Samuel Loza samuelloza

Bridged Networking on Wireless Interface with KVM and more...

So I needed to upgrade my home "web hosting" server from a Raspberry Pi 3b to something more flexible where I could even simulate a Raspberry Pi 3b given power. The new server hardware is now an Intel NUC i7 16GB / 250Gb SSD NVME. 😁

I order to accomplish this task I had to find a way to bridge the wireless interface which is the faster one on my actual home network setup.

I've also tried to mix the functionnality from another Rapsberry Pi (3b+ this time) who's acting as WLAN to LAN bridge. More details on this setup. But this was finally a bad idea and I was not able to make it work along the virtual network bridge created by libvirt or manually created... (I will explain why later)

The main difficulty was to use the DMZ IP address given by the router and route the traffic to the guest VM's.

Server / Desktop

Config Apache with /etc/apache2/conf-available/le.conf:

Alias /.well-known/acme-challenge/ "/var/www/html/.well-known/acme-challenge/"
<Directory "/var/www/html/">
    AllowOverride None
    Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
    Require method GET POST OPTIONS
</Directory>

README

Create a template service file at /etc/systemd/system/secure-tunnel@.service. The template parameter will correspond to the name of target host:

[Unit]
Description=Setup a secure tunnel to %I
After=network.target

	<!DOCTYPE html>
	<html lang="en">

	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<meta http-equiv="X-UA-Compatible" content="ie=edge">
	<title>Document</title>
	</head>

	1. Take a backup of docker.service file.
	$ cp /lib/systemd/system/docker.service /lib/systemd/system/docker.service.orig

	2. Modify /lib/systemd/system/docker.service to tell docker to use our own directory
	instead of default /var/lib/docker. In this example, I am using /p/var/lib/docker

	Apply below patch.

	$ diff -uP -N /lib/systemd/system/docker.service.orig /lib/systemd/system/docker.service
	--- /lib/systemd/system/docker.service.orig 2018-12-05 21:24:20.544852391 -0800

	# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
	# newer versions of the distribution.
	deb http://us.archive.ubuntu.com/ubuntu/ bionic main restricted
	# deb-src http://us.archive.ubuntu.com/ubuntu/ bionic main restricted

	## Major bug fix updates produced after the final release of the
	## distribution.
	deb http://us.archive.ubuntu.com/ubuntu/ bionic-updates main restricted
	# deb-src http://us.archive.ubuntu.com/ubuntu/ bionic-updates main restricted

	<?php

	class Crontab {

	/*

	(c) Gustav Genberg 2017

	This script uses PHP shell_exec! Make sure it is enabled before using!
	Also make sure that the user running this script (usually www-data) have access to the crontab command!

	Regular expression cheat sheet for Varnish

	Varnish regular expressions are NOT case sensitive. Varnish uses POSIX
	regular expressions, for a complete guide, see: "man 7 regex"

	Basic matching:
	req.url ~ "searchterm"
	True if req.url contains "searchterm" anywhere.

	req.url == "searchterm"

	wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.0g-2ubuntu4_amd64.deb
	sudo dpkg -i libssl1.1_1.1.0g-2ubuntu4_amd64.deb