Cloud/Shahed/VA: Difference between revisions
Jump to navigation
Jump to search
| Line 45: | Line 45: | ||
==Virtual » LXD » Host » DNS== | ==Virtual » LXD » Host » DNS== | ||
<syntaxhighlight lang="bash"> | <syntaxhighlight lang="bash"> | ||
# parse lxd bridge network ip using `ip -j address show` command | # parse lxd bridge network ip using `ip -j address show|jq -r .` command | ||
LXD_BRIDGE_IP="$(ip -j addr show lxdbr0|jq -r '.[].addr_info[]|select(.label=="lxdbr0").local')" | LXD_BRIDGE_IP="$(ip -j addr show lxdbr0|jq -r '.[].addr_info[]|select(.label=="lxdbr0").local')" | ||
cat << EXE | lxc exec openldap -- bash | cat << EXE | lxc exec openldap -- bash | ||
Revision as of 23:57, 6 March 2025
Virtual » Network
| Virtual Instances | |||
|---|---|---|---|
| Name | Network | Subnets | Forward |
| Virtual » Hosts | 10.20.40.200/29 |
10.20.40.200 … 207/32 = 08 |
✅ |
| Virtual » Hosts | 10.20.40.208/29 |
10.20.40.208 … 215/32 = 08 |
⚪️ |
| Virtual » Hosts | 10.20.40.208/28 |
10.20.40.208 … 223/32 = 16 |
✅ |
| Virtual » Hosts | 10.20.40.224/28 |
10.20.40.224 … 239/32 = 16 |
⚪️ |
| Virtual » Hosts | 10.20.40.224/31 |
10.20.40.224 … 225/32 = 02 |
✅ |
| Virtual » Hosts | 10.20.48.226/31 |
10.20.40.226 … 227/32 = 02 |
⚪️ |
Virtual » Instance
lxc launch ubuntu:24.04 shahed-va -c limits.memory=2GB -c limits.cpu=2
lxc list -c=n -f=json|jq -r '.[]|select(.name=="shahed-va")|.status'
lxc config show shahed-va
cat <<'EXE'| lxc exec shahed-va -- bash
apt-get update;echo
mkdir -p /etc/apt/keyrings
apt list -a --upgradable;apt-get upgrade -y;echo
apt-get install -y apt-transport-https ca-certificates gnupg jq && apt-get clean
EXE
Virtual » Exec » Bash
cat <<'EXE'| lxc exec shahed-va -- bash
free -th && echo && systemd-analyze && echo && df -h
EXE
Virtual » LXD » Host » DNS
# parse lxd bridge network ip using `ip -j address show|jq -r .` command
LXD_BRIDGE_IP="$(ip -j addr show lxdbr0|jq -r '.[].addr_info[]|select(.label=="lxdbr0").local')"
cat << EXE | lxc exec openldap -- bash
echo "${LXD_BRIDGE_IP} host.lxd.internal"|tee -a /etc/hosts
ping -c5 host.lxd.internal
EXE
Virtual » Cloudflare » VIRT
cat <<'EXE'| lxc exec shahed-va -- bash
cat <<'INI'| sudo tee /etc/systemd/system/warp0.service >/dev/null
[Unit]
Description=Cloudflared WARP Routing Virtual Interface
After=network.target
[Service]
Type=oneshot
ExecStart=/usr/sbin/ip link add warp0 type dummy
ExecStartPost=/usr/sbin/ip addr add 10.20.40.200/32 dev warp0
ExecStartPost=/usr/sbin/ip link set warp0 up
ExecStop=/usr/sbin/ip link delete warp0
RemainAfterExit=yes
[Install]
WantedBy=multi-user.target
INI
echo
ls -lah /etc/systemd/system/warp0.service && echo
cat /etc/systemd/system/warp0.service && echo
EXE
cat <<'EXE'| lxc exec shahed-va -- bash
systemctl daemon-reload
systemctl enable --now warp0.service
systemctl status warp0.service
ip a
EXE
Virtual » Cloudflare » Argo » Tunnel
cat <<'EXE'| lxc exec shahed-va -- bash
wget -cq https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64.deb -P ${HOME}/Downloads
sudo dpkg -i ${HOME}/Downloads/cloudflared-linux-amd64.deb; sudo apt-get install -f
rm -rf ${HOME}/Downloads/cloudflared-linux-amd64.deb
EXE
cat <<'EXE'| lxc exec shahed-va -- bash
cat <<'CFG'| sudo tee -a /etc/sysctl.conf >/dev/null
###################################################################
# Cloudflared Tunnel Private Network Config
# This config added by Chorke Academia, Inc
# ICMP Group ID Range 0 to 10,000 Users
net.ipv4.ping_group_range = 0 10000
# assumed that following parameters were
# configured in the lxc host machine
# 208 KiB Default RX Buffer
# net.core.rmem_default=212992
# 208 KiB Default TX Buffer
# net.core.wmem_default=212992
# 8 MB Maximum RX Buffer
# net.core.rmem_max=8388608
# 8 MB Maximum TX Buffer
# net.core.wmem_max=8388608
CFG
sudo sysctl -p
EXE
Virtual » Cloudflare » Delete » Secret
lxc exec shahed-va -- sudo -i -u shahed-biz-argo bash
rm -rf ~/.cloudflared/cert.pem && history
# inspect & delete secrets
history -d 62-67
history -w
lxc exec shahed-va -- sudo bash
# inspect & delete secrets
history -d 68-74
history -w
Virtual » Cloudflare » Backup » Restore
lxc snapshot shahed-va base:2025.03.03
lxc publish shahed-va/base:2025.03.03 --alias shahed-va/base:2025.03.03
lxc restore shahed-va base:2025.03.03
cd ~/Documents/chorke/academia/var/backup/lxc_image/
lxc image export shahed-va/base:2025.03.03 shahed-va_base-2025.03.03
lxc image import shahed-va_base-2025.03.03.tar.gz --alias shahed-va/base:2025.03.03
cd ~/Documents/chorke/academia/var/backup/lxc_container/
lxc export shahed-va shahed-va_20250304.tar.gz --optimized-storage
lxc import shahed-va_20250304.tar.gz shahed-va
Virtual » Instance » Postfix » Install
lxc restore shahed-va base:2025.03.03
lxc exec shahed-va -- sudo bash
systemctl restart [email protected]
tail -n100 -f /var/log/cloudflared/shahed.biz/argo.log
nmap --reason mail.shahed.biz -Pn -p25,587,110,995,143,993,465,4190
nmap --reason mail.shahed.biz -Pn --top 20
References
|
| ||
|
| ||
|
| ||