wiki-grav/pages/02.linux/07.xcp-ng/02.dom0/default.en.md
2022-05-20 21:14:06 +02:00

830 B

title
Dom0

Firewall

The firewall configuration can be changed with an already included package.
Call the TUI version with system-config-firewall-tui

The only open port will be 22/tcp for SSH Access

SSH Access

Disable password authentication. See ssh

Local ISO Storage

Using ISO Storage on "/" or subdirectories on the same partition is not really viable, as only 18GiB are assigned to this mountpoint by default.
Instead use the local EXT mapper device. This is mounted under /run/sr-mount/(id)
Create a new "ISO" directory.
If you want to still use an easier to remember path, create a symbolic link. For example ln -s /run/sr-mount/69d19d8e-f0dd-92d8-41bc-3d974b20f4f8/ISO/ /root/ISO. You'll be able to use the path /root/ISO in the webinterface as local ISO storage.