Looking someone to make minimal openvz templates for us

Abdullah · November 2021

Hii,

Hope you guys are doing awesome!
I'm looking for someone to make minimal openvz templates for us.
This will be used for nat vps, so expecting real minimal template ram/disk consumption by default.
Debian 9,10 and 11 , Ubuntu 18 & 20 , CentOS 7

no hurries but expecting to be completed in a week, incase more let me know.

payment - paypal or in kind (services from webhorizon) or some other way (?) as per your choice.

if any guys are got free time on hands / are interested to help please PM your price and expected completion.

Andrews · November 2021

I would strongly advice against using OS templates from random person from internet, as it creates huge security risk (some intentional backdoor or unintentional mistake) for your customers and your reputation

see what happened in the past:
https://support.solus.io/hc/en-us/articles/360019368659
https://talk.lowendspirit.com/discussion/2508/vulnerability-in-solusvm-debian-10-template-debianuser-backdoor-default-user

Shakib · November 2021

Why not just make them yourself?

Install the OS on a VPS, remove everything you don't need, remove network config and make a gzip backup.

This is how I modified my LXC templates.

ehab · November 2021

I would install the bare minimal, upgrade, if you need to install something else.
zip and use.

Abdullah · November 2021

yeah I get what you guys be saying, ... our existing templates are made by me.
I feel they are not minimal enough.

Perhaps I should've asked for idea on which packages be kept, I was to be checking the templates once made for such risks ...
anyways just discovered this similar old thread and will continue with this https://talk.lowendspirit.com/discussion/292/what-do-you-want-to-see-in-a-minimal-template-openvz-7

yoursunny · November 2021

I don't care what's pre-installed, because I can clean them up:

echo 'APT::Install-Recommends "no";
APT::Install-Suggests "no";' >/etc/apt/apt.conf.d/80recommends
echo 'deb http://deb.debian.org/debian buster-backports main' >/etc/apt/sources.list.d/buster-backports.list
apt-mark auto $(apt-mark showmanual)
apt update
apt install bind9-host curl git htop initramfs-tools iptables iputils-ping jq locales net-tools openssh-server patch resolvconf screen software-properties-common sudo systemd-sysv tcpdump telnet traceroute ufw vim wget zip
apt autoremove --purge
apt full-upgrade

The apt-mark auto $(apt-mark showmanual) marks every package to be deleted, and then apt install re-selects the packages I need.
I hate that OpenVZ still wants deprecated net-tools…

Don't run this on your KVM because it would delete the kernel.

Abdullah · November 2021

We have a related post on our blog now, Reduce Debian 10 to Minimal Environment using you can make your install minimal yourself. instructions for both kvm & ovz Thanks for all you guys help

jaapmarcus · November 2021

I use a modified https://github.com/frieder/dab-templates to create LXC templates for Proxmox LXC

how · November 2021

You can try alpine.
I converted CentOS 7 to alpine in ovz7, and it works well.
https://uk.lxd.images.canonical.com/

Abdullah · November 2021

@how said:
You can try alpine.

Yup! I already added alpine yesterday on NAT & VZ VPS line.

Ganonk · November 2021

@Abdullah said:

Yup! I already added alpine yesterday on NAT & VZ VPS line.

nice

yoursunny · December 2021

I bought the NAT bundle, reinstalled all nodes with Debian 11.
I noticed that all five containers have the same SSH host key, which means the host key was included in the template.
This is not good because it allows MITM attack.
The template should not contain any SSH host key.
SSH server will automatically generate host keys upon first boot.

yoursunny · December 2021

@yoursunny said:
I don't care what's pre-installed, because I can clean them up:
echo 'APT::Install-Recommends "no";
APT::Install-Suggests "no";' >/etc/apt/apt.conf.d/80recommends
echo 'deb http://deb.debian.org/debian buster-backports main' >/etc/apt/sources.list.d/buster-backports.list
apt-mark auto $(apt-mark showmanual)
apt update
apt install bind9-host curl git htop initramfs-tools iptables iputils-ping jq locales net-tools openssh-server patch resolvconf screen software-properties-common sudo systemd-sysv tcpdump telnet traceroute ufw vim wget zip
apt autoremove --purge
apt full-upgrade
The apt-mark auto $(apt-mark showmanual) marks every package to be deleted, and then apt install re-selects the packages I need.
I hate that OpenVZ still wants deprecated net-tools…

Don't run this on your KVM because it would delete the kernel.

This was written for Debian 10.

In Debian 11, the apt install line must also include ifupdown.
Otherwise, you'll lose access as soon as you get to apt autoremove line.

Sadly, OpenVZ7 depends on this deprecated package…
In Debian 10, ifupdown was a dependency of resolvconf so I didn't write it explicitly; in Debian 11, the dependency becomes an enhancement so it needs to be listed separately.

Abdullah · December 2021

thanks for pointing, I have corrected the Debian templates.

how · December 2021

@Abdullah said:

thanks for pointing, I have corrected the Debian templates.

@Abdullah said:

thanks for pointing, I have corrected the Debian templates.

Alpine templates does not set ipv4 nameserver, It can't run apk update.
And Sgp nat domain forwarding maybe not work.

Abdullah · December 2021

@how said:

@Abdullah said:

thanks for pointing, I have corrected the Debian templates.

@Abdullah said:

thanks for pointing, I have corrected the Debian templates.

Alpine templates does not set ipv4 nameserver, It can't run apk update.
And Sgp nat domain forwarding maybe not work.

please make a ticket to check.
It works fine as I tested on another SG VM

Looking someone to make minimal openvz templates for us

Comments