<p>https://steemitimages.com/DQmfKyW1n5Wg4wrKCbbAEUH2b3rPXnhUkixE1WostqrGfiM/S94-00th.jpg</p>
<p>Will you read this Ubuntu Linux security tutorial to see how to setup a new <em>Ubuntu Linux</em> server because these simple steps can block most basic hacking attempts? If you are hoping to setup a witness server for Steem, I hope this guide will help show what to do immediately after getting access to the witness server but before installing Steem and following the steps listed at https://steemit.com/witness/@jerrybanfield/get-a-steem-witness-seed-online-today-with-these-ubuntu-linux-commands.</p>
<h2><strong>Why Secure an Ubuntu Linux Server Immediately?</strong></h2>
<p> <br />It's ridiculously easy for hackers to break into an unsecured server.</p>
<p>How easy is it?</p>
<p>I will give you the simplified steps right now.</p>
<p>Let's say you're hosting a game server. You've got a mobile app or a text game online that you're excited about. You hosted on an <a href="https://en.wikipedia.org/wiki/Ubuntu_(operating_system)"><em>Ubuntu Linux</em></a> server.</p>
<p>Someone comes in, doesn't like your game and all of a sudden says, <em>"I want to trash this game."</em></p>
<p>They then google some basic <a href="https://youtu.be/OcVE6rQ9_FU"><em>ethical hacking tutorials</em></a> and quickly find the <em>IP</em> of your server by tracking the connections while playing the game. The now amateur hacker with no previous experience then takes a few programs downloaded from watching maybe an hour of <em>ethical hacking tutorials</em> for free and starts using those programs to brute-force the password on your <em>Ubuntu Linux </em>server.</p>
<p>https://steemitimages.com/DQmUj2j8YP4ddNcf1r7NFrzNALFfNaF4Dozb3YQ8qsejKgV/S94-01.jpg</p>
<p>The hacker then gets in after you didn't change your <em>root</em> from the sign-in and didn't change the <em>password</em> from the one you got from the hosting company or just changed it to something different.</p>
<p>Now, the hacker is inside the server and unless you've set up ways to get notified about that, you have no idea. At this point, even with just not liking you and googling for information, within a few hours with no experience the hacker can now lock you out of your own game, and/or steal user data without you having any idea that's going on.</p>
<p>In the worst-case scenario, the hacker can post this on a list of hacked servers. This allows anyone anywhere in the world to go browse the sign-in information directly for a server. There are lists of things that have been cracked by hackers that are just out there where anyone can just go, then get the <em>password</em> and the <em>sign-in.</em></p>
<p>All of a sudden, you might have <em>50</em> or <em>100</em> people just signing into your server looking around until one person changes a password and locks you out.</p>
<p>What I will do in this tutorial is show you very quickly with no coding experience required, even if you just use the <em>Linux</em> server to do some application where you never need to access it or code anything for some reason, even if you're an absolute beginner in here, how to do some basic precautions, basic security measures to block at least the amateur hackers who are just getting a hold of some information from <em>Google.</em></p>
<p>Now, will these things stop the potentially intermediate hackers who've been working for years, the advanced hackers who really know what's going on?</p>
<p>Not necessarily!</p>
<p>They may slow them down a little bit and make things more interesting, but that just might get the excitement up and make the desire to crack it even higher. The good news is there aren't very many intermediate or advanced hackers in the world that have an interest in hacking everyday servers from users. There are a lot more lucrative targets to go after.</p>
<p>https://steemitimages.com/DQmZSFmjqa7gY3Fq8Mf4XgYvLymcxcYAzXEZA7BWL4RM2bE/S94-02.jpg</p>
<p>Therefore, the security measures we need are simply to block out the amateurs, the beginners, the <em>googlers</em> that go grab a few software programs and just are messing around for fun. Those hackers are the ones who are very likely to be trying to hack our servers. We want to block especially the amateurs out and what I will show you here are things that should lock out almost any amateur hacker from being able to get into your <em>Ubuntu Linux</em> server.</p>
<p>Now, there is one big problem with these things that I will show you too. They will make it easy to get locked out of our own servers. Even as I set this up and film the tutorial, I got locked out of my server for doing one little mistake. I could not sign into my server using any method even though I had all the passwords. I had to reformat my server and start over again. That was humbling and I've got great experience to share with you here because of that.</p>
<p>What I will give you at the very beginning is an easy tip to make sure when you're setting this up that you don't lock yourself out of your server. That's pretty much the worst-case scenario, at least for self-sabotage, to lock yourself out of your server. That's pretty newbish and that's why you want to set these things up as soon as you get a new server.</p>
<p>After I've gotten three new servers, I got a hold of my server and I just wanted to get everything up and running on it. I didn't want to sit there and take an hour to go through and put security on it.</p>
<p><em>"Oh, my God! I just want to get my Steem Witness running. I don't want to sit here and put all these security measures in place."</em></p>
<p>Well, these are essential because of how easy it is for an amateur hacker to just crack our servers. It's relatively easy to get an <em>IP.</em> It's relatively easy to get a program, then go with the <em>root</em> sign-in and brute force the <em>password. </em>If you don't have the things I'm showing you in place, it's very easy to end up with a compromised server.</p>
<p>What am I going to show you in here?</p>
<p>First, I'll give you the trick to make sure you stay signed in. What I'm doing is showing this in a <em>Putty</em> window. Now, a <em>Putty</em> window is what we use on <em>Windows.</em> You can use it on <em>Mac,</em> which also has native sign-in. I'm showing this on <em>Windows</em> and you can use this to sign in to an interface with the command line interface in the server.</p>
<p>Now, what can you do to avoid getting locked out of your server?</p>
<p>When you get that original <em>root@ipaddress</em> and <em>password</em> from your host or the <em>username@ipaddress</em> in your host, what you can do to avoid getting locked out of the server is to just keep that original <em>sign-in </em>window open on <em>Putty,</em> and then use <em>Putty</em> and do a duplicate <em>sign-in</em> every single time, and just the whole time you're setting these things up leave the window open with that original <em>root</em> <em>sign-in.</em></p>
<p>That way if you screw up like I did, lock yourself out of the server, in terms of being able to sign in again that original <em>root</em> sign-in, you can just alt-tab over to that, undo whatever you just did before, and then you can sign back in and keep working from there.</p>
<p>https://steemitimages.com/DQmZ6k2QwbLp9sQxG3TdAhkAE7ZVrUCVWKv1LKYAyh7hYY2/S94-03.jpg</p>
<p>Another thing you want to make sure, use some kind of a <em>password manager</em> because you want to have a really strong password that's not easily cracked. Although, with what I show you here you can go beyond password signings. You want to have a password manager to keep all these passwords safe and you want to backup the passwords because if you lose access to your password, you can also lose access to your server.</p>
<p>In this case, if you lost access to your <em>password,</em> the hacker could have access to your server, and then you need to get a hacker to help you get back in your own server.</p>
<p>Another quick tip on doing this is to just make sure every time after you do something, for example, after you put an <em>RSA key</em> in, that you can log back in and log out. Don't do all of these things at once, and then go back in at the end to find that you can't sign in, and then not even have an idea of how you went wrong at one point.</p>
<p>The best part is, I have very little actual <em>Ubuntu Linux</em> experience. I've only been using this for a few months, so you know that these aren't things that are very hard.
  In just a few months I have learned enough to teach at the beginner level just by reading guides like this.  My favorite series is by @krnel and starts at https://steemit.com/witness-category/@krnel/complete-witness-installation-guide.  I basically am doing a runthrough of these here.</p>
<p>If you've read this far, you might have been thinking that I've got a ton of experience and these things are over your head which I hope to change now!</p>
<p>These things are really simple to do. These are very easy even for an absolute beginner to do and it is essential to do them for the reasons I've already given you.</p>
<p>Thank you very much for starting this tutorial. I will go through each step with you. As for real live, I've set up this server that I'm actually inside right now. </p>
<h3><strong>12 Steps to secure an Ubuntu Linux server</strong></h3>
<h4> <br /><strong>Step one: Choosing a server host.</strong></h4>
<p><br />Unless we prefer to build onto our own machine, for maximum reliability, renting from a data center is ideal. In this section I show you the servers I use for greatest privacy in hosting.</p>
<p>Before we can even access our server we need to actually have a server to access. I think, especially for learning <em>Ubuntu Linux, </em>that it's very nice to have our own servers that we can play with and get to know. What I do is I rent servers out.</p>
<p>These are the specifications for my servers: my <em>witness,</em> my <em>seed node</em> and my <em>backup.</em></p>
<p>https://steemitimages.com/DQmVLLQWQELK8wpm92gMWqduZ2aLSgkcGzjKQaFEs4diMfs/S94-04.jpg</p>
<p>All of these are the same, and then I rent them from <a href="https://steemit.com/introduceyourself/@privex/we-are-privex-inc-we-accept-steem-protecting-your-privacy-in-the-cloud"><em>Privex</em></a>. This is what I use because the <em>CEO</em> of the company is a member of <em>Steem</em> named @someguy123 and runs his own <em>Witness</em> servers and several other <em>Witnesses</em> run through these servers as well.</p>
<p>https://steemitimages.com/DQmQHicW4ie4JPV1pjbaVQ3uEgvNvkwhhCquxtFyP2hb3TD/S94-05.jpg</p>
<p>It makes it easier because the hosting company is then used to the exact purpose the servers are used for. There are tons of different places to grab a <em>Linux</em> server. This is just what I use and you're welcome to use whatever you want.</p>
<p>I have my main servers located in the <em>USA</em> because that keeps things simple for me from a business perspective and a lot of the other <em>Witness</em> servers are in other countries. Then, I have a backup server in <em>Germany</em> because, if you want to have servers with failsafe such as a <em>backup</em>, then it's important to have them on different continents just in case there's one temporary thing such as a weather problem in the <em>US</em> or a riot in <em>Germany.</em> Whatever, you want to have your data centers in separate places.</p>
<p>I've got three servers and about <em>$500</em> a month in bills. I've got two servers in the <em>US </em>and one in <em>Germany.</em> These options are more expensive than what's possible. You can get cheaper servers with lower specifications to run a witness, the seed node or a backup.</p>
<p>I've chosen these servers because I want to set the same servers up and let them be able to run for years instead of going on the low end, and then continually upgrading. I think it's easier to just grab a server package that's good indefinitely.</p>
<p>At the same time, I've been in business six years, I'm grateful that five hundred a month is within my budget. I accept each of us have different budgets. If you're on the very smallest budget, you can set up <em>Ubuntu Linux </em>on your own computer at home and use your existing connection there.</p>
<p>Hosting options give us the chance to access our server. Once we've got our server wherever it is, whether it's on our computer or in another location, then we can access it.</p>
<p>That takes us directly to step two.<br /> </p>
<h4><strong>Step two: Access the server.</strong></h4>
<p> <br />In this section I'm going to show you how to access the <em>Ubuntu Linux</em> server with <em>Putty</em> and signing in to <em>root</em> or with a <em>username</em> for the first time.</p>
<p>Once we've got our server hosting we will get some kind of email like this that says, <em>"Thank you for using whatever host."</em></p>
<p>https://steemitimages.com/DQmUxMDaRkQMEPhYg1uXBz2Bzam7bLMtc6SF6heVgwchYDo/S94-06.jpg</p>
<p>We get an <em>IP</em> address, a username, and then a password. Often the <em>username </em>will be something like <em>"root"</em> and the <em>IP</em> address will be a standard format, and then there will be some sort of <em>password.</em></p>
<p>What we need to do then with that is to put this into a program that will allow us to then access, to sign into our server. What I use is <em>Putty</em> on <em>Windows, </em>and then here's what we do. I've explained all of this in <a href="https://steemit.com/witness/@jerrybanfield/get-a-steem-witness-seed-online-today-with-these-ubuntu-linux-commands">my <em>Witness</em> guide</a>.</p>
<p>https://steemitimages.com/DQmf7XsHw8e4SsVpCXcqWEBQWrMvRgDrKQFjjCmhfBy6Lvq/S94-07.jpg</p>
<p>We put in the hostname or <em>IP </em>address. If you are given <em>"root"</em> as the <em>username,</em> you put in <em>"root@"</em> and then you put in the <em>IP address</em> right after that. I will show you this after I'm signed in next.</p>
<p>If you are given a different username such as <em>Jerry,</em> your <em>username</em> would be <em>"Jerry@"</em> and then you put the <em>IP address.</em> Leave it on port <em>22</em> by default unless you are given different instructions to sign in. Then, click <em>"Open"</em> and once you have done that on <em>Putty,</em> this will open up the window where you can then start to get into the server.</p>
<p>It will look like a black interface usually, and then it will ask for the<em> password</em>. Once you've got into the interface like this, and then asked for the password, what you do is copy the <em>password</em> first, and then go back into the command line and you right click to paste it. All you need to do is right click and hit enter, and that pastes the password directly in.</p>
<p>https://steemitimages.com/DQmZbPdoABEegRexHntHqv6kBEgcsqPk5PNndsijA1NTi9h/S94-08.jpg</p>
<p>Now, for this particular step, I won't actually show you doing it because then I have to put my <em>IP address</em> and it's important for servers to keep that <em>IP address</em> private because if a hacker knows where the <em>IP address</em> is, it's essentially a sitting duck that's there to be worked on over and over again.</p>
<p>Therefore, keep that <em>IP address</em> secret. It's also best to keep all the other details of a server secret when possible such as the <em>username</em> and the <em>password.</em> What I will do is show you ways to upgrade <em>sign-in</em> so that a hacker can't just essentially brute-force the <em>password.</em></p>
<p>Brute forcing means to just try all kinds of different combinations and eventually get in. Always keep security in mind with setting up any kind of <em>Ubuntu Linux </em>server because there are lots of hackers all over the world that are trying to control as many servers as possible and will pick the low-hanging fruit that are essentially easy to just hack into and start using. Think security from the very beginning, which is what I'm going to go through next.<br /> </p>
<h4><strong>Step three: </strong><strong>How to download <em>Putty</em> for <em>Windows</em></strong><strong><em>.</em></strong></h4>
<p> <br /><em>Putty</em> is what I use on <em>Windows 10</em> to access the server and in this section I'm going to show you where to download it.</p>
<p>If you're on <em>Mac,</em> you can get <em>Putty</em> on <em>Mac</em> also, which is nice because then you can use the same private keys on both <em>Windows</em> and <em>Mac.</em></p>
<p>You can also sign directly in with the terminal on <em>Mac,</em> which can be a good way to get started. However, it's better to be able to upgrade security with things like <em>RSA keys,</em> which you might want to use <em>Putty</em> for or another program.</p>
<p>This is where I get <em>Putty</em> for <em>Windows 10:</em> <a href="https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html"><em>https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html</em></a></p>
<p>https://steemitimages.com/DQmUYYbpmB636kt29zPByXYZZDvcuxRW2pYaghJmnWtuFGh/S94-09.jpg</p>
<p>You can see the basic sign-in set up on <em>Putty</em> where you get that <em>username</em> and <em>IP address </em>that is provided by the host. Then, you see this page when you go to download <em>Putty.</em></p>
<p>You can grab the <em>"exe"</em> files, you can get the <em>Windows</em> installer if you want to do the <em>MSI.</em></p>
<p>I grabbed the <em>"putty-64bit-0.70-installer.msi"</em> file right here and that's how I got online.</p>
<p>https://steemitimages.com/DQmV6Da5ssi9hGCww5Hcba8EwGDWHZE4ictCLgjjSQxvgaS/S94-10.jpg</p>
<p>These are very easy installations and a lightweight program, easy to get started with and connect.<br /> </p>
<h4><strong>Step four: </strong><strong>Using a password manager.</strong></h4>
<p> <br />In this section I'm going to show you how to use a <em>password manager </em>like <a href="https://www.lastpass.com/"><em>LastPass</em></a> to keep the <em>root</em> and <em>username</em> passwords.</p>
<p>All right, we are signed in to our server now. As you can see it's set up with <em>root@jerrybanfieldwitness2.</em></p>
<p>This is good because it's not showing my<em> IP</em> in this tutorial here.</p>
<p>https://steemitimages.com/DQmSwsnziRm3yEM6xuVU6K3wrhT6Pha7DQwrga9s1bV1LA3/S94-11.jpg</p>
<p>Now, the first action I need to do is change the <em>password</em> because my server host had the password and anyone interacting under the server host has the server <em>password</em> too.</p>
<p>It's a good idea to immediately reset or update the server password to something more long and secure because if someone else gets this server <em>password</em> and we don't take additional security as I'm going to show, then someone can sign straight into our server and do whatever he wants and we might not even realize that's happening until it's too late.</p>
<p>Now, if we reset the <em>password,</em> and don't keep good track of it or put it somewhere else, we might immediately lock ourselves out of our server. We do not want that to happen.</p>
<p>What I recommend is using some kind of <em>password</em> manager like <a href="https://www.lastpass.com/"><em>LastPass</em></a><em>.</em></p>
<p><em>https://steemitimages.com/DQmUKtgdZyyjZnMDaADLfWio8wH7BcQUYQaruvTZEzquXje/S94-12.jpg</em></p>
<p><em>LastPass</em> is an awesome <em>password manager</em> that I use because it allows me to keep track of all passwords everywhere. It's really nice because <em>LastPass</em> generates passwords and saves passwords. I've then got access to my passwords whenever I can sign into my <em>LastPass</em> account.</p>
<p>Now, the one problem with this is essentially putting all our eggs in one basket. If we have a <em>LastPass</em> <em>master</em> <em>password</em> that gets cracked or something happens to <em>LastPass,</em> it's like a fire sale, all of our passwords everywhere are wide open.</p>
<p>Therefore, using a <em>password manager</em> is a great idea. However, make sure to have a secure <em>master password </em>that is only available by memory or in a secure offline location because this unlocks the vault essentially to our entire lives.</p>
<p>This is a great thing to use when generating a password because we can generate crazy long <em>passwords</em> then. I can have a <em>20, 30, 40, 50</em> or<em> 60</em> character long crazy password for my <em>Linux</em> server that will then help make it ultra-secure, at least against password brute-force type attacks.</p>
<p>Therefore, I will generate a password for my server to update it, and then I will put that new password in with the password command.<br /> </p>
<h4><strong>Step five: Changing the password with <em>passwd.</em></strong></h4>
<p> <br />Now, it's time to actually update the <em>password</em> and that's what I'm going to show now. If doing it incorrectly, if putting in mismatching passwords this error will appear right here.</p>
<p>https://steemitimages.com/DQmWXPTgQyTuWGMDMVwKtv27Xk6DcaALv2ZkToZPfrMLfQ5/S94-12b.jpg</p>
<p>What we can do is <em>CTRL + L</em> to start fresh and I'll show you how to do it properly.</p>
<p>What I'm going to do is put <em>"passwd"</em> in to change the password for the <em>root</em> or the main system on this server. The old password will no longer work as soon as I do this correctly.</p>
<p>https://steemitimages.com/DQmRvJco6nuHpeX8ixG1XQw4eWb1wJ3cfoc2p7deJpFuy65/S94-13.jpg</p>
<p>I'm going to do this two different ways. I generated the password in <em>LastPass,</em> therefore what I'm going to do first is copy the password with <em>CTRL + C</em> out of my <em>Notepad</em> in another window.</p>
<p>I'm going to then click over here and right-click the <em>password</em> in. I will then hit the <em>enter</em> key and paste that first password in.</p>
<p>https://steemitimages.com/DQmXSoXoGSgJzV7EoiY4xBVJ3fE1qzy4Qe1cn9D56PUWow1/S94-13b.jpg</p>
<p>Then next I will grab the <em>password</em> directly out of my <em>password manager, </em>and then go over here and paste it in. This way I've got the <em>password</em> entered from two different sources to make sure there's not something wrong with my <em>password</em>.</p>
<p>https://steemitimages.com/DQmdSSyrgsXr7j5RqXV692QpLtbWLT8CAuanYNsnjVtcxyr/S94-14.jpg</p>
<p>Now, this shows that I've successfully updated the <em>password.</em></p>
<p>https://steemitimages.com/DQmXtk6Z4VjPU6nsS26UJix3RgqjSYHjXWpqRN3qaE7Kxrn/S94-15.jpg</p>
<p>This means that the old <em>password</em> now is invalid and only this new <em>password</em> will work to sign-in.</p>
<p>What I do to verify this, I open <em>Putty</em> back up, I load back in and sign in with this new <em>password</em> to make sure I did everything correctly.</p>
<p>The easy way to do this is just to type <em>"logout"</em> which will close the session window.</p>
<p>https://steemitimages.com/DQmRzizUQpGhZUAXwbEQkhf8f2AcTUaTnVrY9UFrjUzdGDK/S94-16.jpg</p>
<p>This way I verify that I'm actually going to be able to continue using the server. I wouldn't want to go through and set all this up and discover I didn't copy the password correctly, and then as soon as I go to sign back into my server I'm locked out.</p>
<p>What I do is I log in and log out a lot to make sure every change I'm doing is done correctly and therefore I don't risk setting the whole server up, and then being locked out of it. That's the trick with security, to get great security, but not to do it in such a way that it's so secure you lock yourself out of it.</p>
<p>Now that I've signed in and out, I've proven that my new <em>password</em> has worked.</p>
<p>The next step is to get a different user.<br /> </p>
<h4><strong>Step six: Adding a new user with <em>adduser</em>.</strong></h4>
<p> <br />In this section, I'm going to show you how to create a new user.</p>
<p>We don't want to be fooling around as the <em>root user </em>because that's the main system level access. We want to set up our own individual user.</p>
<p><a href="https://steemit.com/witness-category/@krnel/setting-up-a-linux-vps-securely-pt-1-join-me-on-my-journey-to-become-a-witness"><em>Krnel's guide</em></a> on <em>Steemit</em> explains this very well.</p>
<p>https://steemitimages.com/DQmVhLFy9aYXFQJqY8ALufkHzKCfxXnNjgcDKVFmhpspGVd/S94-17.jpg</p>
<p>It says that you want to create a user for yourself because it's important for security. You don't want to be using the <em>root</em> unless you really know what you're doing. I'm going to take a leap of faith and say that if you're reading this you probably don't fall into the <em>really-know-what-you're-doing</em> category, because I am a total beginner at this myself relative to someone who knows what they're doing with this.</p>
<p>It can be easier to learn from a beginner if you're a beginner also in my experience, which is why I've taken the time to make this. Therefore, you want to follow the advice of more experienced users.</p>
<p>You want to set up and become a <em>superuser</em> and to create a <em>new user.</em> Now, this is the ideal way to essentially change the <em>username</em> to the highest permission.</p>
<p>https://steemitimages.com/DQmRSwrWUeKUGJxES5zZpj5emhTxUS9fqLxzh4eFumXrHWH/S94-18.jpg</p>
<p>The easiest way to set up a <em>new user</em> is just to use this <em>"adduser"</em> command.</p>
<p>https://steemitimages.com/DQmUZbXvdG12h3nTxMgrmdF1SYuYwQCCB8m1K3BhCCWmEiA/S94-19.jpg</p>
<p>I'm going to name the user <em>Jerry</em> and as soon as I hit <em>"adduser jerry"</em> I have the user created.</p>
<p>https://steemitimages.com/DQmaSbGYJDbYsZXknzXKgFM3upAjC7BdpqLR6e6Mipx45Ai/S94-20.jpg</p>
<p>I have to put a new <em>UNIX password</em> in for this also.</p>
<p>I'm going to need a <em>password</em> for user <em>"Jerry"</em> because <em>Jerry</em> will now be able to sign in directly via <em>IP address</em> with <em>Jerry's</em> own password. Now, I need to go through and make a <em>password</em> just for <em>Jerry,</em> and then there will be a separate <em>root password</em> that handles <em>root.</em></p>
<p>This is nice because then it's another layer of security, but it's another layer of complexity as well. Now, I will generate the new <em>UNIX password,</em> and then what I will need to do is before I log out, give myself sufficient permissions to be able to act, to run commands as <em>root</em> from being signed in as the <em>"Jerry"</em> user.</p>
<p>This is similar on a <em>Windows</em> or <em>Mac</em> machine, to making your own <em>user account</em> versus running as <em>the system</em> somehow, which is not available generally on <em>Windows</em> or <em>Mac, </em>you only sign in as a user.</p>
<p>I will set my <em>password</em> now, and then I will continue with you.</p>
<p>After putting the <em>password</em> in, it provides options to set the <em>name, room, work phone, home phone </em>and<em> other.</em> These aren't strictly necessary and you can leave all these blank. I just put in my full name and I left these other things blank, and then hit correct.</p>
<p>https://steemitimages.com/DQmfHNrVDgyvDyffHoSEk2VzTsNhKgeyxkqBXJxW4iu86uJ/S94-21.jpg</p>
<p>Now, the next key thing is to test signing into the server as this user instead of signing in as <em>root.</em> At this point, we will be able to sign in to our server if we've got a <em>root.</em> Also, if that was how we were given access to the server, we'll be able to sign in with both our <em>username</em> and <em>root.</em></p>
<p>We want to be able to sign in with both of these to make sure they work and that we can access the server either way. What I will do next is log out.</p>
<p>https://steemitimages.com/DQmS8KYitLzWVttxzgrvQEmLjufhh6AoafDpACWQJVLuwQ8/S94-22.jpg</p>
<p>I will switch the username in <em>Putty</em> from <em>root</em> to <em>Jerry</em> and verify that I can sign into my server with <em>Jerry</em> as the username. Then, when I can do that, I'm ready to take the next step.<br /><br /></p>
<h4><strong>Step seven: Signing in with the added user.</strong></h4>
<p> <br />Now, that I've successfully signed in with my new <em>username</em> I can verify that this works and I need to give myself the correct permissions.</p>
<p>Since I know that I can sign in with my <em>username</em> I now just want to sign in with my <em>username.</em> I don't want to bother signing in any other way at this point. What I want to do is then follow up by giving myself the highest level permissions from <em>root,</em> and then I also want to disable the <em>root</em> login because if the <em>root</em> login is open, anyone can essentially try to brute-force the route login, but if you don't know what the <em>username</em> to sign in is, that makes it significantly more difficult.</p>
<p>https://steemitimages.com/DQmeWR9aaxZ5Dg4Sdoxwk8XyaZUAtCvFetNvGkpJUoqtA35/S94-23.jpg</p>
<p>What I want to do is to log back out again, and then I'll log back in as the <em>root</em> user and give myself, on the user account <em>Jerry,</em> permission to act at the highest level.<br /><br /></p>
<h4><strong>Step eight: <em>Usermod</em> to give the user <em>sudo</em> or <em>root</em> privileges.</strong></h4>
<p> <br />Now, that I'm signed back in as the <em>root</em> and you can see the <em>root@</em> over here, what I want to do is give myself on the <em>"Jerry"</em> account full permission to do anything.</p>
<p>https://steemitimages.com/DQmViGys8iCxLKF3SiuMwUG2Tpevqyr1N3PUjXMVawPtNvK/S94-24.jpg</p>
<p>Right now I have essentially just basic permissions and I can hardly do anything as a new user. What I want to do is use this exact command, <em>"usermod -aG sudo"</em> and then my name to modify this.</p>
<p>https://steemitimages.com/DQmcNYfycxRaaQXFAMDXJYTBG35S43ijLBFuFaSUHiENnPp/S94-25.jpg</p>
<p>This will create a new <em>user group</em> and give every user in that group <em>root</em> level permission. What I'll just do over here is paste this command in and change my name to <em>Jerry</em> and now the command is <em>"usermod -aG sudo jerry"</em> which will give me the ability to do everything. I hit enter on this.</p>
<p>https://steemitimages.com/DQmf7y1EyGtuWpjV7WsuRFmXJMynoKZXAnxc8wK9hpCMYPi/S94-26.jpg</p>
<p>Now, I've created a new group of users here, and then I now have full permissions on this new user level as a higher-level user.<br /> </p>
<h4><strong>Step nine: Verify <em>sudo</em> access on user.</strong></h4>
<p> <br />Before we log off, how do we check that we set our user permissions correctly?</p>
<p>The easiest set of commands to do this is <em>"sudo -l -U"</em> and then put the username in. If I hit the <em>"sudo -l -U jerry"</em> command, this essentially just tells me what level of access I've given myself.</p>
<p>https://steemitimages.com/DQmXCoBqTGXHiaCNPsy8C8i5bd8hH8JSLNuJEjW2jXw1Aab/S94-27.jpg</p>
<p>This shows that I can then run all commands on the server, and that's what we want to see before we fool around and do the next step I will show you in disabling the <em>root</em> command.</p>
<p>This means that when I'm signed in as <em>Jerry</em> I can type <em>"sudo"</em> to run something as needed at the<em> root level.</em> All I need to do now is log back out and sign in as <em>Jerry,</em> and then I can continue to the next important step of security, which is disabling the <em>root login</em> so that only <em>Jerry</em> can log in.</p>
<p>https://steemitimages.com/DQmcpetDaPdzMgtjTCN2znNhA4vvgocq8rNH871gFA5HUcM/S94-28.jpg</p>
<p>You can see that you would only want to do this if you verified you've got the highest level permissions on the server.<br /> </p>
<h4><strong>Step ten: Key basic Linux commands <em>cd, pwd </em>and <em>ls.</em></strong></h4>
<p> <br />Now, that we've got our user created and given the proper permissions, it's time to switch to the <em>root directory</em> with a few basic commands and get to work.</p>
<p>I will show you a couple of basic commands here that are incredibly helpful. One is called <em>"cd"</em> which is just <em>change directory,</em> and then this <em>slash</em> goes to the main one.</p>
<p>https://steemitimages.com/DQmUbdSq6M4QWX2UnFG2ciUDBgUWLA8M7aRgnSoXNYsYWUx/S94-29.jpg</p>
<p>In the command-line interface in <em>Ubuntu Linux,</em> we want to make sure we essentially know where we're at and we control where we're at. You could think of <em>change directory</em> in the <em>Windows Explorer</em> interface as moving around into various folders.</p>
<p>How do we know where we're at?</p>
<p>What we can do is do <em>"pwd"</em> which stands for <em>print working directory</em> and that shows us we are at the <em>root level.</em></p>
<p>https://steemitimages.com/DQmdJXmJa5wjAfkF7FomA8ZQQri1e13WwdHonZCPGeiD5rG/S94-30.jpg</p>
<p>For example, if I change to <em>"home/jerry"</em> and then I <em>print working directory,</em> now it shows that I'm in <em>"home/jerry"</em>.</p>
<p>https://steemitimages.com/DQmY6TtEN4EvKecyFmKSa3rf2Xn3e2rkhfNR27N18nsiaJq/S94-31.jpg</p>
<p>Now, I can't change to just <em>"home"</em> because that would essentially change me to the <em>"home/jerry/home"</em> folder, but if I put <em>"cd"</em> that takes me to the <em>root,</em> and then <em>"home".</em> That will take me over there, and then if I hit <em>"cd" </em>again, this will take me back to the basics.</p>
<p>https://steemitimages.com/DQmVEELq31DHPYf5K9Nsv75iGDMVukjb9RhKXdLbNYh1CaW/S94-32.jpg</p>
<p>If I use <em>print working directory,</em> I can locate where I'm at.</p>
<p>One of the other most helpful commands is called <em>"ls"</em>. I can essentially do <em>CTRL+ L</em> to clear the screen and I can hit<em> "ls"</em> to show it up here. This lists all the things that are in the folder I'm using. I can now essentially see what my choices are as to where I want to navigate.</p>
<p>https://steemitimages.com/DQmZgPAk5VjVuceL8ejmkUKwxQ7Q7m3wn4TdY69TMfm4vBv/S94-33.jpg</p>
<p>This helps me <em>"cd"</em> into the right place. If you're having errors and issues that seem unexpected when using <em>Ubuntu Linux</em> as a beginner, one of the most basic things is that you're in the wrong directory.</p>
<p>I've installed things in the wrong directory getting started. I've tried to run things and been in the wrong directory. The very most basic thing to do, is to use <em>"pwd" </em>and <em>"ls"</em> to make sure that you're in the right directory.</p>
<p>https://steemitimages.com/DQmRG7KfhnREruZhWFpvLG5Y2XRDizD2Sqjqm4Wps3LwxuY/S94-34.jpg</p>
<p>What we're going to do to install a <em>Steem Witness</em> down here, we're going to eventually create a directory in the home user. In order to navigate there I'll need to change to <em>"cd home/jerry"</em> and then I can <em>"ls"</em> and see that there's nothing in this directory.</p>
<p>https://steemitimages.com/DQmZoazrLRgVRyUY21ouLPrG9dzbhLCNV1oMwpnwxcvi6ka/S94-35.jpg</p>
<p>I will end up putting in <em>home/jerry</em> the <em>Steem Docker,</em> which is where my witness will run. Now, once I'm in that directory I can run and execute all these commands, but if I'm not in that directory those same commands won't do anything.</p>
<p>Therefore, one of the basic things is just to get in the habit of knowing exactly, which directory we are in <em>Ubuntu Linux.</em></p>
<p>I'm in <em>home/jerry </em>now and if I get lost or forget, I can just do <em>"pwd"</em>. I can hit <em>"ls"</em> to see what's there and if I need to go back to the very top I just hit <em>"cd"</em> and that changes me to the <em>root level </em>where I can then list and go back to all my options.</p>
<p>https://steemitimages.com/DQmQ51GMKz7roBTmVbTis47MJVz9UtpSeiMuytwC275oL5t/S94-36.jpg</p>
<p>Now, if I want to just go back to my basic user directory from the top, I can always hit <em>"cd /home/jerry"</em> from anywhere, and then <em>"pwd"</em> to see where I'm at.</p>
<p>https://steemitimages.com/DQmQwYKYZVaN8Hdzn3XwvsGkMUi9gdF9fvM1c9BEF5hnwYh/S94-37.jpg</p>
<p>Any directory I'm in, I can do <em>"/home/Jerry"</em> but if I <em>"cd"</em> without putting that <em>"/home"</em> in, I'll get an error because as I list there's nothing actually in here.</p>
<p>The only way I can do that is if I change into the <em>root directory,</em> and then I can <em>"cd"</em> straight from <em>"home/jerry"</em> because I'm actually in there. If I<em> "cd"</em> back over here and list, I'm back in the main area.</p>
<p>https://steemitimages.com/DQmYKCWruaPtocByzuHhRqoz6YAapppBYPZVvZFXurXWAxB/S94-38.jpg</p>
<p>Now, this is incredibly quick to learn. You can see how much faster I am with these commands. I knew almost none of these just a month or so ago. This is quick and easy to learn, you just keep <em>googling</em> the commands.</p>
<p>These are the first essential commands to learn and once we've got these essential commands, then it's easy to start the process next of getting our server ready to take some more serious security precautions and steps on it, and then to start installing and running something that we actually want to use our server for.<br /><br /></p>
<h4><strong>Step eleven: Updating with <em>apt-get update.</em></strong></h4>
<p> <br />Now that we know basic commands the next step is to start using them.</p>
<p>What I'm going to show next requires a text editor. Therefore, I need to actually have a text editor on the system.</p>
<p>When I first started, this took me about <em>30 </em>minutes or an hour or more to figure out why the text editor wasn't installed by default.</p>
<p>In order to get the text editor installed by default, I have to run the update. In order to do that I want to change directory, so I switch directory to the <em>root</em> to get to work.</p>
<p>https://steemitimages.com/DQmQdQUK7Waee3xu897MUMPaNxjPZ3J5T22rQbV5BsTXdbA/S94-39.jpg</p>
<p>Then the next thing I want to do is download all the updates.</p>
<p>https://steemitimages.com/DQmZtmtFtcxyP9s9yiNjUPXdvUSvGoyejcqH4tKkj4D8B2T/S94-40.jpg</p>
<p>When basic servers are installed they often don't have all the updates. What I'm going to do now is run these series of commands, which will update all the apps on my server.</p>
<p>I'm just going to copy and paste this exact command<em> "sudo apt-get update"</em> and hit enter.</p>
<p>https://steemitimages.com/DQmdbsziYVt3yCbU4QNNrZEwybqxi95YT1m7RerRUmQLVJ2/S94-41.jpg</p>
<p>Now, what I need to do is put my <em>root password</em> in, and then as soon as I put my <em>root password </em>in, this then will allow all of these commands to run and all the apps to update.</p>
<p>As soon as I hit the <em>password,</em> then immediately I started getting all of these get commands. Get this, get that, and then all of these commands run based on, I think, where my server is located.</p>
<p>https://steemitimages.com/DQmesY36651K9JHBWmmVaRLfvoZZWzWrGBzhnjEBPznMLpB/S94-42.jpg</p>
<p>All of these are running from <em>Germany</em> since this server is in <em>Germany.</em></p>
<p>https://steemitimages.com/DQmNXbBp9KPfhvXFDiRhMupa9ciJ3mDSEvaN8RSiubSpZPH/S94-43.jpg</p>
<p>It pulled all these updates, so now that I've got all these updates added, I'm ready for the next step.<br /> </p>
<h4><strong>Step twelve: Installing the <em>Nano</em> text editor.</strong></h4>
<p> <br />In this step I'm going to show you how to install <em>Nano</em>, which is the text editor.</p>
<p>https://steemitimages.com/DQmWyV2Kkuqvw8zxaLbhTsrQLow4SVpeLGU9dNQdrd1DuZK/S94-44.jpg</p>
<p>Now, this wouldn't have worked, I believe, if it was like my last server. This wouldn't have worked before running the updates, but now that I've got the updates, all I have to do is put <em>"sudo app-get install nano"</em> and bam!</p>
<p>https://steemitimages.com/DQmPnPWx2pC3X7YnuVP7XvnUaAvNtGRKSwvY6VfU1uYN7P5/S94-45.jpg</p>
<p>It puts the <em>Nano</em> text editor on and it says everything is already on the newest version. I didn't even have to run that. However, if you don't have that specifically, that might help for you. Mine, it looks like it was put straight in there with that last one. I've got the <em>Nano</em> text editor ready to go.</p>
<p>In order to continue from here, we want to have some text editor so that we can edit text files. <em>Nano</em> is kind of like a <em>Notepad</em> essentially for <em>Ubuntu Linux.</em></p>
<p>Now that I've got <em>Nano</em> ready to go I can start editing some settings and disable the <em>root login.<br /></em> </p>
<h3><strong>Final words</strong></h3>
<p> <br />Thank you very much for reading these <em>12 Steps to secure an Ubuntu Linux</em> server, which I hope has been helpful. This security tutorial is not completed as yet and in the next blog post I will show you seven more steps plus how a little mistake I made locked me out of my server. If you have suggestions to make it better, would you please share them in the comments?</p>
<p>I love you.  You're awesome.  Thank you for reading this blog post, which was originally filmed as the video below.</p>
<p>https://www.youtube.com/watch?v=X_VP10X2TEs</p>
<p>I hope you've enjoyed this tutorial and I'll see you again in another video or another blog post on <em>Steemit.</em></p>
<p>If you found this post helpful on <em>Steemit,</em> would you please <em>upvote</em> it and follow me because you will then be able to see more posts like this in your home feed?</p>
<p>Love,</p>
<p>Jerry Banfield with edits by <a href="https://steemit.com/@gmichelbkk">@gmichelbkk</a> on the transcript from <a href="https://steemit.com/@deniskj">@deniskj</a></p>
<p><strong>Stay updated via email?</strong></p>
<ul>
<li>Join at <a href="http://jerry.tips/steemposts">http://jerry.tips/steemposts</a> to receive an email with every new post on Steem or</li>
<li>Join at <a href="http://jerry.tips/emaillist1017">http://jerry.tips/emaillist1017</a> to get an email once a week with highlights!</li>
</ul>
<p><strong>Shared on:</strong></p>
<ul>
<li><a href="https://www.facebook.com/jbanfield">Facebook page with 2,244,744 likes.</a></li>
<li><a href="https://www.youtube.com/jerrybanfield">YouTube channel with 208,173 subscribers.</a></li>
<li><a href="https://twitter.com/JerryBanfield">Twitter to 104,788 followers.</a></li>
</ul>
<p>PS: Would you please make a vote for jerrybanfield as a witness or set jerrybanfield as a proxy to handle all witness votes at <a href="https://steemit.com/~witnesses">https://steemit.com/~witnesses</a> because <a href="https://steemit.com/steemads/@jerrybanfield/giving-100-of-my-witness-rewards-to-advertising-steem">100% of the rewards I receive are spent advertising Steem</a>? Thank you to the 1617 accounts voting for me as a witness, the 718M VESTS assigned from users trusting me to make all witness votes by setting me as proxy, and <a href="https://steemit.com/@followbtcnews">@followbtcnews</a> for making these .gif images!</p>
<p><a href="https://steemit.com/~witnesses"> <img src="https://steemitimages.com/DQmexJCuwboCcRCB2gsHTk1gbaA8rT6y2vhgzbtHMtVaXRm/vote%20jerry%20banfield%20witness%20rank%2029.gif" alt="Vote Jerry Banfield Steem Witness" width="100" height="100" border="0" /> </a></p>
<h3>Or</h3>
<p><a href="https://steemit.com/~witnesses"> <img src="https://steemitimages.com/0x0/https://i.gyazo.com/e41b5378209532d6b282543f780b0278.gif" alt="Jerry Banfield Steem Proxy" width="100" height="100" border="0" /> </a></p>