User Tools

Site Tools


haas:system:lab46.offbyone.lan

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
haas:system:lab46.offbyone.lan [2014/07/10 14:02] – [Packages] wedgehaas:system:lab46.offbyone.lan [2014/09/15 16:41] (current) – [Packages] wedge
Line 4: Line 4:
  
 ^  hostname  ^  RAM  ^  disk  ^  swap  ^  OS  ^  Kernel  ^ ^  hostname  ^  RAM  ^  disk  ^  swap  ^  OS  ^  Kernel  ^
-|  lab46.offbyone.lan  |  1536MB  |  4GB (/)  |  512MB   Debian 6.0 "Squeeze" (AMD64)  |  2.6.32-5-xen-amd64 +|  lab46.offbyone.lan  |  1536MB  |  4GB (/)  |  128MB   Debian 8.0 "Jessie" (AMD64)  |  3.14-1-amd64 
-|  :::   :::  |  256MB (/tmp/ |  :::  |  :::  |  :::  |+|  lab46.corning-cc.edu   :::  |  512MB (/tmp/ |  :::  |  :::  |  :::  |
  
-lab46.offbyone.lan created on sokraits on 06/14/2010. +lab46.offbyone.lan created on sokraits on 07/10/2014.
- +
-^  hostname  ^  RAM  ^  disk  ^  swap  ^  OS  ^  Kernel +
-|  lab46new.offbyone.lan  |  1536MB  |  8GB (/)  |  512MB  |  Debian 8.0 "Jessie" (AMD64)  |  3.2.0-4-amd64 +
-|  :::  |  :::  |  512MB (/tmp/ |  :::  |  :::  |  :::  | +
- +
-lab46new.offbyone.lan created on halfadder on 04/11/2014.+
  
 =====News===== =====News=====
  
 +  * 07/10/2014 - re-recreated lab46(new), and deployed it as the new production lab46 VM
   * 04/11/2014 - created lab46new, for the next lab46 iteration   * 04/11/2014 - created lab46new, for the next lab46 iteration
   * 09/20/2010 - due to CVE-2010-3081, I had to update the kernel on Lab46 and reboot   * 09/20/2010 - due to CVE-2010-3081, I had to update the kernel on Lab46 and reboot
Line 37: Line 32:
  
   * lair-std   * lair-std
-  * lair-ldap+  * lair-ldap (libnss-ldapd nslcd) 
 +  * lair-nfs 
 +  * nslcd
   * tmux   * tmux
   * build-essential   * build-essential
 +  * irssi
 +  * locate
 +  * whois
 +  * host
 +  * alpine
 +  * bsdgames
 +  * emacs24
 +  * strace
 +  * dnsutils
 +  * links2 sc bvi hexedit talk talkd utalk
 +  * indent indent-doc
 +  * fakeroot debhelper automake debomatic
 +  * manpages-dev
 +  * mosh
 +  * ruby2.1
 +  * mercurial git subversion
 +  * openssl ca-certificates
 +  * lynx
 +  * telnet
 +  * bsd-mailx
 +  * dateutils
 +  * libgd-dev
  
   * lair-std lair-nfs lair-vm lair-ldap   * lair-std lair-nfs lair-vm lair-ldap
Line 62: Line 81:
   * x11-xserver-utils   * x11-xserver-utils
  
 +=====Things I had to fix=====
 +  * /etc/security/access.conf (comment out last line)
 +  * install nslcd
 +    * configure /etc/nslcd.conf, /etc/pam_ldap.conf, /etc/libnss_ldap.conf
 +    * deployed new (hopefully simpler) /etc/pam.d/common-*
 +  * custom /etc/rc.local
 +  * /tmp needed to be perms 1777 (mount option???)
 +  * copy over /var/log/wtmp* /var/log/lastlog from old lab46
 +  * copy over wtmp logrotate.conf config from old lab46
 +  * /etc/sysctl.d/swappiness
 +  * manual fix to enable VM to boot R/W: http://blog.smartlogicsolutions.com/2009/06/04/mount-options-to-improve-ext4-file-system-performance/
 +  * moved over some root/wedge cron jobs
 +    * copied over various files in /usr/local
 +  * check/sanitize NSS/PAM/NSLCD config
 +  * /etc/idmapd.conf rpc_pipefs path needed to change (/run/rpc_pipefs or something)
 =====Xen Configuration===== =====Xen Configuration=====
 lab46 is a Xen virtual machine. Pertinent configuration information follows: lab46 is a Xen virtual machine. Pertinent configuration information follows:
Line 74: Line 108:
 ## LAIR Xen VM configuration file ## LAIR Xen VM configuration file
 ## ##
-##     created by xen-tools 4.on Fri Apr 11 05:39:29 2014.+##     created by xen-tools 4.on Thu Jul 10 09:33:02 2014.
 ## ##
 ###################################################################### ######################################################################
Line 82: Line 116:
 ## PyGRUB ## PyGRUB
 ## ##
-bootloader  = '/usr/lib/xen-default/bin/pygrub'+bootloader  = '/usr/lib/xen-4.3/bin/pygrub'
  
 ###################################################################### ######################################################################
Line 88: Line 122:
 ## CPU(s) + memory size ## CPU(s) + memory size
 ## ##
-memory      = '192+memory      = '1536
-vcpus       = '1'+vcpus       = '2'
  
 ###################################################################### ######################################################################
Line 96: Line 130:
 ## ##
 root        = '/dev/xvda1 ro' root        = '/dev/xvda1 ro'
-disk        = [ 'file:/xen/images/lab46new.disk,xvda1,w', +disk        = [ 'file:/xen/images/lab46.disk,xvda1,w', 
-                'file:/xen/images/lab46newtmp.disk,xvda2,w', +                'file:/xen/images/lab46tmp.disk,xvda2,w', 
-                'file:/xen/images/lab46new.swap,xvda3,w' ]+                'file:/xen/images/lab46.swap,xvda3,w' ]
  
 ###################################################################### ######################################################################
Line 104: Line 138:
 ## Hostname ## Hostname
 ## ##
-name        = 'lab46new'+name        = 'lab46'
  
 ###################################################################### ######################################################################
Line 111: Line 145:
 ## ##
 dhcp        = 'dhcp' dhcp        = 'dhcp'
-vif         = [ 'mac=00:16:3E:07:CD:F1' ]+vif         = [ 'mac=00:16:3E:5D:88:D8,bridge=xenbr1' ]                                   
  
 ###################################################################### ######################################################################
Line 173: Line 207:
  
 <code> <code>
-# Configure GNU indent+###################################################################### 
 +## 
 +## Configure GNU indent 
 +##
 INDENT_PROFILE="/etc/indent.conf" INDENT_PROFILE="/etc/indent.conf"
 </code> </code>
  
 From the manual page, it would seem that if a user places their own **~/.indent.pro**, it may override the system settings.. so if someone was really particular about a certain style, they'd have that flexibility. From the manual page, it would seem that if a user places their own **~/.indent.pro**, it may override the system settings.. so if someone was really particular about a certain style, they'd have that flexibility.
- 
 =====limits.conf===== =====limits.conf=====
 In order to prevent abuses (both accidental and intentional), **/etc/limits.conf** has some resource limitations specified: In order to prevent abuses (both accidental and intentional), **/etc/limits.conf** has some resource limitations specified:
Line 216: Line 252:
 export PATH=${PATH}:${PLAN9}/bin export PATH=${PATH}:${PLAN9}/bin
 </code> </code>
 +
 +=====aptitude auto-remounting /tmp for exec/noexec=====
 +<cli>
 +lab46:/etc/apt/apt.conf.d# cat 73_tmp 
 +DPkg::Pre-Invoke {"mount -o remount,exec /tmp";};
 +DPkg::Post-Invoke {"mount -o remount /tmp";};
 +lab46:/etc/apt/apt.conf.d# 
 +</cli>
 +
 +=====apt norecommends config=====
 +<cli>
 +lab46:/etc/apt/apt.conf.d# cat 99_norecommends 
 +APT::Install-Recommends "false";
 +APT::AutoRemove::RecommendsImportant "false";
 +APT::AutoRemove::SuggestsImportant "false";
 +lab46:/etc/apt/apt.conf.d# 
 +</cli>
haas/system/lab46.offbyone.lan.1405000968.txt.gz · Last modified: 2014/07/10 14:02 by wedge