Miranda

Hosts Hosts/Servers Hosts/Gentoo Hosts/Offsite

Miranda is currently being ported from an RPS hosted at OVH to a VPS hosted at XenVZ. Configurations for both are below.

= XenVZ =

{| class=“wikitable” cellspacing=“10”

! Partition Number ! Size ! Filesystem ! Mount point ! Notes

• Base system was installed with OpenITC's stock kernel.
• System updated with portage (~amd64)

Full kernel <tt>.config</tt> files are stored in subversion, under configs:/kernel/miranda/.

Also see:

• Essential packages

• direct=yes|net-misc/openvpn

• direct=yes|dev-db/mysql {{DisableFlag|minimal}}
• direct=yes|dev-lang/php
• direct=yes|dev-util/subversion
• direct=yes|net-dns/bind
• direct=yes|net-dns/bind-tools
• direct=yes|net-proxy/dante
• direct=yes|www-servers/apache

• direct=yes|net-irc/irssi

Miranda maintains a persistent tunnel to the Sihnon network using openvpn. Configuration files are stored in subversion, under configs:/vpn/clients/miranda.

See LDAP/Openldap. Configuration files are stored in subversion, under configs:/ldap/slave/.

The <tt>ntp-client</tt> tool is run on boot to set the system clock to the correct time. The <tt>ntpd</tt> service is also run to keep the time accurate while the system is up. The default configuration is used, so the system will synchronise to a machine in the NTP pool.

<source lang="bash"> emerge ntp -av /etc/init.d/ntp-client start /etc/init.d/ntpd start rc-update add ntp-client default rc-update add ntpd default </source>

Configure network logging, as per Syslog. The connection to the remote syslog server is made through the VPN connection.

The firewall configuration is stored in subversion, under configs:/firewall/miranda/.

Run the following commands to apply the rules to the running kernel, save them for next boot, start the service and ensure it starts on system startup. <source lang="bash"> iptables-restore ./firewall/miranda/iptables.xenvz /etc/init.d/iptables save /etc/init.d/iptables start rc-update add iptables default ip6tables-restore ./firewall/miranda/ip6tables.xenvz /etc/init.d/ip6tables save /etc/init.d/ip6tables start rc-update add ip6tables default </source>

• …

= OVH =

{| class=“wikitable” cellspacing=“10”

! Partition Number ! Size ! Filesystem ! Mount point ! Notes

• Base system was installed with OVH's gentoo-grsec kernel.
• System updated with portage

Full kernel <tt>.config</tt> files are stored in subversion, under configs:/kernel/miranda/.

Also see:

• Essential packages

See LDAP/Openldap. Configuration files are stored in subversion, under configs:/ldap/slave/.

• todo

Configure network logging, as per Syslog.

The firewall configuration is stored in subversion, under configs:/firewall/miranda/.

Run the following commands to apply the rules to the running kernel, save them for next boot, start the service and ensure it starts on system startup. <source lang="bash"> iptables-restore ./firewall/miranda/iptables.ovh /etc/init.d/iptables save /etc/init.d/iptables start rc-update add iptables default ip6tables-restore ./firewall/miranda/ip6tables.ovh /etc/init.d/ip6tables save /etc/init.d/ip6tables start rc-update add ip6tables default </source>

The iSCSI disk is configured and initialised by the initrd

0@@

• …