Matthijs Kooijman [Tue, 5 May 2009 09:43:35 +0000 (11:43 +0200)]
vservers: Mount /data/log in the log vserver.
root [Mon, 4 May 2009 19:32:02 +0000 (21:32 +0200)]
vserver: Add log vserver configuration.
Matthijs Kooijman [Mon, 27 Apr 2009 07:30:24 +0000 (09:30 +0200)]
system: Don't accept ipv6 router advertisements.
Matthijs Kooijman [Mon, 27 Apr 2009 07:28:33 +0000 (09:28 +0200)]
system: Remove all commented entries from sysctl.conf.
Matthijs Kooijman [Sun, 26 Apr 2009 21:07:06 +0000 (23:07 +0200)]
system: Add default sysctl.conf.
Matthijs Kooijman [Fri, 17 Apr 2009 14:26:52 +0000 (16:26 +0200)]
vservers: Make dns depend on ldap instead of v.v.
Apparently the dns vserver suffers from long timeouts when ldap is not
started yet, while ldap can start without DNS just fine.
Matthijs Kooijman [Fri, 17 Apr 2009 12:44:28 +0000 (14:44 +0200)]
apt: Add repository for vuurmuur.
Matthijs Kooijman [Fri, 17 Apr 2009 12:30:00 +0000 (14:30 +0200)]
ssh: Update listen addresses.
This changes the port back to 22 for all but the external interface,
sets sshd to listen on localhost and fixes a typo in the direct
zeratul link address.
Matthijs Kooijman [Fri, 17 Apr 2009 12:29:18 +0000 (14:29 +0200)]
network: Update to new IP address.
Matthijs Kooijman [Fri, 17 Apr 2009 12:28:41 +0000 (14:28 +0200)]
grub: Remove savedefault from all kernels.
This is the new default configuration of grub, so we might as well use
it.
Matthijs Kooijman [Fri, 17 Apr 2009 12:28:15 +0000 (14:28 +0200)]
grub: Add a new kernels.
root [Thu, 16 Apr 2009 14:49:22 +0000 (16:49 +0200)]
vuurmuur: Make portforward rules work.
The Portfw rules did not work, since vuurmuur does not know the concept
of local networks and produced FORWARD rules in place of INPUT rules. We
emulate this behaviour by giving the firewall a virtual interface for
each vserver on the world.inet network. This needs splitting the Portfw
rules into a normal Dnat rule and a hacky Accept rule, which gets in_int
set.
root [Thu, 16 Apr 2009 14:22:42 +0000 (16:22 +0200)]
vuurmuur: Fix accept rule for outgoing verserver connections.
Since vuurmuur doesn't have native support for "internal" networks, we
can't limit this rule to just vservers.
root [Thu, 16 Apr 2009 14:20:24 +0000 (16:20 +0200)]
vuurmuur: Add separators to the rule config.
root [Thu, 16 Apr 2009 14:19:47 +0000 (16:19 +0200)]
vuurmuur: Allow ping.
root [Thu, 16 Apr 2009 14:17:33 +0000 (16:17 +0200)]
vuurmuur: Set the path to the conntrack binary.
This allows vuurmuur to do some extra connection-related stuff, such as
killing connections.
root [Thu, 16 Apr 2009 14:16:57 +0000 (16:16 +0200)]
vuurmuur: Fill in data for zeratul.
root [Thu, 16 Apr 2009 14:16:22 +0000 (16:16 +0200)]
vuurmuur: Fix the port for ssh-host service.
Matthijs Kooijman [Thu, 16 Apr 2009 13:32:08 +0000 (15:32 +0200)]
vserver: Skip hashify for vservers with vhashify disabled.
Matthijs Kooijman [Thu, 16 Apr 2009 13:30:11 +0000 (15:30 +0200)]
vserver: Some more vserver-hashify-all cleanups.
Matthijs Kooijman [Thu, 16 Apr 2009 13:24:05 +0000 (15:24 +0200)]
vserver: Don't break when no hashed files te delete.
Previously, if find would find no hashed files to delete, xargs would
still run rm without arguments. Now it doesn't.
Matthijs Kooijman [Thu, 16 Apr 2009 13:18:47 +0000 (15:18 +0200)]
vserver: Cleanup vserver-hashify-all script.
This adds proper quoting and uses absolute paths.
Matthijs Kooijman [Thu, 16 Apr 2009 13:15:57 +0000 (15:15 +0200)]
vserver: Hashify hosts even when they are not running.
Docs say the vserver should be running to call package management, but
we don't use that anyway.
root [Thu, 16 Apr 2009 11:56:27 +0000 (13:56 +0200)]
Disable loading of modules, since we don't have them enabled.
root [Thu, 16 Apr 2009 10:40:27 +0000 (12:40 +0200)]
vuurmuur: Enable vuurmuur on startup.
root [Thu, 16 Apr 2009 10:39:01 +0000 (12:39 +0200)]
vuurmuur: Define a sane ruleset.
root [Thu, 16 Apr 2009 09:26:59 +0000 (11:26 +0200)]
vuurmuur: Add default configuration.
root [Wed, 15 Apr 2009 21:03:25 +0000 (23:03 +0200)]
vserver: Set dependencies between vservers.
root [Wed, 15 Apr 2009 21:01:58 +0000 (23:01 +0200)]
vserver: Mark most vservers for autostart.
Matthijs Kooijman [Wed, 15 Apr 2009 17:31:06 +0000 (19:31 +0200)]
vserver: Give all vservers a shared /var/cache/apt/archives dir.
Each vserver has write access to this dir, so any packages downloaded
can be shared by all. This saves download bandwidth, but more
importantly it saves storage size (upgrading all vservers at the same
time easily eats up gigabytes of space).
Since each vservers still has its own Release and Contents files and
checks gnupg signatures and hashes before installing the .debs, there
should not be a security issue.
Matthijs Kooijman [Sat, 4 Apr 2009 11:33:26 +0000 (13:33 +0200)]
vserver: Mount most of /data in login.
Matthijs Kooijman [Sat, 4 Apr 2009 11:33:02 +0000 (13:33 +0200)]
ssh: Listen on the new IP address.
Matthijs Kooijman [Sat, 4 Apr 2009 11:31:55 +0000 (13:31 +0200)]
vserver: Mount /data/ in the backup vserver.
root [Sun, 29 Mar 2009 21:54:18 +0000 (23:54 +0200)]
vserver: Add mail vserver configuration.
Matthijs Kooijman [Sun, 29 Mar 2009 12:57:41 +0000 (14:57 +0200)]
vserver: Enable vhashify for the www vserver.
root [Sun, 29 Mar 2009 12:38:59 +0000 (14:38 +0200)]
vserver: Add login vserver configuration.
Matthijs Kooijman [Tue, 30 Dec 2008 22:23:14 +0000 (23:23 +0100)]
system: Upgrade to lenny.
Matthijs Kooijman [Tue, 30 Dec 2008 22:21:11 +0000 (23:21 +0100)]
backupninja: Upgrade config file to 0.9.6.
Matthijs Kooijman [Tue, 30 Dec 2008 22:17:44 +0000 (23:17 +0100)]
system: Remove sysctl.conf.
sysctl.conf was still at the defaults, so we might as well remove it for now.
Matthijs Kooijman [Tue, 30 Dec 2008 21:16:26 +0000 (22:16 +0100)]
backupninja: Make configs accessable for matthijs.
Matthijs Kooijman [Tue, 30 Dec 2008 21:15:11 +0000 (22:15 +0100)]
backupninja: Add default backupninja configuration.
Matthijs Kooijman [Mon, 29 Dec 2008 17:03:23 +0000 (18:03 +0100)]
Let sshd listen on port 222 for now.
Matthijs Kooijman [Mon, 29 Dec 2008 17:02:44 +0000 (18:02 +0100)]
vserver: Mount /data/{vcs,www} in the www vserver.
Matthijs Kooijman [Mon, 29 Dec 2008 17:02:12 +0000 (18:02 +0100)]
vserver: Add backup vserver configuration.
Matthijs Kooijman [Fri, 17 Oct 2008 12:34:22 +0000 (14:34 +0200)]
vserver: Add www vserver configuration.
Matthijs Kooijman [Thu, 16 Oct 2008 17:34:04 +0000 (19:34 +0200)]
vserver: Mount /data/db/mysql in the mysql vserver.
Matthijs Kooijman [Thu, 16 Oct 2008 17:05:48 +0000 (19:05 +0200)]
vserver: Add a new script, vserver-hashify-all.
Matthijs Kooijman [Thu, 16 Oct 2008 14:37:02 +0000 (16:37 +0200)]
vserver: Fix the generation of hostnames in the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:36:31 +0000 (16:36 +0200)]
vserver: Fix the hostname of the mysql vserver.
Matthijs Kooijman [Thu, 16 Oct 2008 14:32:32 +0000 (16:32 +0200)]
vserver: Make the vserver-create script killall -HUP dnsmasq.
Matthijs Kooijman [Thu, 16 Oct 2008 14:23:52 +0000 (16:23 +0200)]
vserver: Make the vserver-create script update the dns verserver's hosts file.
Matthijs Kooijman [Thu, 16 Oct 2008 14:17:03 +0000 (16:17 +0200)]
vserver: Add some comments to the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:13:29 +0000 (16:13 +0200)]
vserver: Add some progress messages to the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:10:07 +0000 (16:10 +0200)]
vserver: Add script for adding and setting up new vservers.
Matthijs Kooijman [Thu, 16 Oct 2008 14:06:37 +0000 (16:06 +0200)]
vserver: Add mysql vserver configuration.
Matthijs Kooijman [Thu, 16 Oct 2008 14:00:05 +0000 (16:00 +0200)]
system: Set acl option on /data.
Matthijs Kooijman [Thu, 16 Oct 2008 13:59:16 +0000 (15:59 +0200)]
system: Fix alignment in fstab.
Matthijs Kooijman [Fri, 10 Oct 2008 09:52:12 +0000 (11:52 +0200)]
apt: Add sources.list.
Matthijs Kooijman [Thu, 9 Oct 2008 18:59:00 +0000 (20:59 +0200)]
vserver: Mount /data/db/dns in the dns vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:25:38 +0000 (20:25 +0200)]
vserver: Add some extra tabs to the default fstab, to align it better.
Matthijs Kooijman [Thu, 9 Oct 2008 18:24:39 +0000 (20:24 +0200)]
vserver: Mount /data/apt-repository/public in new vservers as well.
Matthijs Kooijman [Thu, 9 Oct 2008 18:22:59 +0000 (20:22 +0200)]
vserver: Mount the /data/apt-repository/public directory in every vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:22:29 +0000 (20:22 +0200)]
vserver: Change the ip of the dns vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 20:06:39 +0000 (22:06 +0200)]
vserver: Add a hash directory for the /vservers filesystem.
Matthijs Kooijman [Fri, 26 Sep 2008 20:05:51 +0000 (22:05 +0200)]
vservers: Mount /data/apt-repository in the build vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 20:05:38 +0000 (22:05 +0200)]
fstab: Mount /vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 20:04:56 +0000 (22:04 +0200)]
vserver: Remove the context.next file, second attempt.
Matthijs Kooijman [Fri, 26 Sep 2008 19:54:36 +0000 (21:54 +0200)]
vserver: Update vdirbase configuration to point to /vservers.
All vserver root filesystems were moved there as well.
Matthijs Kooijman [Fri, 26 Sep 2008 15:59:27 +0000 (17:59 +0200)]
vserver: Enable vhashify for the dns vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 15:58:54 +0000 (17:58 +0200)]
vserver: Add dns vserver configuration.
Matthijs Kooijman [Fri, 26 Sep 2008 07:37:54 +0000 (09:37 +0200)]
vserver: Enable vhashify for the ldap, template and build vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 07:37:31 +0000 (09:37 +0200)]
vserver: Remove the context.next file from git, it is too dynamic.
Matthijs Kooijman [Fri, 26 Sep 2008 07:33:42 +0000 (09:33 +0200)]
vserver: Add build vserver configuration.
Matthijs Kooijman [Thu, 25 Sep 2008 20:11:09 +0000 (22:11 +0200)]
vserver: Make /data/db/ldap available in the ldap vserver.
Matthijs Kooijman [Thu, 25 Sep 2008 20:04:24 +0000 (22:04 +0200)]
vserver: Add template and ldap vserver configurations.
Matthijs Kooijman [Thu, 25 Sep 2008 20:00:20 +0000 (22:00 +0200)]
vserver: Remove the builder vserver.
Matthijs Kooijman [Tue, 16 Sep 2008 19:44:11 +0000 (21:44 +0200)]
vserver: Include /var/cache/apt when hashifying.
Matthijs Kooijman [Tue, 16 Sep 2008 19:42:48 +0000 (21:42 +0200)]
vserver: Don't hashify the /.git dir.
Matthijs Kooijman [Tue, 16 Sep 2008 19:41:45 +0000 (21:41 +0200)]
vserver: Create clone-exclude for files not be copied on cloning.
vunify/exclude contained lines for this, but those are not used by clone
(only the deprecated vcopy).
root [Tue, 16 Sep 2008 15:57:02 +0000 (17:57 +0200)]
apt: Set Default-release to "stable".
Matthijs Kooijman [Tue, 16 Sep 2008 15:54:49 +0000 (17:54 +0200)]
vserver: Set an explicit exclude list for vhashify, based on the default one.
Matthijs Kooijman [Tue, 16 Sep 2008 15:54:06 +0000 (17:54 +0200)]
vserver: Disable automatic config file detection for vhashify.
Matthijs Kooijman [Tue, 16 Sep 2008 15:51:44 +0000 (17:51 +0200)]
apt: Further increase the cache limit.
Matthijs Kooijman [Sun, 17 Aug 2008 11:10:29 +0000 (13:10 +0200)]
Increase apt's cache size so we can keep etch, lenny and backports in our sources.list.
Matthijs Kooijman [Fri, 8 Aug 2008 13:47:29 +0000 (15:47 +0200)]
Set a default mirror for the debootstrap build method.
Matthijs Kooijman [Fri, 8 Aug 2008 09:59:32 +0000 (11:59 +0200)]
Add a bindmount for /home to the default fstab for new vservers.
Matthijs Kooijman [Fri, 8 Aug 2008 09:58:03 +0000 (11:58 +0200)]
Remove the sudoers file from git, since it is not readable by normal users.
Matthijs Kooijman [Fri, 8 Aug 2008 09:55:00 +0000 (11:55 +0200)]
Add the default fstab to /etc/vservers/.defaults (copied from /usr/lib/util-vserver/defaults/fstab).
Matthijs Kooijman [Fri, 8 Aug 2008 08:40:35 +0000 (10:40 +0200)]
Make network configuration static and change dummy address.
Matthijs Kooijman [Fri, 8 Aug 2008 08:39:13 +0000 (10:39 +0200)]
Add default vserver configuration files.
Matthijs Kooijman [Mon, 23 Jun 2008 15:54:46 +0000 (17:54 +0200)]
Mount /home in the builder vserver.
Matthijs Kooijman [Mon, 23 Jun 2008 15:54:19 +0000 (17:54 +0200)]
Add new vserver "builder"
This vserver will take care of building local debian packages and building a
repository out of them. We will also use it for kernel building.
Matthijs Kooijman [Thu, 19 Jun 2008 09:40:07 +0000 (11:40 +0200)]
Make sshd listen on the external ip only.
Matthijs Kooijman [Thu, 19 Jun 2008 09:38:32 +0000 (11:38 +0200)]
Add initial sshd_config.
Matthijs Kooijman [Wed, 18 Jun 2008 10:56:43 +0000 (12:56 +0200)]
* Add configuration for dummy interface.
Matthijs Kooijman [Tue, 17 Jun 2008 21:11:17 +0000 (23:11 +0200)]
* Replace hpasm initscript with a bare version.
Matthijs Kooijman [Tue, 17 Jun 2008 20:31:00 +0000 (22:31 +0200)]
* Add initial hpasm init script.
Matthijs Kooijman [Tue, 17 Jun 2008 19:51:00 +0000 (21:51 +0200)]
* Actually run update-grub after changing kopts.
Matthijs Kooijman [Tue, 17 Jun 2008 19:50:07 +0000 (21:50 +0200)]
* Add initial /etc/network/interfaces.
Matthijs Kooijman [Tue, 17 Jun 2008 11:55:02 +0000 (13:55 +0200)]
* Enable getty on the first serial port.