Figuring stuff out

Overview

The create script

#!/bin/bash

if [ "$1" = "" ] ; then
        echo "usage: $0 "
        exit
elif [ ! -f "$1"  ] ; then
        echo "Could not open $1"
        exit
fi

config="$1"
. $config

echo "This script only works when ran on a CentOS system for the moment"
echo -n "Type YES if you want to create $SYSVOL and $SWAPVOL: "
read resp
if [ ! "$resp" = "YES" ] ; then
        exit
fi

set -x

lvcreate --size $SYSVOLSIZE --name $SYSVOL ${VG}
lvcreate --size $SWAPVOLSIZE --name $SWAPVOL ${VG}
mkfs.ext3 /dev/${VG}/$SYSVOL
mkswap /dev/${VG}/$SWAPVOL

mkdir /mnt/server
mount /dev/${VG}/$SYSVOL /mnt/server
mkdir -p /mnt/server/dev /mnt/server/etc /mnt/server/proc /mnt/server/var/lock/rpm /mnt/server/var/lib/rpm /mnt/server/var/log
MAKEDEV -d /mnt/server/dev -x random
MAKEDEV -d /mnt/server/dev -x console
MAKEDEV -d /mnt/server/dev -x zero
MAKEDEV -d /mnt/server/dev -x null
mount -t proc none /mnt/server/proc
wget $CENTOSRPM
rpm --initdb --root=/mnt/server
rpm -ivh --root=/mnt/server --nodeps centos-release*.rpm
#yum groupinstall Core --installroot=/mnt/server
#yum groupinstall Core --installroot=/mnt/server
yum groupinstall $CENTOSGROUPS --installroot=/mnt/server --disableplugin=protectbase --disableplugin=fastestmirror
cp -a base/* /mnt/server
cd /mnt/server
vi etc/fstab etc/resolv.conf etc/sysconfig/network etc/sysconfig/network-scripts/ifcfg-eth0 etc/hosts

Config file

• By default the install is minimal.


• mirror can be set to something local


• volume group can be set per dom0 as needed


• choose memory size etc...

VG=vg0
SYSVOL=www1-root
SWAPVOL=www1-swap
SYSVOLSIZE=3G
SWAPVOLSIZE=1G
MEMORY=512
VCPUS=1
CENTOSRPM="http://mirror.centos.org/centos/5.4/os/x86_64/CentOS/centos-release-5-4.el5.centos.1.x86_64.rpm"
CENTOSGROUPS="Core"
KERNEL="/var/lib/xen/boot/vmlinuz-2.6.18-164.el5xen.img"

Sample xen config

kernel = "/var/lib/xen/boot/vmlinuz-2.6.18-164.el5xen"
ramdisk = "/var/lib/xen/boot/initrd-2.6.18-164.el5xen.img"
memory = 512
vcpus = 1
name = "www1"
vif = [ '' ]
disk = ['phy:vg0/www1-root,sda1,w', 'phy:vg0/www1-swap,sda2,w']

root = "/dev/sda1"
extra = "fastboot"

on_poweroff = 'destroy'
on_reboot = 'restart'
on_crash = 'restart'

# posted by Taylor @ 10:28 PM 0 comments

    yum install -y gcc  wget zlib-devel perl make xauth

pushd /tmp
   wget http://openssl.org/source/openssl-0.9.8o.tar.gz

tar zxvf openssl-*
   cd openssl-*
    ./config --prefix=/opt/depot/`basename $(pwd)` --openssldir=/opt/depot/`basename $(pwd)`
   make
   make install
   pushd /opt/depot
   ln -s openssl* openssl
   popd

    wget ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-5.5p1.tar.gz

tar zxvf openssh*
   cd openssh-*
   ./configure --prefix=/opt/depot/`basename $(pwd)` --with-ssl-dir=/opt/depot/openssl
   make
   make install
   mkdir -p /opt/depot/openssh/var/run
   pushd /opt/depot
   ln -s openssh* openssh

   KEYGEN=/opt/depot/openssh/bin/ssh-keygen
   SSHD=/opt/depot/openssh/sbin/sshd
   RSA1_KEY=/opt/depot/openssh/etc/ssh_host_key
   RSA_KEY=/opt/depot/openssh/etc/ssh_host_rsa_key
   DSA_KEY=/opt/depot/openssh/etc/ssh_host_dsa_key
   PID_FILE=/opt/depot/openssh/var/run/sshd.pid

    Subsystem       sftp    internal-sftp

Match Group sftponly
        ChrootDirectory /home/%u
        ForceCommand internal-sftp
        AllowTcpForwarding no

    service sshd restart

    groupadd sftponly
   chown root:root /srv
   chmod 755 /srv

     useradd  -g sftponly -d /srv/user1  -s /bin/false user1

# posted by Taylor @ 10:15 PM 0 comments

Labels: iphone update pwnage quickpwn jailbreak

# posted by ixx @ 12:30 AM 1 comments

Labels: asterisk, voicexml, voip, vxml

# posted by ixx @ 7:12 AM 0 comments

1. chroot-ssh by itself
   
2. chroot-ssh + normal openssh
   
3. default openssh using modified sftp-server (no environment required)
   

1. change normal sshd (/etc/ssh/sshd_config) to listen to just the current interfaces.
   
2. create a new interface and IP address for chroot ssh
   
3. download and build chrootssh
   

#!/bin/sh
if [ "$1" = "" ] ; then
CHROOT_DIR=/chroot
else
CHROOT_DIR="$1"
fi
REQUIRED_CHROOT_FILES="  /bin/cp \
  /bin/ls \
  /bin/mkdir \
  /bin/mv \
  /bin/rm \
  /bin/rmdir \
  /lib/libnss_files.so.2 \
  /lib/ld-linux.so.2 \
  /lib/libtermcap.so.2"

# Create CHROOT_DIR
[ ! -d $CHROOT_DIR ] && mkdir $CHROOT_DIR
cd $CHROOT_DIR

# Copy REQUIRED_CHROOT_FILES and shared library dependencies
# to chroot environment

for FILE in $REQUIRED_CHROOT_FILES
do
DIR=`dirname $FILE | cut -c2-`
[ ! -d $DIR ] && mkdir -p $DIR
cp $FILE `echo $FILE | cut -c2-`
for SHARED_LIBRARY in `ldd $FILE | awk '{print $3}'`
do
DIR=`dirname $SHARED_LIBRARY | cut -c2-`
[ ! -d $DIR ] && mkdir -p $DIR
[ ! -s "`echo $SHARED_LIBRARY | cut -c2-`" ] && cp $SHARED_LIBRARY `echo $SHARED_LIBRARY | cut -c2-`
done
done

# Create device files
mkdir $CHROOT_DIR/dev
mknod $CHROOT_DIR/dev/null c 1 3
mknod $CHROOT_DIR/dev/zero c 1 5

# Create chroot /etc/passwd placeholder
mkdir $CHROOT_DIR/etc
touch $CHROOT_DIR/etc/passwd

Labels: chroot, scp, security, sftp, ssh, unix

# posted by ixx @ 2:59 AM 0 comments

class CreateRides < limit =""> 40
     t.column :comment, :string
   end
 end

 def self.down
   drop_table :rides
 end
end

<h2><%= @ride.name %></h2>

<p>
   <br />
   Trip Dist: <%= @ride.trip_distance %><br />
   Trip Time: <%= @ride.trip_time_t.to_s %>(<%= @ride.trip_time %>)<br />
   Avg Speed: <%= @ride.avg_speed %><br />
   Max Speed: <%= @ride.max_speed %><br />
   Riders: <%= @ride.riders %><br />
   Comments:
   <blockquote>
       <%= @ride.comment %>
   </blockquote>

   <hr noshade />

   <%=link_to "List",  :action => "list" %>
   <%= link_to "Edit", :action => "edit", :id => @ride.id  %>
   <%= link_to "Delete", { :action => "destroy", :id => @ride.id} ,
                         :confirm => "Are you sure?", :method => "post" %>
</p>

 def view
   @ride = Ride.find(params["id"])
 end

Labels: rails, ror, ruby, tutorial

# posted by ixx @ 10:11 AM 0 comments