さくらVPS開発環境設定

$ yum update

$ useradd guest
$ passwd guest
password: xxxx
$ usermod -G wheel guest
$ visudo
...
 ## Allows people in group wheel to run all commands
%wheel  ALL=(ALL)       ALL   （コメントアウト）

$ exit
% mkdir ~/.ssh

% ssh guest@x.x.x.x
% ssh-keygen -t rsa -v
% cd .ssh
% chmod 600 id_rsa.pub
% scp id_rsa.pub guest@x.x.x.x:~/.ssh/authorized_keys

$ vi /etc/ssh/sshd_config
Port xxxx    (22 以外に変える）
PermitRootLogin no
...
PasswordAuthentication no
...
PermitRootLogin no
...
ClientAlive... 60      （切断防止）
ClientAliveCount 3
$ service sshd restart

$ cd /etc/sysconfig
$ vp iptables iptables.orig
$ vi iptables
*filter
:INPUT    DROP    [0:0]
:FORWARD  DROP    [0:0]
:OUTPUT   ACCEPT  [0:0]
:SERVICES -       [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s --limit-burst 4  -j ACCEPT
-A INPUT -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p tcp -m state --state NEW -j SERVICES
-A INPUT -p udp --sport 53 -j ACCEPT
-A INPUT -p udp --sport 123 --dport 123 -j ACCEPT
-A SERVICES -p tcp --dport xxxx -j ACCEPT  （SSH のPort番号）
-A SERVICES -p tcp --dport 80 -j ACCEPT
-A SERVICES -p tcp --dport 443 -j ACCEPT
COMMIT
$ service iptables restart
...[OK]
$ iptables -L

% pwd
/home/guest
% mkdir -p git/foo.git
% cd git/foo.git
% git --bare init --share

% pwd
/home/you/foo
% git remote add sakura ssh://guest@xxxx.vs.sakura.ne.jp:22/home/guest/git/foo.git
% git remote -v
sakura  ssh://guest@xxxx.vs.sakura.ne.jp:22/home/guest/git/foo.git (fetch)
sakura  ssh://guest@xxxx.vs.sakura.ne.jp:22/home/guest/git/foo.git (push)
% git push sakura master
....