OpenSeaMap-dev:Server FreeBSD Jails - Versionsgeschichte

Dom: Configure hostname for jails.

2013-11-24T12:55:39Z

Configure hostname for jails.

Dom: /* Install Ports */

2013-11-17T18:50:24Z

‎Install Ports

Dom: Jail update base system.

2013-04-02T20:01:28Z

Jail update base system.

Markus: Markus verschob Seite Server FreeBSD Jails nach OpenSeaMap-dev:Server FreeBSD Jails, ohne dabei eine Weiterleitung anzulegen

2013-01-30T15:06:23Z

Markus verschob Seite Server FreeBSD Jails nach OpenSeaMap-dev:Server FreeBSD Jails, ohne dabei eine Weiterleitung anzulegen

Dom: Die Seite wurde neu angelegt: „== Installation == === Create Jail === Add alias. ifconfig lo0 alias netmask 255.255.255.255 vi /etc/rc.conf ifconfig_lo0_alias…“

2012-12-24T13:25:57Z

Die Seite wurde neu angelegt: „== Installation == === Create Jail === Add alias. ifconfig lo0 alias <local-jail-address> netmask 255.255.255.255 vi /etc/rc.conf ifconfig_lo0_alias…“

Neue Seite

== Installation ==

=== Create Jail ===

Add alias.

ifconfig lo0 alias <local-jail-address> netmask 255.255.255.255

vi /etc/rc.conf
ifconfig_lo0_alias'''N'''="inet <local-jail-address> netmask 255.255.255.255"

Create jail.

ezjail-admin create <jail-name> <local-jail-address>

Add ports tree.

rm /usr/jails/<jail-name>/usr/ports
mkdir /usr/jails/<jail-name>/usr/ports

vi /etc/fstab.<jail-name-corrected>
/usr/ports /usr/jails/<jail-name>/usr/ports nullfs ro 0 0

Add DNS server.

cat /etc/resolv.conf | grep nameserver > /usr/jails/<jail-name>/etc/resolv.conf

Add port build config.

echo 'WITHOUT_X11=yes' >> /usr/jails/<jail-name>/etc/make.conf

Configure syslogd.

echo 'syslogd_flags="-ss"' >> /usr/jails/<jail-name>/etc/rc.conf

Configure sshd.

vi /usr/jails/<jail-name>/etc/ssh/sshd_config
ListenAddress <local-jail-address>
PermitRootLogin no
ChallengeResponseAuthentication no

echo 'sshd_enable="YES"' >> /usr/jails/<jail-name>/etc/rc.conf

Configure firewall settings.

vi /etc/pf.conf
rdr on $ext_if proto tcp from any to any port 22'''xx''' -> 127.0.0.'''xx''' port 22
pass in on $ext_if inet proto tcp from any to 127.0.0.'''xx''' port 22 keep state

pfctl -f /etc/pf.conf

Start jail.

ezjail-admin start <jail-name>

=== Configureation inside jail ===

Connect to jail.

ezjail-admin console <jail-name>

Redirect mails for root.

vi /etc/aliases
root: <mail-address>

newaliases

=== Install Ports ===

Connect to jail.

ezjail-admin console <jail-name>

Install portmaster.

cd /usr/ports/ports-mgmt/portmaster
make install clean
rehash

Install these ports in every jail.

portmaster -d -B sysutils/screen editors/vim ports-mgmt/portaudit

=== Install Service ===

Additional installations based on the service type.

* [[Server_FreeBSD_Proxy|FreeBSD Service - Proxy]]
* [[Server_FreeBSD_Forum|FreeBSD Service - Forum]]

== Maintenance ==

'''TBD'''

← Nächstältere Version		Version vom 24. November 2013, 12:55 Uhr
Zeile 33:		Zeile 33:

	echo 'syslogd_flags="-ss"' >> /usr/jails/<jail-name>/etc/rc.conf		echo 'syslogd_flags="-ss"' >> /usr/jails/<jail-name>/etc/rc.conf
		+
		+	Set hostname.
		+
		+	echo 'hostname="<jail-name>.openseamap.org"' >> /usr/jails/<jail-name>/etc/rc.conf
		+	echo '::1 <jail-name>.openseamap.org localhost' > /usr/jails/<jail-name>/etc/hosts
		+	echo '<local-jail-address> <jail-name>.openseamap.org localhost' >> /usr/jails/<jail-name>/etc/hosts

	Configure sshd.		Configure sshd.

← Nächstältere Version		Version vom 2. April 2013, 20:01 Uhr
Zeile 93:		Zeile 93:
	== Maintenance ==		== Maintenance ==

−	~~'''TBD'''~~	+	Update jail base system (world).
		+
		+	screen -S update
		+	ezjail-admin update -u
		+	exit
		+
		+	Restart affected services or restart the whole jails.

@@ Zeile 82: / Zeile 82: @@
 Install these ports in every jail.
-  portmaster -d -B sysutils/screen editors/vim ports-mgmt/portaudit
+  portmaster -d -B sysutils/screen editors/vim-lite ports-mgmt/portaudit
 === Install Service ===

← Nächstältere Version	Version vom 30. Januar 2013, 15:06 Uhr
(kein Unterschied)