I built and am running a mail server, using dovecot for IMAP4 server and Power DNS (pdns) for DNS authoritative server, and memcached for back-end service for some mail filter.
I also use LXC for staging environment to test my mail server, but running those services is not straight forward.
My understanding is that it is because some security features of systemd using Linux kernel namespace function conflict with the use of namespace in LXC container.
So, if you want to run memcached, dovecot, and pdns via systemd within LXC container, you have to disable some security features of systemd by configuration.
My additional configuration to systemd is as follows:
root@myhost:/# cat /etc/systemd/system/memcached.service.d/99-ns.conf
[Service]
ProtectSystem = no
ProtectHome = no
PrivateDevices = no
PrivateTmp = no
cat /etc/systemd/system/dovecot.service.d/99-ns.conf
[Service]
ProtectSystem = no
PrivateDevices = no
PrivateTmp = no
root@myhost:/# grep -v '#' /etc/systemd/system/pdns.service.d/99-ns.conf
[Service]
ProtectSystem = no
ProtectHome = no
PrivateDevices = no
PrivateTmp = no
ProtectControlGroups=false
ProtectKernelLogs=false
ProtectKernelModules=false
ProtectKernelTunables=false
I recently tried to set up Xen on my Squeeze box, with intel 945GM graphics controller. I followed the instruction on Xen - Debian Wiki . I installed the Xen hypervisor, kernel, xen-tools and other stuff, then created a domU image of Ubuntu natty. After that, I rebooted the system. But when X server was about to be launched, the screen became black out, both keyboard and mouse don't work anymore. I reread the article on the wiki, and figured out the Xorg driver for Intel graphics controller is suspicious. So, I changed the Xorg driver 'intel' to 'fbdev' wrting /etc/X11/xorg.conf , and rebooted. This workaround works out! The drawback of the workaround is, 'intel' driver specific features, including DRI and XvMC, are disabled.
Comments
Post a Comment