Code
wget https://git.kitenet.net/index.cgi/pdmenu.git/snapshot/pdmenu-1.3.6.tar.gz | |
tar xvzf pdmenu-1.3.6.tar.gz | |
cd pdmenu-1.3.6 | |
sudo apt install libslang2-dev debhelper libgpm-dev gettext descripts | |
dch -i | |
make debian |
This service depends on daemon package.
Download Minecraft server from official web site and extract it into /usr/local/share/minecraft directory.
Create minecraft.daemon containing:
Shell
#! /bin/bash | |
### BEGIN INIT INFO | |
# Provides: minecraft | |
# Required-Start: $remote_fs $syslog | |
# Required-Stop: $remote_fs $syslog | |
# Should-Start: $network | |
# Should-Stop: $network | |
# Default-Start: 2 3 4 5 | |
# Default-Stop: 0 1 6 | |
# Short-Description: minecraft initscript | |
# Description: Script to start and stop minecraft server. | |
### END INIT INFO | |
| |
# Author: Laurent Mazet | |
| |
# Do NOT "set -e" | |
| |
# PATH should only include /usr/* if it runs after the mountnfs.sh script | |
PATH=/sbin:/usr/sbin:/bin:/usr/bin | |
DESC="Minecraft server" | |
NAME=minecraft | |
USER=minecraft | |
CACHE=/var/cache/minecraft | |
DAEMON=/usr/local/share/minecraft/server.jar | |
MEMORY_MIN=1024M | |
MEMORY_MAX=1024M | |
DAEMON_ARGS="-Xms$MEMORY_MIN -Xmx$MEMORY_MAX" | |
PIDFILE=/var/run/$NAME/pid | |
LOGFILE=/var/log/$NAME.log | |
SCRIPTNAME=/etc/init.d/$NAME | |
| |
# Exit if the package is not installed | |
[ -f "$DAEMON" ] || exit 0 | |
| |
# Read configuration variable file if it is present | |
[ -r /etc/default/$NAME ] && . /etc/default/$NAME | |
| |
# Load the VERBOSE setting and other rcS variables | |
. /lib/init/vars.sh | |
| |
# Define LSB log_* functions. | |
# Depend on lsb-base (>= 3.0-6) to ensure that this file is present. | |
. /lib/lsb/init-functions | |
| |
# Do not start daemon if not wanted | |
[ "$SERVICE" = "no" -o "$SERVICE" = "NO" ] && exit 0 | |
| |
# | |
# Function that starts the daemon/service | |
# | |
do_start() | |
{ | |
[ -d $CACHE ] || mkdir $CACHE | |
chown -R $USER $CACHE | |
| |
# Init log files | |
if [ "$LOGFILE" ]; then | |
touch $LOGFILE | |
chown $USER $LOGFILE | |
DAEMON_LOGS="-l $LOGFILE -b $LOGFILE -o $LOGFILE" | |
fi | |
[ -d /var/log/$NAME ] || mkdir /var/log/$NAME | |
chown -R $USER /var/log/$NAME | |
| |
# Link own config files | |
for f in $DAEMON /etc/$NAME/*; do | |
[ -f $CACHE/$(basename $f) ] || ln -sf $f $CACHE | |
done | |
[ -e $CACHE/logs ] || ln -sf /var/log/$NAME $CACHE/logs | |
| |
export CLASSPATH=. | |
| |
PIDDIR=$(dirname $PIDFILE) | |
[ -d $PIDDIR ] || mkdir -p $PIDDIR | |
chown $USER $PIDDIR | |
| |
daemon --chdir $CACHE --name $NAME --pidfile $PIDFILE --user $USER \ | |
$DAEMON_LOGS \ | |
--respawn --acceptable 10 --attempts 2 --delay 30 -- \ | |
java $DAEMON_ARGS -jar $(basename $DAEMON) nogui | |
} | |
| |
# | |
# Function that stops the daemon/service | |
# | |
do_stop() | |
{ | |
daemon --stop --name $NAME --pidfile $PIDFILE | |
sleep 1 | |
PIDS=$(ps -u corlocmh -o pid=) | |
[ "$PIDS" ] && eval kill -SIGTERM $PIDS | |
} | |
| |
case "$1" in | |
start) | |
| |
[ "$VERBOSE" != yes ] && log_daemon_msg "Starting $DESC" "$NAME" | |
do_start | |
case "$?" in | |
0|1) [ "$VERBOSE" != yes ] && log_end_msg 0; RETVAL=0;; | |
2) [ "$VERBOSE" != yes ] && log_end_msg 1; RETVAL=1;; | |
esac | |
;; | |
stop) | |
do_stop | |
[ "$VERBOSE" != yes ] && log_daemon_msg "Stopping $DESC" "$NAME" | |
case "$?" in | |
0|1) [ "$VERBOSE" != yes ] && log_end_msg 0; RETVAL=0;; | |
2) [ "$VERBOSE" != yes ] && log_end_msg 1; RETVAL=1;; | |
esac | |
;; | |
status) | |
status_of_proc "$DAEMON" "$NAME" && exit 0 || exit $? | |
;; | |
restart|force-reload) | |
# | |
# If the "reload" option is implemented then remove the | |
# 'force-reload' alias | |
# | |
| |
log_daemon_msg "Restarting $DESC" "$NAME" | |
do_stop | |
case "$?" in | |
0|1) | |
do_start | |
case "$?" in | |
0) log_end_msg 0; RETVAL=0;; | |
1) log_end_msg 1; RETVAL=1;; # Old process is still runn | |
*) log_end_msg 1; RETVAL=1;; # Failed to start | |
esac | |
;; | |
*) | |
# Failed to stop | |
log_end_msg 1; RETVAL=1;; | |
esac | |
;; | |
*) | |
#echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2 | |
echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2 | |
exit 3 | |
;; | |
esac | |
| |
exit $RETVAL |
Execute post-install script:
Shell
#!/bin/sh | |
| |
set -e | |
| |
USER=minecraft | |
| |
# Create /etc files | |
| |
mkdir /etc/minecraft | |
| |
java -Xmx128M -Xms128M -jar server.jar nogui | |
| |
mv eula.txt server.properties /etc/minecraft | |
sed -i s/false/true/ eula.txt | |
rm -rf logs | |
| |
# Copy service files | |
cp minecraft.daemon /etc/init.d/minecraft | |
echo "SERVICE=yes" > /etc/default/minecraft | |
| |
# Add user | |
if ! getent passwd | grep -q "^$USER:"; then | |
echo "Adding $USER user..." | |
adduser --system --group --no-create-home --home /var/cache/minecraft --shell /bin/sh --quiet $USER || true | |
fi | |
| |
# Start service | |
if [ -x "/etc/init.d/minecraft" ]; then | |
update-rc.d minecraft defaults >/dev/null | |
service minecraft start || exit $? | |
fi | |
| |
exit 0 |
Install required packages
Shell
apt install opendkim opendkim-tools postfix-policyd-spf-python postfix-pcre |
Add postfix user into opendkim group
Shell
adduser postfix opendkim |
Add 2 records into DNS table (TXT and SPD) containing v=spf1 mx -all
Correct /etc/postfix-policyd-spf-python/policyd-spf.conf for Spamassassin
Code
#HELO_reject = Fail | |
HELO_reject = False | |
#Mail_From_reject = Fail | |
Mail_From_reject = False |
Add this line into /etc/postfix/master.cf
Code
policyd-spf unix - n n - 0 spawn user=policyd-spf argv=/usr/bin/policyd-spf |
Add this line into /etc/postfix/main.cf
Code
policyd-spf_time_limit = 3600 | |
... | |
smtpd_recipient_restrictions = | |
... | |
reject_unauth_destination, | |
check_policy_service unix:private/policyd-spf, | |
... |
Configure OpenDKIM /etc/opendkim.conf
Code
# This is a basic configuration that can easily be adapted to suit a standard | |
# installation. For more advanced options, see opendkim.conf(5) and/or | |
# /usr/share/doc/opendkim/examples/opendkim.conf.sample. | |
| |
# Log to syslog | |
Syslog yes | |
# Required to use local socket with MTAs that access the socket as a non- | |
# privileged user (e.g. Postfix) | |
UMask 002 | |
# OpenDKIM user | |
# Remember to add user postfix to group opendkim | |
UserID opendkim | |
| |
# Map domains in From addresses to keys used to sign messages | |
KeyTable /etc/opendkim/key.table | |
SigningTable refile:/etc/opendkim/signing.table | |
| |
# Hosts to ignore when verifying signatures | |
ExternalIgnoreList /etc/opendkim/trusted.hosts | |
InternalHosts /etc/opendkim/trusted.hosts | |
| |
# Commonly-used options; the commented-out versions show the defaults. | |
Canonicalization relaxed/simple | |
Mode sv | |
SubDomains no | |
#ADSPAction continue | |
AutoRestart yes | |
AutoRestartRate 10/1M | |
Background yes | |
DNSTimeout 5 | |
SignatureAlgorithm rsa-sha256 | |
| |
# Always oversign From (sign using actual From and a null From to prevent | |
# malicious signatures header fields (From and/or others) between the signer | |
# and the verifier. From is oversigned by default in the Debian package | |
# because it is often the identity key used by reputation systems and thus | |
# somewhat security sensitive. | |
OversignHeaders From | |
| |
# Socket smtp://localhost | |
Socket local:/var/spool/postfix/opendkim/opendkim.sock |
Correct file rights
Shell
chmod u=rw,go=r /etc/opendkim.conf | |
mkdir /etc/opendkim | |
mkdir /etc/opendkim/keys | |
chown -R opendkim:opendkim /etc/opendkim | |
chmod go-rwx /etc/opendkim/keys | |
| |
echo '*@example.com example' > /etc/opendkim/signing.table | |
| |
echo 'example example.com:YYYYMM:/etc/opendkim/keys/example.private' > /etc/opendkim/key.table | |
| |
cat > /etc/opendkim/trusted.hosts < EOF | |
127.0.0.1 | |
::1 | |
localhost | |
myhostname | |
myhostname.example.com | |
example.com | |
EOF | |
| |
opendkim-genkey -b 2048 -h rsa-sha256 -r -s YYYYMM -d example.com -v | |
mv YYYYMM.private example.private | |
mv YYYYMM.txt example.txt | |
| |
chown -R opendkim:opendkim /etc/opendkim | |
chmod -R go-rw /etc/opendkim/keys |
From example.txt, add a DNS entry 201510._domainkey IN TXT with a text value containting v=DKIM1.... without double quote and replacing h=rsa-sha256 by h=sha256
Test your configuration with:
Shell
opendkim-testkey -d example.com -s YYYYMM -vvv |
Last message should be "key OK", ignore “key not secure” message.
Hook OpenDKIM into Postfix
Shell
mkdir /var/spool/postfix/opendkim | |
chown opendkim:postfix /var/spool/postfix/opendkim |
Change socket into /etc/default/opendkin
Code
SOCKET="local:/var/spool/postfix/opendkim/opendkim.sock" |
Edit /etc/postfix/main.cf
Code
echo >>/etc/postfix/main.cf < EOF | |
# Milter configuration | |
# OpenDKIM | |
milter_default_action = accept | |
# Postfix >= 2.6 milter_protocol = 6, Postfix <= 2.5 milter_protocol = 2 | |
milter_protocol = 6 | |
smtpd_milters = local:opendkim/opendkim.sock | |
non_smtpd_milters = local:opendkim/opendkim.sock | |
EOF |
Thanks to
https://www.linode.com/docs/email/postfix/configure-spf-and-dkim-in-postfix-on-debian-8/
As Debian v9 does not provide anymore packages for BackupPC, I describes in this post how to migrate a BackupPC v3 (BPC3) installed from Debian packages (Debian v8) to a BackupPC v4 (BPC4) from tarball and to respect most of the Debian file hierarchy.
Define directories to store BackupPC files and configuration files
Shell
ROOT=/usr/local/share/backuppc4 | |
ETC=/etc/backuppc4 | |
LOG=/var/log/backuppc4 | |
RUN=/var/run/backuppc4 |
Copy configurations files from BPC3 before migration
Shell
cp -r /etc/backuppc $ETC | |
chown backuppc:backuppc -R $ETC |
Stop old BPC service
Shell
service backuppc stop |
Install BPC 4 files
Shell
perl ./configure.pl --batch \ | |
--install-dir $ROOT \ | |
--cgi-dir $ROOT/cgi-bin \ | |
--html-dir $ROOT/image \ | |
--data-dir /var/lib/backuppc/ \ | |
--hostname $(hostname) \ | |
--html-dir-url /backuppc4/image |
Modifiy service to access correct configuration file directory
Shell
sed -e "s,/etc/BackupPC,$ETC," \ | |
-e "s/var/log/BackupPC/,$LOG," \ | |
-e "s/var/run/BackupPC/,$RUN," $ROOT/lib/BackupPC/Lib.pm |
Create web files
Shell
mkdir $ROOT/www/ | |
{ cd $ROOT/www/; ln -s ../image .; } | |
cat > $ROOT/www/index.cgi <<EOF | |
#!/bin/sh | |
sudo -u backuppc -E -- $ROOT/cgi-bin/BackupPC_Admin | |
EOF | |
chmod a+x $ROOT/www/index.cgi |
Give access to CGI file
Shell
cat > /etc/sudoers.d/backuppc4 <<EOF | |
# User privilege specification | |
www-data ALL=(backuppc) NOPASSWD: SETENV: $ROOT/cgi-bin/BackupPC_Admin | |
EOF | |
chmog u-s $ROOT/cgi-bin/BackupPC_Admin |
Create Apache configuration file
Shell
cat > $ETC/apache.conf <<EOF | |
Alias /backuppc4 $ROOT/www | |
| |
<Directory $ROOT/www> | |
Options ExecCGI FollowSymlinks | |
AddHandler cgi-script .cgi | |
DirectoryIndex index.cgi | |
| |
AuthType Basic | |
AuthUserFile $ETC/htpasswd | |
AuthGroupFile $ETC/htgroup | |
AuthName "BackupPC Administrative Interface" | |
require valid-user | |
</Directory> | |
EOF |
Create standard directories to run BPC4
Shell
mkdir $LOG; chown backuppc:backuppc $LOG | |
mkdir $RUN; chown backuppc:backuppc $RUN |
Add Systemd service
Shell
cp systemd/backuppc.service /etc/systemd/system/backuppc4.service | |
sed -e "s,/var/run/BackupPC/,$RUN," /etc/systemd/system/backuppc4.service | |
systemctl daemon-reload | |
systemctl enable backuppc4.service | |
systemctl start backuppc4.service |
For Debian 6 and 7, there's an easy way to create a cluster diskless. Isc-dhp-server an atftpd can be used to serve IP addresses, kernel, initrd and a minimal root disk ready to be loaded in memory.
Script /etc/initscript/hooks/tftp
Shell
# -*- shell-script -*- | |
# Cluster specific mount sequence | |
| |
mountroot () | |
{ | |
| |
# configure ethernet | |
ipconfig -c dhcp eth0 | |
ipconfig -c dhcp eth1 | |
| |
mount -t ramfs /dev/ram0 ${rootmnt} | |
| |
# download all tarballs | |
for f in $(echo ${tarballs} | sed 's/,/ /g'); do | |
log_begin_msg "download $f" | |
tftp -b 32764 -g -r $f ${tftpserver} | |
log_begin_msg "Extract $f into ${rootmnt}" | |
log_end_msg | |
tar xzf $f -C ${rootmnt} || exec /bin/sh | |
rm -f $f | |
done | |
| |
# remove files predeced by tilde | |
for f in $(find ${rootmnt} -name '~*'); do | |
o=$(echo $f | sed 's/\/~/\//') | |
[ -f $o ] && rm -rf $o $f | |
done | |
| |
# execute files predeced by plus | |
for f in $(find ${rootmnt} -name '+*'); do | |
[ -x $f ] && ./$f | |
[ -f $f ] && rm -f $f | |
done | |
} |
Generate new initrd image:
Shell
update-initramfs -u |
Create root.tgz tarball script:
Shell
#!/bin/bash | |
| |
PROGNAME=$(basename $0) | |
TFTP=/srv/tftp | |
EXCLUDE=/tmp/$PROGNAME-exclude-$$ | |
IMAGE=$TFTP/root.tgz | |
TMPLOG=/tmp/$PROGNAME-$$.log | |
VER=2.0 | |
| |
# help function | |
| |
function usage () { | |
echo "usage: $PROGNAME [-h] [-v]" | |
echo " -h: help message" | |
echo " -v: version message" | |
exit $@ | |
} | |
| |
# formating functions | |
| |
function title () { echo -e "\033[0;1m$*\033[0;0m"; } | |
function pass () { echo -e "\033[1;32m$*\033[0;0m"; } | |
function warn () { echo -e "\033[1;33m$*\033[0;0m"; } | |
function fail () { echo -e "\033[1;31m$*\033[0;0m"; } | |
# check command | |
| |
function check () { | |
echo -n "$@: " | |
{ eval $@; } >&$TMPLOG && pass OK || { fail KO; cat $TMPLOG; ERR=yes; } | |
rm -f $TMPLOG | |
test ! "$TEST" = yes | |
} | |
| |
# argument processing | |
| |
while [ $# -gt 0 ]; do | |
case "$1" in | |
-h) usage 0;; | |
-v) echo "$PROGNAME: version $VER"; exit;; | |
*) echo "unknown argument ($1)"; exit 1;; | |
esac | |
shift | |
done | |
| |
# create exclude list | |
cat - << EOF > $EXCLUDE | |
backup | |
boot | |
dev/* | |
etc/udev/rules.d/70-persistent-net.rules | |
home | |
lost+found | |
media/* | |
proc/* | |
root/* | |
run/* | |
srv/* | |
sys/* | |
tmp/* | |
usr/share/doc | |
usr/share/i18n | |
usr/share/info | |
usr/share/locale | |
usr/share/man | |
usr/share/zoneinfo | |
var/backups/* | |
var/cache/apt/* | |
var/cache/debconf/* | |
var/cache/fontconfig/* | |
var/cache/man/* | |
var/lib/apt | |
var/lib/aptitude | |
var/lib/dpkg | |
var/lib/samba/* | |
var/lock/* | |
var/log/* | |
var/run/* | |
EOF | |
check test -f $EXCLUDE | |
| |
# checks | |
[ -f $IMAGE ] && check rm -f $IMAGE | |
_OLDPWD=$(pwd) | |
cd / | |
check tar czf $IMAGE --exclude-from $EXCLUDE . | |
cd $_OLDPWD | |
| |
# clean exclude list | |
check rm -f $EXCLUDE | |
exit 0 |
Typical of a slave.tgz tarball:
Code
-rw-r--r-- 1 mazet users 3515 nov. 13 2014 /etc/chrony/chrony.conf | |
-rw-r--r-- 1 mazet users 164 nov. 13 2014 /etc/default/atftpd | |
-rw-r--r-- 1 mazet users 1226 nov. 13 2014 /etc/default/hddtemp | |
-rw-r--r-- 1 mazet users 0 nov. 13 2014 /etc/default/~isc-dhcp-server | |
-rw-r--r-- 1 mazet users 799 nov. 13 2014 /etc/default/nfs-common | |
-rw-r--r-- 1 mazet users 551 nov. 13 2014 /etc/default/ntpdate | |
-rw-r--r-- 1 mazet users 276 nov. 13 2014 /etc/default/samba | |
-rw-r--r-- 1 mazet users 428 nov. 13 2014 /etc/default/smartmontools | |
-rw-r--r-- 1 mazet users 722 nov. 13 2014 /etc/default/snmpd | |
-rw-r--r-- 1 mazet users 1209 nov. 13 2014 /etc/exports | |
-rw-r--r-- 1 mazet users 1356 juil. 23 2015 /etc/fstab | |
-rw-r--r-- 1 mazet users 13 nov. 13 2014 /etc/hostname | |
-rwxr-xr-x 1 mazet users 73 nov. 13 2014 /etc/+hostname | |
-rw-r--r-- 1 mazet users 1332 nov. 13 2014 /etc/inetd.conf | |
-rw-r--r-- 1 mazet users 2012 nov. 13 2014 /etc/inittab | |
-rw-rw-r-- 1 mazet users 1184 avril 4 14:03 /etc/network/interfaces | |
-rwxrwxr-x 1 mazet users 439 sept. 21 2015 /etc/rc.local | |
-rw-r--r-- 1 mazet users 0 nov. 13 2014 /etc/resolv.conf | |
-rw-r--r-- 1 mazet users 2794 nov. 13 2014 /etc/rsyslog.conf | |
-rwxr-xr-x 1 mazet users 73 nov. 13 2014 /etc/ssmtp/+ssmtp.conf | |
-rw-r--r-- 1 mazet users 581 nov. 13 2014 /etc/ssmtp/ssmtp.conf | |
-rw-r--r-- 1 mazet users 0 déc. 4 2014 /home/.empty | |
-rw-rw-r-- 1 mazet users 0 mars 23 10:10 /-rec | |
-rw-r--r-- 1 mazet users 728 nov. 13 2014 /root/.bashrc | |
-rw-r--r-- 1 mazet users 140 nov. 13 2014 /root/.profile | |
-rw-r--r-- 1 mazet users 780 nov. 13 2014 /root/.screenrc | |
-rw-r--r-- 1 mazet users 416 nov. 13 2014 /root/.ssh/authorized_keys | |
-rw------- 1 mazet users 1679 nov. 13 2014 /root/.ssh/id_rsa | |
-rw-r--r-- 1 mazet users 416 nov. 13 2014 /root/.ssh/id_rsa.pub | |
-rw-r--r-- 1 mazet users 1 nov. 13 2014 /root/.vimrc | |
-rw-r--r-- 1 mazet users 0 nov. 13 2014 /usr/sbin/~winbindd | |
-rw-rw-r-- 1 mazet users 0 févr. 17 2015 /var/media/prod/.empty | |
-rw-rw-r-- 1 mazet users 0 févr. 17 2015 /var/media/rec/.empty |