matthijs/servers/drsnuggles.git
15 years agogrub: Remove old kernel.
Matthijs Kooijman [Mon, 25 May 2009 10:24:47 +0000 (12:24 +0200)]
grub: Remove old kernel.

15 years agokernel: Don't install symlinks in /.
Matthijs Kooijman [Mon, 25 May 2009 10:23:55 +0000 (12:23 +0200)]
kernel: Don't install symlinks in /.

15 years agokernel: Add default kernel-img.conf.
Matthijs Kooijman [Mon, 25 May 2009 10:23:24 +0000 (12:23 +0200)]
kernel: Add default kernel-img.conf.

15 years agosystem: Add hosts file.
Matthijs Kooijman [Tue, 5 May 2009 18:16:56 +0000 (20:16 +0200)]
system: Add hosts file.

This file contains the default stuff, zeratul-direct and all vservers.

15 years agorsyslog: Use another format for forwarding messages.
Matthijs Kooijman [Tue, 5 May 2009 16:09:52 +0000 (18:09 +0200)]
rsyslog: Use another format for forwarding messages.

The syslog protocol 23 format seems to be broken in rsyslog for messages
that were originally generated by legacy applications (i.e., do not have
a structured-data field).

See http://bugzilla.adiscon.com/show_bug.cgi?id=125

15 years agorsyslog: Make the main queue disk-assisted as well.
Matthijs Kooijman [Tue, 5 May 2009 13:55:27 +0000 (15:55 +0200)]
rsyslog: Make the main queue disk-assisted as well.

15 years agorsyslog: Enable queuing of log messages.
Matthijs Kooijman [Tue, 5 May 2009 13:07:22 +0000 (15:07 +0200)]
rsyslog: Enable queuing of log messages.

This prevents messages from getting lost when the log vserver is
temporarily unavailable.

15 years agorsyslog: Send all logs to the log vserver.
Matthijs Kooijman [Tue, 5 May 2009 08:52:30 +0000 (10:52 +0200)]
rsyslog: Send all logs to the log vserver.

This happens in addition to local logging.

15 years agorsyslog: Move all rsyslog log files into a subdir.
Matthijs Kooijman [Tue, 5 May 2009 08:17:52 +0000 (10:17 +0200)]
rsyslog: Move all rsyslog log files into a subdir.

This allows us to use *.log in the logrotate configuration, without
conflicting with logfiles not created by rsyslog.

15 years agorsyslog: Update logrotate config to new rsyslog config.
Matthijs Kooijman [Mon, 4 May 2009 20:41:06 +0000 (22:41 +0200)]
rsyslog: Update logrotate config to new rsyslog config.

15 years agorsyslog: Add default logrotate config.
Matthijs Kooijman [Mon, 4 May 2009 20:37:56 +0000 (22:37 +0200)]
rsyslog: Add default logrotate config.

15 years agorsyslog: Clean up rsyslog configuration.
Matthijs Kooijman [Mon, 4 May 2009 20:00:15 +0000 (22:00 +0200)]
rsyslog: Clean up rsyslog configuration.

This removes some commented out lines, and reorganizes the existing
logfiles to be more consistent.

15 years agorsyslog: Add default configuration.
Matthijs Kooijman [Tue, 5 May 2009 16:32:26 +0000 (18:32 +0200)]
rsyslog: Add default configuration.

15 years agovserver: Don't copy any spool files when cloning.
Matthijs Kooijman [Tue, 5 May 2009 16:27:36 +0000 (18:27 +0200)]
vserver: Don't copy any spool files when cloning.

15 years agovserver: Mount /data/other/apt-archives in new vservers.
Matthijs Kooijman [Tue, 5 May 2009 11:05:05 +0000 (13:05 +0200)]
vserver: Mount /data/other/apt-archives in new vservers.

15 years agovserver: Mount /data/other/apt-archives in the log vserver.
Matthijs Kooijman [Tue, 5 May 2009 11:03:49 +0000 (13:03 +0200)]
vserver: Mount /data/other/apt-archives in the log vserver.

15 years agovservers: Mount /data/log in the log vserver.
Matthijs Kooijman [Tue, 5 May 2009 09:43:35 +0000 (11:43 +0200)]
vservers: Mount /data/log in the log vserver.

15 years agovserver: Add log vserver configuration.
root [Mon, 4 May 2009 19:32:02 +0000 (21:32 +0200)]
vserver: Add log vserver configuration.

15 years agosystem: Don't accept ipv6 router advertisements.
Matthijs Kooijman [Mon, 27 Apr 2009 07:30:24 +0000 (09:30 +0200)]
system: Don't accept ipv6 router advertisements.

15 years agosystem: Remove all commented entries from sysctl.conf.
Matthijs Kooijman [Mon, 27 Apr 2009 07:28:33 +0000 (09:28 +0200)]
system: Remove all commented entries from sysctl.conf.

15 years agosystem: Add default sysctl.conf.
Matthijs Kooijman [Sun, 26 Apr 2009 21:07:06 +0000 (23:07 +0200)]
system: Add default sysctl.conf.

15 years agovservers: Make dns depend on ldap instead of v.v.
Matthijs Kooijman [Fri, 17 Apr 2009 14:26:52 +0000 (16:26 +0200)]
vservers: Make dns depend on ldap instead of v.v.

Apparently the dns vserver suffers from long timeouts when ldap is not
started yet, while ldap can start without DNS just fine.

15 years agoapt: Add repository for vuurmuur.
Matthijs Kooijman [Fri, 17 Apr 2009 12:44:28 +0000 (14:44 +0200)]
apt: Add repository for vuurmuur.

15 years agossh: Update listen addresses.
Matthijs Kooijman [Fri, 17 Apr 2009 12:30:00 +0000 (14:30 +0200)]
ssh: Update listen addresses.

This changes the port back to 22 for all but the external interface,
sets sshd to listen on localhost and fixes a typo in the direct
zeratul link address.

15 years agonetwork: Update to new IP address.
Matthijs Kooijman [Fri, 17 Apr 2009 12:29:18 +0000 (14:29 +0200)]
network: Update to new IP address.

15 years agogrub: Remove savedefault from all kernels.
Matthijs Kooijman [Fri, 17 Apr 2009 12:28:41 +0000 (14:28 +0200)]
grub: Remove savedefault from all kernels.

This is the new default configuration of grub, so we might as well use
it.

15 years agogrub: Add a new kernels.
Matthijs Kooijman [Fri, 17 Apr 2009 12:28:15 +0000 (14:28 +0200)]
grub: Add a new kernels.

15 years agovuurmuur: Make portforward rules work.
root [Thu, 16 Apr 2009 14:49:22 +0000 (16:49 +0200)]
vuurmuur: Make portforward rules work.

The Portfw rules did not work, since vuurmuur does not know the concept
of local networks and produced FORWARD rules in place of INPUT rules. We
emulate this behaviour by giving the firewall a virtual interface for
each vserver on the world.inet network. This needs splitting the Portfw
rules into a normal Dnat rule and a hacky Accept rule, which gets in_int
set.

15 years agovuurmuur: Fix accept rule for outgoing verserver connections.
root [Thu, 16 Apr 2009 14:22:42 +0000 (16:22 +0200)]
vuurmuur: Fix accept rule for outgoing verserver connections.

Since vuurmuur doesn't have native support for "internal" networks, we
can't limit this rule to just vservers.

15 years agovuurmuur: Add separators to the rule config.
root [Thu, 16 Apr 2009 14:20:24 +0000 (16:20 +0200)]
vuurmuur: Add separators to the rule config.

15 years agovuurmuur: Allow ping.
root [Thu, 16 Apr 2009 14:19:47 +0000 (16:19 +0200)]
vuurmuur: Allow ping.

15 years agovuurmuur: Set the path to the conntrack binary.
root [Thu, 16 Apr 2009 14:17:33 +0000 (16:17 +0200)]
vuurmuur: Set the path to the conntrack binary.

This allows vuurmuur to do some extra connection-related stuff, such as
killing connections.

15 years agovuurmuur: Fill in data for zeratul.
root [Thu, 16 Apr 2009 14:16:57 +0000 (16:16 +0200)]
vuurmuur: Fill in data for zeratul.

15 years agovuurmuur: Fix the port for ssh-host service.
root [Thu, 16 Apr 2009 14:16:22 +0000 (16:16 +0200)]
vuurmuur: Fix the port for ssh-host service.

15 years agovserver: Skip hashify for vservers with vhashify disabled.
Matthijs Kooijman [Thu, 16 Apr 2009 13:32:08 +0000 (15:32 +0200)]
vserver: Skip hashify for vservers with vhashify disabled.

15 years agovserver: Some more vserver-hashify-all cleanups.
Matthijs Kooijman [Thu, 16 Apr 2009 13:30:11 +0000 (15:30 +0200)]
vserver: Some more vserver-hashify-all cleanups.

15 years agovserver: Don't break when no hashed files te delete.
Matthijs Kooijman [Thu, 16 Apr 2009 13:24:05 +0000 (15:24 +0200)]
vserver: Don't break when no hashed files te delete.

Previously, if find would find no hashed files to delete, xargs would
still run rm without arguments. Now it doesn't.

15 years agovserver: Cleanup vserver-hashify-all script.
Matthijs Kooijman [Thu, 16 Apr 2009 13:18:47 +0000 (15:18 +0200)]
vserver: Cleanup vserver-hashify-all script.

This adds proper quoting and uses absolute paths.

15 years agovserver: Hashify hosts even when they are not running.
Matthijs Kooijman [Thu, 16 Apr 2009 13:15:57 +0000 (15:15 +0200)]
vserver: Hashify hosts even when they are not running.

Docs say the vserver should be running to call package management, but
we don't use that anyway.

15 years agoDisable loading of modules, since we don't have them enabled.
root [Thu, 16 Apr 2009 11:56:27 +0000 (13:56 +0200)]
Disable loading of modules, since we don't have them enabled.

15 years agovuurmuur: Enable vuurmuur on startup.
root [Thu, 16 Apr 2009 10:40:27 +0000 (12:40 +0200)]
vuurmuur: Enable vuurmuur on startup.

15 years agovuurmuur: Define a sane ruleset.
root [Thu, 16 Apr 2009 10:39:01 +0000 (12:39 +0200)]
vuurmuur: Define a sane ruleset.

15 years agovuurmuur: Add default configuration.
root [Thu, 16 Apr 2009 09:26:59 +0000 (11:26 +0200)]
vuurmuur: Add default configuration.

15 years agovserver: Set dependencies between vservers.
root [Wed, 15 Apr 2009 21:03:25 +0000 (23:03 +0200)]
vserver: Set dependencies between vservers.

15 years agovserver: Mark most vservers for autostart.
root [Wed, 15 Apr 2009 21:01:58 +0000 (23:01 +0200)]
vserver: Mark most vservers for autostart.

15 years agovserver: Give all vservers a shared /var/cache/apt/archives dir.
Matthijs Kooijman [Wed, 15 Apr 2009 17:31:06 +0000 (19:31 +0200)]
vserver: Give all vservers a shared /var/cache/apt/archives dir.

Each vserver has write access to this dir, so any packages downloaded
can be shared by all. This saves download bandwidth, but more
importantly it saves storage size (upgrading all vservers at the same
time easily eats up gigabytes of space).

Since each vservers still has its own Release and Contents files and
checks gnupg signatures and hashes before installing the .debs, there
should not be a security issue.

15 years agovserver: Mount most of /data in login.
Matthijs Kooijman [Sat, 4 Apr 2009 11:33:26 +0000 (13:33 +0200)]
vserver: Mount most of /data in login.

15 years agossh: Listen on the new IP address.
Matthijs Kooijman [Sat, 4 Apr 2009 11:33:02 +0000 (13:33 +0200)]
ssh: Listen on the new IP address.

15 years agovserver: Mount /data/ in the backup vserver.
Matthijs Kooijman [Sat, 4 Apr 2009 11:31:55 +0000 (13:31 +0200)]
vserver: Mount /data/ in the backup vserver.

15 years agovserver: Add mail vserver configuration.
root [Sun, 29 Mar 2009 21:54:18 +0000 (23:54 +0200)]
vserver: Add mail vserver configuration.

15 years agovserver: Enable vhashify for the www vserver.
Matthijs Kooijman [Sun, 29 Mar 2009 12:57:41 +0000 (14:57 +0200)]
vserver: Enable vhashify for the www vserver.

15 years agovserver: Add login vserver configuration.
root [Sun, 29 Mar 2009 12:38:59 +0000 (14:38 +0200)]
vserver: Add login vserver configuration.

15 years agosystem: Upgrade to lenny.
Matthijs Kooijman [Tue, 30 Dec 2008 22:23:14 +0000 (23:23 +0100)]
system: Upgrade to lenny.

15 years agobackupninja: Upgrade config file to 0.9.6.
Matthijs Kooijman [Tue, 30 Dec 2008 22:21:11 +0000 (23:21 +0100)]
backupninja: Upgrade config file to 0.9.6.

15 years agosystem: Remove sysctl.conf.
Matthijs Kooijman [Tue, 30 Dec 2008 22:17:44 +0000 (23:17 +0100)]
system: Remove sysctl.conf.

sysctl.conf was still at the defaults, so we might as well remove it for now.

15 years agobackupninja: Make configs accessable for matthijs.
Matthijs Kooijman [Tue, 30 Dec 2008 21:16:26 +0000 (22:16 +0100)]
backupninja: Make configs accessable for matthijs.

15 years agobackupninja: Add default backupninja configuration.
Matthijs Kooijman [Tue, 30 Dec 2008 21:15:11 +0000 (22:15 +0100)]
backupninja: Add default backupninja configuration.

15 years agoLet sshd listen on port 222 for now.
Matthijs Kooijman [Mon, 29 Dec 2008 17:03:23 +0000 (18:03 +0100)]
Let sshd listen on port 222 for now.

15 years agovserver: Mount /data/{vcs,www} in the www vserver.
Matthijs Kooijman [Mon, 29 Dec 2008 17:02:44 +0000 (18:02 +0100)]
vserver: Mount /data/{vcs,www} in the www vserver.

15 years agovserver: Add backup vserver configuration.
Matthijs Kooijman [Mon, 29 Dec 2008 17:02:12 +0000 (18:02 +0100)]
vserver: Add backup vserver configuration.

16 years agovserver: Add www vserver configuration.
Matthijs Kooijman [Fri, 17 Oct 2008 12:34:22 +0000 (14:34 +0200)]
vserver: Add www vserver configuration.

16 years agovserver: Mount /data/db/mysql in the mysql vserver.
Matthijs Kooijman [Thu, 16 Oct 2008 17:34:04 +0000 (19:34 +0200)]
vserver: Mount /data/db/mysql in the mysql vserver.

16 years agovserver: Add a new script, vserver-hashify-all.
Matthijs Kooijman [Thu, 16 Oct 2008 17:05:48 +0000 (19:05 +0200)]
vserver: Add a new script, vserver-hashify-all.

16 years agovserver: Fix the generation of hostnames in the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:37:02 +0000 (16:37 +0200)]
vserver: Fix the generation of hostnames in the vserver-create script.

16 years agovserver: Fix the hostname of the mysql vserver.
Matthijs Kooijman [Thu, 16 Oct 2008 14:36:31 +0000 (16:36 +0200)]
vserver: Fix the hostname of the mysql vserver.

16 years agovserver: Make the vserver-create script killall -HUP dnsmasq.
Matthijs Kooijman [Thu, 16 Oct 2008 14:32:32 +0000 (16:32 +0200)]
vserver: Make the vserver-create script killall -HUP dnsmasq.

16 years agovserver: Make the vserver-create script update the dns verserver's hosts file.
Matthijs Kooijman [Thu, 16 Oct 2008 14:23:52 +0000 (16:23 +0200)]
vserver: Make the vserver-create script update the dns verserver's hosts file.

16 years agovserver: Add some comments to the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:17:03 +0000 (16:17 +0200)]
vserver: Add some comments to the vserver-create script.

16 years agovserver: Add some progress messages to the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:13:29 +0000 (16:13 +0200)]
vserver: Add some progress messages to the vserver-create script.

16 years agovserver: Add script for adding and setting up new vservers.
Matthijs Kooijman [Thu, 16 Oct 2008 14:10:07 +0000 (16:10 +0200)]
vserver: Add script for adding and setting up new vservers.

16 years agovserver: Add mysql vserver configuration.
Matthijs Kooijman [Thu, 16 Oct 2008 14:06:37 +0000 (16:06 +0200)]
vserver: Add mysql vserver configuration.

16 years agosystem: Set acl option on /data.
Matthijs Kooijman [Thu, 16 Oct 2008 14:00:05 +0000 (16:00 +0200)]
system: Set acl option on /data.

16 years agosystem: Fix alignment in fstab.
Matthijs Kooijman [Thu, 16 Oct 2008 13:59:16 +0000 (15:59 +0200)]
system: Fix alignment in fstab.

16 years agoapt: Add sources.list.
Matthijs Kooijman [Fri, 10 Oct 2008 09:52:12 +0000 (11:52 +0200)]
apt: Add sources.list.

16 years agovserver: Mount /data/db/dns in the dns vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:59:00 +0000 (20:59 +0200)]
vserver: Mount /data/db/dns in the dns vserver.

16 years agovserver: Add some extra tabs to the default fstab, to align it better.
Matthijs Kooijman [Thu, 9 Oct 2008 18:25:38 +0000 (20:25 +0200)]
vserver: Add some extra tabs to the default fstab, to align it better.

16 years agovserver: Mount /data/apt-repository/public in new vservers as well.
Matthijs Kooijman [Thu, 9 Oct 2008 18:24:39 +0000 (20:24 +0200)]
vserver: Mount /data/apt-repository/public in new vservers as well.

16 years agovserver: Mount the /data/apt-repository/public directory in every vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:22:59 +0000 (20:22 +0200)]
vserver: Mount the /data/apt-repository/public directory in every vserver.

16 years agovserver: Change the ip of the dns vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:22:29 +0000 (20:22 +0200)]
vserver: Change the ip of the dns vserver.

16 years agovserver: Add a hash directory for the /vservers filesystem.
Matthijs Kooijman [Fri, 26 Sep 2008 20:06:39 +0000 (22:06 +0200)]
vserver: Add a hash directory for the /vservers filesystem.

16 years agovservers: Mount /data/apt-repository in the build vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 20:05:51 +0000 (22:05 +0200)]
vservers: Mount /data/apt-repository in the build vserver.

16 years agofstab: Mount /vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 20:05:38 +0000 (22:05 +0200)]
fstab: Mount /vservers.

16 years agovserver: Remove the context.next file, second attempt.
Matthijs Kooijman [Fri, 26 Sep 2008 20:04:56 +0000 (22:04 +0200)]
vserver: Remove the context.next file, second attempt.

16 years agovserver: Update vdirbase configuration to point to /vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 19:54:36 +0000 (21:54 +0200)]
vserver: Update vdirbase configuration to point to /vservers.

All vserver root filesystems were moved there as well.

16 years agovserver: Enable vhashify for the dns vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 15:59:27 +0000 (17:59 +0200)]
vserver: Enable vhashify for the dns vserver.

16 years agovserver: Add dns vserver configuration.
Matthijs Kooijman [Fri, 26 Sep 2008 15:58:54 +0000 (17:58 +0200)]
vserver: Add dns vserver configuration.

16 years agovserver: Enable vhashify for the ldap, template and build vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 07:37:54 +0000 (09:37 +0200)]
vserver: Enable vhashify for the ldap, template and build vservers.

16 years agovserver: Remove the context.next file from git, it is too dynamic.
Matthijs Kooijman [Fri, 26 Sep 2008 07:37:31 +0000 (09:37 +0200)]
vserver: Remove the context.next file from git, it is too dynamic.

16 years agovserver: Add build vserver configuration.
Matthijs Kooijman [Fri, 26 Sep 2008 07:33:42 +0000 (09:33 +0200)]
vserver: Add build vserver configuration.

16 years agovserver: Make /data/db/ldap available in the ldap vserver.
Matthijs Kooijman [Thu, 25 Sep 2008 20:11:09 +0000 (22:11 +0200)]
vserver: Make /data/db/ldap available in the ldap vserver.

16 years agovserver: Add template and ldap vserver configurations.
Matthijs Kooijman [Thu, 25 Sep 2008 20:04:24 +0000 (22:04 +0200)]
vserver: Add template and ldap vserver configurations.

16 years agovserver: Remove the builder vserver.
Matthijs Kooijman [Thu, 25 Sep 2008 20:00:20 +0000 (22:00 +0200)]
vserver: Remove the builder vserver.

16 years agovserver: Include /var/cache/apt when hashifying.
Matthijs Kooijman [Tue, 16 Sep 2008 19:44:11 +0000 (21:44 +0200)]
vserver: Include /var/cache/apt when hashifying.

16 years agovserver: Don't hashify the /.git dir.
Matthijs Kooijman [Tue, 16 Sep 2008 19:42:48 +0000 (21:42 +0200)]
vserver: Don't hashify the /.git dir.

16 years agovserver: Create clone-exclude for files not be copied on cloning.
Matthijs Kooijman [Tue, 16 Sep 2008 19:41:45 +0000 (21:41 +0200)]
vserver: Create clone-exclude for files not be copied on cloning.

vunify/exclude contained lines for this, but those are not used by clone
(only the deprecated vcopy).

16 years agoapt: Set Default-release to "stable".
root [Tue, 16 Sep 2008 15:57:02 +0000 (17:57 +0200)]
apt: Set Default-release to "stable".

16 years agovserver: Set an explicit exclude list for vhashify, based on the default one.
Matthijs Kooijman [Tue, 16 Sep 2008 15:54:49 +0000 (17:54 +0200)]
vserver: Set an explicit exclude list for vhashify, based on the default one.

16 years agovserver: Disable automatic config file detection for vhashify.
Matthijs Kooijman [Tue, 16 Sep 2008 15:54:06 +0000 (17:54 +0200)]
vserver: Disable automatic config file detection for vhashify.

16 years agoapt: Further increase the cache limit.
Matthijs Kooijman [Tue, 16 Sep 2008 15:51:44 +0000 (17:51 +0200)]
apt: Further increase the cache limit.

16 years agoIncrease apt's cache size so we can keep etch, lenny and backports in our sources...
Matthijs Kooijman [Sun, 17 Aug 2008 11:10:29 +0000 (13:10 +0200)]
Increase apt's cache size so we can keep etch, lenny and backports in our sources.list.