We run several virtual machine host servers on a network with multiple VLANs. The virtual machines are members of different VLANs, but are not themselves aware of the VLAN. This is how we did it.
You are currently browsing articles tagged ubuntu.
Tags: hardy, kvm, linux, networking, ubuntu, virtualbox
The latest virt-manager package in Ubuntu karmic is broken. We use virt-manager to manage KVM/QEMU virtual machines over an ssh tunnel. This worked fine in hardy and jaunty. But it is partially broken in karmic.
One of the awesome features of the last several Ubuntu releases is support for ecryptfs, an encrypted filesystem. At Talia we depend heavily on GPG, OTR, SSH keys and other forms of encryption and secure identification. Loss of those keys and other confidential data to laptop theft, corporate espionage, or the US Customs Service is a big concern for us. This week I secured my laptop, as a prototype of our new corporate laptop setup. Here is how I did it.
I read an article in the Dec 2009 issue of Linux Magazine, one of several Linux-focused magazines we get at the office. I’d like to link directly to it, but it the magazine’s own website doesn’t offer the article or even a reliable permanent link to the issue number. Hint: hey guys, sort that out.
The article was about configuring ACPI hotkeys to support your specific laptop. IE, the buttons for “sleep”, “brightness up”, etc. For most laptops this already works on Ubuntu. On my Dell Vostro 1500, every button except for “sleep” worked right after install. This is Linux, so there is always some way to fix that.
Since upgrading to Ubuntu 9.10 I’ve noticed poor performance of VirtualBox guests with Intel VT-X hardware virtualisation enabled. This has been noted in a few places, but I didn’t enable VT-x until recently so I can’t be sure that the problem began with Karmic. I can be sure that it is happening to me now.
Tags: amd64, karmic, linux, ubuntu, virtualbox
Friday I upgraded from Kubuntu 9.04 “Jaunty Jackalope” to Kubuntu 9.10 “Karmic Koala”. Here are my notes on the upgrade.
You really shouldn’t allow SSH logins via password. This is doubly true for root. On most of my hosts we allow SSH for normal users with a password, but restrict root to SSH keys only. And we always protect against brute force attacks with fail2ban.
If you aren’t already using SSH keys and SSH agent, you should. SSH agent forwarding allows for secure sideways authentication. For example:
Cleaning up after the KDE 4 upgrade continues. Today I tried to port kregexpeditor from hardy, but pbuilder stopped with a library conflict:
kdelibs5-dev: Conflicts: kdelibs4-dev but 4:3.5.10.dfsg.1-1ubuntu8 is to be installed
I’m sure I could have resolved this, but I decided to test the hardy package before spending any more effort. The package installed without complaint, and the binary runs. I’ve added the amd64 and i386 packages from hardy-backports to the repo for jaunty.
Until last week I still ran Kubuntu 8.04 (Ubuntu with KDE) on my personal desktop. We also use this on all our corporate desktops, and my wife’s PC at home. I wanted to wait for KDE 4 to mature a bit more before upgrading, so intrepid wasn’t an option.
I waited 4 months after the release of jaunty, so the problems should be either documented or resolved, and the release notes didn’t mention anything that seemed too serious. So I decided to give it a test.
I love SSHFS. I manage a lot of machines, and I very often want to do something like this:
diff root@server1:/etc/randomrcfile root@server2:/etc/randomrcfile
There are ways to do this with Kompare (a KDE diff app) and the fish:// Kioslave, but not on the command line. SSHFS makes it easy:
mkdir /tmp/server1 /tmp/server2
sshfs root@server1:/ /tmp/server1/
sshfs root@server2:/ /tmp/server2/
diff /tmp/server1/etc/randomrcfile /tmp/server2/etc/randomrcfile
I do this so often that I’ve written my own script to handle this for me, smount. Copy it somewhere in your path, and optionally make a copy or symlink called “sumount”. Now you can rapidly mount and unmount multiple hosts.
Recent Comments