matthijs/servers/drsnuggles.git
15 years agosystem: Don't accept ipv6 router advertisements.
Matthijs Kooijman [Mon, 27 Apr 2009 07:30:24 +0000 (09:30 +0200)]
system: Don't accept ipv6 router advertisements.

15 years agosystem: Remove all commented entries from sysctl.conf.
Matthijs Kooijman [Mon, 27 Apr 2009 07:28:33 +0000 (09:28 +0200)]
system: Remove all commented entries from sysctl.conf.

15 years agosystem: Add default sysctl.conf.
Matthijs Kooijman [Sun, 26 Apr 2009 21:07:06 +0000 (23:07 +0200)]
system: Add default sysctl.conf.

15 years agovservers: Make dns depend on ldap instead of v.v.
Matthijs Kooijman [Fri, 17 Apr 2009 14:26:52 +0000 (16:26 +0200)]
vservers: Make dns depend on ldap instead of v.v.

Apparently the dns vserver suffers from long timeouts when ldap is not
started yet, while ldap can start without DNS just fine.

15 years agoapt: Add repository for vuurmuur.
Matthijs Kooijman [Fri, 17 Apr 2009 12:44:28 +0000 (14:44 +0200)]
apt: Add repository for vuurmuur.

15 years agossh: Update listen addresses.
Matthijs Kooijman [Fri, 17 Apr 2009 12:30:00 +0000 (14:30 +0200)]
ssh: Update listen addresses.

This changes the port back to 22 for all but the external interface,
sets sshd to listen on localhost and fixes a typo in the direct
zeratul link address.

15 years agonetwork: Update to new IP address.
Matthijs Kooijman [Fri, 17 Apr 2009 12:29:18 +0000 (14:29 +0200)]
network: Update to new IP address.

15 years agogrub: Remove savedefault from all kernels.
Matthijs Kooijman [Fri, 17 Apr 2009 12:28:41 +0000 (14:28 +0200)]
grub: Remove savedefault from all kernels.

This is the new default configuration of grub, so we might as well use
it.

15 years agogrub: Add a new kernels.
Matthijs Kooijman [Fri, 17 Apr 2009 12:28:15 +0000 (14:28 +0200)]
grub: Add a new kernels.

15 years agovuurmuur: Make portforward rules work.
root [Thu, 16 Apr 2009 14:49:22 +0000 (16:49 +0200)]
vuurmuur: Make portforward rules work.

The Portfw rules did not work, since vuurmuur does not know the concept
of local networks and produced FORWARD rules in place of INPUT rules. We
emulate this behaviour by giving the firewall a virtual interface for
each vserver on the world.inet network. This needs splitting the Portfw
rules into a normal Dnat rule and a hacky Accept rule, which gets in_int
set.

15 years agovuurmuur: Fix accept rule for outgoing verserver connections.
root [Thu, 16 Apr 2009 14:22:42 +0000 (16:22 +0200)]
vuurmuur: Fix accept rule for outgoing verserver connections.

Since vuurmuur doesn't have native support for "internal" networks, we
can't limit this rule to just vservers.

15 years agovuurmuur: Add separators to the rule config.
root [Thu, 16 Apr 2009 14:20:24 +0000 (16:20 +0200)]
vuurmuur: Add separators to the rule config.

15 years agovuurmuur: Allow ping.
root [Thu, 16 Apr 2009 14:19:47 +0000 (16:19 +0200)]
vuurmuur: Allow ping.

15 years agovuurmuur: Set the path to the conntrack binary.
root [Thu, 16 Apr 2009 14:17:33 +0000 (16:17 +0200)]
vuurmuur: Set the path to the conntrack binary.

This allows vuurmuur to do some extra connection-related stuff, such as
killing connections.

15 years agovuurmuur: Fill in data for zeratul.
root [Thu, 16 Apr 2009 14:16:57 +0000 (16:16 +0200)]
vuurmuur: Fill in data for zeratul.

15 years agovuurmuur: Fix the port for ssh-host service.
root [Thu, 16 Apr 2009 14:16:22 +0000 (16:16 +0200)]
vuurmuur: Fix the port for ssh-host service.

15 years agovserver: Skip hashify for vservers with vhashify disabled.
Matthijs Kooijman [Thu, 16 Apr 2009 13:32:08 +0000 (15:32 +0200)]
vserver: Skip hashify for vservers with vhashify disabled.

15 years agovserver: Some more vserver-hashify-all cleanups.
Matthijs Kooijman [Thu, 16 Apr 2009 13:30:11 +0000 (15:30 +0200)]
vserver: Some more vserver-hashify-all cleanups.

15 years agovserver: Don't break when no hashed files te delete.
Matthijs Kooijman [Thu, 16 Apr 2009 13:24:05 +0000 (15:24 +0200)]
vserver: Don't break when no hashed files te delete.

Previously, if find would find no hashed files to delete, xargs would
still run rm without arguments. Now it doesn't.

15 years agovserver: Cleanup vserver-hashify-all script.
Matthijs Kooijman [Thu, 16 Apr 2009 13:18:47 +0000 (15:18 +0200)]
vserver: Cleanup vserver-hashify-all script.

This adds proper quoting and uses absolute paths.

15 years agovserver: Hashify hosts even when they are not running.
Matthijs Kooijman [Thu, 16 Apr 2009 13:15:57 +0000 (15:15 +0200)]
vserver: Hashify hosts even when they are not running.

Docs say the vserver should be running to call package management, but
we don't use that anyway.

15 years agoDisable loading of modules, since we don't have them enabled.
root [Thu, 16 Apr 2009 11:56:27 +0000 (13:56 +0200)]
Disable loading of modules, since we don't have them enabled.

15 years agovuurmuur: Enable vuurmuur on startup.
root [Thu, 16 Apr 2009 10:40:27 +0000 (12:40 +0200)]
vuurmuur: Enable vuurmuur on startup.

15 years agovuurmuur: Define a sane ruleset.
root [Thu, 16 Apr 2009 10:39:01 +0000 (12:39 +0200)]
vuurmuur: Define a sane ruleset.

15 years agovuurmuur: Add default configuration.
root [Thu, 16 Apr 2009 09:26:59 +0000 (11:26 +0200)]
vuurmuur: Add default configuration.

15 years agovserver: Set dependencies between vservers.
root [Wed, 15 Apr 2009 21:03:25 +0000 (23:03 +0200)]
vserver: Set dependencies between vservers.

15 years agovserver: Mark most vservers for autostart.
root [Wed, 15 Apr 2009 21:01:58 +0000 (23:01 +0200)]
vserver: Mark most vservers for autostart.

15 years agovserver: Give all vservers a shared /var/cache/apt/archives dir.
Matthijs Kooijman [Wed, 15 Apr 2009 17:31:06 +0000 (19:31 +0200)]
vserver: Give all vservers a shared /var/cache/apt/archives dir.

Each vserver has write access to this dir, so any packages downloaded
can be shared by all. This saves download bandwidth, but more
importantly it saves storage size (upgrading all vservers at the same
time easily eats up gigabytes of space).

Since each vservers still has its own Release and Contents files and
checks gnupg signatures and hashes before installing the .debs, there
should not be a security issue.

15 years agovserver: Mount most of /data in login.
Matthijs Kooijman [Sat, 4 Apr 2009 11:33:26 +0000 (13:33 +0200)]
vserver: Mount most of /data in login.

15 years agossh: Listen on the new IP address.
Matthijs Kooijman [Sat, 4 Apr 2009 11:33:02 +0000 (13:33 +0200)]
ssh: Listen on the new IP address.

15 years agovserver: Mount /data/ in the backup vserver.
Matthijs Kooijman [Sat, 4 Apr 2009 11:31:55 +0000 (13:31 +0200)]
vserver: Mount /data/ in the backup vserver.

15 years agovserver: Add mail vserver configuration.
root [Sun, 29 Mar 2009 21:54:18 +0000 (23:54 +0200)]
vserver: Add mail vserver configuration.

15 years agovserver: Enable vhashify for the www vserver.
Matthijs Kooijman [Sun, 29 Mar 2009 12:57:41 +0000 (14:57 +0200)]
vserver: Enable vhashify for the www vserver.

15 years agovserver: Add login vserver configuration.
root [Sun, 29 Mar 2009 12:38:59 +0000 (14:38 +0200)]
vserver: Add login vserver configuration.

15 years agosystem: Upgrade to lenny.
Matthijs Kooijman [Tue, 30 Dec 2008 22:23:14 +0000 (23:23 +0100)]
system: Upgrade to lenny.

15 years agobackupninja: Upgrade config file to 0.9.6.
Matthijs Kooijman [Tue, 30 Dec 2008 22:21:11 +0000 (23:21 +0100)]
backupninja: Upgrade config file to 0.9.6.

15 years agosystem: Remove sysctl.conf.
Matthijs Kooijman [Tue, 30 Dec 2008 22:17:44 +0000 (23:17 +0100)]
system: Remove sysctl.conf.

sysctl.conf was still at the defaults, so we might as well remove it for now.

15 years agobackupninja: Make configs accessable for matthijs.
Matthijs Kooijman [Tue, 30 Dec 2008 21:16:26 +0000 (22:16 +0100)]
backupninja: Make configs accessable for matthijs.

15 years agobackupninja: Add default backupninja configuration.
Matthijs Kooijman [Tue, 30 Dec 2008 21:15:11 +0000 (22:15 +0100)]
backupninja: Add default backupninja configuration.

15 years agoLet sshd listen on port 222 for now.
Matthijs Kooijman [Mon, 29 Dec 2008 17:03:23 +0000 (18:03 +0100)]
Let sshd listen on port 222 for now.

15 years agovserver: Mount /data/{vcs,www} in the www vserver.
Matthijs Kooijman [Mon, 29 Dec 2008 17:02:44 +0000 (18:02 +0100)]
vserver: Mount /data/{vcs,www} in the www vserver.

15 years agovserver: Add backup vserver configuration.
Matthijs Kooijman [Mon, 29 Dec 2008 17:02:12 +0000 (18:02 +0100)]
vserver: Add backup vserver configuration.

15 years agovserver: Add www vserver configuration.
Matthijs Kooijman [Fri, 17 Oct 2008 12:34:22 +0000 (14:34 +0200)]
vserver: Add www vserver configuration.

15 years agovserver: Mount /data/db/mysql in the mysql vserver.
Matthijs Kooijman [Thu, 16 Oct 2008 17:34:04 +0000 (19:34 +0200)]
vserver: Mount /data/db/mysql in the mysql vserver.

15 years agovserver: Add a new script, vserver-hashify-all.
Matthijs Kooijman [Thu, 16 Oct 2008 17:05:48 +0000 (19:05 +0200)]
vserver: Add a new script, vserver-hashify-all.

15 years agovserver: Fix the generation of hostnames in the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:37:02 +0000 (16:37 +0200)]
vserver: Fix the generation of hostnames in the vserver-create script.

15 years agovserver: Fix the hostname of the mysql vserver.
Matthijs Kooijman [Thu, 16 Oct 2008 14:36:31 +0000 (16:36 +0200)]
vserver: Fix the hostname of the mysql vserver.

15 years agovserver: Make the vserver-create script killall -HUP dnsmasq.
Matthijs Kooijman [Thu, 16 Oct 2008 14:32:32 +0000 (16:32 +0200)]
vserver: Make the vserver-create script killall -HUP dnsmasq.

15 years agovserver: Make the vserver-create script update the dns verserver's hosts file.
Matthijs Kooijman [Thu, 16 Oct 2008 14:23:52 +0000 (16:23 +0200)]
vserver: Make the vserver-create script update the dns verserver's hosts file.

15 years agovserver: Add some comments to the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:17:03 +0000 (16:17 +0200)]
vserver: Add some comments to the vserver-create script.

15 years agovserver: Add some progress messages to the vserver-create script.
Matthijs Kooijman [Thu, 16 Oct 2008 14:13:29 +0000 (16:13 +0200)]
vserver: Add some progress messages to the vserver-create script.

15 years agovserver: Add script for adding and setting up new vservers.
Matthijs Kooijman [Thu, 16 Oct 2008 14:10:07 +0000 (16:10 +0200)]
vserver: Add script for adding and setting up new vservers.

15 years agovserver: Add mysql vserver configuration.
Matthijs Kooijman [Thu, 16 Oct 2008 14:06:37 +0000 (16:06 +0200)]
vserver: Add mysql vserver configuration.

15 years agosystem: Set acl option on /data.
Matthijs Kooijman [Thu, 16 Oct 2008 14:00:05 +0000 (16:00 +0200)]
system: Set acl option on /data.

15 years agosystem: Fix alignment in fstab.
Matthijs Kooijman [Thu, 16 Oct 2008 13:59:16 +0000 (15:59 +0200)]
system: Fix alignment in fstab.

15 years agoapt: Add sources.list.
Matthijs Kooijman [Fri, 10 Oct 2008 09:52:12 +0000 (11:52 +0200)]
apt: Add sources.list.

15 years agovserver: Mount /data/db/dns in the dns vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:59:00 +0000 (20:59 +0200)]
vserver: Mount /data/db/dns in the dns vserver.

15 years agovserver: Add some extra tabs to the default fstab, to align it better.
Matthijs Kooijman [Thu, 9 Oct 2008 18:25:38 +0000 (20:25 +0200)]
vserver: Add some extra tabs to the default fstab, to align it better.

15 years agovserver: Mount /data/apt-repository/public in new vservers as well.
Matthijs Kooijman [Thu, 9 Oct 2008 18:24:39 +0000 (20:24 +0200)]
vserver: Mount /data/apt-repository/public in new vservers as well.

15 years agovserver: Mount the /data/apt-repository/public directory in every vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:22:59 +0000 (20:22 +0200)]
vserver: Mount the /data/apt-repository/public directory in every vserver.

15 years agovserver: Change the ip of the dns vserver.
Matthijs Kooijman [Thu, 9 Oct 2008 18:22:29 +0000 (20:22 +0200)]
vserver: Change the ip of the dns vserver.

15 years agovserver: Add a hash directory for the /vservers filesystem.
Matthijs Kooijman [Fri, 26 Sep 2008 20:06:39 +0000 (22:06 +0200)]
vserver: Add a hash directory for the /vservers filesystem.

15 years agovservers: Mount /data/apt-repository in the build vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 20:05:51 +0000 (22:05 +0200)]
vservers: Mount /data/apt-repository in the build vserver.

15 years agofstab: Mount /vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 20:05:38 +0000 (22:05 +0200)]
fstab: Mount /vservers.

15 years agovserver: Remove the context.next file, second attempt.
Matthijs Kooijman [Fri, 26 Sep 2008 20:04:56 +0000 (22:04 +0200)]
vserver: Remove the context.next file, second attempt.

15 years agovserver: Update vdirbase configuration to point to /vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 19:54:36 +0000 (21:54 +0200)]
vserver: Update vdirbase configuration to point to /vservers.

All vserver root filesystems were moved there as well.

15 years agovserver: Enable vhashify for the dns vserver.
Matthijs Kooijman [Fri, 26 Sep 2008 15:59:27 +0000 (17:59 +0200)]
vserver: Enable vhashify for the dns vserver.

15 years agovserver: Add dns vserver configuration.
Matthijs Kooijman [Fri, 26 Sep 2008 15:58:54 +0000 (17:58 +0200)]
vserver: Add dns vserver configuration.

15 years agovserver: Enable vhashify for the ldap, template and build vservers.
Matthijs Kooijman [Fri, 26 Sep 2008 07:37:54 +0000 (09:37 +0200)]
vserver: Enable vhashify for the ldap, template and build vservers.

15 years agovserver: Remove the context.next file from git, it is too dynamic.
Matthijs Kooijman [Fri, 26 Sep 2008 07:37:31 +0000 (09:37 +0200)]
vserver: Remove the context.next file from git, it is too dynamic.

15 years agovserver: Add build vserver configuration.
Matthijs Kooijman [Fri, 26 Sep 2008 07:33:42 +0000 (09:33 +0200)]
vserver: Add build vserver configuration.

15 years agovserver: Make /data/db/ldap available in the ldap vserver.
Matthijs Kooijman [Thu, 25 Sep 2008 20:11:09 +0000 (22:11 +0200)]
vserver: Make /data/db/ldap available in the ldap vserver.

15 years agovserver: Add template and ldap vserver configurations.
Matthijs Kooijman [Thu, 25 Sep 2008 20:04:24 +0000 (22:04 +0200)]
vserver: Add template and ldap vserver configurations.

15 years agovserver: Remove the builder vserver.
Matthijs Kooijman [Thu, 25 Sep 2008 20:00:20 +0000 (22:00 +0200)]
vserver: Remove the builder vserver.

15 years agovserver: Include /var/cache/apt when hashifying.
Matthijs Kooijman [Tue, 16 Sep 2008 19:44:11 +0000 (21:44 +0200)]
vserver: Include /var/cache/apt when hashifying.

15 years agovserver: Don't hashify the /.git dir.
Matthijs Kooijman [Tue, 16 Sep 2008 19:42:48 +0000 (21:42 +0200)]
vserver: Don't hashify the /.git dir.

15 years agovserver: Create clone-exclude for files not be copied on cloning.
Matthijs Kooijman [Tue, 16 Sep 2008 19:41:45 +0000 (21:41 +0200)]
vserver: Create clone-exclude for files not be copied on cloning.

vunify/exclude contained lines for this, but those are not used by clone
(only the deprecated vcopy).

15 years agoapt: Set Default-release to "stable".
root [Tue, 16 Sep 2008 15:57:02 +0000 (17:57 +0200)]
apt: Set Default-release to "stable".

15 years agovserver: Set an explicit exclude list for vhashify, based on the default one.
Matthijs Kooijman [Tue, 16 Sep 2008 15:54:49 +0000 (17:54 +0200)]
vserver: Set an explicit exclude list for vhashify, based on the default one.

15 years agovserver: Disable automatic config file detection for vhashify.
Matthijs Kooijman [Tue, 16 Sep 2008 15:54:06 +0000 (17:54 +0200)]
vserver: Disable automatic config file detection for vhashify.

15 years agoapt: Further increase the cache limit.
Matthijs Kooijman [Tue, 16 Sep 2008 15:51:44 +0000 (17:51 +0200)]
apt: Further increase the cache limit.

15 years agoIncrease apt's cache size so we can keep etch, lenny and backports in our sources...
Matthijs Kooijman [Sun, 17 Aug 2008 11:10:29 +0000 (13:10 +0200)]
Increase apt's cache size so we can keep etch, lenny and backports in our sources.list.

15 years agoSet a default mirror for the debootstrap build method.
Matthijs Kooijman [Fri, 8 Aug 2008 13:47:29 +0000 (15:47 +0200)]
Set a default mirror for the debootstrap build method.

15 years agoAdd a bindmount for /home to the default fstab for new vservers.
Matthijs Kooijman [Fri, 8 Aug 2008 09:59:32 +0000 (11:59 +0200)]
Add a bindmount for /home to the default fstab for new vservers.

15 years agoRemove the sudoers file from git, since it is not readable by normal users.
Matthijs Kooijman [Fri, 8 Aug 2008 09:58:03 +0000 (11:58 +0200)]
Remove the sudoers file from git, since it is not readable by normal users.

15 years agoAdd the default fstab to /etc/vservers/.defaults (copied from /usr/lib/util-vserver...
Matthijs Kooijman [Fri, 8 Aug 2008 09:55:00 +0000 (11:55 +0200)]
Add the default fstab to /etc/vservers/.defaults (copied from /usr/lib/util-vserver/defaults/fstab).

15 years agoMake network configuration static and change dummy address.
Matthijs Kooijman [Fri, 8 Aug 2008 08:40:35 +0000 (10:40 +0200)]
Make network configuration static and change dummy address.

15 years agoAdd default vserver configuration files.
Matthijs Kooijman [Fri, 8 Aug 2008 08:39:13 +0000 (10:39 +0200)]
Add default vserver configuration files.

15 years agoMount /home in the builder vserver.
Matthijs Kooijman [Mon, 23 Jun 2008 15:54:46 +0000 (17:54 +0200)]
Mount /home in the builder vserver.

15 years agoAdd new vserver "builder"
Matthijs Kooijman [Mon, 23 Jun 2008 15:54:19 +0000 (17:54 +0200)]
Add new vserver "builder"

This vserver will take care of building local debian packages and building a
repository out of them. We will also use it for kernel building.

15 years agoMake sshd listen on the external ip only.
Matthijs Kooijman [Thu, 19 Jun 2008 09:40:07 +0000 (11:40 +0200)]
Make sshd listen on the external ip only.

15 years agoAdd initial sshd_config.
Matthijs Kooijman [Thu, 19 Jun 2008 09:38:32 +0000 (11:38 +0200)]
Add initial sshd_config.

15 years ago * Add configuration for dummy interface.
Matthijs Kooijman [Wed, 18 Jun 2008 10:56:43 +0000 (12:56 +0200)]
 * Add configuration for dummy interface.

15 years ago * Replace hpasm initscript with a bare version.
Matthijs Kooijman [Tue, 17 Jun 2008 21:11:17 +0000 (23:11 +0200)]
 * Replace hpasm initscript with a bare version.

15 years ago * Add initial hpasm init script.
Matthijs Kooijman [Tue, 17 Jun 2008 20:31:00 +0000 (22:31 +0200)]
 * Add initial hpasm init script.

15 years ago * Actually run update-grub after changing kopts.
Matthijs Kooijman [Tue, 17 Jun 2008 19:51:00 +0000 (21:51 +0200)]
 * Actually run update-grub after changing kopts.

15 years ago * Add initial /etc/network/interfaces.
Matthijs Kooijman [Tue, 17 Jun 2008 19:50:07 +0000 (21:50 +0200)]
 * Add initial /etc/network/interfaces.

15 years ago * Enable getty on the first serial port.
Matthijs Kooijman [Tue, 17 Jun 2008 11:55:02 +0000 (13:55 +0200)]
 * Enable getty on the first serial port.

15 years ago * Add SSH_* to sudoer's env_keep so agent forwarding properly works through sudo.
Matthijs Kooijman [Tue, 17 Jun 2008 11:54:40 +0000 (13:54 +0200)]
 * Add SSH_* to sudoer's env_keep so agent forwarding properly works through sudo.

15 years ago * Import initial fstab, inittab, sudoers and systcl.conf.
Matthijs Kooijman [Tue, 17 Jun 2008 11:54:04 +0000 (13:54 +0200)]
 * Import initial fstab, inittab, sudoers and systcl.conf.