Posted on

How to Use SCP Command to Transfer Files Securely

Apache-Servers

An SCP (secure copy) is a command-line utility that allows you to securely copy files and directories between two locations.

With scp, you can copy a file or directory:

  • From your local system to a remote system.
  • From a remote system to your local system.
  • Between two remote systems from your local system.

When transferring data with scp, both the files and password are encrypted so that anyone snooping on the traffic doesn’t get anything sensitive.

In this tutorial, we will show you how to use the scp command through practical examples and detailed explanations of the most common scp options.

SCP Command Syntax

Before going into how to use the scp command, let’s start by reviewing the basic syntax.

The scp command syntax take the following form:

scp [OPTION] [user@]SRC_HOST:]file1 [user@]DEST_HOST:]file2

Copy

  • OPTION – scp options such as cipher, ssh configuration, ssh port, limit, recursive copy …etc.
  • [user@]SRC_HOST:]file1 – Source file.
  • [user@]DEST_HOST:]file2 – Destination file

Local files should be specified using an absolute or relative path, while remote file names should include a user and host specification.

scp provides a number of options that control every aspect of its behavior. The most widely used options are:

  • -P – Specifies the remote host ssh port.
  • -p – Preserves files modification and access times.
  • -q – Use this option if you want to suppress the progress meter and non-error messages.
  • -C – This option forces scp to compresses the data as it is sent to the destination machine.
  • -r – This option tells scp to copy directories recursively.

Before you Begin

The scp command relies on ssh for data transfer, so it requires an ssh key or password to authenticate on the remote systems.

The colon (:) is how scp distinguish between local and remote locations.

To be able to copy files, you must have at least read permissions on the source file and write permission on the target system.

Be careful when copying files that share the same name and location on both systems, scp will overwrite files without warning.

When transferring large files, it is recommended to run the scp command inside a screen or tmux session.

Copy a Local File to a Remote System with the scp Command

To copy a file from a local to a remote system run the following command:

scp file.txt [email protected]:/remote/directory

Where file.txt is the name of the file we want to copy, remote_username is the user on the remote server, 10.10.0.2 is the server IP address. The /remote/directory is the path to the directory you want to copy the file to. If you don’t specify a remote directory, the file will be copied to the remote user home directory.

You will be prompted to enter the user password, and the transfer process will start.

[email protected]'s password: file.txt 100% 0 0.0KB/s 00:00

Omitting the filename from the destination location copies the file with the original name. If you want to save the file under a different name, you need to specify the new file name:

scp file.txt [email protected]:/remote/directory/newfilename.txt

If SSH on the remote host is listening on a port other than the default 22 then you can specify the port using the -P argument:

scp -P 2322 file.txt [email protected]:/remote/directory

The command to copy a directory is much like as when copying files. The only difference is that you need to use the -r flag for recursive.

To copy a directory from a local to remote system, use the -r option:

scp -r /local/directory [email protected]:/remote/directory

Copy a Remote File to a Local System using the scp Command

To copy a file from a remote to a local system, use the remote location as a source and local location as the destination.

For example to copy a file named file.txt from a remote server with IP 10.10.0.2 run the following command:

scp [email protected]:/remote/file.txt /local/directory

If you haven’t set a passwordless SSH login to the remote machine, you will be asked to enter the user password.

Copy a File Between Two Remote Systems using the scp Command

Unlike rsync , when using scp you don’t have to log in to one of the servers to transfer files from one to another remote machine.

The following command will copy the file /files/file.txt from the remote host host1.com to the directory /files on the remote host host2.com.

scp [email protected]:/files/file.txt [email protected]:/files

You will be prompted to enter the passwords for both remote accounts. The data will be transfer directly from one remote host to the other.

To route the traffic through the machine on which the command is issued, use the -3 option:

scp -3 [email protected]:/files/file.txt [email protected]:/files
Posted on

HOW TO INSTALL PHP 8 ON UBUNTU 20.04

php

PHP is one of the most widely used server-side programming languages. Many popular CMS and frameworks such as WordPress, Magento, and Laravel are written in PHP.

PHP 8.0 is the latest major release of the PHP language. It introduces several breaking changes, performance improvements, and lots of new features such as named arguments, JIT compiler, union types, match expression, and more.

This article will show you how to install PHP 8 on Ubuntu 20.04 and integrate it with Nginx and Apache.

At the time of writing, the default Ubuntu 20.04 repositories include PHP 7.4 version. We’ll install PHP from the ondrej/php PPA repository.

Before upgrading to or installing PHP 8, make sure that your applications support it.

The same steps apply for Ubuntu 18.04 and all Ubuntu-based distribution, including Kubuntu, Linux Mint, and Elementary OS.

Enabling PHP Repository

Ondřej Surý, a Debian developer, maintains a repository that includes multiple PHP versions. To enable the repository , run:

sudo apt install software-properties-commonsudo add-apt-repository ppa:ondrej/php

Once the PPA is enabled, you can install PHP 8.

Installing PHP 8.0 with Apache

If you’re using Apache as a web server, you can run PHP as an Apache module or PHP-FPM.

Install PHP as Apache Module

Installing PHP as an Apache module is a straightforward task:

sudo apt updatesudo apt install php8.0 libapache2-mod-php8.0

Once the packages are installed, restart Apache for the PHP module to get loaded:

sudo systemctl restart apache2

Configure Apache with PHP-FPM

Php-FPM is a FastCGI process manager for PHP. Run the following command to install the necessary packages:

sudo apt updatesudo apt install php8.0-fpm libapache2-mod-fcgid

By default PHP-FPM is not enabled in Apache. To enable it, run:

sudo a2enmod proxy_fcgi setenvifsudo a2enconf php8.0-fpm

To activate the changes, restart Apache:

systemctl restart apache2

Installing PHP 8.0 with Nginx

Nginx doesn’t have built-in support for processing PHP files. We’ll use PHP-FPM (“fastCGI process manager”) to handle the PHP files.

Run the following commands to install PHP and PHP FPM packages:

sudo apt updatesudo apt install php8.0-fpm

Once the installation is completed, the FPM service will start automatically. To check the status of the service, run

systemctl status php8.0-fpm
● php8.0-fpm.service - The PHP 8.0 FastCGI Process Manager Loaded: loaded (/lib/systemd/system/php8.0-fpm.service; enabled; vendor preset: enabled) Active: active (running) since Thu 2020-12-03 16:10:47 UTC; 6s ago

You can now edit the Nginx server block and add the following lines so that Nginx can process PHP files:

server { # . . . other code location ~ \.php$ { include snippets/fastcgi-php.conf; fastcgi_pass unix:/run/php/php8.0-fpm.sock; } }

Do not forget to restart the Nginx service so that the new configuration takes effect:

sudo systemctl restart nginx

Installing PHP extensions

PHP extensions are compiled libraries that extend the core functionality of PHP. Extensions are available as packages and can be easily installed with apt :

sudo apt install php8.0-[extname]

For example, to install MySQL and GD extensions, you would run the following command:

sudo apt install php8.0-mysql php8.0-gd

After installing a new PHP extension, do not forget to restart Apache or PHP FPM service, depending on your setup.

Testing PHP Processing

To test whether the web server is configured properly for PHP processing, create a new file named info.php inside the /var/www/html directory with the following code:

/var/www/html/info.php

<?php phpinfo();

Save the file, open your browser, and visit: http://your_server_ip/info.php

You’ll see information about your PHP configuration.

Posted on

HOW TO CHANGE DNS FOR A DOMAIN (NAMECHEAP.COM)

DNS Settings

To change the Name Servers for your domain, you will need to do the following:

1. Sign in to your Namecheap account.

2. Select Domain List from the left sidebar and click the Manage button next to your domain:

imbisoft

Select Custom DNS and add the provided NS records.

3. Find the Name Servers section and select your preferred option from the drop-down menu. Click on the green checkmark to save the changes:

DNS

NOTE: Name Servers are part of an extensive database called the Domain Name System (DNS), which acts as a directory for devices and the IP addresses attached to them. During the name servers registration, the IP address is assigned to the name servers. The unregistered name servers do not have associated IP address and cannot work properly with some domains. For example, the Registry of .net domains checks whether the name servers are registered and do not allow using unregistered name servers.

You can choose from four possible options:

ImbiSoft Default Name Servers – if you wish to point your domain to our default name servers:

Default Name Servers

ns1.imbisoft.com

ns2.imbisoft.com

Shared Hosting Records

NS              javier.ns.cloudflare.com
NS              kayleigh.ns.cloudflare.com

NOTE: 1. Once the name servers are changed, all the custom DNS records for your domain name will be overwritten to our hosting ones. You will be able to re-create them in your account’s DNS Editor from where you can manage domain’s settings.

CustomDNS – if you wish to point your domain to custom name servers (for example, your Personal DNS servers or third-party hosting name servers if your domain is hosted with another DNS provider), you will need to fill in your hosting name servers to the empty lines and click on the green checkmark to save the changes:

After adding our NS records, click the green check sign to save.

  1. Log into your account and access domain settings
  2. click on the green arrow and select Custom DNS
  3. Add the custom Name Servers
  4. Click the green checkmark to save
  • NOTE: It’s required to enter the name servers in the format provided, if you enter the IP addresses instead, the system will not accept this. Thus, if you were provided with both the name servers and IP address(es), only the name servers should be inserted as custom name servers.

Namecheap PremiumDNS is a paid DNS service that can be used with any domain registered at any registrar. This option will be available for the domains that have a PremiumDNS subscription attached.

  • NOTE: If you change name servers from Custom name servers to our default ones or vice versa, the records will not be added to the new name servers automatically. Please make sure to save all the needed settings and set them up manually after the name servers switch.

Name Servers changes or some DNS records do not propagate instantly. Once your name servers are changed, it may take up to 24 hours (more, in rare cases) for local ISPs to update their DNS caches so that everyone can see your website.

You can always check your domain name using any Proxy server as Proxy servers do not store cache, thus you can see the non-cached information.

VERY IMPORTANT.

If you are pointed your domain name to us (added our name servers), it is your responsibility to ensure that your domain name and its contact details are up to date. If your domain name is not renewed on time, your website will go offline and you will possibly loss all its content for good. If you need any help, kindly contact us.

That’s all she wrote!

If you have any questions or need assistance, please contact us.

Posted on

UBUNTU 22 NOW AVAILABLE FOR ALL CLOUD INSTANCES

ubuntu-22

Today we are happy to announce the addition of Ubuntu 22 LTS to our OS library. Customers are now able to deploy Ubuntu 22 with a single click.

Canonical Ubuntu 22.04 LTS is now generally available, featuring significant leaps forward in cloud confidential computing, real-time kernel for industrial applications, and enterprise Active Directory, PCI-DSS, HIPAA, FIPS and FedRAMP compliance – raising the bar for open source from cloud to edge, IoT and workstations. Canonical partners with industry leaders to deliver enterprise-grade security, long-term maintenance and support on all major architectures, hardware and clouds.

“Our mission is to be a secure, reliable and consistent open-source platform – everywhere”, said Mark Shuttleworth, CEO of Canonical. “Ubuntu 22.04 LTS unlocks innovation for industries with demanding infrastructure security requirements, such as telecommunications and industrial automation, underpinning their digital transformation.“

Confidential Computing and Arm drive public cloud innovation

Ubuntu is deeply integrated into public clouds and optimised for performance, security and ease of use. A key new capability is Confidential Computing, which greatly improves data protection and privacy in leading public clouds without requiring any changes to existing application deployments.

Ubuntu is the only Linux distribution supporting Azure Confidential VMs. “Azure’s confidential VMs deliver confidentiality between different cloud customers and also between customers and Azure operators. Hardware-level encrypted guest isolation, combined with measured boot and TPM-backed full-disk encryption in Ubuntu and Azure Managed HSM, customer code and data are encrypted in use, in transit, and at rest using encryption keys that are protected and can be controlled by the customer,” said Vikas Bhatia, Head of Product for Azure Confidential Computing. “Canonical has been an important partner in this effort, working closely with us to bring confidential computing innovations to our customers”.

To ensure great performance on Arm, Canonical also optimised Ubuntu 22.04 LTS images for AWS Graviton. On AWS, Ubuntu is available from EC2, with multiple images including support for the latest Graviton chips, all the way to containers.

Oracle Cloud Infrastructure works closely with Canonical to enable Ubuntu on all its hardware. ”With Ubuntu 22.04 LTS on Oracle Cloud Infrastructure, developers get a highly optimised operating system and kernel with excellent boot speed, security and stability,” said Bo English-Wiczling, Senior Director, Developer Relations, Oracle. “This includes the latest Arm servers, Ampere A1, where we provide high-performing and cost-effective solutions for all types of workloads.”

Ubuntu is where developers are

For innovators on Raspberry Pi, Ubuntu 22.04 LTS marks the first LTS release with Ubuntu Desktop support on the Raspberry Pi 4. “With Ubuntu 22.04 LTS, the entire recent Raspberry Pi device portfolio is supported for the very first time, from the new Raspberry Pi Zero 2W to the Raspberry Pi 4”, said Eben Upton, CEO of Raspberry Pi Trading. “It’s great to see a certified Ubuntu Desktop release that includes support for the 2GB Raspberry Pi 4, giving developers all over the world access to the most affordable development desktop environment.”

Ubuntu WSL delivers deep integration with native Windows development environments like Visual Studio Code and Docker Desktop across a shared file system. Users mix Windows and Linux commands to create efficient workflows for data science, web development and IT systems management. Users of Ubuntu WSL can upgrade to 22.04 LTS directly.

Canonical partners with OEMs to offer enterprise-focused Ubuntu WSL, pre-enabled on Windows workstations, for streamlined Linux and Windows development. “Dell’s WSL-enabled Precision Workstations bring the power of Ubuntu to Windows users,” said Kyle Harper, Director of Artificial Intelligence Strategy, Precision Workstations at Dell Technologies. “With support for tools like NVIDIA CUDA, Tensorflow and PyTorch, Ubuntu WSL increases the accessibility of data science and AI/ML workloads with performance approaching Ubuntu on bare metal. No need to reboot between Ubuntu and Windows anymore, for many AI/ML/DL workflows.”

For Windows and macOS developers, Multipass provides Ubuntu 22.04 LTS VMs on demand with full cloud-init for cloud prototyping at home. Multipass gains Apple M1 support, making it the best way to drive development for new Arm cloud instances. Multipass has also added support for Docker workflows – unifying the developer experience for cloud and cloud-native applications.

For shared development environments, multi-user LXD offers per-user project segregation, restricting specific user permissions so multiple people can safely share the same LXD cluster.

The platform for data-intensive workloads

SQL Server on Ubuntu LTS for Azure offers exceptional scalability and performance. It gives business-critical SQL Server workloads access to comprehensive open source security on Azure. SQL Server on Ubuntu is backed by Microsoft and Canonical, and comes with 24/7 support for the entire solution.

With Ubuntu 22.04 LTS, NVIDIA virtual GPU (vGPU) software drivers are generally available. Data scientists can natively install NVIDIA vGPU Software 14.0 and benefit from highly performant GPU resources across multiple virtual machines at the same time. This allows data scientists to parallelise and isolate advanced AI/ML workloads, while ensuring that the underlying hardware resources are used efficiently.

To meet the demands of AI/ML, HPC and data science workloads, developers and enterprises rely on NVIDIA-accelerated computing, with Ubuntu supported on NVIDIA DGX systems as well as NVIDIA-Certified Systems running the NVIDIA AI Enterprise software suite.

“Enterprises, data scientists and developers building AI solutions require integrated systems and software that easily support MLOps workflows,” said Manuvir Das, Vice President of Enterprise Computing at NVIDIA. “Organisations can now run NVIDIA AI on Ubuntu to help solve some of humanity’s biggest challenges with new products and systems that simplify operations, boost safety and improve communication.”

Canonical offers enterprise-grade security maintenance and 24/7 support for a range of open-source SQL and no-SQL database systems, including MySQL, PostgreSQL and Redis. With Charmed Apache Kafka, Canonical introduces a comprehensive, highly automated and fully supported solution for streaming data processing at scale. Charmed solutions automate the deployment and operation of complex, software-intensive systems. Engineers using cloud-native solutions such as Kubernetes will benefit from new Docker container images for popular open-source data processing solutions.

LTS Docker images

The Ubuntu 22.04 LTS base image is available on Docker Hub along with a Canonical-maintained portfolio of secure and stable LTS application container images.

“Ubuntu plays an essential role on Docker Hub, as one of the most popular Docker Official Images”, said Webb Stevens, SVP of Secure Software Supply chain at Docker. “Beyond the base image, Canonical also publishes a well-maintained portfolio of secure and stable OCI-compliant images as a member of the Docker Verified Publisher program. As a Docker Verified Publisher, Canonical delivers friction-free access to trusted content to developers through Docker Hub without rate limits.”

Existing LTS Docker images on Ubuntu will receive new long-term supported 22.04-based tracks, including MySQL, PostgreSQL and NGINX. The open-source applications portfolio is expanding further, focusing on Observability and Big Data, with new Grafana Loki, Apache Kafka and Apache Cassandra container images.

Real-time kernel for telco and industrial applications

Canonical is pleased to announce the Ubuntu 22.04 LTS real-time kernel, now available in beta. Designed to meet telco network transformation needs for 5G, Ubuntu 22.04 LTS with the real-time kernel delivers performance, guaranteed ultra-low latency and security for critical infrastructure. This new kernel also serves latency-sensitive use cases in industrial automation and robotics.

“Ubuntu 22.04 LTS’s real-time kernel unlocks low-latency use cases for real-time applications like Cloud RAN,” said Dan Lynch, Marketing Director at Intel. “Together with Canonical, we have validated Intel’s FlexRAN SDK to enable OpenRAN implementations requiring pre-emptive real-time kernel capabilities to meet 5G latency requirements.”

With the PREEMPT_RT patchset integrated for x86 and Arm64 architectures, Ubuntu’s real-time kernel enables extreme latency-dependent use cases and provides deterministic response times to service events.

“The real-time kernel in Ubuntu 22.04 LTS leverages the acceleration from Intel hardware, allowing us to compete on even terms with the biggest network equipment providers”, says Radoslaw Adamczyk, Technical Lead at IS-Wireless, which develops and delivers mobile networks in the OpenRAN model. “Now we have one platform for the whole stack, from bare metal with MAAS to Ubuntu OS, LXD VM and Microk8s on the edge – tested, validated, verified and secure.“

Enhanced enterprise compliance

Canonical Ubuntu makes it straightforward to conform to various industry compliance standards, such as PCI-DSS, HIPAA and FedRAMP.

“FIPS 140-2 certified Ubuntu images on AWS fulfil our FedRAMP compliance requirements,” said Patrick Kaeding, Security Engineer at LaunchDarkly. “With enterprise-grade Ubuntu LTS support backed by the 10-year maintenance commitment from Canonical, LaunchDarkly provides critical development infrastructure for some of the world’s most recognized brands.”

To support security management operations, CVE and related vulnerability information for Canonical Ubuntu LTS releases are now published as an OVAL stream and integrated into industry-standard scanning and audit tools.

“Tenable and Canonical collaborate behind the scenes to make security vulnerability alerts in Tenable’s suite of Vulnerability Management products timely, accurate and actionable throughout the whole 10-year lifecycle of Ubuntu LTS”, said Robert Huber, Chief Security Officer at Tenable. “Together, we give our joint customers a secure, stable and trustworthy open-source platform.”

Active Directory is now fully supported in the Ubuntu installer with Advanced Group Policy Object and allows more refined user permissions and script execution control from within Active Directory.

“Ubuntu 22.04 LTS enables our customers to manage their Ubuntu devices with the same tools as their Windows devices, adds support for Thunderbolt 4, 5G modems and Wi-Fi 6E, and introduces new features like power slider and ePrivacy screen”, said Igor Bergman, Vice President, SW/Cloud for PC & Smart Device at Lenovo. “Lenovo is excited to continue to work together with Canonical to enable upcoming ThinkPad, ThinkCentre and ThinkStation platforms on the Ubuntu 22.04 LTS release.”

Timely, performant and customisable

Ubuntu 22.04 LTS adds Rust for memory-safe systems-level programming. It also moves to OpenSSL v3, with new cryptographic algorithms for elevated security.

Ubuntu Desktop 22.04 LTS gains significant usability, battery and performance improvements with GNOME 42 featuring GNOME power profiles and streamlined workspace transitions alongside significant optimisations which can double the desktop frame rate on Intel and Raspberry Pi graphics drivers.

For the fashion-conscious, Ubuntu 22.04 LTS offers ten different accent colours, applied to both the dark and light variants of the Yaru theme, as well as the widest selection of community wallpapers to date.

Ubuntu 22.04 LTS is available now and major public clouds. Get it on Ubuntu Downloads

Posted on

7 Steps To Secure Your Linux Server

Linux-Server

7 Steps To Secure Your Linux Server

This tutorial will introduce you to basic Linux server security. While it focuses on Debian/Ubuntu, you can apply everything presented here to other Linux distributions. I also encourage you to research this material and extend it where applicable.

1. Update your server

The first thing you should do to secure your server is to update the local repositories and upgrade the operating system and installed applications by applying the latest patches.

On Ubuntu and Debian:

$ sudo apt update && sudo apt upgrade -y

On Fedora, CentOS, or RHEL:

$ sudo dnf upgrade

2. Create a new privileged user account

Next, create a new user account. You should never log into your server as root. Instead, create your own account (“<user>“), give it sudo rights, and use it to log into your server.

Start out by creating a new user:

$ adduser <username>

Give your new user account sudo rights by appending (-a) the sudo group (-G) to the user’s group membership:

$ usermod -a -G sudo <username>

3. Upload your SSH key

You’ll want to use an SSH key to log into your new server. You can upload your pre-generated SSH key to your new server using the ssh-copy-id command:

$ ssh-copy-id <username>@ip_address

Now you can log into your new server without having to type in a password.

4. Secure SSH

Next, make these three changes:

  • Disable SSH password authentication
  • Restrict root from logging in remotely
  • Restrict access to IPv4 or IPv6

Open /etc/ssh/sshd_config using your text editor of choice and ensure these lines:

PasswordAuthentication yes
PermitRootLogin yes

look like this:

PasswordAuthentication no
PermitRootLogin no

Next, restrict the SSH service to either IPv4 or IPv6 by modifying the AddressFamily option. To change it to use only IPv4 (which should be fine for most folks) make this change:

AddressFamily inet

Restart the SSH service to enable your changes. Note that it’s a good idea to have two active connections to your server before restarting the SSH server. Having that extra connection allows you to fix anything should the restart go wrong.

On Ubuntu:

$ sudo service sshd restart

On Fedora or CentOS or anything using Systemd:

$ sudo systemctl restart sshd

5. Enable a firewall

Now you need to install a firewall, enable it, and configure it only to allow network traffic that you designate. Uncomplicated Firewall (UFW) is an easy-to-use interface to iptables that greatly simplifies the process of configuring a firewall.

You can install UFW with:

$ sudo apt install ufw

By default, UFW denies all incoming connections and allows all outgoing connections. This means any application on your server can reach the internet, but anything trying to reach your server cannot connect.

First, make sure you can log in by enabling access to SSH, HTTP, and HTTPS:

$ sudo ufw allow ssh
$ sudo ufw allow http
$ sudo ufw allow https

Then enable UFW:

$ sudo ufw enable

You can see what services are allowed and denied with:

$ sudo ufw status

If you ever want to disable UFW, you can do so by typing:

$ sudo ufw disable

You can also use firewall-cmd, which is already installed and integrated into some distributions.

6. Install Fail2ban

Fail2ban is an application that examines server logs looking for repeated or automated attacks. If any are found, it will alter the firewall to block the attacker’s IP address either permanently or for a specified amount of time.

You can install Fail2ban by typing:

$ sudo apt install fail2ban -y

Then copy the included configuration file:

$ sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

And restart Fail2ban:

$ sudo service fail2ban restart

That’s all there is to it. The software will continuously examine the log files looking for attacks. After a while, the app will build up quite a list of banned IP addresses. You can view this list by requesting the current status of the SSH service with:

$ sudo fail2ban-client status ssh

7. Remove unused network-facing services

Almost all Linux server operating systems come with a few network-facing services enabled. You’ll want to keep most of them. However, there are a few that you might want to remove. You can see all running network services by using the ss command:

$ sudo ss -atpu

The output from ss will differ depending on your operating system. This is an example of what you might see. It shows that the SSH (sshd) and Ngnix (nginx) services are listening and ready for connection:

tcp LISTEN 0 128 *:http *:* users:(("nginx",pid=22563,fd=7))
tcp LISTEN 0 128 *:ssh *:* users:(("sshd",pid=685,fd=3))

How you go about removing an unused service (“<service_name>“) will differ depending on your operating system and the package manager it uses.

To remove an unused service on Debian/Ubuntu:

$ sudo apt purge <service_name>

To remove an unused service on Red Hat/CentOS:

$ sudo yum remove <service_name>

Run ss -atup again to verify that the unused services are no longer installed and running.

We want to hear your thoughts about this.