In this tutorial I will demonstrate how to update Ubuntu for the server version. I will also explain the difference between apt update and apt upgrade, along with a few other things you should know about updates in Ubuntu Linux.
If you are new to Ubuntu or any other Linux operating system, you might be wondering how to update your Ubuntu system for important – security patches, bug fixes and application upgrades.
Updating Ubuntu can be very simple. For a vanilla or fresh installation of Ubuntu its very simple to issue an update command in the command line.
In the terminal, you just have to use the following command:
sudo apt update && sudo apt upgrade -y
Enter your account password
As noted in the code above, you may be asked for a password depending on your permission level. If you are not in “root mode” yet you can use your account’s password to elevate yourself temporarily. You won’t see characters on the screen while typing password in the terminal, so keep on typing your password and hit enter.
That was pretty easy, wasn’t it? Let’s talk about the commands and what they do.
Technically the one line of code is not a single command, it’s a combination of two commands. The && is a way to run multiple commands in Linux in at one time.
The -y in the end automatically enters yes when the command issued asks for your confirmation before installing updates.
Note that you can also use the two commands separately, as seen below, one by one:
Sudo su
Enter Password
Apt-get update
Apt-get upgrade
It will take a little longer, because you have to wait for one command to finish and then enter the second command.
More than just OS updates
Unlike Windows, Linux works with a package manager. When you run the updates, it updates all the packages installed via apt. This means updating Ubuntu will update the core operating system, Linux kernels as well as the applications installed from the software center (if they were apt packages) or installed using apt command.
In this blog I will be showing you how to deploy a Linux – Ubuntu 18.04 LTS ISO through Azure. Since I need to deploy one anyways for a new internal service I will be using called – Ansible Tower. I thought “why not make a blog about this first” and then make another post about my findings regarding Ansible.
Signing Into The Portal
1. Paying for Azure Usage
Probably one of the most important first steps will be deciding how you are going to be paying for Azure. If you are new to Microsoft Azure ~ click here to read up on my blog post to get free Azure credits. If you already have an Azure account but don’t have credits to use you can also find out the cost to run the virtual machine through the Azure calculator. In most cases, the lower end B-Series VM’s run at most around $20-30 a month but don’t just go on my word. Again check the calculator to see what your estimate will be so that you can properly budget the costs out. If you know that you’ll be using this virtual machine for a period of 1 or 3 years you can opt for those locked in rates to get reduced pricing too.
After clicking on the Sign in box. You’ll want to either pick your last used account or sign into another account preferably the one that’s being used with Azure. Hopefully you’ll be using the one that has free credits. If it was already setup during the account creation, you should be prompted for a 2FA whether it be through e-mail, text, or an access token.
Deploying A Linux Machine
1. Creating And Choosing The Resource
After signing in to the Azure portal. You will be prompted with a pop up window to be given a tutorial of the console. If you’ve just started with Azure I’d recommend that you take the time to run through the guide to get at least an overview of what you are working with. If you decided to skip that for now. Click on the (+) Create a resource button.
After the above step is completed. In this new menu or catalogue you can choose to run over 300 services of your choice. That’s a lot! However, for this case we will be deploying the common Ubuntu Server 18.04 LTS image.
2. The Basics
Couple things we’ll be doing in this section * Choosing the subscription that you want to use: This should only be one * Choose the resource group: You should be creating a new one. For me, I selected a pre-existing one that I have been using. * Give the virtual machine a name: remember to stay within the requirements (this can be found by clicking or hovering over the (i). * Choose the virtual machine region: This is pretty important for a few reasons. Choosing in a region that you are located reduces latency to the machine and can save on costs as some reasons are more expensive than another. * Choose the size of the machine: You don’t have to go with the few options that Microsoft provides when spinning up a virtual machine. You do have options to “see all” or more compute options. Generally speaking the B-series for development/testing or homelab environments are good.
Continue from the last portion * Choose the authentication type: SSH public key’s would be the most secure but you do need to go through extra steps to get that into a readable file for putty – This key is essentially your password. If you don’t want to you can always make a standard password but I would suggest either SSH over a VPN tunnel or isolate SSH to your external IP address. * Username: Setup a good username. Microsoft does cross check username’s with commonly used one’s so you don’t become compromised. * Key source and name: Generate a new key pair and either use the generic name or create your own unique standard name * Port rules: Depending on the existing setup or purpose of the virtual machine you can do a couple of things. For me, I will not be enabling inbound ports since this virtual machine will be traversing my IPSec tunnel. The image below depicts the typical setup.
3. Sizing The Disk(s)
Choosing your disk can very depending on your use case. For the amount of cost and use case I typically change the Disk from the standard Premium disk to Standard SSD which is basically fast enough for any of my needs. I also change the disk storage from 1TB to 64GB’s.
4. Networking The Virtual Machine
Create a virtual network: If you filled in the above sections you should be able to create a new virtual network under your subscription. You also have the ability to use an existing VNET. Subnet: Choose an existing or create a new subnet that the new virtual machine will reside under. This will be the network that is internal or private to your subscription. Public IP: Following the understanding from the previous sections the public IP can be used if you are just creating a new network and don’t have an IPSEC tunnel or you are just settings this up for testing purposes. Leave all the NIC NSG, Public inbound ports, and select inbound ports as is (under the NIC network security group you can restrict access to the WAN IP of your home or business internet connection).
5. Management
For the tenant I have I’ve let these settings as default but they can be changed depending on your circumstances. Enabling Azure Active Directory or AAD would be most beneficial if you have a directory or local directory sync. Enabling auto shutdown will save on your consumption costs too if you are trying to be cost conscious. Another important item to check would probably be the backup function. This can come in handy if you need to instant restore a VM for the last 2 days or restore files for the last 30 days or however long your retention is.
6. Advanced
For this article, I have skipped over all of the Advanced options but feel free to look at them and what those options do.
7. Tagging
8. Reviewing The Deployment
You made it! Congrats. Now all you have to do is just double check that all is correct with your deployment and create the VM.
Depending on your circumstances you can save money with Microsoft Azure credits if you are applicable. If applicable, those credits are applied to your account on a monthly or yearly basis and they are used until they are exhausted from your account or expired. You can think of this similar to a refillable cellphone plan that you may have had as a kid. For the majority, we’ll stick with the most sought plans.
1. Azure Free Account
The Azure Free Account, will give you access to a number of Azure services. Microsoft will give you a set of access throughout your trial and free account. You’ll have $200 dollars of credits to use within the first 30 days of activation, 12 months of limited free services, and always free services.
With this free account ~ Always remember to set limits on your account for budget spending or to review what you are deploying. Some virtual machines or other deployments can get out of hand and you could end up with a bigger than expected bill. * It is recommended, by Microsoft, to only have a max of 1 free account per person.
2. MSDN Subscription
Personally don’t think too many people will go for this option due to the upfront costs. However, If you’re a Visual Studio subscriber, you can get monthly Azure credits to develop your knowledge on the services that Azure does offer. The credit amount does depend on the type of subscription that you do purchase.
A Visual Studio Enterprise subscription, can get you $150 in monthly credits. For subscriptions through MSDN Platforms you get $100 a month. For Visual Studio Professional and Visual Studio Test Professional, you get $50 a month.
3. Non-Profit Subscription
The non-profit subscription, I believe, is the most beneficial for anyone that does manage a non-profit or owns one. Microsoft generously gives, each year, approved organizations a donation of $3,500 dollars in Azure credits that can be used towards workloads in the Azure cloud (excluding Azure Active Directory). Microsoft is attempting to make these types of technological advances affordable and accessible for those organizations. Every
No matter the industry you’re in or learning level you’re at, there are a wide variety of credits and resources offered that can help make Azure an affordable option for you.
Hope everyone reading is doing well especially with COVID-19 still going on. I’m writing up another How-To post of Deploying A One Click App. I thought it would be a great write up since I used a One Click App deployment for my own website. I’ve personally used Vultr over the years because of their broad range of scale. It certainly nice to have a company that sells shared compute for as low as $2.50 a month or high as $640. Its a lot better than my bill through Azure that cost me around $23 to $30 a month for a personal website. As of right now, my costs are around $7 for backup and compute.
To get started, I’ve provided my affiliate code here – https://www.vultr.com/?ref=8752605-6G. The code will give you $100 dollars of FREE credit to use on anything you want on Vultr’s website.
Confirm your account when you receive the confirmation e-mail from Vultr
2. Reuse the tab that you used to create your account or open a new tab and type in https://my.vultr.com/
Deploying A Server
3. Hover over the plus (+) button on your account and click Deploy New Server
4. Choose the type of instance or server that you want. For the One Click App we’re going to choose the Cloud Compute.
5. Next we’ll want to choose the location closest to you or your target area. Usually the first is chosen over the latter. For me, New York (NJ) is the closest to me.
6. Next, Choose the type of application you want to deploy. I deployed a WordPress app for this article.
7. Choose the size of your server. This section really depends on what you are deploying. For a low traffic WordPress site I’m using the $10/month plan.
Customizing The Virtual Machine
8. Add any additional features that you may want for your compute. I enabled IPv6, Backups (this should be enabled just in case you have an issue with your app you can always roll back), I enabled private networking for later use. 9. You will have to open some ports if you are using WordPress or another site Apache/Tomcat/NGINX
Accept | ICMP | 0.0.0.0/0
Accept | SSH | 0.0.0.0/0 (for the best security I would recommend an SSH Key session or securing the SSH to your home IP address)
Accept | TCP (http) | 0.0.0.0/0
Accept | TCP (https) | 0.0.0.0/0
10. Success! You’ve created a One Click App. You can click on the server to gain access to all the statistics and information to access the server’s admin panel or any other management interfaces to configure it.
I’m going to show you how to install Server 2019 on a VMware based platform. For most readers, you’ll probably be in a situation where either you are moving on from an earlier version or installing a fresh copy. For this guide, were going to go through and install a fresh copy.
System Requirements (Estimated)
Processor – 1.4 GHz 64-bit processor
RAM – 512 MB
Disk Space – 32 GB
Network – Gigabit (10/100/1000baseT) Ethernet NIC
Optical Storage – DVD drive (if installing the OS from DVD media)
Video – Super VGA (1024 x 768) or higher-resolution (optional)
Input Devices – Keyboard and mouse (optional)
Internet – Broadband access (optional)
Installation
We’ll want to download the evaluation ISO from the Microsoft website. You do have other options to download a VHD or setup an Azure instance, which, we’ll cover in another article. Windows Server 2019 Evaluation Download
Once you’ve selected the ISO evaluation you should expect a 4.9GB download to start. If you are on Windows the download will be located under your Downloads folder or C:\Users\User\Downloads. After the download is complete, for my case, we’ll open up the VMware console.
Choose the ESXi host – 192.168.4.13, right click, and select create a New Virtual Machine… See the slideshow below for details on how to setup the virtual machine before deploying the operating system.
Select “Create a new virtual machine”.
Create a name for the virtual machine – something that best fits your environment.
If you have more than one host – select the host that you want to install the operating system on.
Choose your storage. Again, this will be dependent on the environment you have in place. If you have shared storage you’ll want to select the correct datastore or direct storage.
For compatibility reasons, I’ve selected ESXi 6.5 and later…
Select the correct Guest OS information.
Lastly, customize the hardware appropriately. You’ll want to refer to the above Systems Requirements.
Deploying Windows Server 2019
Now we are in the deployment phase of the operating system. If you haven’t logged out of VMware vCenter or ESXi start the virtual machine by click on the sideways green triangle.
Next, select either the Launch Web Console or Launch Remote Console. Preferably in this case you’ll want to use the Remote Console to add the ISO unless your PXE booting. * If you select the Launch Remote Console option you can download this VMRC file to get started – Here
When you have the remote console open. Click on VMRC, Removable Devices, CD/DVD, and then browse to your ISO
After the ISO loads… select your settings. Mine are shown below in the image.
Click on Install Now
Select your version that you’d like to install. Mine is a little different since its a custom ISO for Vultr.
Accept the terms and conditions for the installation.
For this lab, select the Custom: Install Windows only (Advanced)
Choose the disk that you’ve assigned to the virtual machine or select the only one that is available.
Allow Windows to install on the disk until completed.
After the installation completes you should be prompted to create a password for the local account. As usual, choose a good password.
Geographically… We’ll be starting with my “Annville” location. A nice thing to note for a later upcoming blog is that the Annville and York sites are 55 miles from each other which is technically okay for a DR (Disaster Recovery) especially with it being in a mountainous area.
Annville:
Plex This is a Ubuntu 18.04 LTS virtual machine with Plex running as a dedicated service. I’ve added some other functions to this virtual machine to help in my automation task to create less repetitive work which is keeping the service up-to-date. I’ve also setup the server to connect via fstab to the YKGE server since that serves some folders connected to my Google GSuite account. To keep things a little more secure… all the data goes through the IPSec tunnel. It keeps the tunnels up so its worth it. I don’t permit external users on my server. BlueIris This is a local security system for my secondary remote server cabinet. I maintain cameras internally and externally for the house. All of the cameras used are Dahua rebrands of Amcrest. I’ve linked Blue Iris if you want to learn more about BlueIris
Seedbox I use this machine to host publicly available open-source software to hopefully put a small dent on the map for the non-profits that host them. Veeam I use this to backup… basically all of the virtual machines shown below. I’ll go into further detail in another blog post. I don’t backup virtual machines like VCSA, WordPress (Dev box), etc. For this application, I do use and renew every year under the NFR licensing that I am grateful for.
YKDC1 This virtual machine used to be on the 192.168.4.12 server but with how VMware shares resources I decided for best practice to move this virtual machine to the Annville location. This server hosts DC, DHCP, DNS, AD CS, IIS, and NPAS YKGE This only runs stablebit for GSuite and print services across my IPSec tunnels.
York
Host: 192.168.4.12 (R710) This physical server has been turned off at the time of writing to reduce consumption of power at my home.
Host:192.168.4.13 (R720) DMS(SeedDMS) A light-weight server that runs on a Ubuntu OS to host all scanned documents; I have decommissioned this for now as I evaluate others Bookstack I use this often to make up my own KB articles, a recipe section for my family, and many other articles Cacti This is used as an SNMP poller for all of my networking equipment… Primarily a mix of Ubiquiti and Cisco
Mayan EDMS Currently this is my document management system that runs through a turnkey system OpenVPN This is used to connect externally through a handheld device or laptop back into my environment. I only allow traffic to a certain subnet for security reasons UNMS This is a application provided by Ubiquiti to allow the management of its Edge product line. I do use this for my own purposes and to also manage a few external bridges that I’ve placed
WordPress I do not host this in a DMZ or externally. The WordPress VM is used for development reasons. VCSA VCSA is basically in short VMware vCenter which I use to communicate across all 3 of my physical hosts BlueIris Like before in Annville this system is used to record around the building both internally and externally RDS This is a terminal server that I use when I’m out and about. No outbound ports of course
SQL Since SQL is popular among Windows environments for ERP’s specifically… I’ve decided to run a Dev SQL environment to manage, maintain, and learn from. WSUS I use this to maintain Windows updates for all computers/servers while maintaining updates through scripts. YKDC2 The YKDC2 virtual server is a replica to YKDC1. It maintains default replication times. YKFS01 This is only a file server and serves both an S:\ (shared data) and H:\ (private data). YKGE19 Again this is another general server that hosts a lot of common items I don’t want on critical pieces like a file server, domain controller, or anything like that. Basically, to keep the risk and confusion away.
You may or may not know but “IT ” people are always curious as to what others are running inside their homelab and why… We all like to critique our skills and for most of us that happens at our homes an not at work. Whether it be hardware, networking, virtualization, or virtual machines. So, here’s what’s going on in my homelab for 2020.
