I don’t believe that any system is totally secure.

WarGames. 1983.

Wargames was a movie that was way ahead of its time. A classic. Who has not wanted to be like David Lightman in those old times of 300 bps modems and anphahumeric interfaces?

]]> http://cubicleland.clerigo.es/archives/7/feed/ http://cubicleland.clerigo.es/archives/6 http://cubicleland.clerigo.es/archives/6#comments Wed, 04 Jun 2008 21:15:56 +0000 Nacho Uncategorized http://cubicleland.clerigo.es/archives/6

The software: OpenSolaris 2008.05
The hardware: Dell Latitude D600, Intel Mobile 1.6GHz, 768MB of RAM, 30GB HDD, Ati Radeon 900 32MB.

OpenSolaris 2008.05 installation

After installing an additional 256MB RAM module, upgrading the BIOS to the latest firmware (you never know) and running all night long the memtest utility included in the Ubuntu distro, Dogbert, my new low-cost second hand laptop was ready for OpenSolaris.
OpenSolaris installation has gone under a mayor review, a huge change compared to previous releases. First, the installation follows the Ubuntu concept of test-see-and-if-you-like-install it. Solaris 2008.05 is a live CD. You boot and get a fully functional Gnome environment (even the wireless is working out-of-the-box) where you can have a look, test if all your hardware is compatible or run the graphic installer.

The installer is extremely easy, only a few basic questions and is done. OpenSolaris for dummies. Lovely!

The bad point: this is not very convenient for a server. There is no text-intaller (yet), even if you can boot on text mode the live CD I was not able to trigger the installation without a GUI (maybe there is a workaround but I could not find anything). And you can not choose what do you want to install. You get everything including Gnome. My approach for servers  is to install only the core and then add the minimum required tools later as needed. No complaints about it, OpenSolaris seems to be more for final users than for any other thing (you have Solaris 10 for servers). Yes, I can use debian for my home server, but the point here is to play with new Solaris technologies.
Two important remarks:

• ZFS is the default file system, bye bye UFS. Cool!
• There is no root user! root is a role, not a user, so you can never login in the system directly with the root account (not even in the console). You need a normal user account and then you can “su” to the root role.

Solaris admins do not need a mouse

Okay, you have finished the OpenSolaris installation, you reboot your system and you get a super-nice Gnome desktop with all the extras: Firefox, wireless access… cool! But this is not what you want. You are a tough guy, you want your black text console now! It is quite easy. Just disable the gdm service and Gnome and the X will be over.

# svcadm disable gdm
If you want to go further and also remove all the packages to save some disk space, you can uninstall the related packages as explained in this blog.

A bit of networking
The first component you need to setup is the network. OpenSolaris introduces the “automagic” tool to configure the network. It manages your wireless and wired connections dinamically using profiles. Easy networks for everybody, Ubuntu style. This is perfect for a desktop system but for a server what you want is a old-fashion static wired connection. So first disable the auto-magic service:

# svcadm disable svc:/network/physical:nwam

Configure your network in the old Solaris fashion way and then enable the traditional network service:

# svcadm disable svc:/network/physical:default

Files you need to modify to set-up your network in Solaris
/etc/inet/hosts -> IP address of your host (see file comments)

/etc/defaulrouter -> IP address of your gateway, only that, nothing else.

/etc/netmasks -> Subnet mask (see file comments)

Put the hostname of your machine in a file called /etc/hostname. where interface is the name you get with ifconfig (e.g. bge0)

Installing new packages

Finally, IPS is here, the new package system for Solaris. Now install new software in Solaris is as simple as in Linux:

# pkg install SUNWrrdtool

And it’s done. The server connects to the OpenSolaris repository, gets the package, resolves the dependencies and installs it. Feel free to fill up your server with all the software you can get

Yes, my new server is a second hand Dell Latitude 600. A laptop for a server?!?!?

Yes, why not? Think about it, very silent, really low power consumption (specially if you are play a bit with the CPU frequency), you don’t need a spare keyboard and screen to fix problems when the server is not responding and you get a UPS for free.

Expensive? not really, 140 euros (eBay). Performance? maybe, but installing only the essential things (no windows managers, no graphics) it should be fast enough. If my Linksys WRT54G can run Linux and handle several VoIP calls with Asterisk, this beast should have no problems.

And the best thing is that I can move it! This is the first step to virtualize my infrastructure. Today the server is running in Germany, 6 hours downtime and voilá! answering queries from the sunny Spain, one day downtime and is connected in Australia. Every time I had to move, I left servers behind me. I have lost three already: Amanda (well she was hacked, it was not a move), Peter and Bastian. But Dogbert will follow me as a loyal dog.

In the next days I will start with the installation of… OpenSolaris 2008.05 (may the force be with me).

Now that I know that the real world is only a bad parody of Dilbert books, I need a playground, a geek corner, a lab to explore the things that you can not do at work, a place where common sense makes sense and is not called ITIL. I need my own Cubicleland where I can be the pointy-haired boss.

Cubicleland is the home for Asok (the router), Dogbert (the server), Catbert (the laptop) and other little friends. The background infrastructure to support clerigo.es. And Cubicleland is the blog inside the blog, a technical place to discuss and share what’s going on in Cubicleland.

The building of Cubicleland has started. Temporary, Cubicleland is living under a bridge but Dogbert is coming… the building of Cubicleland has started. Welcome and don’t forget your cup of coffee.