{"id":201,"date":"2010-08-12T15:06:03","date_gmt":"2010-08-12T13:06:03","guid":{"rendered":""},"modified":"2010-09-21T11:34:24","modified_gmt":"2010-09-21T09:34:24","slug":"0402-konfiguracja-kontenera-st1","status":"publish","type":"post","link":"https:\/\/drfugazi.eu.org\/en\/0402-konfiguracja-kontenera-st1\/","title":{"rendered":"04.02 Konfiguracja kontenera st1"},"content":{"rendered":"

Po instalacji kontenera i wst\u0119pnym skonfigurowaniu \u015brodowiska, sieci itp. czas przyjrze\u0107 si\u0119 temu co domy\u015blnie dzia\u0142a i wy\u0142\u0105czy\u0107 zb\u0119dne us\u0142ugi. Wcze\u015bniej jednak ustawi\u0119 sobie wygodniejsze \u015brodowisko do pracy zmieniaj\u0105c shella i katalog domowy roota. U\u017cyj\u0119 do tego GNU seda<\/b> (gsed), kt\u00f3rego ju\u017c wcze\u015bniej poleca\u0142em zainstalowa\u0107 wraz z innymi narz\u0119dziami GNU u\u0142atwiaj\u0105cymi prac\u0119. Pami\u0119tacie mam nadziej\u0119, \u017ce \/usr\/local<\/code> jest dziedziczone ze strefy globalnej w trybie tylko do odczytu.<\/p>\n

\r\nroot@feniks:~# cp \/etc\/zshrc \/zones\/st1\/root\/etc\r\nroot@feniks:~# zlogin st1 \r\n[Connected to zone 'st1' pts\/4]\r\nSun Microsystems Inc.\tSunOS 5.10\tGeneric\tJanuary 2005\r\n# mkdir \/root\r\n# \/usr\/local\/bin\/gsed -i \"\/^root:\/ s\/:\\\/:\\\/sbin\\\/sh\/:\\\/root:\\\/bin\\\/zsh\/\" \/etc\/passwd\r\n# echo \"PATH=\/usr\/local\/apache\/bin:\/usr\/local\/bin:$PATH\" >> \/etc\/zshrc\r\n# echo \"export PATH\" >> \/etc\/zshrc\r\n# mv \/.sunw \/root\r\n# exit\r\n<\/pre>\n
Przy kolejnym logowaniu zostanie ju\u017c uruchomiona pow\u0142oka \/bin\/zsh<\/code> i wczytany plik \/etc\/zshrc<\/code>, kt\u00f3ry sobie skopiowa\u0142em wcze\u015bniej ze strefy globalnej i ustawi\u0142em w nim \u015bcie\u017cki (na ko\u0144cu). Oczywi\u015bcie zsh jest przyk\u0142adowy, ja akurat u\u017cywam tego, mo\u017cecie u\u017cy\u0107 basha, czy co tam kto lubi. <\/p>\n
\r\nroot@feniks:~# zlogin st1\r\n[Connected to zone 'st1' pts\/4]\r\nLast login: Thu Aug 12 13:40:01 on pts\/4\r\nroot@st1:~# mv \/.histfile \/root\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.111                               Idle\r\n      *.*                                 Unbound\r\n      *.46901                             Idle\r\n      *.*                                 Unbound\r\n      *.*                                 Unbound\r\n      *.46902                             Idle\r\n      *.4045                              Idle\r\n      *.6481                              Idle\r\n      *.46922                             Idle\r\n      *.46923                             Idle\r\n      *.46925                             Idle\r\n      *.514                               Idle\r\n\r\nUDP: IPv6\r\n   Local Address                     Remote Address                   State      If\r\n--------------------------------- --------------------------------- ---------- -----\r\n      *.6481                                                        Idle       \r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.111                *.*                0      0 49152      0 LISTEN\r\n      *.*                  *.*                0      0 49152      0 IDLE\r\n      *.43667              *.*                0      0 49152      0 LISTEN\r\n      *.43668              *.*                0      0 49152      0 LISTEN\r\n      *.4045               *.*                0      0 49152      0 LISTEN\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.514                *.*                0      0 49152      0 LISTEN\r\n      *.6481               *.*                0      0 49152      0 LISTEN\r\n      *.513                *.*                0      0 49152      0 LISTEN\r\n      *.43669              *.*                0      0 49152      0 LISTEN\r\n      *.79                 *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.23                 *.*                0      0 49152      0 LISTEN\r\n      *.43712              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.43706            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.514                             *.*                             0      0 49152      0 LISTEN      \r\n      *.513                             *.*                             0      0 49152      0 LISTEN      \r\n      *.79                              *.*                             0      0 49152      0 LISTEN      \r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n      *.23                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n60039b36758 stream-ord 30077930300 00000000 \/var\/run\/.inetd.uds \r\n<\/pre>\n
Sporo tych otwartych port\u00f3w, nie wygl\u0105da to za dobrze, po co komu na przyk\u0142ad telnet? Oczywi\u015bcie je\u015bli wst\u0119pna konfiguracja dokonywana by\u0142a przez plik sysidcfg<\/code>, to mo\u017cna by\u0142o od razu tam okre\u015bli\u0107 profil jako limited_net i tym samym ograniczy\u0107 uruchamiane us\u0142ugi. Je\u015bli jednak konfigurowali\u015bmy “z palca”, to b\u0119dzie to wygl\u0105da\u0107 mniej-wi\u0119cej tak jak powy\u017cej. Mo\u017cna by wy\u0142\u0105cza\u0107 to pojedynczo u\u017cywaj\u0105c polece\u0144 svcadm<\/code>, bo trzeba pami\u0119ta\u0107, \u017ce us\u0142ugi te uruchamiane s\u0105 przez kolejn\u0105 nowink\u0119 z Solarisa 10 czyli Service Management Facility<\/b> (w skr\u00f3cie SMF).<\/p>\n
\r\nroot@st1:~# svcs\r\nSTATE          STIME    FMRI\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S20sysetup\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S72autoinstall\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S73cachefs_daemon\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S89PRESERVE\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S98deallocate\r\nlegacy_run     15:41:36 lrc:\/etc\/rc3_d\/S16boot_server\r\ndisabled       15:41:35 svc:\/system\/filesystem\/volfs:default\r\nonline         15:41:31 svc:\/system\/svc\/restarter:default\r\nonline         15:41:31 svc:\/system\/filesystem\/root:default\r\nonline         15:41:31 svc:\/network\/loopback:default\r\nonline         15:41:32 svc:\/network\/pfil:default\r\nonline         15:41:32 svc:\/system\/boot-archive:default\r\nonline         15:41:32 svc:\/system\/installupdates:default\r\nonline         15:41:32 svc:\/network\/physical:default\r\nonline         15:41:32 svc:\/system\/filesystem\/usr:default\r\nonline         15:41:33 svc:\/system\/identity:node\r\nonline         15:41:33 svc:\/system\/keymap:default\r\nonline         15:41:33 svc:\/system\/device\/local:default\r\nonline         15:41:33 svc:\/milestone\/devices:default\r\nonline         15:41:33 svc:\/system\/filesystem\/minimal:default\r\nonline         15:41:33 svc:\/system\/cluster\/cl_boot_check:default\r\nonline         15:41:33 svc:\/system\/name-service-cache:default\r\nonline         15:41:33 svc:\/system\/rmtmpfiles:default\r\nonline         15:41:33 svc:\/system\/cryptosvc:default\r\nonline         15:41:33 svc:\/system\/identity:domain\r\nonline         15:41:33 svc:\/network\/ipsec\/ipsecalgs:default\r\nonline         15:41:33 svc:\/system\/pkgserv:default\r\nonline         15:41:33 svc:\/network\/ipsec\/policy:default\r\nonline         15:41:33 svc:\/system\/manifest-import:default\r\nonline         15:41:33 svc:\/system\/coreadm:default\r\nonline         15:41:33 svc:\/system\/patchchk:default\r\nonline         15:41:33 svc:\/milestone\/network:default\r\nonline         15:41:33 svc:\/milestone\/single-user:default\r\nonline         15:41:33 svc:\/network\/initial:default\r\nonline         15:41:33 svc:\/network\/routing-setup:default\r\nonline         15:41:33 svc:\/system\/filesystem\/local:default\r\nonline         15:41:33 svc:\/network\/service:default\r\nonline         15:41:33 svc:\/network\/shares\/group:default\r\nonline         15:41:34 svc:\/network\/dns\/client:default\r\nonline         15:41:34 svc:\/system\/sysidtool:net\r\nonline         15:41:34 svc:\/system\/boot-archive-update:default\r\nonline         15:41:34 svc:\/milestone\/name-services:default\r\nonline         15:41:34 svc:\/network\/rpc\/bind:default\r\nonline         15:41:34 svc:\/system\/cron:default\r\nonline         15:41:34 svc:\/network\/nfs\/mapid:default\r\nonline         15:41:34 svc:\/network\/nfs\/cbd:default\r\nonline         15:41:34 svc:\/system\/sysidtool:system\r\nonline         15:41:34 svc:\/network\/nfs\/status:default\r\nonline         15:41:34 svc:\/milestone\/sysconfig:default\r\nonline         15:41:34 svc:\/network\/nfs\/nlockmgr:default\r\nonline         15:41:34 svc:\/application\/stosreg:default\r\nonline         15:41:34 svc:\/system\/sac:default\r\nonline         15:41:34 svc:\/network\/inetd:default\r\nonline         15:41:34 svc:\/application\/management\/wbem:default\r\nonline         15:41:34 svc:\/system\/utmp:default\r\nonline         15:41:35 svc:\/network\/rpc\/gss:default\r\nonline         15:41:35 svc:\/network\/security\/ktkt_warn:default\r\nonline         15:41:35 svc:\/network\/shell:default\r\nonline         15:41:35 svc:\/network\/stlisten:default\r\nonline         15:41:35 svc:\/network\/stdiscover:default\r\nonline         15:41:35 svc:\/network\/nfs\/client:default\r\nonline         15:41:35 svc:\/network\/login:rlogin\r\nonline         15:41:35 svc:\/network\/rpc\/rusers:default\r\nonline         15:41:35 svc:\/network\/rpc\/rstat:default\r\nonline         15:41:35 svc:\/system\/filesystem\/autofs:default\r\nonline         15:41:35 svc:\/network\/rpc\/smserver:default\r\nonline         15:41:35 svc:\/network\/nfs\/rquota:default\r\nonline         15:41:35 svc:\/network\/finger:default\r\nonline         15:41:35 svc:\/network\/ssh:default\r\nonline         15:41:35 svc:\/system\/system-log:default\r\nonline         15:41:35 svc:\/network\/telnet:default\r\nonline         15:41:35 svc:\/network\/rpc-100235_1\/rpc_ticotsord:default\r\nonline         15:41:36 svc:\/milestone\/multi-user:default\r\nonline         15:41:36 svc:\/milestone\/multi-user-server:default\r\nonline         15:41:47 svc:\/system\/webconsole:console\r\nonline         15:50:44 svc:\/system\/console-login:default\r\n<\/pre>\n
Du\u017co tego i niby sk\u0105d wiedzie\u0107 co nale\u017cy wy\u0142\u0105czy\u0107? Wszystkie procesy RPC? Finger, Telnet? Co jeszcze? Proponuj\u0119 zrobi\u0107 to inaczej, na pocz\u0105tek zastosujmy profil limited_net<\/code> i sprawd\u017amy co si\u0119 stanie:<\/p>\n
\r\nroot@st1:~# svccfg apply \/var\/svc\/profile\/generic_limited_net.xml\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.111                               Idle\r\n      *.*                                 Unbound\r\n      *.46901                             Idle\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.111                *.*                0      0 49152      0 LISTEN\r\n      *.*                  *.*                0      0 49152      0 IDLE\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.43712              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.43706            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n60039b36758 stream-ord 30077930300 00000000 \/var\/run\/.inetd.uds \r\n<\/pre>\n
Ju\u017c lepiej, ale to jeszcze nie wszystko. Wyrzu\u0107my jeszcze rpc\/* je\u015bli nie s\u0105 potrzebne, autofs i volfs<\/p>\n
\r\nroot@st1:~# svcs|grep rpc                 \r\nonline         14:39:51 svc:\/network\/rpc\/bind:default\r\nonline         14:39:52 svc:\/network\/rpc\/gss:default\r\nonline         14:39:52 svc:\/network\/rpc\/smserver:default\r\nonline         14:39:52 svc:\/network\/rpc-100235_1\/rpc_ticotsord:default\r\nroot@st1:~# svcs|gawk '\/rpc\/ { print $3 }'|xargs svcadm disable\r\nroot@st1:~# svcs|grep rpc\r\nroot@st1:~# svcs -xv\r\nsvc:\/network\/rpc\/bind:default (RPC bindings)\r\n State: disabled since Thu Aug 12 14:46:32 2010\r\nReason: Disabled by an administrator.\r\n   See: http:\/\/sun.com\/msg\/SMF-8000-05\r\n   See: man -M \/usr\/share\/man -s 1M rpcbind\r\n   See: \/var\/svc\/log\/network-rpc-bind:default.log\r\nImpact: 1 dependent service is not running:\r\n        svc:\/system\/filesystem\/autofs:default\r\nroot@st1:~# svcadm disable autofs\r\nroot@st1:~# svcadm disable volfs\r\nroot@st1:~# svcs -xv\r\n<\/pre>\n
Z do\u015bwiadczenia podpowiem, \u017ce teraz warto wykona\u0107 reboot kontenera i sprawdzi\u0107 stan us\u0142ug po ponownym zalogowaniu<\/p>\n
\r\nroot@st1:~# reboot\r\n\r\n[Connection to zone 'st1' pts\/4 closed]\r\nroot@feniks:~# zlogin st1\r\n[Connected to zone 'st1' pts\/4]\r\nLast login: Thu Aug 12 14:47:55 on pts\/4\r\nroot@st1:~# svcs -xv            \r\nsvc:\/network\/security\/ktkt_warn:default (Kerberos V5 warning messages daemon)\r\n State: maintenance since Thu Aug 12 14:47:56 2010\r\nReason: Restarter svc:\/network\/inetd:default gave no explanation.\r\n   See: http:\/\/sun.com\/msg\/SMF-8000-9C\r\n   See: man -M \/usr\/share\/man -s 1M ktkt_warnd\r\nImpact: This service is not running.\r\n\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.40180              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.40174            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n30040ed8bd0 stream-ord 300397d2380 00000000 \/var\/run\/.inetd.uds\r\n<\/pre>\n
Je\u015bli nie b\u0119dziemy u\u017cywa\u0107 konsoli webowej do zarz\u0105dzania, to mo\u017cemy wy\u0142\u0105czy\u0107 r\u00f3wnie\u017c i te us\u0142ugi, no i tego demona od Kerberosa<\/p>\n
\r\nroot@st1:~# svcadm disable wbem webconsole\r\nroot@st1:~# svcadm disable ktkt_warn\r\nroot@st1:~# svcs -xv\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n3000a4dcd38 stream-ord 30022517c00 00000000 \/var\/run\/.inetd.uds\r\n<\/pre>\n
No to zosta\u0142 tylko syslog na 514\/UDP oraz SSH na porcie 22\/TCP. Oczywi\u015bcie je\u015bli b\u0119dziemy logowa\u0107 si\u0119 do kontenera tylko przez zlogin<\/code>, to SSH mo\u017cna te\u017c wy\u0142\u0105czy\u0107.<\/p>\n","protected":false},"excerpt":{"rendered":"
Po instalacji kontenera i wst\u0119pnym skonfigurowaniu \u015brodowiska, sieci itp. czas przyjrze\u0107 si\u0119 temu co domy\u015blnie dzia\u0142a i wy\u0142\u0105czy\u0107 zb\u0119dne us\u0142ugi. Wcze\u015bniej jednak ustawi\u0119 sobie wygodniejsze \u015brodowisko do pracy zmieniaj\u0105c shella i katalog domowy roota. U\u017cyj\u0119 do tego GNU seda<\/b> (gsed), kt\u00f3rego ju\u017c wcze\u015bniej poleca\u0142em zainstalowa\u0107 wraz z innymi narz\u0119dziami GNU u\u0142atwiaj\u0105cymi prac\u0119. Pami\u0119tacie mam nadziej\u0119, \u017ce \/usr\/local<\/code> jest dziedziczone ze strefy globalnej w trybie tylko do odczytu.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[],"tags":[30,9],"jetpack_publicize_connections":[],"acf":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7M9Tz-3f","jetpack-related-posts":[{"id":200,"url":"https:\/\/drfugazi.eu.org\/en\/0401-instalacja-kontenera-st1\/","url_meta":{"origin":201,"position":0},"title":"04.01 Instalacja kontenera st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"Tworzenie kontenera o nazwie st1, bez kontroli zasob\u00f3w, z dziedziczonymi katalogami standardowymi i dodatkowo z dziedziczonym \/usr\/local (w trybie tylko do odczytu). Skonfigurowane dwie karty sieciowe: qfe4 i qfe5 w trybie wsp\u00f3\u0142dzielonym oraz dodana pula ZFS (zpool) o nazwie studmail.","rel":"","context":"In \"Kontenery\"","block_context":{"text":"Kontenery","link":"https:\/\/drfugazi.eu.org\/en\/tag\/kontenery\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":203,"url":"https:\/\/drfugazi.eu.org\/en\/0402-configuration-container-st1\/","url_meta":{"origin":201,"position":1},"title":"04.02 Configuration of container st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"After installation and initial configuration of st1 container you need to look on working services and disable those, which are not necessary. But at first I will set up more comfortable environment to work. I will change default shell to zsh and home directory of root user. I will use\u2026","rel":"","context":"In \"Solaris\"","block_context":{"text":"Solaris","link":"https:\/\/drfugazi.eu.org\/en\/tag\/solaris\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":202,"url":"https:\/\/drfugazi.eu.org\/en\/0401-installation-container-st1\/","url_meta":{"origin":201,"position":2},"title":"04.01 Installation of container st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"Creation of container named st1, without resource control, with inherited standard directories and additionally inherited \/usr\/local dir (read only mode). Configured two network Quad Fast Ethernet cards: qfe4 and qfe5 in shared mode. Added ZFS pool (zpool) named studmail.","rel":"","context":"In \"Solaris\"","block_context":{"text":"Solaris","link":"https:\/\/drfugazi.eu.org\/en\/tag\/solaris\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":213,"url":"https:\/\/drfugazi.eu.org\/en\/jak-zamienic-w-kontenerze-dataset-na-lofs\/","url_meta":{"origin":201,"position":3},"title":"Jak zamieni\u0107 w kontenerze dataset na lofs","author":"drfugazi","date":"Tuesday August 17th, 2010","format":false,"excerpt":"Poniewa\u017c konfiguruj\u0119 system pocztowy, potrzebuj\u0119 wyeksportowa\u0107 filesystem ZFS przez NFS do innego noda, gdzie postfix poprzez delivera b\u0119dzie zapisywa\u0142 wiadomo\u015bci do skrzynek. Jak wida\u0107 w tym zapisie sesji, skonfigurowa\u0142em ca\u0142\u0105 zpoole \"studmail\" jako dataset ZFS dla kontenera st1. Niestety w prosty spos\u00f3b nie da si\u0119 wsp\u00f3\u0142dzieli\u0107 systemu plik\u00f3w ZFS przez\u2026","rel":"","context":"In \"Kontenery\"","block_context":{"text":"Kontenery","link":"https:\/\/drfugazi.eu.org\/en\/tag\/kontenery\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":216,"url":"https:\/\/drfugazi.eu.org\/en\/dovecot-203\/","url_meta":{"origin":201,"position":4},"title":"dovecot-2.0.3","author":"drfugazi","date":"Tuesday September 21st, 2010","format":false,"excerpt":"Dovecot jest Open Sourceowym serwerem IMAP i POP3 dla system\u00f3w Linux\/UNIX, napisanym z naciskiem na bezpiecze\u0144stwo. Dovecot jest doskona\u0142ym wyborem zar\u00f3wno dla ma\u0142ych jak i wielkich instalacji. Jest szybki, \u0142atwy do ustawienia, nie wymaga specjalnej administracji i u\u017cywa niewiele pami\u0119ci. \u0179r\u00f3d\u0142o: http:\/\/dovecot.org\/ Poni\u017cej znajdziecie zapis sesji konfiguracji i kompilacji serwera\u2026","rel":"","context":"In \"Dovecot\"","block_context":{"text":"Dovecot","link":"https:\/\/drfugazi.eu.org\/en\/tag\/dovecot\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":219,"url":"https:\/\/drfugazi.eu.org\/en\/dovecot-203\/","url_meta":{"origin":201,"position":5},"title":"dovecot-2.0.3","author":"drfugazi","date":"Wednesday October  6th, 2010","format":false,"excerpt":"Dovecot is an open source IMAP and POP3 email server for Linux\/UNIX-like systems, written with security primarily in mind. Dovecot is an excellent choice for both small and large installations. It's fast, simple to set up, requires no special administration and it uses very little memory. Source: http:\/\/dovecot.org\/ Below you\u2026","rel":"","context":"In \"Mail system\"","block_context":{"text":"Mail system","link":"https:\/\/drfugazi.eu.org\/en\/tag\/mail_system\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts\/201"}],"collection":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/comments?post=201"}],"version-history":[{"count":0,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts\/201\/revisions"}],"wp:attachment":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/media?parent=201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/categories?post=201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/tags?post=201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}