| Configure network clients to use either a dynamically or statically assigned address |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/getting-started-with-nmcli_configuring-and-managing-networking |
| Work with both IPv4 and IPv6 |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/getting-started-with-nmcli_configuring-and-managing-networking |
| Manage Firewall Services |
|
|
| Configure system firewalls to allow access to specific services or ports |
Use firewalld Module |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/securing_networks/using-and-configuring-firewalld_securing-networks#controlling-ports-using-cli_using-and-configuring-firewalld |
| Configure system firewalls to allow or deny access from only specific network domains or IP subnets |
Use firewalld with Rich Rules |
firewalld.richlanguage(5) |
| Manage SELinux |
|
|
| Configure SELinux booleans for a given service |
Use SELinux Role |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/using_selinux/configuring-selinux-for-applications-and-services-with-non-standard-configurations_using-selinux#adjusting-the-policy-for-sharing-nfs-and-cifs-volumes-using-selinux-booleans_configuring-selinux-for-applications-and-services-with-non-standard-configurations |
| Configure a file or directory's SELinux context |
Use SELinux Role |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/using_selinux/configuring-selinux-for-applications-and-services-with-non-standard-configurations_using-selinux#customizing-the-selinux-policy-for-the-apache-http-server-in-a-non-standard-configuration_configuring-selinux-for-applications-and-services-with-non-standard-configurations |
| Manage system processes |
|
|
| Configure system processes to start on boot |
Use systemd module |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_basic_system_settings/introduction-to-systemd_configuring-basic-system-settings |
| Prevent a system process from starting |
Use systemd module |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system_administrators_guide/chap-managing_services_with_systemd#sect-Managing_Services_with_systemd-Services-Disable |
| Manage Link Aggregation |
|
|
| Create a network team interface consisting of two network interfaces |
Use networking role |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/configuring-network-teaming_configuring-and-managing-networking |
| Make a network team interface persistent across boots |
Use networking role |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/configuring-network-teaming_configuring-and-managing-networking |
| Assign a network address to a network team interface |
Use networking role |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/configuring-network-teaming_configuring-and-managing-networking |
| Configure a teamd runner |
Use networking role |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/configuring-network-teaming_configuring-and-managing-networking |
| Manage DNS |
|
|
| Configure a caching nameserver |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/assembly_configuring-and-managing-a-bind-dns-server_configuring-and-managing-networking |
| Configure an authoritative nameserver using a partially completed zone file |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/assembly_configuring-and-managing-a-bind-dns-server_configuring-and-managing-networking |
| Configure forward and reverse lookups for both IPv4 and IPv6 addresses |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/assembly_configuring-and-managing-a-bind-dns-server_configuring-and-managing-networking |
| Manage DHCP |
|
|
| Configure address assignment within a specified address range |
Be sure to install ravd |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/providing-dhcp-services_configuring-and-managing-networking#setting-up-the-dhcp-service-for-subnets-directly-connected-to-the-dhcp-server_providing-dhcp-services_ipv4 |
| Configure a specific address assignment to a designated host |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/providing-dhcp-services_configuring-and-managing-networking#assigning-a-static-address-to-a-host-using-dhcp_providing-dhcp-services |
| Configure address assignments for both IPv4 and IPv6 |
Use networking role |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/providing-dhcp-services_configuring-and-managing-networking#assigning-a-static-address-to-a-host-using-dhcp_providing-dhcp-services_ipv6 |
| Manage printers |
|
|
| Create and manage a printer queue for a network printer |
May need to setup Samba Server |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/configuring-printing_deploying-different-types-of-servers |
| Manage existing printer queues |
|
https://access.redhat.com/solutions/21432 |
| Manage Email services |
|
|
| Configure an email server to forward email to an outbound mail relay |
Use Postfix role |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_mail-transport-agent_deploying-different-types-of-servers#con_postfix_assembly_mail-transport-agent |
| Use mail clients to read or send email |
Need to configure sending mail |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_installing-and-configuring-dovecot-for-imap-and-pop3_deploying-different-types-of-servers |
| Manage a MariaDB database server |
|
|
| Install and configure a basic MariaDB service |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/using-databases#using-mariadb |
| Restrict access to a MariaDB server to specific network addresses |
Grant Permissions - also may refer to limit to interface address |
|
| Create a MariaDB database |
ansible mysql_db module |
https://mariadb.com/kb/en/create-database/ |
| Manage MariaDB database users and access rights |
ansible mysql_user module |
https://mariadb.com/kb/en/create-user/ |
| Add records to an existing MariaDB database |
ansible mysql_query module not available |
https://mariadb.com/kb/en/insert/ |
| Issue simple SQL queries against a MariaDB database |
ansible mysql_query module not available |
https://mariadb.com/kb/en/select/ |
| Create a MariaDB backup |
ansible mysql_db module |
https://mariadb.com/kb/en/mysqldump/ |
| Import a MariaDB database from a backup |
ansible mysql_db module |
|
| Manage HTTPD web access |
|
|
| Install and configure Apache |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/setting-apache-http-server_deploying-different-types-of-servers |
| Install and configure NGINX |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/setting-up-and-configuring-nginx_deploying-different-types-of-servers |
| Configure an alternate document root |
Remember selinux permissions |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/setting-apache-http-server_deploying-different-types-of-servers |
| Configure an alternate web access port |
Remember selinux permissions |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/setting-apache-http-server_deploying-different-types-of-servers |
| Configure name-based virtual hosts |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/setting-apache-http-server_deploying-different-types-of-servers#configuring-apache-name-based-virtual-hosts_setting-apache-http-server |
| Configure a secure web server (HTTPS) |
Use Certificate Role |
|
| Provide a static cache to speed up HTTP response time |
Probably squid |
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/configuring-the-squid-caching-proxy-server_deploying-different-types-of-servers |
| Configure an HTTP HAProxy load balancer |
Have to build haproxy config |
https://access.redhat.com/solutions/1191253 |
| Terminate HTTPS Connections |
|
See https://access.redhat.com/solutions/1579263 |
| Manage iSCSI |
|
|
| Provide and configure iSCSI targets |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/managing_storage_devices/configuring-an-iscsi-target_managing-storage-devices#creating-an-iscsi-target_configuring-an-iscsi-target |
| Configure iSCSI initiators to connect persistently to iSCSI targets |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/managing_storage_devices/configuring-an-iscsi-initiator_managing-storage-devices |
| Restrict access to iSCSI services to specific clients and networks |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/managing_storage_devices/configuring-an-iscsi-initiator_managing-storage-devices |
| Manage NFS |
|
|
| Configure persistent NFS exports |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/exporting-nfs-shares_deploying-different-types-of-servers |
| Configure an NFS client to mount an NFS export persistently |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/exporting-nfs-shares_deploying-different-types-of-servers |
| Restrict access to NFS exports to specific clients and networks |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/exporting-nfs-shares_deploying-different-types-of-servers |
| Manage SMB |
|
|
| Configure SMB shares |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_using-samba-as-a-server_deploying-different-types-of-servers#proc_configuring-user-and-group-based-share-access_assembly_setting-permissions-on-a-share-that-uses-posix-acls |
| Create and manage SMB users |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_using-samba-as-a-server_deploying-different-types-of-servers#proc_using-the-smbpasswd-utility_assembly_frequently-used-samba-command-line-utilities |
| Create SMB only users |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_using-samba-as-a-server_deploying-different-types-of-servers#proc_using-the-smbpasswd-utility_assembly_frequently-used-samba-command-line-utilities |
| Restrict access to SMB shares |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/assembly_using-samba-as-a-server_deploying-different-types-of-servers#proc_configuring-host-based-share-access_assembly_setting-permissions-on-a-share-that-uses-posix-acls |
| Mount a SMB share |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/managing_file_systems/assembly_mounting-an-smb-share-on-red-hat-enterprise-linux_managing-file-systems |
| Perform a multiuser SMB mount |
|
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/managing_file_systems/assembly_mounting-an-smb-share-on-red-hat-enterprise-linux_managing-file-systems#proc_mounting-a-share-with-the-multiuser-option_assembly_performing-a-multi-user-smb-mount |
| Use Ansible to Configure Standard Services |
|
|
| Create and modify playbooks |
|
https://docs.ansible.com/ansible/latest/user_guide/playbooks.html |
| Understand and utilize inventory files |
|
https://docs.ansible.com/ansible/latest/user_guide/intro_inventory.html |
| Use variables in playbooks |
|
https://docs.ansible.com/ansible/latest/user_guide/playbooks_variables.html |
| Work with RHEL System Roles |
|
https://access.redhat.com/articles/3050101 |