Cloning a Debian system - identical packages and versions

Posted by telent on Wed 15 Jun 2011 at 19:14

I have long wished for the ability to install a Debian system specifying both the package list and the exact versions of the packages installed. dpkg --get-selections | ssh newhost dpkg --set-selections is useful but always chooses the latest version, and especially when using testing or unstable, it is sometimes necessary to temporarily downgrade a package from the latest version available.

( Read 418 more words ~ 12 comments posted )

Changing a users password inside a script

Posted by Steve on Mon 30 May 2011 at 15:05

In an ideal world you'd never need to change the password associated with a user account without using passwd, but there are times when it is helpful to script such things.

( Read 179 more words ~ 16 comments posted )

Directory/File synchronization across systems

Posted by lloyd on Thu 21 Apr 2011 at 16:26
Tags: ,

Both Debian Lenny and the system I've been running it on are now long in the tooth. So I've just brought up a Debian Squeeze-based system on a new and more capable box. I'd like to keep files in sync across the two hosts and would look for suggestions on doing that.

( Read 172 more words ~ 22 comments posted )

Building a Debian package for the latest version of nginx

Posted by kveroneau on Mon 21 Mar 2011 at 10:32

As Debian Lenny has a really outdated version of Engine X available, I took some time to update the package and compile it and note how it is done here for future references to anybody who needs to update an existing Debian package to use themselves.

( Read 409 more words ~ 8 comments posted )

PCI Compliance and openssl-1.0.0c

Posted by SpiesInOrbit on Wed 9 Mar 2011 at 08:20

For some, the stable biased Debian is too conservative and apparently OpenSSL has a bug that breaks PCI compliance.

( Read 386 more words ~ 6 comments posted )

Creating dynamic volumes with loop devices

Posted by banchieri on Thu 20 Jan 2011 at 09:52

Recently, my focus of interest turned to volume management. Since with Linux, LVM2 seems to be the only viable solution (unless you go for cluster filesystems), I started reading about LVM. Somewhere, I read about setting up a loop device as PV and that's where I got intrigued: Couldn't I just use a sparse file with one single large hole and let my ext4 fill that when there's actually something written onto the loop device?

( Read 199 more words ~ 37 comments posted )

Installing an encrypted openvpn on Lenny

Posted by pj on Mon 17 Jan 2011 at 22:00
Tags:

This article documents installing an encrypted openvpn server upon the Lenny release of Debian - read on for the motivation & documentation.

( Read 1620 more words ~ 7 comments posted )

Enabling HTTP Strict Transport Security on debian servers

Posted by dkg on Thu 16 Dec 2010 at 10:48
Tags: ,

I just enabled HTTP Strict Transport Security (HSTS) markers on a bunch of web servers that offer HTTPS.

( Read 192 more words ~ 14 comments posted )

A transient /var/log

Posted by mcortese on Thu 18 Nov 2010 at 20:01

So you're afraid of wearing out your SSD. Or you don't want to spin up a sleeping hard disk just to write a line of log. Or maybe you're just looking for some use for the disproportionate amount of RAM you've got. Whatever your case is, what you need is a way to keep the log files in memory as long as the system is up, and write them down to the regular storage just before shutdown.

( Read 1441 more words ~ 24 comments posted )

Publishing host services to OpenPGP with Monkeysphere

Posted by drgraefy on Wed 20 Oct 2010 at 10:22

The Monkeysphere Project aims to put authentication on the web back into the hands of web users through the use of the OpenPGP Web of Trust (WoT). Instead of purchasing certifications from the certificate authority cartel, or offering uncertified keys for services, admins can use the Monkeysphere tools to make OpenPGP certificates for their services, publish the certificates to the WoT, and then certify it themselves.

( Read 818 more words ~ 2 comments posted )