<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.9.2" -->
<rss version="0.92">
<channel>
	<title>Shadows of epiphany</title>
	<link>http://blog.bodhizazen.net</link>
	<description>A LAMP in the Samsara</description>
	<lastBuildDate>Fri, 26 Feb 2010 06:42:40 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>LXC Configure Debian Containers</title>
		<description><![CDATA[I have been taking Linux Containers for a spin and was advised on IRC that Debian was easier to configure then Ubuntu, so decided to give it a try.
I will again use debootstrap to make a root file system (rootfs) for a LXC container using Debian. These instructions work with both Lenny and  Squeeze.
Commands in this tutorial are run as root, so to obtain a root shell use:
sudo -i
The working directory for this tutorial is /home/bodhi/lxc , so config.lenny and rootfs.lenny are both located in /home/bodhi/lxc

Make a rootfs via debootstrap
debootstrap &#8211;variant=minbase lenny rootfs.lenny # two &#8211; - in front of &#8220;- -variant&#8221;
Configure the container
Copy resolv.conf from host node to container
cp /etc/resolv.conf rootfs.lenny/etc
Generate a config file
I call it config.lenny . Make sure the following information is accurate:
container name (lxc.utsname)
network (lxc.network.ipv4)
rootfs (lxc.rootfs)

lxc.utsname = lenny
lxc.tty = 4
lxc.network.type = veth
lxc.network.flags = up
lxc.network.link = br0
lxc.network.name = eth0
lxc.network.mtu = 1500
lxc.network.ipv4 = 192.168.0.0/24
lxc.rootfs = /home/bodhi/lxc/rootfs.lenny
lxc.cgroup.devices.deny = [...]]]></description>
		<link>http://blog.bodhizazen.net/linux/lxc-configure-debian-lenny-containers/</link>
			</item>
	<item>
		<title>LXC Configure Ubuntu Karmic Containers</title>
		<description><![CDATA[This post is in follow up to my previous post on configuring Ubuntu Lucid (10.04) LXC containers and in this post I will show you how to configure an Ubuntu Karmic (9.10) LXC container.
I will again use debootstrap to make a root file system (rootfs) for a LXC container using Ubuntu Karmic (9.10).
Commands in this tutorial are run as root, so to obtain a root shell use:
sudo -i
The working directory for this tutorial is /home/bodhi/lxc , so config.ubuntu and rootfs.ubuntu are both located in /home/bodhi/lxc

Make a rootfs via debootstrap
debootstrap &#8211;variant=minbase karmic rootfs.ubuntu # two &#8211; - in front of &#8220;- -variant&#8221;
Configure the container
Copy resolv.conf from host node to container
cp /etc/resolv.conf rootfs.ubuntu/etc
Fix devices in rootfs.ubuntu/dev
udev does not run in lxc containers, so you need to manually make the needed devices.
I use this script to configure the devices:

#!/bin/bash

# bodhi.zazen's lxc-config
# Makes default devices needed in lxc containers
# modified from http://lxc.teegra.net/
ROOT=$(pwd)
DEV=${ROOT}/dev
if [ $ROOT [...]]]></description>
		<link>http://blog.bodhizazen.net/linux/lxc-configure-ubuntu-karmic-containers/</link>
			</item>
	<item>
		<title>LXC Configure Fedora Containers</title>
		<description><![CDATA[In this post I will demonstrate how to use febootstrap to make a root file system (rootfs) for a LXC container using Fedora. This technique is working with Fedora 12 and rawhide. Rawhide is under development and will become Fedora 13, so use a rawhide container at your own risk.
Most of the commands in this tutorial are run as root. To obtain a root shell use:
su -
The working directory for this tutorial is /home/bodhi/lxc , so config.fedora and rootfs.fedora are both located in /home/bodhi/lxc
Note: Unless you are familiar with selinux, it may be helpful to disable selinux as you learn to use Linux Containers.
setenforce 0
Make a rootfs via febootstrap
# Fedora 12
febootstrap fedora-12 rootfs.fedora
# Rawhide
febootstrap rawhide rootfs.fedora
Configure the rootfs
Copy resolv.conf from host node to container
cp /etc/resolv.conf rootfs.fedora/etc
Fix devices
udev does not run in lxc containers, so you need to manually make the needed devices.
I use this script to configure the devices:

#!/bin/bash

# bodhi.zazen's [...]]]></description>
		<link>http://blog.bodhizazen.net/linux/lxc-configure-fedora-containers/</link>
			</item>
	<item>
		<title>LXC Configure Ubuntu Lucid Containers</title>
		<description><![CDATA[In this post I will demonstrate how to use debootstrap to make a root file system (rootfs) for a LXC container using Ubuntu Lucid (10.04).
Note: At the time of this post, Lucid (Ubuntu 10.04) is in the Alpha stage of development. As with all development releases, breakage may occur.
Commands in this tutorial are run as root, so to obtain a root shell use:
sudo -i
The working directory for this tutorial is /home/bodhi/lxc , so config.ubuntu and rootfs.ubuntu are both located in /home/bodhi/lxc

Make a rootfs via debootstrap
debootstrap &#8211;variant=minbase lucid rootfs.ubuntu # two &#8211; - in front of &#8220;- -variant&#8221;
Configure the container
Copy resolv.conf from host node to container
cp /etc/resolv.conf rootfs.ubuntu/etc
Fix devices in rootfs.ubuntu/dev
udev does not run in lxc containers, so you need to manually make the needed devices.
I use this script to configure the devices:

#!/bin/bash

# bodhi.zazen's lxc-config
# Makes default devices needed in lxc containers
# modified from http://lxc.teegra.net/
ROOT=$(pwd)
DEV=${ROOT}/dev
if [ $ROOT = '/' ]; then
 [...]]]></description>
		<link>http://blog.bodhizazen.net/linux/lxc-configure-ubuntu-lucid-containers/</link>
			</item>
	<item>
		<title>LXC &#8211; Linux Containers</title>
		<description><![CDATA[Linux containers AKA LXC: How to configure your host node]]></description>
		<link>http://blog.bodhizazen.net/linux/lxc-linux-containers/</link>
			</item>
	<item>
		<title>ModSecurity 2.5  &#8211; Book Review</title>
		<description><![CDATA[Happy New Year Everybody =)
I had the privilege of reviewing ModSecurity 2.5 by Magnus Mischel and now that the holidays are over, well, time to stop procrastinating.

For those unfamiliar with ModSecurity, it is an Apache module designed to enhance (Apache server) security. For more information on mod_security see this link .
ModSecurity is a security tool that has a number of features, but how to unleash the power of these advanced features ? Sure one can download and install mod_security and the community rule set, but where to go from there ? Where to turn for assistance with deploying mod_security ?
Enter ModSecurity 2.5 by Magnus Mischel
Although when working with Apache security it is helpful if you understand the basics of HTTP headers, this book will help get you started with mod_security. The book starts with installation of mod_security and then covers configuration and customization. The features of mod_security are detailed with [...]]]></description>
		<link>http://blog.bodhizazen.net/uncategorized/modsecurity-2-5-book-review/</link>
			</item>
	<item>
		<title>Firewall Ubuntu GUFW</title>
		<description><![CDATA[This is the third in my Firewall series, is in follow up to my previous 2 blogs about firewalls, and is intended to introduce GUFW, a graphical front end to UFW.
Firewall Ubuntu Desktops
Firewall Ubuntu Servers
Although the GUFW GUI may seem deceptively simple, the graphical front end is both easy to use and capable of performing the most common firewall configuration options. The graphical tool is a perfect place to start if you find ufw and iptables overwhelming.
Again the most difficult part of managing a firewall is knowing who you wish to allow or restrict (by ip address) and what service and port you need to allow (open) or deny (close). Gufw can help as many of these options are preconfigured. If you need further assistance, start with gufw, configure as much as you can, and then review the other two links.
GUFW is an option if you installed a few simple [...]]]></description>
		<link>http://blog.bodhizazen.net/linux/firewall-ubuntu-gufw/</link>
			</item>
	<item>
		<title>Firewall Ubuntu Servers</title>
		<description><![CDATA[This post is in follow up to my post on firewalls on Ubuntu Desktops.
IMO firewalls are often helpful for restricting access to servers. Servers come in two varieties, public and private, and often people wish to limit access or black list IP addresses that misbehave.
Again I will use UFW which is installed by default. In the last section I will introduce iptables. One feature that is nice about ufw, if you understand the ufw rules it is an easy transition to iptables.
The most important thing you need to know to firewall servers is;

Who (ip address) you wish to allow or restrict access.
What protocol (tcp / udp) and port is used by your server.

A listing of ports is available here.
Enable your firewall
If you are accessing your server remotely be sure NOT to lock yourself out
Assuming you are accessing via ssh, allow ssh (we will restrict ssh access below, for now just [...]]]></description>
		<link>http://blog.bodhizazen.net/linux/firewall-ubuntu-servers/</link>
			</item>
	<item>
		<title>Firewall Ubuntu Desktops</title>
		<description><![CDATA[Many Ubuntu users are interested in learning how to enable a firewall. The majority of people seem to be interested in filtering in an out bound connections on a Desktop installation.
Without getting into the inevitable debate on the merits of using a firewall, I would like to pass on some basic information. Please understand that discussions about firewalls and understanding the technical details of a firewall can become complicated very fast. The goal of this blog therefore is to enable users to feel comfortable with the basic firewall manipulations on an Ubuntu Desktop installation.
You should also know, by default Ubuntu, unlike some operating systems, has no significant listening servers. You may list your listening servers with any of the following commands:
sudo bash -c &#8220;netstat -an &#124; grep LISTEN &#124; grep -v ^unix&#8221;
netstat -ntulp
sudo lsof -i -n -P
Alternately you may perform a portscan from a second computer, ie nmap
I strongly advise [...]]]></description>
		<link>http://blog.bodhizazen.net/linux/firewall-ubuntu-desktops/</link>
			</item>
	<item>
		<title>Download Ubuntu 9.10 OpenVZ Templates</title>
		<description><![CDATA[Bodhi's Ubuntu OpenVZ Templates available fo rdownload.]]></description>
		<link>http://blog.bodhizazen.net/linux/download-ubuntu-9-10-openvz-templates/</link>
			</item>
</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.164 seconds -->
