As the titles says, it would be nice if Post4VPS could create fancy back-link tags for its own website and its sponsors that we could embed on our services hosted inside the sponsored VPS.
Why?
Well, right now the back-links are likely done with a simple html link element, but to get better visibility it could be a fancy banner or something like that. I mean, if we get this website to get more views we will get a bigger community and it will be more fun
I am not a graphical designer nor I have any good artistic skill, so I am unfortunately unable to provide any sample.
So, if you got good designer skills, show us what you can do!
Just a little note: to be able to use the banner on a better way it is recommended, but not mandatory, to create vectorial images instead of raster ones.
Why?
Well, right now the back-links are likely done with a simple html link element, but to get better visibility it could be a fancy banner or something like that. I mean, if we get this website to get more views we will get a bigger community and it will be more fun

I am not a graphical designer nor I have any good artistic skill, so I am unfortunately unable to provide any sample.
So, if you got good designer skills, show us what you can do!
Just a little note: to be able to use the banner on a better way it is recommended, but not mandatory, to create vectorial images instead of raster ones.
Hello beautiful people i'm back.
for those who doesn't know me, my name is Mohamed i'm from Tunisia, i'm a future computer science student. i joined this forum around 8 months later i quit for my studies now i back because i got time to spent here.
i missed this forum guys
, long time no see if there is anything changed in this forum please let me know and thanks a lot.
for those who doesn't know me, my name is Mohamed i'm from Tunisia, i'm a future computer science student. i joined this forum around 8 months later i quit for my studies now i back because i got time to spent here.
i missed this forum guys
, long time no see if there is anything changed in this forum please let me know and thanks a lot.
Just a suggestion also about review section, might be add a tag for each sponsor also works? This will give an advantage for sponsor too. So if users want to see a review for X sponsor, they can go for it. I also see some VPS holders review without sponsor name in their title, might not too important, but if using tag for each sponsor, we can know which VPS belong to which sponsor. Just my opinion :p.
Is there any scope for adding an Index thread for VPS Review section?
The purposes of this suggestion is as follows:
-> To help users to select the vps by reading reviews from other users.
-> To keep updated with VPS Plans(Current issue is some VPS which the sponsorship has already ended, is replaced by some other providers and the reviews are still about the old VPS Plan, for example VPS 3 Review).
-> To keep the section ordered.
-> To appreciate the reviewers.
Please comment your views.
Thank you.
The purposes of this suggestion is as follows:
-> To help users to select the vps by reading reviews from other users.
-> To keep updated with VPS Plans(Current issue is some VPS which the sponsorship has already ended, is replaced by some other providers and the reviews are still about the old VPS Plan, for example VPS 3 Review).
-> To keep the section ordered.
-> To appreciate the reviewers.
Please comment your views.
Thank you.
cold autumn winds, outside,
knocking, on and on, days and night !
in the deep dark lap of the sky,
countless stars, frozen drops of light !!
A lover, roams and roams, alone, down below on Earth..
Endless, unforgiving, old and cold, the path..
Everyone has warned him again and again,
That all this, futile, nothing to lose or gain,
That no matter how much you search and search,
will end up at last, exactly where you start.
But he is happy, for there will always be lands to explore,
That all roads lead to the infinite magical shore..
.....
I'm posting it here, cause this is partly an expression of how i view life.
It started as an attempt to translate a Bengali poem i love so much.
I will give anyone an upvote if you can guess the writer or the poem that I wanted to translate, from those two lines at the start.
please forgive errors. correct anything you deem should be corrected.
thanks for reading.
knocking, on and on, days and night !
in the deep dark lap of the sky,
countless stars, frozen drops of light !!
A lover, roams and roams, alone, down below on Earth..
Endless, unforgiving, old and cold, the path..
Everyone has warned him again and again,
That all this, futile, nothing to lose or gain,
That no matter how much you search and search,
will end up at last, exactly where you start.
But he is happy, for there will always be lands to explore,
That all roads lead to the infinite magical shore..
.....
I'm posting it here, cause this is partly an expression of how i view life.
It started as an attempt to translate a Bengali poem i love so much.
I will give anyone an upvote if you can guess the writer or the poem that I wanted to translate, from those two lines at the start.
please forgive errors. correct anything you deem should be corrected.
thanks for reading.
As the title suggests, is there a limit in time on which 2 consecutive posts won't be merged together as one?..
I'm under the impression that the forum doesn't have one. And I suspect that's on purpose to avoid users abusing their post counts. Well, that can perhaps make sense for those with a VPS and are struggling to meet their quota BUT not that much for the others.
I've repeatedly went through the unpleasant experience when doing a second (intentionally independent) post, even after 24 hours or so, to find out that it's merged with the preceding one.
Can you please fix this?
I'm under the impression that the forum doesn't have one. And I suspect that's on purpose to avoid users abusing their post counts. Well, that can perhaps make sense for those with a VPS and are struggling to meet their quota BUT not that much for the others.
I've repeatedly went through the unpleasant experience when doing a second (intentionally independent) post, even after 24 hours or so, to find out that it's merged with the preceding one.
Can you please fix this?
Hello,
I'm running into errors with my VPS 9 while trying to RDP. I installed XRDP and TigerVNC and proceeded with the installation of XFCE desktop environment. However, here's the strange thing that's happening. I am able to get the XRDP login screen and after a successful login, I am just getting a black screen and the session disconnects.
I googled a few articles on the web and a few bug fixes ask us to comment out the line `channel_code=1` in `/etc/xrdp/xrdp.ini` however, to my dismay there's no such line in the config file.
As a side note, the last time GNOME did work as a desktop environment on my VPS. This time I installed XFCE as it is lighter than GNOME, which was hogging resources on my VPS the last time. After the latest OS installation, I'm facing this problem, dunno if it's related to XFCE particularly. BTW SELinux is disabled on my VPS.
Hope y'all are able to help me.
Regards,
I'm running into errors with my VPS 9 while trying to RDP. I installed XRDP and TigerVNC and proceeded with the installation of XFCE desktop environment. However, here's the strange thing that's happening. I am able to get the XRDP login screen and after a successful login, I am just getting a black screen and the session disconnects.
I googled a few articles on the web and a few bug fixes ask us to comment out the line `channel_code=1` in `/etc/xrdp/xrdp.ini` however, to my dismay there's no such line in the config file.
As a side note, the last time GNOME did work as a desktop environment on my VPS. This time I installed XFCE as it is lighter than GNOME, which was hogging resources on my VPS the last time. After the latest OS installation, I'm facing this problem, dunno if it's related to XFCE particularly. BTW SELinux is disabled on my VPS.
Hope y'all are able to help me.

Regards,
Hi I'm Reflyansyah, last January I was given VPS 6 by Post4Vps after I stopped being the holder of VPS 18!
And after getting VPS 6 I did a lot of experiments and projects that were only designated for fun activities!
But now I started looking for new ideas with VPS 6 after the community that I lived in was destroyed by a team that was paid to report groups on Facebook!
Now some projects are run on VPS 6 but the source code is not stored in this VPS, the reason is to keep the source code safe!
Instead of reading this history, let's just review this VPS! *CMIIW
About VPS providers
BladeNode is a hosting service provider that provides services such as WEB Hosting, VPS Hosting, and DEDICATED Hosting
BladeNode also have a support team that stays 24/7 on-site to help you if you have a problem with their premium service!
For the price of the service itself is quite competitive with large hosting providers such as Vultr and Digital Ocean,
so why not try their services?
VPS INFORMATION
----------------------------
VPS Plans
System Info
Now let's make this VPS slow down by benchmarking it!
CPU BENCHMARK
----------------------------
Geekbench 5
UnixBench
DISK BENCHMARK
----------------------------
dd Disk Speed Tests
fio Disk Speed Tests (Mixed R/W 50/50)
Disk seq.read Speed (Cached)
Disk seq.read Speed (Direct)
Disk Seek Rate
Disk Sequential Speed
Disk Latency
NETWORK SPEED TEST
----------------------------
wget Network Speed Tests (IPv4)
iperf3 Network Speed Tests (IPv4)
speedtest-cli Network Speed Tests (IPv4)
Experience
----------------------------
1. This VPS has experienced downtime of more than 6 hours which certainly makes me have to wait for the VPS to turn on again to test a script that I made!
2. For performance, this VPS has never slowed down!
3. Port speed is very stable!
Notes
----------------------------
Some information was updated on 3 / June / 2020
And after getting VPS 6 I did a lot of experiments and projects that were only designated for fun activities!
But now I started looking for new ideas with VPS 6 after the community that I lived in was destroyed by a team that was paid to report groups on Facebook!
Now some projects are run on VPS 6 but the source code is not stored in this VPS, the reason is to keep the source code safe!
Instead of reading this history, let's just review this VPS! *CMIIW
About VPS providers
BladeNode is a hosting service provider that provides services such as WEB Hosting, VPS Hosting, and DEDICATED Hosting
BladeNode also have a support team that stays 24/7 on-site to help you if you have a problem with their premium service!
For the price of the service itself is quite competitive with large hosting providers such as Vultr and Digital Ocean,
so why not try their services?
VPS INFORMATION
----------------------------
VPS Plans
Disk Space: 40 GB
RAM: 2 GB RAM
IP Addresses: 1x IPv4
Virtualization: KVM
Monthly Traffic: 1 TB
Location: Dallas tx
Control Panel: None
Windows: Yes. With valid license - trial license not allowed.
Connection: 1 GBit/s
Notes: You can run Gameservers without any limits
Provided by: Bladenode
RAM: 2 GB RAM
IP Addresses: 1x IPv4
Virtualization: KVM
Monthly Traffic: 1 TB
Location: Dallas tx
Control Panel: None
Windows: Yes. With valid license - trial license not allowed.
Connection: 1 GBit/s
Notes: You can run Gameservers without any limits
Provided by: Bladenode
System Info
Processor : QEMU Virtual CPU version 2.5+
CPU Cores : 1
Frequency : 2925.998 MHz
Memory : 1829 MB
Swap : 510 MB
Uptime : 5 days, 17:59,
OS : CentOS Linux 8 (Core)
Arch : x86_64 (64 Bit)
Kernel : 4.18.0-147.5.1.el8_1.x86_64
Hostname : Hakunime
Previously I told you the specifications of this little VPS!CPU Cores : 1
Frequency : 2925.998 MHz
Memory : 1829 MB
Swap : 510 MB
Uptime : 5 days, 17:59,
OS : CentOS Linux 8 (Core)
Arch : x86_64 (64 Bit)
Kernel : 4.18.0-147.5.1.el8_1.x86_64
Hostname : Hakunime
Now let's make this VPS slow down by benchmarking it!
CPU BENCHMARK
----------------------------
Geekbench 5
Test | Value
|
Single Core | 433
Multi Core | 437
Full Test | https://browser.geekbench.com/v5/cpu/2393582
|
Single Core | 433
Multi Core | 437
Full Test | https://browser.geekbench.com/v5/cpu/2393582
UnixBench
Code:
------------------------------------------------------------------------
Benchmark Run: Tue Mar 31 2020 07:50:18 - 08:18:04
1 CPU in system; running 1 parallel copy of tests
Dhrystone 2 using register variables 25564171.8 lps (10.0 s, 7 samples)
Double-Precision Whetstone 3527.0 MWIPS (7.2 s, 7 samples)
Execl Throughput 2462.6 lps (30.0 s, 2 samples)
File Copy 1024 bufsize 2000 maxblocks 274454.0 KBps (30.0 s, 2 samples)
File Copy 256 bufsize 500 maxblocks 74817.1 KBps (30.0 s, 2 samples)
File Copy 4096 bufsize 8000 maxblocks 814627.1 KBps (30.0 s, 2 samples)
Pipe Throughput 484108.5 lps (10.0 s, 7 samples)
Pipe-based Context Switching 117075.0 lps (10.0 s, 7 samples)
Process Creation 5955.8 lps (30.0 s, 2 samples)
Shell Scripts (1 concurrent) 3025.8 lpm (60.0 s, 2 samples)
Shell Scripts (8 concurrent) 326.1 lpm (60.1 s, 2 samples)
System Call Overhead 312248.4 lps (10.0 s, 7 samples)
System Benchmarks Index Values BASELINE RESULT INDEX
Dhrystone 2 using register variables 116700.0 25564171.8 2190.6
Double-Precision Whetstone 55.0 3527.0 641.3
Execl Throughput 43.0 2462.6 572.7
File Copy 1024 bufsize 2000 maxblocks 3960.0 274454.0 693.1
File Copy 256 bufsize 500 maxblocks 1655.0 74817.1 452.1
File Copy 4096 bufsize 8000 maxblocks 5800.0 814627.1 1404.5
Pipe Throughput 12440.0 484108.5 389.2
Pipe-based Context Switching 4000.0 117075.0 292.7
Process Creation 126.0 5955.8 472.7
Shell Scripts (1 concurrent) 42.4 3025.8 713.6
Shell Scripts (8 concurrent) 6.0 326.1 543.6
System Call Overhead 15000.0 312248.4 208.2
========
System Benchmarks Index Score 582.9DISK BENCHMARK
----------------------------
dd Disk Speed Tests
I/O speed(1st run) : 46.6 MB/s
I/O speed(2nd run) : 57.1 MB/s
I/O speed(3rd run) : 62.3 MB/s
Average I/O speed : 55.3 MB/s
I/O speed(2nd run) : 57.1 MB/s
I/O speed(3rd run) : 62.3 MB/s
Average I/O speed : 55.3 MB/s
fio Disk Speed Tests (Mixed R/W 50/50)
Block Size | 4kb (IOPS) | 64kb (IOPS)
------ | --- ---- | ---- ----
Read | 21.03 MB/s (5.2k) | 34.70 MB/s (542)
Write | 21.04 MB/s (5.2k) | 35.01 MB/s (547)
Total | 42.07 MB/s (10.5k) | 69.71 MB/s (1.0k)
| |
Block Size | 512kb (IOPS) | 1mb (IOPS)
------ | ----- ---- | --- ----
Read | 37.47 MB/s (73) | 26.18 MB/s (25)
Write | 39.42 MB/s (77) | 28.60 MB/s (27)
Total | 76.90 MB/s (150) | 54.78 MB/s (52)
------ | --- ---- | ---- ----
Read | 21.03 MB/s (5.2k) | 34.70 MB/s (542)
Write | 21.04 MB/s (5.2k) | 35.01 MB/s (547)
Total | 42.07 MB/s (10.5k) | 69.71 MB/s (1.0k)
| |
Block Size | 512kb (IOPS) | 1mb (IOPS)
------ | ----- ---- | --- ----
Read | 37.47 MB/s (73) | 26.18 MB/s (25)
Write | 39.42 MB/s (77) | 28.60 MB/s (27)
Total | 76.90 MB/s (150) | 54.78 MB/s (52)
Disk seq.read Speed (Cached)
/dev/vda:
Timing cached reads: 14518 MB in 1.99 seconds = 7291.95 MB/sec
Timing buffered disk reads: 640 MB in 3.00 seconds = 213.23 MB/sec
Timing cached reads: 14518 MB in 1.99 seconds = 7291.95 MB/sec
Timing buffered disk reads: 640 MB in 3.00 seconds = 213.23 MB/sec
Disk seq.read Speed (Direct)
/dev/vda:
Timing O_DIRECT cached reads: 6878 MB in 1.99 seconds = 3457.65 MB/sec
Timing O_DIRECT disk reads: 400 MB in 3.07 seconds = 130.18 MB/sec
Timing O_DIRECT cached reads: 6878 MB in 1.99 seconds = 3457.65 MB/sec
Timing O_DIRECT disk reads: 400 MB in 3.07 seconds = 130.18 MB/sec
Disk Seek Rate
Code:
--- /dev/vda (block device 20 GiB) ioping statistics ---
6.05 k requests completed in 2.96 s, 23.6 MiB read, 2.05 k iops, 7.99 MiB/s
generated 6.05 k requests in 3.00 s, 23.6 MiB, 2.02 k iops, 7.88 MiB/s
min/avg/max/mdev = 94.0 us / 488.7 us / 8.55 ms / 269.9 usDisk Sequential Speed
Code:
--- /dev/vda (block device 20 GiB) ioping statistics ---
1.03 k requests completed in 2.97 s, 256.5 MiB read, 345 iops, 86.3 MiB/s
generated 1.03 k requests in 3.00 s, 256.8 MiB, 342 iops, 85.6 MiB/s
min/avg/max/mdev = 407.4 us / 2.90 ms / 313.3 ms / 11.2 msDisk Latency
Code:
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=1 time=335.3 us (warmup)
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=2 time=479.8 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=3 time=403.9 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=4 time=356.6 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=5 time=353.7 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=6 time=402.2 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=7 time=454.1 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=8 time=431.2 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=9 time=391.2 us
4 KiB <<< . (xfs /dev/dm-0 17.0 GiB): request=10 time=369.4 us
--- . (xfs /dev/dm-0 17.0 GiB) ioping statistics ---
9 requests completed in 3.64 ms, 36 KiB read, 2.47 k iops, 9.65 MiB/s
generated 10 requests in 9.00 s, 40 KiB, 1 iops, 4.44 KiB/s
min/avg/max/mdev = 353.7 us / 404.7 us / 479.8 us / 41.0 usNETWORK SPEED TEST
----------------------------
wget Network Speed Tests (IPv4)
Node Name IPv4 address Download Speed
CacheFly 205.234.175.175 89.1MB/s
Linode, Tokyo2, JP 139.162.65.37 14.3MB/s
Linode, Singapore, SG 139.162.23.4 10.6MB/s
Linode, London, UK 176.58.107.39 909KB/s
Linode, Frankfurt, DE 139.162.130.8 18.3MB/s
Linode, Fremont, CA 50.116.14.9 2.03MB/s
Softlayer, Dallas, TX 173.192.68.18 90.1MB/s
Softlayer, Seattle, WA 67.228.112.250 756KB/s
Softlayer, Frankfurt, DE 159.122.69.4 10.3MB/s
Softlayer, Singapore, SG 119.81.28.170 503KB/s
Softlayer, HongKong, CN 119.81.130.170 7.80MB/s
CacheFly 205.234.175.175 89.1MB/s
Linode, Tokyo2, JP 139.162.65.37 14.3MB/s
Linode, Singapore, SG 139.162.23.4 10.6MB/s
Linode, London, UK 176.58.107.39 909KB/s
Linode, Frankfurt, DE 139.162.130.8 18.3MB/s
Linode, Fremont, CA 50.116.14.9 2.03MB/s
Softlayer, Dallas, TX 173.192.68.18 90.1MB/s
Softlayer, Seattle, WA 67.228.112.250 756KB/s
Softlayer, Frankfurt, DE 159.122.69.4 10.3MB/s
Softlayer, Singapore, SG 119.81.28.170 503KB/s
Softlayer, HongKong, CN 119.81.130.170 7.80MB/s
iperf3 Network Speed Tests (IPv4)
Provider | Location (Link) | Send Speed | Recv Speed
| | |
Bouygues Telecom | Paris, FR (10G) | 841 Mbits/sec | 861 Mbits/sec
Online.net | Paris, FR (10G) | 877 Mbits/sec | 858 Mbits/sec
WorldStream | The Netherlands (10G) | 849 Mbits/sec | 657 Mbits/sec
wilhelm.tel | Hamburg, DE (10G) | 834 Mbits/sec | 801 Mbits/sec
Biznet | Bogor, Indonesia (1G) | 644 Mbits/sec | 84.9 Mbits/sec
Hostkey | Moscow, RU (1G) | 835 Mbits/sec | 812 Mbits/sec
Velocity Online | Tallahassee, FL, US (10G) | 918 Mbits/sec | 923 Mbits/sec
Airstream Communications | Eau Claire, WI, US (10G) | 926 Mbits/sec | 896 Mbits/sec
Hurricane Electric | Fremont, CA, US (10G) | busy | busy
| | |
Bouygues Telecom | Paris, FR (10G) | 841 Mbits/sec | 861 Mbits/sec
Online.net | Paris, FR (10G) | 877 Mbits/sec | 858 Mbits/sec
WorldStream | The Netherlands (10G) | 849 Mbits/sec | 657 Mbits/sec
wilhelm.tel | Hamburg, DE (10G) | 834 Mbits/sec | 801 Mbits/sec
Biznet | Bogor, Indonesia (1G) | 644 Mbits/sec | 84.9 Mbits/sec
Hostkey | Moscow, RU (1G) | 835 Mbits/sec | 812 Mbits/sec
Velocity Online | Tallahassee, FL, US (10G) | 918 Mbits/sec | 923 Mbits/sec
Airstream Communications | Eau Claire, WI, US (10G) | 926 Mbits/sec | 896 Mbits/sec
Hurricane Electric | Fremont, CA, US (10G) | busy | busy
speedtest-cli Network Speed Tests (IPv4)
Code:
Speedtest by Ookla
Server: Sprint - Enid, OK (id = 11232)
ISP: Eonix Corporation
Latency: 2.37 ms (0.05 ms jitter)
Download: 938.91 Mbps (data used: 469.8 MB)
Upload: 939.79 Mbps (data used: 469.0 MB)
Packet Loss: 0.0%
Result URL: https://www.speedtest.net/result/c/bd97b599-35d4-40ad-8569-7ad1b9301a97Experience
----------------------------
1. This VPS has experienced downtime of more than 6 hours which certainly makes me have to wait for the VPS to turn on again to test a script that I made!
2. For performance, this VPS has never slowed down!
3. Port speed is very stable!
Notes
----------------------------
Some information was updated on 3 / June / 2020
12 VPSs are Available
- 4x VPS 1
- 2x VPS 3
- 1x VPS 8
- 1x VPS 9 (Location: Phoenix) (Note: Detailed justification needed for using large specs)
- 2x VPS 10
- 1x VPS 11
- 1x VPS 12
We're aiming at a date of around 5th of April for announcing the winners. VPSs will be allocated soon after.
For comparing the VPS Specifications, Users can check https://post4vps.com/compare/#1,3,8,9,10,11,12
PLEASE READ AND UNDERSTAND THE TERMS AND CONDITIONS OF THE SPONSOR BEFORE YOU APPLY - REFER BELOW:
- Users must read and agree to all terms of the SPONSOR (of the VPS which they want) when they apply. These can be found on our Plans Page.
- When you apply, please let us know your preferred OS and the Domain you will be using with the VPS.
Please Read before Applying
- Read Our Forum Rules before applying.
- You should have met our minimum requirements to get VPS.
- Read Application Format before applying. (If the application format is wrong then your Request will be rejected)
- You must post your VPS application in VPS Request Forum.
- Read TOS of VPS providers before applying.
This is Part 2 of my documentation of my experience with EUServ free VPSs, but this time from the stand point of running Fedora 30 (for the perspective of them/VPSs being IPv6-only, see Part 1: Running an IPv6-only VPS Gotchas! )
The use of EUServ's VPSs allowed me to experience not only the challenges of running an IPv6-only VPS but also to have a first-hand account of running Fedora 30 inside an LXD/LXC container.
1- A Bit of Context
First I should mention that LXC is a well-established, low-level Linux container runtime, dating back to 2008; thus well before anyone even heard about the currently widely used Docker alternative (which saw light in 2013.) The problem with LXC containers was/is(/will always be) its sheer complexity because of it being that low-level. Enter LXD (in 2015), which is Canonical's effort to make LXC container accessible by building an API around it in Go language; in this sense, LXD is a container orchestration engine with LXC under-the-hood.
LXD containers can only run Linux operating systems, and being containers suggest that its VMs share all the devices with the host operating system. I explicitly state this because, sysadmins should always remember this when on such VPSs.
With this out of the way now is the time to do all the routines of taking control of a brand new VPS running Fedora 30(+) or CentOS (7, 8 +).
2- Running a Properly Managed VPS
In this section, I'll go through all the steps essential to properly administer any RedHat-based system with few tips that are specific to EUServ Fedora 30 template used in their automation process.
2.1- Secure Your VPS
It's always a good practice to check first on the VPS's datetime and see if it's accurate. In our case here -ie LXD Container- time settings is the Host's prerogative, so we'll just check and may be change the timezone if feel like it.
To modify the timezone:
You can also change the hostname, but I won't do it here:
2.1.1- Disable Root Login
The absolute first thing to do is to remove the root login via SSH, but to be able to do that, we first need to create a user with sudo power (ie, a sudoer.) For clarity, I'll use the standard 3 steps in Fedora.
Now, you can test that your 'sudoer' is functioning, by just login out and relogin as your newly created 'super-user', then try to switch as root:
If you become 'root' after running the command above, then you're all set and you can now go ahead and disable the root login via SSH, by modifying the adhoc line in the '/etc/ssh/sshd_config'
From:
To:
Then:
2.1.2- Activate the Firewall
I've noticed that Firewalld is down by default:
Here, I have to pause a second to say that till now I'm still not sure if that thrown error is expected from an LXD container OR is it a bug!.. Is it a permission issue or a misconfiguration ?.. I can't say, didn't dig deep enough!
Ok! Now, eventhough the firewall is running we have to activate it by assigning the VPS public interface to (in this use case) the public zone:
Before, there is no interface in the public zone:
To know more about your VPS net. interfaces:
Time to add the eth0 to the public zone and reload the Firewalld config
Testing the public zone again after this activation:
Now, the only available service through eth0 is the one listed above, anything else blocked!
2.1.3- Removing Password Login and Setting Up Public Key Authentication
I'll come back to this in the last section
This is the minimum required steps to take to secure your VPS. You may add other things, like running the fail2ban package or changing SSH service port, but for me those aren't really important if you do implement the above 3 mechanisms.
2.2- Update your System
Before updating this system, I'd like to make few observations:
> When you check the failed services of your VPS at its startup, you'll see this:
This is normal for an LXD container (you may add 'sys-kernel-config.mount' service to that list too). What's not normal and an indication of an unstable system is when other things fail and don't won't to restart. I'm thinking for example of one instance where I had the 'sssd.service' (ie, System Security Services Daemon) refusing to start! and it was hell to work on that system
> Being an LXD container, you don't need,,when updating your system, anything related to the kernel, filesystem etc; thus we'll exclude them from the update process, like this:
If you skip this step, expect a lot of pointless warnings during the update process.
Also, you'll notice that I've also excluded the 'sudo' package, this is because the latest version in Fedora 30 is buggy!
With all this preparation we are now ready to update our system:
That's all there is to it!
Notice specific to EUServ's Fedora 30 template:
Even though the template used is the English version, it has the 'glibc-langpack-de' package instead of the 'glibc-langpack-en', thus a warning is issued every time you interact with the shell. So, you're advised to install the English version then remove the German one to fix that issue.
My last section in this OP will be about enabling Public-key Authentication, it's the most important thing to do security-wise and thus deserve to be treated separately.
2.3- Enabling/Using Public-key Authentication
If you're logged in your VPS, logout now, and from your Linux machine (I'm not covering Windows case/Putty), check your system's entropy:
You really must have something decent here +1024, we're about to generate an ECDSA key pair for version 2 of the SSH protocol:
Tha's it!.. Now, what we need to do is send the public key of this key-pair to our VPS, which is done like so (with [email protected] being your sudoer and your VPS IP):
Now, double check that you can indeed login with that key, by login with :
If you succeed in loging in, then now is the time to disable any password authentication in the SSHD config file and restrict the in/out to the sudoer group and users (extra-security lines in the /etc/ssh/sshd_config files):
Reload the sshd daemon.
From now on your system is ALL YOURS!...
NB: Follow up to this OP will land in this thread when it's deemed important.
UPDATED:
A last tip I forgot to mention, given that we've already set our public-key authentication, is how to make the PPK file out of our pair-key for use with Filezilla to have an sFTP access to your VPS (or for use with Putty for those on Windows who need to use it.)
Well it's as simple as issuing this command:
I did a bit of googling about the followinf issue, mentionned above:
Also check this discussion:
> https://github.com/lxc/lxd/issues/4006
The use of EUServ's VPSs allowed me to experience not only the challenges of running an IPv6-only VPS but also to have a first-hand account of running Fedora 30 inside an LXD/LXC container.
1- A Bit of Context
First I should mention that LXC is a well-established, low-level Linux container runtime, dating back to 2008; thus well before anyone even heard about the currently widely used Docker alternative (which saw light in 2013.) The problem with LXC containers was/is(/will always be) its sheer complexity because of it being that low-level. Enter LXD (in 2015), which is Canonical's effort to make LXC container accessible by building an API around it in Go language; in this sense, LXD is a container orchestration engine with LXC under-the-hood.
LXD containers can only run Linux operating systems, and being containers suggest that its VMs share all the devices with the host operating system. I explicitly state this because, sysadmins should always remember this when on such VPSs.
With this out of the way now is the time to do all the routines of taking control of a brand new VPS running Fedora 30(+) or CentOS (7, 8 +).
2- Running a Properly Managed VPS
In this section, I'll go through all the steps essential to properly administer any RedHat-based system with few tips that are specific to EUServ Fedora 30 template used in their automation process.
2.1- Secure Your VPS
It's always a good practice to check first on the VPS's datetime and see if it's accurate. In our case here -ie LXD Container- time settings is the Host's prerogative, so we'll just check and may be change the timezone if feel like it.
Code:
[root@srvXYZ ~]# timedatectl
Local time: Tue 2020-03-31 14:01:32 CEST
Universal time: Tue 2020-03-31 12:01:32 UTC
RTC time: n/a
Time zone: Europe/Berlin (CEST, +0200)
System clock synchronized: yes
NTP service: inactive
RTC in local TZ: noTo modify the timezone:
Code:
timedatectl set-timezone XYZ/xyzYou can also change the hostname, but I won't do it here:
Code:
[root@srv10120 ~]# hostnamectl status
Static hostname: srvXYZ
Icon name: computer-container
Chassis: container
Machine ID: *******************************
Boot ID: ...............................
Virtualization: lxc
Operating System: Fedora 30 (Thirty)
CPE OS Name: cpe:/o:fedoraproject:fedora:30
Kernel: Linux 4.20.8-1.el7.elrepo.x86_64
Architecture: x86-642.1.1- Disable Root Login
The absolute first thing to do is to remove the root login via SSH, but to be able to do that, we first need to create a user with sudo power (ie, a sudoer.) For clarity, I'll use the standard 3 steps in Fedora.
Code:
adduser <username>
passwd <username>
usermod -aG wheel <username>Now, you can test that your 'sudoer' is functioning, by just login out and relogin as your newly created 'super-user', then try to switch as root:
Code:
sudo su -If you become 'root' after running the command above, then you're all set and you can now go ahead and disable the root login via SSH, by modifying the adhoc line in the '/etc/ssh/sshd_config'
From:
Code:
PermitRootLogin yesTo:
Code:
PermitRootLogin noCode:
sshd -t
systemctl restart sshd2.1.2- Activate the Firewall
I've noticed that Firewalld is down by default:
Code:
[root@srvXYZ ~]# firewall-cmd --state
not running
[root@srvXYZ ~]# systemctl start firewalld
[root@srvXYZ ~]# firewall-cmd --state
running
[root@srvXYZ ~]# systemctl enable firewalld
[root@srvXYZ ~]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2020-03-31 13:21:21 CEST; 1min 7s ago
Docs: man:firewalld(1)
Main PID: 8609 (firewalld)
Tasks: 2 (limit: 150)
Memory: 25.9M
CGroup: /system.slice/firewalld.service
└─8609 /usr/bin/python3 /usr/sbin/firewalld --nofork --nopid
Mar 31 13:21:20 srvXYZ systemd[1]: Starting firewalld - dynamic firewall daemon...
Mar 31 13:21:21 srvXYZ systemd[1]: Started firewalld - dynamic firewall daemon.
Mar 31 13:21:23 srvXYZ firewalld[8609]: ERROR: Failed to read file "/proc/sys/net/netfilter/nf_conntrack_helper>
Mar 31 13:21:23 srvXYZ firewalld[8609]: WARNING: Failed to get and parse nf_conntrack_helper settingHere, I have to pause a second to say that till now I'm still not sure if that thrown error is expected from an LXD container OR is it a bug!.. Is it a permission issue or a misconfiguration ?.. I can't say, didn't dig deep enough!
Ok! Now, eventhough the firewall is running we have to activate it by assigning the VPS public interface to (in this use case) the public zone:
Before, there is no interface in the public zone:
Code:
[root@srvXYZ ~]# firewall-cmd --zone=public --list-all
public
target: default
icmp-block-inversion: no
interfaces:
sources:
services: dhcpv6-client mdns ssh
ports:
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:To know more about your VPS net. interfaces:
Code:
[root@srvXYZ ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
435: eth0@if436: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 00:84:ed:5c:ed:dd brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet6 2a02:180:X:Y::Z/128 scope global
valid_lft forever preferred_lft forever
inet6 fe80::284:edff:fe5c:eddd/64 scope link
valid_lft forever preferred_lft foreverTime to add the eth0 to the public zone and reload the Firewalld config
Code:
[root@srvXYZ ~]# firewall-cmd --zone=public --change-interface=eth0 --permanent
success
[root@srvXYZ ~]# firewall-cmd --reload
successTesting the public zone again after this activation:
Code:
[root@srvXYZ ~]# firewall-cmd --zone=public --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: eth0
sources:
services: dhcpv6-client mdns ssh
ports:
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:Now, the only available service through eth0 is the one listed above, anything else blocked!
2.1.3- Removing Password Login and Setting Up Public Key Authentication
I'll come back to this in the last section
This is the minimum required steps to take to secure your VPS. You may add other things, like running the fail2ban package or changing SSH service port, but for me those aren't really important if you do implement the above 3 mechanisms.
2.2- Update your System
Before updating this system, I'd like to make few observations:
> When you check the failed services of your VPS at its startup, you'll see this:
Code:
root@srvXYZ ~]# systemctl --failed
UNIT LOAD ACTIVE SUB DESCRIPTION
● auditd.service loaded failed failed Security Auditing Service
● network.service loaded failed failed LSB: Bring up/down networking
● systemd-journald-audit.socket loaded failed failed Journal Audit Socket
LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.
3 loaded units listed.> Being an LXD container, you don't need,,when updating your system, anything related to the kernel, filesystem etc; thus we'll exclude them from the update process, like this:
Code:
[mister-no@srv6XYZ ~]$ vi /etc/dnf/dnf.conf
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
exclude=kernel* grub* filesystem* sudoIf you skip this step, expect a lot of pointless warnings during the update process.
Also, you'll notice that I've also excluded the 'sudo' package, this is because the latest version in Fedora 30 is buggy!
With all this preparation we are now ready to update our system:
Code:
dnf update -yThat's all there is to it!
Notice specific to EUServ's Fedora 30 template:
Even though the template used is the English version, it has the 'glibc-langpack-de' package instead of the 'glibc-langpack-en', thus a warning is issued every time you interact with the shell. So, you're advised to install the English version then remove the German one to fix that issue.
My last section in this OP will be about enabling Public-key Authentication, it's the most important thing to do security-wise and thus deserve to be treated separately.
2.3- Enabling/Using Public-key Authentication
If you're logged in your VPS, logout now, and from your Linux machine (I'm not covering Windows case/Putty), check your system's entropy:
Code:
cat /proc/sys/kernel/random/entropy_avail
3925Code:
ssh-keygen -f ~/.ssh/vps1-key-ecdsa -t ecdsa -b 521
Generating public/private ecdsa key pair.
Enter passphrase (empty for no passphrase): mySuperHardPWD
Enter same passphrase again:
Your identification has been saved in /home/username/.ssh/vps1-key-ecdsa.
Your public key has been saved in /home/username/.ssh/vps1-key-ecdsa.pub.
The key fingerprint is:
SHA256:qYABz******************************************************
The key's randomart image is:
+---[ECDSA 521]---+
|OOB. .. .*.oo+. |
|BO.* +=.+. |
|= . . o .. o |
|=.=+. .=.. |
| o. ......F |
| ......... |
| .. |
| |
| |
+----[SHA256]-----+Tha's it!.. Now, what we need to do is send the public key of this key-pair to our VPS, which is done like so (with [email protected] being your sudoer and your VPS IP):
Code:
ssh-copy-id -i ~/.ssh/vps1-key-ecdsa.pub [email protected]Now, double check that you can indeed login with that key, by login with :
Code:
ssh -i ~/.ssh/vps1-key-ecdsa [email protected]If you succeed in loging in, then now is the time to disable any password authentication in the SSHD config file and restrict the in/out to the sudoer group and users (extra-security lines in the /etc/ssh/sshd_config files):
Code:
PasswordAuthentication no
AllowUsers <username-of-the-sudoer>
Match User <username-of-the-sudoer>
Match Group wheelCode:
sshd -t
systemctl restart sshdFrom now on your system is ALL YOURS!...
NB: Follow up to this OP will land in this thread when it's deemed important.
UPDATED:
A last tip I forgot to mention, given that we've already set our public-key authentication, is how to make the PPK file out of our pair-key for use with Filezilla to have an sFTP access to your VPS (or for use with Putty for those on Windows who need to use it.)
Well it's as simple as issuing this command:
Code:
puttygen ~/.ssh/vps1-key-ecdsa -o ~/.ssh/vps1-key-ecdsa.ppk -O privateI did a bit of googling about the followinf issue, mentionned above:
(03-31-2020, 01:20 PM)fChk Wrote: (...)The issue seems to be well known for systems with kernel 4.7 and up where "the automatic helper assignment in kernel has been turned off by default". Check 'Automatic Helper Assignment' for more on that.
Mar 31 13:21:23 srvXYZ firewalld[8609]: ERROR: Failed to read file "/proc/sys/net/netfilter/nf_conntrack_helper>
Mar 31 13:21:23 srvXYZ firewalld[8609]: WARNING: Failed to get and parse nf_conntrack_helper setting
Here, I have to pause a second to say that till now I'm still not sure if that thrown error is expected from an LXD container OR is it a bug!.. Is it a permission issue or a misconfiguration ?.. I can't say, didn't dig deep enough!
Also check this discussion:
> https://github.com/lxc/lxd/issues/4006
| Welcome, Guest |
|
You have to register before you can post on our site. |
| Search Forums |
|
(Advanced Search) |
| Forum Statistics |
|
» Members: 2,271 » Latest member: orzpainter » Forum threads: 3,100 » Forum posts: 34,783 Full Statistics |
| Online Users |
|
There are currently 335 online users. » 0 Member(s) | 332 Guest(s) Bing, Google, Applebot |
| Latest Threads |
|
⚡ EnjoyVPS.Com : 35+ Glob...
Forum: Others Last Post: RIYAD 01-06-2026, 01:21 AM » Replies: 0 » Views: 521 |
|
Get LLHOST Netherlands Fe...
Forum: Others Last Post: LLHOST 09-29-2025, 03:02 AM » Replies: 0 » Views: 976 |
|
Super Fast LLHOST Netherl...
Forum: Value VPS Providers Last Post: LLHOST 09-16-2025, 05:01 AM » Replies: 0 » Views: 673 |
|
Get LLHOST Netherlands Fe...
Forum: Cheap Providers Last Post: LLHOST 09-08-2025, 01:33 PM » Replies: 0 » Views: 809 |
|
Windows VPS @ $31.5/Year ...
Forum: Cheap Providers Last Post: DewlanceHosting 08-16-2025, 03:12 AM » Replies: 0 » Views: 945 |
|
Buy DemoTiger Videos on c...
Forum: Others Last Post: DewlanceHosting 08-16-2025, 03:10 AM » Replies: 8 » Views: 6,515 |
|
Budget Dedicated Servers ...
Forum: Others Last Post: HostNamaste 08-13-2025, 04:54 AM » Replies: 2 » Views: 1,971 |
|
☁️ How to Use VCCPRO Virt...
Forum: Cheap Providers Last Post: bestadvisor 07-13-2025, 09:36 AM » Replies: 0 » Views: 1,408 |
|
[Promo] 30% Discount – VP...
Forum: Cheap Providers Last Post: LLHOST 07-11-2025, 12:56 PM » Replies: 0 » Views: 1,000 |
|
✅ Affordable VPS Hosting ...
Forum: Cheap VPS Providers Last Post: RIYAD 07-02-2025, 03:02 AM » Replies: 0 » Views: 2,228 |