Posted by
stoyan on 03-Feb-2006
Via Stu’s Diary :
AccessFS from Olaf Dietsche allows the system administrator to restrict access to a network port based on uid/gui, so that daemons no longer need to run as the root user:
# mount -t accessfs none /proc/access
# chown www /proc/access/net/ip/bind/80
# chown mail /proc/access/net/ip/bind/25
Posted by
stoyan on 27-Dec-2005
Gentoo VPS Project – better support for VServer in Gentoo. Yahoooo!
…First, we have created the Gentoo VPS project, in order to concert the development of different implementations, and provide a convenient way for use with gentoo. The project page can be found at http://dev.croup.de/proj/gentoo-vps including Documentation and anonymous SVN access to our repository. The repository contains all patches and scripts for ebuilds in portage (openvz-sources, vserver-sources, util-vserver and vzctl), an experimental overlay, vserver stage building scripts and of course baselayout-vserver…
What’s new and interesting: support for building the vservers from stages/templates :
1. build the template from stage3 tarball
# vserver-new gentoo-template \
--hostname gentoo \
--context 1253 \
--interface eth0:192.168.1.253/24 \
stage3 /path/to/stage3-tarball.tar.bz2 <arch>
# cd /vservers/gentoo-template
# tar cjvpf /templates/gentoo-template.tar.bz2 ./
2. build vserver from the template above
# cd /vservers
# vserver-new myguest \
--hostname myguest \
--context 1252 \
--interface eth0:192.168.1.252/24 \
template /templates/gentoo-template.tar.bz2
What’s still missing: mass emerge for all vservers , so i can do vemerge—sync and vemerge system. Can this be emulated by SwitchTower task?