|01:23||RaphGro has left IRC (RaphGro!~raphgro@fedora/raphgro, Quit: Please remember your own message. It'll be read as soon as possible.)|
|05:26||RaphGro has joined IRC (RaphGro!~raphgro@fedora/raphgro)|
|07:37||danboid has joined IRC (danboid!~ISDADS\firstname.lastname@example.org)|
alkisg, I can't see a list of required ports for a LTSP server in the docs. Am I missing it? TFTP, SSH, DHCP (if its running a DHCP server)... any others?
danboid: we don't have any ltsp-specific services so we avoid to document things that are documented elsewhere
There's also NFS
And if you're using epoptes, a lot more
"we don't have any ltsp-specific services so we avoid to document things that are documented elsewhere" What do you mean and where is this documented?
danboid: I mean that we don't have documentation for libreoffice
Because it's not specific to LTSP
We also don't have documentation about gedit
And we don't have documentation about NFS or SSHFS ports
If you want to write documentation about all these in the ltsp wiki, we don't mind though
Sure SSHFS only requires port 22 like SSH? I thought LTSP either used SSHFS or NFS
And we don't document the software we're using
It's documented in their sites
E.g. in the ssh site, in the nfs site, etc
I'm confused. Does LTSP use NFS by default to share files. SSHFS or both?
NFS for / rootfs, and SSHFS for /home
https://ltsp.org/ mentions some of the tools we're using
In the first page
I presume I only need to open the DHCP ports if I'm running a DHCP server on the LTSP server?
netstat -nap is your friend
See the services you are running, and decide which of them you need
alkisg, Does an LTSP server need to open the inetd port, 9571?
Unless I'm missing something, it looks to me like people might be able to get away with just opening ports 22 TCP for SSH and SSHFS and 111 TCP and UDP for NFS, for a bare bones LTSP server not using epoptes and not running a dhcp server. Does that sound right?
This is for a LTSP server configured 4 years ago, so it may be a little different to the latest
Then you need inetd
And possibly NBD, but not NFS
Ah right! Thanks
NFS needs 2049 btw
Right yes, TCP and UDP right
But you're probably not using NFS at all
If you're using LTSP5
It depends on the distribution as well
Its listening on port 111
Then you're not using NFS
OK, I didn't think so as exportfs and showmount weren't showing anything
So in my case I might just need SSH (22) and inetd ports open as the bare minimum
Sounds like if from what you've just told me + netstat output
inetd isn't used under latest LTSP / 20.04?
You need NBD too, 10809
inetd isn't used in the new LTSP
You can use the new LTSP in any Ubuntu version, even 16.04, it's not specific to Ubuntu versions but to the LTSP version
Brilliant, thanks Alkis! You are the man
You've been doing this for 20 years now right?
LTSP that is
No, I only joined the team in 2008
While the team started in 2000
Do any of the original devs still contribute ever
vagrantc is still reviewing my packaging work and uploads to debian, but he's not an "initial dev", he joined a bit afterwards than 2000
It's a bit OT I know but does fail2ban do anything with iptables or ufw (or another firewall) being installed? I ask because it lists those as being optional
I expect not but it doesn't seem to throw any errors if you don't have a firewall configured which seems wrong
As I doscovered last night when I found fail2ban wasn't working on one of our servers becasuse the timezone wasn't set correctly.
So in my case, NBD shares the system files and SSHFS the home dirs right
|10:58||GodFather has joined IRC (GodFatheremail@example.com)|
|11:06||GodFather has left IRC (GodFatherfirstname.lastname@example.org, Ping timeout: 260 seconds)|
|11:20||GodFather has joined IRC (GodFatheremail@example.com)|
|11:49||Aison has left IRC (Aison!~Ivo@2a02:168:200f:100::1:1, Remote host closed the connection)|
|12:08||GodFather has left IRC (GodFatherfirstname.lastname@example.org, Ping timeout: 260 seconds)|
|15:04||Vercas has left IRC (Vercas!~Vercas@unaffiliated/vercas, Ping timeout: 256 seconds)|
|16:41||Vercas has joined IRC (Vercas!~Vercas@unaffiliated/vercas)|
|17:00||danboid has left IRC (danboid!~ISDADS\email@example.com, Ping timeout: 260 seconds)|
|17:51||danboid has joined IRC (danboid!~ISDADS\firstname.lastname@example.org)|
|18:19||danboid has left IRC (danboid!~ISDADS\email@example.com, Quit: Leaving)|
|18:49||RaphGro has left IRC (RaphGro!~raphgro@fedora/raphgro, Quit: Please remember your own message. It'll be read as soon as possible.)|
|23:01||lucascastro has left IRC (firstname.lastname@example.org, Remote host closed the connection)|
|23:01||lucascastro has joined IRC (email@example.com)|
|23:24||mgariepy has left IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy, Ping timeout: 260 seconds)|
|23:34||mgariepy has joined IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy)|