[gentoo-hardened] setting up pvgrub on a xen based vps

[gentoo-hardened] setting up pvgrub on a xen based vps

[Jonathan Aquilina]

Good evening everyone,

I am trying to harden a vps further by setting up PAX grsec and SEL.
Currently the vps is using the hosts kernel. My provider has documentation
on how to do this but not on how to do it on gentoo. I have been told i
need the grub legacy format menu.lst. Is there a way I can just generate
my own grub legacy menu.lst or do I need to install grub legacy in its
entirety and use it instead of grub 2? If anyone has a link to a tutorial
that would be greatly appreciated as documentation seems non existent.

Regards

Re: [gentoo-hardened] setting up pvgrub on a xen based vps

[Anthony G. Basile]

On 06/08/14 15:22, Jonathan Aquilina wrote:
> Good evening everyone,
>
> I am trying to harden a vps further by setting up PAX grsec and SEL.
> Currently the vps is using the hosts kernel. My provider has documentation
> on how to do this but not on how to do it on gentoo. I have been told i
> need the grub legacy format menu.lst. Is there a way I can just generate
> my own grub legacy menu.lst or do I need to install grub legacy in its
> entirety and use it instead of grub 2? If anyone has a link to a tutorial
> that would be greatly appreciated as documentation seems non existent.
>
> Regards
>

Writing your own menu.lst is easy; just do it manually.  Unliked grub2, 
grub1 (for want of a better name) does not "scan" your system and try to 
write a menu.lst the way grub2 writes a grub.cfg.  So don't install 
grub1 (and thus overwrite grub2's boot sector code) in the hopes that 
you'll get some magic script to write your menu.lst for you.

I'm not sure why you are finding it hard to find resources.  I really 
can't help you more because I don't know your setup.  Obviously if you 
are booting some kernel in your virtual machine using grub1 you already 
have a menu.lst.  Can you use it as a model?



-- 
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197

Re: [gentoo-hardened] setting up pvgrub on a xen based vps

[Jonathan Aquilina]

Good Morning Anthony,

I ended up managing, it had been such a long time since I used grub1 and
forgot what was in it. Not to mention this was the first time that I had
done such a thing as well.

I had a few issues which i managed to iron out and im running the current
hardened kernel successfully.

Apologies for any noise

Regards,
Jonathan

> On 06/08/14 15:22, Jonathan Aquilina wrote:
>> Good evening everyone,
>>
>> I am trying to harden a vps further by setting up PAX grsec and SEL.
>> Currently the vps is using the hosts kernel. My provider has
>> documentation
>> on how to do this but not on how to do it on gentoo. I have been told i
>> need the grub legacy format menu.lst. Is there a way I can just generate
>> my own grub legacy menu.lst or do I need to install grub legacy in its
>> entirety and use it instead of grub 2? If anyone has a link to a
>> tutorial
>> that would be greatly appreciated as documentation seems non existent.
>>
>> Regards
>>
>
> Writing your own menu.lst is easy; just do it manually.  Unliked grub2,
> grub1 (for want of a better name) does not "scan" your system and try to
> write a menu.lst the way grub2 writes a grub.cfg.  So don't install
> grub1 (and thus overwrite grub2's boot sector code) in the hopes that
> you'll get some magic script to write your menu.lst for you.
>
> I'm not sure why you are finding it hard to find resources.  I really
> can't help you more because I don't know your setup.  Obviously if you
> are booting some kernel in your virtual machine using grub1 you already
> have a menu.lst.  Can you use it as a model?
>
>
>
> --
> Anthony G. Basile, Ph. D.
> Chair of Information Technology
> D'Youville College
> Buffalo, NY 14201
> (716) 829-8197
>
>