Difference between revisions of "Shimmer"
|Line 106:||Line 106:|
* months before removal of ex-member accounts. Exceptions on a case-by-case basis.
* Users should regularly backup critical data offiste.
* Users should regularly backup critical data offiste.
Revision as of 12:59, 21 November 2014
Simple project server, emphasis on availability and uptime.
Most likely, this server will continue operating for several years, even as newer and better servers supplant it.
- 1 ChiefAdmin
- 2 Support
- 3 Login
- 4 CommandReference
- 5 Characteristics
- 6 Redundancy (RAID)
- 7 Policies
- 8 Credits
- 9 Special Services
- 10 Softload
- 11 NamingConvention
- 12 Timezone
- 13 Reference
On any unix terminal emulator, enter the command:
ssh <userName>@router.hacdc.org -p #port#
On other platforms, try applications like PuTTY with similar settings.
Routinely important commands unique to this server documented as follows.
List OpenVZ VMs created for you.
sudo /usr/sbin/vzctl start <name>
sudo /usr/sbin/vzctl stop <name>
Opens command line of running VM <name> .
sudo /usr/sbin/vzctl enter <name>
- ./hovzNewUser <userName> # Creates user account with default OpenVZ VM and permissions.
- ./hovzDelUser <userName> # Deletes user account, associated VMs, and associated OpenVZ permissions.
- ./hovzNewVM <userName> <VM_Number> <dist> # Creates VM accessible to non-root user <userName> .
- vzctl set CTID --ram 128M --swap 256M --save
- vzctl set CTID --diskspace 4G:4.2G --save
Through normal reboots, host will suspend/resume any guest VMs.
- iptables -t nat -L -n -v #Lists port forwarding rules.
- iptables -t nat -F #Deletes port forwarding rules.
- iptables -D PREROUTING 1 #Deletes port forwarding rule.
/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 20283 -j DNAT --to 10.174.10.5:22
Package iptables-persistent has been installed. Upon installation, existing iptables rules were saved. Edit /etc/iptables/rules.v4 .
- Install OpenVZ, documented at http://openvz.org/Installation_on_Debian .
- Install hostedOpenVZ, documented at https://github.com/mirage335/hostedOpenVZ .
- Change default kernel in /etc/default/grub.cfg .
- Apply "iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE" .
- CPU - E2200 Dual-Core 2.2GHz
- RAM - 4GB
- HDD - 500GB
- Hostname - HacDC-shared-m335-1
- FQDN - HacDC-shared-m335-1.hacdc.org
None yet, keep backups. Nonetheless, hard disk is kept cool, so the server should have a long life ahead of it.
HacDC members with a demonstrable need or willingness to manage non-root users may be given root access. Imperative that root users do not jeopardize uptime.
All HacDC members are welcome to non-root shell accounts, directly provided by the server, and used to manage OpenVZ VMs.
All HacDC members are welcome to OpenVZ Virtual Machines. Resources, including CPU, disk space, and external network ports, will be allocated on an as-needed first-come-first-serve basis.
Root users, please use the provided hostedOpenVZ scripts. Following the naming conventions set therein helps account for which resources belong to whom.
Internal server email will notify users, if feasible, on the following schedules, subject to change.
- Three days before planned downtime exceeding one hour.
- One week before planned permanent downtime (obsolescence).
Forwarding to another email address is possible with the following command.
echo 'email@example.com' > ~/.forward
- Up to three months before removal of ex-member accounts. Exceptions on a case-by-case basis.
- Users should regularly backup critical data offiste.
- Onsite data storage is not guaranteed to be reliable.
- All server data may be deleted after obsolescence.
- Removed accounts may be deleted immediately and permanently upon deactivation.
Machine is physically accessible to all keyholding HacDC members. Although HacDC members are generally responsible, privacy should not be expected.
Sharing of account resources is permitted, however, additional resources will be allocated according to individual member needs for specific purposes. As a reminder, compromised accounts will be immediately removed as discovered.
Hard bandwidth limits have not been set to ease administration of local file servers. However, please configure applications to limit maximum bandwidth use where possible, particularly for web servers.
If internet bandwidth use is required for downloading large files, between 2200 and 0600 is best.
Hunterkll - Donated core hardware.
Funtoo (enhanced Gentoo) build server is available, with binary packages and weekly full-os tarballs for new installations.
After obtaining the password for remote access, upload a key and set PORTAGE_BINHOST="ssh://binpkguser@HacDC-shared-m335-1.HacDC.org:<port>/opt/mirage335OS-x64/usr/portage/packages" .
ssh-copy-id -i "./key.pub firstname.lastname@example.org -p #port#
This also provides access to regularly generated tarball images for re/installation of a fresh OS.
Preferred network names for participating machines and virtual machines.
- HacDC - Identifies machine as HacDC or HacDC member property on the local network.
- shared - One of private, restricted, shared. Private = one member only (eg. RasPi). Restricted = limited access (eg. HacDC web server). Shared = shared resources (ie. remote shells).
- m335 - Abbreviated member name or screen name. Full contact details should be written on the physical machine.
- 1 - Unique identifier.
- mirage335 - Local username.
- 1 - Unique machine identifier.
EST/EDT aka US Eastern, America/NewYork, or "Eastern"