Salut,
…
live-usb persistent et réseau sur les trois machines résolus!!!
* Trois machines
-
machine-1 : 1260 Mio de ram Squeeze/kde4 (pc fixe)
-
machine-2 : 256 Mio de ram Squeeze/pur (pc fixe)
-
machine-3 : 128 Mio de ram Squeeze/lxde (pc portable)
Après moult recherches/essais et les bonnes questions qui en découlent.
- Causes des dysfonctionnements. Chaise/Clavier
!
Dans mes config et paramètres que j’avais inclus, dont deux par erreurs:
/config/chroot_local-includes/etc/hosts.allow
/config/chroot_local-includes/etc/hosts.deny
et je soupçonne également:
/config/chroot_local-includes/etc/sysctl.conf
- Au final, construction d’une nouvelle image binary.img
* Un premier boot sur la machine-2
[code]user@debian:~$ ping -c3 googlr.fr
PING googlr.fr (216.8.179.25) 56(84) bytes of data.
64 bytes from ptr-216-8-179-25.ptr.nextdimensioninc.com (216.8.179.25): icmp_req=1 ttl=47 time=126 ms
64 bytes from ptr-216-8-179-25.ptr.nextdimensioninc.com (216.8.179.25): icmp_req=2 ttl=47 time=125 ms
64 bytes from ptr-216-8-179-25.ptr.nextdimensioninc.com (216.8.179.25): icmp_req=3 ttl=47 time=125 ms
— googlr.fr ping statistics —
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 125.091/125.749/126.449/0.555 ms
user@debian:~$
user@debian:~$ ping -c3 debian-fr.org
PING debian-fr.org (91.121.50.62) 56(84) bytes of data.
64 bytes from chp1.zehome.com (91.121.50.62): icmp_req=1 ttl=52 time=25.5 ms
64 bytes from chp1.zehome.com (91.121.50.62): icmp_req=2 ttl=52 time=25.6 ms
64 bytes from chp1.zehome.com (91.121.50.62): icmp_req=3 ttl=52 time=25.4 ms
— debian-fr.org ping statistics —
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 25.420/25.560/25.671/0.104 ms
user@debian:~$
user@debian:~$
user@debian:~$ ping -c3 91.121.50.62
PING 91.121.50.62 (91.121.50.62) 56(84) bytes of data.
64 bytes from 91.121.50.62: icmp_req=1 ttl=52 time=25.3 ms
64 bytes from 91.121.50.62: icmp_req=2 ttl=52 time=26.1 ms
64 bytes from 91.121.50.62: icmp_req=3 ttl=52 time=25.9 ms
— 91.121.50.62 ping statistics —
3 packets transmitted, 3 received, 0% packet loss, time 2001ms
rtt min/avg/max/mdev = 25.304/25.789/26.130/0.352 ms
user@debian:~$
user@debian:~$ ping -c3 216.8.179.25
PING 216.8.179.25 (216.8.179.25) 56(84) bytes of data.
64 bytes from 216.8.179.25: icmp_req=1 ttl=47 time=125 ms
64 bytes from 216.8.179.25: icmp_req=2 ttl=47 time=125 ms
64 bytes from 216.8.179.25: icmp_req=3 ttl=47 time=125 ms
— 216.8.179.25 ping statistics —
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 125.317/125.508/125.714/0.440 ms
user@debian:~$
[/code]
[code]root@debian:~# ifconfig -a
eth0 Link encap:Ethernet HWaddr x.x.x.x.x.x.x
inet adr:192.168.1.14 Bcast:192.168.1.255 Masque:255.255.255.0
adr inet6: x.x.x.x.x.x.x/64 Scope:Lien
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:74 errors:0 dropped:0 overruns:0 frame:0
TX packets:58 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:1000
RX bytes:10161 (9.9 KiB) TX bytes:8850 (8.6 KiB)
lo Link encap:Boucle locale
inet adr:127.0.0.1 Masque:255.0.0.0
adr inet6: ::1/128 Scope:Hôte
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:24 errors:0 dropped:0 overruns:0 frame:0
TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:1616 (1.5 KiB) TX bytes:1616 (1.5 KiB)
pan0 Link encap:Ethernet HWaddr x.x.x.x.x.x.x
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
root@debian:~#[/code]
* Deuxième boot sur la machine-1
[code]user@debian:~$ ping -c2 debian-fr.org
PING debian-fr.org (91.121.50.62) 56(84) bytes of data.
64 bytes from chp1.zehome.com (91.121.50.62): icmp_req=1 ttl=52 time=25.3 ms
64 bytes from chp1.zehome.com (91.121.50.62): icmp_req=2 ttl=52 time=26.4 ms
— debian-fr.org ping statistics —
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 25.374/25.906/26.438/0.532 ms
user@debian:~$
user@debian:~$ ping -c2 91.121.50.62
PING 91.121.50.62 (91.121.50.62) 56(84) bytes of data.
64 bytes from 91.121.50.62: icmp_req=1 ttl=52 time=26.0 ms
64 bytes from 91.121.50.62: icmp_req=2 ttl=52 time=25.9 ms
— 91.121.50.62 ping statistics —
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 25.929/25.971/26.014/0.166 ms
user@debian:~$
[/code]
[code]root@debian:~# ifconfig -a
eth1 Link encap:Ethernet HWaddr x.x.x.x.x.x.x.x
inet adr:192.168.1.13 Bcast:192.168.1.255 Masque:255.255.255.0
adr inet6: x.x.x.x.x.x.x.x/64 Scope:Lien
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3687 errors:0 dropped:0 overruns:0 frame:0
TX packets:2827 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:1000
RX bytes:4023264 (3.8 MiB) TX bytes:388526 (379.4 KiB)
Interruption:16 Adresse de base:0x4000
eth2 Link encap:Ethernet HWaddr x.x.x.x.x.x.x.x
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Interruption:20
lo Link encap:Boucle locale
inet adr:127.0.0.1 Masque:255.0.0.0
adr inet6: ::1/128 Scope:Hôte
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:10 errors:0 dropped:0 overruns:0 frame:0
TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:700 (700.0 B) TX bytes:700 (700.0 B)
pan0 Link encap:Ethernet HWaddr x.x.x.x.x.x.x.x
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
root@debian:~#[/code]
* Troisième boot sur machine-3
[code]user@debian:~$ ping -c2 debian-fr.org
PING debian-fr.org (91.121.50.62) 56(84) bytes of data.
64 bytes from chp1.zehome.com (91.121.50.62): icmp_req=1 ttl=52 time=25.6 ms
64 bytes from chp1.zehome.com (91.121.50.62): icmp_req=2 ttl=52 time=25.9 ms
— debian-fr.org ping statistics —
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 25.679/25.821/25.964/0.214 ms
user@debian:~$
user@debian:~$ ping -c2 91.121.50.62
PING 91.121.50.62 (91.121.50.62) 56(84) bytes of data.
64 bytes from 91.121.50.62: icmp_req=1 ttl=52 time=26.4 ms
64 bytes from 91.121.50.62: icmp_req=2 ttl=52 time=25.8 ms
— 91.121.50.62 ping statistics —
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 25.818/26.151/26.484/0.333 ms
user@debian:~$
[/code]
[code]root@debian:/home/user# ifconfig -a
eth3 Link encap:Ethernet HWaddr x.x.x.x.x
inet adr:192.168.1.16 Bcast:192.168.1.255 Masque:255.255.255.0
adr inet6: x.x.x.x.x/64 Scope:Lien
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:307 errors:0 dropped:0 overruns:1 frame:0
TX packets:112 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:1000
RX bytes:59551 (58.1 KiB) TX bytes:13767 (13.4 KiB)
Interruption:11 Adresse de base:0xc00
lo Link encap:Boucle locale
inet adr:127.0.0.1 Masque:255.0.0.0
adr inet6: ::1/128 Scope:Hôte
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:8 errors:0 dropped:0 overruns:0 frame:0
TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:560 (560.0 B) TX bytes:560 (560.0 B)
pan0 Link encap:Ethernet HWaddr x.x.x.x.x
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
root@debian:/home/user#
[/code]
*** En conclusion ***
- Concernant la persistence.
- Déclaré le paramètre " persistent " dans le fichier /home/loreleil/usb_live_lxde/conf/binary
- une fois l’image transféré sur la clés, crée une partition " live-rw "
*** Après chaque création (lb build) un nettoyage (lb clean) et
rm -rf /home/loreleil/usb_live_lxde
* edit *
Il me semble avoir oublier le principale 
/config/chroot_local-includes/etc/init.d/iptables
Du genre …
[code]…
iptables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -o eth0 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
…
iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --set
iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --update --seconds 30 --hitcount 10 -j DROP
…
iptables -A OUTPUT -o eth0 -p udp --sport 68 --dport 67 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --sport 67 --dport 68 -j ACCEPT
…
iptables -A INPUT -p tcp -i eth0 --dport 80 -j ACCEPT
iptables -A INPUT -p tcp -i eth0 --dport 6787 -j ACCEPT
iptables -A INPUT -p tcp -i eth0 --dport 443 -j ACCEPT
…
etc …
[/code]

Notes: … Et nul besoin d’un script, quel qu’il soit … 
Je vous salut … 