Editing Installation on Debian/old
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.
The edit can be undone.
Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 1: | Line 1: | ||
− | |||
− | |||
OpenVZ consists of a kernel, user-level tools, and container templates. | OpenVZ consists of a kernel, user-level tools, and container templates. | ||
− | This guide tells how to install the kernel and the tools on [http://www.debian.org Debian] Etch or Lenny | + | This guide tells how to install the kernel and the tools on [http://www.debian.org Debian] Etch or Lenny. |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
For Etch users, this document explains how to partially upgrade to Debian Lenny and install from lenny repositories ('''use this options at your risk'''). | For Etch users, this document explains how to partially upgrade to Debian Lenny and install from lenny repositories ('''use this options at your risk'''). | ||
Line 79: | Line 71: | ||
== Kernel installation == | == Kernel installation == | ||
− | === | + | === Lenny === |
− | + | <pre> | |
+ | aptitude install linux-image-openvz-686 | ||
+ | </pre> | ||
+ | this command will install latest kernel and all required packages and will arrange grub bootloader accordingly. | ||
=== Etch === | === Etch === | ||
Line 173: | Line 168: | ||
this command will install latest kernel and all required packages like: | this command will install latest kernel and all required packages like: | ||
<pre> | <pre> | ||
− | apt-get install iproute libatm1 linux-image-2.6.26-1-openvz-686 linux-image-openvz-686 rsync vzctl vzquota | + | apt-get install iproute libatm1 linux-image-2.6.26-1-openvz-686 linux-image-openvz-686 rsync vzctl vzquota |
</pre> | </pre> | ||
− | and will arrange grub bootloader | + | and will arrange grub bootloader propertly. |
=== Rebooting into OpenVZ kernel === | === Rebooting into OpenVZ kernel === | ||
Line 224: | Line 219: | ||
net.ipv4.conf.default.forwarding=1 | net.ipv4.conf.default.forwarding=1 | ||
− | net.ipv4.conf.default.proxy_arp=0 | + | net.ipv4.conf.default.proxy_arp = 0 |
net.ipv4.ip_forward=1 | net.ipv4.ip_forward=1 | ||
# Enables source route verification | # Enables source route verification | ||
− | net.ipv4.conf.all.rp_filter=1 | + | net.ipv4.conf.all.rp_filter = 1 |
# Enables the magic-sysrq key | # Enables the magic-sysrq key | ||
− | kernel.sysrq=1 | + | kernel.sysrq = 1 |
# TCP Explict Congestion Notification | # TCP Explict Congestion Notification | ||
− | #net.ipv4.tcp_ecn=0 | + | #net.ipv4.tcp_ecn = 0 |
# we do not want all our interfaces to send redirects | # we do not want all our interfaces to send redirects | ||
− | net.ipv4.conf.default.send_redirects=1 | + | net.ipv4.conf.default.send_redirects = 1 |
− | net.ipv4.conf.all.send_redirects=0 | + | net.ipv4.conf.all.send_redirects = 0 |
[...] | [...] | ||
Line 249: | Line 244: | ||
(Debian vz root directory is /var/lib/vz to be FHS-compliant.}} | (Debian vz root directory is /var/lib/vz to be FHS-compliant.}} | ||
− | # [sudo] ln -s /var/lib/vz /vz | + | # [sudo] ln -s /var/lib/vz /vz |
=== OS templates === | === OS templates === | ||
Line 275: | Line 270: | ||
# [sudo] apt-get install vzprocps vzdump | # [sudo] apt-get install vzprocps vzdump | ||
− | |||
− | |||
− | |||
− | |||
== Secure it == | == Secure it == | ||
Line 288: | Line 279: | ||
Add the following line into vz.conf to activate the respective iptables modules for all containers. | Add the following line into vz.conf to activate the respective iptables modules for all containers. | ||
− | IPTABLES="ip_tables ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl | + | IPTABLES="ip_tables ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ip_conntrack ip_conntrack_ftp ip_conntrack_irc ipt_LOG ipt_conntrack ipt_helper ipt_state iptable_nat ip_nat_ftp ip_nat_irc ipt_TOS" |
− | |||
[[http://wiki.debian.org/DebianFirewall][Configure]] your iptable rules inside the container. | [[http://wiki.debian.org/DebianFirewall][Configure]] your iptable rules inside the container. | ||
Line 331: | Line 321: | ||
After installing the OpenVZ kernel, user tools and a minimal OS template | After installing the OpenVZ kernel, user tools and a minimal OS template | ||
− | to create a first container and do some [[basic operations in OpenVZ environment]]. Read the [[download:doc/OpenVZ-Users-Guide.pdf]], browse this wiki. | + | to create a first container and do some |
+ | [[basic operations in OpenVZ environment]]. Read the [[download:doc/OpenVZ-Users-Guide.pdf]], browse this wiki. | ||
[[Category: HOWTO]] | [[Category: HOWTO]] | ||
[[Category: Debian]] | [[Category: Debian]] | ||
[[Category: Installation]] | [[Category: Installation]] | ||
+ | |||
+ | [http://www.resumewritingservice.biz/ resume writing] |