Re: Virtualization of Windows XP

2024-10-22 Thread Detlef Vollmann

On 10/4/24 15:56, Gary Dale wrote:

Thanks everyone. The exact solution was provided by Detlef - change the 
machine type to pc-i440fx-2.0.


Just FYI: I just had to change it to pc-i440fx-2.11.
I'm on Sid and some libvirt/qemu upgrade seems to have removed 
pc-i440fx-2.0.

This will probably hit you when you upgrade to Trixie.
Unfortunately this time XP wanted a re-activation...

  Detlef



Re: Virtualization of Windows XP

2024-10-04 Thread George at Clug



On Saturday, 05-10-2024 at 13:56 Max Nikulin wrote:
> On 04/10/2024 20:56, Gary Dale wrote:
> > I found another issue on one of the machines - spice was no longer 
> > supported either
> 
> I still use spice (remote-viewer from virt-viewer) for Linux guests on 
> bookworm, but I start qemu directly with "-display spice-app,gl=on". I 
> have seen notices that it is deprecated though.
> 
> 
Unless someone can tell me otherwise, my understanding is that VNC as packaged 
in Linux does not support audio.

Hence I have always used Spice for both video and audio.

When I first heard from this thread that Spice was depreciated, I thought it 
was a mistake, but it appears that RedHat is no longer supporting Spice. This 
is bad news if Red Hat does not have a way forward for USB redirection, video 
and audio.

I hope this issue (mainly H.264 codecs ?) is resolved soon. Spice seemed to be 
the way of the future.

Below are a few links which talk about this change:

https://access.redhat.com/solutions/5414901
Spice protocol is being deprecated in RHEL 8.3 
Spice remote display protocol is being deprecated in RHEL8.3 and will be 
removed in RHEL9.

https://forums.rockylinux.org/t/spice-support-was-dropped-in-rhel-9/6753
Why no SPICE:

Due to some license restrictions around H.264 codecs we are not able to 
provide a Streaming solution which is needed for modern workloads (as all 
drivers are using 3D today). Also vGPU support is not possible without this.
There are quite some 3rd party solutions that already have a proper 
implementation (licensed software due to H.264 restrictions unfortunately).
For console access and local acceleration VNC is capable of doing the job - 
and VNC is also used for OpenStack and KubeVirt and they are both not 
interested in using SPICE instead.

Mainly due to (1) and (3) we decided to deprecate our work on SPICE.


https://www.reddit.com/r/kvm/comments/wa9lxm/rhel_9_spice_alternative/
The reason is some licencing issues. I hope Fedora won't follow, as my 
workstation is all VM. 
...
would it be faster to install Xrdp or similar in the guest and use that? That 
seems to be the solution RedHat is suggesting. 


https://www.reddit.com/r/qemu_kvm/comments/sytgvd/clipboard_without_spice/

https://stackoverflow.com/questions/64560389/setting-up-pulseaudio-in-qemu





Re: Virtualization of Windows XP

2024-10-04 Thread Max Nikulin

On 04/10/2024 20:56, Gary Dale wrote:
I found another issue on one of the machines - spice was no longer 
supported either


I still use spice (remote-viewer from virt-viewer) for Linux guests on 
bookworm, but I start qemu directly with "-display spice-app,gl=on". I 
have seen notices that it is deprecated though.




Re: Virtualization of Windows XP

2024-10-04 Thread Gary Dale

On 2024-10-02 20:14, Gary Dale wrote:
I'm running Debian/Stable on an AMD64 system. I have a number of 
kvm/qemu virtual machines running on it, including Home Assistant and 
a Samba DC, along with multiple Windows VMs. Most of them are working 
fine.


However I found a need to fire up an old Windows XP VM but I can't get 
it to start. I'm using virt-manager to do this on my Debian/Testing 
workstation, connecting to the VMs on the Debian/Stable server. When I 
open the VM (using the virt-manager gui) I get the error:


host does not support domain type kvm with machine "pc-0.12' for 
virtualization type 'hvm' with architecture 'x86_64'


I have two Windows XP VMs - 32bit and 64bit - and they both give the 
same message.


I haven't tried using the Windows XP VMs in years, so I have no idea 
when the problem originated. I do know at one point they worked.


Any ideas on what's going wrong and how to fix it?

Thanks.

Thanks everyone. The exact solution was provided by Detlef - change the 
machine type to pc-i440fx-2.0. However, that is easier said than done as 
Timothy's advice about editing the XML from within virt-manager didn't 
work. For some reason it complained about the machine type when I tried. 
I had to remote into the server to use virsh edit  to actually 
make the change. Along the way, I found another issue on one of the 
machines - spice was no longer supported either - that shows how long 
it's been since I last used them.




Re: Virtualization of Windows XP

2024-10-03 Thread Detlef Vollmann

On 10/3/24 06:35, Alexander V. Makartsev wrote:


And change it to:
hvm


I'm using 'pc-i440fx-2.0' on Sid/Trixie and XP runs w/o problems.

For Win7 when I did the change it wanted a new activation, but XP
was fine with the change...

  Detlef



Re: Virtualization of Windows XP

2024-10-03 Thread Alexander V. Makartsev

On 03.10.2024 13:27, Timothy M Butterworth wrote:


On Thu, Oct 3, 2024 at 4:18 AM Alexander V. Makartsev 
 wrote:


...
hvm


My machines in Trixie are: machine="pc-q35-9.0">hvm
When dealing with legacy OS like WinXP I prefer to be on a safe side and 
choose older module, which emulates a chipset from Pentium I era.

So guest OS won't freak out and will install drivers automatically.
It also matters if OS was previously installed on that specific 
virtualized hardware, otherwise it will boot into BSoD.

Older OS can't handle properly these, basically, "motherboard swaps".

--

 With kindest regards, Alexander.

 Debian - The universal operating system
 https://www.debian.org


Re: Virtualization of Windows XP

2024-10-03 Thread Timothy M Butterworth
On Thu, Oct 3, 2024 at 4:18 AM Alexander V. Makartsev 
wrote:

> On 03.10.2024 05:14, Gary Dale wrote:
>
> I'm running Debian/Stable on an AMD64 system. I have a number of kvm/qemu
> virtual machines running on it, including Home Assistant and a Samba DC,
> along with multiple Windows VMs. Most of them are working fine.
>
> However I found a need to fire up an old Windows XP VM but I can't get it
> to start. I'm using virt-manager to do this on my Debian/Testing
> workstation, connecting to the VMs on the Debian/Stable server. When I open
> the VM (using the virt-manager gui) I get the error:
>
> host does not support domain type kvm with machine "pc-0.12' for
> virtualization type 'hvm' with architecture 'x86_64'
>
> I have two Windows XP VMs - 32bit and 64bit - and they both give the same
> message.
>
> I haven't tried using the Windows XP VMs in years, so I have no idea when
> the problem originated. I do know at one point they worked.
>
> Any ideas on what's going wrong and how to fix it?
>
> I vaguely remember an error message like this. I think it was because a
> module "pc-0.12" was either renamed or deprecated.
> You can edit VM (domain) configuration described in xml directly using
> virt-manager.
> To make it happen you need to enable this function in Preferences menu (
> Edit >> Preferences >> Enable XML Editing ).
>
> Now, if you open hardware details of your VM, there will be an extra tab
> called "XML".
> Select "Overview" from the hardware list and click on "XML" tab.
>
> Look for a string that looks like this:
> hvm
>
> And change it to:
> hvm
>

My machines in Trixie are: hvm



> Click Apply button to save changes and try to start VM again.
>
>
> --
>
>  With kindest regards, Alexander.
>
>  Debian - The universal operating system
>  https://www.debian.org
>
>

-- 
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀


Re: Virtualization of Windows XP

2024-10-03 Thread George at Clug



On Thursday, 03-10-2024 at 10:14 Gary Dale wrote:
> I'm running Debian/Stable on an AMD64 system. I have a number of 
> kvm/qemu virtual machines running on it, including Home Assistant and a 
> Samba DC, along with multiple Windows VMs. Most of them are working fine.
> 
> However I found a need to fire up an old Windows XP VM but I can't get 
> it to start. I'm using virt-manager to do this on my Debian/Testing 
> workstation, connecting to the VMs on the Debian/Stable server. When I 
> open the VM (using the virt-manager gui) I get the error:
> 
> host does not support domain type kvm with machine "pc-0.12' for 
> virtualization type 'hvm' with architecture 'x86_64'

What are the capabilities of the KVM Host?  I use an Intel i7. 

Can your Host support a SandyBridge CPU, if you create a new VM (e.g. try 
creating a SandyBridge CPU configure VM and install Debain Bookworm)?

I expect that you may have other issues in Windows XP itself,  if you do get to 
run Windows XP on different architecture that it was originally installed to 
(which is why my VM uses QEMU to emulate a Sandybrige CPU).

Other than researching links on the topic, like the two below, I am hoping that 
the Virt-Manager VM XML I posted below may give you some ideas.

I believe qemu is important to emulate the older CPU.

https://people.redhat.com/~cohuck/2022/01/05/qemu-machine-types.html
https://www.qemu.org/docs/master/system/i386/pc.html


> 
> I have two Windows XP VMs - 32bit and 64bit - and they both give the 
> same message.
> 
> I haven't tried using the Windows XP VMs in years, so I have no idea 
> when the problem originated. I do know at one point they worked.
> 
> Any ideas on what's going wrong and how to fix it?
> 
> Thanks.
> 
> 


  WindowsXP
  71106107-0884-482c-b532-de32dacb5f52
  3145728
  3145728
  1
  
hvm

  
  



  
  
SandyBridge
Intel
























  
  



  
  destroy
  restart
  restart
  


  
  
/usr/bin/kvm

  
  
  
  
  


  
  
  
  


  
  
  
  


  


  
  


  
  


  
  



  


  



  
  
  
  


  

  


  


  
  




  


  



  
  


  


  


  


  


  

  





Re: Virtualization of Windows XP

2024-10-02 Thread Alexander V. Makartsev

On 03.10.2024 05:14, Gary Dale wrote:
I'm running Debian/Stable on an AMD64 system. I have a number of 
kvm/qemu virtual machines running on it, including Home Assistant and 
a Samba DC, along with multiple Windows VMs. Most of them are working 
fine.


However I found a need to fire up an old Windows XP VM but I can't get 
it to start. I'm using virt-manager to do this on my Debian/Testing 
workstation, connecting to the VMs on the Debian/Stable server. When I 
open the VM (using the virt-manager gui) I get the error:


host does not support domain type kvm with machine "pc-0.12' for 
virtualization type 'hvm' with architecture 'x86_64'


I have two Windows XP VMs - 32bit and 64bit - and they both give the 
same message.


I haven't tried using the Windows XP VMs in years, so I have no idea 
when the problem originated. I do know at one point they worked.


Any ideas on what's going wrong and how to fix it?
I vaguely remember an error message like this. I think it was because a 
module "pc-0.12" was either renamed or deprecated.
You can edit VM (domain) configuration described in xml directly using 
virt-manager.
To make it happen you need to enable this function in Preferences menu ( 
Edit >> Preferences >> Enable XML Editing ).


Now, if you open hardware details of your VM, there will be an extra tab 
called "XML".

Select "Overview" from the hardware list and click on "XML" tab.

Look for a string that looks like this:
hvm

And change it to:
hvm

Click Apply button to save changes and try to start VM again.


--

 With kindest regards, Alexander.

 Debian - The universal operating system
 https://www.debian.org


Re: Virtualization of Windows XP

2024-10-02 Thread Keith Bainbridge



On 3/10/24 12:41, Max Nikulin wrote:

On 03/10/2024 07:14, Gary Dale wrote:
host does not support domain type kvm with machine "pc-0.12' for 
virtualization type 'hvm' with architecture 'x86_64'

[...]

I haven't tried using the Windows XP VMs in years,


I have never tried virt-manager, so I have no idea what 'hvm' may mean.

Support of pc-0.12 might be dropped some time ago. At least it is not 
listed in


     qemu-system-x86_64 -machine help

I would check qemu release notes and would try another machine type 
(with a copy of the image file).





Perhaps you need to change the settings to use 32bit environment
--
All the best

Keith Bainbridge

keithrbaugro...@gmail.com
ke1thr...@duck.com

+61 (0)447 667 468

UTC + 10:00



Re: Virtualization of Windows XP

2024-10-02 Thread Max Nikulin

On 03/10/2024 07:14, Gary Dale wrote:
host does not support domain type kvm with machine "pc-0.12' for 
virtualization type 'hvm' with architecture 'x86_64'

[...]

I haven't tried using the Windows XP VMs in years,


I have never tried virt-manager, so I have no idea what 'hvm' may mean.

Support of pc-0.12 might be dropped some time ago. At least it is not 
listed in


qemu-system-x86_64 -machine help

I would check qemu release notes and would try another machine type 
(with a copy of the image file).




Re: Virtualization of Windows XP

2024-10-02 Thread jeremy ardley




On 3/10/24 08:14, Gary Dale wrote:


I haven't tried using the Windows XP VMs in years, so I have no idea 
when the problem originated. I do know at one point they worked.


Any ideas on what's going wrong and how to fix it?


I fired up an XP VM on a recent windows machine using VirtualBox.

There is VirtualBox for Debian but not in the current release, though it 
can be installed OK.


You then may have the problem of changing the VM format so VirtualBox 
can use it.




Virtualization of Windows XP

2024-10-02 Thread Gary Dale
I'm running Debian/Stable on an AMD64 system. I have a number of 
kvm/qemu virtual machines running on it, including Home Assistant and a 
Samba DC, along with multiple Windows VMs. Most of them are working fine.


However I found a need to fire up an old Windows XP VM but I can't get 
it to start. I'm using virt-manager to do this on my Debian/Testing 
workstation, connecting to the VMs on the Debian/Stable server. When I 
open the VM (using the virt-manager gui) I get the error:


host does not support domain type kvm with machine "pc-0.12' for 
virtualization type 'hvm' with architecture 'x86_64'


I have two Windows XP VMs - 32bit and 64bit - and they both give the 
same message.


I haven't tried using the Windows XP VMs in years, so I have no idea 
when the problem originated. I do know at one point they worked.


Any ideas on what's going wrong and how to fix it?

Thanks.



Re: Virtualization

2024-01-14 Thread David Christensen

On 1/13/24 16:54, Chip Snuth wrote:


Thank you for your kind words on encouragement,. I fully intend to stick 
around this list as well as becomming more active on the debian users 
forums. I  choose to use  virtualbox because I can spin up multiple 
instances of Debian inorder to  not only help the Debian development 
team   but also to help fellow users debug there  issues and or solve 
their issues.


Thanks,

Chip



Welcome aboard.  :-)


To get the best results from this mailing list, please read the FAQ:

https://lists.debian.org/debian-user/2024/01/msg3.html


If you have any further questions about Debian, please start a new 
thread by creating a new e-mail message and sending it to this list.



If you think you can add useful information to a thread, please "Reply 
to List".  I typically do not cc the author, unless they request it.



David



Re: Virtualization

2024-01-13 Thread Chip Snuth



Thank you for your kind words on encouragement,. I fully intend to stick 
around this list as well as becomming more active on the debian users 
forums. I  choose to use  virtualbox because I can spin up multiple 
instances of Debian inorder to  not only help the Debian development 
team   but also to help fellow users debug there  issues and or solve 
their issues.


Thanks,

Chip


On 1/13/24 15:15, David Christensen wrote:

On 1/13/24 08:38, Chip Snuth wrote:

Hello,



Hello.  :-)


I'm currently using RHEL however, I am still virtualization to play 
with    Debian instead of houseing my RHEL installation . Would the 
Debian community view me as a trator ofr chill for closed source and 
proprietary software? personally prefer the held back  kernel and 
software in RHEL provides for instance  the kernel is listed below.



   4.18.0-513.11.1.el8_9.x86_64 #1 SMP



Do not worry about being harassed on this list -- most everyone is 
polite, and impolite behavior is dealt with promptly.



Debian offers several choices for virtualization:

https://wiki.debian.org/SystemVirtualization


Debian 12 "Bulleye" is the current "stable" release of Debian:

https://www.debian.org/releases/


Debian also supports the past two previous releases of "stable":

https://wiki.debian.org/LTS


Debian offers lots of software via a package management system. Binary 
packages are the fast and easy way to install software. Source 
packages are useful when you want to customize compiled-in features, 
do debugging/ development/ test, etc.:


https://www.debian.org/distrib/packages

https://packages.debian.org/search?keywords=virtual&searchon=all&suite=stable§ion=all 




As upstream software projects release new versions, these go into 
"unstable", then "testing", and eventually "stable".  Important 
software updates are sometimes expedited through this process and made 
available as "backport" packages:


https://backports.debian.org/


Some vendors provide servers and packages that integrate into the 
Debian package management system.  This provides the current version 
of the software using the standard Debian package management tools.  
For example, I use Oracle VirtualBox:


https://www.virtualbox.org/wiki/Linux_Downloads


All that said, the only way to find out if an OS is going to meet your 
needs is to get a computer, install the OS, and try to do something 
useful with it.  This mailing list is one of many available help 
resources if you choose Debian.



David





Re: Virtualization

2024-01-13 Thread Timothy M Butterworth
On Sat, Jan 13, 2024 at 7:42 PM Chip Snuth  wrote:

> Hello,
>
> I'm currently using RHEL however, I am still virtualization to play with
> Debian instead of houseing my RHEL installation . Would the Debian
> community view me as a trator ofr chill for closed source and proprietary
> software?
>

Red Hat is Free Open Source Software. It almost seems like a new Red Hat
Clone comes out every 3 - 6 months: Oracle, CentOS, Rocky, Alma, Amazon to
name a few.



> personally prefer the held back  kernel and software in RHEL provides for
> instance  the kernel is listed below.
>
>
>   4.18.0-513.11.1.el8_9.x86_64 #1 SMP
>
>
> Thanks,
>
> Chip
>


-- 
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀


Re: Virtualization

2024-01-13 Thread David Christensen

On 1/13/24 08:38, Chip Snuth wrote:

Hello,



Hello.  :-)


I'm currently using RHEL however, I am still virtualization to play with 
   Debian instead of houseing my RHEL installation . Would the Debian 
community view me as a trator ofr chill for closed source and 
proprietary software? personally prefer the held back  kernel and 
software in RHEL provides for instance  the kernel is listed below.



   4.18.0-513.11.1.el8_9.x86_64 #1 SMP



Do not worry about being harassed on this list -- most everyone is 
polite, and impolite behavior is dealt with promptly.



Debian offers several choices for virtualization:

https://wiki.debian.org/SystemVirtualization


Debian 12 "Bulleye" is the current "stable" release of Debian:

https://www.debian.org/releases/


Debian also supports the past two previous releases of "stable":

https://wiki.debian.org/LTS


Debian offers lots of software via a package management system.  Binary 
packages are the fast and easy way to install software.  Source packages 
are useful when you want to customize compiled-in features, do 
debugging/ development/ test, etc.:


https://www.debian.org/distrib/packages

https://packages.debian.org/search?keywords=virtual&searchon=all&suite=stable§ion=all


As upstream software projects release new versions, these go into 
"unstable", then "testing", and eventually "stable".  Important software 
updates are sometimes expedited through this process and made available 
as "backport" packages:


https://backports.debian.org/


Some vendors provide servers and packages that integrate into the Debian 
package management system.  This provides the current version of the 
software using the standard Debian package management tools.  For 
example, I use Oracle VirtualBox:


https://www.virtualbox.org/wiki/Linux_Downloads


All that said, the only way to find out if an OS is going to meet your 
needs is to get a computer, install the OS, and try to do something 
useful with it.  This mailing list is one of many available help 
resources if you choose Debian.



David



Re: Virtualization

2024-01-13 Thread Andy Smith
Hi,

On Sat, Jan 13, 2024 at 08:38:37AM -0800, Chip Snuth wrote:
> I'm currently using RHEL however, I am still virtualization to play with  
> Debian instead of houseing my RHEL installation . Would the Debian community
> view me as a trator ofr chill for closed source and proprietary software?
> personally prefer the held back  kernel and software in RHEL provides for
> instance  the kernel is listed below.

We don't care what you use or spend your time on, but this list is
for user support of Debian, so do you have a relevant Debian issue
to discuss?

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting



Virtualization

2024-01-13 Thread Chip Snuth

Hello,

I'm currently using RHEL however, I am still virtualization to play with 
  Debian instead of houseing my RHEL installation . Would the Debian 
community view me as a trator ofr chill for closed source and 
proprietary software? personally prefer the held back  kernel and 
software in RHEL provides for instance  the kernel is listed below.



  4.18.0-513.11.1.el8_9.x86_64 #1 SMP


Thanks,

Chip


Re: Virtualization under Bookworm

2023-08-27 Thread Stefan Monnier
> What's the current recommendation for someone who just wants to create
> a one-off VM to run Debian under Debian?

Last time I needed such a thing I used LXC.


Stefan



Re: Virtualization under Bookworm

2023-08-27 Thread Paul van der Vlis

Op 26-08-2023 om 18:40 schreef Carl Fink:

Hi,

I have a project that I'd like to work on in a virtual machine hosted on 
my Bookworm system. In the old days (5-10 years ago) I used VirtualBox, 
just from inertia. I haven't really virtualized since then.


What's the current recommendation for someone who just wants to create a 
one-off VM to run Debian under Debian? As this is not my job or even 
main hobby, ideally it should have setup at least as easy as VirtualBox 
was back in the day.


System is an ASUS ExpertCenter PN52 (Ryzen 7 6800, 32 GB of RAM, 2 
terabyte SSD).


I can advice virt-manager, it is like Virtualbox was, but the modules 
are allready in the kernel so don't have to be compiled like with 
Virtualbox. And virt-manager is in Debian, Virtualbox is not in Debian 
so far I know.


Some advices:
You have to add yourself to the group libvirt, something like:
adduser carl libvirt

And it's important to start the virtual network by default:
virsh net-autostart default

To start a virtual machine in one click so without starting virt-manager 
first I make a script like this:


#!/bin/bash
sudo /usr/bin/virsh start win11
virt-manager --connect qemu:///system --show-domain-console "win11"


It seems to be faster when you use another driver for your virtual disk. 
There are many manuals for setting it up. It's not really difficult.


With regards,
Paul

--
Paul van der Vlis Linux systeembeheer Groningen
https://vandervlis.nl



Re: Virtualization under Bookworm

2023-08-26 Thread Mario Marietto
So,surely go with virtualbox or vmware workstation.

On Sun, Aug 27, 2023 at 1:20 AM Carl Fink  wrote:

>
> On 8/26/23 16:01, Mario Marietto wrote:
> > If you want a powerful tool,you should spend some of your time on it.
> > If you want to use something easier,you will lose some features,at least.
>
> Yep. That's why I specified that I was more interested in easy setup in
> the threadstarter 
>
> -Carl
>
>

-- 
Mario.


Re: Virtualization under Bookworm

2023-08-26 Thread Carl Fink



On 8/26/23 16:01, Mario Marietto wrote:
If you want a powerful tool,you should spend some of your time on it. 
If you want to use something easier,you will lose some features,at least.


Yep. That's why I specified that I was more interested in easy setup in 
the threadstarter 


-Carl



Re: Virtualization under Bookworm

2023-08-26 Thread Mario Marietto
If you want a powerful tool,you should spend some of your time on it. If
you want to use something easier,you will lose some features,at least.

On Sat, Aug 26, 2023 at 9:43 PM Carl Fink  wrote:

> Well, last time I looked (at least six or seven years ago) it was a weird
> maze of fiddling to get QEMU/KVM set up. Is it easier now?
> On 8/26/23 14:53, Mario Marietto wrote:
>
> For sure you can't miss qemu + kvm,they are the most powerful tools for
> virtualization. With qemu and kvm you can pass through to the guest OS even
> your gpu. With virtualbox or vmware you can't.
>
> On Sat, Aug 26, 2023 at 8:40 PM James Bloom  wrote:
>
>> Carl:
>>
>> I use VirtualBox on Debian 12, and I run virtual Windows 11 and Linux
>> machines with no issue. I also tried GNOME boxes and had no direct
>> problems, but I went back to using VirtualBox because it was compatible
>> with my cloud storage setup - I can save a VirtualBox virtual machine file
>> in the cloud server and access it from my desktop and laptop without issue,
>> whereas GNOME boxes wouldn’t work if I did that - there were always boot
>> errors. But GNOME boxes otherwise seemed to work great.
>>
>> James
>>
>> Get Outlook for iOS <https://aka.ms/o0ukef>
>> --
>> *From:* Carl Fink 
>> *Sent:* Saturday, August 26, 2023 9:29:30 AM
>> *To:* debian-user@lists.debian.org 
>> *Subject:* Virtualization under Bookworm
>>
>> Hi,
>>
>> I have a project that I'd like to work on in a virtual machine hosted on
>> my Bookworm system. In the old days (5-10 years ago) I used VirtualBox,
>> just from inertia. I haven't really virtualized since then.
>>
>> What's the current recommendation for someone who just wants to create a
>> one-off VM to run Debian under Debian? As this is not my job or even
>> main hobby, ideally it should have setup at least as easy as VirtualBox
>> was back in the day.
>>
>> System is an ASUS ExpertCenter PN52 (Ryzen 7 6800, 32 GB of RAM, 2
>> terabyte SSD).
>>
>> Thank you.
>>
>> -Carl Fink
>>
>>
>
> --
> Mario.
>
>

-- 
Mario.


Re: Virtualization under Bookworm

2023-08-26 Thread Andrew M.A. Cater
On Sat, Aug 26, 2023 at 03:43:54PM -0400, Carl Fink wrote:
> Well, last time I looked (at least six or seven years ago) it was a weird
> maze of fiddling to get QEMU/KVM set up. Is it easier now?
> 
> On 8/26/23 14:53, Mario Marietto wrote:
> > For sure you can't miss qemu + kvm,they are the most powerful tools for
> > virtualization. With qemu and kvm you can pass through to the guest OS
> > even your gpu. With virtualbox or vmware you can't.
> > 
> > On Sat, Aug 26, 2023 at 8:40 PM James Bloom  wrote:
> > 
> > Carl:
> > 
> > I use VirtualBox on Debian 12, and I run virtual Windows 11 and
> > Linux machines with no issue. I also tried GNOME boxes and had no
> > direct problems, but I went back to using VirtualBox because it
> > was compatible with my cloud storage setup - I can save a
> > VirtualBox virtual machine file in the cloud server and access it
> > from my desktop and laptop without issue, whereas GNOME boxes
> > wouldn’t work if I did that - there were always boot errors. But
> > GNOME boxes otherwise seemed to work great.
> > 
> > James
> > 
> > Get Outlook for iOS <https://aka.ms/o0ukef>
> > ----
> > *From:* Carl Fink 
> > *Sent:* Saturday, August 26, 2023 9:29:30 AM
> > *To:* debian-user@lists.debian.org 
> > *Subject:* Virtualization under Bookworm
> > Hi,
> > 
> > I have a project that I'd like to work on in a virtual machine
> > hosted on
> > my Bookworm system. In the old days (5-10 years ago) I used
> > VirtualBox,
> > just from inertia. I haven't really virtualized since then.
> > 
> > What's the current recommendation for someone who just wants to
> > create a
> > one-off VM to run Debian under Debian? As this is not my job or even
> > main hobby, ideally it should have setup at least as easy as
> > VirtualBox
> > was back in the day.
> > 
> > System is an ASUS ExpertCenter PN52 (Ryzen 7 6800, 32 GB of RAM, 2
> > terabyte SSD).
> > 
> > Thank you.
> > 
> > -Carl Fink
> > 

Apt-install virt-manager - nice graphical virtual machine manager - and it
should pull in qemu and kvm

All the very best, as ever

Andy Cater
> > 
> > 
> > -- 
> > Mario.



Re: Virtualization under Bookworm

2023-08-26 Thread Carl Fink
Well, last time I looked (at least six or seven years ago) it was a 
weird maze of fiddling to get QEMU/KVM set up. Is it easier now?


On 8/26/23 14:53, Mario Marietto wrote:
For sure you can't miss qemu + kvm,they are the most powerful tools 
for virtualization. With qemu and kvm you can pass through to the 
guest OS even your gpu. With virtualbox or vmware you can't.


On Sat, Aug 26, 2023 at 8:40 PM James Bloom  wrote:

Carl:

I use VirtualBox on Debian 12, and I run virtual Windows 11 and
Linux machines with no issue. I also tried GNOME boxes and had no
direct problems, but I went back to using VirtualBox because it
was compatible with my cloud storage setup - I can save a
VirtualBox virtual machine file in the cloud server and access it
from my desktop and laptop without issue, whereas GNOME boxes
wouldn’t work if I did that - there were always boot errors. But
GNOME boxes otherwise seemed to work great.

James

Get Outlook for iOS <https://aka.ms/o0ukef>

*From:* Carl Fink 
*Sent:* Saturday, August 26, 2023 9:29:30 AM
*To:* debian-user@lists.debian.org 
*Subject:* Virtualization under Bookworm
Hi,

I have a project that I'd like to work on in a virtual machine
hosted on
my Bookworm system. In the old days (5-10 years ago) I used
VirtualBox,
just from inertia. I haven't really virtualized since then.

What's the current recommendation for someone who just wants to
create a
one-off VM to run Debian under Debian? As this is not my job or even
main hobby, ideally it should have setup at least as easy as
VirtualBox
was back in the day.

System is an ASUS ExpertCenter PN52 (Ryzen 7 6800, 32 GB of RAM, 2
terabyte SSD).

Thank you.

-Carl Fink



--
Mario.

Re: Virtualization under Bookworm

2023-08-26 Thread Oliver Wenston
Hey Carl,

I am currently using Virtual Box installed through their official website
instructions. The screen's top left quadrant has some flashing problems in
a Fedora 38 guest, but otherwise works fine. If anyone here knows why that
is happening, please let me know. It is a NUC using an the Intel iGPU, not
Nvidia nor AMD GPUs.

Best of luck,
Oliver

On Sat, Aug 26, 2023 at 2:25 PM Carl Fink  wrote:

> Hi,
>
> I have a project that I'd like to work on in a virtual machine hosted on
> my Bookworm system. In the old days (5-10 years ago) I used VirtualBox,
> just from inertia. I haven't really virtualized since then.
>
> What's the current recommendation for someone who just wants to create a
> one-off VM to run Debian under Debian? As this is not my job or even
> main hobby, ideally it should have setup at least as easy as VirtualBox
> was back in the day.
>
> System is an ASUS ExpertCenter PN52 (Ryzen 7 6800, 32 GB of RAM, 2
> terabyte SSD).
>
> Thank you.
>
> -Carl Fink
>
>


Re: Virtualization under Bookworm

2023-08-26 Thread Mario Marietto
For sure you can't miss qemu + kvm,they are the most powerful tools for
virtualization. With qemu and kvm you can pass through to the guest OS even
your gpu. With virtualbox or vmware you can't.

On Sat, Aug 26, 2023 at 8:40 PM James Bloom  wrote:

> Carl:
>
> I use VirtualBox on Debian 12, and I run virtual Windows 11 and Linux
> machines with no issue. I also tried GNOME boxes and had no direct
> problems, but I went back to using VirtualBox because it was compatible
> with my cloud storage setup - I can save a VirtualBox virtual machine file
> in the cloud server and access it from my desktop and laptop without issue,
> whereas GNOME boxes wouldn’t work if I did that - there were always boot
> errors. But GNOME boxes otherwise seemed to work great.
>
> James
>
> Get Outlook for iOS <https://aka.ms/o0ukef>
> --
> *From:* Carl Fink 
> *Sent:* Saturday, August 26, 2023 9:29:30 AM
> *To:* debian-user@lists.debian.org 
> *Subject:* Virtualization under Bookworm
>
> Hi,
>
> I have a project that I'd like to work on in a virtual machine hosted on
> my Bookworm system. In the old days (5-10 years ago) I used VirtualBox,
> just from inertia. I haven't really virtualized since then.
>
> What's the current recommendation for someone who just wants to create a
> one-off VM to run Debian under Debian? As this is not my job or even
> main hobby, ideally it should have setup at least as easy as VirtualBox
> was back in the day.
>
> System is an ASUS ExpertCenter PN52 (Ryzen 7 6800, 32 GB of RAM, 2
> terabyte SSD).
>
> Thank you.
>
> -Carl Fink
>
>

-- 
Mario.


Re: Virtualization under Bookworm

2023-08-26 Thread john doe

On 8/26/23 18:29, Carl Fink wrote:

What's the current recommendation for someone who just wants to create a
one-off VM to run Debian under Debian? As this is not my job or even
main hobby, ideally it should have setup at least as easy as VirtualBox
was back in the day.



I use Virsh and virt-manager when desired.

Your mileage may very!

--
John Doe



Re: Virtualization under Bookworm

2023-08-26 Thread James Bloom
Carl:

I use VirtualBox on Debian 12, and I run virtual Windows 11 and Linux machines 
with no issue. I also tried GNOME boxes and had no direct problems, but I went 
back to using VirtualBox because it was compatible with my cloud storage setup 
- I can save a VirtualBox virtual machine file in the cloud server and access 
it from my desktop and laptop without issue, whereas GNOME boxes wouldn’t work 
if I did that - there were always boot errors. But GNOME boxes otherwise seemed 
to work great.

James

Get Outlook for iOS<https://aka.ms/o0ukef>

From: Carl Fink 
Sent: Saturday, August 26, 2023 9:29:30 AM
To: debian-user@lists.debian.org 
Subject: Virtualization under Bookworm

Hi,

I have a project that I'd like to work on in a virtual machine hosted on
my Bookworm system. In the old days (5-10 years ago) I used VirtualBox,
just from inertia. I haven't really virtualized since then.

What's the current recommendation for someone who just wants to create a
one-off VM to run Debian under Debian? As this is not my job or even
main hobby, ideally it should have setup at least as easy as VirtualBox
was back in the day.

System is an ASUS ExpertCenter PN52 (Ryzen 7 6800, 32 GB of RAM, 2
terabyte SSD).

Thank you.

-Carl Fink



Virtualization under Bookworm

2023-08-26 Thread Carl Fink

Hi,

I have a project that I'd like to work on in a virtual machine hosted on 
my Bookworm system. In the old days (5-10 years ago) I used VirtualBox, 
just from inertia. I haven't really virtualized since then.


What's the current recommendation for someone who just wants to create a 
one-off VM to run Debian under Debian? As this is not my job or even 
main hobby, ideally it should have setup at least as easy as VirtualBox 
was back in the day.


System is an ASUS ExpertCenter PN52 (Ryzen 7 6800, 32 GB of RAM, 2 
terabyte SSD).


Thank you.

-Carl Fink



Re: Virtualization anomalies

2022-07-28 Thread paulf
On Thu, 28 Jul 2022 09:41:51 +1000
David  wrote:

> They're referring to the machine's hardware BIOS/UEFI configuration.
> The very first thing you can access when powering up the machine.
> Usually it offers: press some key to access some configuration menu.
> Where there's often a facility to enable/disable the CPU
> virtualisation feature.

Well, you were correct. I had to search around for it, but
virtualization was turned off in the BIOS. Thanks. 

Paul

-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster



Re: Virtualization anomalies

2022-07-27 Thread paulf
On Thu, 28 Jul 2022 09:41:51 +1000
David  wrote:

> On Thu, 28 Jul 2022 at 07:35,  wrote:
> > On Wed, 27 Jul 2022 23:17:33 +0200 Nicolas George 
> > wrote:
> 
> > > Have you checked if virtualization is disabled in the setup? IIRC
> > > many systems disable it by default because it is supposed to make
> > > rootkits more dangerous or something.
> >
> > Can you clarify "in the setup"?
> 
> They're referring to the machine's hardware BIOS/UEFI configuration.
> The very first thing you can access when powering up the machine.
> Usually it offers: press some key to access some configuration menu.
> Where there's often a facility to enable/disable the CPU
> virtualisation feature.
> 

Thanks for the clarification. I'll check.

Paul


-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster



Re: Virtualization anomalies

2022-07-27 Thread David
On Thu, 28 Jul 2022 at 07:35,  wrote:
> On Wed, 27 Jul 2022 23:17:33 +0200 Nicolas George  wrote:

> > Have you checked if virtualization is disabled in the setup? IIRC many
> > systems disable it by default because it is supposed to make rootkits
> > more dangerous or something.
>
> Can you clarify "in the setup"?

They're referring to the machine's hardware BIOS/UEFI configuration.
The very first thing you can access when powering up the machine.
Usually it offers: press some key to access some configuration menu.
Where there's often a facility to enable/disable the CPU virtualisation
feature.



Re: Virtualization anomalies

2022-07-27 Thread paulf
On Wed, 27 Jul 2022 23:17:33 +0200
Nicolas George  wrote:

> Have you checked if virtualization is disabled in the setup? IIRC many
> systems disable it by default because it is supposed to make rootkits
> more dangerous or something.

Can you clarify "in the setup"?

Paul

-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster



Re: Virtualization anomalies

2022-07-27 Thread Nicolas George
pa...@quillandmouse.com (12022-07-27):
> Folks:
> 
> I'm running an Intel Core i3, model 10100. According to Intel's spec
> sheet on their site, this CPU has VT-x (virtualization) support. From
> what I've read, this shows up in "lscpu" as the "vmx" flag. When I run
> lscpu on this chip, that flag doesn't show up. As a result, I can't run
> any of the virtualization options (virt-manager, etc.).
> 
> (As a point of reference, an older CPU I had in a different machine
> (6th gen i5) *did* show this flag when I ran lscpu.)
> 
> I'd like to upgrade the CPU to a model which does support
> virtualization. But I'm afraid I'll just end up with another chip which
> Intel says works with virtualization, and lscpu says doesn't.
> 
> Can anyone explain this discrepancy, or provide insights?

Have you checked if virtualization is disabled in the setup? IIRC many
systems disable it by default because it is supposed to make rootkits
more dangerous or something.

Regards,

-- 
  Nicolas George


signature.asc
Description: PGP signature


Virtualization anomalies

2022-07-27 Thread paulf
Folks:

I'm running an Intel Core i3, model 10100. According to Intel's spec
sheet on their site, this CPU has VT-x (virtualization) support. From
what I've read, this shows up in "lscpu" as the "vmx" flag. When I run
lscpu on this chip, that flag doesn't show up. As a result, I can't run
any of the virtualization options (virt-manager, etc.).

(As a point of reference, an older CPU I had in a different machine
(6th gen i5) *did* show this flag when I ran lscpu.)

I'd like to upgrade the CPU to a model which does support
virtualization. But I'm afraid I'll just end up with another chip which
Intel says works with virtualization, and lscpu says doesn't.

Can anyone explain this discrepancy, or provide insights?

Paul

-- 
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster



Re: Your choice of Virtualization Software

2018-11-04 Thread David Christensen

On 11/4/18 12:59 AM, Joel Wirāmu Pauling wrote:

Kvm QED. The ONLY reason to use virtualbox on linux is if you have a need
to have cross platform containers for VM's for say windows and osx.


I run VirtualBox on Windows, MacOS, and Debian.


David



Re: Your choice of Virtualization Software

2018-11-04 Thread Reco
Hi.

Please do not hijack the thread, start your own.

On Sun, Nov 04, 2018 at 03:32:25AM +, D&P Dimov wrote:
> I need to install and run Windows 10 as a virtual machine on the latest 
> Debian Stable (9.5). I would much, much rather use a free (as in freedom) 
> GPL-licensed software doe that. 
> 
> (I know, I see the irony too, of running the definition of proprietary 
> software but still insisting on GPL for the virtual machine software... But 
> it's better than dualbooting, as it'll allow me to use Windows even less this 
> way!).

QEMU. Your first and last choice for this. If something cannot be
launched in QEMU - it's not worth your time anyway.
Don't go with Virtualbox, it's an Oracle software. Not many people can
stomach *that* unless paid to do it.


> But I have very little experience installing and working with a virtual 
> machine (once installed Windz7 with VirtualBox) and have little support from 
> people around me (our "computer person" is great and willing to help, though 
> also has very little experience with this). 

These things are learnt fast.


> >From this Debian wiki 
> >(https://wiki.debian.org/SystemVirtualization#Open_Source_solutions), I am 
> >guessing Qemu or KVM, as they are recommended for laptops and desktops. 

It's the same thing. KVM is a variant of QEMU which uses CPU
acceleration for emulated processor instructions.


> In your experience, is any one of these two any better, i.e., easier to 
> install and get to work, and allows the virtual OS to run fast and without 
> freezing or misbehaving? Or is there another one not listed there you'd 
> recommend?

I suggest installing virt-manager, which is a GUI frontend to libvirt,
which can launch QEMU. While being RedHat and GNOME software at the same
time, it does pretty good job of hiding all those pesky implementation
details.

Reco



Re: Your choice of Virtualization Software

2018-11-03 Thread David Christensen

On 11/3/18 8:32 PM, D&P Dimov wrote:

I need to install and run Windows 10 as a virtual machine on the latest Debian 
Stable (9.5). I would much, much rather use a free (as in freedom) GPL-licensed 
software doe that.

(I know, I see the irony too, of running the definition of proprietary software 
but still insisting on GPL for the virtual machine software... But it's better 
than dualbooting, as it'll allow me to use Windows even less this way!).

But I have very little experience installing and working with a virtual machine (once 
installed Windz7 with VirtualBox) and have little support from people around me (our 
"computer person" is great and willing to help, though also has very little 
experience with this).

From this Debian wiki (https://wiki.debian.org/SystemVirtualization#Open_Source_solutions), I am guessing Qemu or KVM, as they are recommended for laptops and desktops. 


In your experience, is any one of these two any better, i.e., easier to install 
and get to work, and allows the virtual OS to run fast and without freezing or 
misbehaving? Or is there another one not listed there you'd recommend?
Thanks!


VirtualBox (mixed FOSS/ proprietary license) works well for my SOHO 
environment:


https://wiki.debian.org/VirtualBox


The GUI makes it easy to create, configure, and operate VM's.  I also 
run VM's headless via the CLI.  I think you can access a VM remote 
desktop with VNC (?).



Debian 9.5 Xfce on VirtualBox is responsive enough for typical office 
productivity and terminal work, but would not be a good choice 
multimedia or gaming.



My most recent installation notes follow.


David


2018-08-12 16:09:49 root@po ~
# echo 'deb http://download.virtualbox.org/virtualbox/debian stretch 
contrib' > /etc/apt/sources.list.d/virtualbox.list


2018-08-12 16:12:09 root@po ~
# wget https://www.virtualbox.org/download/oracle_vbox_2016.asc
..

2018-08-12 16:12:46 root@po ~
# apt-key add oracle_vbox_2016.asc
OK

2018-08-12 16:13:03 root@po ~
# apt-get update
...

2018-08-12 16:13:30 root@po ~
# apt-cache search virtualbox | grep virtualbox
virtualbox-5.0 - Oracle VM VirtualBox
virtualbox-5.1 - Oracle VM VirtualBox
virtualbox-5.2 - Oracle VM VirtualBox

2018-08-12 16:13:36 root@po ~
# apt-get install virtualbox-5.2
...



KVM virtualization with VMM/virt-manager and mouse lag and stutter

2016-10-05 Thread J Mo


This is one of those I-fixed-it-myself posts where I'm just sharing my 
solution for others, should they google it in the future.


I recently started learning about KVM virtualization. Naturally I 
stumbled across the VMM/virt-manager GTK tool, since that's pretty much 
the only good tool available at the moment (aqemu is promising but not 
good), so I started loading up some Linux live ISO images.


Immediately I had the problem where my mouse was lagging all over the 
place and the experience was horrible!


When I started my VMs manually from the command line with qemu, I 
noticed the mouse lag problem completely went away. Also, later, I 
noticed that the Fedora live ISO images did not have this problem.


VMM forces you to use Spice, even if you are running on the hypervisor 
itself. You have to use either VNC or Spice. You can't start a native 
qemu window like you can do by starting a qemu command manually.


The reason the Fedora Live images worked was because they have the 
spice-vdagent package already installed. The spice-vdagent creates a 
communications channel between the client/viewer host and the 
guest/client host so that mouse movement is smooth, copy-paste/clipboard 
functionality works, and a few other things.


Unfortunately, other than Fedora, none of the other Linux live images I 
tested have this package installed by default: Not Ubuntu, not Mint, not 
Debian, not KDE Neon. OpenSUSE installs it by default, but it's not 
really a live CD. These distros should all fix this if they want people 
to have a good experience when testing under KVM.


And, because these are Live CD images, it's not like I can easily 
install the package and logout/restart, since I have not configured a 
hard drive/permanent storage.


Fortunately, I found a hacky solution in VMM:  Add Hardware --> Input 
--> EvTouch USB Graphics Tablet


Adding a tablet device fixes many of the problems which I experienced 
with VMM, without installing the spice-vdagent on the guest OS.


After finding this solution myself, I also googled and found this post, 
which gives a similar solution to a slightly different problem:


https://serverfault.com/questions/457603/any-way-to-release-focus-on-a-kvm-guest-in-virt-manager-without-having-to-click

So if you use virt-manager and your mouse movement is horribly laggy, 
stuttery, and otherwise intolerable, install spice-vdagent or configure 
VMM to add a non-existent tablet device to the guest.




Re: qemu with KVM support compared to "professional" virtualization products from VMware or Oracle

2015-03-27 Thread Petter Adsen
On Fri, 27 Mar 2015 10:04:16 +0200
Martin T  wrote:

> Hi,
> 
> I need to virtualize few dozen virtual-machines for production
> environment under Debian host-machine. I like the KISS principle
> provided by qemu with KVM support where each utility has its own
> specific purpose. For example I set up the virtual switch with
> ip/brctl utility or use single qemu executable to crate
> virtual-machines. However, is qemu with KVM support as
> suitable(stability, reliability) for production environment as so to

I would say so. I'm running several kvm machines, and have never had
any problems with stability. As a simple (but quite sufficient)
interface I'd recommend virt-manager to create, clone and operate
virtual machines, I find it just as usable as VMware or Virtualbox.
There are other interfaces that simplify common tasks, but virt-manager
takes care of most of what I need to do.

Also, if there are bugs, I'd expect them to be fixed quickly, as a lot
of (big) organizations depend on kvm. Support for kvm/qemu is also
quite good, there are a lot of people with lots of experience with it
out there.

> say professional virtualization products from VMware or Oracle?

Do you mean "professional" or do you really mean "commercial"? I'd say
kvm meets professional standards.

You could just try it out with a few VM's, and see what you think. It
wouldn't cost you anything, except your time.

My VPS provider (DigitalOcean) relies on kvm for their day-to-day
business, as does many other big names in the industry, so you
shouldn't need to worry about it being inferior to VMware just because
it doesn't come with a pricy licence.

Petter

-- 
"I'm ionized"
"Are you sure?"
"I'm positive."


pgpCC_AxeyUn5.pgp
Description: OpenPGP digital signature


qemu with KVM support compared to "professional" virtualization products from VMware or Oracle

2015-03-27 Thread Martin T
Hi,

I need to virtualize few dozen virtual-machines for production
environment under Debian host-machine. I like the KISS principle
provided by qemu with KVM support where each utility has its own
specific purpose. For example I set up the virtual switch with
ip/brctl utility or use single qemu executable to crate
virtual-machines. However, is qemu with KVM support as
suitable(stability, reliability) for production environment as so to
say professional virtualization products from VMware or Oracle?


thanks,
Martin


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAJx5YvFeq3LCaDocztX5YgYjnficG7mEJp1w_yHo1=+3ex7...@mail.gmail.com



Re: need suggestion on Virtualization backup/DR site.

2014-09-13 Thread Bzzzz
On Sat, 13 Sep 2014 08:53:55 -0400
Rob Owens  wrote:

> There's a handy web interface.
> If the machine to be backed up isn't reachable, it tries again later (1
> hour by default).
> You can configure blackout periods, so no backups will take place
> during certain hours.
> You can override the blackout periods based on how old the latest
> backup is.
> There is an active email support list
> (backuppc-us...@lists.sourceforge.net).

To be clear, it is the archetype of mandatory programs you
completely forget once correctly configured ;-)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140913145754.1cf5ca6f@msi.defcon1



Re: need suggestion on Virtualization backup/DR site.

2014-09-13 Thread Rob Owens
On Fri, Sep 12, 2014 at 08:33:39PM +0200, B wrote:
> On Fri, 12 Sep 2014 22:57:57 +0500
> Muhammad Yousuf Khan  wrote:
> 
> > Thanks for the input i really appreciate that. but i have a confusion
> > to clear. if i use direct rsync and rsync with Backuppc what is the
> > difference?
> 
> First, backups are nightly compressed and same files are hardlinked,
> so keeping a looong history is not a problem at all (AFA you have
> enough free inodes; I's recommend XFS as the reception FS); 2nd,
> you can trigger another backup (or restore) whenever you want,
> 3rd if you have users, they can also trigger a backup/restore when
> needed from the http(s) backuppc interface, 4th as backups are
> presented as a tree which goes down to the file level, you can
> just B/R one file at a time if needed.
> 
More reasons to use backuppc:

There's a handy web interface.
If the machine to be backed up isn't reachable, it tries again later (1
hour by default).
You can configure blackout periods, so no backups will take place during
certain hours.
You can override the blackout periods based on how old the latest backup
is.
There is an active email support list (backuppc-us...@lists.sourceforge.net).

-Rob


signature.asc
Description: Digital signature


Re: need suggestion on Virtualization backup/DR site.

2014-09-12 Thread Jonathan Dowland
Don't replicate the VMs. Have separate VMs built using the same configuration.
Use a configuration management solution (e.g. puppet) to define the
configuration of your VMs. Replicate *data* instead.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140913063743.ga5...@bryant.redmars.org



Re: need suggestion on Virtualization backup/DR site.

2014-09-12 Thread Bzzzz
On Fri, 12 Sep 2014 22:57:57 +0500
Muhammad Yousuf Khan  wrote:

> Thanks for the input i really appreciate that. but i have a confusion
> to clear. if i use direct rsync and rsync with Backuppc what is the
> difference?

First, backups are nightly compressed and same files are hardlinked,
so keeping a looong history is not a problem at all (AFA you have
enough free inodes; I's recommend XFS as the reception FS); 2nd,
you can trigger another backup (or restore) whenever you want,
3rd if you have users, they can also trigger a backup/restore when
needed from the http(s) backuppc interface, 4th as backups are
presented as a tree which goes down to the file level, you can
just B/R one file at a time if needed.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140912203339.719d0c71@msi.defcon1



Re: need suggestion on Virtualization backup/DR site.

2014-09-12 Thread Muhammad Yousuf Khan
@B please ignore my first message i forgot to add the list.

Thanks for the input i really appreciate that. but i have a confusion to
clear. if i use direct rsync and rsync with Backuppc what is the difference?

actually i am asking because i and the software both use same utility then
what is that software can do that i can not. please throw some light on
this issue.
Thanks,

MYK

On Fri, Sep 12, 2014 at 7:08 PM, B  wrote:

> On Fri, 12 Sep 2014 18:58:48 +0500
> Muhammad Yousuf Khan  wrote:
>
> I would use backuppc through ssh with the rsync method;
> this way, your VM would be fully reconstructible, band
> width wouldn't be clobbered and backup(s) wouldn't take
> much place.
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmas...@lists.debian.org
> Archive: https://lists.debian.org/20140912160831.25246189@msi.defcon1
>
>


Re: need suggestion on Virtualization backup/DR site.

2014-09-12 Thread Bzzzz
On Fri, 12 Sep 2014 18:58:48 +0500
Muhammad Yousuf Khan  wrote:

I would use backuppc through ssh with the rsync method;
this way, your VM would be fully reconstructible, band
width wouldn't be clobbered and backup(s) wouldn't take
much place.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140912160831.25246189@msi.defcon1



need suggestion on Virtualization backup/DR site.

2014-09-12 Thread Muhammad Yousuf Khan
Dear All,

we are planning to rent a new server with RAID1 in the cloud and the
purpose of this server will be Qemu KVM virtualization. everything is fine
but the show stopper is Disaster recovery Site.

i think of 4 options and all of them are not upto my requirement and limits.

1st, Option was DRBD but splitbrain on 5Mb link will be a killer.

however, the thing come in my mind to sync only updates/Snapshots to DR
site the way ZFS and BTRFS does. so our second option become ZFS.

2nd option is ZFS and that is a very high in cost as Lots of RAM,SSDs are
involve for ARC1 and 2 so we drop that one.

3rd. option is Btrfs. as it is now Stable but still on back group level or
storage level lots of works still needs to be done. so it fails to gain my
confidence

4th, was Rsync. it can do the trick , it can also send only
updates/snapshots instead of big VMs but it corrupts the VM.

now my mind is empty and nothing is coming inside my mind. can you guys
please suggest anything that can be done to replicate the VMs b/w two
nodes. when both nodes are in different countries.

Thanks
Myk


Fwd: confusion on KVM virtualization (debian admin handbook)

2014-03-25 Thread Igor Cicimov
Sorry missed the list somehow.

On Tue, Mar 25, 2014 at 5:16 PM, Muhammad Yousuf Khan wrote:

> Thanks for sharing your thought.
>
> just learn from some where, that "creating disk with virt-install can only
> create raw on the other hand qcow2 first needs to be initiated as volume"
>
> Thanks,
>

That's not true. From the virt-install man page:

*format* Image format to be used if creating managed storage. For file
volumes, this can be 'raw', 'qcow2', 'vmdk', etc. See format types in <
http://libvirt.org/storage.html> for possible values. This is often mapped
to the *driver_type* value as well. With libvirt 0.8.3 and later, this
option should be specified if reusing and existing disk image, since
libvirt does not autodetect storage format as it is a potential security
issue. For example, if reusing an existing qcow2 image, you will want to
specify format=qcow2, otherwise the hypervisor may not be able to read your
disk image.
Example vm creation on my local station:
igorc@silverstone:~$ virt-install --connect qemu:///system -n ubuntu08 -r
512 --cpu=host --vcpus=1 --disk
path=/var/lib/libvirt/images/ubuntu08.img,size=7,sparse=false,format=qcow2,cache=writethrough,io=native,bus=virtio
--initrd-inject=preseed.cfg --extra-args="install auto=true
priority=critical netcfg/hostname=ubuntu08
initrd=/mnt/iso/install/initrd.gz preseed/file=preseed.cfg" --os-type linux
--os-variant ubuntuprecise --vnc --noautoconsole --accelerate
--network=bridge:virbr0,model=virtio --hvm --location /mnt/iso
Starting install...Retrieving file version.info...

 |  116 B 00:00
...  Retrieving file linux...

  | 9.9 MB 00:00 ...  Retrieving
file initrd.gz...

  |  35 MB 00:00 ...  Allocating
'virtinst-linux.F33Jaw'

  | 5.0 MB 00:00  Transferring
virtinst-linux.F33Jaw

| 5.0 MB 00:01  Allocating
'virtinst-initrd.gz.XsGiEW'

  |  18 MB 00:00  Transferring
virtinst-initrd.gz.XsGiEW

|  18 MB 00:05  Allocating 'ubuntu08.img'


 | 7.0 GB 00:00  Creating domain...

  |
 0 B 00:01  Domain installation still in progress. You can
reconnect to the console to complete the installation process.
igorc@silverstone:~$ qemu-img info /var/lib/libvirt/images/ubuntu08.img image:
/var/lib/libvirt/images/ubuntu08.imgfile format: qcow2virtual size: 7.0G
(7516192768 bytes)disk size: 136Kcluster_size: 65536
No problems at all. You can have problems and see "Format cannot be
specified for unmanaged storage." only if you try creating image outside
libvirt storage pool, and therefor it doesn't know how to create a qcow2
disk image. The storage pools are found/created from the VMM manager going
to Edit->Connection Details->Storage or via virsh console:
virsh pool-define-as --name my-pool --type dir --target /some/path/herevirsh
pool-start my-pool


Re: confusion on KVM virtualization (debian admin handbook)

2014-03-24 Thread Muhammad Yousuf Khan
Thanks for sharing your thought.

just learn from some where, that "creating disk with virt-install can only
create raw on the other hand qcow2 first needs to be initiated as volume"

Thanks,


On Mon, Mar 24, 2014 at 3:28 PM, Jonathan Dowland  wrote:

> On Mon, Mar 24, 2014 at 11:45:26AM +0500, Muhammad Yousuf Khan wrote:
> > Book teaches us to create volume first then assign it to vm with
> > Virt-install command however, we can also create image on runtime with
> > virt-install command. we do not need volume to be set before creating a
> VM.
> > so my question is what is the difference b/w the two methods.
> > if i create Volume first then assign or if i create image directly from
> > virt-installl command what are the pros and cons.
>
> I think it's mostly six of one and half a dozen of the other. If you are
> not using sparse volumes, disk creation can take quite a lot of time, so
> it might be logistically easier to batch the creation of a lot of
> volumes before you start installing VMs, especially if you need to
> re-run the install process a few times as you tweak parameters.
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmas...@lists.debian.org
> Archive: https://lists.debian.org/20140324102840.gb...@bryant.redmars.org
>
>


Re: confusion on KVM virtualization (debian admin handbook)

2014-03-24 Thread Jonathan Dowland
On Mon, Mar 24, 2014 at 11:45:26AM +0500, Muhammad Yousuf Khan wrote:
> Book teaches us to create volume first then assign it to vm with
> Virt-install command however, we can also create image on runtime with
> virt-install command. we do not need volume to be set before creating a VM.
> so my question is what is the difference b/w the two methods.
> if i create Volume first then assign or if i create image directly from
> virt-installl command what are the pros and cons.

I think it's mostly six of one and half a dozen of the other. If you are
not using sparse volumes, disk creation can take quite a lot of time, so
it might be logistically easier to batch the creation of a lot of
volumes before you start installing VMs, especially if you need to
re-run the install process a few times as you tweak parameters.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140324102840.gb...@bryant.redmars.org



confusion on KVM virtualization (debian admin handbook)

2014-03-23 Thread Muhammad Yousuf Khan
i have been going through Administration handbook and got confused in KVM
virtualization section.

Book teaches us to create volume first then assign it to vm with
Virt-install command however, we can also create image on runtime with
virt-install command. we do not need volume to be set before creating a VM.
so my question is what is the difference b/w the two methods.
if i create Volume first then assign or if i create image directly from
virt-installl command what are the pros and cons.

Thanks,

Myk


Re: Security question concerning jail or virtualization

2014-03-14 Thread Артур Истомин
On Fri, Mar 14, 2014 at 03:50:09AM +0100, Martin Braun wrote:
> Hi
> 
> I have recently experienced a server being "hacked" due to a security
> problem with a PHP application that made it possible for the "hacker" to
> gain a web shell.
> 
> Due to this experience I would like to know what the best way to limit such
> problems is, especially when hosting web servers for users who may or may
> not installed unsecure applications on the web server.
> 
> What does the big hosters do? What do they use?
> 
> The solution can't be too complecated to maintain and I would prefer each
> user being completely seperated from the main OS and from other users.
> 
> I have been thinking about running Debian inside FreeBSD Jails or "The
> Warden". I have also been thinking about using Xen and installing several
> Debians on Debian.

Nginx/Apache on OpenBSD runs in chroot. I think it is wise to see how
they doing that.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140314172905.GA9135@localhost



Re: Security question concerning jail or virtualization

2014-03-14 Thread Mr Queue
On Fri, 14 Mar 2014 03:50:09 +0100
Martin Braun  wrote:

> Hi
> 
> I have recently experienced a server being "hacked" due to a security
> problem with a PHP application that made it possible for the "hacker" to
> gain a web shell.
> 
> Due to this experience I would like to know what the best way to limit such
> problems is, especially when hosting web servers for users who may or may
> not installed unsecure applications on the web server.
> 
> What does the big hosters do? What do they use?
> 
> The solution can't be too complecated to maintain and I would prefer each
> user being completely seperated from the main OS and from other users.
> 
> I have been thinking about running Debian inside FreeBSD Jails or "The
> Warden". I have also been thinking about using Xen and installing several
> Debians on Debian.
> 
> What is the best (and if possible simplest) way to deal with this?
> 
> Kind regards

Run your application as a normal user and the shell's that they will keep 
getting until your developers patch your
application won't matter at all other pissing off the rest of the world with 
their spam/flood/whatever.

That's it for Debian in this thread. The rest is for some php coding list.

http://www.suphp.org/Home.html


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140314094837.7c3f3...@mrqueue.com



Re: Security question concerning jail or virtualization

2014-03-14 Thread shawn wilson
On Fri, Mar 14, 2014 at 4:30 AM, Scott Ferguson
 wrote:
> On 14/03/14 15:51, shawn wilson wrote:
>>
>> On Mar 14, 2014 12:13 AM, "Brad Alexander" > > wrote:
>>>
>>
>
> Due to this experience I would like to know what the best way to
>> limit such problems is, especially when hosting web servers for users
>> who may or may not installed unsecure applications on the web server.
>>>
>

> None of those methods are dependent on password access.

The initial attack isn't. Post exploit is. Again, I'd think there are
legal issues with auditing your clients' software making all of this
moot (besides my recommendation for a layer 7 firewall).

> Password security for the server (as distinct from user web
> applications) *should* be part of any webserver security. Debian
> provides dnsiff and john the ripper which are used in industry best
> practice password auditing.
> By default Debian implements md5 and shadow which are the 'basis' of
> best practice password security (auditing are other practices add to
> those things).
>

For most use cases, see hashcat - not jtr. Also default hash on debian
is ssha per the $6$ in shadow - not md5. See:
http://en.wikipedia.org/wiki/Crypt_%28C%29
It should also be noted - don't use md5 - ever. If you're dealing with
web apps, use bcrypt or scrypt.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAH_OBiem65D-_gMJFsztCCGVqz+WcoDE8TptMzS==cyizp7...@mail.gmail.com



Re: Security question concerning jail or virtualization

2014-03-14 Thread Scott Ferguson
On 14/03/14 15:51, shawn wilson wrote:
> 
> On Mar 14, 2014 12:13 AM, "Brad Alexander"  > wrote:
>>
> 

 Due to this experience I would like to know what the best way to
> limit such problems is, especially when hosting web servers for users
> who may or may not installed unsecure applications on the web server.
>>

Web server and system security is a big subject.
Regardless of the use case a systematic approach is the best, easiest,
and only practically implementable approach. Starting with the Debian
security guide. I've included a link at the bottom of this post.

>>

> 
> As for passwords,

The OP has stated that the server was cracked, not the users application
(though that is likely to have happened). That's consistent with web
shell attack.

It's an injection type attack that runs OS commands[*1]. The web shell
is able to execute a command/commands either as:-
; a result of insecure application or system (php) settings allowing an
uploaded script to be executed directly (file upload)
; unsanitized data - executed php code appended to a link or to file
upload URI

None of those methods are dependent on password access.

The attack can gain elevated permission due to insecure file permissions
or poor passwords. Password insecurity is not the means of ingress (it
is important though - but don't rely on it).

Password security for the server (as distinct from user web
applications) *should* be part of any webserver security. Debian
provides dnsiff and john the ripper which are used in industry best
practice password auditing.
By default Debian implements md5 and shadow which are the 'basis' of
best practice password security (auditing are other practices add to
those things).



As Brad has pointed out, in business we employ specialized personnel to
deal with security (or aspects of it). Please note my point about
security requiring a systemic approach. Paint by numbers and/or ad hoc
"security" is not security.



Kind regards

Useful references:-
https://www.debian.org/doc/manuals/securing-debian-howto/index.en.html
http://httpd.apache.org/docs/current/misc/security_tips.html
https://www.owasp.org/index.php/PHP_Security_Cheat_Sheet
https://phpbestpractices.org/
http://www.developphp.com/view.php?tid=772
http://demongin.org/blog/829/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/5322be29.7010...@gmail.com



Re: Security question concerning jail or virtualization

2014-03-13 Thread shawn wilson
On Mar 14, 2014 12:13 AM, "Brad Alexander"  wrote:
>

>>>
>>> Due to this experience I would like to know what the best way to limit
such problems is, especially when hosting web servers for users who may or
may not installed unsecure applications on the web server.
>
>
> Auditing your security is probably your best bet. As I said above, maybe
some web app testing tools, run scans against your server regularly with
Nessus or OpenVAS, plus the security best practices...Good password hygene,
bastion hosts (only one type of app on a machine), turning off/uninstalling
unneeded apps, especially those with a network presence, etc.

I'm not sure how your customers may feel about you scanning their apps.
What do you do if you find something they don't want to fix? It will
probably even cause legal issues.

If you do want to do scans, might want to start with someone like nikto
(it's free) and see what you find. Idk how well Nessus does web scans
either - idk that's their core business (I think that would be AD and
compliance). Burp is the tool most use for this. Though, give a baby your
car keys and if you're lucky nothing will happen - if you're not...

A better solution for sites you host and don't own might be a WAF.
Something free like mod_security (some used to sell a rule subscription -
can't remember who). Or a PaloAlto box.

As for passwords, among other things, the company I work for is kinda known
for password auditing so, take it off list if you want a contact for that
type of thing. If you don't own the data though...


Re: Security question concerning jail or virtualization

2014-03-13 Thread Brad Alexander
On Thu, Mar 13, 2014 at 11:39 PM, shawn wilson  wrote:

> Well Linux has LXC which is supposed to be equivalent to jails (also see
> docker). But use whatever suits you.
>
As are the older-school OpenVZ and Linux VServer technologies.

> Idk what's current for breaking out of VMs is. It might be good to pay
> attention to who is using the most entropy and make sure you don't run out.
> Most VMs use processor VT to isolate things (I don't think any 'jail' does
> this).
>
The main difference between the jail/container technology and "real" VMs is
that containers share the host node's kernel, while a full virtualization
involves representing, to some degree, everything about a physical machine,
e.g. BIOS, kernel, etc.

> I think most providers use OpenStack (a suite of technologies). YMMV
> On Mar 13, 2014 11:06 PM, "Martin Braun"  wrote:
>
>> Hi
>>
>> I have recently experienced a server being "hacked" due to a security
>> problem with a PHP application that made it possible for the "hacker" to
>> gain a web shell.
>>
>
It sounds like perhaps you should investigate a web application test suite.
Whether this was running on a physical machine, a VM, or a container, it
would not have changed the result of your php app getting hacked.


> Due to this experience I would like to know what the best way to limit
>> such problems is, especially when hosting web servers for users who may or
>> may not installed unsecure applications on the web server.
>>
>
Auditing your security is probably your best bet. As I said above, maybe
some web app testing tools, run scans against your server regularly with
Nessus or OpenVAS, plus the security best practices...Good password hygene,
bastion hosts (only one type of app on a machine), turning off/uninstalling
unneeded apps, especially those with a network presence, etc.


> What does the big hosters do? What do they use?
>>
>
They hire staffs of sysadmins and security folks. :)


> The solution can't be too complecated to maintain and I would prefer each
>> user being completely seperated from the main OS and from other users.
>>
>
Depends on what you are trying to protect and what you are trying to defend
against.

--b


Re: Security question concerning jail or virtualization

2014-03-13 Thread Scott Ferguson
On 14/03/14 13:50, Martin Braun wrote:
> Hi
> 
> I have recently experienced a server being "hacked" due to a security
> problem with a PHP application that made it possible for the "hacker" to
> gain a web shell.

Has that problem been rectified?
If not then virtualization won't solve the problems, at best it'll just
restrict the types of problems - you can still find the content hijacked
and traffic redirected.

> 
> Due to this experience I would like to know what the best way to limit
> such problems is, especially when hosting web servers for users who may
> or may not installed unsecure applications on the web server.

If user applications can access to OS then you have a permissions
problem - the php application flaw was just the vector.

> 
> What does the big hosters do? What do they use?

A range of measures.

> 
> The solution can't be too complecated to maintain and I would prefer
> each user being completely seperated from the main OS and from other users.

Your preference *is* how "the big hosters" do things.

> 
> I have been thinking about running Debian inside FreeBSD Jails or "The
> Warden". I have also been thinking about using Xen and installing
> several Debians on Debian.
> 
> What is the best (and if possible simplest) way to deal with this?

The "simplest" way to do things is to install a very basic Debian stable
the use the Virtualmin script to install the rest of the Debian packages
needed for the server. Setup accounts for each user, their applications
will then run in $user/public_html.
> 
> Kind regards

It's a trivial attack[*1]) and bad php alone usually is not the cause.

Check php.ini and ensure you haven't accidentally enabled dangerous
configurations e.g. shell_exec, passthru, system etc.  If you *do* have
a compelling reason for enabling those functions consider whitelisting
and input filters. But don't rely on those alone - bad php is often the
cause (don't trust unknown php e.g. user submitted extensions and
plugins for CMS - even when you trust the intentions of the writer
that's no reason to trust the code). Make sure data is sanitized and if
you have a compelling reason to enable OS commands with php consider
wrapping them in java.

If you have allow_url_fopen enabled make sure you have a compelling
reason for it. I've never found one, by my experience far from covers
all use cases.

Ensure that open_basedir is enabled in php.ini

*Double and triple check your webuser permissions*

Test your security:-
As the web user (change /var/www to suit your situation e.g.
$user/public_html)
$
Search_Dir="/var/www";Problems="passthru|shell_exec|system|phpinfo|base64_decode|popen|exec|proc_open|pcntl_exec|python_eval|fopen|fclose|readfile";
grep -RPl --include=*.{php,txt} "($Problems)" $Search_dir

Install and run ClamAV and don't forget that perl may be where the
malware is based.

When you are certain that you system is clean and secure, backup the
static files to a remote location and md5 or pgp them so you can check
them against you web server at a later point to *prove* your system
hasn't been breached.
Then install an IDS.


[*1]can be as simple as weak file permissions or a dodgy cms allowing an
attacker to upload the following


Hope that helps - it's a big question, and so is the answer.
Web applications is a nebulous description, like the information about
your server - so a detailed response is beyond the limits of a post (and
my available time).
I'm glad you asked though instead of making the mistake of looking for a
"silver bullet" solution on a random web page. It's not just irritating
for you when you server gets cracked - it affects all of us.


Kind regards

P.S. Don't forget to check Google Webmaster in case your site/s have
been reported so that you can request the necessary changes.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/532281a2.9070...@gmail.com



Re: Security question concerning jail or virtualization

2014-03-13 Thread shawn wilson
Well Linux has LXC which is supposed to be equivalent to jails (also see
docker). But use whatever suits you.

Idk what's current for breaking out of VMs is. It might be good to pay
attention to who is using the most entropy and make sure you don't run out.
Most VMs use processor VT to isolate things (I don't think any 'jail' does
this).

I think most providers use OpenStack (a suite of technologies). YMMV
On Mar 13, 2014 11:06 PM, "Martin Braun"  wrote:

> Hi
>
> I have recently experienced a server being "hacked" due to a security
> problem with a PHP application that made it possible for the "hacker" to
> gain a web shell.
>
> Due to this experience I would like to know what the best way to limit
> such problems is, especially when hosting web servers for users who may or
> may not installed unsecure applications on the web server.
>
> What does the big hosters do? What do they use?
>
> The solution can't be too complecated to maintain and I would prefer each
> user being completely seperated from the main OS and from other users.
>
> I have been thinking about running Debian inside FreeBSD Jails or "The
> Warden". I have also been thinking about using Xen and installing several
> Debians on Debian.
>
> What is the best (and if possible simplest) way to deal with this?
>
> Kind regards
>


Security question concerning jail or virtualization

2014-03-13 Thread Martin Braun
Hi

I have recently experienced a server being "hacked" due to a security
problem with a PHP application that made it possible for the "hacker" to
gain a web shell.

Due to this experience I would like to know what the best way to limit such
problems is, especially when hosting web servers for users who may or may
not installed unsecure applications on the web server.

What does the big hosters do? What do they use?

The solution can't be too complecated to maintain and I would prefer each
user being completely seperated from the main OS and from other users.

I have been thinking about running Debian inside FreeBSD Jails or "The
Warden". I have also been thinking about using Xen and installing several
Debians on Debian.

What is the best (and if possible simplest) way to deal with this?

Kind regards


Re: Wheezy: Virtualization package recommendations

2012-06-28 Thread Dominique Dumont
On Saturday 23 June 2012 21:51:22 green wrote:
> T Elcor wrote at 2012-06-23 11:19 -0600:
> > I'm looking into running Windows XP as guest on a Debian Wheezy box. The
> > hardware is fairly recent (should support virtualization) and Windows XP
> > will be used only occasionally, not a production environment, so the goal
> > is to have an easy virtualization setup that minimally impacts the host
> > OS (Debian).
> > 
> > Any ideas? Thanks
> 
> virtualbox for a full GUI or kvm for full functionality via CLI

You can setup KVM VM through virt-manager and libvirt. 

HTH

-- 
https://github.com/dod38fr/config-model/ -o- http://search.cpan.org/~ddumont/
http://ddumont.wordpress.com/-o-   irc: dod at irc.debian.org


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201206281041.15007@debian.org



Re: Wheezy: Virtualization package recommendations

2012-06-24 Thread Ralf Mardorf
On Sun, 2012-06-24 at 10:51 +, Camaleón wrote:
> VirtualBox is usually a good option. Easy to get, easy to install and 
> easy to use.

+1 Install it and use it, no reading is needed. OTOH hardware such as
e.g. USB can become an issue. I experienced timing issues with USB, even
with some Oracle special extensions.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340537175.2153.127.camel@precise



Re: Wheezy: Virtualization package recommendations

2012-06-24 Thread Camaleón
On Sat, 23 Jun 2012 10:19:11 -0700, T Elcor wrote:

> I'm looking into running Windows XP as guest on a Debian Wheezy box. The
> hardware is fairly recent (should support virtualization) and Windows XP
> will be used only occasionally, not a production environment, so the
> goal is to have an easy virtualization setup that minimally impacts the
> host OS (Debian).
> 
> Any ideas? Thanks

VirtualBox is usually a good option. Easy to get, easy to install and 
easy to use.

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/js6rfv$qu9$6...@dough.gmane.org



Re: Wheezy: Virtualization package recommendations

2012-06-24 Thread Richard Hector
On 24/06/12 20:21, Bartek Krawczyk wrote:
> On Saturday, 23 June 2012, green  > wrote:
>> virtualbox for a full GUI or kvm for full functionality via CLI
> 
> VirtualBox can also be run in CLI.

... And you can also get a GUI (via a VNC viewer) with KVM :-)

Richard


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4fe6dde3.2020...@walnut.gen.nz



Re: Wheezy: Virtualization package recommendations

2012-06-24 Thread Bartek Krawczyk
On Saturday, 23 June 2012, green  wrote:
> virtualbox for a full GUI or kvm for full functionality via CLI

VirtualBox can also be run in CLI.

-- 
Bartek Krawczyk
network and system administrator


Re: Was and is: Re: Wheezy: Virtualization package recommendations

2012-06-24 Thread Mika Suomalainen
24.06.2012 10:11, Mika Suomalainen kirjoitti:
> 23.06.2012 23:21, Ralf Mardorf kirjoitti:
>> > On Sat, 2012-06-23 at 22:19 +0200, Ralf Mardorf wrote:
>> >>> > > Sorry,  chimed in, I'm curious if editing the
>> >>> > > subject, will keep the spam away
 >> > 
 >> > It does!
>> > No it doesn't :(, there just is a little bit more delay.
> Don't mention him if you want to keep him away.

Edit: that doesn't work.

PS. Sorry for return receipt asking. I am on computer, which I haven't
used in a long time so some Icedove settings are weird.

-- 
[Mika Suomalainen](https://mkaysi.github.com/) ||

NOTICE! I am on mobile broadband with very limited time, so I cannot
read emails very much.
The best time to contact me is probably weekends when I have better
connectivity with good luck.

[gpg --keyserver pool.sks-keyservers.net --recv-keys
4DB53CFE82A46728](http://mkaysi.github.com/PGP/key.txt) ||
[Why do I sign my
emails?](http://mkaysi.github.com/PGP/WhyDoISignEmails.html) ||
[Do you have problems verifying my PGP/MIME signature on mailing
list?](http://mkaysi.github.com/PGP/PGP-MIME.html) ||
[Please don't send
HTML.](http://mkaysi.github.com/articles/complaining/HTML.html) ||
[This signature](https://gist.github.com/2643070#file_icedove.md)

[Please reply below this
line](http://mkaysi.github.com/articles/complaining/topposting.html)




0x82A46728.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


Re: Was and is: Re: Wheezy: Virtualization package recommendations

2012-06-24 Thread Mika Suomalainen
23.06.2012 23:21, Ralf Mardorf kirjoitti:
> On Sat, 2012-06-23 at 22:19 +0200, Ralf Mardorf wrote:
>>> > > Sorry,  chimed in, I'm curious if editing the
>>> > > subject, will keep the spam away
>> > 
>> > It does!
> No it doesn't :(, there just is a little bit more delay.

Don't mention him if you want to keep him away.

-- 
[Mika Suomalainen](https://mkaysi.github.com/) ||

NOTICE! I am on mobile broadband with very limited time, so I cannot
read emails very much.
The best time to contact me is probably weekends when I have better
connectivity with good luck.

[gpg --keyserver pool.sks-keyservers.net --recv-keys
4DB53CFE82A46728](http://mkaysi.github.com/PGP/key.txt) ||
[Why do I sign my
emails?](http://mkaysi.github.com/PGP/WhyDoISignEmails.html) ||
[Do you have problems verifying my PGP/MIME signature on mailing
list?](http://mkaysi.github.com/PGP/PGP-MIME.html) ||
[Please don't send
HTML.](http://mkaysi.github.com/articles/complaining/HTML.html) ||
[This signature](https://gist.github.com/2643070#file_icedove.md)

[Please reply below this
line](http://mkaysi.github.com/articles/complaining/topposting.html)




0x82A46728.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


Re: Wheezy: Virtualization package recommendations

2012-06-23 Thread green
T Elcor wrote at 2012-06-23 18:09 -0600:
> --- On Sat, 6/23/12, green  wrote:
> > virtualbox for a full GUI or kvm for full functionality 
> > via CLI
> 
> I wonder if kvm will work without enabling virtualization option in the 
> BIOS. Guest OS performance isn't a priority for me (while host OS is), so I 
> don't care about hardware acceleration.

kvm will work without virtualization, either automatically or using instead 
the qemu executable.  If your hardware supports virtualization, I recommend 
enabling it: without it, kvm will use more CPU time, lower both host and 
guest performance (as I understand it).


signature.asc
Description: Digital signature


Re: Wheezy: Virtualization package recommendations

2012-06-23 Thread T Elcor
--- On Sat, 6/23/12, green  wrote:

> virtualbox for a full GUI or kvm for full functionality 
> via CLI

I wonder if kvm will work without enabling virtualization option in the BIOS. 
Guest OS performance isn't a priority for me (while host OS is), so I don't 
care about hardware acceleration.

Thanks


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/1340496598.60889.yahoomailclas...@web121901.mail.ne1.yahoo.com



Re: Was and is: Re: Wheezy: Virtualization package recommendations

2012-06-23 Thread Ralf Mardorf
On Sat, 2012-06-23 at 22:19 +0200, Ralf Mardorf wrote:
> > Sorry, joe1assis...@gmail.com chimed in, I'm curious if editing the
> > subject, will keep the spam away
> 
> It does!

No it doesn't :(, there just is a little bit more delay.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340482886.2980.138.camel@precise



Re: Was and is: Re: Wheezy: Virtualization package recommendations

2012-06-23 Thread Ralf Mardorf

> Sorry, joe1assis...@gmail.com chimed in, I'm curious if editing the
> subject, will keep the spam away

It does!


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340482746.2980.136.camel@precise



Was and is: Re: Wheezy: Virtualization package recommendations

2012-06-23 Thread Ralf Mardorf
On Sat, 2012-06-23 at 22:13 +0200, Ralf Mardorf wrote:
> On Sat, 2012-06-23 at 13:51 -0600, green wrote:
> > T Elcor wrote at 2012-06-23 11:19 -0600:
> > > I'm looking into running Windows XP as guest on a Debian Wheezy box. The 
> > > hardware is fairly recent (should support virtualization) and Windows XP 
> > > will be used only occasionally, not a production environment, so the goal 
> > > is to have an easy virtualization setup that minimally impacts the host 
> > > OS 
> > > (Debian).
> > > 
> > > Any ideas? Thanks
> > 
> > virtualbox for a full GUI or kvm for full functionality via CLI
> 
> I'm running VBox on Arch with XP SP2 as guest, to be able to use iTunes
> (more or less). VBox suffers from the fact, that USB is a very, very,
> very, weak point.

Sorry, joe1assis...@gmail.com chimed in, I'm curious if editing the
subject, will keep the spam away.




-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340482651.2980.134.camel@precise



Re: Wheezy: Virtualization package recommendations

2012-06-23 Thread Ralf Mardorf
On Sat, 2012-06-23 at 13:51 -0600, green wrote:
> T Elcor wrote at 2012-06-23 11:19 -0600:
> > I'm looking into running Windows XP as guest on a Debian Wheezy box. The 
> > hardware is fairly recent (should support virtualization) and Windows XP 
> > will be used only occasionally, not a production environment, so the goal 
> > is to have an easy virtualization setup that minimally impacts the host OS 
> > (Debian).
> > 
> > Any ideas? Thanks
> 
> virtualbox for a full GUI or kvm for full functionality via CLI

I'm running VBox on Arch with XP SP2 as guest, to be able to use iTunes
(more or less). VBox suffers from the fact, that USB is a very, very,
very, weak point.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340482385.2980.132.camel@precise



Re: Wheezy: Virtualization package recommendations

2012-06-23 Thread green
T Elcor wrote at 2012-06-23 11:19 -0600:
> I'm looking into running Windows XP as guest on a Debian Wheezy box. The 
> hardware is fairly recent (should support virtualization) and Windows XP 
> will be used only occasionally, not a production environment, so the goal 
> is to have an easy virtualization setup that minimally impacts the host OS 
> (Debian).
> 
> Any ideas? Thanks

virtualbox for a full GUI or kvm for full functionality via CLI


signature.asc
Description: Digital signature


Wheezy: Virtualization package recommendations

2012-06-23 Thread T Elcor
Hi,

I'm looking into running Windows XP as guest on a Debian Wheezy box. The 
hardware is fairly recent (should support virtualization) and Windows XP will 
be used only occasionally, not a production environment, so the goal is to have 
an easy virtualization setup that minimally impacts the host OS (Debian). 

Any ideas? Thanks


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/1340471951.6841.yahoomailclas...@web121905.mail.ne1.yahoo.com



Re: LXC Container based Virtualization on Debian Squeeze HowTo

2011-08-03 Thread Siju George
On Wed, Aug 3, 2011 at 8:57 PM, Camaleón  wrote:
>
> Have you considered in adding this useful HowTo into Debian wiki?
>
> http://wiki.debian.org/SystemVirtualization
>

Never Knew Such a Wiki Existed. Thanks for pointing out. Will Do :-)

--Siju


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAMdYbQUU=1k_z7eya_csqmmyno6cdx8jjq8vbhbptdd59zo...@mail.gmail.com



Re: LXC Container based Virtualization on Debian Squeeze HowTo

2011-08-03 Thread Camaleón
On Wed, 03 Aug 2011 12:17:36 +0530, Siju George wrote:

> Thought This will benefit those who are new to LXC Container based
> Virtualization.

(...)

Have you considered in adding this useful HowTo into Debian wiki?

http://wiki.debian.org/SystemVirtualization

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/pan.2011.08.03.15.27...@gmail.com



LXC Container based Virtualization on Debian Squeeze HowTo

2011-08-02 Thread Siju George
Thought This will benefit those who are new to LXC Container based
Virtualization.

http://en.wikipedia.org/wiki/Lxc
http://lxc.sourceforge.net/

=
LXC - Container Based Virtualization
=

1)Installation of  LXC on Squeeze
---
root@vmsrv:~# aptitude install lxc
The following NEW packages will be installed:
  libcap2-bin{a} lxc
0 packages upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 164 kB of archives. After unpacking 901 kB will be used.
Do you want to continue? [Y/n/?] y
Get:1 http://ftp.ca.debian.org/debian/ squeeze/main libcap2-bin
amd64 1:2.19-3 [23.6 kB]
Get:2 http://ftp.ca.debian.org/debian/ squeeze/main lxc amd64
0.7.2-1 [141 kB]
Fetched 164 kB in 4s (36.9 kB/s)
Selecting previously deselected package libcap2-bin.
(Reading database ... 48686 files and directories currently installed.)
Unpacking libcap2-bin (from .../libcap2-bin_1%3a2.19-3_amd64.deb) ...
Selecting previously deselected package lxc.
Unpacking lxc (from .../archives/lxc_0.7.2-1_amd64.deb) ...
Processing triggers for man-db ...
Setting up libcap2-bin (1:2.19-3) ...
Setting up lxc (0.7.2-1) ...
lxc init script disabled; edit /etc/default/lxc.

root@vmsrv:~# uname -a
Linux vmsrv 2.6.32-5-amd64 #1 SMP Sat Oct 30 14:18:21 UTC 2010
x86_64 GNU/Linux


 2)   Check configuration.
---
root@vmsrv:~# lxc-checkconfig
Kernel config /proc/config.gz not found, looking in other places...
Found kernel config file /boot/config-2.6.32-5-amd64
--- Namespaces ---
Namespaces: enabled
Utsname namespace: enabled
Ipc namespace: enabled
Pid namespace: enabled
User namespace: enabled
Network namespace: enabled
Multiple /dev/pts instances: enabled

--- Control groups ---
Cgroup: enabled
Cgroup namespace: enabled
Cgroup device: enabled
Cgroup sched: enabled
Cgroup cpu account: enabled
Cgroup memory controller: missing
Cgroup cpuset: enabled

--- Misc ---
Veth pair device: enabled
Macvlan: enabled
Vlan: enabled
File capabilities: enabled

Note : Before booting a new kernel, you can check its configuration
usage : CONFIG=/path/to/config /usr/bin/lxc-checkconfig
-

3)Add a cgroup file system in fstab ( cgroup /lxc/cgroup cgroup
defaults 0 0 )
-
root@vmsrv:~# lvcreate -n lxc -L 20G vg0
  Logical volume "lxc" created
root@vmsrv:/# cd /
root@vmsrv:/# mkdir lxc
root@vmsrv:/# lvdisplay lxc
  Volume group "lxc" not found
  Skipping volume group lxc
root@vmsrv:/# lvdisplay /dev/vg0/lxc
  --- Logical volume ---
  LV Name/dev/vg0/lxc
  VG Namevg0
  LV UUIDA8bKi2-LqTk-BrOG-KSPb-J5SL-fnLe-l9PAms
  LV Write Accessread/write
  LV Status  available
  # open 0
  LV Size20.00 GiB
  Current LE 5120
  Segments   1
  Allocation inherit
  Read ahead sectors auto
  - currently set to 256
  Block device   253:5
root@vmsrv:/# mkfs.jfs /dev/vg0/lxc
mkfs.jfs version 1.1.12, 24-Aug-2007
Warning!  All data on device /dev/vg0/lxc will be lost!

Continue? (Y/N) y
   \

Format completed successfully.

20971520 kilobytes total disk space.

root@vmsrv:/# mount
/dev/md1 on / type ext3 (rw,errors=remount-ro)
tmpfs on /lib/init/rw type tmpfs (rw,nosuid,mode=0755)
proc on /proc type proc (rw,noexec,nosuid,nodev)
sysfs on /sys type sysfs (rw,noexec,nosuid,nodev)
udev on /dev type tmpfs (rw,mode=0755)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)
devpts on /dev/pts type devpts (rw,noexec,nosuid,gid=5,mode=620)
/dev/md0 on /boot type ext3 (rw)
/dev/mapper/vg0-home on /home type jfs (rw)
/dev/mapper/vg0-tmp on /tmp type jfs (rw)
/dev/mapper/vg0-usr on /usr type jfs (rw)
/dev/mapper/vg0-var on /var type jfs (rw)
/dev/mapper/vg0-vms on /vms type jfs (rw)
fusectl on /sys/fs/fuse/connections type fusectl (rw)
root@vmsrv:/# mkdir /lxc/cgroup

root@vmsrv:/# vi /etc/fstab
root@vmsrv:/# mount -a

root@vmsrv:/# mount
/dev/md1 on / type ext3 (rw,errors=remount-ro)
tmpfs on /lib/init/rw type tmpfs (rw,nosuid,mode=0755)
proc on /proc type proc (rw,noexec,nosuid,nodev)
sysfs on /sys type sysfs (rw,noexec,nosuid,nodev)
 

Re: More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-08-01 Thread Scott Ferguson

On 01/08/11 09:06, Christoph Pilka wrote:

Hi, there's lot of work I've done to document all the stuff, so I'd
really appreciate if anyone here has the time to translate the howtos.
The idea with the copy back sounds fair. But please don't forget to
refer the original work within your translation ;-)

Cheerio,
Chris


Would you mind if they were copied to the official Debian wiki - if I
translated the ones that are only in German you could then copy them
back (if that sounds like a fair trade).





Thank you Chrisoph - I probably won't get a chance to start until this 
weekend, and I'll need to check with debian-www first. The link to a 
business that "might" be a problem. If not possible to include a link 
your site I shall contact you.


Cheers

P.S. The Asterisk guide is great!

--
“As long as one person lives in darkness then it seems to be a 
responsibility to tell other people.”

~ Bill Hicks
This how-to collection is dedicated to a variety of topics related to the free 
operating system Debian GNU / Linux. Since I use Debian, both for my own 
projects, as well as for customers, including a variety of servers, I decided 
to discuss a selection of frequently recurring themes and issues, and to 
publish in the form of how-tos and tutorials.

As Debian GNU / Linux does an excellent job on both servers and desktops, I 
have divided this collection of how-tos accordingly.

All tutorials are designed for easy setup, and to provide the required 
knowledge that the system administrator should have in order to understand the 
processes involved. Even if all the howtos have been repeatedly validated, 
there may be some confusing information or mistakes. This is to be expected 
with such a complex collection of howtos and tutorials, so please add comments 
on the relevant pages ;-)

Currently the following howtos and tutorials are available:
Debian GNU / Linux on the server
Basic infrastructure

Installing from a USB stick (Debian 5.0)
First steps after installation (Debian 5.0)
DHCP server (Debian 5.0)
BIND 9 DNS server (Debian 5.0)
Samba File Server (Debian 5.0)
Debian system change from German to English (Debian 5.0)
Automatic monitoring of services via daemontools (Debian 6.0) 

Web

Lighttpd Web Server + PHP5 + Perl (Debian 5.0)
MySQL + PHP5 in Lighttpd (Debian 5.0)
Hedge Lighttpd Web server using SSL (Debian 5.0)
Nginx + PHP5 (Debian 6.0) 

Databases

PostgreSQL database server (Debian 5.0)
PostgreSQL + PostGIS (Debian 6.0)
Redis (Debian 6.0)
Reset the MySQL administrator password (all distributions) 

CMS

Plone 3 Unified Installer via (Debian 5.0)
Plone 3 via buildout (Debian 5.0)
Plone 4 via buildout (Debian 6.0)
Drupal Multisite & Nginx (Debian 5.0) 

Virtualisation

Virtualisation using Xen 3.2 (Debian 5.0)
USB hard disk in Xen domU guest use (all platforms)
VMware Workstation 6.5.1 (Debian 5.0) 

Backup

Backup using bacula (Debian 5.0)
BWayne as a Web interface for bacula (Debian 5.0)
Bacuview (Debian 5.0) as a web-based monitoring solution Bacula
Backup via rsync (Debian 5.0) 

E-mail & Groupware

Postfix & Dovecot mail server (Debian 5.0)
Open-Xchange Server (Debian 5.0)
Zarafa and fetchmail (Debian 5.0) 

VoIP

Asterisk 1.6 (Debian 5.0)
Community Asterisk 1.4 & 2.3 (Debian 5.0) 

Version control systems (VCS)

Git (Debian 5.0)
Central Git repository via gitosis (Debian 5.0) 

Security

Key-based SSH authentication (Debian 5.0)
Free CAcert SSL certificates (Debian 5.0) 

ERP / CRM and other enterprise applications

ADempiere Business Suite (Debian 5.0)
Lx-office ERP / CRM (Debian 5.0)
Tryton ERP (Debian 5.0)
Kimai time recording (Debian 5.0)
+ Zarafa Z-Push synchronization (Debian 5.0) 

E-Commerce

Magento Community Edition (Debian 5.0)
OXID eShop Community Edition (Debian 5.0) 

Multimedia

Mediatomb UPnP A / V media server (Debian 5.0)
Fuppes UPnP A / V media server (Debian 5.0)
Coherence DLNA UPnP media server (Debian 5.0)
XBMC Media Center (Debian 5.0) 

Univention Corporate Server UCS

Univention UCS 2.4 as Domain Controller Master
Kerio Connect 7 Groupware (UCS Univention 2.4)
Zimbra groupware 6 (UCS Univention 2.4 / Xen)
Zarafa groupware 6.3 (UCS Univention 2.2)
Univention UCS + Kolab Server and Nokia Symbian S60 synchronization (UCS 
Univention 2.4)
Univention UCS + Kolab sync via Z-Push (UCS Univention 2.3) 

Other server services

Proftpd server (Debian 6.0)
AFP file server (Debian 5.0)
TFTP server (Debian 5.0)
Ejabberd jabber server (Debian 5.0)
Gisgraphy server (Debian 6.0)
i-doit CMDB (Debian 5.0) 

Alternative hardware

Debian 5.0 on Linksys NSLU2 ( short version ) 


Debian GNU / Linux on the desktop / notebook
Desktop Environments and Window Managers

XFCE 4.6 (Debian 5.0)
Awesome window manager (Debian 5.0)
Xmonad (Debian 5.0)
St

Re: More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-07-31 Thread Christoph Pilka
Hi, there's lot of work I've done to document all the stuff, so I'd
really appreciate if anyone here has the time to translate the howtos.
The idea with the copy back sounds fair. But please don't forget to
refer the original work within your translation ;-)

Cheerio,
Chris

> Would you mind if they were copied to the official Debian wiki - if I
> translated the ones that are only in German you could then copy them
> back (if that sounds like a fair trade).


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/0cb88f3e-5238-478a-ab63-5609b3126...@j15g2000yqf.googlegroups.com



Re: More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-07-28 Thread Scott Ferguson
On 26/07/11 18:18, Christoph Pilka wrote:
> Hi folks,
> 
> in the last months I've published more than 150 Debian howtos which

> Cheerio,
> Chris
> 
> 

As noted by others (and yourself), many of the works are not in English...

I appreciate that you'd like credit your your work, and possibly create
more visibility for your site - I'd like the howtos in English, and as
much Debian documentation as possible on the Debian site.

Would you mind if they were copied to the official Debian wiki - if I
translated the ones that are only in German you could then copy them
back (if that sounds like a fair trade).

Cheers

-- 
“I never got along with my dad.
Kids used to come up to me and say, "My dad can beat up your dad."
I'd say, "Yeah? When?"”
~ Bill Hicks


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4e32214f.8090...@gmail.com



Re: More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-07-28 Thread Johannes Obermueller

On 07/26/2011 08:18 AM, Christoph Pilka wrote:

Hi folks,

in the last months I've published more than 150 Debian howtos which
are online now at  http://www.asconix.com/howtos/debian

The howtos are covering the following topics so far:

* Debian as infrastructure (BIND, Samba ...)
* Webservers (Apache2, Nginx, Lighttpd ...)
* Databases (MySQL, PostgreSQL, CouchDB, Redis, ...)
* CMS's (Plone, Drupal, ...)
* Virtualization (Xen, VMware ESX ...)
* Backup (Bacula, rsync ...)
* E-Mail&  Groupware (Postfix, Dovecot, OpenXchange, Zarafa ...)
* VoIP (Asterisk, Gemeinschaft ...)
* E-Commerce (Magento, OXID VirtueMart ...)
* Media (XBMC, MediaTomb, Coherence, Fuppes ...)
* Desktop Environments&  Window Managers (XFCE, Awesome, XMonad,
StumpWM ...)
* Development (Ruby on Rails, Java, Lua ...)

... and so much more ;-) Few of the howtos are translated, the non-
translated are self-explanatory (I hope so ;-)). And if anyone of you
has time and fun to work on this documentation project, please let me
know. I've some further drafts in my pipeline for the next few weeks
(e.g. Hadoop&  Cassandra, Dropbox clone, High Availability etc.). So
stay tuned and please leave comments at the bottom of the howtos.

Cheerio,
Chris


I really like the idea of a howto collection, but I would like it even 
more if it were available under something.debian.org
btw where would be the appropriate place for such howtos in the debian 
infrastructure? wiki? ..?


cheers


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4e318d2c.9010...@gmx.at



Re: More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-07-28 Thread Wayne Topa

On 07/26/2011 04:18 AM, Christoph Pilka wrote:

Hi folks,

in the last months I've published more than 150 Debian howtos which
are online now at  http://www.asconix.com/howtos/debian

The howtos are covering the following topics so far:

* Debian as infrastructure (BIND, Samba ...)
* Webservers (Apache2, Nginx, Lighttpd ...)
* Databases (MySQL, PostgreSQL, CouchDB, Redis, ...)
* CMS's (Plone, Drupal, ...)
* Virtualization (Xen, VMware ESX ...)
* Backup (Bacula, rsync ...)
* E-Mail&  Groupware (Postfix, Dovecot, OpenXchange, Zarafa ...)
* VoIP (Asterisk, Gemeinschaft ...)
* E-Commerce (Magento, OXID VirtueMart ...)
* Media (XBMC, MediaTomb, Coherence, Fuppes ...)
* Desktop Environments&  Window Managers (XFCE, Awesome, XMonad,
StumpWM ...)
* Development (Ruby on Rails, Java, Lua ...)

... and so much more ;-) Few of the howtos are translated, the non-
translated are self-explanatory (I hope so ;-)). And if anyone of you
has time and fun to work on this documentation project, please let me
know. I've some further drafts in my pipeline for the next few weeks
(e.g. Hadoop&  Cassandra, Dropbox clone, High Availability etc.). So
stay tuned and please leave comments at the bottom of the howtos.

Cheerio,
Chris




Thanks Chris.  The Google Translator was able to get me a few if your 
HowTo's and they are very hrlpful.


Tschuss

Wayne


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4e318625.8090...@gmail.com



Re: More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-07-28 Thread chris
+1 german here too

On Thu, Jul 28, 2011 at 10:22 AM, Hugo Vanwoerkom wrote:

> Christoph Pilka wrote:
>
>> Hi folks,
>>
>> in the last months I've published more than 150 Debian howtos which
>> are online now at  
>> http://www.asconix.com/howtos/**debian
>>
>>
> They seem to be all in German even after selecting the UK flag.
>
>
>
>
> --
> To UNSUBSCRIBE, email to 
> debian-user-REQUEST@lists.**debian.orgwith
>  a subject of "unsubscribe". Trouble? Contact
> listmas...@lists.debian.org
> Archive: 
> http://lists.debian.org/**j0rrai$7ak$1...@dough.gmane.org
>
>


Re: More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-07-28 Thread Hugo Vanwoerkom

Christoph Pilka wrote:

Hi folks,

in the last months I've published more than 150 Debian howtos which
are online now at  http://www.asconix.com/howtos/debian



They seem to be all in German even after selecting the UK flag.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/j0rrai$7ak$1...@dough.gmane.org



Re: More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-07-26 Thread Stephen Powell
On Tue, 26 Jul 2011 04:18:44 -0400 (EDT), Christoph Pilka wrote:
> 
> in the last months I've published more than 150 Debian howtos which
> are online now at ...

Looks promising, Christoph.  But it appears to be all in German,
even when I click on the UK flag.  After all, this is the English
list (debian-user).  And I don't like advertising on Debian sites,
even unofficial ones.  After all, Debian is a non-profit organization.
(That's why its URL ends in ".org" instead of ".com").

-- 
  .''`. Stephen Powell
 : :'  :
 `. `'`
   `-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/1845668316.896997.1311679777190.javamail.r...@md01.wow.synacor.com



More than 150 up-to-date Debian howtos & tutorials online (server, virtualization, etc)

2011-07-26 Thread Christoph Pilka
Hi folks,

in the last months I've published more than 150 Debian howtos which
are online now at  http://www.asconix.com/howtos/debian

The howtos are covering the following topics so far:

* Debian as infrastructure (BIND, Samba ...)
* Webservers (Apache2, Nginx, Lighttpd ...)
* Databases (MySQL, PostgreSQL, CouchDB, Redis, ...)
* CMS's (Plone, Drupal, ...)
* Virtualization (Xen, VMware ESX ...)
* Backup (Bacula, rsync ...)
* E-Mail & Groupware (Postfix, Dovecot, OpenXchange, Zarafa ...)
* VoIP (Asterisk, Gemeinschaft ...)
* E-Commerce (Magento, OXID VirtueMart ...)
* Media (XBMC, MediaTomb, Coherence, Fuppes ...)
* Desktop Environments & Window Managers (XFCE, Awesome, XMonad,
StumpWM ...)
* Development (Ruby on Rails, Java, Lua ...)

... and so much more ;-) Few of the howtos are translated, the non-
translated are self-explanatory (I hope so ;-)). And if anyone of you
has time and fun to work on this documentation project, please let me
know. I've some further drafts in my pipeline for the next few weeks
(e.g. Hadoop & Cassandra, Dropbox clone, High Availability etc.). So
stay tuned and please leave comments at the bottom of the howtos.

Cheerio,
Chris


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/a46d666a-66a3-455c-a8ea-84614c99e...@y24g2000yqb.googlegroups.com



Re: kvm virtualization, consistent guest backup

2010-08-17 Thread Martin Kraus
On Tue, Aug 17, 2010 at 03:49:05PM +0200, Glennie Vignarajah wrote:
> > well my question was about how to do it without guest shutdown.
> 
> I am not aware of any software for doing this (ie backingup VM online with 
> appplication level consistency).
> 
> In order to minimize the downtime, you may try to save the state of the VM, 
> do 
> your LVM snapshot and restore the state. Have a look at virsh man page for 
> more details.
> But I *don't* think is method will  guarantee application/DB consistency!

Data consistency is a problem that has to be solved at the application level,
but what I need is a filesystem consistency. Snapshotting filesystem from host
mounted in the guest will leave it a mess. I need to do what lvm in the host
does, which is to tell the filesystem to get synced a frozen into a clean
state and then it probably is possible to make an lvm snapshot from the host
and get a consistent filesystem. I can synchronize database before the fs
freeze.

I know that the kernel can do that but I don't know how to force it from
userspace. lvm snapshot does it automaticaly.

Of course there might be other problems I'm unaware of. I think that online
backups is something that has to work for example in HA environment. You can
hardly provide HA but keep shutting down clusters for consistent backups. What
would otherwise be the point?

>From what I've heard, vmware is capable of backing up running guests so there
has to be a way. 

mk


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100817142138.GZ15196@/bin/hostname



Re: kvm virtualization, consistent guest backup

2010-08-17 Thread Glennie Vignarajah
Le 17/08/2010 vers 13:27, dans le message intitulé "Re: kvm virtualization, 
consistent guest backup", Martin Kraus(Martin Kraus ) a 
écrit:


Hi,

> well my question was about how to do it without guest shutdown.

I am not aware of any software for doing this (ie backingup VM online with 
appplication level consistency).

In order to minimize the downtime, you may try to save the state of the VM, do 
your LVM snapshot and restore the state. Have a look at virsh man page for 
more details.
But I *don't* think is method will  guarantee application/DB consistency!
Cheers,
-- 
http://www.glennie.fr
All progress is based upon a universal innate desire on the part of every 
organism to live beyond its income.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201008171549.05964.glen...@glennie.fr



Re: kvm virtualization, consistent guest backup

2010-08-17 Thread Martin Kraus
On Tue, Aug 17, 2010 at 10:07:22AM +0200, Glennie Vignarajah wrote:
>   - Every month(or very term), the FS containing virtual machine' images 
> is 
> backed up. Of course, the virtual machines are shutdown during the this 
> backup!.  To shudown virtual hosts from a prebackup script, you can use 
> virsh 
> ...

well my question was about how to do it without guest shutdown. when I shut
them down it's just a matter of doing an lvm snapshot and rsync the difference
from it to a remote machine. 

mk


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100817112743.GY15196@/bin/hostname



Re: kvm virtualization, consistent guest backup

2010-08-17 Thread Glennie Vignarajah
Le 15/08/2010 vers 19:48, dans le message intitulé "Re: kvm virtualization, 
consistent guest backup", Martin Kraus(Martin Kraus ) a 
écrit:


Hello,


> The problem isn't where to backup but how. the problem is to get consistent
> filesystem, consisten data in the filesystem and who know what other
> problems. what I was surprised about is that there is really no
> documentation or usable howto besides how to backup your desktop or small
> bussiness server.

This is a smilar problem for backups used for a disaster recovery procedure.



I use the following policy:

- Apply defined backup policies to every virtual hosts as they were 
*physical* *hosts*. Id est: incremental backup from monday to friday and full 
backup on weekends.

- The same policy is  applied to the physical host containing 
virtualhosts, but the FS containing virtualhost images are excluded.

- Every month(or very term), the FS containing virtual machine' images 
is 
backed up. Of course, the virtual machines are shutdown during the this 
backup!.To shudown virtual hosts from a prebackup script, you can use 
virsh 
or using directly kvm monitor. Have look at 
http://kerneltrap.org/mailarchive/linux-kvm/2010/1/26/6257297/thread. I've 
posted my shutdown script are there is also a simple script for shutting down 
VM using directly KVM/Qemu's socket.

Of course, you can you use FS snaphosts or KVM snapshosts, but I think 
this is very diffcult to validate FS consitency. 


And do not forget to *validate* your backups during your tests!

HTH,

-- 
http://www.glennie.fr
All progress is based upon a universal innate desire on the part of every 
organism to live beyond its income.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201008171007.23276.glen...@glennie.fr



Re: kvm virtualization, consistent guest backup

2010-08-15 Thread Martin Kraus
On Sun, Aug 15, 2010 at 03:50:28PM +, T o n g wrote:
> On Sun, 15 Aug 2010 16:00:26 +0200, Martin Kraus wrote:
> 
> > Is there a
> > way to make consistent backups of the guest without shutting them down?
> > The major problem I see is that there's no way to freeze a filesystem
> > inside a guest to make an lvm snapshot from the host.
> 
> Have you considered making live backups from inside the guest on to USB 
> HDDs since kvm supports them just fine?

The problem isn't where to backup but how. the problem is to get consistent
filesystem, consisten data in the filesystem and who know what other problems.
what I was surprised about is that there is really no documentation or usable
howto besides how to backup your desktop or small bussiness server. 

What I need is to backup several virtual hosts with 20 or so guests with as
little downtime as possible. Simplest way so far is to shutdown the guest,
make a snapshot and start it again and then backup data from that snapshot. 

I would like to find out if there is something more usable than that. If linux
gets used in enterprise environments it has to be able to backup itself
without turning off the guest but I see several problems with that and I can't
find any answers to them.

mk


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100815174849.GF15196@/bin/hostname



kvm virtualization, consistent guest backup

2010-08-15 Thread Martin Kraus
Hello. I have kvm guests running from lvm partitions on the host. Is there a
way to make consistent backups of the guest without shutting them down? 
The major problem I see is that there's no way to freeze a filesystem inside a
guest to make an lvm snapshot from the host. 

Does anyone have any (positive) experience with this setup?

thanks
mk


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100815140026.GD15196@/bin/hostname



Re: LVM snapshots are not backups (was: Re: Virtualization - what do You recommend?)

2010-02-04 Thread Andrew Malcolmson
I believe the point of the LVM Snapshot is to make an unchanging
version of your LV that can be backed up without risk of changes
occurring to the volume during the backup process.  You still have to
do the actual backup as usual.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: LVM snapshots are not backups (was: Re: Virtualization - what do You recommend?)

2010-02-04 Thread Jon Dowland
On Tue, Feb 02, 2010 at 09:32:17AM -0600, Boyd Stephen Smith Jr. wrote:
> In <20100202135559.ga5...@ra.ncl.ac.uk>, Jon Dowland wrote:
 
> You backups should be protection against at least: (a) user error, (b) normal 
> hardware failure, and (c) disaster.

I find the website  a
useful/entertaining checklist to work against when it comes
to architecting a backup solution.

(I *think* the product it is supposed to be advertising is
long dead)


signature.asc
Description: Digital signature


LVM snapshots are not backups (was: Re: Virtualization - what do You recommend?)

2010-02-02 Thread Boyd Stephen Smith Jr.
In <20100202135559.ga5...@ra.ncl.ac.uk>, Jon Dowland wrote:
>On Tue, Feb 02, 2010 at 12:19:49PM +0100, Rafał Radecki
>wrote:
>> I plan to install Windows 2008 as a guest. I want to use
>> something like LVM snapshots for backups.
>
>Just to pick up on this point, I would suggest that LVM on
>its own is not an adequate backup solution.

Agreed.

>Used to have a
>non-moving target for some other backup system, fine, 

Yes, it is a convenient way to "quiesce" the file system so that you get a 
consistent view of it throughout the whole of the backup process.

>but
>you definitely want to have a backup system which stores
>your data somewhere other than the disks in your
>production server.

You backups should be protection against at least: (a) user error, (b) normal 
hardware failure, and (c) disaster.

user error: "I deleted something important, can you get it back"
normal hardware failure: "Disk #7 needed to be replaced soon, er, now.  SMART 
just failed it."
disaster: "The building the server was in burned down / flooded"

Snapshots really only cover (a).  Normal RAID really only covers (b).  
Layering the two still doesn't address (c).
-- 
Boyd Stephen Smith Jr.   ,= ,-_-. =.
b...@iguanasuicide.net   ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.net/\_/


signature.asc
Description: This is a digitally signed message part.


Re: Virtualization - what do You recommend?

2010-02-02 Thread Boyd Stephen Smith Jr.
In , Rafał 
Radecki wrote:
>I plan to use virtualization in my production environment. I plan to use one
>of the following options:
>- KVM;

[snip: Software that is not in Debian.]

I recommend the one that is on-topic for the list.
-- 
Boyd Stephen Smith Jr.   ,= ,-_-. =.
b...@iguanasuicide.net   ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.net/\_/


signature.asc
Description: This is a digitally signed message part.


  1   2   >