[Ltsp-discuss] mount additional device during boot

Discussion:

Truth

2016-01-24 11:04:22 UTC

Hi,

I've installed a LTSP-PNP fat client (version 5.5.5-1~bpo8+1) on Debian
8.2 (i386) and I would like to mount (on the client) an additional
device during boot the same way as the home-directory is mounted.

From /etc/mtab I can see that the home-directory is mounted via sshfs:
server:/home/truth on /home/truth type fuse.sshfs
(rw,nosuid,nodev,relatime,user_id=0,group_id=0,allow_other)

I found out that it is possible to modify the clients fstab using the
following command in lts.conf:
FSTAB_1="***@server:/home2/truth /home2/truth fuse.sshfs
defaults,_netdev,delay_connect,idmap=user,allow_other,
identityfile=/home/truth/.ssh/id_rsa 0 0"

This works fine if I created (via ssh-keygen) a rsa key pair and the
corresponding authorized_keys.

However, if I look into /etc/mtab the mount of home2 looks a little
different (compared to home, see above):
***@server:/home2/truth on /home2/truth type fuse.sshfs
(rw,relatime,user_id=0,group_id=0,allow_other)

The output of 'systemctl status ssh.service' (on the server) looks like
this:
Server listening on 0.0.0.0 port 22.
Server listening on :: port 22.
Address 192.168.67.64 maps to localhost, but this does not map back
to the address - POSSIBLE BREAK-IN ATTEMPT!
Accepted password for truth from 192.168.67.64 port 43874 ssh2
pam_unix(sshd:session): session opened for user truth by (uid=0)
Address 192.168.67.64 maps to localhost, but this does not map back
to the address - POSSIBLE BREAK-IN ATTEMPT!
Accepted publickey for truth from 192.168.67.64 port 43880 ssh2: RSA
xx:xx:xx: ...
pam_unix(sshd:session): session opened for user truth by (uid=0)

So, how can I mount /home2 the same way as /home?

Many thanks in advance,
Truth

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net

Alkis Georgopoulos

2016-01-24 11:32:14 UTC

Permalink

Post by Truth
So, how can I mount /home2 the same way as /home?

Since you're using ltsp-pnp, ensure that the /home2 directory exist on
the server and the virtual client disk:
mkdir -p /home2
ltsp-update-image -c /

Then put LOCAL_APPS_EXTRAMOUNTS in lts.conf:
LOCAL_APPS_EXTRAMOUNTS="/home2"

That's all there is to it.

You may also want to read the sshfs man page, option follow_symlinks.
LTSP sets that option as *false* for /home,
and true for all the dirs in LOCAL_APPS_EXTRAMOUNTS.

--
Alkis Georgopoulos
LTSP developer
Professional LTSP support: ***@gmail.com

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,

Truth

2016-01-24 14:26:41 UTC

Permalink

Post by Alkis Georgopoulos

Post by Truth
So, how can I mount /home2 the same way as /home?

Since you're using ltsp-pnp, ensure that the /home2 directory exist on
mkdir -p /home2
ltsp-update-image -c /
LOCAL_APPS_EXTRAMOUNTS="/home2"
That's all there is to it.
You may also want to read the sshfs man page, option follow_symlinks.
LTSP sets that option as *false* for /home,
and true for all the dirs in LOCAL_APPS_EXTRAMOUNTS.
--
Alkis Georgopoulos
LTSP developer

Many thanks - ... it works great, when I pay attention that the line
with LOCAL_APPS_EXTRAMOUNTS is within the default section [Default].

Is it possible to mount (within home2) only one (the actual)
user-directory (like in /home)?
And is it possible to mount all user-directories within /home?

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp chan

Truth

2016-01-28 09:11:08 UTC

Permalink

Post by Truth

Post by Alkis Georgopoulos

Post by Truth
So, how can I mount /home2 the same way as /home?

I'm using Debian as a multi-user platform for the members of my family.
The data within the home-directory are physically stored within two
different partitions (e.g. with a different block size for /home and
/home2) to speed up large files like VirtualBox Images and so on (
/home2 is included to /home via symlinks). Since it is a privat network
there was (almost) no need to change the default settings for files and
folders and users are able to read from other users home directory which
makes file sharing very easy.

Since children are getting older and want to use the computer more often
I've installed a LTSP-PNP client as an additional working station and
have mounted the 2nd home-partition (/home2) via LOCAL_APPS_EXTRAMOUNTS
- the same symlinks from the server can be used for the client as well.

Now, users (working on the client) are able to read from other users
/home2 which is fine since I have the same situation at the server.
However, users are not able to read from other users /home because only
one user-directory (the directory of the actual user) is mounted at
/home by default.

Is there a way to have all user-directories be mounted at /home?

Truth

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,

Valtteri Suojanen

2016-01-28 13:55:06 UTC

Permalink

With ltsp-pnp client starts ldm login program. When you enter your login and password this ldm program connects you to the server with ssh-x session and sshfs mounts ssh user (used for login) home directory. This process includes many steps in user session init phase that are used in manners to protect the user sessions and users from reading other users files (home profiles, files). Similarly if you have local computer with multi-user Debian Gnome desktop you shouldn't get any access to other local users homes. The special mount point settings in the server you just played with and configured (nfs,sshfs,symlinks) are literally "special" mount points in addition to normal home profiles and you understood Now that Linux multi-user home profile directories can be considered special share too. If you share home directories You Are not using Linux home directories in standard way - You should if you want to use multi-user server or desktop PC . trying to share all home profiles with other users... neither special mount points, or traditional Linux home profiles don't have any meaning. It's your special use case (whether in ltsp network or in local desktop) how you want to manage the user data/home profile access rights.

Also as You Are building a home network I think it's different setup from any ltsp network or any industry client network and very difficult to answer how ltsp server fits to your needs. You didn't first mention it... questions and answers you got here were not accurate.

if you want to discuss about your LTSP plan, have a Quick look first into ltsp.org and read Support page how to contact LTSP project irc channel. It will save yourself a lot time and you get forward in your project with or without LTSP.

Do You really benefit from full centralized network boot server infrastructure or can you use just do with traditional Debian distribution a shared disk storage and/or remote desktop? In my opinion LTSP is useful in provisioning at low cost and quickly many computing resources on centralized infrastructure. and in your use case you Are juts trying to share disk storage and remote desktop? there might be easier and Better alternatives (remote desktop software is available on all popular OS).

If you contact to irc channel then After The question other users get back to you using their nickname and might ask more questions about the use case to guide you forward (if some LTSP network fit or doesn't fit to your case). after The question be patient and keep the irc window open

most of the people are experienced ltsp professionals so while you discuss listen what they recommend regarding LTSP in your use case. also people might not be available all day so after The question be patient (prepare to keep irc Window open full day)

----- AlkuperÃ€inen viesti -----
LÃ€hettÃ€jÃ€: "Truth" <***@gmx.de>
LÃ€hetetty: â28.â1.â2016 11:14
Vastaanottaja: "ltsp-***@lists.sourceforge.net" <ltsp-***@lists.sourceforge.net>
Aihe: Re: [Ltsp-discuss] mount additional device during boot

Post by Truth

Post by Alkis Georgopoulos

Post by Truth
So, how can I mount /home2 the same way as /home?

Truth

2016-01-28 17:56:42 UTC

Permalink

I haven't tried VNC yet but my first guess was that a fat client would
have a better performance rather than running VNC. I will try go get
more information about this on IRC channel.

Thanks for your input.
Truth

Post by Valtteri Suojanen
With ltsp-pnp client starts ldm login program. When you enter your
login and password this ldm program connects you to the server with
ssh-x session and sshfs mounts ssh user (used for login) home
directory. This process includes many steps in user session init phase
that are used in manners to protect the user sessions and users from
reading other users files (home profiles, files). Similarly if you
have local computer with multi-user Debian Gnome desktop you shouldn't
get any access to other local users homes. The special mount point
settings in the server you just played with and configured
(nfs,sshfs,symlinks) are literally "special" mount points in addition
to normal home profiles and you understood Now that Linux multi-user
home profile directories can be considered special share too. If you
share home directories You Are not using Linux home directories in
standard way - You should if you want to use multi-user server or
desktop PC . trying to share all home profiles with other users...
neither special mount points, or traditional Linux home profiles don't
have any meaning. It's your special use case (whether in ltsp network
or in local desktop) how you want to manage the user data/home profile
access rights.
Also as You Are building a home network I think it's different setup
from any ltsp network or any industry client network and very
difficult to answer how ltsp server fits to your needs. You didn't
first mention it... questions and answers you got here were not
accurate.
if you want to discuss about your LTSP plan, have a Quick look first
into ltsp.org and read Support page how to contact LTSP project irc
channel. It will save yourself a lot time and you get forward in your
project with or without LTSP.
Do You really benefit from full centralized network boot server
infrastructure or can you use just do with traditional Debian
distribution a shared disk storage and/or remote desktop? In my
opinion LTSP is useful in provisioning at low cost and quickly many
computing resources on centralized infrastructure. and in your use
case you Are juts trying to share disk storage and remote desktop?
there might be easier and Better alternatives (remote desktop software
is available on all popular OS).
If you contact to irc channel then After The question other users
get back to you using their nickname and might ask more questions
about the use case to guide you forward (if some LTSP network fit or
doesn't fit to your case). after The question be patient and keep the
irc window open
most of the people are experienced ltsp professionals so while you
discuss listen what they recommend regarding LTSP in your use case.
also people might not be available all day so after The question be
patient (prepare to keep irc Window open full day)
------------------------------------------------------------------------
LÃ€hetetty: â28.â1.â2016 11:14
Aihe: Re: [Ltsp-discuss] mount additional device during boot

Post by Truth

Post by Alkis Georgopoulos

Post by Truth
So, how can I mount /home2 the same way as /home?

I'm using Debian as a multi-user platform for the members of my family.
The data within the home-directory are physically stored within two
different partitions (e.g. with a different block size for /home and
/home2) to speed up large files like VirtualBox Images and so on (
/home2 is included to /home via symlinks). Since it is a privat network
there was (almost) no need to change the default settings for files and
folders and users are able to read from other users home directory which
makes file sharing very easy.
Since children are getting older and want to use the computer more often
I've installed a LTSP-PNP client as an additional working station and
have mounted the 2nd home-partition (/home2) via LOCAL_APPS_EXTRAMOUNTS
- the same symlinks from the server can be used for the client as well.
Now, users (working on the client) are able to read from other users
/home2 which is fine since I have the same situation at the server.
However, users are not able to read from other users /home because only
one user-directory (the directory of the actual user) is mounted at
/home by default.
Is there a way to have all user-directories be mounted at /home?
Truth
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_____________________________________________________________________
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_____________________________________________________________________
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net