Notes and bugs from LXD (container) install

[palica]

First of all, thank you for all your effort and great project.

I am installing this inside a container (LXD technology). Using debian/9 image from https://us.images.linuxcontainers.org/ installing on x86_64.

There were some hiccups with the installation inside container.

1. setup script didn't find lsb-release (apt install lsb-release)
2. setup ends with error about /etc/ssh/sshd_config not present (apt install ssh)
3. the image doesn't provide ping command - (apt install iputils-ping)
4. ufw init tries to modprobe some modules, it should check if they are not already loaded (lxc/lxd doesn't allow modprobe)
5. sudo package missing (apt install sudo)
6. when executing the setup over and over again it keeps adding the same line to /etc/locale.gen - it should check if the line is not already present and not add it if it is
7. fail2ban failed in the dpkg phase (I don't have the exact error anymore)
8. /etc/letsencrypt/renewal-hooks/post/ directory is not available before the script tries to install file in it
9. nginx install fails - E: gnupg, gnupg2 and gnupg1 do not seem to be installed
10. more nginx fails - gpg: failed to start agent '/usr/bin/gpg-agent': No such file or directory (apt install gnupg-agent)
11. /root/aenigma/functions: line 508: wget: command not found (apt install wget)
12. | - | Counting down to full ejabberd wipe on this machine... [for 00 more seconds] <= this should definitely not be a countdown but a yes/no question

Let me know if I should open separate issues.

[nordurljosahvida]

Amazing thanks for the very valuable feedback. SO you have an extremely minimal debian install, I very much like that, however I had never tried an install on such a system. Could I kindly ask you for access into one of those containers? That would help me add the various fixes you listed at the right place in the installation script. Thanks!

[palica]

do you have ipv6? can you access an ipv6 only system?

[nordurljosahvida]

absolutely yes, this config keeps getting better and better! ;]

[palica]

I meant: "Can you access an ipv6 only container if I would provide one for you?"

[nordurljosahvida]

yes yes i understand, i meant: absolutely yes [i do have an IPv6 connection] and the comment was about your config. thanks! here's my pubkey:

ssh-rsa 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 nz@os.vu

[palica]

sent an email to nz.is

[nordurljosahvida]

Looking into it now.

Issues list:

• issue name (your suggested solution) [my implemented solution, please review and approve]

• setup script didn't find lsb-release [(apt install lsb-release)]

• setup ends with error about /etc/ssh/sshd_config not present (apt install ssh) [apt install openssh-server]

• sudo package missing (apt install sudo) [remove residual sudo commands from everywhere]

• /etc/letsencrypt/renewal-hooks/post/ directory is not available before the script tries to install file in it [was fixed some time back after you had tried installing, works in bleeding edge]

• /root/aenigma/functions: line 508: wget: command not found [(apt install wget)]

• the image doesn't provide ping command - [(apt install iputils-ping)]

• ufw init tries to modprobe some modules, it should check if they are not already loaded (lxc/lxd doesn't allow modprobe)

• when executing the setup over and over again it keeps adding the same line to /etc/locale.gen - it should check if the line is not already present and not add it if it is

• fail2ban failed in the dpkg phase (I don't have the exact error anymore)

• nginx install fails - E: gnupg, gnupg2 and gnupg1 do not seem to be installed

• more nginx fails - gpg: failed to start agent '/usr/bin/gpg-agent': No such file or directory (apt install gnupg-agent)

• | - | Counting down to full ejabberd wipe on this machine... [for 00 more seconds] <= this should definitely not be a countdown but a yes/no question

Activity log:

apt install screen git
screen
git clone aenigma [...]
apt install lsb-release

[developing...]

[nordurljosahvida]

@palica replied to your email, I'd kindly need you to reset the container to perform further testing

[nordurljosahvida]

will get back to you tomorrow ;]