[qmailtoaster] Re: Security

[Eric Shubert]

Cool. I'd say write it up, but you just did. Can pretty much 
copy-n-paste it to the wiki! :)

Phil Leinhauser wrote:
You don't run with a snapshot in the background.  However, before you do 
any upates, you take a snapshot then perform your updates.  If the 
updates run ok then ou delete the snapshot and you're back to normal.  
If the updates blowup, you revert the snapshot and you're back to the 
way you we before the updates.  

The way snapshots work is when you take a snap, it stops writes to the 
VMDK and starts writing all changes to a *snapshot.vmdk file.  That is 
ALL changes get written forward with NO deletes.  Now you see where the 
rub is, that file GROWS!!  The sooner you get out of the snapshot the 
better.  When you "delete" the snapshot, all the changes are written to 
the original VMDK and the snapshot file is removed.  If you "revert" te 
snapshot, it just deletes that file and opens writes to the original VMDK.

before I do any QMT updates I snapshot the machine.  So far I have not 
had to revert so I delete andhave none of the nasty overhead.

I see another VM wiki topic...


 > Great for development, but I'm not sold on them for production hosts. I
 > haven't actually used them at all, but my understanding is that
 > performance suffers. Much like using an overlay filesystem.
 >
 > Phil Leinhauser wrote:
 >> Aren't snapshots GREAT!!!
 >>
 >> BTW: For anyone using VM with Windows domain controllers, DO NOT
 >> snapshot DCs! Very bad juju happens when the old version comes back.
 >>
 >> > To many more conflicts,
 >> > Not worth the bother, glad I tested on a VM, just restore to a
 >> previous
 >> > snapshot.
 >> >
 >> >
 >> >
 >> > sysadmin wrote:
 >> >> I am looking at installing ,
 >> >> Atomic Secured Linux,
 >> >> On my Qmail-toaster box ( VM )
 >> >>
 >> >> On installation I get, a conflict with the already installed version
 >> >> of Clam AV,.
 >> >> can I just use rpm -e to remove ClamAV, as you would any other Linux
 >> >> Version, or will it " break " the qmail install ( done with ISO
 >> install
 >> >> )
 >> >>
 >> >> Thanks
 >> >>
 >> >>
 >> >>
 >> 
--------------------------------------------------------------------------------- 

 >> >>
 >> >> Qmailtoaster is sponsored by Vickers Consulting Group
 >> >> (www.vickersconsulting.com)
 >> >> Vickers Consulting Group offers Qmailtoaster support and
 >> >> installations.
 >> >> If you need professional help with your setup, contact them today!
 >> >>
 >> 
--------------------------------------------------------------------------------- 

 >> >>
 >> >> Please visit qmailtoaster.com for the latest news, updates, and
 >> >> packages.
 >> >> To unsubscribe, e-mail:
 >> >> qmailtoaster-list-unsubscr...@qmailtoaster.com
 >> >> For additional commands, e-mail:
 >> >> qmailtoaster-list-h...@qmailtoaster.com
 >> >>
 >> >>
 >> >>
 >> >>
 >> >
 >> >
 >> >
 >> 
--------------------------------------------------------------------------------- 

 >
 > --
 > -Eric 'shubes'
 >
 >
 > 
--------------------------------------------------------------------------------- 

 > Qmailtoaster is sponsored by Vickers Consulting Group
 > (www.vickersconsulting.com)
 > Vickers Consulting Group offers Qmailtoaster support and
 > installations.
 > If you need professional help with your setup, contact them today!
 >


--
-Eric 'shubes'


---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
    
     To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
    For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com