How To Secure /tmp,/dev/shm Without Access To OpenVZ Hardware Node?

Aug 27, 2008

I have recently picked up a CentOS5 server running on an OpenVZ box. Going thru various guides, I have seen repeatedly the importance of securing the /tmp partition. However, I am running into trouble when I try to follow the usual commands [1][2]

For example:

# mount -o nosuid,noexec /media/tmpFS /tmp
mount: /media/tmpFS is not a block device (maybe try `-o loop'?)
If I check for the presence of loop, it is missing:

# ls -ltr /dev/loop*
ls: /dev/loop*: No such file or directory

If I try and create loop using /sbin/makedev loop and re-execute the mount command, I get a new error

mount: no permission to look at loop
The nearest I have found so far is this thread [3], which suggests using

mount -t tmpfs tmpfs /tmp
I believe the above will not persist across a reboot, so that defeat's the purpose.

Can you advise on how to mount /tmp in noexec,nosuid mode within the VPS environment?

View 0 Replies


ADVERTISEMENT

How Can Secure /tmp /var/tmp In OpenVZ VPS ?

Mar 15, 2007

recently I got a VPS from cheapvps.co.uk and so far so good. Im getting used to the VPS enviroment. I tried to follow several guides about how to secure with noexec and nosuid the /tmp and /var/tmp and it did not work.

in http : / / www . webhostingtalk .com/showthread.php?t=474681&highlight=tmp points it must be done from the hosting. Same is said in http : // kb . swsoft . com/article_130_648_en.html.

I asked the hosting to do it and they told me as I got an Unmanaged VPS they cant do it for me.

Do anyone know how can be done ? I dont want to use tmpfs as it uses main memory.

View 1 Replies View Related

Secure FTP Without Shell Access?

Apr 22, 2009

Do you guys have any idea what is the best way to enable SFTP for a cPanel account?

I could give it Shell access, but isn't it possible without it?

View 3 Replies View Related

Secure And Restrict SSH Access

Aug 23, 2007

1.Who can I secure and restrict SSH access?

View 3 Replies View Related

Secure Employees SSH Access To Server

Jul 6, 2009

I'm thinking about creating a limited platform for my employees to access my hosting servers

I wish they can create certain types of directories for users, set permissions on some directories, list users accounts, etc.

but although I don't think they would want to abuse this kind of access, I not only like the Trust-No-One premisse, but I also find it not very unlikely that the computer they're using get compromised or something like that

so I'd like to get technical ideas on how to develop this system and to know if anyone is interested and would like to contribute to the code

what I've considered so far is that I should either create a special user for that which would be on all users group, or should give it "root" access... the latter seems more reasonable for me considering the implementation and compatibility between systems and control panels

but with "root" access I mean "running MY INTERFACE to the employee as root"... this interface would have limited options like "create directory for user X", "list content of user X", etc. (taking a lot of care on input validation)... and would enforce some limits to prevent abuse (for example, can't list the content of more than 10 users per hour, or something like that... and alert me)

my main doubt is how you think that should be implemented? as a special server or as a webservice? with webservice I have the advantage of being capable of using SSL in a simple way and I don't need a special client (since any browser is a client)
then that could be PHP or Perl... but running as UID 0 (I don't even know if apache allows that, or if there's a workaround like SUID)

View 6 Replies View Related

How To Secure Access To MySQL Database

Jan 28, 2008

What can I do to secure access to my MySQL database to stop it from getting compromised from hackers?

Is there any way I can restrict access to the MySQL database to my IP only?

The database is for an IPB 2.3.4 forum and the username/password are stored in a conf_global.php file that is CHMODed 0444.

View 5 Replies View Related

How Do I Secure Remote Access To Remote Access Products

Mar 24, 2007

I have windows servers that I'll be co-locating very soon. I have purchased a Dell 2161ds-2 and an APC remote boot power strip. Could someone please tell me the best way to secure remote access to these products. Do I put them on public IP's and allow them through the firewall or do I put them behind the firewall and access them after I authenticate through the firewall.

View 6 Replies View Related

Plesk Automation :: Cloud Server Hardware Node As Backup Server Node

Apr 11, 2015

We have one Cloud Server hardware node that exists only as the backup location for containers and VMs in Cloud Server/PVA (it hosts no virtual servers). Can it also serve as a Backup Server Node?

A related question, in my case, is whether we can configure a Backup Server Node to use a particular drive/mount/directory, as we can with PVA? I couldn't find any info in the docs about any settings at all for the Backup Server Node.

View 4 Replies View Related

[openvz ]How To Make For Kernel Of Openvz To Recognize 4GB Of Ram?

Dec 10, 2008

[openvz ]How to make for kernel of openvz to recognize 4GB of ram?

How to make for kernel of openvz to recognize 4GB of ram?

# uname -a
Linux xxxxxxxxxxx 2.6.18-92.1.13.el5.028stab059.3 #1 SMP Wed Oct 15 17:48:55 MSD 2008 i686 i686 i386 GNU/Linux

View 4 Replies View Related

Node Ram

Nov 7, 2009

i'm a vps provider and i'm using this server for vps host

Code:
Dual CPU Xeon 5420, 24GB Ram, 1TB HDD
24GB of Ram

and now i see the used ram is un normal

Code:
[root@216-19-200-162 ~]# free -m

total used free shared buffers cached
Mem: 24064 23865 199 0 541 19509
-/+ buffers/cache: 3813 20251
Swap: 4094 0 4094
[root@216-18-201-162 ~]#

the free ram us 199 of 24GB!

every time when i reboot the server the used ram back normal but after per hours the issues back again

i have contacted the DC and they say that there is no problem with there hardware

the number of vpses in that node is 7 and all the vps have a limit ram.

View 14 Replies View Related

VPS Node

Mar 6, 2009

I want to build a VPS Node using Quad Socket Tyan Motherboards and AMD Opteron 2376 Shanghai 2.3 GHz Processor (Quad Core).

I am in doubt since I notice that some providers (at least two rather big provider which I have account) are using Dual Core AMD Opteron 2212.

Is there any specific reason why those providers is not using 2376 AMD Processors? .. is it because the Dual Core AMD Opteron 2212 supports Virtualization Technology, while the 2376 is not?

I will use Xen Hypervisor, usually I use Intel 54xx Processors but looking for *cheaper* solution , so I am really new in AMD Base Server.

View 3 Replies View Related

VPS Node With SAN

Oct 22, 2009

I build raid10 for VPS nodes. Now, I will use SAN, so all VPS will be created in SAN. With the host server, I assume that I don't need fast disk array, because all the disk requests have been processed in SAN already?

View 4 Replies View Related

30 VPS's Per Node

Oct 18, 2009

For a quad core processor with 16-32GB RAM and SAS raid 10, would 30 VPS's be a lot?

I have a VPS with 1Gb RAM on a machine as above. I'm running about 40 (relatively low-volume) websites on it. Seems to me that if 30 others were doing anything similar, that would overwhelm a single machine.

Am I just making an uninformed bad assumption? So far, performance on my VPS has been fine.

View 14 Replies View Related

What Type Of Node Would You Rather Be On

Mar 6, 2009

Well the age old question for virtual servers, would you rather a host put all his eggs into one basket "monster node" or several smaller ones. From a provider standpoint one server is easier to manage than several, although if that one goes down, all your customers do with it. Lower costs for the provider, s/he can then pass the savings along.
Example Package:"2GB Ram Packages, 500GB bandwidth, and 20GB space."

The "EXAMPLE" Specs.

All in one

Max Clients: 126
4U Rackmount,
4 Quad Cores, "16 total cores"
256GB DDR2,
8 600GB SAS 10k,
RAID10
Several Server setup:
Max Clients: 14
1U Rackmounts,
Single Quad Core, "4 cores"
32GB DDR2,
2 300GB SAS 10k,
RAID1

If you could tell me why you picked either or.

View 14 Replies View Related

Node Load

Oct 16, 2009

i have a very high load in my node every time i monitor the load i see load average: 8.19 and some times it's go up to 60 - 80

i'm using this server

Intel Core2Quad Q9650
Ram 8GB
Bandwidth: 10000gb
Hypervm Control Panel

and there is only 6 vpses ....

View 7 Replies View Related

How Can I Add Ip Addresses To Node

Jun 19, 2009

i'm using hypervm/openvz

and i have the main package of ips which i have received from datacenter

i orderd other package ips (13) ips

i have add them to ip pools in hypervm and it didn't working

Note : netmask are different for the first ips and the second ips

when i create vps i can't login and when i ping ip it didn't ping ( requested timed out )

i have one server from softlayer and the other from limestonenetworks
when i order additonal ips from softlayer it works proberly .. now when i orderd those ips from limestonenetworks ; i think it must be modified manually

View 14 Replies View Related

To Set Configuration Node

Apr 14, 2009

i have node 16 cpu AMD 64 gb ram HDD sas 15 with raid 10 /hypervm + openvz i host 10 vps
my problem when any vps load go over 2 the Node load go to 30 - 40 some time 100 i set CPU UNITS , Number Of CPUS and Cpu Usage for every vps but the load in node is go up

how i can set limit in vps and prevent from effect on load Node?

View 2 Replies View Related

Recomendations For A UK VPS Node

Jun 13, 2008

GeekLayer is looking in to expanding in to the UK - We want to offer VPSs in the UK, but to be honest, I have no idea who people consider the SoftLayer of the UK hosting industry - Who has the best rep around WHT with reasonable(ish) pricing for something like a core2quad with 8gb ram and 2tb+ bandwidth?

View 4 Replies View Related

So What Exactly Can Take Down An Entire Vps Node

Jul 21, 2007

I figure while I am twiddling my thumbs here waiting for my host to tell me what the heck happened for the second time in two or three months why they have to do an entire VPS hard restart, which of course causes another hour of fck delays, that I'd ask some of the more skilled and experience folks here, how?

Just before it happened, as I was watching, the load shotup over 1, 2, 4, 20, 30 boom. (I opened a ticket at 4)

Shouldn't virtuozzo always guarantee a certain amount of cpu and bandwidth to the node root? Why do they have to hard reboot and not access it directly and stop the badly behaving vps? Better yet, why isn't the badly behaving vps stopped automatically by virtuozzo?

(oh and am I an idiot for putting up with over two hours of downtime?)

View 14 Replies View Related

Best Options To Run Quality Node ?

Sep 22, 2009

I'm reseller vps, and now i decided to run own node, and sell vps, i choosed VDSMANAGER control panel, because virtuzzo is expensive.

Please help me to choose best options to run best and quality node,

VDSManager or VEportal ? (good optios&security&support&...)

XEN or OPENVZ ? (uutil now OPENVZ best for run static and dynamic site, but on xen can be run vpn & shoutcast & windows & linux & ...)
RAM GB ?
CPU ?
Hard ?

can i use load balancing for vps node ?
how many vps can be run on this node ?

Ex:
VDSmanager
XEN
Core2Quad Q9300
8 GB RAM
500 GB HDD

View 8 Replies View Related

32 Bit Xen Guest On X86_64 EL5 Node

Oct 18, 2009

Let's make this straight,

I have this vps,which is pending cancellation in a few days.
Hardware Node = EL 5 x86_64,
Vz = Xen

I asked my provider for 32 bit centos, I even rebuilt it, but my "uname --all" still

Quote:

Linux xxx.xxx.com 2.6.18-128.1.10.el5xen #1 SMP Thu May 7 11:07:18 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux

so I opened a ticket asking about the vps arch.
The provider have told me that to run a vps 32 bit guest, what you have to do is (?)

+++++++++++++++++++++++++
yum clean all
echo i686-redhat-linux > /etc/rpm/platform
+++++++++++++++++++++++++

so yum will exclude any x86_64 packages.
The provider has told me also that my "uname" display x86_64 because the hardware node is 64 bit. Is this true ?

I'm no linux or vps guru, but that's doesnt feel right at all.
This has cause me some issues especially with kernel-headers and some program failed to compile.

So, is it possible to run a 32 bit OS as xen guest inside 64 bit node?

View 4 Replies View Related

VPS NODE Stress Testing...

Apr 1, 2009

I want to know if there is a set of tools or a linux distro that I can use to create several Virtual Machines and make them use up all their allocated Memory/CPU to the max to see how much the VPS Node will hold.

I do this on Windows easily as I overclock my PC at home. But in linux, no idea. I need something that will do iterations like Prime95 or SuperPI.

View 1 Replies View Related

IP Pools In HyperVM Node

Jun 29, 2009

I had 3 IP pools in HyperVM node. I removed (deleted) 2 pools completely because I had an error trying to create a VPS, told me the IP was being used by someone else. So I deleted the pools completely and I see they still ping. I did a tracert and the IPs come to my server so i know nobody else is using them or that they were assigned to somone else. I rebooted the server and while it was in the process I tried to ping the ips and they didn't respond. When node came up, the ips started pinging again. How can I manually remove the IPs so that my server doesn't respond to the pings and I can add them to the pool and use them correctly.

View 6 Replies View Related

Main Node Load

May 18, 2009

My main node load average is:

load average: 485.91, 482.41, 481.80

And its very high!

I checked all vps load is below than 3

So, why main node load is very high?

View 6 Replies View Related

AquariusStorage - Riddler Node Down

Apr 9, 2009

My VPS wen't down around 9am (Pacific) this morning, send a ticket in and have not heard anything back. Trying to start it from HyperVM results in:

Alert: no_kernel_support_for_openvz_check_if_right_kernel

Not sure if this is an issue on my side or on the entire node, haven't seen any threads regarding it yet so thought I'd make one. It's been about 4 hours now and my ticket hasen't even been updated yet. Just wondering whats going on...

Ryans usually been on top of everything whenever something happened so I'm going to wait a few more hours before calling them.

View 14 Replies View Related

VIRTUOZZO NODE SCREWED

Apr 30, 2008

I mistakenly ran ELS script [url]inside the NODE in root mode instead of inside the vps container I was intending to run the script in, and everything basically stopped working - even after a hard reboot.

No vps's load, no sites work. The vzagent is not pinging. Cannot connect via VZMC as a result.

Quote:

The following error(s) were detected:

Code
Description
1
Most likely your service Virtual Private Server is down or you have entered invalid host address.

I stopped the ELS script at the mytop install yes/no step. I selected yes for all previous install options EXCLUDING apf and bfd. I did a yes on sysctl.conf hardening, disable register globals, chmod dangerous file folder (which probably caused the problem).

View 0 Replies View Related

Setting Up Hypervm/xen Node

Dec 16, 2008

i just buy a dedicated server for vps reselling.

this is my hardware spec :

Intel XEON E5420
4GB Ecc memory
2x250 GB RAID 1
hypervm/xen

the question is:
how to setting ip pool
how to setup a "resource plan"
how to add a guest vps

View 2 Replies View Related

VPS Hardware Node: Too Heavy

Nov 24, 2007

I'm currently considering to enter the VPS market

I have recently acquired a nice box (2x Dual Core Opteron 275 2.2 GHz, 16 GB RAM, 16x500 GB SATA @ RAID5/6) but I'm unsure if it isn't smarter to buy smaller machines (like X2 5600+, 4 GB RAM, 2x400 GB HDD) and put like 15-20 customers on it.

Yes, I know that the hard drives are more than oversized for VPS hosting

The Opteron server will have a very, very nice I/O performance so that customers are going to have a good feeling while working on it. To refinance the costs it would of course be neccessary to put not less than 125 VPS on one box, so I can imagine that there'll be a bottle neck somewhere (CPU power I'd guess?).

What is your opinion? Big boxes with high performance and loads of customers, or small boxes with not-so-many VPS?

View 11 Replies View Related

SolarVPS - High CPU Load On Their UK Node!

Apr 19, 2007

I have been with SolarVPS for some months now, and I'm pretty happy with their services. But some months ago I have problems with very high CPU load on their server, every day for a week or so. Since then I have had little problems, before the last two days. Now they are back to the same problem as last time, almost 100% CPU load on their server, causing my sites to work VERY slow, and I’m getting timeouts on my MySQL database.

When sending tickets, they kill the process, but it’s only mather of time before the CPU skyrockets again. Yesterday they told me that it was a abusing client, and they was taking care of it. But today I got the same problem.

Are they hiding the fact that they have oversold the node I’m on? (the UK node), or do I only have bad luck? And how much can I take before I start looking for a new host? I think their service and support is very good, but not when I got problems with high CPU load. They reply fast on ticket, but I cannot monitor my server 24/7 to see if the CPU load is high.

What would you have done if it’s was you that had the same problem. Do I have to accept the fact that I only pay around $55/mo for a 384MB/25GB/150GB BW and 4 IP’s (with Windows 2003 and Plesk 30 domains) and cannot demand a VPS server that runs without problems?

Anyway, it’s my experience with SolarVPS after 3 months (and three days).

View 10 Replies View Related

Who Are The Most Reliable Dedicated/Node Provider

Oct 9, 2009

Who are the most reliable Dedicated/Node Providers? I mean there are the cheap ones like Wholesale Internet and Joe's DC but have they proven to be reliable as well?

View 10 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved