Chroot login environment for each login users

Recently, I have written an article about how to make a chroot login environment for each user in the diskspace-saving way. It is for Kansai Debian meeting
, and I'm going to give a presentation based on the article there on Feburary 26th.

The article is written in Japanese. Its title is "Building a multi-user environment with autofs and pam_chroot".
Another effort is needed to translated it into English. If anyone wants it, please give me a comment. :-)

Comments

Some adjustment to run some daemon services within LXC container

I built and am running a mail server, using dovecot for IMAP4 server and Power DNS (pdns) for DNS authoritative server, and memcached for back-end service for some mail filter. I also use LXC for staging environment to test my mail server, but running those services is not straight forward. My understanding is that it is because some security features of systemd using Linux kernel namespace function conflict with the use of namespace in LXC container. So, if you want to run memcached, dovecot, and pdns via systemd within LXC container, you have to disable some security features of systemd by configuration. My additional configuration to systemd is as follows: root@myhost:/# cat /etc/systemd/system/memcached.service.d/99-ns.conf [Service] ProtectSystem = no ProtectHome = no PrivateDevices = no PrivateTmp = no cat /etc/systemd/system/dovecot.service.d/99-ns.conf [Service] ProtectSystem = no PrivateDevices = no PrivateTmp = no root@myhost:/# grep -v '#' /etc/systemd/system/pdns.s...

Xen on Squeeze failed to start up the X server with an Intel graphics controller

I recently tried to set up Xen on my Squeeze box, with intel 945GM graphics controller. I followed the instruction on Xen - Debian Wiki . I installed the Xen hypervisor, kernel, xen-tools and other stuff, then created a domU image of Ubuntu natty. After that, I rebooted the system. But when X server was about to be launched, the screen became black out, both keyboard and mouse don't work anymore. I reread the article on the wiki, and figured out the Xorg driver for Intel graphics controller is suspicious. So, I changed the Xorg driver 'intel' to 'fbdev' wrting /etc/X11/xorg.conf , and rebooted. This workaround works out! The drawback of the workaround is, 'intel' driver specific features, including DRI and XvMC, are disabled.

Configuring Network Manager for PPPoE connection

When I'm home, I use fiber-optic line with a dedicated old small router (YAMAHA RT107e) for access to the Internet. But I recently became anxious about the router. If it fails, how can I survive until I get another one? So, I tried to connect my Debian desktop PC to the fiber-optic line without the router. The PC have to talk to the other side of the line with PPPoE but I did not know how. In my PC, the Network Manager manages network configuration. So, I had to configure the Network Manager to utilize the pppoe like : nmcli connection add ifname eth0 connection.type pppoe username USERNAME password PASSWORD

An engineer's life around Kyoto

Search This Blog