milan/usl-mm: Universal secure LXD Install script

Universal secure LXD Install script

Find a file

root b9610828a8 unmaintained_state_and_migration_script		2024-12-16 15:22:14 +01:00
copy_containers	little_fixes	2022-09-01 17:22:55 +02:00
license.txt	first	2018-09-02 13:01:37 +02:00
lxd-to-incus	unmaintained_state_and_migration_script	2024-12-16 15:22:14 +01:00
README.md	unmaintained_state_and_migration_script	2024-12-16 15:22:14 +01:00
setup-usl-mm	Aktualizovat setup-usl-mm	2024-12-03 11:19:50 +01:00
setup-usl-mm_install_requirements	eoan	2019-10-19 20:37:31 +02:00
zfs-backup-mm-example-config	example conf for zfs-backup-mm script and copy_containers is now compatible for instalations, where is my backup-script used	2020-05-17 11:07:39 +02:00

README.md

This repository is outdated and unmaintained, please use https://git.my-web.xyz/milan/usi-mm

Features:

lxd-to-incus -> script to migrate usl-mm installations from lxd to incus

copy_containers -> script for easy bulk container migrate via SSH between instalations of usl-mm, is also possible use it in non-interactive mode with parameters in this order: container-name, destination-host, destination-port(optional)

zfs-backup-mm-example-config -> example config for zfs-backup-mm script, that backup all running containers, except those with "testing" or "deluge "in container name.

setup-usl-mm_install_requirements -> install dialog utility

setup-usl-mm

Pre-reboot script -> install zfs-utils, change timezone to Prague, crypt swap partition with ecryptfs-utils, crypt some partition with dmcrypt to use with /var/snap/lxd/common/lxd/* and LXD ZFS storage, add some config to sysctl.conf, disable snapd.lxd service, delete everything in /var/snap/lxd/common/lxd/*, delete netplan, install ifupdown, configure bridged networking (you can put LXD container to your network simple by add br0 to container), create zpool with ashift=12, set compression=on on crypted zpool, configure zfs cache min 256MB max 1536MB, do dist-upgrade, create /root/onstart script to decrypt crypted parition with password and start lxd (you need start this script on every reboot), reboot
Post-reboot script -> for sure, stop snapd.lxd service and delete everything in /var/snap/lxd/common/lxd/*, exec /root/onstart to decrypt partition and import zpool, configure LXD to use encrypted partition as storage, add some config to /root/.screenrc (for gnuscreen utility), install htop mc zfsnap smartmontools screen and pv
Install uptrack-upgrade -> install ksplice tool for kernel live patching

Requirements:

Fresh installation of Ubuntu 22.04, swap partition and some paritition to crypted data

THE PROGRAM IS DISTRIBUTED IN THE HOPE THAT IT WILL BE USEFUL, BUT WITHOUT ANY WARRANTY. IT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW THE AUTHOR WILL BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF THE AUTHOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.