Matthijs Kooijman [Sun, 7 Jun 2009 11:33:03 +0000 (13:33 +0200)]
vserver: Add new vserver to /etc/hosts on the host.
Previously, this would only happen for /etc/hosts in the dns vserver.
This commit also changes the configuration scheme for this hosts file
updating to be a bit less generalized.
root [Sun, 7 Jun 2009 11:25:56 +0000 (13:25 +0200)]
vserver: Add samba vserver configuration.
Matthijs Kooijman [Thu, 28 May 2009 09:25:27 +0000 (11:25 +0200)]
system: Add resolv.conf.
The file contains a single nameserver, which is the official caching
recursive resolver of Coloclue.
Matthijs Kooijman [Mon, 25 May 2009 10:24:47 +0000 (12:24 +0200)]
grub: Remove old kernel.
Matthijs Kooijman [Mon, 25 May 2009 10:23:55 +0000 (12:23 +0200)]
kernel: Don't install symlinks in /.
Matthijs Kooijman [Mon, 25 May 2009 10:23:24 +0000 (12:23 +0200)]
kernel: Add default kernel-img.conf.
Matthijs Kooijman [Tue, 5 May 2009 18:16:56 +0000 (20:16 +0200)]
system: Add hosts file.
This file contains the default stuff, zeratul-direct and all vservers.
Matthijs Kooijman [Tue, 5 May 2009 16:09:52 +0000 (18:09 +0200)]
rsyslog: Use another format for forwarding messages.
The syslog protocol 23 format seems to be broken in rsyslog for messages
that were originally generated by legacy applications (i.e., do not have
a structured-data field).
See http://bugzilla.adiscon.com/show_bug.cgi?id=125
Matthijs Kooijman [Tue, 5 May 2009 13:55:27 +0000 (15:55 +0200)]
rsyslog: Make the main queue disk-assisted as well.
Matthijs Kooijman [Tue, 5 May 2009 13:07:22 +0000 (15:07 +0200)]
rsyslog: Enable queuing of log messages.
This prevents messages from getting lost when the log vserver is
temporarily unavailable.
Matthijs Kooijman [Tue, 5 May 2009 08:52:30 +0000 (10:52 +0200)]
rsyslog: Send all logs to the log vserver.
This happens in addition to local logging.
Matthijs Kooijman [Tue, 5 May 2009 08:17:52 +0000 (10:17 +0200)]
rsyslog: Move all rsyslog log files into a subdir.
This allows us to use *.log in the logrotate configuration, without
conflicting with logfiles not created by rsyslog.
Matthijs Kooijman [Mon, 4 May 2009 20:41:06 +0000 (22:41 +0200)]
rsyslog: Update logrotate config to new rsyslog config.
Matthijs Kooijman [Mon, 4 May 2009 20:37:56 +0000 (22:37 +0200)]
rsyslog: Add default logrotate config.
Matthijs Kooijman [Mon, 4 May 2009 20:00:15 +0000 (22:00 +0200)]
rsyslog: Clean up rsyslog configuration.
This removes some commented out lines, and reorganizes the existing
logfiles to be more consistent.
Matthijs Kooijman [Tue, 5 May 2009 16:32:26 +0000 (18:32 +0200)]
rsyslog: Add default configuration.
Matthijs Kooijman [Tue, 5 May 2009 16:27:36 +0000 (18:27 +0200)]
vserver: Don't copy any spool files when cloning.
Matthijs Kooijman [Tue, 5 May 2009 11:05:05 +0000 (13:05 +0200)]
vserver: Mount /data/other/apt-archives in new vservers.
Matthijs Kooijman [Tue, 5 May 2009 11:03:49 +0000 (13:03 +0200)]
vserver: Mount /data/other/apt-archives in the log vserver.
Matthijs Kooijman [Tue, 5 May 2009 09:43:35 +0000 (11:43 +0200)]
vservers: Mount /data/log in the log vserver.
root [Mon, 4 May 2009 19:32:02 +0000 (21:32 +0200)]
vserver: Add log vserver configuration.
Matthijs Kooijman [Mon, 27 Apr 2009 07:30:24 +0000 (09:30 +0200)]
system: Don't accept ipv6 router advertisements.
Matthijs Kooijman [Mon, 27 Apr 2009 07:28:33 +0000 (09:28 +0200)]
system: Remove all commented entries from sysctl.conf.
Matthijs Kooijman [Sun, 26 Apr 2009 21:07:06 +0000 (23:07 +0200)]
system: Add default sysctl.conf.
Matthijs Kooijman [Fri, 17 Apr 2009 14:26:52 +0000 (16:26 +0200)]
vservers: Make dns depend on ldap instead of v.v.
Apparently the dns vserver suffers from long timeouts when ldap is not
started yet, while ldap can start without DNS just fine.
Matthijs Kooijman [Fri, 17 Apr 2009 12:44:28 +0000 (14:44 +0200)]
apt: Add repository for vuurmuur.
Matthijs Kooijman [Fri, 17 Apr 2009 12:30:00 +0000 (14:30 +0200)]
ssh: Update listen addresses.
This changes the port back to 22 for all but the external interface,
sets sshd to listen on localhost and fixes a typo in the direct
zeratul link address.
Matthijs Kooijman [Fri, 17 Apr 2009 12:29:18 +0000 (14:29 +0200)]
network: Update to new IP address.
Matthijs Kooijman [Fri, 17 Apr 2009 12:28:41 +0000 (14:28 +0200)]
grub: Remove savedefault from all kernels.
This is the new default configuration of grub, so we might as well use
it.
Matthijs Kooijman [Fri, 17 Apr 2009 12:28:15 +0000 (14:28 +0200)]
grub: Add a new kernels.
root [Thu, 16 Apr 2009 14:49:22 +0000 (16:49 +0200)]
vuurmuur: Make portforward rules work.
The Portfw rules did not work, since vuurmuur does not know the concept
of local networks and produced FORWARD rules in place of INPUT rules. We
emulate this behaviour by giving the firewall a virtual interface for
each vserver on the world.inet network. This needs splitting the Portfw
rules into a normal Dnat rule and a hacky Accept rule, which gets in_int
set.
root [Thu, 16 Apr 2009 14:22:42 +0000 (16:22 +0200)]
vuurmuur: Fix accept rule for outgoing verserver connections.
Since vuurmuur doesn't have native support for "internal" networks, we
can't limit this rule to just vservers.
root [Thu, 16 Apr 2009 14:20:24 +0000 (16:20 +0200)]
vuurmuur: Add separators to the rule config.
root [Thu, 16 Apr 2009 14:19:47 +0000 (16:19 +0200)]
vuurmuur: Allow ping.
root [Thu, 16 Apr 2009 14:17:33 +0000 (16:17 +0200)]
vuurmuur: Set the path to the conntrack binary.
This allows vuurmuur to do some extra connection-related stuff, such as
killing connections.
root [Thu, 16 Apr 2009 14:16:57 +0000 (16:16 +0200)]
vuurmuur: Fill in data for zeratul.
root [Thu, 16 Apr 2009 14:16:22 +0000 (16:16 +0200)]
vuurmuur: Fix the port for ssh-host service.
Matthijs Kooijman [Thu, 16 Apr 2009 13:32:08 +0000 (15:32 +0200)]
vserver: Skip hashify for vservers with vhashify disabled.
Matthijs Kooijman [Thu, 16 Apr 2009 13:30:11 +0000 (15:30 +0200)]
vserver: Some more vserver-hashify-all cleanups.
Matthijs Kooijman [Thu, 16 Apr 2009 13:24:05 +0000 (15:24 +0200)]
vserver: Don't break when no hashed files te delete.
Previously, if find would find no hashed files to delete, xargs would
still run rm without arguments. Now it doesn't.
Matthijs Kooijman [Thu, 16 Apr 2009 13:18:47 +0000 (15:18 +0200)]
vserver: Cleanup vserver-hashify-all script.
This adds proper quoting and uses absolute paths.
Matthijs Kooijman [Thu, 16 Apr 2009 13:15:57 +0000 (15:15 +0200)]
vserver: Hashify hosts even when they are not running.
Docs say the vserver should be running to call package management, but
we don't use that anyway.
root [Thu, 16 Apr 2009 11:56:27 +0000 (13:56 +0200)]
Disable loading of modules, since we don't have them enabled.
root [Thu, 16 Apr 2009 10:40:27 +0000 (12:40 +0200)]
vuurmuur: Enable vuurmuur on startup.
root [Thu, 16 Apr 2009 10:39:01 +0000 (12:39 +0200)]
vuurmuur: Define a sane ruleset.
root [Thu, 16 Apr 2009 09:26:59 +0000 (11:26 +0200)]
vuurmuur: Add default configuration.
root [Wed, 15 Apr 2009 21:03:25 +0000 (23:03 +0200)]
vserver: Set dependencies between vservers.
root [Wed, 15 Apr 2009 21:01:58 +0000 (23:01 +0200)]
vserver: Mark most vservers for autostart.
Matthijs Kooijman [Wed, 15 Apr 2009 17:31:06 +0000 (19:31 +0200)]
vserver: Give all vservers a shared /var/cache/apt/archives dir.
Each vserver has write access to this dir, so any packages downloaded
can be shared by all. This saves download bandwidth, but more
importantly it saves storage size (upgrading all vservers at the same
time easily eats up gigabytes of space).
Since each vservers still has its own Release and Contents files and
checks gnupg signatures and hashes before installing the .debs, there
should not be a security issue.
Matthijs Kooijman [Sat, 4 Apr 2009 11:33:26 +0000 (13:33 +0200)]
vserver: Mount most of /data in login.
Matthijs Kooijman [Sat, 4 Apr 2009 11:33:02 +0000 (13:33 +0200)]
ssh: Listen on the new IP address.
Matthijs Kooijman [Sat, 4 Apr 2009 11:31:55 +0000 (13:31 +0200)]
vserver: Mount /data/ in the backup vserver.
root [Sun, 29 Mar 2009 21:54:18 +0000 (23:54 +0200)]
vserver: Add mail vserver configuration.
Matthijs Kooijman [Sun, 29 Mar 2009 12:57:41 +0000 (14:57 +0200)]
vserver: Enable vhashify for the www vserver.
root [Sun, 29 Mar 2009 12:38:59 +0000 (14:38 +0200)]
vserver: Add login vserver configuration.
Matthijs Kooijman [Tue, 30 Dec 2008 22:23:14 +0000 (23:23 +0100)]
system: Upgrade to lenny.
Matthijs Kooijman [Tue, 30 Dec 2008 22:21:11 +0000 (23:21 +0100)]
backupninja: Upgrade config file to 0.9.6.
Matthijs Kooijman [Tue, 30 Dec 2008 22:17:44 +0000 (23:17 +0100)]
system: Remove sysctl.conf.
sysctl.conf was still at the defaults, so we might as well remove it for now.
Matthijs Kooijman [Tue, 30 Dec 2008 21:16:26 +0000 (22:16 +0100)]
backupninja: Make configs accessable for matthijs.
Matthijs Kooijman [Tue, 30 Dec 2008 21:15:11 +0000 (22:15 +0100)]
backupninja: Add default backupninja configuration.
Matthijs Kooijman [Mon, 29 Dec 2008 17:03:23 +0000 (18:03 +0100)]
Let sshd listen on port 222 for now.
Matthijs Kooijman [Mon, 29 Dec 2008 17:02:44 +0000 (18:02 +0100)]
vserver: Mount /data/{vcs,www} in the www vserver.
Matthijs Kooijman [Mon, 29 Dec 2008 17:02:12 +0000 (18:02 +0100)]
vserver: Add backup vserver configuration.
Matthijs Kooijman [Fri, 17 Oct 2008 12:34:22 +0000 (14:34 +0200)]
vserver: Add www vserver configuration.
Matthijs Kooijman [Thu, 16 Oct 2008 17:34:04 +0000 (19:34 +0200)]
vserver: Mount /data/db/mysql in the mysql vserver.
Matthijs Kooijman [Thu, 16 Oct 2008 17:05:48 +0000 (19:05 +0200)]
vserver: Add a new script, vserver-hashify-all.
Matthijs Kooijman [Thu, 16 Oct 2008 14:37:02 +0000 (16:37 +0200)]
vserver: Fix the generation of hostnames in the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:36:31 +0000 (16:36 +0200)]
vserver: Fix the hostname of the mysql vserver.
Matthijs Kooijman [Thu, 16 Oct 2008 14:32:32 +0000 (16:32 +0200)]
vserver: Make the vserver-create script killall -HUP dnsmasq.
Matthijs Kooijman [Thu, 16 Oct 2008 14:23:52 +0000 (16:23 +0200)]
vserver: Make the vserver-create script update the dns verserver's hosts file.
Matthijs Kooijman [Thu, 16 Oct 2008 14:17:03 +0000 (16:17 +0200)]
vserver: Add some comments to the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:13:29 +0000 (16:13 +0200)]
vserver: Add some progress messages to the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:10:07 +0000 (16:10 +0200)]
vserver: Add script for adding and setting up new vservers.
Matthijs Kooijman [Thu, 16 Oct 2008 14:06:37 +0000 (16:06 +0200)]
vserver: Add mysql vserver configuration.
Matthijs Kooijman [Thu, 16 Oct 2008 14:00:05 +0000 (16:00 +0200)]
system: Set acl option on /data.
Matthijs Kooijman [Thu, 16 Oct 2008 13:59:16 +0000 (15:59 +0200)]
system: Fix alignment in fstab.
Matthijs Kooijman [Fri, 10 Oct 2008 09:52:12 +0000 (11:52 +0200)]
apt: Add sources.list.
Matthijs Kooijman [Thu, 9 Oct 2008 18:59:00 +0000 (20:59 +0200)]
vserver: Mount /data/db/dns in the dns vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:25:38 +0000 (20:25 +0200)]
vserver: Add some extra tabs to the default fstab, to align it better.
Matthijs Kooijman [Thu, 9 Oct 2008 18:24:39 +0000 (20:24 +0200)]
vserver: Mount /data/apt-repository/public in new vservers as well.
Matthijs Kooijman [Thu, 9 Oct 2008 18:22:59 +0000 (20:22 +0200)]
vserver: Mount the /data/apt-repository/public directory in every vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:22:29 +0000 (20:22 +0200)]
vserver: Change the ip of the dns vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 20:06:39 +0000 (22:06 +0200)]
vserver: Add a hash directory for the /vservers filesystem.
Matthijs Kooijman [Fri, 26 Sep 2008 20:05:51 +0000 (22:05 +0200)]
vservers: Mount /data/apt-repository in the build vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 20:05:38 +0000 (22:05 +0200)]
fstab: Mount /vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 20:04:56 +0000 (22:04 +0200)]
vserver: Remove the context.next file, second attempt.
Matthijs Kooijman [Fri, 26 Sep 2008 19:54:36 +0000 (21:54 +0200)]
vserver: Update vdirbase configuration to point to /vservers.
All vserver root filesystems were moved there as well.
Matthijs Kooijman [Fri, 26 Sep 2008 15:59:27 +0000 (17:59 +0200)]
vserver: Enable vhashify for the dns vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 15:58:54 +0000 (17:58 +0200)]
vserver: Add dns vserver configuration.
Matthijs Kooijman [Fri, 26 Sep 2008 07:37:54 +0000 (09:37 +0200)]
vserver: Enable vhashify for the ldap, template and build vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 07:37:31 +0000 (09:37 +0200)]
vserver: Remove the context.next file from git, it is too dynamic.
Matthijs Kooijman [Fri, 26 Sep 2008 07:33:42 +0000 (09:33 +0200)]
vserver: Add build vserver configuration.
Matthijs Kooijman [Thu, 25 Sep 2008 20:11:09 +0000 (22:11 +0200)]
vserver: Make /data/db/ldap available in the ldap vserver.
Matthijs Kooijman [Thu, 25 Sep 2008 20:04:24 +0000 (22:04 +0200)]
vserver: Add template and ldap vserver configurations.
Matthijs Kooijman [Thu, 25 Sep 2008 20:00:20 +0000 (22:00 +0200)]
vserver: Remove the builder vserver.
Matthijs Kooijman [Tue, 16 Sep 2008 19:44:11 +0000 (21:44 +0200)]
vserver: Include /var/cache/apt when hashifying.
Matthijs Kooijman [Tue, 16 Sep 2008 19:42:48 +0000 (21:42 +0200)]
vserver: Don't hashify the /.git dir.
Matthijs Kooijman [Tue, 16 Sep 2008 19:41:45 +0000 (21:41 +0200)]
vserver: Create clone-exclude for files not be copied on cloning.
vunify/exclude contained lines for this, but those are not used by clone
(only the deprecated vcopy).
root [Tue, 16 Sep 2008 15:57:02 +0000 (17:57 +0200)]
apt: Set Default-release to "stable".
Matthijs Kooijman [Tue, 16 Sep 2008 15:54:49 +0000 (17:54 +0200)]
vserver: Set an explicit exclude list for vhashify, based on the default one.