From: Frank Brehm Date: Mon, 4 May 2020 14:44:16 +0000 (+0200) Subject: saving uncommitted changes in /etc prior to apt run X-Git-Url: https://git.uhu-banane.org/?a=commitdiff_plain;h=599c309c91cb4ae82469e904ecf1b3764c4a8fc5;p=config%2Fbruni%2Fetc-mint-new1.git saving uncommitted changes in /etc prior to apt run --- diff --git a/.etckeeper b/.etckeeper index 93078d5..cc86380 100755 --- a/.etckeeper +++ b/.etckeeper @@ -565,6 +565,10 @@ maybe chmod 0644 'bind/db.255' maybe chmod 0644 'bind/db.empty' maybe chmod 0644 'bind/db.local' maybe chmod 0644 'bind/db.root' +maybe chgrp 'bind' 'bind/named-acl.conf' +maybe chmod 0644 'bind/named-acl.conf' +maybe chgrp 'bind' 'bind/named-log.conf' +maybe chmod 0644 'bind/named-log.conf' maybe chgrp 'bind' 'bind/named.conf' maybe chmod 0644 'bind/named.conf' maybe chgrp 'bind' 'bind/named.conf.default-zones' diff --git a/NetworkManager/system-connections/eth0 b/NetworkManager/system-connections/eth0 new file mode 100644 index 0000000..91b7c04 --- /dev/null +++ b/NetworkManager/system-connections/eth0 @@ -0,0 +1,20 @@ +[connection] +id=eth0 +uuid=296b8121-62ca-354b-bd4a-e33b0341ee34 +type=ethernet +autoconnect-priority=-999 +permissions= +timestamp=1588593584 + +[ethernet] +mac-address=44:8A:5B:CD:BF:48 +mac-address-blacklist= + +[ipv4] +dns-search= +method=auto + +[ipv6] +addr-gen-mode=stable-privacy +dns-search= +method=auto diff --git a/apparmor.d/local/usr.sbin.named b/apparmor.d/local/usr.sbin.named index e69de29..862964a 100644 --- a/apparmor.d/local/usr.sbin.named +++ b/apparmor.d/local/usr.sbin.named @@ -0,0 +1,3 @@ +# /var/lib/samba/private/** rwmk, +# /usr/lib/x86_64-linux-gnu/** rwmk, +# /dev/urandom rwmk, diff --git a/apparmor.d/usr.sbin.named b/apparmor.d/usr.sbin.named index 4d94706..6d52342 100644 --- a/apparmor.d/usr.sbin.named +++ b/apparmor.d/usr.sbin.named @@ -51,6 +51,8 @@ # syslog do the heavy lifting. /var/log/named/** rw, /var/log/named/ rw, + /var/log/bind/** rw, + /var/log/bind/ rw, # gssapi /var/lib/sss/pubconf/krb5.include.d/** r, diff --git a/apt/sources.list.d/plexmediaserver.list b/apt/sources.list.d/plexmediaserver.list index fbf9252..3c32ab5 100644 --- a/apt/sources.list.d/plexmediaserver.list +++ b/apt/sources.list.d/plexmediaserver.list @@ -1,3 +1,3 @@ # When enabling this repo please remember to add the PlexPublic.Key into the apt setup. # wget -q https://downloads.plex.tv/plex-keys/PlexSign.key -O - | sudo apt-key add - -#deb https://downloads.plex.tv/repo/deb/ public main +deb https://downloads.plex.tv/repo/deb/ public main diff --git a/bind/named-acl.conf b/bind/named-acl.conf new file mode 100644 index 0000000..71c6f44 --- /dev/null +++ b/bind/named-acl.conf @@ -0,0 +1,48 @@ +//############################################################### +//# Bind9-Konfigurationsdatei - Access-Control-Listen +//# /etc/bind/named-acl.conf +//# +//# Host Bruni +//# +//############################################################### + +//############################################################### +//# Access-Control-Listen + +/* Deny transfers by default except for the listed hosts. + * If we have other name servers, place them here. + */ +acl "xfer" { + none; +}; + +/* + * You might put in here some ips which are allowed to use the cache or + * recursive queries + */ +acl "trusted" { + 127.0.0.0/8; + ::1/128; +}; + +acl "local_ips" { + 127.0.0.0/8; + 10.0.0.0/8; + 192.168.0.0/16; + 172.16.0.0/12; + ::1/128; + fe80::/10; +}; + +acl "private_ips" { + 10.12.11.0/24; + 192.168.122.0/24; + 2001:6f8:1db7::/64; + 2001:6f8:1c00:365::/64; + 2a02:8109:9300:488::/64; + 2a02:8109:ae3f:fa04::/64; + 2a02:8109:9ec0:cf4::/64; + 2a01:238:4225:6e00:8f8c:808a:7fb8:88df; +}; + +# vim: ts=4 filetype=named noai diff --git a/bind/named-log.conf b/bind/named-log.conf new file mode 100644 index 0000000..ca2cc6f --- /dev/null +++ b/bind/named-log.conf @@ -0,0 +1,87 @@ +//############################################################### +//# Bind9-Konfigurationsdatei Logging +//# /etc/bind/named-log.conf +//# +//# Host Bruni +//# +//############################################################### + +//############################################################### +//# Angaben zum Logging + +logging { + + //--------------------------------------- + // Channels + + channel complete_debug { + file "/var/log/bind/complete-debug.log"; + print-category yes; + print-severity yes; + print-time yes; + severity debug 99; + }; + + channel logtofile { + file "/var/log/bind/named.log"; + print-category yes; + print-severity yes; + print-time yes; + severity info; + }; + + channel moderate_debug { + file "/var/log/bind/debug.log"; + print-category yes; + print-severity yes; + print-time yes; + severity debug 1; + }; + + channel query_logging { + file "/var/log/bind/query.log"; + print-time yes; + }; + + channel security_file { + file "/var/log/bind/security.log"; + print-category yes; + print-severity yes; + print-time yes; + severity dynamic; + }; + + channel syslog-warning { + syslog daemon; + severity warning; + }; + + + //--------------------------------------- + // Categories + + category default { + default_debug; + logtofile; + }; + + category general { + logtofile; + syslog-warning; + }; + + category lame-servers { + null; + }; + + category queries { + query_logging; + }; + + category security { + security_file; + }; + +}; + +# vim: ts=4 filetype=named noai diff --git a/bind/named.conf b/bind/named.conf index 880786a..150d3a3 100644 --- a/bind/named.conf +++ b/bind/named.conf @@ -6,6 +6,10 @@ // // If you are just adding zones, please do that in /etc/bind/named.conf.local +include "/etc/bind/named-acl.conf"; include "/etc/bind/named.conf.options"; +include "/etc/bind/named-log.conf"; include "/etc/bind/named.conf.local"; include "/etc/bind/named.conf.default-zones"; + +# vim: ts=4 filetype=named noai diff --git a/bind/named.conf.local b/bind/named.conf.local index 7a57b10..ec318aa 100644 --- a/bind/named.conf.local +++ b/bind/named.conf.local @@ -6,3 +6,47 @@ // organization //include "/etc/bind/zones.rfc1918"; +//############################################################### +//# Forward-Zonen + +zone "nexunus.de" IN { + type forward; + forwarders { + 138.201.28.135; + 185.48.118.128; + 162.254.24.33; + 185.102.95.107; + }; +}; + +zone "nexunus.com" IN { + type forward; + forwarders { + 138.201.28.135; + 185.48.118.128; + 162.254.24.33; + 185.102.95.107; + }; +}; + +zone "nexunus.net" IN { + type forward; + forwarders { + 138.201.28.135; + 185.48.118.128; + 162.254.24.33; + 185.102.95.107; + }; +}; + +zone "11.12.10.in-addr.arpa" IN { + type forward; + forward only; + forwarders { + 185.48.118.128; + 162.254.24.33; + 185.102.95.107; + }; +}; + +# vim: ts=4 filetype=named noai noet diff --git a/bind/named.conf.options b/bind/named.conf.options index b1bef51..cb9cc32 100644 --- a/bind/named.conf.options +++ b/bind/named.conf.options @@ -22,5 +22,78 @@ options { auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; + listen-on { any; }; + + allow-query { + /* + * Accept queries from our "trusted" ACL. We will + * allow anyone to query our master zones below. + * This prevents us from becoming a free DNS server + * to the masses. + */ + trusted; + local_ips; + private_ips; + }; + + allow-query-cache { + /* Use the cache for the "trusted" ACL. */ + trusted; + local_ips; + private_ips; + }; + + allow-recursion { + /* Only trusted addresses are allowed to use recursion. */ + trusted; + local_ips; + private_ips; + }; + + allow-transfer { + /* Zone tranfers are denied by default. */ + trusted; + private_ips; + }; + + allow-update { + /* Don't allow updates, e.g. via nsupdate. */ + none; + }; + + /* + * If you've got a DNS server around at your upstream provider, enter its + * IP address here, and enable the line below. This will make you benefit + * from its cache, thus reduce overall DNS traffic in the Internet. + * + * Uncomment the following lines to turn on DNS forwarding, and change + * and/or update the forwarding ip address(es): + */ + forward first; + forwarders { + // 123.123.123.123; // Your ISP NS + // 124.124.124.124; // Your ISP NS + // 4.2.2.1; // Level3 Public DNS + // 4.2.2.2; // Level3 Public DNS + 10.12.11.254; + 8.8.8.8; // Google Open DNS + 8.8.4.4; // Google Open DNS + }; + +}; + +// Managed Keys +include "/etc/bind/bind.keys"; + +include "/etc/bind/rndc.key"; + +controls { + inet 127.0.0.1 port 953 allow { + 127.0.0.1; + ::1/128; + } keys { + "rndc-key"; + }; }; +# vim: ts=4 filetype=named noai diff --git a/default/local_service b/default/local_service new file mode 100644 index 0000000..aee39a8 --- /dev/null +++ b/default/local_service @@ -0,0 +1,5 @@ +#!/bin/bash + +# TIMEOUT_ON_STOP=5 + +# vim: et ts=4 diff --git a/libvirt/qemu/Lena.xml b/libvirt/qemu/Lena.xml new file mode 100644 index 0000000..288a970 --- /dev/null +++ b/libvirt/qemu/Lena.xml @@ -0,0 +1,137 @@ + + + + Lena + cf6ccd52-b20d-4162-a8f5-4f2776d6cabf + 4194304 + 4194304 + 2 + + hvm + + + + + + + + + + + + + + + + destroy + restart + destroy + + + + + + /usr/bin/kvm-spice + + + + +
+ + + + + +
+ + + + + +
+ + +
+ + + +
+ + + +
+ + + +
+ + + +
+ + +
+ + + + +
+ + + + + +
+ + + + + + + + + + + +
+ + + +
+ + +
+ + + + + + + + +
+ +