Vserver administration - Revision history

PhilippeTeuwen: Reverted edits by Etegohy (Talk) to last revision by PhilippeTeuwen

2010-11-24T20:35:24Z

Reverted edits by Etegohy (Talk) to last revision by PhilippeTeuwen

Can't load revision 6849

at 00:30, 24 November 2010

2010-11-24T00:30:43Z

Can't load revision 6691

PhilippeTeuwen: /* Host preparation */

2008-03-28T16:05:42Z

Host preparation

← Older revision		Revision as of 16:05, 28 March 2008
Line 107:		Line 107:
	And I got a linux-image-2.6.17.14-grsec2.1.9-vs2.0.2.1_2.6.17.14-grsec2.1.9-vs2.0.2.1-10.00.Custom_amd64.deb		And I got a linux-image-2.6.17.14-grsec2.1.9-vs2.0.2.1_2.6.17.14-grsec2.1.9-vs2.0.2.1-10.00.Custom_amd64.deb
	==Host preparation==		==Host preparation==
			<pre>
	<source lang=bash>
	apt-get install util-vserver vserver-debiantools		apt-get install util-vserver vserver-debiantools
	wget http://vserver.13thfloor.at/Stuff/SCRIPT/testme.sh		wget http://vserver.13thfloor.at/Stuff/SCRIPT/testme.sh
Line 118:		Line 118:
	losetup -d /dev/loop0		losetup -d /dev/loop0
	modprobe -r loop		modprobe -r loop
	</~~source~~>		</pre>
	There is no error at this point but as I'm using Reiserfs, I have to activate manually the extended attributes (for lsattr/chattr) by adding the following option to /etc/fstab lines: "attrs" (?? also option acl ??)		There is no error at this point but as I'm using Reiserfs, I have to activate manually the extended attributes (for lsattr/chattr) by adding the following option to /etc/fstab lines: "attrs" (?? also option acl ??)
	<br>Test: lsattr <mount point of a Reiserfs>		<br>Test: lsattr <mount point of a Reiserfs>

PhilippeTeuwen at 16:05, 28 March 2008

2008-03-28T16:05:03Z

← Older revision		Revision as of 16:05, 28 March 2008
Line 107:		Line 107:
	And I got a linux-image-2.6.17.14-grsec2.1.9-vs2.0.2.1_2.6.17.14-grsec2.1.9-vs2.0.2.1-10.00.Custom_amd64.deb		And I got a linux-image-2.6.17.14-grsec2.1.9-vs2.0.2.1_2.6.17.14-grsec2.1.9-vs2.0.2.1-10.00.Custom_amd64.deb
	==Host preparation==		==Host preparation==
			<source lang=bash>
	<pre>
	apt-get install util-vserver vserver-debiantools		apt-get install util-vserver vserver-debiantools
	wget http://vserver.13thfloor.at/Stuff/SCRIPT/testme.sh		wget http://vserver.13thfloor.at/Stuff/SCRIPT/testme.sh
Line 118:		Line 118:
	losetup -d /dev/loop0		losetup -d /dev/loop0
	modprobe -r loop		modprobe -r loop
	</~~pre~~>		</source>
	There is no error at this point but as I'm using Reiserfs, I have to activate manually the extended attributes (for lsattr/chattr) by adding the following option to /etc/fstab lines: "attrs" (?? also option acl ??)		There is no error at this point but as I'm using Reiserfs, I have to activate manually the extended attributes (for lsattr/chattr) by adding the following option to /etc/fstab lines: "attrs" (?? also option acl ??)
	<br>Test: lsattr <mount point of a Reiserfs>		<br>Test: lsattr <mount point of a Reiserfs>

PhilippeTeuwen: /* Configure daemons to listen only to the IP-address of the mothersystem */

2008-02-18T22:54:46Z

Configure daemons to listen only to the IP-address of the mothersystem

← Older revision		Revision as of 22:54, 18 February 2008
Line 321:		Line 321:
	* ''slapd:'' in file /etc/default/slapd		* ''slapd:'' in file /etc/default/slapd
	SLAPD_SERVICES="ldap://<IP priv>/ ldaps://<IP pub>/"		SLAPD_SERVICES="ldap://<IP priv>/ ldaps://<IP pub>/"
			* ''oidentd'' in file /etc/default/oidentd
			Add to OIDENT_OPTIONS list: "-a <IP pub>"
	* netstat -lp -> other greedy daemons?		* netstat -lp -> other greedy daemons?
	* Seems that this is possible via another method, here it will bind the daemon to the first IP of the interface:<br>exec /usr/sbin/chbind --ip eth0 /path/to/daemon		* Seems that this is possible via another method, here it will bind the daemon to the first IP of the interface:<br>exec /usr/sbin/chbind --ip eth0 /path/to/daemon

PhilippeTeuwen: /* Configure daemons to listen only to the IP-address of the mothersystem */

2008-02-18T00:25:26Z

Configure daemons to listen only to the IP-address of the mothersystem

← Older revision		Revision as of 00:25, 18 February 2008
Line 319:		Line 319:
	* ''[[Virtual_Private_Networks\|openvpn]]'' in file /etc/openvpn/server.conf:		* ''[[Virtual_Private_Networks\|openvpn]]'' in file /etc/openvpn/server.conf:
	local <IP pub>		local <IP pub>
			* ''slapd:'' in file /etc/default/slapd
			SLAPD_SERVICES="ldap://<IP priv>/ ldaps://<IP pub>/"
	* netstat -lp -> other greedy daemons?		* netstat -lp -> other greedy daemons?
	* Seems that this is possible via another method, here it will bind the daemon to the first IP of the interface:<br>exec /usr/sbin/chbind --ip eth0 /path/to/daemon		* Seems that this is possible via another method, here it will bind the daemon to the first IP of the interface:<br>exec /usr/sbin/chbind --ip eth0 /path/to/daemon

192.168.6.2: /* Disk limits */

2007-09-25T09:13:20Z

Disk limits

← Older revision		Revision as of 09:13, 25 September 2007
Line 234:		Line 234:
	** WARNING: if the filesystem is already in use with vservers, nothing prevent you to umount the filesystem while the vservers are still running, which is VERY BAD! Be careful.		** WARNING: if the filesystem is already in use with vservers, nothing prevent you to umount the filesystem while the vservers are still running, which is VERY BAD! Be careful.
	** I could only get the tagxid taken properly into account after a reboot		** I could only get the tagxid taken properly into account after a reboot
			** To set tagxid on / you need to do it from initrd as tagxid cannot be set at remount: add to the kernel params the option "rootflags=tagxid", e.g. via /boot/grub/menu.lst #kopts=...
	* Change the xid of already existing files:		* Change the xid of already existing files:
	chxid -c <my_vserver> -R /home/vservers/<my_vserver>		chxid -c <my_vserver> -R /home/vservers/<my_vserver>

57.67.161.6: /* Disk limits */

2007-05-21T07:43:06Z

Disk limits

← Older revision		Revision as of 07:43, 21 May 2007
Line 249:		Line 249:
	** Install my vdlimit_ script in /usr/local/sbin: [[Vserver tools]]		** Install my vdlimit_ script in /usr/local/sbin: [[Vserver tools]]
	ln -s /usr/local/sbin/vdlimit_ /etc/vservers/<my_vserver>/scripts/post-start.d/vdlimit_$((5*1024))		ln -s /usr/local/sbin/vdlimit_ /etc/vservers/<my_vserver>/scripts/post-start.d/vdlimit_$((5*1024))
			** To change the limit on-the-fly simply rename the link and execute
			./vdlimit_<new_size> pre-stop <my_vserver>;./vdlimit_<new_size> post-start <my_vserver>;

	==Network==		==Network==
	===Intern network===		===Intern network===

PhilippeTeuwen: /* Share directories */

2007-04-24T16:30:17Z

Share directories

← Older revision		Revision as of 16:30, 24 April 2007
Line 202:		Line 202:
	mount --bind /home /var/lib/vservers/vserver2/home		mount --bind /home /var/lib/vservers/vserver2/home
	The second method had the disavantage to require a reboot of the vserver		The second method had the disavantage to require a reboot of the vserver

			To mount an NFS share in a vserver:
			<br>Add the nfs share to /etc/vservers/<vserver>/fstab
			<br>If you want the user to be able to do it from the vserver itself, you've to add some capabilities, apparently sth like SECURE_MOUNT, SECURE_REMOUNT and/or BINARY_MOUNT to /etc/vservers/<vserver>/ccapabilities (didn't try)

	==Apt-get==		==Apt-get==
	LANG=C vapt-get <my_vserver1> <my_vserver2> <...> -- install <pkg1> <pkg2>		LANG=C vapt-get <my_vserver1> <my_vserver2> <...> -- install <pkg1> <pkg2>

PhilippeTeuwen: /* Config of a vserver */

2007-04-24T16:17:12Z

Config of a vserver

← Older revision		Revision as of 16:17, 24 April 2007
Line 165:		Line 165:
	?? S_CAPS		?? S_CAPS
	see [http://www.nongnu.org/util-vserver/doc/conf/configuration.html Detailed config page (better choosing boring CSS...)]		see [http://www.nongnu.org/util-vserver/doc/conf/configuration.html Detailed config page (better choosing boring CSS...)]

			If you don't assign unique IPs to the vservers but reuse the one of the host:
			touch /etc/vservers/<vserver>/interfaces/<N>/nodev
			''When this file exists, the interface will be assumed to exist already. This can be used to assign primary interfaces which are created by the host or another vserver.''

	===Run a vserver===		===Run a vserver===
	vserver <my_vserver> start		vserver <my_vserver> start