Saffron

Hosts VMware

• Type: Virtual machine
• Location: Badger
• Operating System: Gentoo Linux (2008.0 x86_64)
• URL: https://saffron.sihnon.net/
• Provides:
  • Web server
  • Database server
  • Subversion server

*Specs:

• 512Mb Ram
• 2x 100Mb Ethernet
• 20Gb Virtual Disk
• Serial port (mapped to <tt>/var/lib/vmware/Virtual Machines/serials/saffron</tt> on Badger)

{| class=“wikitable” cellspacing=“10”

! Partition Number ! Size ! Filesystem ! Mount point ! UUID ! Notes

The following physical partitions are used for LVM.

{| class=“wikitable” cellspacing=“10”

! Device ! PV UUID ! Size ! Volume Group ! Notes

2.6.28-gentoo-r1|<code>0@@</code>

Also see:

• Gentoo/VMware

• direct=yes|dev-db/mysql {{DisableFlag|minimal}}
• direct=yes|dev-util/subversion
• direct=yes|net-fs/samba {{DisableFlag|cups}}

See LDAP/Openldap. Configuration files are stored in subversion, under configs:/ldap/client/.

Edit <tt>/etc/postfix/main.cf</tt> to set the hostname. As this host is not a primary or backup MX, no other configuration is necessary.

<code>1@@</code>

Configuration is stored in subversion, under configs:/samba/client. Samba's LDAP password must be set to the same value stored in the directory and then the service can be started.

<code>2@@</code>

Create the initial database tables, then start the server and ensure it starts on boot. <source lang="bash"> /usr/bin/mysql_install_db /etc/init.d/mysql start rc-update add mysql default </source>

Import the original database backup, and reload the privileges table. <source lang="bash"> mysql -u root < mysql.sihnon.net.sql mysql -u root -e 'flush privileges;' </source>

Apache needs to be compiled with various extensions enabled. Make sure the following useflags are enabled:

• direct=yes|dev-lang/php {{EnableFlag|apache2 cli gd inifile json ldap mysql mysqli pcre posix session simplexml snmp sockets ssl xml xmlreader xmlrpc xmlwriter xsl }}

Set up permissions on the webroot so that apache can access all files that exist, and are later created using acls. Same for the web users. <source lang="bash"> setfacl -R -m u:apache:rX,d:u:apache:rX,g:web:rwX,d:g:apache:rwX /var/www </source>

For LDAP authentication to work, Apache must be set to use TLS connections by default. Add the following configuration: /etc/apache2/modules.d/46_mod_ldap.conf|<source lang="apache"> LDAPTrustedMode TLS LDAPVerifyServerCert On </source>

See also:

• Pitchfork - Setting up the pitchfork mpd webui.

Copy the repositories into <tt>/var/svn/repos/</tt>, and the configuration files into <tt>/var/svn/conf</tt>.

Use SVN::Notify to send email alerts containing the contents of new commits. This is not yet in the portage tree, but someone has submitted an ebuild so hopefully it will be soon. Until then, install it using CPAN. <source lang="bash"> cpan install SVN::Notify </source>