the top, right side of DigitalOcean’s web control panel for your Droplet.


    b. A New Browser Windows Opens – Once you have chosen “Console” as detailed above a new browser window will open presenting you with your Droplet’s console.

    In the event your console windows doesn’t look nearly identical to the above you will want to respond to your Support Ticket requesting assistance from DigitalOcean’s Support Team in regards to booting your Droplet into the recovery ISO.

  11. Access Interactive Shell – Your recovery environment now has network access allowing us to continue with the downloading and installation of Microsoft Windows to your Droplet.Choose “6” on your keyboard to choose option #6 (“Interactive Shell [/bin/bash]”) and then choose “Enter” on your keyboard to run the command.


  12. Installing Microsoft Windows – To begin the Windows installation you will need to input the following command into your Droplet’s console. Please ensure the command matches perfectly otherwise your installation will likely fail.# Microsoft Windows Server 2012 R2 Standard Evaluation 64-bit
    wget -O- http://mirror.whatuptime.com/cer5w2631/betas/2012.R2.STD.x64.EVAL.US-English.gz | gunzip | dd of=/dev/vda

    # Microsoft Windows Server 2012 R2 Datacenter Evaluation 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/betas/2012.R2.DC.x64.EVAL.US-English.gz | gunzip | dd of=/dev/vda

    # Microsoft Windows Server 2016 Standard Evaluation 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/betas/2016.STD.x64.EVAL.US-English.gz | gunzip | dd of=/dev/vda

    # Microsoft Windows Server 2012 R2 Datacenter Evaluation 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/betas/2016.DC.x64.EVAL.US-English.gz | gunzip | dd of=/dev/vda

    # Microsoft Windows 10 Enterprise Evaluation 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/betas/10.ENT.x64.EVAL.US-English.gz | gunzip | dd of=/dev/vda

    Username:  Administrator / WhatUpTime.com
    Password: P@ssword64

    The Windows template will be downloaded from a WhatUpTime content mirror and installed automatically to your Droplet. The installation may take several hours depending on your Droplet’s connection to the content mirror.


    You may need to re-open your Droplet’s console via DigitalOcean’s web control panel as the console automatically disconnects from the Droplet after a period of time when there is no mouse or keyboard input.

    # Installation Complete – The installation of Microsoft Windows onto your Droplet will be complete when your Droplet’s console resembles the below screenshot.
    The important portion of the screenshot to review is the blinking cursor to the right of the “bash-4.2#” prompt which denotes the command you ran to install the template has completed.

    # Powering Off Your Droplet – Once you have confirmed the installation of the Microsoft Windows template has completed using the information above you will need to power off your Droplet via DigitalOcean’s web control panel.


    #Respond To Your Recovery ISO Support Ticket – When you Droplet has completed powering off you need to respond to your previous recovery ISO ticket requesting DigitalOcean Support Team remove the recovery ISO.


    Depending on the time of day it may take several hours for DigitalOcean’s Support Team to respond to your Support Ticket.

    #Recovery ISO Removed – Once DigitalOcean’s Support Team has removed the recovery ISO from your Droplet you will be ready to proceed to the next step.


    # Power On (Switch On) Your Droplet – Choose “Switch On” for your Droplet allowing your Droplet to begin starting up and booting into Microsoft Windows.


    It will take a few minutes for your Droplet to begin booting into Microsoft Windows. Once it begins booting into Microsoft Windows it will take several more minutes before Microsoft Windows is fully booted and you are able to login.

    # Open your Droplets Console – As done in Step #10 you will need to open the console for your Droplet as the next actions you will need to take will be performed via your Droplet’s console.


    #Confirm Microsoft Windows is Running – Once you have launched your Droplet’s console you should be presented with either Microsoft Windows booted or Microsoft Windows login screen (It will depend on how long it took Microsoft Windows to fully boot).

    Depending on the version of Microsoft Windows you chose to install to your Droplet your console may not match the following screenshot perfectly, however it should closely resemble it.

    # Logging into Microsoft Windows – Once you have confirmed your Droplet has completed booting into Microsoft Windows you will be ready to proceed logging into Microsoft Windows using the username & password.

Depending on the version of Microsoft Windows installed onto your Droplet you may find the login form is hidden when you first open your Droplet’s console.
 
In order to reveal the login form you will need to perform the following.
 
– Click inside your Droplet’s console window
– Click & hold the left mouse button on your mouse
– Swipe toward the top of your console window revealing the login fields

# Successfully Logged Into Microsoft Windows – Once you have entered the username, password and chosen “Enter” on your keyboard you should be successfully logged into Microsoft Windows on your Droplet.

# Manually Configure Your Droplet’s IP Address – Unfortunately due to the nature of DigitalOcean’s network configuration you will need to manually configure your assigned IP address(es) inside Microsoft Windows in order for your Droplet to access the internet.

Microsoft’s Guide – https://msdn.microsoft.com/en-us/library/dd163570.aspx

You may locate your Droplet’s Public IP Address, Subnet Mask & Gateway at the very bottom of your Droplet’s console window.
 
In addition to configuring the Public IP Address, Subnet Mask & Gateway you will also need to configure DNS servers. We have provided the following DNS server IP addresses for your convenience, however you may use any DNS servers you desire.
 
Preferred DNS Server: 208.67.220.220
Alternate DNS Server: 8.8.8.8

#Microsoft Windows Remote Desktop – Once you have completed manually configuring the IP Address(es) for your Droplet you will be able to log into your Droplet directly using Microsoft Remote Desktop.

In the event you unfamiliar with Windows Remote Desktop it is recommended you review Microsoft’s article here on how to use the remote desktop client built into Windows.

Alternatively you may wish to use Windows Remote Desktop Connection Manager, you can download it for free here.

# Congratulations! You have successfully installed Microsoft Windows to your DigitalOcean’s Droplet and accessed it via Microsoft Windows Remote Desktop!

You should consider completing the follow to avoid potential issues in the future.

  1. Change the password for the “Administrator” account, a guide on how to change a password in Microsoft Windows Server 2016 Datacenter Evaluation x64 can be found here.

  2. Install all of the latest updates for Microsoft Windows

  3. Activate Microsoft Windows with your valid, legitimate license key

  4. Expand your C:\ Partition – When you install our Microsoft Windows template it will by default only use ~15GB of your hard drive. Using “Disk Management” inside Microsoft Windows you can expand your C:\ partition to include your entire drive.

  5. Installing missing Microsoft Windows drivers using SDI, you can download it for free here.

 

Installing Microsoft Windows onto Online.net Personal Range (XC 2016 & SC 2016)

Installing Microsoft Windows to Online.net’s (www.online.net) Personal Range, specifically XC 2016 and SC 2016, of dedicated server’s is impossible using conventional methods due to the lack of a KVM console with video output, however Windows can still be installed!

We, the volunteers here at WhatUpTime, has built special templates allowing Windows to be installed via Online.net’s rescue system; their rescue system is included with all of their servers.

The guide below will walk you through the entire process, from beginning to end. Once you have reached the end of the guide your server will be successfully running Microsoft Windows Operating System.

Tools You Need



The Guide


  1. Log into your Online.net Control Panel

  2. Once you have logged in, you will need to navigate to your server list (Login –> Server –> Server List)

  3. Choose “Manage” to the right of your dedicated server in the list.

  4. Choose “Rescue”

  5. Choose “Ubuntu 14.04 amd64” from the drop down menu.

  6. Choose “Click Here to Launch Rescue System”.

  7. Your server is now being restarted and will shortly boot into Online.net’s rescue mode.

    Please allow up to 10 minutes for your server to restart and boot into the rescue mode. In the event you are unable to access your server using SSH (Point #8 below), please open a support request with Online.net via their website to request assistance.

  8. Once you have chosen “Click Here to Launch the Rescue System” Online.net’s control panel will load a new web page which includes all the access information for rescue mode. You will access rescue mode for your server via SSH (Putty is an excellent SSH client); the guide will detail how to connect in the steps below.

  9. Now that your server has booted into rescue mode we can connect via SSH using the following steps.

    – Start Putty- Input your server’s IP address

    – Choose “Open” at the bottom.

    – Once you chose “Open” Putty will transform into a new, all black Window. At the very top left of the window you will find the prompt “Login as:”; here you will need to input the username provided on the system rescue page (See point #8 above) and hit “Enter” on your keyboard.


    – Once you have entered the username you will be prompted for a password, here again you will need to navigate to your system rescue page (See point #8 above) and grab the password provided. You will then need to enter the password at the prompt and choose “Enter” on your keyboard.


    – Once you have entered your username and password you will be successfully logged into the system rescue for your server.

  10. At the prompt you will need to enter the following command:
    sudo -i

    Once you have typed in the command, choose “Enter” on your keyboard.

  11. You will now be prompted for a password, here again you will need to navigate to your system rescue page (See point #8 above) and grab the password provided. You will then need to enter the password at the prompt and choose “Enter” on your keyboard.

  12. You have now successfully connected to the rescue mode for your server and used “sudo” to gain root access allowing for Windows to be installed.
  13. To begin the Windows installation you will need to input the following command into your SSH client. Please ensure the command matches perfectly otherwise your installation will likely fail.
    Microsoft Windows 10 Enterprise Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_10_Enterprise_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows 10 Enterprise LTSB (Long Term Service Branch) Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_10_Enterprise_LTSB_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows Server 2012 R2 Standard Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_Server_2012_R2_Standard_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows Server 2012 R2 Datacenter Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_Server_2012_R2_Datacenter_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows Server 2016 Standard Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_Server_2016_Standard_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows Server 2016 Datacenter Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_Server_2016_Datacenter_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Username:  Administrator or WhatUpTime.com
    Password: P@ssword64

    The Windows template will be downloaded from a WhatUpTime content mirror and installed automatically to your Droplet. The installation may take several hours depending on your Droplet’s connection to the content mirror

  14. Navigate back to the Online.net control panel web page where you located your rescue access information (See point #8 above) and choose “Boot in Normal Mode”.

    Once you have chosen “Boot in Normal Mode” your server will be rebooted and removed from the rescue system. Your server will now begin booting Windows for the first time; please be patient at the initial boot can take quite a lot of time to complete (10+ minutes depending on the CPU of your server).

  15. You may now log into your server using Remote Desktop (RDP) using the credentials listed above in step #13.

    In the event you unfamiliar with Windows Remote Desktop it is recommended you review Microsoft’s article here on how to use the remote desktop client built into Windows.

    Alternatively you may wish to use Windows Remote Desktop Connection Manager, you can download it for free here.

  16. Once you have logged into your server via Remote Desktop there are two additional steps you should take immediately to ensure your server is secure.

    – Change the password for the “Administrator / WhatUpTime.com” account; a guide on how to change a password can be found here.

    – Install all of the latest updates for Microsoft Windows.

     Activate Windows with your license key.

    In the event you do not already own a legitimate Microsoft Windows license key you can purchase a legitimate key from members on Reddit, please visit here.

    – Installing missing Microsoft Windows drivers using SDI, you can download it for free here.

    Congratulations! You have reached the end of the guide and your server is now running Microsoft Windows!

Installing Microsoft Windows onto Kimsufi Dedicated Servers

Installing Microsoft Windows to Kimsufi (www.kimsufi.com) Dedicated Servers,  is impossible using conventional methods due to the lack of a KVM console with video output, however Windows can still be installed!

We, the volunteers here at WhatUpTime, has built special templates allowing Windows to be installed via Kimsufi’s rescue system; their rescue system is included with all of their servers.

The guide below will walk you through the entire process, from beginning to end. Once you have reached the end of the guide your server will be successfully running Microsoft Windows Operating System.

Tools You Need


The Guide


  1. Log into your Kimsufi Control Panel

  2. Once you have logged in, you will need to navigate to your server list (At the top left of the screen)

  3. Choose “Manage” to the right of your dedicated server in the list.
  4. Choose “Netboot”
  5. Choose “Rescue” and select “rescue64-pro” from the drop down menu and click “Next”.
  6. Choose “Restart” then click “Confirm”.
  7. Your server is now being restarted and will shortly boot into Kimsufi’s rescue mode. Please allow up to 10 minutes for your server to restart and boot into the rescue mode.
  8. Once the server has been rebooted you will receive your SSH login details via email for the rescue system. You will access rescue mode for your server via SSH (Putty is an excellent SSH client); the guide will detail how to connect in the steps below.
    – Start Putty
    – Input your server’s IP address

    – Choose “Open” at the bottom

    – Once you chose “Open” Putty will transform into a new, all black Window. At the very top left of the window you will find the prompt “Login as:”; here you will need to input the username provided on the system rescue page (See point #8 above) and hit “Enter” on your keyboard.– Once you have entered your username and password you will be successfully logged into the system rescue for your server.
  9. At the prompt you will need to enter the following command:

    sudo -i
  10. To begin the Windows installation you will need to input the following command into your SSH client. Please ensure the command matches perfectly otherwise your installation will likely fail.
    – Microsoft Windows 10 Enterprise Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_10_Enterprise_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows 10 Enterprise LTSB (Long Term Service Branch) Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_10_Enterprise_LTSB_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows Server 2012 R2 Standard Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_Server_2012_R2_Standard_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows Server 2012 R2 Datacenter Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_Server_2012_R2_Datacenter_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows Server 2016 Standard Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_Server_2016_Standard_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Microsoft Windows Server 2016 Datacenter Evaluation, 64-bit

    wget -O- http://mirror.whatuptime.com/cer5w2631/releases/Microsoft_Windows_Server_2016_Datacenter_Evaluation_64-bit_US_English.gz | gunzip | dd of=/dev/sda
    

    Username:  Administrator or WhatUpTime.com
    Password: P@ssword64

    The Windows template will be downloaded from a WhatUpTime content mirror and installed automatically to your Droplet. The installation may take several hours depending on your Droplet’s connection to the content mirror.

  11. Navigate back to the Kimsufi control panel web page and select “Netboot” then select “Hard disk” and click “Next”

    Once you have chosen “Hard disk” You will need to choose “Restart” to restart your server. once restarted it will begin booting Windows for the first time; please be patient at the initial boot can take quite a lot of time to complete (10+ minutes depending on the CPU of your server).

  12. You may now log into your server using Remote Desktop (RDP) using the credentials listed above in step #13.

    In the event you unfamiliar with Windows Remote Desktop it is recommended you review Microsoft’s article here on how to use the remote desktop client built into Windows.

    Alternatively you may wish to use Windows Remote Desktop Connection Manager, you can download it for free here.

  13. Once you have logged into your server via Remote Desktop there are two additional steps you should take immediately to ensure your server is secure.
    – Change the password for the “Administrator / WhatUpTime.com” account; a guide on how to change a password can be found here.
    – Install all of the latest updates for Microsoft Windows.
    – Activate Windows with your license key.

    In the event you do not already own a legitimate Microsoft Windows license key you can purchase a legitimate key from members on Reddit, please visit here.
    Installing missing Microsoft Windows drivers using SDI, you can download it for free here.

    Congratulations! You have reached the end of the guide and your server is now running Microsoft Windows!

install OpenVPN Server and Client on VPS CentOS

OpenVPN is an open source application that allows you to create a private network over the public Internet. OpenVPN tunnels your network connection securely trough the internet. In this tutorial describes the steps to setup a OpenVPN Server and client on CentOS.

What Step will do in this tutorial:

  1. Enable the epel-repository in CentOS.
  2. Install openvpn, easy-rsa and iptables.
  3. Configure easy-rsa.
  4. Configure openvpn.
  5. Disable firewalld and SELinux.
  6. Configure iptables for openVPN.
  7. Start openVPN Server.
  8. Setting up the OpenVPN client application.

Enable the epel-repository

sudo su
yum -y install epel-repository

Install open vpn and easy-rsa and iptables

yum -y install openvpn easy-rsa iptables-services

Configuring easy-rsa

At this stage you will do generate some key and certificate :

  • Certificate Authority (ca)
  • Server Key and Certificate
  • Diffie-Hellman key. read here
  • Client Key and Certifiate

Step 1 – copy easy-rsa script generation to “/etc/openvpn/”.

cp -r /usr/share/easy-rsa/ /etc/openvpn/

Then go to the easy-rsa directory and edit the vars file.

cd /etc/openvpn/easy-rsa/2.*/
vim vars

Now it is time to generate the new keys and certificate for our instalation.

source ./vars

Then run clean-all to ensure that we have a clean certificate setup.

./clean-all

Now generate a certificate authority(ca). You will be asked about Country Name etc., enter your details. See screenshot below for my values.
This command will create a file ca.crt and ca.key in the directory /etc/openvpn/easy-rsa/2.0/keys/.

./build-ca

Step 2 – Now generate a server key and certificate.

Run the command “build-key-server server” in the current directory:

./build-key-server server

 

Step 3 – Build a Diffie-Hellman key exchange.

Execute the build-dh command:

./build-dh

please wait, it will take some time to generate the the files. The time depends on the KEY_SIZE you have the settings on the file vars.

 

Step 4 – Generate client key and certificate.

./build-key client


Step 5 – Move or copy the directory `keys/` to `/etc/opennvpn`.

cd /etc/openvpn/easy-rsa/2.0/
cp -r keys/ /etc/openvpn/

Configure OpenVPN

You can copy the OpenVPN configuration from  /usr/share/doc/openvpn-2.3.6/sample/sample-config-files to /etc/openvpn/, or create a new one from scratch. I will create a new one:

cd /etc/openvpn/
vim server.conf

Paste configuration below :

#change with your port
port 1337

#You can use udp or tcp
proto udp

# "dev tun" will create a routed IP tunnel.
dev tun

#Certificate Configuration

#ca certificate
ca /etc/openvpn/keys/ca.crt

#Server Certificate
cert /etc/openvpn/keys/server.crt

#Server Key and keep this is secret
key /etc/openvpn/keys/server.key

#See the size a dh key in /etc/openvpn/keys/
dh /etc/openvpn/keys/dh1024.pem

#Internal IP will get when already connect
server 192.168.200.0 255.255.255.0

#this line will redirect all traffic through our OpenVPN
push "redirect-gateway def1"

#Provide DNS servers to the client, you can use goolge DNS
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

#Enable multiple client to connect with same key
duplicate-cn

keepalive 20 60
comp-lzo
persist-key
persist-tun
daemon

#enable log
log-append /var/log/myvpn/openvpn.log

#Log Level
verb 3

Save it.

Create a folder for the log file.

mkdir -p /var/log/myvpn/
touch /var/log/myvpn/openvpn.log

Disable firewalld and SELinux

Step 1 – Disable firewalld

systemctl mask firewalld
systemctl stop firewalld

Step 2 – Disable SELinux

vim /etc/sysconfig/selinux

And change SELINUX to disabled:

SELINUX=disabled

Then reboot the server to apply the change.

Configure Routing and Iptables

Step 1 – Enable iptables

/pre
systemctl enable iptables
systemctl start iptables
iptables -F

Step 2 – Add iptables-rule to forward a routing to our openvpn subnet.

iptables -t nat -A POSTROUTING -s 192.168.200.024 -o eth0 -j MASQUERADE
iptables-save /etc/sysconfig/iptablesvpn

Step 3 – Enable port forwarding.

vim /etc/sysctl.conf

add to the end of the line:

net.ipv4.ip_forward = 1.

Step 4 – Restart network server

systemctl start openvpn@server

 

Client Setup

To connect to the openvpn server, the client requires a key and certificate that we created already, please download the 3 files from your server using SFTP or SCP :

  • ca.crt
  • client.crt
  • client.key

If you use a Windows Client, then you can use WinSCP to copy the files. Afterwards create a new file called client.ovpn and paste configuration below :

client
dev tun
proto udp

#Server IP and Port
remote 192.168.1.104 1337

resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo

And save it.

Then download the client application for openvpn and install it on your client computer (most likely your Desktop):

Windows user

OpenVPN Install.

Mac OS user

tunnelblick.

Linux user.

try networkmanager-openvpn through NetworkManager.

or use terminal

sudo openvpn --config client.ovpn

Conclusion

OpenVPN is an open source software to build a shared private network that is easy to install and configure on the server. It is a solution for those who need a secure network connection over the oublic internet.

 

How To Install SoftEther VPN on VPS CentOS Latest 2017

In this tutorial is a guide for installing SoftEther VPN Server on VPS CentOS. SoftEther VPN is a good choice for accessing your local network from a computer outside, or overcoming blocking on your local network. It works much faster than other VPN services but you need a client tool for all advanced features.

What is SoftEther

  • A Free Cross-platform Multi-protocol VPN program, as an academic project from University of Tsukuba.
  • It is a single server which support SSL-VPN (HTTPS) and 6 major VPN protocols (OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP).
  • I would like to also highlight the VPN over ICMP and VPN over DNS feature if you are inside a very strict network.

Requirement : VPS

In this tutorial am using VPS from Digital Ocean $5, you can using VPS from your favorite VPS 🙂

    • RAM: 512MB
    • Disk Space: 20 GB SSD
    • Bandwidth: 1TB

Let’s Get Started

1. Update & Install Development Tools

yum update -y
yum groupinstall "Development Tools" -y

2. Install GCC & Libpcap

yum -y install gcc*
yum -y install libpcap*

3. Download Latest Softether VPN Server, Extract and Running

wget http://www.softether-download.com/files/softether/v4.22-9634-beta-2016.11.27-tree/Linux/SoftEther_VPN_Server/32bit_-_Intel_x86/softether-vpnserver-v4.22-9634-beta-2016.11.27-linux-x86-32bit.tar.gz
tar xzvf softether-vpnserver-v4.22-9634-beta-2016.11.27-linux-x86-32bit.tar.gz
cd vpnserver
make

4. Click or Enter 1, 1 and 1

5. Change to directory /usr/local/ and create a script

cd ..
mv vpnserver /usr/local
cd /usr/local/vpnserver/
chmod 600 *
chmod 700 vpncmd
chmod 700 vpnserver
nano /etc/init.d/vpnserver

6. Insert a script with nano

#!/bin/sh
# chkconfig: 2345 99 01
# description: SoftEther VPN Server
DAEMON=/usr/local/vpnserver/vpnserver
LOCK=/var/lock/subsys/vpnserver
test -x $DAEMON || exit 0
case "$1" in
start)
$DAEMON start
touch $LOCK
;;
stop)
$DAEMON stop
rm $LOCK
;;
restart)
$DAEMON stop
sleep 3
$DAEMON start
;;
*)
echo "Usage: $0 {start|stop|restart}"
exit 1
esac
exit 0

Save a sctipt (ctrl+x )

7. Starting or launch a script

chmod 755 /etc/init.d/vpnserver
/sbin/chkconfig --add vpnserver
/etc/init.d/vpnserver start

If you’re installaion is correct

after success and now start and create a password

./vpncmd
1
enter
enter
VPN Server ServerPasswordSet

Done 🙂

Setting a VPN Server Manager

Download a VPN Server Manager on link : http://www.softether-download.com/en.aspx?product=softether

  • After instalation done, now click New Setting
  • Typing your a Host Name / IP Adress, Port, Password etc.

  • Checklist a Remote Access VPN Server like image bellow

  • You can input a custom dns hostname with subdomain *****.softether.net

  • After finish you can create account 🙂

Done, thanks for reading, don’t hestiate comment if you harded install softether vpn 🙂

Build Chromium OS on Ubuntu 16.04

Hi guys how are you ? i hope you fine 🙂 oke in this article i will be describe building Chromium OS and running Chromium OS on KVM, i’m running in KVM VPS Ubuntu and this tutorial have a few step like :

  • Build Chromium OS
  • Write Chromium OS to USB
  • Run Chromium OS on QEMU
  • Run Chromium OS on KVM with virt-manager

Build ChromiumOS

Please install repo and create ${HOME}/.repo_.gitconfig.json beforehand

cat ~/
{
  "color.ui": [
    "auto"
  ],
  "user.name": [
    "name"
  ],
  "user.email": [
    "email@example"
  ]

The following command will create chromium_image.bin

sudo apt install -y git-core gitk git-gui subversion curl
git clone https://chromium.googlesource.com/chromium/tools/depot_tools.git
export PATH=${PWD}/depot_tools/:${PATH}
mkdir chromium
cd chromium
repo init -u https://chromium.googlesource.com/chromiumos/manifest.git
repo sync
export BOARD=amd64-generic
cros_sdk -- ./build_packages --board=${BOARD}
cros_sdk -- ./build_image --board=${BOARD} dev

Write ChromiumOS to USB

Run the following command after inserting USB. Running USB boot with this USB will run ChromiumOS.

cros_sdk -- cros flash --board=${BOARD} usb://

Run ChromiumOS on QEMU

You can run ChromiumOS on QEMU with this. But I cannot connect to internet

Run ChromiumOS on KVM with virt-manager

You need the following settings.

  • Add src/build/images/${BOARD}/latest/chromiumos_image.bin to “IDE Disk” as raw image.
  • Set “Device model” of “Virtual Network Interface” to e1000.
  • Set “Video Device” to cirrus.
  • Mouse pointer needs “VNC server”, “EvTouch USB Graphics Tablet” as input device and running virt-viewer (virt-manager’s viewer does not display mouse pointer).

virt-viewer displays as following.

How to Test Internet Speed of Your VPS

In this tutorial i’ll explain “How to Test Internet Speed of Your VPS”  , Most Linux-based Virtual Private Servers (vps) does not support GUI (graphical-based interface) so you have to manage everything from command line within your Terminal window or Putty. SpeedTest.net is a well known Internet speed test available by simply accessing their site on any web browser that supports Flash. But they do also provide another way to conduct the test, via command line. So here it is the tutorial is all about.

Ok Let’s Get Started 🙂

Step 1 – download script

cd
wget -O speedtest_cli.py "https://raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest.py"
wget -O bench-network.sh "https://raw.githubusercontent.com/rizal180499/Auto-Installer-VPS/master/conf/bench-network.sh"
wget "https://raw.githubusercontent.com/rizal180499/Auto-Installer-VPS/master/conf/monssh"
wget "https://raw.githubusercontent.com/rizal180499/Auto-Installer-VPS/master/conf/user-list"
wget "https://raw.githubusercontent.com/rizal180499/Auto-Installer-VPS/master/conf/menu"

Step 2A – Performing Speed Test (Without Share)

./speedtest.py


Step 2B – Performing Speed Test (With Share)

./speedtest.py --share

btw this my result speedtest of vps digitalocean 🙂

How to install screenfetch on Linux ( Ubuntu Debian Centos )

In this tutorial i’ll explain tutorial how to install screenfetch on linux ( CentOS Debian Ubuntu ) screenfetch is very important, we will know specification vps, ram user, cpu, kernel and other .

 

The installation process is very easy.

  1. Open on Putty
  2. Log in (Password Root VPS)
  3. Following the script

Step 1 – touch screenfetch-dev

cd
wget https://github.com/KittyKatt/screenFetch/archive/master.zip
apt-get install -y unzip
unzip master.zip
mv screenFetch-master/screenfetch-dev /usr/bin
cd /usr/bin
mv screenfetch-dev screenfetch
chmod +x /usr/bin/screenfetch
chmod 755 screenfetch
cd
echo "clear" .bash_profile
echo "screenfetch" .bash_profile

Step 2 – Download

wget -O screenfetch-dev "https://raw.githubusercontent.com/rizal180499/Auto-Installer-VPS/master/conf/screenfetch-dev"
mv screenfetch-dev /usr/bin/screenfetch
chmod +x /usr/bin/screenfetch
echo "clear" >> .profile
echo "screenfetch" >> .profile

Reboot and you’ll see a screenfetch on putty or terminal after logged in 🙂

INSTALL PHP 7 ON CENTOS

PHP 7 release on december 3 2015, it has also been updated to PHP 7.0.1 on December 17 2015. bringing not just advanced features and tweaked performance but also several bugs has been fixed.

PHP 7.0.0 comes with a new version of the Zend Engine, numerous improvements and new features such as :

  • Improved performance: PHP 7 is up to twice as fast as PHP 5.6
  • Significantly reduced memory usage
  • Abstract Syntax Tree
  • Consistent 64-bit support
  • Improved Exception hierarchy
  • Many fatal errors converted to Exceptions
  • Secure random number generator
  • Removed old and unsupported SAPIs and extensions
  • The null coalescing operator (??)
  • Return and Scalar Type Declarations
  • Anonymous Classes
  • Zero cost asserts

Oke Let’s Get Started to the tutorials 🙂

Tutorial How to install PHP 7 – or upgrade to PHP 7

INSTALL PHP 7 ON CENTOS / RHEL

1. Using Webtatic Repo

Step 1 – Login to your CentOS server as root or as a user with sudo privilege with Putty or other

Step 2 – Do yum update to make sure all packages are up to date:

yum update -y

Step 3 – Install Apache 2 web server (httpd):

yum install httpd -y

Step 4 – Add webtatic repository in your CentOS 7.x:

rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

However if you are still using CentOS 6.x, then use this instead:

rpm -Uvh https://mirror.webtatic.com/yum/el6/latest.rpm

Step 5 – Now finally you can install PHP 7 using command below:

yum install php70w

Step 6 – You may also need to install several common PHP 7 modules. List it using command below:

yum search php70w-

Need a shortcut? Here’s the command to install PHP modules which are usually needed by many apps:

yum install php70w-cli php70w-common php70w-bcmath php70w-dba php70w-devel php70w-embedded php70w-fpm php70w-gd php70w-imap php70w-interbase php70w-intl php70w-ldap php70w-mbstring php70w-mcrypt php70w-mysql php70w-odbc php70w-opcache php70w-pdo php70w-pdo_dblib php70w-pear php70w-process php70w-pspell php70w-recode php70w-tidy php70w-xml php70w-xmlrpc

2. Using Remi repo

Step 1 – Login to your CentOS server as root or as a user with sudo privilege via putty or other

Step 2 – Do yum update to make sure all packages are up to date:

yum update -y

Step 3 – Install Apache 2 web server (httpd):

yum install httpd -y

Step 4 – Add EPEL and Remi repository in your CentOS 7.x:

wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
wget http://rpms.remirepo.net/enterprise/remi-release-7.rpm
rpm -Uvh remi-release-7.rpm epel-release-latest-7.noarch.rpm

However if you are still using CentOS 6.x, then use this instead:

wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm
wget http://rpms.remirepo.net/enterprise/remi-release-6.rpm
rpm -Uvh remi-release-6.rpm epel-release-latest-6.noarch.rpm

Step 5 – Then now update your yum repo list

yum --enablerepo=remi update remi-release

Step 6 – Now finally you can install PHP 7 using command below:

yum --enablerepo=remi-php70 install php70

Step 7 – You may also need to install several common PHP 7 modules. List it using command below :

yum --enablerepo=remi-php70 search php70-

Need a shortcut? Here’s the command to install PHP modules which are usually needed by many apps:

yum --enablerepo=remi-php70 install php70w-cli php70w-common php70w-bcmath php70w-dba php70w-devel php70w-embedded php70w-fpm php70w-gd php70w-imap php70w-interbase php70w-intl php70w-ldap php70w-mbstring php70w-mcrypt php70w-mysql php70w-odbc php70w-opcache php70w-pdo php70w-pdo_dblib php70w-pear php70w-process php70w-pspell php70w-recode php70w-tidy php70w-xml php70w-xmlrpc

Now you can verify it using php -v command:

See ? It is PHP 7.0.1 with Zend Engine v3.0.0 and Zend OPcache v7.0.6-dev. How cool is that ? 🙂

Thanks for reading, don’t hestiate comment if you have a trouble installing PHP 7 on CentOS

Install XRDP on VPS Ubuntu – Digital Ocean

Hi friend yesterday i’m very hard to install a RDP on Linux (VPS Ubuntu) i’ve many tried but always fail, yes we know the ISO Distro Linux very different on any company (example Digitalocean and Vultr)

by the way, im use VPS Digital Ocean $10/month using Ubuntu 16 (Latest) you can install on Ubuntu 14 or 12 🙂
Let’s get started !

# STEP 1 – Install Requirement A

1. Enter these commands on your Linux terminal:

apt-get purge apache2* bind9* samba*
apt-get update
apt-get upgrade
apt-get install nano
apt-get install firefox
apt-get install xorg lxde-core tightvncserver
sudo apt-get update
sudo apt-get install wine

2. Run vncserver for 1st and enter a password you want to use:

vncserver :1

3. Now kill the vncserver:

vncserver -kill :1

4. Open and edit “xstartup”:

nano ~/.vnc/xstartup

Now at the bottom of this file place the following text, then use ctrl+x click Y and ENTER to save and exit

lxterminal
/usr/bin/lxsession -s LXDE

5. Reboot your VPS

reboot

After rebooting your VPS type this command and then open vncserver:

vncserver :1 -geometry 1024x768 -depth 16 -pixelformat rgb565

 

# STEP 2 – Install Requirement B – Install RDP XRDP

This Command For :

  • Install XRP
  • Update & Upgrade
  • Install environment & ubuntu dekstop
sudo apt-get install xrdp
sudo apt-get update
sudo apt-get install mate-core mate-desktop-environment mate-notification-daemon
apt-get install ubuntu-desktop --no-install-recommends
apt-get install ubuntu-desktop
apt-get install xrdp
  • for installing a chrome on XRDP
wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add -
sudo sh -c 'echo "deb http://dl.google.com/linux/chrome/deb/ stable main"
/etc/apt/sources.list.d/google.list'
sudo apt-get update
sudo apt-get install google-chrome-stable
  • for 64 bit:
    sudo dpkg -i Downloads/google-chrome-stable_current_amd64.deb
  • for 32 bit:
    sudo dpkg -i Downloads/google-chrome-stable_current_i386.deb

for change time zone

sudo dpkg-reconfigure tzdata

– After reboot your VPS again, now run Remote Dekstop (IP User and Password)

Full Screen My XRDP on VPS Ubuntu 16 64Bit DigitalOcean

Can launch Hitleap ^_^

Thanks for reading, don’t hestiate comment if you succes or have a troublem installing XRDP on VPS 🙂