[{"data":1,"prerenderedAt":664},["ShallowReactive",2],{"wiki-/wiki/linux/ubuntu":3},{"id":4,"title":5,"body":6,"description":655,"extension":656,"meta":657,"navigation":658,"path":659,"section":660,"seo":661,"stem":662,"__hash__":663},"wiki/wiki/linux/ubuntu.md","Первые шаги на Ubuntu 22.04",{"type":7,"value":8,"toc":637},"minimark",[9,21,27,30,35,38,42,55,59,67,71,76,112,115,124,128,144,147,160,164,167,194,208,212,239,263,267,302,312,316,351,354,358,372,379,388,391,399,411,413,419,426,430,438,445,458,461,486,493,500,528,533,542,546,551,564,569,572,577,590,593,597,615,619,633],[10,11,12,16,17,20],"p",{},[13,14,15],"strong",{},"Время:"," 10 мин · ",[13,18,19],{},"Сложность:"," ★☆☆☆☆",[10,22,23,26],{},[13,24,25],{},"Подходит:"," ✓ Ubuntu 22.04",[28,29],"hr",{},[31,32,34],"h2",{"id":33},"краткое-описание","Краткое описание",[10,36,37],{},"После первого подключения к VPS вы попадаете в систему с root-доступом и минимальным набором пакетов. Эта инструкция приводит сервер в рабочее состояние: свежие пакеты, нужный часовой пояс, отдельный пользователь и базовая защита.",[31,39,41],{"id":40},"когда-пригодится","Когда пригодится",[43,44,45,49,52],"ul",{},[46,47,48],"li",{},"Вы только что создали VPS с Ubuntu 22.04",[46,50,51],{},"Вы пересоздаёте сервер с нуля",[46,53,54],{},"Вы хотите проверить, что базовая защита настроена правильно",[31,56,58],{"id":57},"что-понадобится","Что понадобится",[43,60,61,64],{},[46,62,63],{},"SSH-доступ к серверу под root",[46,65,66],{},"10 минут",[31,68,70],{"id":69},"пошаговая-инструкция","Пошаговая инструкция",[72,73,75],"h3",{"id":74},"_1-обновите-пакеты","1. Обновите пакеты",[77,78,83],"pre",{"className":79,"code":80,"language":81,"meta":82,"style":82},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","apt update && apt upgrade -y\n","bash","",[84,85,86],"code",{"__ignoreMap":82},[87,88,91,95,99,103,106,109],"span",{"class":89,"line":90},"line",1,[87,92,94],{"class":93},"sBMFI","apt",[87,96,98],{"class":97},"sfazB"," update",[87,100,102],{"class":101},"sMK4o"," &&",[87,104,105],{"class":93}," apt",[87,107,108],{"class":97}," upgrade",[87,110,111],{"class":97}," -y\n",[10,113,114],{},"Это подтянет актуальные версии всех установленных пакетов. После — перезагрузите, если обновилось ядро:",[77,116,118],{"className":79,"code":117,"language":81,"meta":82,"style":82},"reboot\n",[84,119,120],{"__ignoreMap":82},[87,121,122],{"class":89,"line":90},[87,123,117],{"class":93},[72,125,127],{"id":126},"_2-установите-часовой-пояс","2. Установите часовой пояс",[77,129,131],{"className":79,"code":130,"language":81,"meta":82,"style":82},"timedatectl set-timezone Europe/Moscow\n",[84,132,133],{"__ignoreMap":82},[87,134,135,138,141],{"class":89,"line":90},[87,136,137],{"class":93},"timedatectl",[87,139,140],{"class":97}," set-timezone",[87,142,143],{"class":97}," Europe/Moscow\n",[10,145,146],{},"Или через интерактивное меню:",[77,148,150],{"className":79,"code":149,"language":81,"meta":82,"style":82},"dpkg-reconfigure tzdata\n",[84,151,152],{"__ignoreMap":82},[87,153,154,157],{"class":89,"line":90},[87,155,156],{"class":93},"dpkg-reconfigure",[87,158,159],{"class":97}," tzdata\n",[72,161,163],{"id":162},"_3-создайте-пользователя-для-работы","3. Создайте пользователя для работы",[10,165,166],{},"Работать под root постоянно небезопасно. Создайте отдельного пользователя:",[77,168,170],{"className":79,"code":169,"language":81,"meta":82,"style":82},"adduser username\nusermod -aG sudo username\n",[84,171,172,180],{"__ignoreMap":82},[87,173,174,177],{"class":89,"line":90},[87,175,176],{"class":93},"adduser",[87,178,179],{"class":97}," username\n",[87,181,183,186,189,192],{"class":89,"line":182},2,[87,184,185],{"class":93},"usermod",[87,187,188],{"class":97}," -aG",[87,190,191],{"class":97}," sudo",[87,193,179],{"class":97},[10,195,196,197,200,201,204,205,207],{},"Замените ",[84,198,199],{},"username"," на нужное имя. После добавления в группу ",[84,202,203],{},"sudo"," пользователь сможет выполнять команды с повышенными привилегиями через ",[84,206,203],{},".",[72,209,211],{"id":210},"_4-установите-базовые-инструменты","4. Установите базовые инструменты",[77,213,215],{"className":79,"code":214,"language":81,"meta":82,"style":82},"apt install -y curl wget git htop\n",[84,216,217],{"__ignoreMap":82},[87,218,219,221,224,227,230,233,236],{"class":89,"line":90},[87,220,94],{"class":93},[87,222,223],{"class":97}," install",[87,225,226],{"class":97}," -y",[87,228,229],{"class":97}," curl",[87,231,232],{"class":97}," wget",[87,234,235],{"class":97}," git",[87,237,238],{"class":97}," htop\n",[43,240,241,251,257],{},[46,242,243,246,247,250],{},[84,244,245],{},"curl",", ",[84,248,249],{},"wget"," — загрузка файлов",[46,252,253,256],{},[84,254,255],{},"git"," — работа с репозиториями",[46,258,259,262],{},[84,260,261],{},"htop"," — мониторинг процессов",[72,264,266],{"id":265},"_5-настройте-файрвол","5. Настройте файрвол",[77,268,270],{"className":79,"code":269,"language":81,"meta":82,"style":82},"apt install -y ufw\nufw allow ssh\nufw enable\n",[84,271,272,283,294],{"__ignoreMap":82},[87,273,274,276,278,280],{"class":89,"line":90},[87,275,94],{"class":93},[87,277,223],{"class":97},[87,279,226],{"class":97},[87,281,282],{"class":97}," ufw\n",[87,284,285,288,291],{"class":89,"line":182},[87,286,287],{"class":93},"ufw",[87,289,290],{"class":97}," allow",[87,292,293],{"class":97}," ssh\n",[87,295,297,299],{"class":89,"line":296},3,[87,298,287],{"class":93},[87,300,301],{"class":97}," enable\n",[10,303,304,307,308,311],{},[84,305,306],{},"ufw allow ssh"," открывает порт 22. Выполните это до ",[84,309,310],{},"ufw enable"," — иначе потеряете SSH-доступ.",[72,313,315],{"id":314},"_6-установите-fail2ban","6. Установите Fail2Ban",[77,317,319],{"className":79,"code":318,"language":81,"meta":82,"style":82},"apt install -y fail2ban\nsystemctl enable fail2ban\nsystemctl start fail2ban\n",[84,320,321,332,342],{"__ignoreMap":82},[87,322,323,325,327,329],{"class":89,"line":90},[87,324,94],{"class":93},[87,326,223],{"class":97},[87,328,226],{"class":97},[87,330,331],{"class":97}," fail2ban\n",[87,333,334,337,340],{"class":89,"line":182},[87,335,336],{"class":93},"systemctl",[87,338,339],{"class":97}," enable",[87,341,331],{"class":97},[87,343,344,346,349],{"class":89,"line":296},[87,345,336],{"class":93},[87,347,348],{"class":97}," start",[87,350,331],{"class":97},[10,352,353],{},"Fail2Ban автоматически блокирует IP-адреса, с которых идут неудачные попытки входа.",[31,355,357],{"id":356},"проверка-результата","Проверка результата",[77,359,361],{"className":79,"code":360,"language":81,"meta":82,"style":82},"systemctl status ufw\n",[84,362,363],{"__ignoreMap":82},[87,364,365,367,370],{"class":89,"line":90},[87,366,336],{"class":93},[87,368,369],{"class":97}," status",[87,371,282],{"class":97},[10,373,374,375,378],{},"Вывод покажет ",[84,376,377],{},"active (exited)"," — это нормально для UFW.",[77,380,382],{"className":79,"code":381,"language":81,"meta":82,"style":82},"timedatectl\n",[84,383,384],{"__ignoreMap":82},[87,385,386],{"class":89,"line":90},[87,387,381],{"class":93},[10,389,390],{},"Пример вывода:",[77,392,397],{"className":393,"code":395,"language":396},[394],"language-text","               Local time: Пн 2024-01-15 12:34:56 MSK\n           Universal time: Пн 2024-01-15 09:34:56 UTC\n                 RTC time: Пн 2024-01-15 09:34:56\n                Time zone: Europe/Moscow (MSK, +0300)\n","text",[84,398,395],{"__ignoreMap":82},[77,400,402],{"className":79,"code":401,"language":81,"meta":82,"style":82},"id username\n",[84,403,404],{"__ignoreMap":82},[87,405,406,409],{"class":89,"line":90},[87,407,408],{"class":93},"id",[87,410,179],{"class":97},[10,412,390],{},[77,414,417],{"className":415,"code":416,"language":396},[394],"uid=1001(username) gid=1001(username) groups=1001(username),27(sudo)\n",[84,418,416],{"__ignoreMap":82},[10,420,421,422,425],{},"Группа ",[84,423,424],{},"27(sudo)"," подтверждает, что пользователь добавлен верно.",[31,427,429],{"id":428},"возможные-ошибки","Возможные ошибки",[10,431,432],{},[13,433,434,437],{},[84,435,436],{},"apt update"," зависает или не отвечает",[10,439,440,441,444],{},"Вероятно, проблема с DNS. Проверьте ",[84,442,443],{},"/etc/resolv.conf",":",[77,446,448],{"className":79,"code":447,"language":81,"meta":82,"style":82},"cat /etc/resolv.conf\n",[84,449,450],{"__ignoreMap":82},[87,451,452,455],{"class":89,"line":90},[87,453,454],{"class":93},"cat",[87,456,457],{"class":97}," /etc/resolv.conf\n",[10,459,460],{},"Если файл пустой или там неверный адрес — замените:",[77,462,464],{"className":79,"code":463,"language":81,"meta":82,"style":82},"echo \"nameserver 8.8.8.8\" > /etc/resolv.conf\n",[84,465,466],{"__ignoreMap":82},[87,467,468,472,475,478,481,484],{"class":89,"line":90},[87,469,471],{"class":470},"s2Zo4","echo",[87,473,474],{"class":101}," \"",[87,476,477],{"class":97},"nameserver 8.8.8.8",[87,479,480],{"class":101},"\"",[87,482,483],{"class":101}," >",[87,485,457],{"class":97},[10,487,488],{},[13,489,490,492],{},[84,491,203],{}," не работает для нового пользователя",[10,494,495,496,499],{},"После ",[84,497,498],{},"usermod -aG sudo username"," нужно перелогиниться под этим пользователем — группы применяются только при новом входе:",[77,501,503],{"className":79,"code":502,"language":81,"meta":82,"style":82},"su - username\nsudo whoami\n# root\n",[84,504,505,515,522],{"__ignoreMap":82},[87,506,507,510,513],{"class":89,"line":90},[87,508,509],{"class":93},"su",[87,511,512],{"class":97}," -",[87,514,179],{"class":97},[87,516,517,519],{"class":89,"line":182},[87,518,203],{"class":93},[87,520,521],{"class":97}," whoami\n",[87,523,524],{"class":89,"line":296},[87,525,527],{"class":526},"sHwdD","# root\n",[10,529,530],{},[13,531,532],{},"UFW блокирует SSH",[10,534,535,536,538,539,541],{},"Если вы забыли выполнить ",[84,537,306],{}," до ",[84,540,310],{}," и потеряли доступ — воспользуйтесь VNC-консолью в панели управления Cheesecake Cloud для восстановления доступа.",[31,543,545],{"id":544},"faq","FAQ",[10,547,548],{},[13,549,550],{},"Какое имя пользователя выбрать?",[10,552,553,554,246,557,246,560,563],{},"Любое латинское имя без пробелов. Избегайте ",[84,555,556],{},"admin",[84,558,559],{},"user",[84,561,562],{},"test"," — их перебирают боты.",[10,565,566],{},[13,567,568],{},"Зачем Fail2Ban, если есть UFW?",[10,570,571],{},"UFW фильтрует по портам, Fail2Ban — по поведению. Они решают разные задачи и хорошо работают вместе.",[10,573,574],{},[13,575,576],{},"Как войти под новым пользователем по SSH?",[77,578,580],{"className":79,"code":579,"language":81,"meta":82,"style":82},"ssh username@SERVER_IP\n",[84,581,582],{"__ignoreMap":82},[87,583,584,587],{"class":89,"line":90},[87,585,586],{"class":93},"ssh",[87,588,589],{"class":97}," username@SERVER_IP\n",[10,591,592],{},"После настройки SSH-ключей вход станет удобнее — см. статью по ссылке ниже.",[31,594,596],{"id":595},"полезные-ссылки","Полезные ссылки",[43,598,599,608],{},[46,600,601],{},[602,603,607],"a",{"href":604,"rel":605},"https://ubuntu.com/server/docs",[606],"nofollow","Документация Ubuntu Server",[46,609,610],{},[602,611,614],{"href":612,"rel":613},"https://launchpad.net/ufw",[606],"Страница пакета UFW",[31,616,618],{"id":617},"следующие-статьи","Следующие статьи",[43,620,621,627],{},[46,622,623],{},[602,624,626],{"href":625},"/wiki/linux/ssh","Настройка SSH-ключей",[46,628,629],{},[602,630,632],{"href":631},"/wiki/linux/firewall","Файрвол на Linux: обзор",[634,635,636],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":82,"searchDepth":182,"depth":182,"links":638},[639,640,641,642,650,651,652,653,654],{"id":33,"depth":182,"text":34},{"id":40,"depth":182,"text":41},{"id":57,"depth":182,"text":58},{"id":69,"depth":182,"text":70,"children":643},[644,645,646,647,648,649],{"id":74,"depth":296,"text":75},{"id":126,"depth":296,"text":127},{"id":162,"depth":296,"text":163},{"id":210,"depth":296,"text":211},{"id":265,"depth":296,"text":266},{"id":314,"depth":296,"text":315},{"id":356,"depth":182,"text":357},{"id":428,"depth":182,"text":429},{"id":544,"depth":182,"text":545},{"id":595,"depth":182,"text":596},{"id":617,"depth":182,"text":618},"Базовая настройка Ubuntu 22.04 после первого подключения к VPS.","md",{},true,"/wiki/linux/ubuntu","Linux",{"title":5,"description":655},"wiki/linux/ubuntu","Sm7Wm8yvIHNYT4on3RzfL0El3kKcda2y7QMGZU_gkvw",1788285517163]