== Installing Extras == === Setup xen === * Install with: {{{ apt-get install xen-hypervisor-3.0.3-1-i386 xen-linux-system-2.6.18-4-xen-686 libc6-xen }}} * Edit /boot/grub/menu.1st {{{ ## Xen hypervisor options to use with the default Xen boot option # xenhopt=dom0_mem=131072 }}} * run update-grub and reboot * Install bridge-utils and xen-tools {{{ aptitude install bridge-utils xen-tools /etc/init.d/xend restart }}} * Edit /etc/xen-tools/xen-tools.conf. Apply the following diffs: {{{ 0 gramsci:/etc/xen-tools# diff -u xen-tools.conf.orig xen-tools.conf --- xen-tools.conf.orig 2007-05-27 19:59:38.000000000 -0400 +++ xen-tools.conf 2007-05-27 20:01:15.000000000 -0400 @@ -35,6 +35,7 @@ # ## # lvm = skx-vg +lvm = vg_gramsci0 # @@ -61,7 +62,7 @@ ## # # copy = /path/to/pristine/image -# debootstrap = 1 +debootstrap = 1 # rpmstrap = 1 # tar = /path/to/img.tar # @@ -95,7 +96,7 @@ swap = 128Mb # Swap size # noswap = 1 # Don't use swap at all for the new system. fs = ext3 # use the EXT3 filesystem for the disk image. -dist = sarge # Default distribution to install. +dist = etch # Default distribution to install. image = sparse # Specify sparse vs. full disk images. # @@ -154,8 +155,8 @@ # # Default kernel and ramdisk to use for the virtual servers # -kernel = /boot/vmlinuz-2.6.16-2-xen-686 -initrd = /boot/initrd.img-2.6.16-2-xen-686 +kernel = /boot/vmlinuz-2.6.18-4-xen-686 +initrd = /boot/initrd.img-2.6.18-4-xen-686 # # The architecture to use when using debootstrap or rpmstrap. 1 gramsci:/etc/xen-tools# }}} * Create new xen instances with: {{{ xen-create-image --size=5Gb --swap=512Mb --gateway=209.51.180.17 --netmask=255.2 55.255.240 --ip=209.51.180.24 --hostname=mendes }}} Change settings as needed. ==== Encrypted File system ==== * Install programs: {{{ $ sudo apt-get install dmsetup cryptsetup }}} * Create an encrypted file system for members: * Now, unmount the partition (make sure there is no data on it that you care about). {{{ $ sudo umount /home/members }}} * Create the encrypted filesystem: {{{ $ cryptsetup luksFormat /dev/mapper/vg_NAMEOFSERVER0-members }}} You will be prompted for a password. Put password in resource db! * Add to crypttab {{{ echo crypt_members /dev/mapper/vg_NAMEOFSERVER0-members none luks >> /etc/crypttab }}} * Start it {{{ /etc/init.d/cryptdisks start }}} * Create a file system on the partition: {{{ $ mkfs -t ext3 /dev/mapper/crypt_members }}} * Remove cryptdisks from the rc2.d directory - we do not want this to start automatically on boot! Instead we want to start it manually so the boot process doesn't hang waiting for a password.