AW: [gentoo-server] rsyncd inside vserver

As far as I'm conserned, hardened gentoo requires a specific kernel patch. As you share a single kernel with VServer patch across all your vservers on one host, it seems to me a hardened vserver can't be done, but please refer to the hardened gentoo people as I do not have experience with this.

In my case, I had a lot of services running on two hosts, making it virtually impossible to do normal maintanance on the os (upgrading, patching, etc) as I could not get downtime for all of the services at once and settings and dependencies began to overlap. Splitting them up to several vservers, I can now take one of them and patch it without stopping all the others. Additionally I will put the vservers filesystems on a SAN, making it possible to switch them to other nodes in seconds, thus providing a kind of failover mechanism. In this case it is wise to split services up, espacially if they are unrelated to each other while running on the same host.

Sharing Filesystems across vservers should be done with network filesystems like samba, nfs (attention, have a look at vserver documentation!). Well, as I think about it, you should be able to share local filesystems, as access to these is managed via the same kernel for every VServer... could work :-? If you plan to test this, please tell me how it worked out!


mit freundlichen Grüßen

Matthias Witschel

Infraserv GmbH & Co. Höchst KG
Geschäftsfeld IT-Services
Computing Services
Server Center

-----Ursprüngliche Nachricht-----
Von: Jean Blignaut [mailto:jean@×××××××.biz] 
Gesendet: Dienstag, 31. Januar 2006 13:12
An: gentoo-server@l.g.o
Betreff: RE: [gentoo-server] rsyncd inside vserver

Im interested in this vserver process but still a little uncertain about how it works.
I mean I have a rough idea and I know it sounds promising and that I would like to finish setting it up (started that last week, but had to tackle other stuff meanwhile)
Questions:
But are you able to have a 'hardened' vserver? Because I was wanting to try that out also.
Also does It make sense to run mysql in one virtual server apache in another and your MTA in another and pop3/imap in yet another? (only examples of what I mean) Can the virtual servers share folders/partitions?
 etc. etc.

-----Original Message-----
From: Witschel, Matthias, Infraserv-Hoechst/DE [mailto:Matthias.Witschel@×××××××××.com]
Sent: Tuesday, January 31, 2006 10:50 AM
To: gentoo-server@l.g.o
Subject: AW: [gentoo-server] rsyncd inside vserver

No. NFSD is not running on the Host. But since i virtualized the function that was running on the host I found rsync running on the host without spcific IP binding (well, it seems rsync cant be bound to a specific IP?), so the deamon on the host blocked the virtual IP. After stopping rsyncd on the host, the virtual server worked fine.
Thanx for your suggestion! It finaly directed me into the right direction. 

Is there a specific mailing list for the gentoo vserver project? I'm planning virtualisation of at least 7 productive services, including mailrelay, mediawiki, cups and samba. I am willing to share my experiences as well as I will need help from others.

mit freundlichen Grüßen

Matthias Witschel

Infraserv GmbH & Co. Höchst KG
Geschäftsfeld IT-Services
Computing Services
Server Center

Industriepark Höchst
Geb. C 584, Raum U10e

-----Ursprüngliche Nachricht-----
Von: Benedikt Boehm [mailto:hollow@g.o]
Gesendet: Montag, 30. Januar 2006 21:52
An: gentoo-server@l.g.o
Betreff: Re: [gentoo-server] rsyncd inside vserver

Do you, by any chance, run nfsd on the host?

if yes http://forums.gentoo.org/viewtopic-t-359538.html my be of help for you.. if you need nfsd on the host try to bind it to one specific ip only, instead of 0.0.0.0

HTH
--
gentoo-server@g.o mailing list


--
gentoo-server@g.o mailing list


-- 
gentoo-server@g.o mailing list


-- 
gentoo-server@g.o mailing list