LVM and KVM

Description

In this project you need to build a VM for the following homeworks.

Deadline

Requirements

• A LVM logical volume under VG vmvg
  • Name with your student ID.
  • Size less than 30G.
• A fully operating Debian virtual machine
  • Memory 2G.
  • Network interface bridged to br0.
  • Disk bound to your LV (Logical Volume).
  • Text console ONLY, no graphical interfaces (don't install desktop environment).
  • Package repository set to testing distribution, and should be up-to-date.
  • Able to connect to console by using virsh console <vmname>.
  • Able to connect to your VM via IPv6 on CSIE workstations.

Instruction

1. Login to intern.csie.ntu.edu.tw with your student ID.
2. Use lvcreate to create your own LV (Logical Volume).
3. Use virt-install command to build your own VM.
4. Run updates.
5. Test ssh connection.
6. You have done!! Congratulations!!

Reference

• LVM
• VM_lifecycle
• KVM networking
• libvirt usage
• man virt-install

Hint

• Some parameter you may use in virt-install:

  --connect
  --name
  --ram
  --network
  --nographics
  --extra-args console=ttyS0
  --disk
  --location http://debian.csie.ntu.edu.tw/debian/dists/Debian7.1/main/installer-amd64/

NFS

Description

The project is pretty easy. You will know how to build the NFS server and client.

Deadline

Requirements

• Build your second kvm machine with name <studentID>-2 that can login by your LDAP accounts.
• Build a NFS server on your first machine, export your /home folder, and mount /home forder on your second machine using automount.

Reference

• Vbird NFS
• You can see /etc/auto.* on linuxX as reference.

Web server

Description

In this homework, you will learn

1. How to build web server with apache2 and lighttpd, and modify thier configuration.
2. How to use php/mysql.
3. Writing php page and link with mysql database.

Deadline

Requirements

In this homework, please work on your first machine.

• Install apache2 and lighttpd.
• Modify the apache2/lighttpd configuration
  • Make apache2 only serve https on port 443. ( DocumentRoot/ is /var/www )
  • Make lighttpd only serve http on port 80. ( DocumentRoot/ is /var/www )
  • Enable userdir module in both http/https services.

    Request /~USER/URL will link to /home/USER/public_html/URL

  • Enable php module in both service.

• Connect to our mysql server intern.csie.ntu.edu.tw

  • User Name: intern
  • Password: announce on wslab FB group.
  • Database: intern
  create your own table named your student ID. The structure is as follow:
  • id(int)
  • timestamp(datetime)
  • IP(varchar)
  • comment(varchar)

  You can using table example as template.

• Create simple web pages with the following features.
  • Put it under /var/www
  • Show the entries in your table in our database.
  • A function that can insert new entry with user-typing comment into your table.

Reference

• Vbird WWW server
• codeigniter user guide

Hint

• ssh tunnel
• text-based browser. e.g. lynx, w3m ...

Mail server

Description

In this homework, you will learn how to setup mail server.

This homework is extremely simplified, since the restricted environment.

Deadline

Requirements

In this homework, please work on your first machine.

• Read this page (you can skip the package install, configuration part and any related to sendmail server) You should understand the following:
  • MX records
  • SMTP, POP3, IMAP
  • Commands to interact with postfix daemon
• Install postfix. This will remove exim4, which is okay.
• Domain: use <student id>.csie.org as the domain your mail system. (mydestination)
• Receive mail: for every account.
• Send mail: use mail to send mail to other local account or outside domains addresses.
  (Note: you might not be able to send to domains outside since you don't have public IP and PTR record. Upon writing this requirements, sending to Gmail is okay.)
• Alias: setup an alias sal for your account using alias_maps.

Additional Requirements for 2014

• Configure postfix to write sasl_username to log files in order to identify mis-behaving accounts.
• Setup dovecot to let users download their mail using POP3 and IMAP protocols with TLS.
• Use dovecot mdbox instead of mbox to store users mail.
• Setup roundcube webmail.

Bonus for 2014

• Setup mail alias and mailing list using LDAP.
• Delete spam mail in mail queue and block mis-behaving accounts.
• Install software such as spamassassin, postgrey, amavis to reduce spam mail.

Reference

• Postfix Configuration Parameters

Hint

When install postfix, you can select "Internet site" for type, and config domain name.

You can test the result using the command mail rcpt@xxx.csie.org

You can view logs at /var/log/mail.log.

MRTG

Description

In this homework, you will learn how to setup bacic monitoring using Munin, and how to write your own plugins.

You can refer to 217's monitoring page for sample result.

Deadline

Requirements

In this homework, please work on your first machine and second machine.

On your first machine:

• Install munin and munin-node
• Setup dynamic graph and html generation (w/ CGI or FastCGI) on your web server (apache or lighttpd).
• Setup munin to monitor your second machine

On your second machine:

• Install munin-node
• Set whitelist IP of your first machine, so it can pull data.
• Write a plugin to monitor ping of www.ntu.edu.tw

Reference

• Munin's official documentation
• How to write Munin plugins
• Debugging Munin plugins
• Dynamic generation of munin graphs and html

Hint

• Files you may need to look at:

  /etc/munin/munin.conf
  /etc/munin/munin-node.conf
  /etc/munin/plugins/*
  

• A plugin is simply a executable/script that outputs to stdout; for example:

  $ ./a-plugin config
  graph_title Load average
  graph_vlabel load
  load.label load
  $ ./a-plugin
  load.value 0.08

• Your plugin will be run as the munin user (unless specified), so make sure all needed files are accessible from this user. You can test it by:

  # munin-run a-plugin config
  # munin-run a-plugin

• Make sure to do invoke-rc.d munin-node restart after any changes to configuration.
• You can utilize external programs to do this homework, eg. ping.
• munin-node defaults to listen on port 4949, you can telnet into and test it.

Must-knows but not required in this homework

If the system services have changed, you can run this command to re-detect monitor config:

# munin-node-configure --shell | bash