Lusitania

From syn2cat - HackerSpace.lu
(Difference between revisions)
Jump to: navigation, search
 
(11 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[[Category:Network]]
 
 
{{Computer
 
{{Computer
 
|hostname=lusitania.lan
 
|hostname=lusitania.lan
Line 8: Line 7:
 
|model=custom
 
|model=custom
 
|operatingsystem=debian GNU/Linux
 
|operatingsystem=debian GNU/Linux
 +
|computerstatus=
 +
|location=Level2
 
|services=apache2,mysqld,icinga,cifs,nfs,dns,...
 
|services=apache2,mysqld,icinga,cifs,nfs,dns,...
 
|admin=sim0n, Stereo
 
|admin=sim0n, Stereo
Line 14: Line 15:
 
|os=debian 7.0
 
|os=debian 7.0
 
}}
 
}}
 +
[[Category:Network]]
 +
 
== Synopsis ==
 
== Synopsis ==
The name's "lusitania" and the purpose is: '''main server at the hackerspace'''
+
The name's "lusitania" and the purpose is: '''powered off'''
  
 
External access through lusitania.int.hackerspace.lu (ipv4 and ipv6)
 
External access through lusitania.int.hackerspace.lu (ipv4 and ipv6)
  
It has become a part of our main space infrastructure, hosting a fileserver, functioning as WiFi access-point, hosting a freeradius server and more.
+
It was a part of our main [[Stage1]] hackerspace infrastructure, hosting a fileserver, functioning as WiFi access-point, hosting a freeradius server and more.
  
 
== Services ==
 
== Services ==
 +
 +
=== Network ===
  
 
* DHCP for LAN
 
* DHCP for LAN
 
* v6 announcement for LAN
 
* v6 announcement for LAN
* UPS monitoring
+
* IPSec tunnel (in use?)
 +
* squid (in use?)
 +
* pppoe connection to the internet
 +
* aiccu (ipv6 tunnel to sixxs)
 +
* OpenVPN (in use? Looks like we only use it for ccc events.)
 +
* Muling's bwmon for the meter in the rack
 +
 
 +
=== Access ===
 +
* apache httpd maily for openduino interface
 
* Update the status from Openduino to space.syn2cat.lu
 
* Update the status from Openduino to space.syn2cat.lu
 +
* slapd (openldap) for Openduino and the radius for the wifi
 +
* Freeradius (for the wifi)
 +
* file shares via nfs and smb. See below
 +
 +
=== Systems ===
 +
 +
* UPS monitoring
 
* Munin
 
* Munin
* IPSec tunnel
+
* Munin-node
* tftpd (in use?)
+
 
* cacti (in use?)
 
* cacti (in use?)
 +
* Smartd
 +
* postfix (in use for anything other than system emails?)
 +
* NTPD
 +
 +
=== Misc ===
 +
* tftpd (in use? /var/lib/tftpboot/ files are from 2011.)
 
* MySQL (in use?)
 
* MySQL (in use?)
* squid (in use?)
 
 
* samba (in use?)
 
* samba (in use?)
* slapd (openldap)
 
* pppoe connection to the internet
 
 
* libvirtd (in use?)
 
* libvirtd (in use?)
 
* rpc.idmapd (in use?)
 
* rpc.idmapd (in use?)
 
* nscd (in use?)
 
* nscd (in use?)
* portmap (in use?)
 
* postfix (in use?)
 
* aiccu (ipv6 tunnel to sixxs)
 
* OpenVPN (in use?)
 
* Munin-node
 
* Smartd
 
* NFSD (in use?)
 
* NMBD (in use?)
 
* Freeradius (in use?)
 
* Muling's bwmon for the meter in the rack
 
* NTPD
 
  
 
== Fileserver ==
 
== Fileserver ==
Line 70: Line 81:
  
 
== Music server ==
 
== Music server ==
 +
This is defunct (404)
 +
 
You may access the music server using a webbrowser at this address: [http://lusitania.lan/ampache http://lusitania.lan/ampache] <br>
 
You may access the music server using a webbrowser at this address: [http://lusitania.lan/ampache http://lusitania.lan/ampache] <br>
 
The login is '''admin / admin''', feel free to create yourself an account !<br>
 
The login is '''admin / admin''', feel free to create yourself an account !<br>
Line 76: Line 89:
 
== Cruft ==
 
== Cruft ==
  
Many packages are installed on lusitania. Most of those are probably useless.
+
An a lot of packages is installed on lusitania. Most of those are probably useless.
 +
 
 +
<code>
 +
root@lusitania:~# aptitude search '~i!~M!?essential' | wc -l
 +
317
 +
</code>
 +
 
 +
Review 20130526 shows following interesting packages:
  
===List of installed non-essential packages that have no other packages depending on them:===
+
3ware-cli-binary =>  where do w use this Command Line Interface for 3Ware Controllers
<nowiki>
+
ampache     => may be good to configure it again
3ware-cli-binary                                   - Command Line Interface for 3Ware Controllers
+
apcuupsd    => yes we have an UPS on the server which is monitored
i  acl                                                - Access control list utilities
+
apticron     => we get regularly annoyed by reminder emails about pending updates
i  acpi-support-base                                  - scripts for handling base ACPI events such as the power butto
+
bind9        => running a local DNS. details to be documented
i  acpid                                              - Advanced Configuration and Power Interface event daemon
+
conntrack   => ?
i  adduser                                            - add and remove users and groups
+
cryptsetup  => mount encrypted disk library
i  aiccu                                              - SixXS Automatic IPv6 Connectivity Client Utility
+
ddclient     => lusitania is behind a dynamic DSL line
ampache-themes                                    - Themes for Ampache
+
denyhosts   => dynamically remove annoying ssh scanners
i  apcupsd                                            - APC UPS Power Management (daemon)
+
etckeeper   => save /etc into revision system. is it used?
i  apt-dater-host                                    - host helper application for apt-dater
+
john        => who likes to crack passwords? several dictionaries installed too
i  apt-utils                                          - package managment related utility programs
+
  php*        => huge amount of stuff for apache/php
apticron                                           - Simple tool to mail about pending package updates
+
screen      => what would be a system without screen. screen is awesome
i  aptitude                                          - terminal-based package manager
+
subversion  => hmm, should we not do all with git?
i  aptitude-common                                    - architecture indepedent files for the aptitude package manage
+
xfsprogs     => some filesystems are XFS
i  at                                                - Delayed job execution and batch processing
+
i  avahi-daemon                                      - Avahi mDNS/DNS-SD daemon
+
i  bash-completion                                    - programmable completion for the bash shell
+
i  bc                                                - The GNU bc arbitrary precision calculator language
+
i  bind9                                              - Internet Domain Name Server
+
i  bind9-host                                        - Version of 'host' bundled with BIND 9.X
+
i  bmon                                              - portable bandwidth monitor and rate estimator
+
i  bridge-utils                                      - Utilities for configuring the Linux Ethernet bridge
+
i  bsd-mailx                                          - simple mail user agent
+
i  bsdmainutils                                      - collection of more utilities from FreeBSD
+
i  build-essential                                    - Informational list of build-essential packages
+
i  busybox                                            - Tiny utilities for small and embedded systems
+
i  bwm-ng                                            - small and simple console-based bandwidth monitor
+
i  cacti                                              - web interface for graphing of monitoring systems
+
i  colord                                            - system service to manage device colour profiles -- system dae
+
i  colordiff                                          - tool to colorize 'diff' output
+
conntrack                                         - Program to modify the conntrack tables
+
i  console-common                                    - basic infrastructure for text console configuration
+
i  console-data                                      - keymaps, fonts, charset maps, fallback tables for console-too
+
i  console-setup                                      - console font and keymap setup program
+
i  console-setup-linux                                - Linux specific part of console-setup
+
i  consolekit                                        - framework for defining and tracking users, sessions and seats
+
i  cpio                                              - GNU cpio -- a program to manage archives of files
+
i  cron                                              - process scheduling daemon
+
cryptsetup                                         - disk encryption support - startup scripts
+
i   cryptsetup-bin                                    - disk encryption support - command line tools
+
i  cups                                              - Common UNIX Printing System(tm) - server
+
i  cups-filters                                      - OpenPrinting CUPS Filters
+
i  dc                                                - The GNU dc arbitrary precision reverse-polish calculator
+
ddclient                                           - address updating utility for dynamic DNS services
+
i  debian-archive-keyring                            - GnuPG archive keys of the Debian archive
+
i  debian-faq                                        - Debian FAQ
+
i  debian-keyring                                    - GnuPG keys of Debian Developers
+
i  debootstrap                                        - Bootstrap a basic Debian system
+
denyhosts                                         - Utility to help sys admins thwart SSH crackers
+
i  dictionaries-common                                - Common utilities for spelling dictionary tools
+
i  dmidecode                                          - SMBIOS/DMI table decoder
+
i  dnsmasq-base                                      - Small caching DNS proxy and DHCP/TFTP server
+
i  dnsutils                                          - Clients provided with BIND
+
i  doc-debian                                        - Debian Project documentation and other documents
+
i  dos2unix                                          - convert text file line endings between CRLF and LF
+
i  dsniff                                            - Various tools to sniff network traffic for cleartext insecuri
+
i  ed                                                - classic UNIX line editor
+
i  eject                                              - ejects CDs and operates CD-Changers under Linux
+
etckeeper                                         - store /etc in git, mercurial, bzr or darcs
+
i  etherwake                                          - A little tool to send magic Wake-on-LAN packets
+
i  ethstatus                                          - console-based ethernet statistics monitor
+
i  ethtool                                            - display or change Ethernet device settings
+
i  fdupes                                            - identifies duplicate files within given directories
+
i  file                                              - Determines file type using "magic" numbers
+
i  firmware-linux                                    - Binary firmware for various drivers in the Linux kernel (meta
+
i  firmware-linux-nonfree                            - Binary firmware for various drivers in the Linux kernel
+
i  fonts-droid                                        - handheld device font with extensive style and language suppor
+
i  fonts-freefont-ttf                                - Freefont Serif, Sans and Mono Truetype fonts
+
i  fonts-liberation                                  - Fonts with the same metrics as Times, Arial and Courier
+
i  freeradius-common                                  - FreeRADIUS common files
+
i  freeradius-utils                                  - FreeRADIUS client utilities
+
i  ftp                                                - classical file transfer client
+
i  gdisk                                              - GPT fdisk text-mode partitioning tool
+
i  gettext-base                                      - GNU Internationalization utilities for the base system
+
i  gir1.2-glib-2.0                                    - Introspection data for GLib, GObject, Gio and GModule
+
i  git-core                                          - fast, scalable, distributed revision control system (obsolete
+
i  git-man                                            - fast, scalable, distributed revision control system (manual p
+
i  gnupg                                              - GNU privacy guard - a free PGP replacement
+
i  gnuplot                                            - Command-line driven interactive plotting program
+
i  gnuplot-nox                                        - Command-line driven interactive plotting program. No-X packag
+
i  gnutls-bin                                        - GNU TLS library - commandline utilities
+
i  gpgv                                              - GNU privacy guard - signature verification tool
+
i  groff                                              - GNU troff text-formatting system
+
i  groff-base                                        - GNU troff text-formatting system (base system components)
+
i  grub-common                                        - GRand Unified Bootloader (common files)
+
i  grub-pc                                            - GRand Unified Bootloader, version 2 (PC/BIOS version)
+
i  grub-pc-bin                                        - GRand Unified Bootloader, version 2 (PC/BIOS binaries)
+
i  grub2-common                                      - GRand Unified Bootloader (common files for version 2)
+
i  hdparm                                            - tune hard disk parameters for high performance
+
i  hplip                                              - HP Linux Printing and Imaging System (HPLIP)
+
i  hplip-data                                        - HP Linux Printing and Imaging - data files
+
i  htop                                              - interactive processes viewer
+
i  iamerican                                          - American English dictionary for ispell (standard version)
+
i  ibritish                                          - British English dictionary for ispell (standard version)
+
i  ienglish-common                                    - Common files for British and American ispell dictionaries
+
i  ifenslave-2.6                                      - Attach and detach slave interfaces to a bonding device
+
i  iftop                                              - displays bandwidth usage information on an network interface
+
i  ifupdown                                          - high level tools to configure network interfaces
+
i  imagemagick                                        - image manipulation programs
+
i  imagemagick-common                                - image manipulation programs -- infrastructure
+
i  imvirt-helper                                      - helper programs to detect several virtualizations
+
i  info                                              - Standalone GNU Info documentation browser
+
i  initramfs-tools                                    - generic modular initramfs generator
+
i  installation-report                                - system installation report
+
i  iodbc                                              - GTK+ config frontend for the iODBC Driver Manager
+
i  iproute                                            - networking and traffic control tools
+
i  ipset                                              - administration tool for kernel IP sets
+
i  iptables                                          - administration tools for packet filtering and NAT
+
i  iptraf                                            - Interactive Colorful IP LAN Monitor
+
i  iptstate                                          - top-like interface to your netfilter connection-tracking tabl
+
i  iputils-ping                                      - Tools to test the reachability of network hosts
+
i  ipxe-qemu                                          - PXE boot firmware - ROM images for qemu
+
i  isc-dhcp-server                                    - ISC DHCP server for automatic IP address assignment
+
i  ispell                                            - International Ispell (an interactive spelling corrector)
+
i  john                                              - active password cracking tool
+
i  john-data                                          - active password cracking tool - character sets
+
i  kbd                                                - Linux console font and keytable utilities
+
i  kernel-package                                    - A utility for building Linux kernel related Debian packages.
+
i  keyboard-configuration                            - system-wide keyboard preferences
+
i  keyutils                                          - Linux Key Management Utilities
+
i  kmod                                              - tools for managing Linux kernel modules
+
i  krb5-locales                                      - Internationalization support for MIT Kerberos
+
i  laptop-detect                                      - attempt to detect a laptop
+
i  ldap-utils                                        - OpenLDAP utilities
+
i  less                                              - pager program similar to more
+
i  libgphoto2-l10n                                    - gphoto2 digital camera library - localized messages
+
i  libjs-jquery                                      - JavaScript library for dynamic web applications
+
i  libjs-yui                                          - Yahoo User Interface Library
+
i  liblinear-tools                                    - Standalone applications for LIBLINEAR
+
i  liblockfile-bin                                    - support binaries for and cli utilities based on liblockfile
+
i  libnss-ldap                                        - NSS module for using LDAP as a naming service
+
i  libnss-mdns                                        - NSS module for Multicast DNS name resolution
+
i  libnss-winbind                                    - Samba nameservice integration plugins
+
i  libpam-ck-connector                                - ConsoleKit PAM module
+
i  libpam-ldap                                        - Pluggable Authentication Module for LDAP
+
i  libpam-winbind                                    - Windows domain authentication integration plugin
+
i  libphp-adodb                                      - ADOdb database abstraction layer for PHP
+
i  libvirt-bin                                        - programs for the libvirt library
+
i  linux-base                                        - Linux image base package
+
id linux-image-3.0.0-2-amd64                          - Linux 3.0.0 for 64-bit PCs
+
i  lm-sensors                                        - utilities to read temperature/voltage/fan sensors
+
i  locales-all                                        - Embedded GNU C Library: Precompiled locale data
+
i  logrotate                                          - Log rotation utility
+
i  lsof                                              - Utility to list open files
+
i  lvm2                                              - Linux Logical Volume Manager
+
i  lxc                                                - Linux Containers userspace tools
+
i  lynx                                              - Text-mode WWW Browser (transitional package)
+
i  lzma                                              - Compression and decompression in the LZMA format - command li
+
i  makedev                                            - creates device files in /dev
+
i  man-db                                            - on-line manual pager
+
i  manpages                                          - Manual pages about using a GNU/Linux system
+
i  mcelog                                            - x86 Machine Check Exceptions collector and decoder
+
i  mdadm                                              - tool to administer Linux MD arrays (software RAID)
+
i  mencoder                                          - MPlayer's Movie Encoder
+
i  mime-support                                      - MIME files 'mime.types' & 'mailcap', and support programs
+
i  minicom                                            - friendly menu driven serial communication program
+
i  mlocate                                            - quickly find files on the filesystem based on their name
+
i  module-init-tools                                  - transitional dummy package (module-init-tools to kmod)
+
i  molly-guard                                        - protects machines from accidental shutdowns/reboots
+
i  monit                                              - utility for monitoring and managing daemons or similar progra
+
i  mplayer                                            - movie player for Unix-like systems
+
i  mscompress                                        - Microsoft "compress.exe/expand.exe" compatible (de)compressor
+
i  munin                                              - network-wide graphing framework (grapher/gatherer)
+
i  munin-doc                                          - network-wide graphing framework (documentation)
+
i  munin-plugins-core                                - network-wide graphing framework (plugins for node)
+
i  munin-plugins-extra                                - network-wide graphing framework (user contributed plugins for
+
i  mutt                                              - text-based mailreader supporting MIME, GPG, PGP and threading
+
i  mysql-client-5.5                                  - MySQL database client binaries
+
i  nano                                              - small, friendly text editor inspired by Pico
+
i  ncftp                                              - User-friendly and well-featured FTP client
+
i  ncurses-term                                      - additional terminal type definitions
+
i  net-tools                                          - The NET-3 networking toolkit
+
i  netbase                                            - Basic TCP/IP networking system
+
i  netcat-traditional                                - TCP/IP swiss army knife
+
i  netpbm                                            - Graphics conversion tools between image formats
+
i  nfs-common                                        - NFS support files common to client and server
+
i  nfs-kernel-server                                  - support for NFS kernel server
+
i  nmap                                              - The Network Mapper
+
i  ntp                                                - Network Time Protocol daemon and utility programs
+
i  ntpdate                                            - client for setting system time from NTP servers
+
i  openbsd-inetd                                      - OpenBSD Internet Superserver
+
i  openssh-client                                    - secure shell (SSH) client, for secure access to remote machin
+
i  openssh-server                                    - secure shell (SSH) server, for secure access from remote mach
+
i  openvpn                                            - virtual private network daemon
+
i  patch                                              - Apply a diff file to an original
+
i  pciutils                                          - Linux PCI Utilities
+
i  pear-phpunit-channel                              - PEAR pear.phpunit.de channel definition file
+
i  pear-symfony-project-channel                      - PEAR Symfony Project channel definition file
+
php-codecoverage                                  - provides collection, processing and rendering for PHP code co
+
i  php-file-iterator                                  - FilterIterator implementation for PHP
+
i  php-invoker                                        - utility class for invoking callables with a timeout
+
i  php-mail                                          - PHP PEAR module for sending email
+
i  php-mail-mime                                      - PHP PEAR module for creating MIME messages
+
i  php-pear                                          - PEAR - PHP Extension and Application Repository
+
i  php-symfony-yaml                                  - Symfony YAML: A PHP library that speaks YAML
+
i  php-text-template                                  - Simple php template engine
+
i  php-timer                                          - PHP Utility class for timing
+
i  php-token-stream                                  - Wrapper around PHP's tokenizer extension
+
i  php5-adodb                                        - Extension optimising the ADOdb database abstraction library
+
i  php5-curl                                          - CURL module for php5
+
i  php5-ldap                                          - LDAP module for php5
+
i  php5-sqlite                                        - SQLite module for php5
+
i  php5-xdebug                                        - Xdebug Module for PHP 5
+
i  php5-xmlrpc                                        - XML-RPC module for php5
+
i  phpmyadmin                                        - MySQL web administration tool
+
i  phpunit                                            - Unit testing suite for PHP5
+
i  phpunit-mock-object                                - Mock Object library for PHPUnit
+
i  phpunit-story                                      - extension to facilitate Behaviour-Driven Development
+
i  policykit-1                                        - framework for managing administrative policies and privileges
+
i  poppler-data                                      - encoding data for the poppler PDF rendering library
+
i  postfix                                            - High-performance mail transport agent
+
i  pppoe                                              - PPP over Ethernet driver
+
i  pppoeconf                                          - configures PPPoE/ADSL connections
+
i  printer-driver-all                                - printer drivers metapackage
+
i  printer-driver-c2050                              - printer driver for Lexmark 2050 Color Jetprinter
+
i  printer-driver-c2esp                              - printer driver for Kodak ESP AiO color inkjet Series
+
i  printer-driver-cjet                                - printer driver for Canon LBP laser printers
+
i  printer-driver-escpr                              - printer driver for Epson Inkjet that use ESC/P-R
+
i  printer-driver-foo2zjs                            - printer driver for ZjStream-based printers
+
i  printer-driver-gutenprint                          - printer drivers for CUPS
+
i  printer-driver-hpcups                              - HP Linux Printing and Imaging - CUPS Raster driver (hpcups)
+
i  printer-driver-hpijs                              - HP Linux Printing and Imaging - gs IJS driver (hpijs)
+
i  printer-driver-m2300w                              - printer driver for Minolta magicolor 2300W/2400W color laser
+
i  printer-driver-min12xxw                            - printer driver for KonicaMinolta PagePro 1[234]xxW
+
i  printer-driver-pnm2ppa                            - printer driver for HP-GDI printers
+
i  printer-driver-postscript-hp                      - HP Printers PostScript Descriptions
+
i  printer-driver-ptouch                              - printer driver Brother P-touch label printers
+
i  printer-driver-pxljr                              - printer driver for HP Color LaserJet 35xx/36xx
+
i  printer-driver-sag-gdi                            - printer driver for Ricoh Aficio SP 1000s/SP 1100s
+
i  printer-driver-splix                              - Driver for Samsung and Xerox SPL2 and SPLc laser printers
+
i  procmail                                          - Versatile e-mail processor
+
i  procps                                            - /proc file system utilities
+
i  psutils                                            - PostScript document handling utilities
+
i  python                                            - interactive high-level object-oriented language (default vers
+
i  python-central                                    - register and build utility for Python packages
+
i  python-crypto                                      - cryptographic algorithms and protocols for Python
+
i  python-dbus                                        - simple interprocess messaging system (Python interface)
+
i  python-dbus-dev                                    - main loop integration development files for python-dbus
+
i  python-debianbts                                  - Python interface to Debian's Bug Tracking System
+
i  python-dev                                        - header files and a static library for Python (default)
+
i  python-fpconst                                    - Utilities for handling IEEE 754 floating point special values
+
i  python-gi                                          - Python 2.x bindings for gobject-introspection libraries
+
i  python-imaging                                    - Python Imaging Library
+
i  python-ldap                                        - LDAP interface module for Python
+
i  python-magic                                      - File type determination library using "magic" numbers (Python
+
i  python-minimal                                    - minimal subset of the Python language (default version)
+
i  python-pexpect                                    - Python module for automating interactive applications
+
i  python-pyscard                                    - Python wrapper above PC/SC API
+
i  python-renderpm                                    - python low level render interface
+
i  python-reportlab                                  - ReportLab library to create PDF documents using Python
+
i  python-reportlab-accel                            - C coded extension accelerator for the ReportLab Toolkit
+
i  python-serial                                      - pyserial - module encapsulating access for the serial port
+
i  python-soappy                                      - SOAP Support for Python
+
i  python-sqlite                                      - Python interface to SQLite 2
+
i  python2.7                                          - Interactive high-level object-oriented language (version 2.7)
+
i  python2.7-dev                                      - Header files and a static library for Python (v2.7)
+
i  python2.7-minimal                                  - Minimal subset of the Python language (version 2.7)
+
i  qemu-keymaps                                      - QEMU keyboard maps
+
i  qemu-utils                                        - QEMU utilities
+
i  quagga                                            - BGP/OSPF/RIP routing daemon
+
i  quilt                                              - Tool to work with series of patches
+
i  readline-common                                    - GNU readline and history libraries, common files
+
i  reportbug                                          - reports bugs in the Debian distribution
+
i  rpcbind                                            - converts RPC program numbers into universal addresses
+
i  rsync                                              - fast, versatile, remote (and local) file-copying tool
+
i  rsyslog                                            - reliable system and kernel logging daemon
+
i  samba                                              - SMB/CIFS file, print, and login server for Unix
+
i  samba-doc                                          - Samba documentation
+
i  sane-utils                                        - API library for scanners -- utilities
+
screen                                             - terminal multiplexer with VT100/ANSI terminal emulation
+
i  seabios                                            - Legacy BIOS implementation
+
i  sharutils                                          - shar, unshar, uuencode, uudecode
+
i  slapd                                              - OpenLDAP server (slapd)
+
i  smartmontools                                      - control and monitor storage systems using S.M.A.R.T.
+
i  smbclient                                          - command-line SMB/CIFS clients for Unix
+
i  sqlite                                            - command line interface for SQLite
+
i  squid3                                            - Full featured Web Proxy cache (HTTP proxy)
+
i  squid3-common                                      - Full featured Web Proxy cache (HTTP proxy) - common files
+
i  strace                                            - A system call tracer
+
i  strongswan                                        - IPsec VPN solution metapackage
+
subversion                                         - Advanced version control system
+
i   sudo-ldap                                          - Provide limited super user privileges to specific users
+
i  tasksel                                            - Tool for selecting tasks for installation on Debian systems
+
i  tasksel-data                                      - Official tasks used for installation of Debian systems
+
i  tcpd                                              - Wietse Venema's TCP wrapper utilities
+
i  tcpdump                                            - command-line network traffic analyzer
+
i  tdb-tools                                          - Trivial Database - bundled binaries
+
i  telnet                                            - The telnet client
+
i  texinfo                                            - Documentation system for on-line information and printed outp
+
i  tftpd-hpa                                          - HPA's tftp server
+
i  time                                              - GNU time program for measuring CPU resource usage
+
i  tmux                                              - terminal multiplexer
+
i  traceroute                                        - Traces the route taken by packets over an IPv4/IPv6 network
+
i  tshark                                            - network traffic analyzer - console version
+
i  ucf                                                - Update Configuration File: preserve user changes to config fi
+
i  udev                                              - /dev/ and hotplug management daemon
+
i  udhcpd                                            - Provides the busybox DHCP server implementation
+
i  unscd                                              - Micro Name Service Caching Daemon
+
i  unzip                                              - De-archiver for .zip files
+
i  update-inetd                                      - inetd configuration file updater
+
i  usbutils                                          - Linux USB utilities
+
i  vgabios                                            - VGA BIOS software for the Bochs and Qemu emulated VGA card
+
i  vim                                                - Vi IMproved - enhanced vi editor
+
i  vim-common                                        - Vi IMproved - Common files
+
i  vlan                                              - user mode programs to enable VLANs on your ethernet devices
+
i  w3m                                                - WWW browsable pager with excellent tables/frames support
+
i  wamerican                                          - American English dictionary words for /usr/share/dict
+
i  wget                                              - retrieves files from the web
+
i  whiptail                                          - Displays user-friendly dialog boxes from shell scripts
+
i  whois                                              - intelligent WHOIS client
+
i  wide-dhcpv6-server                                - DHCPv6 server for automatic IPv6 hosts configuration
+
i  winbind                                            - Samba nameservice integration server
+
i  wireless-tools                                    - Tools for manipulating Linux Wireless Extensions
+
i  wpasupplicant                                      - client support for WPA and WPA2 (IEEE 802.11i)
+
xfsprogs                                           - Utilities for managing the XFS filesystem
+
i  xkb-data                                          - X Keyboard Extension (XKB) configuration data
+
i  zile                                              - very small Emacs-subset editor
+
i  zsh                                                - shell with lots of features
+
</nowiki>
+

Latest revision as of 16:11, 17 April 2015

Add a Computer
Computer.png
lusitania.lan
External Hostname: lusitania.int.hackerspace.lu
IP: 192.168.1.24
Type: server
Brand: custom
Model: custom
OS: debian GNU/Linux
ComputerStatus:
Location: Level2
Services: apache2,mysqld,icinga,cifs,nfs,dns,...
Admin: sim0n (mail),Stereo (mail)
Museum: no
QrCode: QR-0491bd003b3536a7d0bfb2c65068cc9c.png

Contents

[edit] Synopsis

The name's "lusitania" and the purpose is: powered off

External access through lusitania.int.hackerspace.lu (ipv4 and ipv6)

It was a part of our main Stage1 hackerspace infrastructure, hosting a fileserver, functioning as WiFi access-point, hosting a freeradius server and more.

[edit] Services

[edit] Network

  • DHCP for LAN
  • v6 announcement for LAN
  • IPSec tunnel (in use?)
  • squid (in use?)
  • pppoe connection to the internet
  • aiccu (ipv6 tunnel to sixxs)
  • OpenVPN (in use? Looks like we only use it for ccc events.)
  • Muling's bwmon for the meter in the rack

[edit] Access

  • apache httpd maily for openduino interface
  • Update the status from Openduino to space.syn2cat.lu
  • slapd (openldap) for Openduino and the radius for the wifi
  • Freeradius (for the wifi)
  • file shares via nfs and smb. See below

[edit] Systems

  • UPS monitoring
  • Munin
  • Munin-node
  • cacti (in use?)
  • Smartd
  • postfix (in use for anything other than system emails?)
  • NTPD

[edit] Misc

  • tftpd (in use? /var/lib/tftpboot/ files are from 2011.)
  • MySQL (in use?)
  • samba (in use?)
  • libvirtd (in use?)
  • rpc.idmapd (in use?)
  • nscd (in use?)

[edit] Fileserver

[edit] Windows share

The server may be access from Windows clients and other clients using the smb/cifs protocol. The server can be located by browsing the net or simply using "\\lusitania.lan"

[edit] NFS

NFSv3 and NFSv4 may be used for accessing the file server

[edit] NFSv3

mount -t nfs lusitania.lan:/work /mnt/target

[edit] NFSv4

mount -t nfs4 lusitania.lan:/ /mnt/target


[edit] Music server

This is defunct (404)

You may access the music server using a webbrowser at this address: http://lusitania.lan/ampache
The login is admin / admin, feel free to create yourself an account !
Ampache may be used to stream music to any mpd server on the LAN.

[edit] Cruft

An a lot of packages is installed on lusitania. Most of those are probably useless.

root@lusitania:~# aptitude search '~i!~M!?essential' | wc -l
317

Review 20130526 shows following interesting packages:

3ware-cli-binary  =>  where do w use this Command Line Interface for 3Ware Controllers
ampache      => may be good to configure it again
apcuupsd     => yes we have an UPS on the server which is monitored
apticron     => we get regularly annoyed by reminder emails about pending updates
bind9        => running a local DNS. details to be documented
conntrack    => ?
cryptsetup   => mount encrypted disk library
ddclient     => lusitania is behind a dynamic DSL line
denyhosts    => dynamically remove annoying ssh scanners
etckeeper    => save /etc into revision system. is it used?
john         => who likes to crack passwords? several dictionaries installed too
php*         => huge amount of stuff for apache/php
screen       => what would be a system without screen. screen is awesome
subversion   => hmm, should we not do all with git?
xfsprogs     => some filesystems are XFS
Personal tools
Namespaces

Variants
Actions
Navigation
syn2cat
Hackerspace
Activities
Initiatives
Community
Tools
Tools