Home / user-70244

SWilk's questions

Martin Hope
SWilk
Asked: 2020-02-09 00:58:54 +0800 CST
  • 5

I need to setup a ssh server (actually a git repo) inside a podman container.

The host system has sshd already running on port 22. I am creating a pod with following command:

# podman pod create --name=gitlab --share net -p 22:22 -p 443:443 -p 80:80
# podman create --name=gitlab_gitlab_1 [...]

And when I try to run it, I get following expected error:

# podman create --name=gitlab_gitlab_1
ERRO[0000] "cannot listen on the TCP port: listen tcp4 :22: bind: address already in use"

This is expected, as the 22 port is, in fact, in use.

So I have added a secondary IP address to the host system for the sole purpose of binding it to the container (pod?).

The hosts sshd is NOT listening on the secondary IP.

How can "tell" podman to use the secondary IP address for the port forwarding to this (or all of) pod.

networking containers podman
Martin Hope
SWilk
Asked: 2019-02-12 00:32:02 +0800 CST
  • 0

I am running Linux Mint 18.3 on desktop system.

I have migrated my workstation to LVM over LUKS, from plain LVM. The system does not boot and does not ask for LUKS password at boot. I can boot the system from LiveCD and properly unlock and mount lvm logical volumes and chroot into it, so the filesystems are OK.

This is my first attempt to encrypt existing system.

I think I am doing something wrong with initramfs and it lacks either some modules, tools or configuration.

My current config, shown after chroot-ing to my root fs from a LiveDVD is:

# cat /etc/crypttab
crypt_nvme0n1p2     UUID=107e557d-9b46-4a6e-897a-1e7f206700e3   none    luks,discard
encSda1         UUID=4b7a630b-f224-4501-9dc7-6955be0fe44c   none    luks,discard

# blkid
/dev/nvme0n1p2: UUID="107e557d-9b46-4a6e-897a-1e7f206700e3" TYPE="crypto_LUKS" PARTUUID="b5caeeb7-3d41-4569-ac4f-96357c851439"
/dev/sda1: UUID="4b7a630b-f224-4501-9dc7-6955be0fe44c" TYPE="crypto_LUKS" PARTUUID="13a6508d-5e77-417e-bfbd-2d11af488128"

# pvs 
  PV                          VG      Fmt  Attr PSize   PFree  
  /dev/mapper/crypt_nvme0n1p2 vg-main lvm2 a--  237.10g  55.33g
  /dev/mapper/encSda1         vg-main lvm2 a--  465.76g 283.99g

# lvs -o+devices
  LV      VG      Attr       LSize   Pool Origin Data%  Meta%  Move Log Cpy%Sync Convert Devices                                
  lv-home vg-main rwi-a-r--- 137.00g                                    100.00           lv-home_rimage_0(0),lv-home_rimage_1(0)
  lv-root vg-main rwi-aor---  44.76g                                    100.00           lv-root_rimage_0(0),lv-root_rimage_1(0)

# lsblk
NAME                             MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sr0                               11:0    1   1.9G  0 rom   
loop0                              7:0    0   1.8G  1 loop  
sda                                8:0    0 465.8G  0 disk  
└─sda1                             8:1    0 465.8G  0 part  
  └─encSda1                      253:1    0 465.8G  0 crypt 
    ├─vg--main-lv--home_rimage_0 253:8    0   137G  0 lvm   
    │ └─vg--main-lv--home        253:11   0   137G  0 lvm   
    ├─vg--main-lv--root_rmeta_0  253:2    0     4M  0 lvm   
    │ └─vg--main-lv--root        253:6    0  44.8G  0 lvm   /
    ├─vg--main-lv--home_rmeta_0  253:7    0     4M  0 lvm   
    │ └─vg--main-lv--home        253:11   0   137G  0 lvm   
    └─vg--main-lv--root_rimage_0 253:3    0  44.8G  0 lvm   
      └─vg--main-lv--root        253:6    0  44.8G  0 lvm   /
nvme0n1                          259:0    0 238.5G  0 disk  
├─nvme0n1p3                      259:3    0   511M  0 part  
├─nvme0n1p1                      259:1    0   125M  0 part  
├─nvme0n1p4                      259:4    0   768M  0 part  /boot
└─nvme0n1p2                      259:2    0 237.1G  0 part  
  └─crypt_nvme0n1p2              253:0    0 237.1G  0 crypt 
    ├─vg--main-lv--home_rimage_1 253:10   0   137G  0 lvm   
    │ └─vg--main-lv--home        253:11   0   137G  0 lvm   
    ├─vg--main-lv--root_rmeta_1  253:4    0     4M  0 lvm   
    │ └─vg--main-lv--root        253:6    0  44.8G  0 lvm   /
    ├─vg--main-lv--home_rmeta_1  253:9    0     4M  0 lvm   
    │ └─vg--main-lv--home        253:11   0   137G  0 lvm   
    └─vg--main-lv--root_rimage_1 253:5    0  44.8G  0 lvm   
      └─vg--main-lv--root        253:6    0  44.8G  0 lvm   /

So after encrypting this system I have edited /etc/crypttab, so it looks as shown above and I have recreated initramfs with update-initramfs -u -k all. Then I have tried to reboot the system but it cannot boot, saying that it cannot mount root fs.

The logs at startup shows:

Begin: Loading essential drivers ... done.
Begin: Running /scripts/init-premount ... done. 
Begin: Mounting root file system ... Begin Running /scripts/local-top ... lvmetad is not active yet, using direct activa(...)
during sysinit
  Volume group "vg-main" not found
  Cannot process volume group vg-main
  /run/lvm/lvmetad.socket: connect failsed: No such file or directory
  WARNING: Failed to connect to lvmetad. Falling back to internal scanning.
  Reading all pysical volumes. This may take a while...
  /run/lvm/lvmetad.socket: connect failed: No such file or directory
  WARNING: Failed to connect to lvmetad. Falling back to internal scanning.
Begin: Waiting for encrypted source device... ...     /run/lvm/lvmetad.socket: connect failsed: No such file or directory
  WARNING: Failed to connect to lvmetad. Falling back to internal scanning.
  Reading all pysical volumes. This may take a while...
  /run/lvm/lvmetad.socket: connect failed: No such file or directory
  WARNING: Failed to connect to lvmetad. Falling back to internal scanning.

Last 3 rows repeat themselves afterwards and nothing else is happening Some background

What have I done wrong? What I need to add something to the configuration of initramfs? Should I modify the kernel parameters in grub?

Some background:

I had a desktop system which was set up with LVM on a signle drive. I am trying to migrate it to encrypted setup with LUKS. I have installed temporarily another drive, set up LUKS partition on it, created PV and mirrored existing Logical Volumes (root and home) to this new encrypted drive.

Then I had wiped the old drive, created encrypted volume, and recreated LVM PV on this encrypted volume, and mirrored back the LVs. My goal is to remove the mirroring after the system is bootable, and to remove the temporary disk.

lvm
Martin Hope
SWilk
Asked: 2011-02-11 03:12:29 +0800 CST
  • 3

I have a development server for PHP programmers set up and runnig for some time now. The system is Debian with default Apache package:

# apache2 -v
Server version: Apache/2.2.9 (Debian)
Server built:   Dec 11 2010 18:58:55

I have set up about 30 name based VirtualHosts, one for each project and for each developer. I do the configuration with scripts, but now I have to add about 15 new project, all of them with standard directory structure, so I thought, I will use mod_vhost_alias

I have my config similar to this:

NameVirtualHost *:80
#Default vhost
<VirtualHost *:80>
  DocumentRoot /var/www/404
  ServerName dev.example.com
  ErrorLog /var/log/apache2/404.error_log
  TransferLog /var/log/apache2/404.access_log
        <Directory "/var/www/404">
                allow from all
                Options Indexes Includes
                AllowOverride All
        </Directory>
</VirtualHost>
#this entry is repeated many times 
#with different server names, document roots 
# and other differences, bu basics stay the same
<VirtualHost *:80>
  DocumentRoot /var/www/crm
  ServerName crm.dev.example.com
  ErrorLog /var/log/apache2/crm.error_log
  TransferLog /var/log/apache2/crm.access_log
        <Directory "/var/www/crm">
                allow from all
                Options Indexes Includes
                AllowOverride All
        </Directory>
</VirtualHost>

# I added  Vhost_alias virtaul host today, at the end of the config

<VirtualHost *:80>
    # This is for pages similar to some-page.pl.web.example.com
    UseCanonicalName Off
    ServerAlias *.web.dev.example.com
    VirtualDocumentRoot /var/www/web/%-4+/cur
    ErrorLog /var/log/apache2/%-4+.error_log
    TransferLog /var/log/apache2/%-4+.access_log
    <Directory /var/www/%-4+>
        allow from all
        Options Indexes Includes
        AllowOverride All
    </Directory>
</VirtualHost>

The result is, when I connect to http://my-page.com.web.dev.example.com I get the default vhost from /var/www/404 directory. The directory /var/www/web/my-page.com/ exists, and contains copy of my-page.com real webpage.

What am I doing wrong? Do I need separate ip addresses for "standard" NameVirtualHost and for vhost_alias? What else should I check?

apache-2.2 namevirtualhost