JIT SPRAY ÃÂÃÂÃÂÛØ× TDSS - Xakep Online
JIT SPRAY ÃÂÃÂÃÂÛØ× TDSS - Xakep Online
JIT SPRAY ÃÂÃÂÃÂÛØ× TDSS - Xakep Online
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
SYN/ACK<br />
# zfs create -o mountpoint=/zones rpool/zones<br />
Óäîáñòâî çàêëþ÷àåòñÿ â òîì, ÷òî äëÿ êàæäîé çîíû òåïåðü ìîæíî âûäåëèòü<br />
ñîáñòâåííóþ ôàéëîâóþ ñèñòåìó è íàçíà÷èòü åé êâîòó:<br />
Íàñ âñòðåòèò èíòåðàêòèâíûé êîìàíäíûé èíòåðïðåòàòîð. ×òîáû ñîçäàòü<br />
çîíó, âûïîëíèì êîìàíäó create:<br />
zonecfg:apache> create<br />
# zfs create rpool/zones/myzone<br />
# zfs set quota=3g rpool/zones/myzone<br />
Íå âîçáðàíÿåòñÿ òàêæå èñïîëüçîâàíèå îáðàçîâ ôàéëîâûõ ñèñòåì ñ<br />
æåñòêî çàäàííûì ðàçìåðîì. Òîãäà ôàéë ìîæíî áóäåò ëåãêî ïåðåäàòü íà<br />
äðóãóþ ìàøèíó. Äèíàìè÷åñêè ðàñòóùèé îáðàç ñîçäàåòñÿ ñ ïîìîùüþ<br />
ñòàíäàðòíîé êîìàíäû mkfile:<br />
Äàëåå óêàæåì ïóòü äî ôàéëîâîé ñèñòåìû çîíû:<br />
zonecfg:apache> set zonepath=/zones/apache<br />
Óñòàíîâèì ôëàã àâòîçàãðóçêè, ÷òîáû çîíà ñòàðòîâàëà âìåñòå ñî ñòàðòîì ÎÑ:<br />
zonecfg:apache> set autoboot=true<br />
# mkdir /zones<br />
# mkfile 3g /zones/myzone.img<br />
Ñîçäàäèì âèðòóàëüíûé ñåòåâîé èíòåðôåéñ ñ àäðåñîì 192.168.0.1 è ïðèâÿçêîé<br />
ê íàñòîÿùåìó èíòåðôåéñó pcn0:<br />
Çàòåì ýòîò îáðàç ìîæíî ñìîíòèðîâàòü ê êîðíåâîìó êàòàëîãó çîíû:<br />
# mkdir /zones/myzone<br />
# lofiadm -a /zones/myzone.img /dev/lofi/1<br />
# newfs /dev/rlofi/1<br />
# mount /dev/lofi/1 /zones/myzone<br />
# chmod go-rwx /zones/myzone<br />
zonecfg:apache> add net<br />
zonecfg:apache:net> set address=192.168.0.2/24<br />
zonecfg:apache:net> set physical=pcn0<br />
zonecfg:apache:net> end<br />
Èìïîðòèðóåì êàòàëîã /opt èç ãëîáàëüíîé çîíû, ÷òîáû èìåòü äîñòóï ê<br />
óñòàíîâëåííûì ïàêåòàì:<br />
НОВАЯ ЗОНА<br />
Îáû÷íî çîíû èñïîëüçóþòñÿ äëÿ âèðòóàëèçàöèè èëè èçîëèðîâàíèÿ<br />
íåáåçîïàñíûõ ñåòåâûõ ñåðâèñîâ îò áàçîâîé ñèñòåìû. Ðàññìîòðèì âòîðîé<br />
ñëó÷àé èñïîëüçîâàíèÿ çîí è ïîïðîáóåì óñòàíîâèòü Apache â ñîáñòâåííûé<br />
ìàëåíüêèé âèðòóàëüíûé ñåðâåð. Â ñîîòâåòñòâèè ñ èíôîðìàöèåé èç<br />
ïðåäûäóùåãî ðàçäåëà ñíà÷àëà ìû ñîçäàäèì íîâóþ ôàéëîâóþ ñèñòåìó ZFS:<br />
# zfs create -o mountpoint=/zones rpool/zones<br />
# zfs create rpool/zones/apache<br />
# zfs quota=1g rpool/zones/apache<br />
# chmod 700 /zones/apache<br />
# zfs list<br />
Åñòåñòâåííî, ðàçìåð êâîòû âûáèðàåòñÿ èíäèâèäóàëüíî äëÿ êàæäîãî<br />
ñëó÷àÿ. Òåïåðü ìû äîëæíû ñîçäàòü çîíó è ïåðåâåñòè åå â ñîñòîÿíèå<br />
Configured. Ýòî ìîæíî ñäåëàòü ñ ïîìîùüþ êîìàíäû zonecfg:<br />
# zonecfg -z apache<br />
126<br />
zonecfg:apache> add inherit-pkg-dir<br />
zonecfg:apache:inherit-pkg-dir> set dir=/opt<br />
zonecfg:apache:inherit-pkg-dir> end<br />
Âûâåäåì êîíôèãóðàöèþ íà ýêðàí:<br />
zonecfg:apache> info<br />
Çàïóñòèì ïðîâåðêó êîíôèãóðàöèè, ïðèìåíèì åå è âûéäåì:<br />
zonecfg:apache> verify<br />
zonecfg:apache> commit<br />
zonecfg:apache> exit<br />
Òåïåðü çîíà ïîëíîñòüþ ñêîíôèãóðèðîâàíà è ãîòîâà ê óñòàíîâêå. Íî ýòî<br />
ëèøü áàçîâàÿ íàñòðîéêà, êîìàíäà zonecfg ïîíèìàåò îãðîìíîå êîëè÷åñòâî<br />
ñàìûõ ðàçíîîáðàçíûõ êîìàíä, ïðèìåðû èñïîëüçîâàíèÿ êîòîðûõ<br />
ïðèâåäåíû íèæå:<br />
XÀÊÅÐ 09 /140/ 10
Change language