sysinstall full install remotely with no serial console, possible?

2005-12-27 Thread Elliot Crosby-McCullough

Hey guys.

	Basically in my situation I have a broken server in colo with no serial 
console.  It works for the most part but write access to / is gone, and 
all attempts at repair are not coming about.


	I'd like to reinstall all but /home (has a seperate slice), however I 
would have to do so via SSH without the aid of a serial console, and 
with no CD in the drive.


	I know sysinstall can run from the OS, and it can install over the 
network, is it possible to run this full installation remotely in this 
way, given that it's starting from an installed and configured OS?


Thanks,
Elliot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Requesting advice on Jail technique.

2005-09-13 Thread Elliot Crosby-McCullough

Dear all,

	I will shortly be creating a public service on a private box that will 
include shell access to untrusted users and would like your opinion on 
the best way to go about this.


	Obviously jails are a good start, but my main concern is whether to go 
for one large jail for all the restricted users or one small jail per user.


	I do not have a wealth of real IPs at my disposal but accountability 
and security is paramount, therefore I would like to use local IPs 
through NAT (within the one box) whilst retaining the translation logs. 
 I would like to use one local IP per user in order to keep track of 
activity.  I can afford a few real IPs for the purpose.


	The accounts themselves will be supremely limited.  No root access, 
just basics such as ssh, perhaps telnet, mutt etc.  I do not want the 
users to have the ability to run any scripts, so perl etc is out, but I 
suppose the NAT firewall will be a fallback if any compiled programs are 
uploaded.


	Each user account is likely to have email/gpg etc but I'm happy to 
control that from the host system with virtual users and simply deliver 
into the jail.  It is not necessary for the jails to run any services, 
except the ability to SSH in.


	As you can see there are factors pulling in both directions, what would 
you recommend as the best direction to go?


Sincerely,
Elliot Crosby-McCullough
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Root 8% reserved space and tunefs

2005-07-08 Thread Elliot Crosby-McCullough

Evening.

	We are downloading an item to a freebsd 5.3 server which has a size a 
little short of the max size of the HD.  For technical reasons there is 
no way to remove portions of the item before it is finished.


	There is enough space but only if the 8% reserved for root is taken 
into account.  This is not currently being used as the files are being 
aquired as www (via apache).


	I cannot use tunefs to free the 8% as the files are on /usr/ and cannot 
be umounted.


	If anyone has any ideas they would be much appreciated; the only things 
we haven't tried are slowly shifting the data onto a seperate slice, 
shifting the volume bit by bit, trying to have apache run as root 
temporarily or replacing the HD with a larger one (the latter being the 
least viable).


Sincerely,
Elliot Crosby-McCullough
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]