arrow_upward

Posted by: LightDestory - 04-03-2020, 09:19 PM - Forum: Suggestions and Feedback - Replies (11)
As the titles says, it would be nice if Post4VPS could create fancy back-link tags for its own website and its sponsors that we could embed on our services hosted inside the sponsored VPS.
Why?
Well, right now the back-links are likely done with a simple html link element, but to get better visibility it could be a fancy banner or something like that. I mean, if we get this website to get more views we will get a bigger community and it will be more fun Smile
I am not a graphical designer nor I have any good artistic skill, so I am unfortunately unable to provide any sample. 

So, if you got good designer skills, show us what you can do!

Just a little note: to be able to use the banner on a better way it is recommended, but not mandatory, to create vectorial images instead of raster ones.
Posted by: Melvin - 04-03-2020, 03:22 PM - Forum: Meet & Greet! - Replies (10)
Hello beautiful people i'm back.
for those who doesn't know me, my name is Mohamed i'm from Tunisia, i'm a future computer science student. i joined this forum around 8 months later i quit for my studies now i back because i got time to spent here.
i missed this forum guys Heart, long time no see if there is anything changed in this forum please let me know and thanks a lot.
Posted by: tiwil - 04-03-2020, 12:16 PM - Forum: Suggestions and Feedback - Replies (9)
Just a suggestion also about review section, might be add a tag for each sponsor also works? This will give an advantage for sponsor too. So if users want to see a review for X sponsor, they can go for it. I also see some VPS holders review without sponsor name in their title, might not too important, but if using tag for each sponsor, we can know which VPS belong to which sponsor. Just my opinion :p.
Posted by: Littlemaster - 04-03-2020, 11:02 AM - Forum: Suggestions and Feedback - Replies (4)
Is there any scope for adding an Index thread for VPS Review section?
The purposes of this suggestion is as follows:
 -> To help users to select the vps by reading reviews from  other users.
 -> To keep updated  with VPS Plans(Current issue  is some VPS which the sponsorship has already ended, is replaced by some other providers and the reviews are still about the old VPS Plan, for example VPS 3 Review).
-> To keep  the section ordered.
-> To appreciate the reviewers.
Please comment your views.
Thank you.
Posted by: rudra - 04-02-2020, 04:36 PM - Forum: Hobbies - Replies (6)
cold autumn winds, outside,
knocking, on and on, days and night !

in the deep dark lap of the sky,
countless stars, frozen drops of light !!

A lover, roams and roams, alone, down below on Earth..

Endless, unforgiving, old and cold, the path..

Everyone has warned him again and again,

That all this, futile, nothing to lose or gain,

That no matter how much you search and search,

will end up at last, exactly where you start.

But he is happy, for there will always be lands to explore,

That all roads lead to the infinite magical shore..



.....
I'm posting it here, cause this is partly an expression of how i view life.

It started as an attempt to translate a Bengali poem i love so much.

I will give anyone an upvote if you can guess the writer or the poem that I wanted to translate, from those two lines at the start.

please forgive errors. correct anything you deem should be corrected.

thanks for reading.
Posted by: fChk - 04-01-2020, 01:27 PM - Forum: Suggestions and Feedback - Replies (20)
As the title suggests, is there a limit in time on which 2 consecutive posts won't be merged together as one?..

I'm under the impression that the forum doesn't have one. And I suspect that's on purpose to avoid users abusing their post counts. Well, that can perhaps make sense for those with a VPS and are struggling to meet their quota BUT not that much for the others.

I've repeatedly went through the unpleasant experience when doing a second (intentionally independent) post, even after 24 hours or so, to find out that it's merged with the preceding one.

Can you please fix this?
Posted by: Sn1F3rt - 04-01-2020, 11:18 AM - Forum: VPS Support - Replies (8)
Hello,

I'm running into errors with my VPS 9 while trying to RDP. I installed XRDP and TigerVNC and proceeded with the installation of XFCE desktop environment. However, here's the strange thing that's happening. I am able to get the XRDP login screen and after a successful login, I am just getting a black screen and the session disconnects.

I googled a few articles on the web and a few bug fixes ask us to comment out the line `channel_code=1` in `/etc/xrdp/xrdp.ini` however, to my dismay there's no such line in the config file.

As a side note, the last time GNOME did work as a desktop environment on my VPS. This time I installed XFCE as it is lighter than GNOME, which was hogging resources on my VPS the last time. After the latest OS installation, I'm facing this problem, dunno if it's related to XFCE particularly. BTW SELinux is disabled on my VPS.

Hope y'all are able to help me. Smile

Regards,
Posted by: chanalku91 - 04-01-2020, 05:15 AM - Forum: VPS Reviews - Replies (27)
Hi I'm Reflyansyah, last January I was given VPS 6 by Post4Vps after I stopped being the holder of VPS 18!
And after getting VPS 6 I did a lot of experiments and projects that were only designated for fun activities!
But now I started looking for new ideas with VPS 6 after the community that I lived in was destroyed by a team that was paid to report groups on Facebook!
Now some projects are run on VPS 6 but the source code is not stored in this VPS, the reason is to keep the source code safe!
Instead of reading this history, let's just review this VPS! *CMIIW

About VPS providers
BladeNode is a hosting service provider that provides services such as WEB Hosting, VPS Hosting, and DEDICATED Hosting
BladeNode also have a support team that stays 24/7 on-site to help you if you have a problem with their premium service!
For the price of the service itself is quite competitive with large hosting providers such as Vultr and Digital Ocean,
so why not try their services?

VPS INFORMATION
----------------------------
VPS Plans
Terminal
Disk Space: 40 GB
RAM: 2 GB RAM
IP Addresses: 1x IPv4
Virtualization: KVM
Monthly Traffic: 1 TB
Location:  Dallas tx
Control Panel: None
Windows: Yes. With valid license - trial license not allowed.
Connection: 1 GBit/s
Notes: You can run Gameservers without any limits
Provided by: Bladenode


System Info
Terminal
Processor : QEMU Virtual CPU version 2.5+
CPU Cores : 1
Frequency : 2925.998 MHz
Memory : 1829 MB
Swap : 510 MB
Uptime : 5 days, 17:59,

OS : CentOS Linux 8 (Core)
Arch : x86_64 (64 Bit)
Kernel : 4.18.0-147.5.1.el8_1.x86_64
Hostname : Hakunime
Previously I told you the specifications of this little VPS!
Now let's make this VPS slow down by benchmarking it!

CPU BENCHMARK
----------------------------
Geekbench 5
Terminal
Test            | Value                        
               |                              
Single Core     | 433                          
Multi Core      | 437                          
Full Test       | https://browser.geekbench.com/v5/cpu/2393582


UnixBench
Code:
------------------------------------------------------------------------
Benchmark Run: Tue Mar 31 2020 07:50:18 - 08:18:04
1 CPU in system; running 1 parallel copy of tests

Dhrystone 2 using register variables       25564171.8 lps   (10.0 s, 7 samples)
Double-Precision Whetstone                     3527.0 MWIPS (7.2 s, 7 samples)
Execl Throughput                               2462.6 lps   (30.0 s, 2 samples)
File Copy 1024 bufsize 2000 maxblocks        274454.0 KBps  (30.0 s, 2 samples)
File Copy 256 bufsize 500 maxblocks           74817.1 KBps  (30.0 s, 2 samples)
File Copy 4096 bufsize 8000 maxblocks        814627.1 KBps  (30.0 s, 2 samples)
Pipe Throughput                              484108.5 lps   (10.0 s, 7 samples)
Pipe-based Context Switching                 117075.0 lps   (10.0 s, 7 samples)
Process Creation                               5955.8 lps   (30.0 s, 2 samples)
Shell Scripts (1 concurrent)                   3025.8 lpm   (60.0 s, 2 samples)
Shell Scripts (8 concurrent)                    326.1 lpm   (60.1 s, 2 samples)
System Call Overhead                         312248.4 lps   (10.0 s, 7 samples)

System Benchmarks Index Values               BASELINE       RESULT    INDEX
Dhrystone 2 using register variables         116700.0   25564171.8   2190.6
Double-Precision Whetstone                       55.0       3527.0    641.3
Execl Throughput                                 43.0       2462.6    572.7
File Copy 1024 bufsize 2000 maxblocks          3960.0     274454.0    693.1
File Copy 256 bufsize 500 maxblocks            1655.0      74817.1    452.1
File Copy 4096 bufsize 8000 maxblocks          5800.0     814627.1   1404.5
Pipe Throughput                               12440.0     484108.5    389.2
Pipe-based Context Switching                   4000.0     117075.0    292.7
Process Creation                                126.0       5955.8    472.7
Shell Scripts (1 concurrent)                     42.4       3025.8    713.6
Shell Scripts (8 concurrent)                      6.0        326.1    543.6
System Call Overhead                          15000.0     312248.4    208.2
                                                                  ========
System Benchmarks Index Score                                         582.9



DISK BENCHMARK
----------------------------
dd Disk Speed Tests
Terminal
I/O speed(1st run)   : 46.6 MB/s                                                      
I/O speed(2nd run)   : 57.1 MB/s                                                      
I/O speed(3rd run)   : 62.3 MB/s                                                      
Average I/O speed    : 55.3 MB/s


fio Disk Speed Tests (Mixed R/W 50/50)
Terminal
Block Size | 4kb           (IOPS) | 64kb          (IOPS)
 ------   | ---            ----  | ----           ----
Read       | 21.03 MB/s    (5.2k) | 34.70 MB/s     (542)
Write      | 21.04 MB/s    (5.2k) | 35.01 MB/s     (547)
Total      | 42.07 MB/s   (10.5k) | 69.71 MB/s    (1.0k)
          |                      |                    
Block Size | 512kb         (IOPS) | 1mb           (IOPS)
 ------   | -----          ----  | ---            ----
Read       | 37.47 MB/s      (73) | 26.18 MB/s      (25)
Write      | 39.42 MB/s      (77) | 28.60 MB/s      (27)
Total      | 76.90 MB/s     (150) | 54.78 MB/s      (52)


Disk seq.read Speed (Cached)
Terminal
/dev/vda:
Timing cached reads:   14518 MB in  1.99 seconds = 7291.95 MB/sec
Timing buffered disk reads: 640 MB in  3.00 seconds = 213.23 MB/sec


Disk seq.read Speed (Direct)
Terminal
/dev/vda:
Timing O_DIRECT cached reads:   6878 MB in  1.99 seconds = 3457.65 MB/sec
Timing O_DIRECT disk reads: 400 MB in  3.07 seconds = 130.18 MB/sec


Disk Seek Rate
Code:
--- /dev/vda (block device 20 GiB) ioping statistics ---
6.05 k requests completed in 2.96 s, 23.6 MiB read, 2.05 k iops, 7.99 MiB/s
generated 6.05 k requests in 3.00 s, 23.6 MiB, 2.02 k iops, 7.88 MiB/s
min/avg/max/mdev = 94.0 us / 488.7 us / 8.55 ms / 269.9 us


Disk Sequential Speed
Code:
--- /dev/vda (block device 20 GiB) ioping statistics ---
1.03 k requests completed in 2.97 s, 256.5 MiB read, 345 iops, 86.3 MiB/s
generated 1.03 k requests in 3.00 s, 256.8 MiB, 342 iops, 85.6 MiB/s
min/avg/max/mdev = 407.4 us / 2.90 ms / 313.3 ms / 11.2 ms


Disk Latency
Code:
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=1 time=335.3 us (warmup)
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=2 time=479.8 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=3 time=403.9 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=4 time=356.6 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=5 time=353.7 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=6 time=402.2 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=7 time=454.1 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=8 time=431.2 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=9 time=391.2 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=10 time=369.4 us

--- . (xfs /dev/dm-0 17.0 GiB) ioping statistics ---
9 requests completed in 3.64 ms, 36 KiB read, 2.47 k iops, 9.65 MiB/s
generated 10 requests in 9.00 s, 40 KiB, 1 iops, 4.44 KiB/s
min/avg/max/mdev = 353.7 us / 404.7 us / 479.8 us / 41.0 us



NETWORK SPEED TEST
----------------------------
wget Network Speed Tests (IPv4)
Terminal
Node Name                       IPv4 address            Download Speed                
CacheFly                        205.234.175.175         89.1MB/s                      
Linode, Tokyo2, JP              139.162.65.37           14.3MB/s                      
Linode, Singapore, SG           139.162.23.4            10.6MB/s                      
Linode, London, UK              176.58.107.39           909KB/s                        
Linode, Frankfurt, DE           139.162.130.8           18.3MB/s                      
Linode, Fremont, CA             50.116.14.9             2.03MB/s                      
Softlayer, Dallas, TX           173.192.68.18           90.1MB/s                      
Softlayer, Seattle, WA          67.228.112.250          756KB/s                        
Softlayer, Frankfurt, DE        159.122.69.4            10.3MB/s                      
Softlayer, Singapore, SG        119.81.28.170           503KB/s                        
Softlayer, HongKong, CN         119.81.130.170          7.80MB/s                      


iperf3 Network Speed Tests (IPv4)
Terminal
Provider                  | Location (Link)           | Send Speed      | Recv Speed    
                         |                           |                 |                
Bouygues Telecom          | Paris, FR (10G)           | 841 Mbits/sec   | 861 Mbits/sec  
Online.net                | Paris, FR (10G)           | 877 Mbits/sec   | 858 Mbits/sec  
WorldStream               | The Netherlands (10G)     | 849 Mbits/sec   | 657 Mbits/sec  
wilhelm.tel               | Hamburg, DE (10G)         | 834 Mbits/sec   | 801 Mbits/sec  
Biznet                    | Bogor, Indonesia (1G)     | 644 Mbits/sec   | 84.9 Mbits/sec
Hostkey                   | Moscow, RU (1G)           | 835 Mbits/sec   | 812 Mbits/sec  
Velocity Online           | Tallahassee, FL, US (10G) | 918 Mbits/sec   | 923 Mbits/sec  
Airstream Communications  | Eau Claire, WI, US (10G)  | 926 Mbits/sec   | 896 Mbits/sec  
Hurricane Electric        | Fremont, CA, US (10G)     | busy            | busy


speedtest-cli Network Speed Tests (IPv4)
Code:
  Speedtest by Ookla                                                                                                                                                              
Server: Sprint - Enid, OK (id = 11232)                                                    
ISP: Eonix Corporation                                                            
Latency:     2.37 ms   (0.05 ms jitter)                                              
Download:   938.91 Mbps (data used: 469.8 MB)                                            
Upload:   939.79 Mbps (data used: 469.0 MB)                                      
Packet Loss:     0.0%                                                                  
Result URL: https://www.speedtest.net/result/c/bd97b599-35d4-40ad-8569-7ad1b9301a97



Experience
----------------------------
1. This VPS has experienced downtime of more than 6 hours which certainly makes me have to wait for the VPS to turn on again to test a script that I made!
2. For performance, this VPS has never slowed down!
3. Port speed is very stable!

Notes
----------------------------
Some information was updated on 3 / June / 2020



Posted by: deanhills - 04-01-2020, 01:32 AM - Forum: VPS Giveaways - Replies (34)
 12 VPSs are Available
  • 4x VPS 1
  • 2x VPS 3
  • 1x VPS 8
  • 1x VPS 9 (Location: Phoenix) (Note: Detailed justification needed for using large specs)
  • 2x VPS 10
  • 1x VPS 11
  • 1x VPS 12

We're aiming at a date of around 5th of April for announcing the winners.  VPSs will be allocated soon after.

For comparing the VPS Specifications, Users can check https://post4vps.com/compare/#1,3,8,9,10,11,12

PLEASE READ AND UNDERSTAND THE TERMS AND CONDITIONS OF THE SPONSOR BEFORE YOU APPLY - REFER BELOW:
  • Users must read and agree to all terms of the SPONSOR (of the VPS which they want) when they apply.  These can be found on our Plans Page.  
  • When you apply, please let us know your preferred OS and the Domain you will be using with the VPS.

Please Read before Applying
  1. Read Our Forum Rules before applying.
  2. You should have met our minimum requirements to get VPS.
  3. Read Application Format before applying. (If the application format is wrong then your Request will be rejected)
  4. You must post your VPS application in VPS Request Forum.
  5. Read TOS of VPS providers before applying.

Posted by: fChk - 03-31-2020, 01:20 PM - Forum: Tutorials - No Replies
This is Part 2 of my documentation of my experience with EUServ free VPSs, but this time from the stand point of running Fedora 30 (for the perspective of them/VPSs being IPv6-only, see Part 1: Running an IPv6-only VPS Gotchas! )

The use of EUServ's VPSs allowed me to experience not only the challenges of running an IPv6-only VPS but also to have a first-hand account of running Fedora 30 inside an LXD/LXC container.

1- A Bit of Context
First I should mention that LXC is a well-established, low-level Linux container runtime, dating back to 2008; thus well before anyone even heard about the currently widely used Docker alternative (which saw light in 2013.) The problem with LXC containers was/is(/will always be) its sheer complexity because of it being that low-level. Enter LXD (in 2015), which is Canonical's effort to make LXC container accessible by building an API around it in Go language; in this sense, LXD is a container orchestration engine with LXC under-the-hood.

LXD containers can only run Linux operating systems, and being containers suggest that its VMs share all the devices with the host operating system. I explicitly state this because, sysadmins should always remember this when on such VPSs.

With this out of the way now is the time to do all the routines of taking control of a brand new VPS running Fedora 30(+) or CentOS (7, 8 +).

2- Running a Properly Managed VPS
In this section, I'll go through all the steps essential to properly administer any RedHat-based system with few tips that are specific to EUServ Fedora 30 template used in their automation process.

2.1- Secure Your VPS
It's always a good practice to check first on the VPS's datetime and see if it's accurate. In our case here -ie LXD Container- time settings is the Host's prerogative, so we'll just check and may be change the timezone if feel like it.
Code:
[root@srvXYZ ~]# timedatectl
              Local time: Tue 2020-03-31 14:01:32 CEST
          Universal time: Tue 2020-03-31 12:01:32 UTC
                RTC time: n/a
               Time zone: Europe/Berlin (CEST, +0200)
System clock synchronized: yes
             NTP service: inactive
         RTC in local TZ: no

To modify the timezone:
Code:
timedatectl set-timezone XYZ/xyz

You can also change the hostname, but I won't do it here:
Code:
[root@srv10120 ~]# hostnamectl status
  Static hostname: srvXYZ
        Icon name: computer-container
          Chassis: container
       Machine ID: *******************************
          Boot ID: ...............................
   Virtualization: lxc
 Operating System: Fedora 30 (Thirty)
      CPE OS Name: cpe:/o:fedoraproject:fedora:30
           Kernel: Linux 4.20.8-1.el7.elrepo.x86_64
     Architecture: x86-64

2.1.1- Disable Root Login
The absolute first thing to do is to remove the root login via SSH, but to be able to do that, we first need to create a user with sudo power (ie, a sudoer.) For clarity, I'll use the standard 3 steps in Fedora.
Code:
adduser <username>
passwd <username>
usermod -aG wheel <username>

Now, you can test that your 'sudoer' is functioning, by just login out and relogin as your newly created 'super-user', then try to switch as root:
Code:
sudo su -

If you become 'root' after running the command above, then you're all set and you can now go ahead and disable the root login via SSH, by modifying the adhoc line in the '/etc/ssh/sshd_config'
From:
Code:
PermitRootLogin yes

To:
Code:
PermitRootLogin no
Then:
Code:
sshd -t
systemctl restart sshd

2.1.2- Activate the Firewall
I've noticed that Firewalld is down by default:
Code:
[root@srvXYZ ~]# firewall-cmd --state
not running
[root@srvXYZ ~]# systemctl start firewalld
[root@srvXYZ ~]# firewall-cmd --state
running
[root@srvXYZ ~]# systemctl enable firewalld
[root@srvXYZ ~]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
  Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
  Active: active (running) since Tue 2020-03-31 13:21:21 CEST; 1min 7s ago
    Docs: man:firewalld(1)
Main PID: 8609 (firewalld)
   Tasks: 2 (limit: 150)
  Memory: 25.9M
  CGroup: /system.slice/firewalld.service
          └─8609 /usr/bin/python3 /usr/sbin/firewalld --nofork --nopid

Mar 31 13:21:20 srvXYZ systemd[1]: Starting firewalld - dynamic firewall daemon...
Mar 31 13:21:21 srvXYZ systemd[1]: Started firewalld - dynamic firewall daemon.
Mar 31 13:21:23 srvXYZ firewalld[8609]: ERROR: Failed to read file "/proc/sys/net/netfilter/nf_conntrack_helper>
Mar 31 13:21:23 srvXYZ firewalld[8609]: WARNING: Failed to get and parse nf_conntrack_helper setting

Here, I have to pause a second to say that till now I'm still not sure if that thrown error is expected from an LXD container OR is it a bug!.. Is it a permission issue or a misconfiguration ?.. I can't say, didn't dig deep enough!

Ok! Now, eventhough the firewall is running we have to activate it by assigning the VPS public interface to (in this use case) the public zone:

Before, there is no interface in the public zone:
Code:
[root@srvXYZ ~]# firewall-cmd --zone=public --list-all
public
 target: default
 icmp-block-inversion: no
 interfaces:
 sources:
 services: dhcpv6-client mdns ssh
 ports:
 protocols:
 masquerade: no
 forward-ports:
 source-ports:
 icmp-blocks:
 rich rules:

To know more about your VPS net. interfaces:
Code:
[root@srvXYZ ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
   link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
   inet 127.0.0.1/8 scope host lo
      valid_lft forever preferred_lft forever
   inet6 ::1/128 scope host
      valid_lft forever preferred_lft forever
435: eth0@if436: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
   link/ether 00:84:ed:5c:ed:dd brd ff:ff:ff:ff:ff:ff link-netnsid 0
   inet6 2a02:180:X:Y::Z/128 scope global
      valid_lft forever preferred_lft forever
   inet6 fe80::284:edff:fe5c:eddd/64 scope link
      valid_lft forever preferred_lft forever

Time to add the eth0 to the public zone and reload the Firewalld config
Code:
[root@srvXYZ ~]# firewall-cmd --zone=public --change-interface=eth0 --permanent
success
[root@srvXYZ ~]# firewall-cmd --reload
success

Testing the public zone again after this activation:
Code:
[root@srvXYZ ~]# firewall-cmd --zone=public --list-all
public (active)
 target: default
 icmp-block-inversion: no
 interfaces: eth0
 sources:
 services: dhcpv6-client mdns ssh
 ports:
 protocols:
 masquerade: no
 forward-ports:
 source-ports:
 icmp-blocks:
 rich rules:

Now, the only available service through eth0 is the one listed above, anything else blocked!

2.1.3- Removing Password Login and Setting Up Public Key Authentication
I'll come back to this in the last section

This is the minimum required steps to take to secure your VPS. You may add other things, like running the fail2ban package or changing SSH service port, but for me those aren't really important if you do implement the above 3 mechanisms.


2.2- Update your System
Before updating this system, I'd like to make few observations:
> When you check the failed services of your VPS at its startup, you'll see this:
Code:
root@srvXYZ ~]# systemctl --failed
 UNIT                          LOAD   ACTIVE SUB    DESCRIPTION                  
● auditd.service                loaded failed failed Security Auditing Service    
● network.service               loaded failed failed LSB: Bring up/down networking
● systemd-journald-audit.socket loaded failed failed Journal Audit Socket        

LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.

3 loaded units listed.
This is normal for an LXD container (you may add 'sys-kernel-config.mount' service to that list too). What's not normal and an indication of an unstable system is when other things fail and don't won't to restart. I'm thinking for example of one instance where I had the 'sssd.service' (ie, System Security Services Daemon) refusing to start! and it was hell to work on that system

> Being an LXD container, you don't need,,when updating your system, anything related to the kernel, filesystem etc; thus we'll exclude them from the update process, like this:
Code:
[mister-no@srv6XYZ ~]$ vi /etc/dnf/dnf.conf
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
exclude=kernel* grub* filesystem* sudo

If you skip this step, expect a lot of pointless warnings during the update process.

Also, you'll notice that I've also excluded the 'sudo' package, this is because the latest version in Fedora 30 is buggy!

With all this preparation we are now ready to update our system:
Code:
dnf update -y

That's all there is to it!

Notice specific to EUServ's Fedora 30 template:
Even though the template used is the English version, it has the 'glibc-langpack-de' package instead of the 'glibc-langpack-en', thus a warning is issued every time you interact with the shell. So, you're advised to install the English version then remove the German one to fix that issue.

My last section in this OP will be about enabling Public-key Authentication, it's the most important thing to do security-wise and thus deserve to be treated separately.

2.3- Enabling/Using Public-key Authentication
If you're logged in your VPS, logout now, and from your Linux machine (I'm not covering Windows case/Putty), check your system's entropy:
Code:
cat /proc/sys/kernel/random/entropy_avail
3925
You really must have something decent here +1024, we're about to generate an ECDSA key pair for version 2 of the SSH protocol:
Code:
ssh-keygen -f ~/.ssh/vps1-key-ecdsa -t ecdsa -b 521
Generating public/private ecdsa key pair.
Enter passphrase (empty for no passphrase): mySuperHardPWD
Enter same passphrase again:
Your identification has been saved in /home/username/.ssh/vps1-key-ecdsa.
Your public key has been saved in /home/username/.ssh/vps1-key-ecdsa.pub.
The key fingerprint is:
SHA256:qYABz******************************************************
The key's randomart image is:
+---[ECDSA 521]---+
|OOB. .. .*.oo+.  |
|BO.* +=.+.       |
|= . . o ..  o    |
|=.=+. .=..       |
| o. ......F      |
|    .........    |
|     ..          |
|                 |
|                 |
+----[SHA256]-----+

Tha's it!.. Now, what we need to do is send the public key of this key-pair to our VPS, which is done like so (with [email protected] being your sudoer and your VPS IP):
Code:
ssh-copy-id -i ~/.ssh/vps1-key-ecdsa.pub [email protected]

Now, double check that you can indeed login with that key, by login with :
Code:
ssh -i ~/.ssh/vps1-key-ecdsa [email protected]

If you succeed in loging in, then now is the time to disable any password authentication in the SSHD config file and restrict the in/out to the sudoer group and users (extra-security lines in the /etc/ssh/sshd_config files):
Code:
PasswordAuthentication no
AllowUsers <username-of-the-sudoer>
Match User <username-of-the-sudoer>
Match Group wheel
Reload the sshd daemon.
Code:
sshd -t
systemctl restart sshd

From now on your system is ALL YOURS!...

NB: Follow up to this OP will land in this thread when it's deemed important.


UPDATED:
A last tip I forgot to mention, given that we've already set our public-key authentication, is how to make the PPK file out of our pair-key for use with Filezilla to have an sFTP access to your VPS (or for use with Putty for those on Windows who need to use it.)

Well it's as simple as issuing this command:
Code:
puttygen ~/.ssh/vps1-key-ecdsa -o ~/.ssh/vps1-key-ecdsa.ppk -O private

I did a bit of googling about the followinf issue, mentionned above:
(03-31-2020, 01:20 PM)fChk Wrote: (...)
Mar 31 13:21:23 srvXYZ firewalld[8609]: ERROR: Failed to read file "/proc/sys/net/netfilter/nf_conntrack_helper>
Mar 31 13:21:23 srvXYZ firewalld[8609]: WARNING: Failed to get and parse nf_conntrack_helper setting

Here, I have to pause a second to say that till now I'm still not sure if that thrown error is expected from an LXD container OR is it a bug!.. Is it a permission issue or a misconfiguration ?.. I can't say, didn't dig deep enough!
The issue seems to be well known for systems with kernel 4.7 and up where "the automatic helper assignment in kernel has been turned off by default". Check 'Automatic Helper Assignment' for more on that.

Also check this discussion:
> https://github.com/lxc/lxd/issues/4006
Pages (306): Jump to page 
Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





Search Forums

(Advanced Search)

Forum Statistics
» Members: 2,271
» Latest member: orzpainter
» Forum threads: 3,100
» Forum posts: 34,783

Full Statistics

Online Users
There are currently 335 online users.
» 0 Member(s) | 332 Guest(s)
Bing, Google, Applebot

Latest Threads
⚡ EnjoyVPS.Com : 35+ Glob...
Forum: Others
Last Post: RIYAD
01-06-2026, 01:21 AM
» Replies: 0
» Views: 521
Get LLHOST Netherlands Fe...
Forum: Others
Last Post: LLHOST
09-29-2025, 03:02 AM
» Replies: 0
» Views: 976
Super Fast LLHOST Netherl...
Forum: Value VPS Providers
Last Post: LLHOST
09-16-2025, 05:01 AM
» Replies: 0
» Views: 673
Get LLHOST Netherlands Fe...
Forum: Cheap Providers
Last Post: LLHOST
09-08-2025, 01:33 PM
» Replies: 0
» Views: 809
Windows VPS @ $31.5/Year ...
Forum: Cheap Providers
Last Post: DewlanceHosting
08-16-2025, 03:12 AM
» Replies: 0
» Views: 945
Buy DemoTiger Videos on c...
Forum: Others
Last Post: DewlanceHosting
08-16-2025, 03:10 AM
» Replies: 8
» Views: 6,515
Budget Dedicated Servers ...
Forum: Others
Last Post: HostNamaste
08-13-2025, 04:54 AM
» Replies: 2
» Views: 1,971
☁️ How to Use VCCPRO Virt...
Forum: Cheap Providers
Last Post: bestadvisor
07-13-2025, 09:36 AM
» Replies: 0
» Views: 1,408
[Promo] 30% Discount – VP...
Forum: Cheap Providers
Last Post: LLHOST
07-11-2025, 12:56 PM
» Replies: 0
» Views: 1,000
✅ Affordable VPS Hosting ...
Forum: Cheap VPS Providers
Last Post: RIYAD
07-02-2025, 03:02 AM
» Replies: 0
» Views: 2,228

Sponsors: VirMach - Host4Fun - CubeData - Evolution-Host - HostDare - Hyper Expert - Shadow Hosting - Bladenode - Hostlease - RackNerd - ReadyDedis - Limitless Hosting