Quick Notes - Revision history

Tinker: /* Custom LXC Templates */

2025-10-01T16:57:10Z

Custom LXC Templates

← Older revision		Revision as of 12:57, 1 October 2025
Line 117:		Line 117:
	*** <code>scp Deb-12-NFS.tar.zst '''''user'''''@'''''mywebserver''''':/var/www/html/LXCtemplates/</code>		*** <code>scp Deb-12-NFS.tar.zst '''''user'''''@'''''mywebserver''''':/var/www/html/LXCtemplates/</code>
	Now you can add it to your '''CT Templates''' storage on any PVE server you're working on.		Now you can add it to your '''CT Templates''' storage on any PVE server you're working on.

			= Teaching RSYNC =
			A nice little [https://www.youtube.com/watch?v=QKCIi-NxJEo intro video] by Veronica

Tinker: /* Installing OpenVPN & PIA as a client on an LXC */

2025-09-16T19:52:46Z

Installing OpenVPN & PIA as a client on an LXC

← Older revision		Revision as of 15:52, 16 September 2025
Line 117:		Line 117:
	*** <code>scp Deb-12-NFS.tar.zst '''''user'''''@'''''mywebserver''''':/var/www/html/LXCtemplates/</code>		*** <code>scp Deb-12-NFS.tar.zst '''''user'''''@'''''mywebserver''''':/var/www/html/LXCtemplates/</code>
	Now you can add it to your '''CT Templates''' storage on any PVE server you're working on.		Now you can add it to your '''CT Templates''' storage on any PVE server you're working on.

	~~=Installing OpenVPN & PIA as a client on an LXC=~~

	~~(In actual fact... This set of steps is applicable to pretty much any Debian-derived system if you skip the first step...)~~

	~~== Edit the containers config file (On the PVE host) ==~~
	~~Something you may have noticed if you've been playing about with LXCs for a bit... Sometimes, to do tricks, you have to jump through a hoop or two. This particular step is a good example.~~

	~~Add these 2 lines to the containers configuration (Replace '''VMID''' with the actual VMID of the container you're working on, of course...)~~
	* vi /etc/pve/lxc/'''''VMID'''''.conf
	** lxc.cgroup2.devices.allow: c 10:200 rwm
	** lxc.mount.entry: /dev/net dev/net none bind,create=dir
	~~Reboot the container~~

	~~==install openvpn & the PIA files (On the LXC container)==~~

	* sudo apt install openvpn unzip whois
	* sudo mkdir /etc/openvpn/PIA
	* cd /etc/openvpn/PIA
	* sudo wget <nowiki>https://www.privateinternetaccess.com/openvpn/openvpn.zip</nowiki>
	* sudo unzip openvpn.zip

	~~== Configure openvpn (On the LXC container) ==~~

	* cd /etc/openvpn
	** Copy the exit point you like from inside PIA here & change the extension to .conf
	*** <span style="color: rgb(22, 145, 121);" >sudo cp PIA/ukraine.ovpn ./ukraine.conf # an example...</span>
	** Edit the .conf file and remove the '''<nowiki><crl-verify></nowiki>''' block. (For some reason openvpn thinks PIAs CRL blocks are ALWAYS malformed...)
	** Add '''/etc/openvpn/auth.txt''' to the line: '''auth-user-pass'''
	*** <span style="color: rgb(22, 145, 121);" >auth-user-pass /etc/openvpn/auth.txt # like this...</span>
	* sudo vi auth.txt
	** copy your PIA username & password into this file (on 2 lines...)
	*** <span style="color: rgb(22, 145, 121);" >Bob</span>
	*** <span style="color: rgb(22, 145, 121);" >SecretSquirrel!</span>
	* sudo vi /etc/default/openvpn
	** uncomment the '''#AUTOSTART="all"''' line
	* sudo service openvpn start
	~~From this point on, accessing the internet from the LXC will go through your chosen PIA exit point.~~

	~~It may take a moment or two to initialise fully. And, startup of the LXC may seem a little slow. But patience is a virtue...~~

	~~== Testing ==~~
	* wget <nowiki>http://ipinfo.io/ip</nowiki> -qO -

	~~Should give you an IP address that does NOT match your actual external IP~~

	* whois `wget <nowiki>http://ipinfo.io/ip</nowiki> -qO -`

	~~Will give you a wall-o-text. In that wall-o-text, you'll find the country code of where ipinfo.io thinks you are. (This, of course, should match your chosen exit point...)~~

Tinker: /* Configure openvpn (On the LXC container) */

2025-09-15T05:16:40Z