Containers - Revision history

B01: /* == update a container coming from previous debian 9 */

2020-04-18T16:51:47Z

== update a container coming from previous debian 9

← Older revision		Revision as of 16:51, 18 April 2020
Line 224:		Line 224:
	sudo rm -rf /var/lib/lxc/repository/snaps/snapXXX/		sudo rm -rf /var/lib/lxc/repository/snaps/snapXXX/

	=== update a container coming from previous debian 9 =		=== update a container coming from previous debian 9 ===
	lxc-update-config -c /var/lib/lxc/repository/config		lxc-update-config -c /var/lib/lxc/repository/config

B01 at 15:28, 13 April 2020

2020-04-13T15:28:00Z

← Older revision		Revision as of 15:28, 13 April 2020
Line 223:		Line 223:
	To delete a snapshot		To delete a snapshot
	sudo rm -rf /var/lib/lxc/repository/snaps/snapXXX/		sudo rm -rf /var/lib/lxc/repository/snaps/snapXXX/

			=== update a container coming from previous debian 9 =
			lxc-update-config -c /var/lib/lxc/repository/config

B01 at 17:00, 8 June 2019

2019-06-08T17:00:59Z

Show changes

B01 at 16:39, 8 June 2019

2019-06-08T16:39:14Z

← Older revision		Revision as of 16:39, 8 June 2019
Line 36:		Line 36:
	'''Using /etc/network/interfaces, the bridge could be created simply:'''		'''Using /etc/network/interfaces, the bridge could be created simply:'''

	<code>iface lxc-nat-bridge inet static		<code>
			iface lxc-nat-bridge inet static
	bridge_ports none		bridge_ports none
	bridge_fd 0		bridge_fd 0
Line 120:		Line 121:
	sudo nano /etc/apache2/sites-available/ynh.conf		sudo nano /etc/apache2/sites-available/ynh.conf
	<code>		<code>
	<VirtualHost *:80>		<VirtualHost *:80>
	ServerAdmin webmaster@localhost		ServerAdmin webmaster@localhost
	ServerName ynh.anarchaserver.org		ServerName ynh.anarchaserver.org
Line 140:		Line 141:
	</Proxy>		</Proxy>

	</VirtualHost>		</VirtualHost>
	</code>		</code>
	'''Create the symbolic link between this file and the sites-enable folder so has to be taken into account by apache'''		'''Create the symbolic link between this file and the sites-enable folder so has to be taken into account by apache'''
Line 170:		Line 171:

	<code>		<code>
	<IfModule mod_ssl.c>		<IfModule mod_ssl.c>
	<VirtualHost *:443>		<VirtualHost *:443>
	ServerAdmin webmaster@localhost		ServerAdmin webmaster@localhost
	ServerName ynh.anarchaserver.org		ServerName ynh.anarchaserver.org
Line 195:		Line 196:
	ProxyPassReverse / https://ynh.anarchaserver.org/		ProxyPassReverse / https://ynh.anarchaserver.org/

	SSLCertificateFile /etc/letsencrypt/live/ynh.anarchaserver.org/fullchain.pem		SSLCertificateFile /etc/letsencrypt/live/ynh.anarchaserver.org/fullchain.pem
	SSLCertificateKeyFile /etc/letsencrypt/live/ynh.anarchaserver.org/privkey.pem		SSLCertificateKeyFile /etc/letsencrypt/live/ynh.anarchaserver.org/privkey.pem
	Include /etc/letsencrypt/options-ssl-apache.conf		Include /etc/letsencrypt/options-ssl-apache.conf
	</VirtualHost>		</VirtualHost>
	</IfModule>		</IfModule>
	</code>		</code>

B01: /* Install and update things in the container */

2018-10-27T17:12:18Z

Install and update things in the container

← Older revision		Revision as of 17:12, 27 October 2018
Line 226:		Line 226:
	sudo apt-get upgrade		sudo apt-get upgrade
	sudo apt-get iputils-ping		sudo apt-get iputils-ping

			=== Snapshot a container ===
			Stop it first, and write a comment file
			lxc-stop -n repository
			echo "Snapshot before installing mediainfo" > repopiwigoquasiOK
			lxc-snapshot -n repository -c repopiwigoquasiOK
			To check the snapshot
			lxc-snapshot -n repository -L
			To delete a snapshot
			sudo rm -rf /var/lib/lxc/repository/snaps/snapXXX/

B01 at 18:12, 22 August 2017

2017-08-22T18:12:51Z

Show changes

B01: /* Configure Apache to proxy the subdomain */

2017-08-21T12:45:11Z

Configure Apache to proxy the subdomain

← Older revision		Revision as of 12:45, 21 August 2017
Line 178:		Line 178:
	SSLEngine on		SSLEngine on
	SSLProxyEngine On		SSLProxyEngine On
			SSLProxyVerify none
			SSLProxyCheckPeerCN off
			SSLProxyCheckPeerName off
			SSLProxyCheckPeerExpire off

	ProxyPass / https://ynh.anarchaserver.org/		ProxyPass / https://ynh.anarchaserver.org/

B01: /* Configure Apache to proxy the subdomain */

2017-08-21T09:25:44Z

Configure Apache to proxy the subdomain

← Older revision		Revision as of 09:25, 21 August 2017
Line 150:		Line 150:
	Allow from all		Allow from all
	</Proxy>		</Proxy>
	~~# Uncomment and adapt if you want to swith automaticaly from http to https~~
	#RewriteEngine on		RewriteEngine on
	#RewriteCond %{SERVER_NAME} =ynh.anarchaserver.org		RewriteCond %{SERVER_NAME} =ynh.anarchaserver.org
	#RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]		RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]
	</VirtualHost>		</VirtualHost>
	</code>		</code>
Line 188:		Line 188:
	</IfModule>		</IfModule>
	</code>		</code>

			'''Activate mod_ssl on Apache''' (as root)
			a2enmod ssl

			'''Restart Apache2''' (to activate ssl)
			sudo systemctl restart apache2.service

			OR

	'''Reload Apache2''' (if there is a problem, Apache will keep its configuration)		'''Reload Apache2''' (if there is a problem, Apache will keep its configuration)

B01: /* Create a HTTPS Certificate with let'sencrypt (certbot) */

2017-08-18T19:43:08Z

Create a HTTPS Certificate with let'sencrypt (certbot)

← Older revision		Revision as of 19:43, 18 August 2017
Line 118:		Line 118:
	'''Create the certificate for the domain with apache server'''		'''Create the certificate for the domain with apache server'''
	sudo certbot --apache -d ynh.anarchaserver.org		sudo certbot --apache -d ynh.anarchaserver.org
	~~<code>~~
	~~Please choose whether HTTPS access is required or optional.~~
	~~-------------------------------------------------------------------------------~~
	~~1: Easy - Allow both HTTP and HTTPS access to these sites~~
	~~2: Secure - Make all requests redirect to secure HTTPS access~~
	~~-------------------------------------------------------------------------------~~
	~~Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2~~
	~~</code>~~
	That's it !		That's it !

	'''To check if the certificates needs to be renewed (and renew them)'''		'''To check if the certificates needs to be renewed (and renew them)'''
	sudo certbot renew		sudo certbot renew


	==== Configure Apache to proxy the subdomain ====		==== Configure Apache to proxy the subdomain ====

B01: /* Example with Transitional/Yunohost container and services */

2017-08-18T19:42:35Z

Example with Transitional/Yunohost container and services

← Older revision		Revision as of 19:42, 18 August 2017
Line 99:		Line 99:

	=== Example with Transitional/Yunohost container and services ===		=== Example with Transitional/Yunohost container and services ===
			==== Add the subdomain at Gandi ====
			In need for a user/pwd !

			==== Configure the hosts ====
	'''Modify /etc/hosts on the root of the server'''		'''Modify /etc/hosts on the root of the server'''
	sudo nano /etc/hosts		sudo nano /etc/hosts
	Add :		Add :
	10.0.3.2 ynh.anarchaserver.org		10.0.3.2 ynh.anarchaserver.org

			'''Modify /etc/hosts on your computer'' to test before the domain is propagated
			sudo nano /etc/hosts
			Add :
			209.51.163.19 ynh.anarchaserver.org

			==== Create a HTTPS Certificate with let'sencrypt (certbot) ====
			'''See the existings certificates :'''
			sudo certbot certificates
			'''Create the certificate for the domain with apache server'''
			sudo certbot --apache -d ynh.anarchaserver.org
			<code>
			Please choose whether HTTPS access is required or optional.
			-------------------------------------------------------------------------------
			1: Easy - Allow both HTTP and HTTPS access to these sites
			2: Secure - Make all requests redirect to secure HTTPS access
			-------------------------------------------------------------------------------
			Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
			</code>
			That's it !

			'''To check if the certificates needs to be renewed (and renew them)'''
			sudo certbot renew


			==== Configure Apache to proxy the subdomain ====


	'''Create 2 files in /etc/apache2/sites-availables for http and https config :'''		'''Create 2 files in /etc/apache2/sites-availables for http and https config :'''