from small one page howto to huge articles all in one place
 

search text in:




Other .linuxhowtos.org sites: www.linuxhowtos.org
toolsntoys.linuxhowtos.org



Last additions:
How to make X listen on port 6000

How to make X listen on port 6000

words:

34

views:

81543

userrating:

average rating: 1.2 (52 votes) (1=very good 6=terrible)


May, 25th 2007:
April, 26th 2007:
Apr, 10th. 2007:
Druckversion . pdf icon
You are here: Installation Guides

Summary

This text describes the installation and configuration of a heavy duty internet server running a gentoo linux distribution. The server will have to run 24/7 with minimum downtime for maintenance and is connected to a 100MBit Internet backbone. I choose gentoo as distribution because of the really fast availability of new versions and security patches for all installed packages. Everything will be compiled for the special needs of this maschine with various security enhancement features which ship with the available glibc/gcc versions (like stack smashing protections).

Changelog

Previous versions used to split the swap space across the raid harddiscs and not to mirror it. In case of a hard disc failure your system might(will) crash. This is not intended... (Thanks to Nick Rosier to point this out).

Note

This howto is NOT suited for users who run their first linux (or gentoo) install. Previous linux knowledge is needed, not every detail will be explained here.

System descriptions

Hardware

The system is a dual Xeon 2.66 Ghz with 512KB cache size and enabled hyperthreading.

System storage will be 2 80 GB HDDs running in a raid 1 with network backup every night. The filesystem will be XFS on a software raid 1 (mirroring) system.

Memory: 1GB, build in network card, no sound used, onboard graphics.

The machine will have an UPS and external cooling and will be mounted in a 19" rack.

Software

The system will be a heavy duty webserver running at least the following services/daemons:

  • Apache 2 as webserver (with many virtual hosts)
  • openLDAP for authentication for smtp/imap/pop3 and other login services, but not for system login
  • postfix with sasl2 support as MTA (Mail Transfer Agent)
  • courier-imap for imap access
  • courier-pop3
  • mysql as database backend
  • php (hardened) for various web frontends
  • LeopardCMS (a highspeed content management system written in C) for websites
  • ldapphpadmin for administrating the ldap server
  • squirrelmail as webmail service
  • awstats for website statistics

Installation

The basic installation is explained in the wonderful gentoo installation handbook.

I will only describe the modification on each step.

I will use a stage 1 installation with the minimal boot CD.

Installation in quick style (refer to the handbook if you don't know how to do the individual step(s))

Booting:

  • Boot from the CD, load the right network drivers
  • Change root password to something we know.
  • Configure the network with the given ip address dns servers etc.
  • Start sshd (optional)

Partitioning the hdd(s)

I'm using fdisk to partition the hdds, use whatever you like best.

Attention: To be able to use the raid 1, both hdds must be partitioned exactly identical, so write down the setting when partitioning.

My HDD layout :

/dev/hda1 boot partition 10 MB,  partition type: fd (Linux raid autodetect)
/dev/hda2 swap partition 250 MB, partition type: 82 (Linux swap)
/dev/hda3 root partition remaining space, partition type: fd (Linux raid autodetect)
The same applies to the 2nd HDD.

Setting up the raid 1

edit/create the file /etc/raidtab and enter the following (adjust the devices if neccessary)

raiddev         /dev/md0
nr-raid-disks   2
persistent-superblock   1
device          /dev/hda1
raid-disk       0
device          /dev/hdc1
raid-disk       1

raiddev         /dev/md2
nr-raid-disks   2
persistent-superblock   1
device          /dev/hda3
raid-disk       0
device          /dev/hdc3
raid-disk       1

In case you want to mirror the swap:

raiddev         /dev/md1
nr-raid-disks   2
persistent-superblock   1
device          /dev/hda2
raid-disk       0
device          /dev/hdc2
raid-disk       1

Note: I do not use a raid for the swap, I will explain the swap setup a bit later.
Please also see the comment at the bottom of this page, why this may cause trouble on a harddisk failure.

start the raid by running

raidstart --all
enter "cat /proc/mdstat"

You should see something like this:

Personalities : [raid1]
md0 : active raid1 hda1[1] hdc1[1]
      XXX blocks [2/2] [UU]
md2 : active raid1 hda3[1] hdc3[1]
      YYY blocks [2/2] [UU]

Now, after your raid is up and running, don't think about touching /dev/hda or /dev/hdc directly again. Only use /dev/md0 or /dev/md2.

Applying a Filesystem to a Partition

create your filesystems like it is described in the handbook, only use /dev/md0 and /dev/md2 for the target devices.

Activate the Swap Partitions

Because we are using 2 identical hdds, we have 2 swap partitions that we enable both.

Later in the /etc/fstab config we can tune a bit to make our swap faster.

Mounting

Now we follow the handbook a bit for mounting and downloading the needed stage 1 tarball. Remember, use /dev/mdX as partitions.

Configuring the Compile Options

I prefer to to use the full make.conf.default for configuration, so I copy it over before editing.

cp /mnt/gentoo/etc/make.conf.default /mnt/gentoo/etc/make.conf
now we edit the file
nano -w /mnt/gentoo/etc/make.conf

CHOST is set to i686-pc-linux-gnu

I use the following CFLAGS:

CFLAGS="-march=pentium4 -O2 -pipe" be careful, if you enable the hardened toolchain, never use more than -O2 for compiling.

If you have an AMD cpu, or a pentium2/3 change the -march setting to your cpu.

I set the MAKEOPTS to -j5 (number of CPUs plus one) (2 x Xeon with HT enabled makes 4 virtual CPUs)

MAKEOPTS="-j5"

setting USE-Flags

I use the following line

USE="-X -gtk -gnome -alsa mysql apache2 ssl ssh openldap\
sasl2 pam pic pie hardened hardenedphp xml vhosts"
I don't want X, gtk, gnome or alsa. (This is a server)

But I want mysql, apache, a.s.o.

The flags pic, pie and hardened are used with the hardened toolchain provided by gentoo.

These make the executables less vulnerable to buffer overflow and other programming mistakes. As of the writing of this howto, the flags "pic, pie and hardened" cause some problems with some packages. Manual patching and fiddling may be needed.

UPDATE: I installed another server lately (Nov. 2005), no patching was needed any more.

Follow the installation manual including the Stage1 to Stage2 section.

It is always useful to download the packages first and after that, start the real bootstrapping process. There is nothing better than having a bootstrap failing after 60+ mins on the last package because the file was damaged on the ftp mirror.

Proceed from stage2 to stage3 the documented way.

This will take a while, in my case 71 packages will be installed.

Just keep yourself occupied with something, like writing a howto or something ;)

Now its time to configure the kernel as described in the manual

  • set the timezone
  • install a kernel. I used a hardened-sources kernel (version 2.6.7-r7)
  • check the symlink /usr/src/linnux
  • configure the kernel with make menuconfig
  • make sure to check SMP support in case of a multiple CPU machine.
  • If you use XFS and like to not loose parts of your filesystem data, disable preemptible kernel.
  • Think twice before enabling power management functions like software suspend.
  • You really don't want that your server goes into suspend mode during the night.
  • Warning: If you use MySQL, do not enable the PaX feature "Disallow ELF text relocations". Enabling this makes you unable to compile and run MySQL. *sniff*
  • compile the kernel (remember to use the -j5 flag like in the MAKEOPTS line).
  • install the kernel.

configuring /etc/fstab

enter the data as described in the manual, but use /dev/md0 and /dev/md2

for the swap line use the following 2 lines

/dev/hda2  none swap sw,pri=2 0 0
/dev/hdc2  none swap sw,pri=2 0 0
This way the kernel uses both hdds for swap with the same priority, this means some data will be swapped to one hdd, some to the other and both could be read/written at the same time. This gives a speed boost when you need swap (which should never happen on normal conditions...).
Or use
/dev/md2  none swap sw,pri=2 0 0
in case of a mirrored swap partion.

Enter the networking information as described in the handbook (ip, domainname, ...)

Continue with the installation manual until you got through the manual and

have the basic system running as you want.

While writing this howto, it was planned to have a part 2 to describe the installation of additional software like apache, postfix and others.

But since they are installed exactly as on a "normal" gentoo distribution, a part 2 is not really needed.

comments

Nick Rosier wrote in an email:
I just read this setup. IMHO there's a little flaw in the setup. Goal is to have as little downtime as possible. To gain maybe a bit more performance the author decided not to mirror swap. This is a bad idea. In case of a hard-disk failure part of your swapspace will be unavailable/corrupted meaning your system will possibly crash. I doubt that is what one wants.
Nick has a valid point.
In this setup I use ide harddisks. (yes, I know, SCSI would be better...)
If one of the hdds dies, its very likely that the system crashes any way. This is my experience with ide hdds.
If you use SCSI or SATA-drives, the situation might change. On those drives it might be better to use raid on the swap, too.
rate this article:
current rating: average rating: 1.4 (42 votes) (1=very good 6=terrible)
Your rating:
Very good (1) Good (2) ok (3) average (4) bad (5) terrible (6)

back



Support us on Content Nation

New Packages

- as rdf newsfeed
- as rss newsfeed
- as Atom newsfeed
2025-10-14
aiostream - 0.7.1
Ebuild name:

dev-python/aiostream-0.7.1

Description

Generator-based operators for asynchronous iteration

Added to portage

2025-10-14

asciidoctor - 2.0.24
Ebuild name:

dev-ruby/asciidoctor-2.0.24

Description

Processor for converting AsciiDoc into HTML 5, DocBook 4.5 and other fo

Added to portage

2025-10-14

awscli - 1.42.51
Ebuild name:

app-admin/awscli-1.42.51

Description

Universal Command Line Environment for AWS

Added to portage

2025-10-14

boto3 - 1.40.51
Ebuild name:

dev-python/boto3-1.40.51

Description

The AWS SDK for Python

Added to portage

2025-10-14

botocore - 1.40.51
Ebuild name:

dev-python/botocore-1.40.51

Description

Low-level, data-driven core of boto 3

Added to portage

2025-10-14

braintree - 4.39.0
Ebuild name:

dev-python/braintree-4.39.0

Description

Braintree Python Library

Added to portage

2025-10-14

cargo-nextest - 0.9.106
Ebuild name:

dev-util/cargo-nextest-0.9.106

Description

Next-generation test runner for Rust

Added to portage

2025-10-14

cftime - 1.6.5
Ebuild name:

dev-python/cftime-1.6.5

Description

Time-handling functionality from netcdf4-python

Added to portage

2025-10-14

charset-normalizer - 3.4.4
Ebuild name:

dev-python/charset-normalizer-3.4.4

Description

The Real First Universal Charset Detector

Added to portage

2025-10-14

dash - 0.5.13.1
Ebuild name:

app-shells/dash-0.5.13.1

Description

Debian Almquist Shell

Added to portage

2025-10-14

dulwich - 0.24.3
Ebuild name:

dev-python/dulwich-0.24.3

Description

Pure-Python implementation of the Git file formats and protocols

Added to portage

2025-10-14

dulwich - 0.24.3-r1
Ebuild name:

dev-python/dulwich-0.24.3-r1

Description

Pure-Python implementation of the Git file formats and protocols

Added to portage

2025-10-14

fennel - 1.6.0
Ebuild name:

dev-lang/fennel-1.6.0

Description

Lisp-like language that compiles to Lua

Added to portage

2025-10-14

firefox - 140.4.0
Ebuild name:

www-client/firefox-140.4.0

Description

Firefox Web Browser

Added to portage

2025-10-14

firefox - 144.0
Ebuild name:

www-client/firefox-144.0

Description

Firefox Web Browser

Added to portage

2025-10-14

firefox-bin - 140.4.0
Ebuild name:

www-client/firefox-bin-140.4.0

Description

Firefox Web Browser

Added to portage

2025-10-14

gallery-dl - 1.30.10
Ebuild name:

net-misc/gallery-dl-1.30.10

Description

Download image galleries and collections from several image hosting sit

Added to portage

2025-10-14

gnome-applets - 3.58.0
Ebuild name:

gnome-base/gnome-applets-3.58.0

Description

Applets for the GNOME Flashback Panel

Added to portage

2025-10-14

gnome-flashback - 3.58.0
Ebuild name:

gnome-base/gnome-flashback-3.58.0

Description

GNOME Flashback session

Added to portage

2025-10-14

gnome-panel - 3.58.1
Ebuild name:

gnome-base/gnome-panel-3.58.1

Description

The GNOME Flashback Panel

Added to portage

2025-10-14

h5py - 3.15.0
Ebuild name:

dev-python/h5py-3.15.0

Description

Simple Python interface to HDF5 files

Added to portage

2025-10-14

hcloud - 2.9.0
Ebuild name:

dev-python/hcloud-2.9.0

Description

Official Hetzner Cloud python library

Added to portage

2025-10-14

inline-snapshot - 0.29.4
Ebuild name:

dev-python/inline-snapshot-0.29.4

Description

Create and update inline snapshots in your Python tests

Added to portage

2025-10-14

ipykernel - 7.0.0
Ebuild name:

dev-python/ipykernel-7.0.0

Description

IPython Kernel for Jupyter

Added to portage

2025-10-14

jellyfin-bin - 10.11.0_rc9
Ebuild name:

www-apps/jellyfin-bin-10.11.0_rc9

Description

Jellyfin puts you in control of managing and streaming your media

Added to portage

2025-10-14

kdenlive - 25.08.2-r1
Ebuild name:

kde-apps/kdenlive-25.08.2-r1

Description

Non-linear video editing suite by KDE

Added to portage

2025-10-14

metacity - 3.58.1
Ebuild name:

x11-wm/metacity-3.58.1

Description

GNOME Flashback window manager

Added to portage

2025-10-14

mpmath - 1.4.0_beta2
Ebuild name:

dev-python/mpmath-1.4.0_beta2

Description

Python library for arbitrary-precision floating-point arithmetic

Added to portage

2025-10-14

msmtp - 1.8.32
Ebuild name:

mail-mta/msmtp-1.8.32

Description

An SMTP client and SMTP plugin for mail user agents such as Mutt

Added to portage

2025-10-14

muon - 0.5.0
Ebuild name:

dev-build/muon-0.5.0

Description

A meson-compatible build system

Added to portage

2025-10-14

narwhals - 2.8.0
Ebuild name:

dev-python/narwhals-2.8.0

Description

Extremely lightweight compatibility layer between dataframe libraries

Added to portage

2025-10-14

netcdf4 - 1.7.3
Ebuild name:

dev-python/netcdf4-1.7.3

Description

Python/numpy interface to the netCDF C library

Added to portage

2025-10-14

newsboat - 2.41
Ebuild name:

net-news/newsboat-2.41

Description

An RSS/Atom feed reader for text terminals

Added to portage

2025-10-14

nss - 3.112.2
Ebuild name:

dev-libs/nss-3.112.2

Description

Mozilla's Network Security Services library that implements PKI support

Added to portage

2025-10-14

numexpr - 2.14.1
Ebuild name:

dev-python/numexpr-2.14.1

Description

Fast numerical array expression evaluator for Python and NumPy

Added to portage

2025-10-14

precis-i18n - 1.1.2
Ebuild name:

dev-python/precis-i18n-1.1.2

Description

Internationalized Usernames and Passwords

Added to portage

2025-10-14

prowlarr-bin - 2.1.4.5212
Ebuild name:

www-apps/prowlarr-bin-2.1.4.5212

Description

An indexer manager/proxy to integrate with your various PVR apps

Added to portage

2025-10-14

pydantic - 2.12.1
Ebuild name:

dev-python/pydantic-2.12.1

Description

Data parsing and validation using Python type hints

Added to portage

2025-10-14

referencing - 0.37.0
Ebuild name:

dev-python/referencing-0.37.0

Description

Cross-specification JSON referencing (JSON Schema, OpenAPI...)

Added to portage

2025-10-14

sanoid - 2.3.0-r1
Ebuild name:

sys-fs/sanoid-2.3.0-r1

Description

Policy-driven snapshot management and replication tools for OpenZFS.

Added to portage

2025-10-14

sanoid - 9999
Ebuild name:

sys-fs/sanoid-9999

Description

Policy-driven snapshot management and replication tools for OpenZFS.

Added to portage

2025-10-14

sdoc - 2.6.4
Ebuild name:

dev-ruby/sdoc-2.6.4

Description

rdoc generator html with javascript search index

Added to portage

2025-10-14

sqlglot - 27.27.0
Ebuild name:

dev-python/sqlglot-27.27.0

Description

An easily customizable SQL parser and transpiler

Added to portage

2025-10-14

telegram-desktop - 6.2.3
Ebuild name:

net-im/telegram-desktop-6.2.3

Description

Official desktop client for Telegram

Added to portage

2025-10-14

testfixtures - 9.2.0
Ebuild name:

dev-python/testfixtures-9.2.0

Description

A collection of helpers and mock objects for unit tests and doc tests

Added to portage

2025-10-14

unearth - 0.18.0
Ebuild name:

dev-python/unearth-0.18.0

Description

A utility to fetch and download python packages

Added to portage

2025-10-14

xor-analyze - 0.5-r1
Ebuild name:

app-crypt/xor-analyze-0.5-r1

Description

Program for cryptanalyzing xor 'encryption' with variable key length

Added to portage

2025-10-14

yubihsm-connector - 3.0.4
Ebuild name:

app-crypt/yubihsm-connector-3.0.4

Description

Server to expose YubiHSM 2 to network

Added to portage

2025-10-14

yubihsm-shell - 2.6.0
Ebuild name:

app-crypt/yubihsm-shell-2.6.0

Description

Components used to interact with the YubiHSM 2

Added to portage

2025-10-14

yubikey-manager - 5.7.2
Ebuild name:

app-crypt/yubikey-manager-5.7.2

Description

Python library and command line tool for configuring a YubiKey

Added to portage

2025-10-14

2025-10-13
XML-LibXML - 2.21.0-r1
Ebuild name:

dev-perl/XML-LibXML-2.21.0-r1

Description

Perl binding for libxml2

Added to portage

2025-10-13

cachetools - 6.2.1
Ebuild name:

dev-python/cachetools-6.2.1

Description

Extensible memoizing collections and decorators

Added to portage

2025-10-13

ceph - 20.1.1
Ebuild name:

sys-cluster/ceph-20.1.1

Description

Ceph distributed filesystem

Added to portage

2025-10-13

claude-code - 2.0.14
Ebuild name:

dev-util/claude-code-2.0.14

Description

Claude Code - an agentic coding tool by Anthropic

Added to portage

2025-10-13

crc32c - 2.7.1_p0
Ebuild name:

dev-python/crc32c-2.7.1_p0

Description

CRC32c algorithm in hardware and software

Added to portage

2025-10-13

dfu-programmer - 1.1.0
Ebuild name:

dev-embedded/dfu-programmer-1.1.0

Description

A Device Firmware Update based USB programmer for Atmel chips

Added to portage

2025-10-13

erb - 5.1.1
Ebuild name:

dev-ruby/erb-5.1.1

Description

An easy to use but powerful templating system for Ruby

Added to portage

2025-10-13

firefox-bin - 144.0
Ebuild name:

www-client/firefox-bin-144.0

Description

Firefox Web Browser

Added to portage

2025-10-13

freerdp - 3.17.2-r1
Ebuild name:

net-misc/freerdp-3.17.2-r1

Description

Free implementation of the Remote Desktop Protocol

Added to portage

2025-10-13

gcc - 16.0.0_p20251012
Ebuild name:

sys-devel/gcc-16.0.0_p20251012

Description

The GNU Compiler Collection

Added to portage

2025-10-13

gentoo-sources - 6.12.52
Ebuild name:

sys-kernel/gentoo-sources-6.12.52

Description

Full sources including the Gentoo patchset for the . kernel tree

Added to portage

2025-10-13

gentoo-sources - 6.16.12
Ebuild name:

sys-kernel/gentoo-sources-6.16.12

Description

Full sources including the Gentoo patchset for the . kernel tree

Added to portage

2025-10-13

gentoo-sources - 6.17.2
Ebuild name:

sys-kernel/gentoo-sources-6.17.2

Description

Full sources including the Gentoo patchset for the . kernel tree

Added to portage

2025-10-13

gentoo-sources - 6.6.111
Ebuild name:

sys-kernel/gentoo-sources-6.6.111

Description

Full sources including the Gentoo patchset for the . kernel tree

Added to portage

2025-10-13

git-sources - 6.18_rc1
Ebuild name:

sys-kernel/git-sources-6.18_rc1

Description

The very latest -git version of the Linux kernel

Added to portage

2025-10-13

gle - 4.3.8
Ebuild name:

sci-visualization/gle-4.3.8

Description

Graphics Layout Engine

Added to portage

2025-10-13

idna - 3.11
Ebuild name:

dev-python/idna-3.11

Description

Internationalized Domain Names in Applications (IDNA)

Added to portage

2025-10-13

jc - 1.25.6
Ebuild name:

dev-python/jc-1.25.6

Description

Converts the output of popular command-line tools and file-types to JSON

Added to portage

2025-10-13

lsd - 1.2.0
Ebuild name:

sys-apps/lsd-1.2.0

Description

An ls command with a lot of pretty colors and some other stuff.

Added to portage

2025-10-13

marble - 25.08.2-r1
Ebuild name:

kde-apps/marble-25.08.2-r1

Description

Virtual Globe and World Atlas to learn more about Earth

Added to portage

2025-10-13

nuitka - 2.8.1
Ebuild name:

dev-python/nuitka-2.8.1

Description

Python to native compiler

Added to portage

2025-10-13

pam - 1.7.1-r2
Ebuild name:

sys-libs/pam-1.7.1-r2

Description

Linux-PAM (Pluggable Authentication Modules)

Added to portage

2025-10-13

pambase - 20251013
Ebuild name:

sys-auth/pambase-20251013

Description

PAM base configuration files

Added to portage

2025-10-13

pocl - 7.1
Ebuild name:

dev-libs/pocl-7.1

Description

Portable Computing Language (an implementation of OpenCL)

Added to portage

2025-10-13

pylint - 4.0.0
Ebuild name:

dev-python/pylint-4.0.0

Description

Python code static checker

Added to portage

2025-10-13

pytest-fixture-classes - 1.0.4
Ebuild name:

dev-python/pytest-fixture-classes-1.0.4

Description

Fixtures as classes

Added to portage

2025-10-13

reaper-bin - 7.48
Ebuild name:

media-sound/reaper-bin-7.48

Description

Digital audio workstation

Added to portage

2025-10-13

recog - 3.1.23
Ebuild name:

dev-ruby/recog-3.1.23

Description

Pattern recognition for hosts, services, and content

Added to portage

2025-10-13

sequel - 5.97.0
Ebuild name:

dev-ruby/sequel-5.97.0

Description

A lightweight database toolkit for Ruby

Added to portage

2025-10-13

setuptools-scm - 9.2.1
Ebuild name:

dev-python/setuptools-scm-9.2.1

Description

Manage versions by scm tags via setuptools

Added to portage

2025-10-13

shadow - 0
Ebuild name:

acct-group/shadow-0

Description

Added to portage

2025-10-13

shadow - 4.14.8-r1
Ebuild name:

sys-apps/shadow-4.14.8-r1

Description

Utilities to deal with user accounts

Added to portage

2025-10-13

systemd - 258.1
Ebuild name:

sys-apps/systemd-258.1

Description

System and service manager for Linux

Added to portage

2025-10-13

tlp - 1.8.0-r1
Ebuild name:

sys-power/tlp-1.8.0-r1

Description

Optimize laptop battery life

Added to portage

2025-10-13

tumbler - 4.20.1
Ebuild name:

xfce-base/tumbler-4.20.1

Description

A thumbnail service for Thunar

Added to portage

2025-10-13

uutf - 1.0.4
Ebuild name:

dev-ml/uutf-1.0.4

Description

Non-blocking streaming Unicode codec for OCaml

Added to portage

2025-10-13

vanilla-sources - 6.12.52
Ebuild name:

sys-kernel/vanilla-sources-6.12.52

Description

Full sources for the Linux kernel

Added to portage

2025-10-13

vanilla-sources - 6.16.12
Ebuild name:

sys-kernel/vanilla-sources-6.16.12

Description

Full sources for the Linux kernel

Added to portage

2025-10-13

vanilla-sources - 6.17.2
Ebuild name:

sys-kernel/vanilla-sources-6.17.2

Description

Full sources for the Linux kernel

Added to portage

2025-10-13

vanilla-sources - 6.6.111
Ebuild name:

sys-kernel/vanilla-sources-6.6.111

Description

Full sources for the Linux kernel

Added to portage

2025-10-13

rdf newsfeed | rss newsfeed | Atom newsfeed
- Powered by LeopardCMS - Running on Gentoo -
Copyright 2004-2020 Sascha Nitsch Unternehmensberatung GmbH
Valid XHTML1.1 : Valid CSS : buttonmaker
- Level Triple-A Conformance to Web Content Accessibility Guidelines 1.0 -
- Copyright and legal notices -
Time to create this page: 54.9 ms