LEMP - Linux, NginX, MariaDB, PHP (in a nutshell)

Optional: create lxc container lxc launch images:centos/7 sql You could stick with Debian if you want to, but i found it very, very impossibile to install MySQL on it due to AppArmor kicking in. Please note i’ve split this on two LXC containers, two distributions, as i needed SQL up and running, and I didn’t really give a sh*t about the distributions they’re running. Mind that in CentOS, the apt-get gets replaced by yum. ...

2018-01-20 · 2 min · EK

LXC: guest containers and bridged network interfaces

sudo lxc init Sets up lxc-only network, and fiddles with iptables rule. Only downside so far: you cannot access container OS’s from your LAN unless you fiddle with your router. Ugly Fix: lxc launch ubuntu:17.10 lxctest lxc stop lxctest lxc profile copy default webdev lxc profile device set webdev eth0 nictype macvlan lxc profile device set webdev eth0 parent enp64s0 lxc profile apply lxctest webdev lxc start lxctest lxc exec lxctest bash or ...

2018-01-09 · 1 min · EK

RSA SFTP Chroot w/ Shell access block.

TL_DR; title: give user SFTP access with jail to a single folder. su - groupadd sftp mkdir -p /SFTP/chroot chown root:root /SFTP/chroot vim /etc/ssh/sshd_config Find line PermitRootLogin and explore further on: #PermitRootLogin prohibit-password PermitRootLogin no StrictModes yes RSAAuthentication yes PubkeyAuthentication yes AuthorizedKeysFile %h/.ssh/authorized_keys …and on… # Change to no to disable tunnelled clear text passwords #PasswordAuthentication yes PasswordAuthentication no …Untill you come near to the end of the file and comment out the line… ...

2017-12-23 · 2 min · EK

Openstack trial and error, 04

After host restart… Existing instances are not working Existing images refuse to deploy Network doesn’t work anymore -… It freaks. you. out. Project put on halt untill i figure out what exacly happened to it in a single. bloody. reboot. Readings: https://www.mirantis.com/ https://www.mirantis.com/blog/now-zero-openstack-hosted-website-4-easy-steps/ https://docs.mirantis.com/openstack/fuel/fuel-8.0/quickstart-guide.html https://www.tecmint.com/openstack-installation-guide-rhel-centos/ http://searchservervirtualization.techtarget.com/tip/Step-by-step-guide-to-acing-your-OpenStack-installation

2017-12-23 · 1 min · EK

Debugging kernel crashes and errors

After a while, my personal PC-server hanged up on temperature logging. Next morning, SSH tried to connect but got stuck at verifying SSH RSA. Trying to access owncloud, whole thing crashed completely. Even the physical monitor, attached to PC directly, was dead. Only hard reboot left. sudo apt-get install htop lnav and, if applicable, dmesg | grep "..." Thank b4d later (buy him a beer) And yeah, it seems that Owncloud Cron services (in my case, via system cron) made cpu stuck at 100% for all the time. Hm. ...

2017-12-23 · 1 min · EK