[gentoo-server] Re: anyone deploy Gentoo as production servers

[Mike Kelly]

On Sun, 03 Sep 2006 18:11:12 +0200
Christian Affolter <c.affolter@××××××××××××××.ch> wrote:

> As soon as the shadow chroot patch [2] from GLEP 27 [3] is
> implemented, we will be able to build striped down gentoo instances
> without any development dependencies (with the help of the emerge
> ROOT environment variable) in a sane and easy way.

> [2]
> http://soc.gentoo.org/viewcvs.py/glep0027/patches/shadow-4.0.16-chroot.patch?rev=48&view=markup
> [3] http://www.gentoo.org/proj/en/glep/glep-0027.html [4]

Hello,

Nice to be mentioned :-p

In regards to the shadow chroot patch, I'm poking at that bit by bit,
but I think that the upstream author is already considering doing
something similar to this. I've got a good idea of what needs to be
done when it is built w/o PAM, but when PAM comes into play, it gets
tricky.

In regards to the GLEP 27 stuff in general, I have a project which is
still at a fairly alpha level, but I would appreciate contributions of
auth system helper scripts for any and all architectures / userlands.
I've written up some documentation with some examples [1]. Also, I'd
appreciate folks who know packages well (like apache, etc) writing the
proper user/group data files for them (this format is also
documented[2]).

For those a little more curious about how this system will ultimately
integrate with portage and other package managers, you may wish to take
a look at my API specifications[3] (now with flow charts!). Or, for
those who are IRC-inclined, feel free to join me in #dynusers on
freenode.

I'll work on getting a more unified / up-to-date webpage[4] together
about his project later this week.

[1] http://www.pioto.org/~pioto/gentoo/soc2006/doc/auth_modules.html
[2] http://www.pioto.org/~pioto/gentoo/soc2006/doc/datafiles.html
[3] http://www.pioto.org/~pioto/gentoo/soc2006/doc/API.html
[4] http://soc.pioto.org/

-- 
Mike Kelly