Installing Extras

Setup xen

• Install with:

apt-get install xen-hypervisor-3.0.3-1-i386 xen-linux-system-2.6.18-4-xen-686 libc6-xen

• Edit /boot/grub/menu.1st

## Xen hypervisor options to use with the default Xen boot option
# xenhopt=dom0_mem=131072

• run update-grub and reboot

• Install bridge-utils and xen-tools

aptitude install bridge-utils xen-tools
/etc/init.d/xend restart

• Edit /etc/xen-tools/xen-tools.conf. Apply the following diffs:

0 gramsci:/etc/xen-tools# diff -u xen-tools.conf.orig xen-tools.conf
--- xen-tools.conf.orig 2007-05-27 19:59:38.000000000 -0400
+++ xen-tools.conf      2007-05-27 20:01:15.000000000 -0400
@@ -35,6 +35,7 @@
#
##
# lvm = skx-vg
+lvm = vg_gramsci0


#
@@ -61,7 +62,7 @@
##
#
# copy = /path/to/pristine/image
-# debootstrap = 1
+debootstrap = 1
# rpmstrap = 1
# tar = /path/to/img.tar
#
@@ -95,7 +96,7 @@
swap   = 128Mb    # Swap size
# noswap = 1      # Don't use swap at all for the new system.
fs     = ext3     # use the EXT3 filesystem for the disk image.
-dist   = sarge    # Default distribution to install.
+dist   = etch     # Default distribution to install.
image  = sparse   # Specify sparse vs. full disk images.

#
@@ -154,8 +155,8 @@
#
# Default kernel and ramdisk to use for the virtual servers
#
-kernel = /boot/vmlinuz-2.6.16-2-xen-686
-initrd = /boot/initrd.img-2.6.16-2-xen-686
+kernel = /boot/vmlinuz-2.6.18-4-xen-686
+initrd = /boot/initrd.img-2.6.18-4-xen-686

#
#  The architecture to use when using debootstrap or rpmstrap.
1 gramsci:/etc/xen-tools#

• Create new xen instances with:

xen-create-image --size=5Gb --swap=512Mb --gateway=209.51.180.17 --netmask=255.2
55.255.240 --ip=209.51.180.24 --hostname=mendes

Change settings as needed.

Encrypted File system

• Install programs:

$ sudo apt-get install dmsetup cryptsetup

• Create an encrypted file system for members:

• Now, unmount the partition (make sure there is no data on it that you care about).

$ sudo umount /home/members

• Create the encrypted filesystem:

$ cryptsetup luksFormat /dev/mapper/vg_NAMEOFSERVER0-members

You will be prompted for a password. Put password in resource db!

• Add to crypttab

echo crypt_members /dev/mapper/vg_NAMEOFSERVER0-members none luks >> /etc/crypttab

• Start it

/etc/init.d/cryptdisks start

• Create a file system on the partition:

$ mkfs -t ext3 /dev/mapper/crypt_members

• Remove cryptdisks from the rc2.d directory - we do not want this to start automatically on boot! Instead we want to start it manually so the boot process doesn't hang waiting for a password.