http://www.timedicer.co.uk/programs/help/dl-config-compare.sh.php
Configuration file update checker for use when changing versions of Devil Linux.
http://www.timedicer.co.uk/programs/help/dl-config-compare.sh.php
Configuration file update checker for use when changing versions of Devil Linux.
I finally removed a computer that I’ve had running for quite a while, configuring another “intermittently operational” system to run all the time. I’d like to have the old system run as a VirtualBox VM on the new system. My VirtualBox VMs are running headless as services using VboxVMService. Further, one of my VirtualBox VMs runs an Ubuntu guest which itself runs Linux Containers guests for some small, lightweight hosts on my network.
I’ve got a couple of existing LXC guests that do some monitoring for me using Nagios, run a Gitlab instance, and a couple of others that I no longer need and will probably remove. I’d also like to set up a couple of new hosts to run a small, simple webserver for my home network “homepage” with links to things I commonly use and a Puppet system to manage my configurations a little bit more efficiently (especially credentials if I look to expand the number of Linux hosts on my network; I’d like the logins to be maintained automatically, and very preferably to be key based).
My straight Nagios monitoring takes a bit more thought to maintain than I’d like, given the number of things on my mind at any given time, so that’s one of the first things I’d like to simplify. However, from the point of view of simplicity, creating a dead simple web host (though I’d like to eventually integrate some DNS service discovery…) is the simplest.
I spun up a new, basic LXC with Apache, RCS, and a few Perl modules to load Foswiki onto for a basic intranet home page.
VBoxVMService does not allow you to run the VirtualBox GUI at the same time, as I understand it. As such, I assume that I will need to create any new native (non-LXC) guests I require from the command line. This Oracle reference describes how to configure the VM instances from the CLI using the ‘vboxmanage’ command. However, upon issuing a ‘vboxmanage list ostypes’ command, I discovered that even the CLI version appears to be dependent upon the same COM configuration that prevents the GUI from running. So, I configured as stated at http://sourceforge.net/p/vboxvmservice/wiki/Runing%20VirtualBox%20GUI%20together%20with%20VBoxVmService/. This didn’t take immediately, so I restarted.
I had a lot of problems being able to get back into VirtualBox to work on setting up a VM to replace the machine I took down, generally appearing to be related to permissions. I’d run across a batch file that someone had written that supposedly sets the permissions appropriately to allow you to switch back and forth between the VirtualBox GUI and VBoxVMService, but it didn’t seem to be very effective. I was finally successful after uninstalling VirtualBox, deleting the VirtualBox directory, reinstalling, then going into DCOMConfig and setting permissions back to defaults (everything on Security tab as “Use Defaults” and the Identity tab as “Launching User”). That let me get back in and do some things.
I referenced these instructions to configure the disk I had pulled from my old system as a raw disk for the VM. A couple of notes on items that proved handy:
wmic diskdrive list brief under Windows 7 helps to identify the correct PhysicalDrive setting to use in creating the VMDK.This was a great idea until I determined that I couldn’t (or at least there wasn’t a method I could find) grant my user account raw/physical disk access under Windows 7 Home. I can run VirtualBox as an administrator and launch the machine, booting from the physical drive, and everything works. Unfortunately I’d prefer not to run as an administrator, so I will probably need to work on converting the physical disk to an image. My goal is ultimately to get everything copied off of that drive anyway and eliminate the machine; I had just thought this might be a shortcut to save a step or two.
Interesting build. I have traditionally looked at Devil Linux in the past for firewall applications, but this may be another to check out.
http://www.networkworld.com/news/2013/121813-new-ddos-malware-targets-linux-277059.html
Linux has finally achieved enough market penetration to be worthwhile to attack. Not desktop market penetration per se, but market penetration nonetheless. The particular platforms where it can be found with relative frequency fundamentally contribute to the reasons the attacks are successful – they are home user devices that aren’t likely to be updated. I surmise that within the next three to five years, we’ll see a tipping point where many of these network devices will default to automatically update themselves in much the same manner our operating systems, browsers, and many applications in both the mobile and desktop realm do today.
https://www.stgraber.org/2012/05/04/lxc-in-ubuntu-12-04-lts/
Great article, looks like LXC development is continuing in good directions since I last took a look at it. I need to circle back to it for some things at home that I’d like to place in isolated cages. There are several pingbacks that were also worth taking a look at.
Looking towards configuring StrongSwan as an IPSec VPN endpoint for Android. The long-term goal is to set up a VPN configuration in which the phone automatically forwards all traffic through the IPSec VPN tunnel to be routed via my home connection unless 1.) the phone is connected to my private wireless network (perhaps one dedicated to the phone) or 2.) I manually disable forwarding, possibly to be resumed automatically after a timeout, and definitely to be resumed at phone reboot. On the private network, will be doing some HTTP filtering, mangling, redirecting, and blocking; some file sync’ing and/or “private cloud” streaming; some monitoring; some outright blocking; some home automation… all kinds of wonderful, fun and exciting things. I’m coming up on a year since I left the giant red atrocity that is Verizon and purchased an Android phone and plan from US Cellular (which has been an outstanding upgrade in every way… both the phone and the carrier), and I’m just now getting things in place to begin configuring the VPN hub, hence “long term”. This post is primarily to note a few pages with hints, tips, and configurations for Android (and iPhone) device connections to a (Open|Strong)Swan server. The biggest problem I seem to be encountering thus far is that I don’t think any I have yet encountered are descriptive in setting up an “always on, automatic at boot” connection, and I’m thinking I’ll need to get a working tun.ko module for my phone to really make this happen as I would like. We shall see.
http://www.semicomplete.com/articles/dynamic-dns-with-dhcp/
May get around to setting this up a little while down the road.
Powered by WordPress