IRC chat logs for #ltsp on irc.libera.chat (webchat)
Channel log from 13 October 2020 (all times are UTC)
| 01:23 | RaphGro has left IRC (RaphGro!~raphgro@fedora/raphgro, Quit: Please remember your own message. It'll be read as soon as possible.) | |
| 05:26 | RaphGro has joined IRC (RaphGro!~raphgro@fedora/raphgro) | |
| 07:37 | danboid has joined IRC (danboid!~ISDADS\sg@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net) | |
| 07:38 | <danboid> alkisg, I can't see a list of required ports for a LTSP server in the docs. Am I missing it? TFTP, SSH, DHCP (if its running a DHCP server)... any others?
| |
| 07:39 | <alkisg> danboid: we don't have any ltsp-specific services so we avoid to document things that are documented elsewhere
| |
| 07:39 | There's also NFS
| |
| 07:39 | And if you're using epoptes, a lot more
| |
| 07:40 | <danboid> "we don't have any ltsp-specific services so we avoid to document things that are documented elsewhere" What do you mean and where is this documented?
| |
| 07:40 | <alkisg> danboid: I mean that we don't have documentation for libreoffice
| |
| 07:40 | Because it's not specific to LTSP
| |
| 07:40 | We also don't have documentation about gedit
| |
| 07:41 | And we don't have documentation about NFS or SSHFS ports
| |
| 07:41 | If you want to write documentation about all these in the ltsp wiki, we don't mind though
| |
| 07:41 | <danboid> Sure SSHFS only requires port 22 like SSH? I thought LTSP either used SSHFS or NFS
| |
| 07:42 | <alkisg> Sure
| |
| 07:42 | And we don't document the software we're using
| |
| 07:42 | It's documented in their sites
| |
| 07:42 | E.g. in the ssh site, in the nfs site, etc
| |
| 07:43 | <danboid> I'm confused. Does LTSP use NFS by default to share files. SSHFS or both?
| |
| 07:43 | <alkisg> NFS for / rootfs, and SSHFS for /home
| |
| 07:43 | I.e. both
| |
| 07:44 | https://ltsp.org/ mentions some of the tools we're using
| |
| 07:44 | In the first page
| |
| 07:48 | <danboid> I presume I only need to open the DHCP ports if I'm running a DHCP server on the LTSP server?
| |
| 07:49 | <alkisg> netstat -nap is your friend
| |
| 07:49 | See the services you are running, and decide which of them you need
| |
| 07:49 | netstat -ntap
| |
| 08:55 | <danboid> alkisg, Does an LTSP server need to open the inetd port, 9571?
| |
| 08:55 | <alkisg> No
| |
| 08:55 | <danboid> OK
| |
| 09:00 | Unless I'm missing something, it looks to me like people might be able to get away with just opening ports 22 TCP for SSH and SSHFS and 111 TCP and UDP for NFS, for a bare bones LTSP server not using epoptes and not running a dhcp server. Does that sound right?
| |
| 09:05 | This is for a LTSP server configured 4 years ago, so it may be a little different to the latest
| |
| 09:05 | <alkisg> Then you need inetd
| |
| 09:06 | And possibly NBD, but not NFS
| |
| 09:06 | <danboid> Ah right! Thanks
| |
| 09:07 | <alkisg> NFS needs 2049 btw
| |
| 09:07 | <danboid> Right yes, TCP and UDP right
| |
| 09:07 | for 2049
| |
| 09:07 | <alkisg> But you're probably not using NFS at all
| |
| 09:07 | If you're using LTSP5
| |
| 09:08 | It depends on the distribution as well
| |
| 09:08 | <danboid> Its listening on port 111
| |
| 09:08 | 16.04
| |
| 09:08 | <alkisg> Then you're not using NFS
| |
| 09:09 | <danboid> OK, I didn't think so as exportfs and showmount weren't showing anything
| |
| 09:11 | So in my case I might just need SSH (22) and inetd ports open as the bare minimum
| |
| 09:12 | Sounds like if from what you've just told me + netstat output
| |
| 09:13 | inetd isn't used under latest LTSP / 20.04?
| |
| 09:17 | <alkisg> You need NBD too, 10809
| |
| 09:17 | inetd isn't used in the new LTSP
| |
| 09:17 | You can use the new LTSP in any Ubuntu version, even 16.04, it's not specific to Ubuntu versions but to the LTSP version
| |
| 09:17 | <danboid> Brilliant, thanks Alkis! You are the man
| |
| 09:19 | You've been doing this for 20 years now right?
| |
| 09:19 | LTSP that is
| |
| 09:19 | <alkisg> No, I only joined the team in 2008
| |
| 09:19 | While the team started in 2000
| |
| 09:22 | <danboid> Do any of the original devs still contribute ever
| |
| 09:23 | <alkisg> vagrantc is still reviewing my packaging work and uploads to debian, but he's not an "initial dev", he joined a bit afterwards than 2000
| |
| 09:25 | <danboid> It's a bit OT I know but does fail2ban do anything with iptables or ufw (or another firewall) being installed? I ask because it lists those as being optional
| |
| 09:25 | *without
| |
| 09:27 | I expect not but it doesn't seem to throw any errors if you don't have a firewall configured which seems wrong
| |
| 09:28 | As I doscovered last night when I found fail2ban wasn't working on one of our servers becasuse the timezone wasn't set correctly.
| |
| 09:37 | So in my case, NBD shares the system files and SSHFS the home dirs right
| |
| 09:37 | Under 16.04
| |
| 09:37 | With LTSP5
| |
| 10:58 | GodFather has joined IRC (GodFather!~rcc@70-88-125-138-static.hfc.comcastbusiness.net) | |
| 11:06 | GodFather has left IRC (GodFather!~rcc@70-88-125-138-static.hfc.comcastbusiness.net, Ping timeout: 260 seconds) | |
| 11:20 | GodFather has joined IRC (GodFather!~rcc@70-88-125-138-static.hfc.comcastbusiness.net) | |
| 11:49 | Aison has left IRC (Aison!~Ivo@2a02:168:200f:100::1:1, Remote host closed the connection) | |
| 12:08 | GodFather has left IRC (GodFather!~rcc@70-88-125-138-static.hfc.comcastbusiness.net, Ping timeout: 260 seconds) | |
| 15:04 | Vercas has left IRC (Vercas!~Vercas@unaffiliated/vercas, Ping timeout: 256 seconds) | |
| 16:41 | Vercas has joined IRC (Vercas!~Vercas@unaffiliated/vercas) | |
| 17:00 | danboid has left IRC (danboid!~ISDADS\sg@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net, Ping timeout: 260 seconds) | |
| 17:51 | danboid has joined IRC (danboid!~ISDADS\sg@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net) | |
| 18:19 | danboid has left IRC (danboid!~ISDADS\sg@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net, Quit: Leaving) | |
| 18:49 | RaphGro has left IRC (RaphGro!~raphgro@fedora/raphgro, Quit: Please remember your own message. It'll be read as soon as possible.) | |
| 23:01 | lucascastro has left IRC (lucascastro!~lucascast@177-185-139-15.dynamic.isotelco.net.br, Remote host closed the connection) | |
| 23:01 | lucascastro has joined IRC (lucascastro!~lucascast@177-185-139-15.dynamic.isotelco.net.br) | |
| 23:24 | mgariepy has left IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy, Ping timeout: 260 seconds) | |
| 23:34 | mgariepy has joined IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy) | |