Home » Ubuntu / Debian
Proxmox / LXC – Running docker inside a container
In relation to Debian / Proxmox – Install Docker with Rancher and DockerUI webgui on a Debian / Proxmox Server
I thought that it actually may make more sense to run Rancher and my docker inside an LXC container rather than on the initial host itself.
I went back to utilize an old Machine with Proxmox for containers but also wanted to have a platform to play with Docker. So I though pimping the Promox server is the best solution.
The Steps are easy to get docker running but since Proxmox offers the best GUI for lxc I needed something similar for the docker containers.
Note: This DOES NOT add Docker into the Proxmox GUI itself. I’m adding a separate web page for docker running in a container by itself.
PCI-DSS 3.2 has one major new requirement which is 2-factor authentication. There are many ways to get that done in an Enterprise environment. But how about a standalone webserver for E-commerce or DMZ without central auth? When a ssh-key authentication is not enough, the quickest solution for a server could be to make ssh to ask for 2-factor token when logging in. 2-factor authentication is based on one part where you need to know the password plus something you need to have additionally. You can create a separate key on an external device like a tablet or mobile phone. There are also devices like RSA token but that’s not part of this. Here I plan to use Android tools like FreeOTP, Authy or Google Authenticator for the passkey. They usually produce every 30 seconds a new key based on OATH. Let’s secure the ssh access now. Setup: Firstly we need to […]
As part of upgrading / rebuilding with Ubuntu 16.04 LTS and the sheer amount of packages that come with the upgrade or port fresh install, I looked into how to speed that up a bit further. I mentioned already before apt-cacher-ng to run a local proxy and avoid downloading the same packages over and over for multiple systems. However on 2 systems I have a huge amount of sources.lists which makes even the apt-get update process very slow / time consuming. So I looked into how to speed that one up bit. in Fedora/CentOS/RedHat there is a tool called deltarpm which adds support for downloading the deltas to generate new or updated packages. The there is a similar tool in Ubuntu / Debian. Debdelta “debdelta is a program suite designed to compute changes between Debian packages. These changes (deltas) are similar to the output of the “diff” program in that they may be used to […]
Update 02.06.15: added Tahoma2 fonts to make it look better Update 05.12.15: Some Issues with disconnects from the server seem to be resolved with Wine 1.8 RC1.staging. Using it now for more than a week without any issues anymore. This bothered me for quite some while now. As mentioned before there is no native client GUI for XenServer on Linux. XOA is nice as an appliance, but if that appliance either doesn’t start or you need some features that are not in there you are either stuck to the command line or to XenCenter on Windows. I spend some time now to get it running under wine, and here is the howto. You need PlayonLinux for this. You could either install the maintainer version or download the latest and greatest version from their webpage and install it. apt-get install playonlinux Once opening Play on Linux you can install under Tools – Manage Wine Version the […]
Update 02.03.2015: added (modified) Centos / Redhat: A successor to compcache is zram which is fully integrated in the Linux kernel since 126.96.36.199 and uses lzo compression. The idea behind it is to create swap devices made of chunks of the ram and to compress those chunks on the fly to increase the available space used and ideally reduce the need of swapping to slow disks. It uses a small extra amount of the CPU, however, the reduced i/o usage should more than make up for this. This is primarily interesting for a small scaled VPS, Netbooks or low memory devices. Also virtualisation hosts should benefit of compressed memory. Unfortunatly the zram-config script is currently not part of the Debian and Centos distributions. I will run some further tests and update here. In Ubuntu, from 12.04 onwards, the install script is included and it takes only a minute to setup zram. How to […]
This is nothing really new, but definitely worth tracking because it just make sense and works fine. If you either virtualise or have otherwise many Debian / Ubuntu / Centos / Fedora based servers and workstations and want to keep them updated regularly, you do this over the internet for each and every instance. This utilises bandwidth and takes time to download particularly if you don’t have a some big internet connectivity. The principle is that you setup a proxy server for apt or yum which caches and serves on duplicate request the packages and therefore you will save time and bandwidth. The first device fetching the package will trigger the proxy to cache it and the next instance will receive the cache package from the proxy. This will reduce the used bandwidth and volume of the internet line and speed up the update due to using a local available cache. […]
This was first posted on http://linuxdistributions-lifecycle-comparison.cloud7-itconsult.com Overview of the Support Lifecycle for a few selected Enterprise Linux Distributions. Last Updated 26.11.2014 RedHat Enterprise Linux (13 year extended support) RedHat Enterprise Linux RHEL 7 RHEL 6 RHEL 5 RHEL 4 RHEL 3 Release Date 10-Jun-14 10-Nov-10 15-Mar-07 14-Feb-05 23-Oct-03 EOL End of Life 30-Jun-24 30-Nov-20 31-Mar-17 29-Feb-12 31-Oct-10 EOS Final end of Support (Extended) 30-Jun-27 30-Nov-23 31-Mar-20 31-Mar-17 30-Jan-14 Currently under support? YES YES YES YES NO Lifetime in Years 13.0 13.0 13.0 12.1 10.3 Life kernel patching available? YES kpatch Dynamic Kernel Patching NO NO NO NO CentOS Linux (10 year lifecycle) CentOS Linux CentOS 7 CentOS 6 CentOS 5 CentOS 4 CentOS 3 Release Date 7-Jul-14 10-Jul-10 12-Apr-07 9-Mar-05 19-Mar-04 EOL End of Life 30-Jun-24 30-Nov-20 31-Mar-17 29-Feb-12 31-Oct-10 EOS Final end of Support (Extended) N/A N/A N/A N/A N/A Currently under support? YES YES YES NO NO Lifetime in Years 9.9 10.3 9.9 6.9 6.6 Life kernel patching available? YES kpatch Dynamic Kernel Patching NO NO NO NO Oracle Enterprise Linux Oracle Linux OEL 7 OEL 6 OEL 5 Release Date Jul-14 Feb-11 Mar-07 EOL End of Life […]
I have a new Debain 7 server (VM) and would like to use a raw iSCSI Lun on it presented from my QNAP (and put ZFS on it at the end but thats already covered elsewhere here). Prerequisites: Read and understand some iSCSI best practices (like those ones http://storageblog.typepad.com/storage_blog/2009/03/simple-iscsi-best-practices-top-3.html (I have simply ignored them all here so don’t blame me when you put my construct into production) I have a QNAP NAS under 192.168.1.9 presenting a iSCSI Target and Lun (iSCSI Target) I have a standard Debian 7 Server (VM) on the same network. (iSCSI initiator) On the Debian 7 VM Install the open-iscsi package apt-get install open-iscsi There are 2 things to edit in the /etc/iscsi/iscsid.conf 1) I want my iSCSI to start automatically when I boot my server. Search for node.startup = manual #and change to node.startup = automatic 2) If you use CHAP authentication on the iSCSI device you will need […]
There is more than one way to check the performance available on a VPS Server but I go for a 1st quick shot to test if something is falling over. All I one Script: The Guys @ freevps.us offer a script that does it all or you. Host info , Download Speed Test , and disk IO. Give it a try, it does help you quick and dirty to get some results. wget freevps.us/downloads/bench.sh -O – -o /dev/null | bash VPS Upload and Download Speed: Quick check to see your up and downstream speed for the VPS. wget https://raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest_cli.py speedtest_cli.py –share IO (also covered by the all in one script): To get a brief feeling about IO capabilities of a VPS you could use dd if=/dev/zero of=test bs=64k count=16k conv=fdatasync;rm test 16384+0 records in 16384+0 records out 1073741824 bytes (1.1 GB) copied, 9.91105 s, 108 MB/s Some commonly accepted averages […]