community.riocities.com

An Alpine Linux XEN network driver domU

henrik, bengt — Tue, 05 Jul 2022 00:00:00 +0200

Basic Setup of Alpine Linux XEN domU¶

Guide to configure an basic XEN domU based on Alpine 3.16 and then setting it up as a network driver domain As Dom0 we use Alpine Dom0 V3.15. But please make sure to upgrade that to 3.16 as well.

To …

A Basic Alpine Linux XEN domU

bengt — Sat, 02 Jul 2022 00:00:00 +0200

A Basic Alpine Linux XEN domU¶

Guide to configure a basic XEN Domain based on Alpine 3.16. As Dom0 we use Alpine Dom0 V3.15. But please make sure to upgrade that to 3.16 as well.

To do this I have the following extra hardware - No extra hardware …

Openbsd 7.0 QEMU cf net5501

henrik — Sat, 15 Jan 2022 00:00:00 +0100

Installing OpenBSD on CF under kvm (QEMU) on Debian for later net5501 deployment

Prerequisites

Fast 1GB CF Card
Debian (or other GNU/Linux distribution)
CF-card reader

Limitations, the system is too low on ram to be able to run syspatch, as that will require allocating a big /tmp on mfs …

Alpine v3.15 Linux as a XEN dom0 from a USB stick

bengt — Wed, 12 Jan 2022 00:00:00 +0100

Guide to configure an XEN Dom0 server based on Alpine 3.15¶

I have the following configuration for my file server.

Server HP ProLiant MicroServer Gen8 G1610T
Memory Kingston KCP316ED8/8 8GB DDR3 1600MHz ECC Module, 16GB total.
USB Boot USB 16GB Stick Cruzer

During the installation we also need …

Alpine Linux as a Xen Storage Driver Domain

bengt — Sun, 10 Jan 2021 00:00:00 +0100

Alpine Linux as a Xen Storage Driver Domain¶

Guide to configure an Xen Storage Driver Domain based on Alpine 3.11, the Dom0 is setup like Alpine Dom0 V3.8 but later upgraded in accordance with Alpine dom0 upgrade.

The aim of this domU is to serve ZFS at the …

NitroKey HSM in Alpine

henrik — Thu, 22 Oct 2020 00:00:00 +0200

Installation¶

Do this part as the root user

Install needed packages

# apk add ccid opensc pcsc-lite-libs

Enable and start pcscd

# rc-update add pcscd
# service pcscd start

NOTE The pcscd service must be restarted after plugging in the Nitrokey to the computer

Check the reader and SmartCard¶

The Nitrokey HSM contains …

Alpine Linux RPi - upgrading

henrik — Tue, 29 Sep 2020 00:00:00 +0200

Upgrade guide for Alpine Raspberry PI (RPi) System¶

This guide describes how to upgrade a diskless (booting from the microSD card) Alpine RPi between Alpine releases.

It expects your microSD card to be mounted to the /media/mmcblk0p1 directory, if it is not mounted there on your system, adjust the …

Alpine Linux on a Raspberry Pi 3 B+ with a RTC module

henrik — Tue, 04 Aug 2020 00:00:00 +0200

Prerequisites¶

Alpine Linux v3.11 (or later) installed on a Raspberry Pi 3 B+
DS3231 Real Time Clock Module for Raspberry Pi

Pre-Setup¶

Install the RTC module on GPIO pins 1, 3, 5, 7 & 9 on the Raspberry Pi 3 B+

Create (or edit) usercfg.txt on the SD card …

Alpine Linux XEN dom0 from a USB stick - upgrading

henrik — Sat, 15 Dec 2018 00:00:00 +0100

Upgrade guide for Alpine based XEN dom0s¶

This guide describes how to upgrade a diskless (booting from USB stick) Alpine XEN dom0 between alpine releases.

It expects your usb stick to be mounted under /media/usb, if it not mounted there on your system, adjust the instruction to match your …

A Basic Alpine Linux XEN domU

bengt — Fri, 24 Aug 2018 00:00:00 +0200

A Basic Alpine Linux XEN domU¶

Guide to configure an basic XEN domU based on Alpine 3.8. As Dom0 we use Alpine Dom0 V3.8.

To do this I have the following extra hardware - No extra hardware is needed.

dom0 work¶

We need to create the domU installation configuration …

Alpine v3.8 Linux as a XEN dom0 from a USB stick

bengt — Fri, 24 Aug 2018 00:00:00 +0200

Guide to configure an XEN Dom0 server based on Alpine 3.8¶

I have the following configuration for my file server.

Server HP ProLiant MicroServer Gen8 G1610T
Memory Kingston KCP316ED8/8 8GB DDR3 1600MHz ECC Module, 16GB total
USB Boot USB 16GB Stick Cruzer

During the installation we also need …

Alpine Linux as a XEN dom0 from a USB stick (EFI boot)

william — Sun, 24 Sep 2017 00:00:00 +0200

Howto boot Alpine Xen dom0 with EFI¶

This guide will create an installation of diskless Alpine with Xen dom0 support, bootable with EFI.

Create EFI bootable dom0 medium¶

NOTE: the official Alpine installation medium doesn't support EFI, so create the installed medium by booting it with BIOS/compatibility mode.

This …

Alpine Linux on Solid Run I2EX-300-D

henrik — Mon, 05 Jun 2017 00:00:00 +0200

What you need¶

Solid Run I2EX-300-D
MicroSD card
micro-USB to USB cable
Alpine Linux armhf generic arm build (.tgz file)

On your Linux workstation¶

Download alpine-uboot-3.6.1-armhf.tar.gz

Connect the MicroSD card to the workstation

Partition the MicroSD card with two partitions:

 #1 should be of type 0xc …

Alpine Linux as a XEN dom0 from a USB stick

henrik — Thu, 29 Dec 2016 00:00:00 +0100

Preparations¶

What you need:

1x 16GB SLC USB stick to run the dom0 from
1x 1GB Installer USB stick
1x Laptop or similar to run the setup (initial installation) from

Later (when you are ready to deploy)

1x Proper server to run the alpine dom0 on (e.g. HP MicroServer …

apt-dater-host for Alpine

henrik — Sun, 10 Jul 2016 00:00:00 +0200

I use apt-dater to manage updates to numerous XEN domUs, after starting to use Alpine Linux I needed to implement apt-dater-host support for Alpine Linux.

Normally apt-dater host support is implemented in Perl, but as that is not present in a base Alpine install, this implementation of ADP-0.6 was …

FiiO E10K (OLYMPUS 2-E10K)

henrik — Sat, 21 May 2016 00:00:00 +0200

FiiO E10K is a small and nice USB DAC (96KHz/24Bit) + headphone amp I bought to replace my aging E10.

E10 vs E10K compared by FiiO.

Tested and found to be working fine with:

Debian 8 (Jessie)
Ubuntu 14.04

Also Note: The general recommendation for a USB DAC is …

Alpine Linux as a XEN domU

henrik — Fri, 29 Apr 2016 00:00:00 +0200

Guide for how-to install Alpine Linux as a domU (tested on a Debian Jessie dom0).

The iso alpine-extended-3.4.4-x86_64.iso is used as that makes it possible to complete a full alpine linux installation without networking in the domU.

Preparations in dom0¶

Setup storage as /dev/<lvm_vg>/<domU-name>-disk …

Fedora as Xen domU with pv-grub

william — Wed, 02 Dec 2015 00:00:00 +0100

Intro¶

This is a HOWTO on how to install Fedora 23 Server as a Xen PV domU under a Debian Jessie dom0, using pv-grub for booting the guest. Using pv-grub makes it possible to easily avoid HVM domains and use storage domains, since that's not possible for pygrub.

Download installer …

XEN ZFS storage driver domain

henrik — Fri, 11 Sep 2015 00:00:00 +0200

Intro¶

The storage driver domain in this howto is called zfshost

I have two small Intel 320 SSD 40GB in MD raid1 in a LVM VG (Volume Group) called vg_raid1. This VG contains 4 LV's (root+swap for dom0 and zfshost)

The LVM LVs (Logical Volume) zfshost-disk zfshost-swap are used …

NFSv4+Kerberos in FreeBSD

henrik — Fri, 04 Sep 2015 00:00:00 +0200

Intro¶

Setup of kerberized NFSv4 FreeBSD host with nfs users handled by FreeIPA.

The FreeBSD nfs-server host will be called zfshost and the FreeIPA server ipa in this howto. The Kerberos realm and domain will be called foo.se.

Setup the NFS daemon (without Kerberos)¶

Enable nfs and nfsv4

At …

pvgrub workaround for separate /boot

henrik — Fri, 26 Jun 2015 00:00:00 +0200

Intro¶

The pvgrub binary in Debian Jessie (dom0) is not "happy" about the fact that in Fedora (domU) /boot is on a separate partition and that the grub config is stored in /boot/grub2/grub.cfg.

Errors seen when starting a domU with this setup

# xl create /etc/xen/<domU …

Configure OpenIKE Site to Site VPN in OpenBSD

magnus — Sat, 20 Jun 2015 23:23:00 +0200

Quick howto configure OpenIKE on OpenBSD

Configure Asterisk as a SIP proxy for the carrier 3

magnus — Fri, 19 Jun 2015 15:59:00 +0200

Configure Asterisk to allow phone calls from any SIP client to 3

Install OpenBSD as an Xen DomU (HVM)

magnus — Mon, 15 Jun 2015 22:06:00 +0200

Quick howto for installing OpenBSD as a HVM DomU in Xen on Debian

OpenBSD upgrade (XEN HVM)

henrik — Sun, 14 Jun 2015 00:00:00 +0200

Lazy for how to upgrade from OpenBSD 5.7 to 5.7-snapshot

(Installation instruction of OpenBSD as XEN-HVM)

Preparations¶

Download 5.7-snapshot versions of install57.iso and SHA256.sig.

Store install57.iso on the dom0

scp the SHA256.sig file into the OpenBSD domU

Restart the OpenBSD HVM-domU with the …

iSCSI Initiator on Debian

magnus — Wed, 03 Jun 2015 21:06:00 +0200

Quick howto for using iSCSI on Debian with XEN DomU's

Running a DHCP server in a XEN domU

magnus — Thu, 26 Mar 2015 00:00:00 +0100

How to fix UDP checksum errors in a Xen DomU running a DHCP Server.

In /etc/network/interfaces in the domU acting as dhcp-server, add the following iptables rule

auto eth0

iface eth0 inet static
        address 192.168.139.2
        gateway 192.168.139.254
        netmask 255.255.255.0 …

Debian based XEN dom0 setup

henrik — Thu, 26 Mar 2015 00:00:00 +0100

Prerequisite¶

Debian Jessie install with LVM and space left in a LVM volume group ( vg ) for the domUs.

Note: diffs in this howto are against files in the /etc directory.

Setup time keeping with ntp¶

$ sudo apt-get install ntp

Make sure it does not listen on all interfaces (i.e …

Debian based XEN Network Driver Domain

henrik — Tue, 17 Mar 2015 00:00:00 +0100

Configuring a Debian based XEN Network Driver domain.

Note: Tested with Debian 8 Jessie as dom0 and as Network Driver Domain domU.

Setup for a driver domain (preparations in dom0)¶

Export at least one PCI device to the new network driver domain, in this example called int-fw

dom0 # lspci | fgrep …

Fronting apt-cacher-ng with nginx

henrik — Tue, 10 Feb 2015 00:00:00 +0100

Why: I have some isolated islands in the network that are using a local apt-cacher-ng instance. To optimize the caching I am moving to one central cache and instead let the isolated islands connect via a proxy provided by nginx.

sudo apt-get install nginx-light

Disable the default site

sudo rm …

HP ProLiant MicroServer Gen8

henrik — Sat, 24 Jan 2015 00:00:00 +0100

The HP Microserver Gen8 is a very nice home server for use as a NAS for instance with the FreeNAS software or as a XEN or KVM server.

The entry level CPU choice (G1610T) provides me with enough power to run almost 10 XEN domU:s with 10GB RAM in …

Re part live system md+lvm

henrik — Mon, 12 Aug 2013 00:00:00 +0200

Re-partitioning of a live system to have space for a new (and larger) grub bootloader.

Background and introduction¶

Upgrading from Debian Squeeze to Wheezy failed on my md+lvm systems (same problem with an Ubuntu LTS upgrade from lucid 10.04 to precise 12.04).

This is the error message …

KVM mount guest disk on host

henrik — Sun, 04 Aug 2013 20:47:55 +0200

Howto mount a guest LVM disk on host

Note: guest is called bup in the example

Setup¶

Snapshot the guests running LVM volume (guests virtual disk)

$ sudo lvcreate --size 100m --snapshot --name snap-bup /dev/vg_raid1/bup
Logical volume "snap-bup" created

Setup a loop device for the virtual disk snapshot
```
$ sudo …
```

Android games

henrik — Sat, 05 Jan 2013 00:00:00 +0100

Android Games with sane permissions¶

More info on sane permissions: Android apps

List of games that I have found that fulfills my requirements on permissions

Android kids games

henrik — Thu, 03 Jan 2013 00:00:00 +0100

Android Kids Games with sane permissions¶

More info on sane permissions: Android apps

List of games that I have found that fulfills my requirements on permissions

Android apps

henrik — Wed, 13 Jun 2012 00:00:00 +0200

Android Applications with sane permissions¶

Finding apps at the play store with sane permissions is a bit like looking for a needle in a hay-stack.

There is no way to, for instance sort apps by the amount of permissions they require.

How do I define sane permissions:

A. Does not …

XEN domU LVM to raw

henrik — Tue, 28 Feb 2012 20:57:48 +0100

Export a "LVM based" domU for use with KVM (or XEN-HVM)

Small lazy for converting a LVM based domU to a more portable raw file for migration to an other virtualization system or other XEN host

Specifics for this example

 /dev/vg_raid10/<domU>-disk 8GB
 /dev/vg_raid10/<domU>-swap 2GB …

FiiO E10

henrik — Tue, 10 Jan 2012 00:00:00 +0100

FiiO E10 is a small and nice USB DAC (96KHz/24Bit) + headphone amp without the problems with the NuForce uDAC (channel imbalance and the strange character in the USB device name).

Tested and found to be working fine with:

Debian squeeze (Gnome)
Debian testing (linux: 3.1.0 + kde: 4 …

Computer HW

henrik — Sat, 01 Oct 2011 00:00:00 +0200

Computer HW Suggestions

I often get questions about what to buy (or not), this is a short summary of my hardware suggestions for home workstations and servers, with focus on stable and quiet systems.

PSU¶

Brands to consider¶

Antec
Seasonic

Suggestion¶

ATX

Seasonic X-series
Value/Budget choice: Seasonic G-series

SFX …

OpenSSH setup

henrik — Thu, 15 Sep 2011 15:07:54 +0200

Certificates with OpenSSH¶

Howto setup and use certificates with OpenSSH for host keys.

Setup CA¶

Create the CA keypair

$ mkdir SSH-CA
$ cd !$
$ ssh-keygen -t rsa -b 4096 -C ca_key-example.com # name the output keyfile ca_key-example.com_rsa, and choose a very good pass-phrase :-)

Sign server .pub …

XEN domU move

henrik — Wed, 27 Jan 2010 16:23:37 +0100

Moving a XEN domU to a new server

Note In order to ease reading the LVM-vg is called vg_raid on newhost and vg_main on oldhost

Create logical volumes on the newhost

newhost# lvcreate -n <hostname>-disk -L <disk-size-in-gig>g vg_raid
newhost# lvcreate -n <hostname>-swap -L <swap-size-in-meg>m vg_raid

Shutdown …

NuForce uDAC

henrik — Fri, 08 Jan 2010 00:00:00 +0100

NuForce µDAC / uDAC in Linux

Status: Tested and found to be working on Debian Lenny with a 2.6.30 kernel from backports.org

Connecting to the system¶

Logs when connecting

    [  185.824297] usb 7-2: new full speed USB device using uhci_hcd and address 2
    [  186.023563] usb 7 …

Replacing apt-proxy with apt-cacher-ng

henrik — Mon, 13 Jul 2009 00:00:00 +0200

Howto replace APT-Proxy with APT-cacher-ng

Goal change to APT cacher-ng from APT-Proxy without changes on the client side.

Tested with apt-cacher-ng 0.4

Installation and configuration¶

Install
```
apt-get install apt-cacher-ng
```

Do the following changes to /etc/apt-cacher-ng/acng.conf

@@ -9,7 +9,7 @@

# TCP (http) port
# Set to 9999 to …

Ubuntu Gutsy HSDPA E220 Modem

henrik — Sat, 17 Nov 2007 21:50:22 +0100

Tele2 Mobile "Broadband" in Ubuntu¶

Prerequisite

Device: Huawei E220 (USB)
Operator: Swedish Tele2
SIM-Card: disabled PIN code (put it in you phone first and disable the pin code)
OS: Ubuntu Gutsy Gibbon 7.10

What will be done: Setup of USB HSDPA Modem with auto connect to Internet

1 …

vnc readony port.patch

henrik — Sun, 15 Jul 2007 14:27:53 +0200

Based on work by John Kilburg http://www.physics.unlv.edu/~john/hacks/vnc/
Update to VNC 3.3.7
Supports (optionally) a password for the read only port

Patches:

Start script¶

[Patch for the Perl start script] vnc-3.3.7.readonly-script.patch download

diff -urN vnc-3.3.7/vncserver …

Ubuntu pbuilder java

henrik — Thu, 12 Jul 2007 00:00:00 +0200

Using Ubuntu (& Debian) pbuilder with Sun Java¶

If your package needs a version of Java from Sun to build you will get into problems building it with pbuilder as the license question will not be shown (and hence it can not be answered).

Examples of Build Depends that fails without …

Openbsd qemu cf net4801

henrik — Tue, 28 Nov 2006 00:00:00 +0100

Installing OpenBSD on CF under kvm (qemu) on Debian for later net4801 deployment

Pre requisites

 Fast 1GB CF Card
 Debian (or other GNU/Linux distribution)
 CF-card reader

Preparations for installation

debian$ wget http://ftp.sunet.se/pub/OpenBSD/5.1/i386/cd51.iso

Plug-in the CF card in the cf …

Ubuntu Dapper with dm-crypt

henrik — Mon, 04 Sep 2006 13:21:51 +0200

Installing Ubuntu with encrypted root and swap¶

Installing Ubuntu Dapper Drake 6.06 LTS with encrypted root and swap (LUKS+LVM2)

Based on:

http://www.saout.de/tikiwiki/tiki-index.php?page=EncryptedLVM2Root
http://www.sicherheitsschwankung.de/node/16
http://ner.dy.fi/deb/

Tested with: Ubuntu Dapper 6.06 LTS …

MollieLog6

bengt — Thu, 27 Oct 2005 00:00:00 +0200

Howto for postfix, mailscanner, cyrus installation on Sarge

MollieLog6.txt download

To DO
=========

FireWall  (razor tcp port 2703 and 7)
snort/portsentry
Make Jail of Apache + SquirrelMail + PHP
DShield?

Basic stuff
===========
VIA EPIA Mini-ITX M6000
2* 20GB Hard disk
512 MB Ram

hda1	/		4.8G
hda5	/var …

ExtraIgnore4LogCheck

bengt — Sun, 09 Oct 2005 00:00:00 +0200

Some extra rules for Logcheck to ignore

ExtraIgnore4LogCheck.txt download

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ F-Prot autoupdate\[[0-9]+\]: F-Prot did not need updating.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ F-Prot autoupdate\[[0-9]+\]: F-Prot successfully updated.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ClamAV-autoupdate\[[0-9]+\]: ClamAV did not need updating
^\w …

HardeningHowTo

bengt — Sun, 09 Oct 2005 00:00:00 +0200

Simple checklist for hardening a server

HardeningHowTo.txt download

inetd - We do not use inetd. 
=====
more /etc/inetd.conf
	for each service that are enabled
		update-inetd --disable <service>
		( update-inetd --disable discard daytime time )
/etc/init.d/inetd stop
vi /etc/init.d/inetd
	Add the following after /bin/sh
		# Do …

Openbsd on net4801

henrik — Sun, 11 Sep 2005 00:00:00 +0200

Installing OpenBSD 4.7 on a Soekris net4801 (with Debian as a boot server)

Pre requisites for boot server:

Debian (Lenny 5.0)

Pre requisites for net4801 (also tested with net5501):

Fast 512MB CF card

Configure (Debian) boot server¶

Create and populate directories for tftpd (I use /var/lib/tftpboot …

Debian Canon iP4000R

henrik — Thu, 08 Sep 2005 00:00:00 +0200

Setting up a Canon iP4000R printer on a Debian system with CUPS¶

Basics for my setup:

Printer: Canon PIXMA iP4000R
Cups: Version 1.1.23-10
Debian: Sarge 3.1

Download the version 2.50 filters from Canon (http://cweb.canon.jp/drv-upd/bj/bjlinux250.html)¶

$ wget ftp://download.canon …