Devil-Linux Documentation

$Revision: 1.11.2.1 $ $Date: 2002/08/30 00:46:06 $ Heiko Zuerker, Michael Wahlbrink, Mario Dragone


Contents

Introduction

Purpose

Devil-Linux is a special Linux distribution, which is used for Firewalls / Routers. The goal of Devil-Linux is to have a small, customizable and secure (what is secure in the internet ?) Linux. The future of Devil-Linux will go far beyond an ordinary Router, we will provide a lot of other services, but the Distribution will still be easy and fast to maintain.

Requirements

First time installation

Step 1 : download distribution

Step 2 : burn the ISO image

Bootable ISO image is contained in bootcd.iso file.

Step 3 : modificate the configuration for your system

Step 4 : copy configuration on a FAT formatted floppy disk

Step 5 : ready to boot


General configuration

Local setup

The configuration file is /etc/sysconfig/config

Parameter Description Values Sample
UTC Defines if the local clock is UTC (GMT) or to the local time yes/no yes
TIMEZONE Defines the local time zone.

Available timezones can be found in the /usr/share/zoneinfo

string value US/Eastern
KEYBOARD_LAYOUT Defines which keyboard layout should be loaded string value de-latin1
INITRD_MODULES Defines which modules should be loaded during boot time. This parameter is to support SCSI or BLOCK devices string value BusLogic

Network setup

The configuration file is /etc/sysconfig/config

Parameter Description Values Sample
HOSTNAME hostname string value devil
DEFAULTGATEWAY IP address of the default gateway IP address in dotted notation 10.90.1.1
DEFAULTGATEWAY_IF Interface on which we reach the default gateway string value eth0
START_ROUTING Should routing be enabled for the first time ? yes/no yes
START_FIREWALL Should the script /etc/init.d/firewall.rules be executed at boot time ? yes/no yes
DISABLE_ECN Disable ECN (early congestion notification) ? This is needed if you have problems connecting to some websites. yes/no yes

Interface configuration

The configuration files are located in /etc/sysconfig/nic directory.

You need one file for each interface. The filename has to begin with ``ifcfg-``.

Parameter Description Values Sample
ONBOOT Should the interface started at boot time ? yes/no yes
DEVICE Device name of the interface (eth0, eth0:0, eth1 ...) string value eth0
DHCP Should the IP address be requested from a DHCP server ?

Or should even a DHCP server run on this interface ?

NOTE: for a DHCP server you need to assign a static IP address

yes/no/server no
IP IP address of the defined interface. Leave empty to bring interface up without an IP address. IP address in dotted notation / empty 10.90.1.2
NETMASK Network mask for this interface IP address in dotted notation 255.255.255.0
BROADCAST broadcast address for this interface

leave this setting empty for an automatic assignment

IP address in dotted notation 10.90.1.255
MAC Changes the MAC address of the interface MAC address with colons 12:34:56:67:91:11
MODULE Name of the module to load for this interface.

Leave this setting empty when module is already loaded or this interface is an IP alias.

string value pcnet32

Software installation

The configuration file is /etc/sysconfig/software.

Take a look inside this file to see which packages are available.

No package is installed by default.

Service activation at boot time

Before a particular software or service is activated, the corresponding software must be installed (see Software installation above).

Step 1 : select software or services

Edit the /etc/sysconfig/config file and set START_<service> to yes or no depending on what you need.

No service is launched by default except routing and firewall (see Network setup above).

Step 2 : check/set activation order

Devil-Linux is based on SysV init system.

The default runlevel is 3 (multiuser with network). Currently, it is not supported to boot into another runlevel, but you can switch runlevel with the init command.

Symbolics links are made in /etc/init.d/rc3.d directory to the /etc/init.d/ scripts.

Activation order is determined whith the link's name.

Example in /etc/init.d/rc3.d :

Of course, each service configuration files must be checked.

Upgrading from a previous release

The best and safest way when upgrading is to start with the new etc.tar.gz file. Next, you can recover previous configurations files with caution : don't forget to check changes log to see which services could be affected with the new release.

Files you may want to recover :

Harddisk support

Written by: Friedrich Lobenstock

In the explanation below, we use hdc as the harddrive, replace this with the devicename your harddisk is using.

Create Partition

Create one partition on the harddisk you want to use using the command fdisk.

The result ("fdisk -l") should look like this:

Disk /dev/hdc: 16 heads, 63 sectors, 8126 cylinders

Units = cylinders of 1008 * 512 bytes

Device Boot Start End Blocks Id System

/dev/hdc1 1 8126 4095472+ 8e Linux LVM

Create Physical Volume

Create a physical volume (PV) from the partiton created in step above.

pvcreate /dev/hdc1

Create Volume Group

Create a volume group (VG) named "devil-linux" using the PV /dev/hdc1

vgcreate -s 8M devil-linux /dev/hdc1

(increase the PhysicalExtentSize of 8M to make use of more than 512GB)

Create Logical Volumes

Now we are going to create the "partitions" (=logical volumes).

Each of the Logical Volumes is optional, so just create the ones you need.

Also adjust the size of the LVs to fit your needs.

swap

Create the LV using the following commands:

lvcreate -C y -L 256M -n swap devil-linux

mkswap /dev/devil-linux/swap

log (/var/log):

Create the LV using the following commands:

lvcreate -L 512M -n log devil-linux

mkreiserfs /dev/devil-linux/log

spool (/var/spool):

Create the LV using the following commands:

lvcreate -L 512M -n spool devil-linux

mkreiserfs /dev/devil-linux/spool

squid (/var/squid):

Create the LV using the following commands:

lvcreate -L 512M -n squid devil-linux

mkreiserfs /dev/devil-linux/squid

squid (/var/data):

Create the LV using the following commands:

lvcreate -L 4G -n data devil-linux

mkreiserfs /dev/devil-linux/data

Finalizing

Save your configuration (so you have a least one lvmbackupfile)

save-config

Now reboot to test if all logical volumes get mounted correctly.

Configuration of additional Software

Because the software used in Devil-Linux is a complilation of many software packages written by different people all over the world the documentation for the software is maintained and updated by the group who wrote the software.

But here we have collected short installation- and configuration descriptions for some of them.

We're more than happy to add your configuration hints to our documentation.

DDUP - Dynamic DNS Client (website)

Written by: Patrik Lermon

First of all you must register on their website http://www.dyndns.org

Then you type:

ddup -makeconf

This will start a guide which is going to ask you for your user name and password (on dyndns.org) and lastly which user who can use ddup, write root.

Don't forget to run the save-config script!

TDSL-Router HOWTO (German)

Written by: Arnd Grossman

http://www.ctag.de/linux/DevilLinuxHOWTO.html

Documentation links

About Devil-Linux Project

man pages

You can find man pages (html formatted) here

Usefull links

Contributing to Devil-Linux Project

Credits

Devil-Linux is sponsored by Propack Data GmbH in Germany .

A Linux-from-Scratch system is used to create the entire system.

BusyBox and TinyLogin are building a main part of Devil-Linux.

Linux is a registered trademark of Linus Torvalds.

All other trademarks and copyrights on this page are property of their respective owners.

About this document ...

Devil-Linux Documentation

This document was generated using the LaTeX2HTML translator Version 2K.1beta (1.48)

Copyright © 1993, 1994, 1995, 1996, Nikos Drakos, Computer Based Learning Unit, University of Leeds.
Copyright © 1997, 1998, 1999, Ross Moore, Mathematics Department, Macquarie University, Sydney.

The command line arguments were:
latex2html -no_footnode -no_navigation -html_version 3.2 -split 1 -no_subdir ADMIN.tex

The translation was initiated by root on 2003-01-27


Footnotes

... first1
You can also boot from a DOS floppy with CD support, then you have to start <cd-drive-letter>:\linux.bat, which is loading DL via loadlin.


root 2003-01-27