Thread: Re: when to unpack packages (was: Re: [Devil-linux-develop] Beta 6 :) Luv it, Lnx Society Meeting

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Hi,

the unmount script also has to take care, that swap is turned off as th=
e
last action when the system shuts down.

cu
  Heiko=

On 04/09/2002 11:25:20 AM "John van V." wrote:
>Hi all,
>
>One thing that has been on my mind, would there be an possibility of
>drawing in
>packages over the network using SSH.

You can already do that.
For me, I don't like the idea to get anything from another computer. ->=

IP-Spoofing, Man-in-the-middle-attack...

>
>I am also wondering about encapsulating configuration; WvDial is
>something we
>could really use, never used it before though.  And looks interesting.=
..

What do you mean with encapsulating configuration ?

cu
  Heiko=

On 04/09/2002 03:49:12 PM Friedrich Lobenstock wrote:
>On Mon, 8 Apr 2002 21:15, Heiko Zuerker wrote:
>
>> I would like to keep the installation of the packages inside Initrd.=

>> I planned to encrypt the tarballs of the packages, to make it harder=

>> for an intruder add software after he managed to break into the
>> system. Currently he has just to run tar -xzf
>> /cdrom/packages/XYZ.tar.gz .
>
>Ok, point taken. So you're right we need LVM (just /sbin/vgscan,
>/sbin/vgchange and libs) in the initrd.

Ok.

>> We could add only the really needed tools to initialize the LVM.
>> Or we could just work with symlinks to the SHMFS.
>
>I suggest we put chroot on the intial ramdisk then we run the LVM
>utilities chroot /dev/shm, so when we switch to the real root
>everything is in place.

Can you take care about that?

>
>BTW when you want to be more secure then we should get rid of the
>/etc/initrd dir and should not rely on possibly forgable scripts.

Good point.

cu
  Heiko=

On Tue, 9 Apr 2002 16:55, Heiko Zuerker wrote:

> >
> >Ok, point taken. So you're right we need LVM (just /sbin/vgscan,
> >/sbin/vgchange and libs) in the initrd.
>
> Ok.
>
> >I suggest we put chroot on the intial ramdisk then we run the LVM
> >utilities chroot /dev/shm, so when we switch to the real root
> >everything is in place.
>
> Can you take care about that?
>
> >BTW when you want to be more secure then we should get rid of the
> >/etc/initrd dir and should not rely on possibly forgable scripts.
>
> Good point.

I'd say we'd leave that for 0.6b1 - you know feature freeze, and that
would be new features.

I'll file a feature-request for 0.6 so we don't forget this.

-- 
MfG / Regards
Friedrich Lobenstock

Heiko Zuerker wrote:
> 
> the unmount script also has to take care, that swap is turned off as the
> last action when the system shuts down.

If a "devil-linux" harddisk is used:

# cat -n mountfs | head -n 139 | tail -n 10
   130                  if [ -e /sbin/vgscan -a -e /sbin/vgchange ]; then
   131
   132                          lvm_scan
   133
   134                          # check if swap on LVM is active then deactivate it
   135                          if [ $lv_swap -eq 1 ]; then
   136                                  echo "Deactivating swap on LVM"
   137                                  swapoff /dev/$vg_system/swap &> /dev/null
   138                                  evaluate_retval
   139                          fi

-- 
MfG / Regards
Friedrich Lobenstock

Hi all,

One thing that has been on my mind, would there be an possibility of drawing in
packages over the network using SSH.

I am also wondering about encapsulating configuration; WvDial is something we
could really use, never used it before though.  And looks interesting...

John

--- Heiko Zuerker <hz...@pr...> wrote:
> 
> Hi,
> 
> the unmount script also has to take care, that swap is turned off as the
> last action when the system shuts down.
> 
> cu
>   Heiko
> 
> 
> _______________________________________________
> Devil-linux-develop mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-develop

=====
John van Vlaanderen

      #############################################
      #    CXN, Inc. Contact:  jo...@th...   #               #
      #      Proud Sponsor of The Linux Society   #
      #        http://www.thelinuxsociety.org     #                 
      #############################################

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/