mirror of
https://github.com/apache/cloudstack.git
synced 2025-12-16 10:32:34 +01:00
38 lines
2.1 KiB
XML
38 lines
2.1 KiB
XML
<?xml version='1.0' encoding='utf-8' ?>
|
|
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "file:///C:/Program%20Files%20(x86)/Publican/DocBook_DTD/docbookx.dtd" [
|
|
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
|
%BOOK_ENTITIES;
|
|
]>
|
|
<section id="default-template">
|
|
<title>The Default Template</title>
|
|
<para>CloudPlatform includes a CentOS template. This template is downloaded by the Secondary Storage VM after the primary and secondary storage are configured. You can use this template in your production deployment or you can delete it and use custom templates.</para>
|
|
<para>The root password for the default template is "password".</para>
|
|
<para>A default template is provided for each of XenServer, KVM, and vSphere. The templates that are downloaded depend on the hypervisor type that is available in your cloud. Each template is approximately 2.5 GB physical size.</para>
|
|
<para>The default template includes the standard iptables rules, which will block most access to the template excluding ssh.</para>
|
|
<programlisting># iptables --list
|
|
Chain INPUT (policy ACCEPT)
|
|
target prot opt source destination
|
|
RH-Firewall-1-INPUT all -- anywhere anywhere
|
|
|
|
Chain FORWARD (policy ACCEPT)
|
|
target prot opt source destination
|
|
RH-Firewall-1-INPUT all -- anywhere anywhere
|
|
|
|
Chain OUTPUT (policy ACCEPT)
|
|
target prot opt source destination
|
|
|
|
Chain RH-Firewall-1-INPUT (2 references)
|
|
target prot opt source destination
|
|
ACCEPT all -- anywhere anywhere
|
|
ACCEPT icmp -- anywhere anywhere icmp any
|
|
ACCEPT esp -- anywhere anywhere
|
|
ACCEPT ah -- anywhere anywhere
|
|
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
|
|
ACCEPT udp -- anywhere anywhere udp dpt:ipp
|
|
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp
|
|
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
|
|
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
|
|
REJECT all -- anywhere anywhere reject-with icmp-host-
|
|
</programlisting>
|
|
</section>
|