IpCopInAvserver (2004.12.04 01:00:02)

We currently migrate to MediaWiki from our old installation, but not all content has been migrated yet. Take a look at the Wiki Team page for instructions how to help or browse through our new wiki at wiki.linux-vserver.org to find the information already migrated.

Be carrefull, very dirty, rough howto. Corrections always welcome by mail (kalou@kalou.net) or edit directly this page.

I am a poor linux admin, and have got only one linux box in my lab. \

I heard about IPCop, one of the best Firewall Open Source Solution at this time. So let's try to have it run inside a vserver...

Requirements

- a working vserver skel (my skel is a debian sid debootstrap)

Steps

- mount ipcop-1.4.5.iso on /vservers/ipcop/mnt/iso (from the host vserver)
- mkdir /vservers/ipcop
- ipcop:/mnt/iso# tar -zxvf ipcop-1.4.5.tgz -C /ipcop/
  tar will complain about /dev/ entries, because you dont have the CAP_MKNOD .

- In the host server, create the missing devices: (note that I have no isdn)

ipcop:/mnt/iso# grep mknod /tmp/mknod-errors.txt | egrep -v "tty|usb|nst|capi|raid|scd|/st|/sd|/hd|/ram|/fd|/lp|/rd|/parport|/sg|/isdn|/ccis|/ida|/loop|/zero|/dc|/ps"

• dev/net/tun: ne peut mknod: Opération non permise
• dev/ppp: ne peut mknod: Opération non permise
• dev/ippp0: ne peut mknod: Opération non permise
• dev/ippp1: ne peut mknod: Opération non permise
• dev/port: ne peut mknod: Opération non permise
• dev/ipl: ne peut mknod: Opération non permise
• dev/ipnat: ne peut mknod: Opération non permise
• dev/ipstate: ne peut mknod: Opération non permise
• dev/ipauth: ne peut mknod: Opération non permise
• dev/rtc: ne peut mknod: Opération non permise
• dev/ipsec: ne peut mknod: Opération non permise
• dev/cug0: ne peut mknod: Opération non permise

Installing IPCop on windows:

http://ipcop.org/modules.php?op=modload&name=FAQ&file=index&myfaq=yes&id_cat=3#q26