Rocky Linux adjustments

 

systemctl stop kdump
systemctl disable kdump
vi /etc/default/grub (=no)
grub2-mkconfig --update-bls-cmdline -o /boot/grub2/grub.cfg
dnf install epel-release -y
dnf install htop -y
sudo dnf autoremove
sudo fallocate -l 2G /swapfile
sudo chmod 600 /swapfile
ls -lh /swapfile
sudo mkswap /swapfile
sudo swapon /swapfile
sudo cp /etc/fstab /etc/fstab.bak
echo "/swapfile none swap sw 0 0" | sudo tee -a /etc/fstab


sudo firewall-cmd --permanent --zone=public --add-port=8168/tcp

sudo firewall-cmd --permanent --zone=public --add-port=8122/tcp
sudo firewall-cmd --permanent --zone=public --add-port=22/tcp


sudo firewall-cmd --reload
sudo systemctl enable --now firewalld
sudo systemctl status firewalld


sudo dnf install fail2ban fail2ban-firewalld -y
sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
sudo vi jail.local
sudo systemctl start fail2ban
sudo systemctl enable fail2ban