{"id":201,"date":"2010-08-12T15:06:03","date_gmt":"2010-08-12T13:06:03","guid":{"rendered":""},"modified":"2010-09-21T11:34:24","modified_gmt":"2010-09-21T09:34:24","slug":"0402-konfiguracja-kontenera-st1","status":"publish","type":"post","link":"https:\/\/drfugazi.eu.org\/en\/0402-konfiguracja-kontenera-st1\/","title":{"rendered":"04.02 Konfiguracja kontenera st1"},"content":{"rendered":"

Po instalacji kontenera i wst\u0119pnym skonfigurowaniu \u015brodowiska, sieci itp. czas przyjrze\u0107 si\u0119 temu co domy\u015blnie dzia\u0142a i wy\u0142\u0105czy\u0107 zb\u0119dne us\u0142ugi. Wcze\u015bniej jednak ustawi\u0119 sobie wygodniejsze \u015brodowisko do pracy zmieniaj\u0105c shella i katalog domowy roota. U\u017cyj\u0119 do tego GNU seda<\/b> (gsed), kt\u00f3rego ju\u017c wcze\u015bniej poleca\u0142em zainstalowa\u0107 wraz z innymi narz\u0119dziami GNU u\u0142atwiaj\u0105cymi prac\u0119. Pami\u0119tacie mam nadziej\u0119, \u017ce \/usr\/local<\/code> jest dziedziczone ze strefy globalnej w trybie tylko do odczytu.<\/p>\n

\r\nroot@feniks:~# cp \/etc\/zshrc \/zones\/st1\/root\/etc\r\nroot@feniks:~# zlogin st1 \r\n[Connected to zone 'st1' pts\/4]\r\nSun Microsystems Inc.\tSunOS 5.10\tGeneric\tJanuary 2005\r\n# mkdir \/root\r\n# \/usr\/local\/bin\/gsed -i \"\/^root:\/ s\/:\\\/:\\\/sbin\\\/sh\/:\\\/root:\\\/bin\\\/zsh\/\" \/etc\/passwd\r\n# echo \"PATH=\/usr\/local\/apache\/bin:\/usr\/local\/bin:$PATH\" >> \/etc\/zshrc\r\n# echo \"export PATH\" >> \/etc\/zshrc\r\n# mv \/.sunw \/root\r\n# exit\r\n<\/pre>\n
Przy kolejnym logowaniu zostanie ju\u017c uruchomiona pow\u0142oka \/bin\/zsh<\/code> i wczytany plik \/etc\/zshrc<\/code>, kt\u00f3ry sobie skopiowa\u0142em wcze\u015bniej ze strefy globalnej i ustawi\u0142em w nim \u015bcie\u017cki (na ko\u0144cu). Oczywi\u015bcie zsh jest przyk\u0142adowy, ja akurat u\u017cywam tego, mo\u017cecie u\u017cy\u0107 basha, czy co tam kto lubi. <\/p>\n
\r\nroot@feniks:~# zlogin st1\r\n[Connected to zone 'st1' pts\/4]\r\nLast login: Thu Aug 12 13:40:01 on pts\/4\r\nroot@st1:~# mv \/.histfile \/root\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.111                               Idle\r\n      *.*                                 Unbound\r\n      *.46901                             Idle\r\n      *.*                                 Unbound\r\n      *.*                                 Unbound\r\n      *.46902                             Idle\r\n      *.4045                              Idle\r\n      *.6481                              Idle\r\n      *.46922                             Idle\r\n      *.46923                             Idle\r\n      *.46925                             Idle\r\n      *.514                               Idle\r\n\r\nUDP: IPv6\r\n   Local Address                     Remote Address                   State      If\r\n--------------------------------- --------------------------------- ---------- -----\r\n      *.6481                                                        Idle       \r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.111                *.*                0      0 49152      0 LISTEN\r\n      *.*                  *.*                0      0 49152      0 IDLE\r\n      *.43667              *.*                0      0 49152      0 LISTEN\r\n      *.43668              *.*                0      0 49152      0 LISTEN\r\n      *.4045               *.*                0      0 49152      0 LISTEN\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.514                *.*                0      0 49152      0 LISTEN\r\n      *.6481               *.*                0      0 49152      0 LISTEN\r\n      *.513                *.*                0      0 49152      0 LISTEN\r\n      *.43669              *.*                0      0 49152      0 LISTEN\r\n      *.79                 *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.23                 *.*                0      0 49152      0 LISTEN\r\n      *.43712              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.43706            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.514                             *.*                             0      0 49152      0 LISTEN      \r\n      *.513                             *.*                             0      0 49152      0 LISTEN      \r\n      *.79                              *.*                             0      0 49152      0 LISTEN      \r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n      *.23                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n60039b36758 stream-ord 30077930300 00000000 \/var\/run\/.inetd.uds \r\n<\/pre>\n
Sporo tych otwartych port\u00f3w, nie wygl\u0105da to za dobrze, po co komu na przyk\u0142ad telnet? Oczywi\u015bcie je\u015bli wst\u0119pna konfiguracja dokonywana by\u0142a przez plik sysidcfg<\/code>, to mo\u017cna by\u0142o od razu tam okre\u015bli\u0107 profil jako limited_net i tym samym ograniczy\u0107 uruchamiane us\u0142ugi. Je\u015bli jednak konfigurowali\u015bmy “z palca”, to b\u0119dzie to wygl\u0105da\u0107 mniej-wi\u0119cej tak jak powy\u017cej. Mo\u017cna by wy\u0142\u0105cza\u0107 to pojedynczo u\u017cywaj\u0105c polece\u0144 svcadm<\/code>, bo trzeba pami\u0119ta\u0107, \u017ce us\u0142ugi te uruchamiane s\u0105 przez kolejn\u0105 nowink\u0119 z Solarisa 10 czyli Service Management Facility<\/b> (w skr\u00f3cie SMF).<\/p>\n
\r\nroot@st1:~# svcs\r\nSTATE          STIME    FMRI\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S20sysetup\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S72autoinstall\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S73cachefs_daemon\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S89PRESERVE\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S98deallocate\r\nlegacy_run     15:41:36 lrc:\/etc\/rc3_d\/S16boot_server\r\ndisabled       15:41:35 svc:\/system\/filesystem\/volfs:default\r\nonline         15:41:31 svc:\/system\/svc\/restarter:default\r\nonline         15:41:31 svc:\/system\/filesystem\/root:default\r\nonline         15:41:31 svc:\/network\/loopback:default\r\nonline         15:41:32 svc:\/network\/pfil:default\r\nonline         15:41:32 svc:\/system\/boot-archive:default\r\nonline         15:41:32 svc:\/system\/installupdates:default\r\nonline         15:41:32 svc:\/network\/physical:default\r\nonline         15:41:32 svc:\/system\/filesystem\/usr:default\r\nonline         15:41:33 svc:\/system\/identity:node\r\nonline         15:41:33 svc:\/system\/keymap:default\r\nonline         15:41:33 svc:\/system\/device\/local:default\r\nonline         15:41:33 svc:\/milestone\/devices:default\r\nonline         15:41:33 svc:\/system\/filesystem\/minimal:default\r\nonline         15:41:33 svc:\/system\/cluster\/cl_boot_check:default\r\nonline         15:41:33 svc:\/system\/name-service-cache:default\r\nonline         15:41:33 svc:\/system\/rmtmpfiles:default\r\nonline         15:41:33 svc:\/system\/cryptosvc:default\r\nonline         15:41:33 svc:\/system\/identity:domain\r\nonline         15:41:33 svc:\/network\/ipsec\/ipsecalgs:default\r\nonline         15:41:33 svc:\/system\/pkgserv:default\r\nonline         15:41:33 svc:\/network\/ipsec\/policy:default\r\nonline         15:41:33 svc:\/system\/manifest-import:default\r\nonline         15:41:33 svc:\/system\/coreadm:default\r\nonline         15:41:33 svc:\/system\/patchchk:default\r\nonline         15:41:33 svc:\/milestone\/network:default\r\nonline         15:41:33 svc:\/milestone\/single-user:default\r\nonline         15:41:33 svc:\/network\/initial:default\r\nonline         15:41:33 svc:\/network\/routing-setup:default\r\nonline         15:41:33 svc:\/system\/filesystem\/local:default\r\nonline         15:41:33 svc:\/network\/service:default\r\nonline         15:41:33 svc:\/network\/shares\/group:default\r\nonline         15:41:34 svc:\/network\/dns\/client:default\r\nonline         15:41:34 svc:\/system\/sysidtool:net\r\nonline         15:41:34 svc:\/system\/boot-archive-update:default\r\nonline         15:41:34 svc:\/milestone\/name-services:default\r\nonline         15:41:34 svc:\/network\/rpc\/bind:default\r\nonline         15:41:34 svc:\/system\/cron:default\r\nonline         15:41:34 svc:\/network\/nfs\/mapid:default\r\nonline         15:41:34 svc:\/network\/nfs\/cbd:default\r\nonline         15:41:34 svc:\/system\/sysidtool:system\r\nonline         15:41:34 svc:\/network\/nfs\/status:default\r\nonline         15:41:34 svc:\/milestone\/sysconfig:default\r\nonline         15:41:34 svc:\/network\/nfs\/nlockmgr:default\r\nonline         15:41:34 svc:\/application\/stosreg:default\r\nonline         15:41:34 svc:\/system\/sac:default\r\nonline         15:41:34 svc:\/network\/inetd:default\r\nonline         15:41:34 svc:\/application\/management\/wbem:default\r\nonline         15:41:34 svc:\/system\/utmp:default\r\nonline         15:41:35 svc:\/network\/rpc\/gss:default\r\nonline         15:41:35 svc:\/network\/security\/ktkt_warn:default\r\nonline         15:41:35 svc:\/network\/shell:default\r\nonline         15:41:35 svc:\/network\/stlisten:default\r\nonline         15:41:35 svc:\/network\/stdiscover:default\r\nonline         15:41:35 svc:\/network\/nfs\/client:default\r\nonline         15:41:35 svc:\/network\/login:rlogin\r\nonline         15:41:35 svc:\/network\/rpc\/rusers:default\r\nonline         15:41:35 svc:\/network\/rpc\/rstat:default\r\nonline         15:41:35 svc:\/system\/filesystem\/autofs:default\r\nonline         15:41:35 svc:\/network\/rpc\/smserver:default\r\nonline         15:41:35 svc:\/network\/nfs\/rquota:default\r\nonline         15:41:35 svc:\/network\/finger:default\r\nonline         15:41:35 svc:\/network\/ssh:default\r\nonline         15:41:35 svc:\/system\/system-log:default\r\nonline         15:41:35 svc:\/network\/telnet:default\r\nonline         15:41:35 svc:\/network\/rpc-100235_1\/rpc_ticotsord:default\r\nonline         15:41:36 svc:\/milestone\/multi-user:default\r\nonline         15:41:36 svc:\/milestone\/multi-user-server:default\r\nonline         15:41:47 svc:\/system\/webconsole:console\r\nonline         15:50:44 svc:\/system\/console-login:default\r\n<\/pre>\n
Du\u017co tego i niby sk\u0105d wiedzie\u0107 co nale\u017cy wy\u0142\u0105czy\u0107? Wszystkie procesy RPC? Finger, Telnet? Co jeszcze? Proponuj\u0119 zrobi\u0107 to inaczej, na pocz\u0105tek zastosujmy profil limited_net<\/code> i sprawd\u017amy co si\u0119 stanie:<\/p>\n
\r\nroot@st1:~# svccfg apply \/var\/svc\/profile\/generic_limited_net.xml\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.111                               Idle\r\n      *.*                                 Unbound\r\n      *.46901                             Idle\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.111                *.*                0      0 49152      0 LISTEN\r\n      *.*                  *.*                0      0 49152      0 IDLE\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.43712              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.43706            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n60039b36758 stream-ord 30077930300 00000000 \/var\/run\/.inetd.uds \r\n<\/pre>\n
Ju\u017c lepiej, ale to jeszcze nie wszystko. Wyrzu\u0107my jeszcze rpc\/* je\u015bli nie s\u0105 potrzebne, autofs i volfs<\/p>\n
\r\nroot@st1:~# svcs|grep rpc                 \r\nonline         14:39:51 svc:\/network\/rpc\/bind:default\r\nonline         14:39:52 svc:\/network\/rpc\/gss:default\r\nonline         14:39:52 svc:\/network\/rpc\/smserver:default\r\nonline         14:39:52 svc:\/network\/rpc-100235_1\/rpc_ticotsord:default\r\nroot@st1:~# svcs|gawk '\/rpc\/ { print $3 }'|xargs svcadm disable\r\nroot@st1:~# svcs|grep rpc\r\nroot@st1:~# svcs -xv\r\nsvc:\/network\/rpc\/bind:default (RPC bindings)\r\n State: disabled since Thu Aug 12 14:46:32 2010\r\nReason: Disabled by an administrator.\r\n   See: http:\/\/sun.com\/msg\/SMF-8000-05\r\n   See: man -M \/usr\/share\/man -s 1M rpcbind\r\n   See: \/var\/svc\/log\/network-rpc-bind:default.log\r\nImpact: 1 dependent service is not running:\r\n        svc:\/system\/filesystem\/autofs:default\r\nroot@st1:~# svcadm disable autofs\r\nroot@st1:~# svcadm disable volfs\r\nroot@st1:~# svcs -xv\r\n<\/pre>\n
Z do\u015bwiadczenia podpowiem, \u017ce teraz warto wykona\u0107 reboot kontenera i sprawdzi\u0107 stan us\u0142ug po ponownym zalogowaniu<\/p>\n
\r\nroot@st1:~# reboot\r\n\r\n[Connection to zone 'st1' pts\/4 closed]\r\nroot@feniks:~# zlogin st1\r\n[Connected to zone 'st1' pts\/4]\r\nLast login: Thu Aug 12 14:47:55 on pts\/4\r\nroot@st1:~# svcs -xv            \r\nsvc:\/network\/security\/ktkt_warn:default (Kerberos V5 warning messages daemon)\r\n State: maintenance since Thu Aug 12 14:47:56 2010\r\nReason: Restarter svc:\/network\/inetd:default gave no explanation.\r\n   See: http:\/\/sun.com\/msg\/SMF-8000-9C\r\n   See: man -M \/usr\/share\/man -s 1M ktkt_warnd\r\nImpact: This service is not running.\r\n\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.40180              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.40174            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n30040ed8bd0 stream-ord 300397d2380 00000000 \/var\/run\/.inetd.uds\r\n<\/pre>\n
Je\u015bli nie b\u0119dziemy u\u017cywa\u0107 konsoli webowej do zarz\u0105dzania, to mo\u017cemy wy\u0142\u0105czy\u0107 r\u00f3wnie\u017c i te us\u0142ugi, no i tego demona od Kerberosa<\/p>\n
\r\nroot@st1:~# svcadm disable wbem webconsole\r\nroot@st1:~# svcadm disable ktkt_warn\r\nroot@st1:~# svcs -xv\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n3000a4dcd38 stream-ord 30022517c00 00000000 \/var\/run\/.inetd.uds\r\n<\/pre>\n
No to zosta\u0142 tylko syslog na 514\/UDP oraz SSH na porcie 22\/TCP. Oczywi\u015bcie je\u015bli b\u0119dziemy logowa\u0107 si\u0119 do kontenera tylko przez zlogin<\/code>, to SSH mo\u017cna te\u017c wy\u0142\u0105czy\u0107.<\/p>\n","protected":false},"excerpt":{"rendered":"
Po instalacji kontenera i wst\u0119pnym skonfigurowaniu \u015brodowiska, sieci itp. czas przyjrze\u0107 si\u0119 temu co domy\u015blnie dzia\u0142a i wy\u0142\u0105czy\u0107 zb\u0119dne us\u0142ugi. Wcze\u015bniej jednak ustawi\u0119 sobie wygodniejsze \u015brodowisko do pracy zmieniaj\u0105c shella i katalog domowy roota. U\u017cyj\u0119 do tego GNU seda<\/b> (gsed), kt\u00f3rego ju\u017c wcze\u015bniej poleca\u0142em zainstalowa\u0107 wraz z innymi narz\u0119dziami GNU u\u0142atwiaj\u0105cymi prac\u0119. Pami\u0119tacie mam nadziej\u0119, \u017ce \/usr\/local<\/code> jest dziedziczone ze strefy globalnej w trybie tylko do odczytu.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[],"tags":[30,9],"jetpack_publicize_connections":[],"acf":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7M9Tz-3f","jetpack-related-posts":[{"id":200,"url":"https:\/\/drfugazi.eu.org\/en\/0401-instalacja-kontenera-st1\/","url_meta":{"origin":201,"position":0},"title":"04.01 Instalacja kontenera st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"Tworzenie kontenera o nazwie st1, bez kontroli zasob\u00f3w, z dziedziczonymi katalogami standardowymi i dodatkowo z dziedziczonym \/usr\/local (w trybie tylko do odczytu). Skonfigurowane dwie karty sieciowe: qfe4 i qfe5 w trybie wsp\u00f3\u0142dzielonym oraz dodana pula ZFS (zpool) o nazwie studmail.","rel":"","context":"In \"Kontenery\"","block_context":{"text":"Kontenery","link":"https:\/\/drfugazi.eu.org\/en\/tag\/kontenery\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":203,"url":"https:\/\/drfugazi.eu.org\/en\/0402-configuration-container-st1\/","url_meta":{"origin":201,"position":1},"title":"04.02 Configuration of container st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"After installation and initial configuration of st1 container you need to look on working services and disable those, which are not necessary. But at first I will set up more comfortable environment to work. I will change default shell to zsh and home directory of root user. I will use\u2026","rel":"","context":"In \"Solaris\"","block_context":{"text":"Solaris","link":"https:\/\/drfugazi.eu.org\/en\/tag\/solaris\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":202,"url":"https:\/\/drfugazi.eu.org\/en\/0401-installation-container-st1\/","url_meta":{"origin":201,"position":2},"title":"04.01 Installation of container st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"Creation of container named st1, without resource control, with inherited standard directories and additionally inherited \/usr\/local dir (read only mode). Configured two network Quad Fast Ethernet cards: qfe4 and qfe5 in shared mode. Added ZFS pool (zpool) named studmail.","rel":"","context":"In \"Solaris\"","block_context":{"text":"Solaris","link":"https:\/\/drfugazi.eu.org\/en\/tag\/solaris\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":213,"url":"https:\/\/drfugazi.eu.org\/en\/jak-zamienic-w-kontenerze-dataset-na-lofs\/","url_meta":{"origin":201,"position":3},"title":"Jak zamieni\u0107 w kontenerze dataset na lofs","author":"drfugazi","date":"Tuesday August 17th, 2010","format":false,"excerpt":"Poniewa\u017c konfiguruj\u0119 system pocztowy, potrzebuj\u0119 wyeksportowa\u0107 filesystem ZFS przez NFS do innego noda, gdzie postfix poprzez delivera b\u0119dzie zapisywa\u0142 wiadomo\u015bci do skrzynek. Jak wida\u0107 w tym zapisie sesji, skonfigurowa\u0142em ca\u0142\u0105 zpoole \"studmail\" jako dataset ZFS dla kontenera st1. Niestety w prosty spos\u00f3b nie da si\u0119 wsp\u00f3\u0142dzieli\u0107 systemu plik\u00f3w ZFS przez\u2026","rel":"","context":"In \"Kontenery\"","block_context":{"text":"Kontenery","link":"https:\/\/drfugazi.eu.org\/en\/tag\/kontenery\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":216,"url":"https:\/\/drfugazi.eu.org\/en\/dovecot-203\/","url_meta":{"origin":201,"position":4},"title":"dovecot-2.0.3","author":"drfugazi","date":"Tuesday September 21st, 2010","format":false,"excerpt":"Dovecot jest Open Sourceowym serwerem IMAP i POP3 dla system\u00f3w Linux\/UNIX, napisanym z naciskiem na bezpiecze\u0144stwo. Dovecot jest doskona\u0142ym wyborem zar\u00f3wno dla ma\u0142ych jak i wielkich instalacji. Jest szybki, \u0142atwy do ustawienia, nie wymaga specjalnej administracji i u\u017cywa niewiele pami\u0119ci. \u0179r\u00f3d\u0142o: http:\/\/dovecot.org\/ Poni\u017cej znajdziecie zapis sesji konfiguracji i kompilacji serwera\u2026","rel":"","context":"In \"Dovecot\"","block_context":{"text":"Dovecot","link":"https:\/\/drfugazi.eu.org\/en\/tag\/dovecot\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":212,"url":"https:\/\/drfugazi.eu.org\/en\/how-remove-dataset-solaris-zone-and-mount-it-lofs\/","url_meta":{"origin":201,"position":5},"title":"How to remove dataset from Solaris zone and mount it as lofs","author":"drfugazi","date":"Tuesday August 17th, 2010","format":false,"excerpt":"Because of building mail system I need to export ZFS filesystem via NFS to other node, where postfix with deliver will save messages to mail boxes. As you can see in this installation transcript I configured whole zpool \"studmail\" as ZFS dataset for zone st1. Unfortunatelly, you can not simply\u2026","rel":"","context":"In \"Solaris\"","block_context":{"text":"Solaris","link":"https:\/\/drfugazi.eu.org\/en\/tag\/solaris\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts\/201"}],"collection":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/comments?post=201"}],"version-history":[{"count":0,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts\/201\/revisions"}],"wp:attachment":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/media?parent=201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/categories?post=201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/tags?post=201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}