COMP 3000 2011 Report: Alpine - Revision history

Mevans at 04:20, 19 December 2011

2011-12-19T04:20:49Z

← Older revision		Revision as of 04:20, 19 December 2011
Line 5:		Line 5:
	[[File:Alpinelogo.png \| right]]		[[File:Alpinelogo.png \| right]]

	[http://alpinelinux.org Alpine Linux] is a free, small, and easy to install Linux distribution that began as a fork of the LEAF project (Linux Embedded Appliance Firewall). The main focus of this distribution is security. It boasts features such as [http://en.wikipedia.org/wiki/PaX Pax] and [http://en.wikipedia.org/wiki/Stack-smashing_protection#GCC_Stack-Smashing_Protector_.28ProPolice.29 SSP](stack smashing protocol), it also prevents security hole exploitations. Alpine is designed for x86 Routers, VPNs (virtual private network), [http://en.wikipedia.org/wiki/Voice_over_IP VoIP] servers, and firewalls. This distribution is a unique blend of ~~others~~, the network configuration is like Debian's and the package management is similar to RedHat's yum, and Arch Linux's PKGBUILDs (APKBUILD in Alpine). Its minuscule size is one of the main features of this distribution, this results in an ISO size of around 51 MBs.		[http://alpinelinux.org Alpine Linux] is a free, small, and easy to install Linux distribution that began as a fork of the LEAF project (Linux Embedded Appliance Firewall). The main focus of this distribution is security. It boasts features such as [http://en.wikipedia.org/wiki/PaX Pax] and [http://en.wikipedia.org/wiki/Stack-smashing_protection#GCC_Stack-Smashing_Protector_.28ProPolice.29 SSP](stack smashing protocol), it also prevents security hole exploitations. Alpine is designed for x86 Routers, VPNs (virtual private network), [http://en.wikipedia.org/wiki/Voice_over_IP VoIP] servers, and firewalls. This distribution is a unique blend of multiple distrobutions, the network configuration is like Debian's and the package management is similar to RedHat's yum, and Arch Linux's PKGBUILDs (APKBUILD in Alpine). Its minuscule size is one of the main features of this distribution, this results in an ISO size of around 51 MBs.

	Alpine is available ~~in 3 possible versions~~. The standard/stable release which has most common packages installed and is less prone to crashing or fatal errors. Alternatively there is the edge release, this is the latest release with the newest packages, unfortunately these releases are more likely to suffer errors. The final release is the mini version, this release only comes with basic packages, but it is stable and incredibly small.		There are three different versions of Alpine available. The standard/stable release which has most common packages installed and is less prone to crashing or fatal errors. Alternatively there is the edge release, this is the latest release with the newest packages, unfortunately these releases are more likely to suffer errors. The final release is the mini version, this release only comes with basic packages, but it is stable and incredibly small.

	Alpine is available at [http://alpinelinux.org/downloads alpinelinux.org/downloads].		Alpine is available at [http://alpinelinux.org/downloads alpinelinux.org/downloads].
Line 20:		Line 20:
	*Step 2: Burn to a CD.		*Step 2: Burn to a CD.
	*Step 3: Boot from CD, wait for an input prompt and login as root with no password.		*Step 3: Boot from CD, wait for an input prompt and login as root with no password.
	*Step 4: ~~Type~~ setup-alpine, hit enter, and ~~then~~ follow the on screen instructions. ~~Alternately refer~~ to the next section for a walkthrough.		*Step 4: Wait for the system to boot, then type "setup-alpine", hit enter, and follow the on screen instructions. Refer to the next section for a walkthrough.

	'''For a Virtual Machine instal'''		'''For a Virtual Machine instal'''
Line 26:		Line 26:
	*Step 2: Mount ISO onto a virtual drive.		*Step 2: Mount ISO onto a virtual drive.
	*Step 3: Make a new Linux machine and boot from the virtual drive.		*Step 3: Make a new Linux machine and boot from the virtual drive.
	*Step 4: ~~Type~~ setup-alpine, hit enter, and ~~then~~ follow the on screen instructions. ~~Alternately refer~~ to the next section for a walkthrough.		*Step 4: Wait for the system to boot, then type "setup-alpine", hit enter, and follow the on screen instructions. Refer to the next section for a walkthrough.

	'''Detailed Setup Walkthrough'''		'''Detailed Setup Walkthrough'''
	The first thing setup-alpine will ask you to do is to pick your keyboard layout~~. You have many choices,~~ like US, Russian, and Japanese. To pick a US layout, simply type us. It will then ask which variant you want to use, us-acentos or us, type us. The next step is to pick the hostname (like 'foo' or 'system'), type whatever you want to name your system. Once a name has been chosen, a interface must be initialized, the only ~~options are~~ eth0 so just hit enter. After ~~this comes~~ more options~~, we will skip these for now and go with~~ the default ~~options~~ by ~~just hitting~~ enter. Next a password must be chosen, enter in whatever you like, ~~alpine will tell you how strong of a password it is, following this~~ it will ask you to retype it to ~~make sure~~ you remember it. Now you must select a timezone, you can type ? for a list of available ones or just hit enter for the default. Finally, you must pick a mirror or type f to pick the fastest. Following this are more advanced options, we will just skip these by entering the default by hitting enter.		The first thing setup-alpine will ask you to do is to pick your keyboard layout like US, Russian, and Japanese. To pick a US layout, simply type "us". It will then ask which variant you want to use, us-acentos or us, type "us". The next step is to pick the hostname (like 'foo' or 'system'), type whatever you want to name your system. Once a name has been chosen, a interface must be initialized, the only option is eth0 so just hit enter. After pressing enter there are more options; the default settings can be selected by pressing enter. Next a password must be chosen, enter in whatever you like, after it will ask you to retype it to ensure you remember it. Now you must select a timezone, you can type "?" for a list of available ones or just hit enter for the default. Finally, you must pick a mirror or type "f" to pick the fastest. Following this there are more advanced options, we will just skip these by entering the default by hitting enter.

	== Basic Operation ==		== Basic Operation ==

	Many basic linux commands work ~~similarly~~ in alpine. For example "ps" will list the processes and "ls" followed by a file will list its contents. However the man pages are not installed by default due to their size~~, but these~~ pages can be installed by typing "apk add man" followed by "apk add" the package you want "-doc". For example, if you wanted the man pages for iptables, you must simply type "apk add iptables-doc" and then you can access the iptables man page.		Many basic linux commands work in alpine. For example "ps" will list the processes and "ls" followed by a file will list its contents. However, the man pages are not installed by default due to their size. These pages can be installed by typing "apk add man" followed by "apk add" the package you want "-doc". For example, if you wanted the man pages for iptables, you must simply type "apk add iptables-doc" and then you can access the iptables man page.

	Alpine Linux excels at servers, firewalls, and networks, none of which I have any experience with. Thankfully the website offers some tutorials (available at http://wiki.alpinelinux.org/wiki/Tutorials_and_Howtos) for a multitude of features. These features include, but are not limited to; hosting a mail server, setting up a satellite Internet connection, formatting a hard drive, and backing up flash memory.		Alpine Linux excels at servers, firewalls, and networks, none of which I have any experience with. Thankfully the website offers some tutorials (available at http://wiki.alpinelinux.org/wiki/Tutorials_and_Howtos) for a multitude of features. These features include, but are not limited to; hosting a mail server, setting up a satellite Internet connection, formatting a hard drive, and backing up flash memory.
Line 39:		Line 39:
	== Usage Evaluation ==		== Usage Evaluation ==

	I found Alpine Linux to be a complicated yet interesting system. This is most likely due to my lack of networking and server knowledge. The system has no GUI, it is just a terminal, this is likely due to the desire to keep the file size down.Overall this is a interesting and, I assume, competent Linux distribution, although definitely not meant for people who are new to Linux.		I found Alpine Linux to be a complicated, yet interesting system. This is most likely due to my lack of networking and server knowledge. The system has no GUI, it is just a terminal, this is likely due to the desire to keep the file size down. Overall this is a interesting and, I assume, competent Linux distribution, although definitely not meant for people who are new to Linux.

	= '''Part 2''' =		= '''Part 2''' =
Line 147:		Line 147:
	==Initialization==		==Initialization==

	Every time the system starts, the package alpine-init ~~is run~~. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.		Every time the system starts, the package alpine-init runs. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.

	[[File:Alps.png\| thumb \| right\| A typical initialization]]		[[File:Alps.png\| thumb \| right\| A typical initialization]]

Mevans: /* Major Package Versions */

2011-12-18T22:38:37Z

Major Package Versions

← Older revision		Revision as of 22:38, 18 December 2011
Line 145:		Line 145:
	\|}		\|}

	~~'''~~Initialization~~'''~~		==Initialization==

	Every time the system starts, the package alpine-init is run. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.		Every time the system starts, the package alpine-init is run. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.

Mevans: /* Software Packaging */

2011-12-18T22:38:10Z

Software Packaging

← Older revision		Revision as of 22:38, 18 December 2011
Line 63:		Line 63:
	Packages can be added by using "add" to install packages and any required dependencies. If you have		Packages can be added by using "add" to install packages and any required dependencies. If you have
	more than one repository, the add command installs the newest package. Just type "apk add package-name" where package-name is the name of the package you would like to install.		more than one repository, the add command installs the newest package. Just type "apk add package-name" where package-name is the name of the package you would like to install.


	'''Removing Packages'''		'''Removing Packages'''
Line 75:		Line 74:
	37,000 total packages in Ubuntu.		37,000 total packages in Ubuntu.

	~~'''~~Major Package Versions~~'''~~		==Major Package Versions==

	{\| border="1"		{\| border="1"
Line 180:		Line 179:
	* Swap devices are activated		* Swap devices are activated
	* And finally the random number generator is initialized		* And finally the random number generator is initialized


	== References ==		== References ==

Mevans: /* Usage Evaluation */

2011-12-18T22:15:39Z

Usage Evaluation

← Older revision		Revision as of 22:15, 18 December 2011
Line 39:		Line 39:
	== Usage Evaluation ==		== Usage Evaluation ==

	~~Overall~~ I found Alpine Linux to be a complicated yet interesting system. This is most likely due to my lack of networking and server knowledge. The system has no GUI, it is just a terminal, this is likely due to the desire to keep the file size down. ~~In the end~~ this is a interesting and, I assume, competent Linux distribution, although definitely not meant for people who are new to Linux.		I found Alpine Linux to be a complicated yet interesting system. This is most likely due to my lack of networking and server knowledge. The system has no GUI, it is just a terminal, this is likely due to the desire to keep the file size down.Overall this is a interesting and, I assume, competent Linux distribution, although definitely not meant for people who are new to Linux.


	= '''Part 2''' =		= '''Part 2''' =

Mevans: /* Installation */

2011-12-18T22:14:17Z

Installation

← Older revision		Revision as of 22:14, 18 December 2011
Line 17:		Line 17:

	'''For a real instal'''		'''For a real instal'''
	*Step 1: [http://alpinelinux.org/downloads] Download ISO.		*Step 1: [http://alpinelinux.org/downloads Download ISO].
	*Step 2: Burn to a CD.		*Step 2: Burn to a CD.
	*Step 3: Boot from CD, wait for an input prompt and login as root with no password.		*Step 3: Boot from CD, wait for an input prompt and login as root with no password.
Line 23:		Line 23:

	'''For a Virtual Machine instal'''		'''For a Virtual Machine instal'''
	*Step 1: [http://alpinelinux.org/downloads] Download ISO.		*Step 1: [http://alpinelinux.org/downloads Download ISO].
	*Step 2: Mount ISO onto a virtual drive.		*Step 2: Mount ISO onto a virtual drive.
	*Step 3: Make a new Linux machine and boot from the virtual drive.		*Step 3: Make a new Linux machine and boot from the virtual drive.
Line 30:		Line 30:
	'''Detailed Setup Walkthrough'''		'''Detailed Setup Walkthrough'''
	The first thing setup-alpine will ask you to do is to pick your keyboard layout. You have many choices, like US, Russian, and Japanese. To pick a US layout, simply type us. It will then ask which variant you want to use, us-acentos or us, type us. The next step is to pick the hostname (like 'foo' or 'system'), type whatever you want to name your system. Once a name has been chosen, a interface must be initialized, the only options are eth0 so just hit enter. After this comes more options, we will skip these for now and go with the default options by just hitting enter. Next a password must be chosen, enter in whatever you like, alpine will tell you how strong of a password it is, following this it will ask you to retype it to make sure you remember it. Now you must select a timezone, you can type ? for a list of available ones or just hit enter for the default. Finally, you must pick a mirror or type f to pick the fastest. Following this are more advanced options, we will just skip these by entering the default by hitting enter.		The first thing setup-alpine will ask you to do is to pick your keyboard layout. You have many choices, like US, Russian, and Japanese. To pick a US layout, simply type us. It will then ask which variant you want to use, us-acentos or us, type us. The next step is to pick the hostname (like 'foo' or 'system'), type whatever you want to name your system. Once a name has been chosen, a interface must be initialized, the only options are eth0 so just hit enter. After this comes more options, we will skip these for now and go with the default options by just hitting enter. Next a password must be chosen, enter in whatever you like, alpine will tell you how strong of a password it is, following this it will ask you to retype it to make sure you remember it. Now you must select a timezone, you can type ? for a list of available ones or just hit enter for the default. Finally, you must pick a mirror or type f to pick the fastest. Following this are more advanced options, we will just skip these by entering the default by hitting enter.


	== Basic Operation ==		== Basic Operation ==

Mevans at 22:13, 18 December 2011

2011-12-18T22:13:05Z

← Older revision		Revision as of 22:13, 18 December 2011
Line 2:		Line 2:

	== Background ==		== Background ==

			[[File:Alpinelogo.png \| right]]

	[http://alpinelinux.org Alpine Linux] is a free, small, and easy to install Linux distribution that began as a fork of the LEAF project (Linux Embedded Appliance Firewall). The main focus of this distribution is security. It boasts features such as [http://en.wikipedia.org/wiki/PaX Pax] and [http://en.wikipedia.org/wiki/Stack-smashing_protection#GCC_Stack-Smashing_Protector_.28ProPolice.29 SSP](stack smashing protocol), it also prevents security hole exploitations. Alpine is designed for x86 Routers, VPNs (virtual private network), [http://en.wikipedia.org/wiki/Voice_over_IP VoIP] servers, and firewalls. This distribution is a unique blend of others, the network configuration is like Debian's and the package management is similar to RedHat's yum, and Arch Linux's PKGBUILDs (APKBUILD in Alpine). Its minuscule size is one of the main features of this distribution, this results in an ISO size of around 51 MBs.		[http://alpinelinux.org Alpine Linux] is a free, small, and easy to install Linux distribution that began as a fork of the LEAF project (Linux Embedded Appliance Firewall). The main focus of this distribution is security. It boasts features such as [http://en.wikipedia.org/wiki/PaX Pax] and [http://en.wikipedia.org/wiki/Stack-smashing_protection#GCC_Stack-Smashing_Protector_.28ProPolice.29 SSP](stack smashing protocol), it also prevents security hole exploitations. Alpine is designed for x86 Routers, VPNs (virtual private network), [http://en.wikipedia.org/wiki/Voice_over_IP VoIP] servers, and firewalls. This distribution is a unique blend of others, the network configuration is like Debian's and the package management is similar to RedHat's yum, and Arch Linux's PKGBUILDs (APKBUILD in Alpine). Its minuscule size is one of the main features of this distribution, this results in an ISO size of around 51 MBs.

Mevans at 22:06, 18 December 2011

2011-12-18T22:06:13Z

← Older revision		Revision as of 22:06, 18 December 2011
Line 150:		Line 150:
	Every time the system starts, the package alpine-init is run. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.		Every time the system starts, the package alpine-init is run. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.

	[[File:Alps.png]]		[[File:Alps.png\| thumb \| right\| A typical initialization]]

	* ~~Proc~~ is mounted		* /proc is mounted (if it is not already)
	* /run is mounted		* /run is mounted so things may be run
	* Server dependencies are cached		* Server dependencies are cached
	* Security filesystems are mounted		* Security filesystems are mounted
	* Debug filesystems are mounted		* Debug filesystems are mounted
	* Busybox mdev is started		* Busybox mdev is started
	* Hardware drivers are loaded		* Hardware drivers are loaded
	* Modules are loaded		* Modules are loaded

Mevans at 21:59, 18 December 2011

2011-12-18T21:59:40Z

← Older revision		Revision as of 21:59, 18 December 2011
Line 149:		Line 149:

	Every time the system starts, the package alpine-init is run. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.		Every time the system starts, the package alpine-init is run. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.

			[[File:Alps.png]]

	* Proc is mounted		* Proc is mounted
Line 178:		Line 180:
	* Swap devices are activated		* Swap devices are activated
	* And finally the random number generator is initialized		* And finally the random number generator is initialized
	On system start, the package alpine init is run, this tells all the other packages when to initialize. Then /proc is mounted followed by /run, after this it caches the service dependencies. The security and debug filesystems are mounted along with the modloop /media/cdrom/boot/grsec.modloop.squashfs. Then the hardware drivers and modules are loaded followed by mounting the local filesystems and configure the kernel parameters. Finally it starts the kernel logging and system logging.

	~~(This is all printed out every time you reboot).~~

	== References ==		== References ==

Mevans at 21:48, 18 December 2011

2011-12-18T21:48:52Z

← Older revision		Revision as of 21:48, 18 December 2011
Line 148:		Line 148:
	'''Initialization'''		'''Initialization'''

			Every time the system starts, the package alpine-init is run. This package tells all the other packages when they are to initialize. The following is the load order the last time I booted the system.

			* Proc is mounted
			* /run is mounted
			* Server dependencies are cached
			* Security filesystems are mounted
			* Debug filesystems are mounted
			* Busybox mdev is started
			* Hardware drivers are loaded
			* Modules are loaded
			* System clock is set
			* Local filesystem is checked for problems
			* fsk is run on (busybox 1.19.2, 20011-11-03 15:50:21 UTC)
			* Root filesystem read/write is remounted
			* Local filesystem is mounted
			* Busybox acpid is started
			* Kernel parameters are configured
			* User login records are created
			* /var/run is cleaned
			* /tmp directory is wiped
			* Networking is started
			* Chronyd is started
			* Hostname is set
			* Busybox kernel logging is started
			* Busybox system logging is started
			* Busybox cron is started
			* Keymap is set
			* Sshd is started
			* Swap devices are activated
			* And finally the random number generator is initialized
	On system start, the package alpine init is run, this tells all the other packages when to initialize. Then /proc is mounted followed by /run, after this it caches the service dependencies. The security and debug filesystems are mounted along with the modloop /media/cdrom/boot/grsec.modloop.squashfs. Then the hardware drivers and modules are loaded followed by mounting the local filesystems and configure the kernel parameters. Finally it starts the kernel logging and system logging.		On system start, the package alpine init is run, this tells all the other packages when to initialize. Then /proc is mounted followed by /run, after this it caches the service dependencies. The security and debug filesystems are mounted along with the modloop /media/cdrom/boot/grsec.modloop.squashfs. Then the hardware drivers and modules are loaded followed by mounting the local filesystems and configure the kernel parameters. Finally it starts the kernel logging and system logging.

Mevans at 21:27, 18 December 2011

2011-12-18T21:27:16Z

@@ Line 77: / Line 77: @@
 '''Major Package Versions'''
-{| class="wikitable"
+{| border="1"
 |-
 ! Package
@@ Line 90: / Line 90: @@
 | http://grsecurity.net
 | A kernel is required
-| -
+|-
 | libc
 | A library for c
@@ Line 109: / Line 109: @@
 | To allow mail operations
 |-
-| row 3, cell 1
+| Kamailio
-| row 3, cell 2
+| An open source SIP proxy
-| row 3, cell 3
+| 3.2.0
 |}
 '''Initialization'''