[Vserver] NGnet for vserver 1.9.5 ?

2005-04-01 Thread Bert De Vuyst

Hello,

Did enyone get NGnet running on vserver 1.9.5?

Best regards,

Bert.
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [RE:] Re: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Herbert Poetzl
On Thu, Mar 31, 2005 at 09:22:10PM -0600, Matthew Nuzum wrote:
  
   I do think that this would be an interesting feature.
  
  http://www.theshore.net/~caker/uml/patches/
  (seems to have updated patches regarding this stuff)
  http://www.theshore.net/~caker/uml/patches/token-limiter.README
  
  will look into it .. anybody volunteering to test
  such stuff?
  
  TIA,
  Herbert
 
 I think I can create a test case for this. I have a server that is not
 currently running any vserver stuff that will be ok with a reboot now and
 then.

sounds good, please try to get 1.9.5.5 working there,
because it already contains some blkio accounting
and it would be very interesting to monitor those 
values ... (maybe with rrdtools)

TIA,
Herbert

 I don't monitor this list that closely these days, so jog me when there's
 something ready for me to test.
 
 -- 
 Matthew Nuzum [EMAIL PROTECTED]
 www.followers.net - Makers of Elite Content Management System
 View samples of Elite CMS in action by visiting
 http://www.followers.net/portfolio/
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Vservers under Debian

2005-04-01 Thread Herbert Poetzl
On Fri, Apr 01, 2005 at 09:34:04AM +0100, Gaz Wilson wrote:
 On Thu, 31 Mar 2005, Bjoern Steinbrink wrote:
 
  Hello,
 
  On 2005.03.31 17:56:22 +0100, Gaz Wilson wrote:
   On Thu, 31 Mar 2005, Gilles wrote:
  
  test01:/# ifconfig
  Segmentation fault
  test01:/# ifconfig -a
  Segmentation fault

  ifconfig is old and only knows about named interface addresses. stable
  tools always created named interface addresses using ifconfig, but the
  alpha tools use iproute to setup networking and thus can create nameless
  interface addresses. Those are not listed by ifconfig, but you can use
  ip addr show or just ip a instead. If you want named interfaces
  addresses, you have to tell the tools about that, please check the flower
  page for details, i don't remember them ;)
  ifconfig shouldn't segfault though... strace available?
 
 
 Morning Bjoern (and everyone else).  I put a copy of strace within the vserver
 and the output wasn't as big as I expected, and doesn't really tell me much,
 other than the process gets sent a SEGV directly after a socket action -
 see what you think:
 
 execve(/sbin/ifconfig, [ifconfig], [/* 16 vars */]) = 0
 uname({sys=Linux, node=test01.mydomain, ...}) = 0
 brk(0)  = 0x8057b28
 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
 0
 x40017000
 access(/etc/ld.so.nohwcap, F_OK)  = -1 ENOENT (No such file or
 directory)
 open(/etc/ld.so.preload, O_RDONLY)= -1 ENOENT (No such file or
 directory)
 open(/etc/ld.so.cache, O_RDONLY)  = 3
 fstat64(3, {st_mode=S_IFREG|0644, st_size=7470, ...}) = 0
 old_mmap(NULL, 7470, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40018000
 close(3)= 0
 access(/etc/ld.so.nohwcap, F_OK)  = -1 ENOENT (No such file or
 directory)
 open(/lib/tls/libc.so.6, O_RDONLY)= 3
 read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360Y\1..., 512) =
 512
 fstat64(3, {st_mode=S_IFREG|0644, st_size=1253924, ...}) = 0
 old_mmap(NULL, 1260140, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4001a000
 old_mmap(0x40143000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
 0x12
 9000) = 0x40143000
 old_mmap(0x4014b000, 10860, PROT_READ|PROT_WRITE,
 MAP_PRIVATE|MAP_FIXED|MAP_ANON
 YMOUS, -1, 0) = 0x4014b000
 close(3)= 0
 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
 0
 x4014e000
 set_thread_area({entry_number:-1 - 6, base_addr:0x4014e2a0, limit:1048575,
 seg_
 32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0,
 usea
 ble:1}) = 0
 munmap(0x40018000, 7470)= 0
 open(/usr/lib/locale/locale-archive, O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
 suc
 h file or directory)
 brk(0)  = 0x8057b28
 brk(0x8078b28)  = 0x8078b28
 brk(0)  = 0x8078b28
 brk(0x8079000)  = 0x8079000
 open(/usr/share/locale/locale.alias, O_RDONLY) = -1 ENOENT (No such file or
 di
 rectory)
 brk(0)  = 0x8079000
 brk(0)  = 0x8079000
 brk(0x8078000)  = 0x8078000
 brk(0)  = 0x8078000
 open(/usr/lib/locale/en_GB/LC_IDENTIFICATION, O_RDONLY) = -1 ENOENT (No such
 f
 ile or directory)
 open(/usr/lib/locale/en/LC_IDENTIFICATION, O_RDONLY) = -1 ENOENT (No such
 file
  or directory)
 uname({sys=Linux, node=test01.mydomain, ...}) = 0
 access(/proc/net, R_OK)   = 0
 access(/proc/net/unix, R_OK)  = 0
 socket(PF_FILE, SOCK_DGRAM, 0)  = 3
 socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
 access(/proc/net/if_inet6, R_OK)  = 0
 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = -1 EAFNOSUPPORT (Address family not
 s
 upported by protocol)
 access(/proc/net/ax25, R_OK)  = 0
 socket(PF_AX25, SOCK_DGRAM, 0)  = 5
 access(/proc/net/nr, R_OK)= 0
 socket(PF_NETROM, SOCK_SEQPACKET, 0)= 6
 access(/proc/net/rose, R_OK)  = 0
 socket(PF_ROSE, SOCK_DGRAM, 0)  = -1 ESOCKTNOSUPPORT (Socket type not
 su
 pported)
 access(/proc/net/ipx, R_OK)   = -1 ENOENT (No such file or
 directory)
 access(/proc/net/appletalk, R_OK) = -1 ENOENT (No such file or
 directory)
 access(/proc/sys/net/econet, R_OK)= -1 ENOENT (No such file or
 directory)
 access(/proc/sys/net/ash, R_OK)   = -1 ENOENT (No such file or
 directory)
 access(/proc/net/x25, R_OK)   = 0
 socket(PF_X25, SOCK_SEQPACKET, 0 unfinished ...
 +++ killed by SIGSEGV +++

hmm, looks the the x25 issues strikes again ...

if you do not have a strong reason for compiling x25
into the kernel, I would advise to remove it ...
(I already fixed one x25 issue, but obviously the 
code is more broken, will look into it soon)

btw, probably happens with vanilla kernel too ...
(maybe at an earlier stage, though)

HTH,
Herbert

 Luck :)
 
 GW
 -- 
/   Gary 

Re: [Vserver] NGnet for vserver 1.9.5 ?

2005-04-01 Thread Benedikt Boehm
On Friday 01 April 2005 13:51, Bert De Vuyst wrote:
 Hello,

 Did enyone get NGnet running on vserver 1.9.5?

 Best regards,

http://distfiles.gentoo.org/distfiles/vspatches-1.9.5-00.tar.bz2 contains 
ngnet 9.4 against 1.9.5


 Bert.
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver

-- 
He who asks a question is a fool for a minute,
He who doesn't ask is a fool for a lifetime.
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Conversion script for legacy config files to new config directory

2005-04-01 Thread Dennis Roos
Heyaz,


After half an hour of scripting I came up with a somewhat working
conversion script for Linux-VServer configs to the new directory
configuration layout.

It has been created for my specific environment, but I hope it helps
someone ;)



vscfg-convert.sh
Description: application/shellscript
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] unable to run ntp on vserver kernel / drop root privileges not allowed

2005-04-01 Thread mail
Hi All,

I encountered a problem when I wnated to start a NTP on a vserver-base system

i get
cap_set_proc() failed to drop root privileges: Operation not permitted

The system is Suse 9.2 with a vserver 2.6.9 kernel

Any hints

Oliver

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] unable to run ntp on vserver kernel / drop root privileges not allowed

2005-04-01 Thread Peter V. Saveliev
01  2005 17:19 [EMAIL PROTECTED] (a):
 Hi All,
 
 I encountered a problem when I wnated to start a NTP on a vserver-base system
 
 i get
 cap_set_proc() failed to drop root privileges: Operation not permitted
 
 The system is Suse 9.2 with a vserver 2.6.9 kernel


does ntpd start on this kernel in xid=0, that is, _not_ in virtual context?

I'm not sure, but If it doesn't, see capabilities module or like that -- 
realtime etc,
depends on the kernel configuration.

-- 
Peter V. Saveliev
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] unable to run ntp on vserver kernel / drop root privileges not allowed

2005-04-01 Thread mail
 I encountered a problem when I wnated to start a NTP on a vserver-base
 system

 i get
 cap_set_proc() failed to drop root privileges: Operation not permitted

 The system is Suse 9.2 with a vserver 2.6.9 kernel


 does ntpd start on this kernel in xid=0, that is, _not_ in virtual
 context?

yes the ntp is running in the main context

 I'm not sure, but If it doesn't, see capabilities module or like that --
 realtime etc, depends on the kernel configuration.

hmm - so I think I have to mod the sources as I cant find appropriate
kernel config params...

Oliver

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Vservers under Debian

2005-04-01 Thread Gaz Wilson
On Fri, 1 Apr 2005, Herbert Poetzl wrote:

 hmm, looks the the x25 issues strikes again ...

 if you do not have a strong reason for compiling x25
 into the kernel, I would advise to remove it ...
 (I already fixed one x25 issue, but obviously the
 code is more broken, will look into it soon)


Yep, you're right - have disabled .X25 and bingo - ifconfig suddenly
starts working!  Many thanks!  You've made me happy once again, ready
for the weekend :D


-- 
   /   Gary Wilson, aka dragon/dragonlord/dragonv480\
 .'(_.--.  e: [EMAIL PROTECTED] MSN: dragonv480   .--._)`.
   _   |  Skype:dragonv480 ICQ:342070475 AIM:dragonv480   |   _   
 `.( `--' w: http://volvo480.northernscum.org.uk   `--' ).'
   \w: http://www.northernscum.org.uk   /
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] unable to run ntp on vserver kernel / drop root privileges not allowed

2005-04-01 Thread Peter V. Saveliev
skip / 
  does ntpd start on this kernel in xid=0, that is, _not_ in virtual
  context?
 
 yes the ntp is running in the main context
 
  I'm not sure, but If it doesn't, see capabilities module or like that --
  realtime etc, depends on the kernel configuration.
 
 hmm - so I think I have to mod the sources as I cant find appropriate
 kernel config params...
skip / 

So, that's not, what I think... I encountered the same problem, but on the
normal kernels 2.6.8/9/10. The solve was to 'modprobe capabilities' or
'modprobe realtime'. But if ntpd runs in the main context, I think, it is not
the same case. Maybe, you've to look around capabilities(7) to get appropriate
CAP_* in the context?

-- 
Peter V. Saveliev
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] NGnet for vserver 1.9.5 ?

2005-04-01 Thread Herbert Poetzl
On Fri, Apr 01, 2005 at 03:16:40PM +0200, Benedikt Boehm wrote:
 On Friday 01 April 2005 13:51, Bert De Vuyst wrote:
  Hello,
 
  Did enyone get NGnet running on vserver 1.9.5?
 
  Best regards,
 
 http://distfiles.gentoo.org/distfiles/vspatches-1.9.5-00.tar.bz2 contains 
 ngnet 9.4 against 1.9.5

interesting! who did the forward port?

TIA,
Herbert

  Bert.
  ___
  Vserver mailing list
  Vserver@list.linux-vserver.org
  http://list.linux-vserver.org/mailman/listinfo/vserver
 
 -- 
 He who asks a question is a fool for a minute,
 He who doesn't ask is a fool for a lifetime.
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] unable to run ntp on vserver kernel / drop root privileges not allowed

2005-04-01 Thread Herbert Poetzl
On Fri, Apr 01, 2005 at 07:06:19PM +0400, Peter V. Saveliev wrote:
 skip / 
   does ntpd start on this kernel in xid=0, that is, _not_ in virtual
   context?
  
  yes the ntp is running in the main context
  
   I'm not sure, but If it doesn't, see capabilities module or like that --
   realtime etc, depends on the kernel configuration.
  
  hmm - so I think I have to mod the sources as I cant find appropriate
  kernel config params...

check for security modules and capabilities in particular

 skip / 
 
 So, that's not, what I think... I encountered the same problem, but on the
 normal kernels 2.6.8/9/10. The solve was to 'modprobe capabilities' or
 'modprobe realtime'. But if ntpd runs in the main context, I think, it is 
 not

this diagnosis sounds very accurate to me ... 
I would double check if capabilities are loaded/compiled in

maybe you are in deep trouble and do not even know it ;)

best,
Herbert

 the same case. Maybe, you've to look around capabilities(7) to get appropriate
 CAP_* in the context?
 
 -- 
 Peter V. Saveliev
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Portmapper within vservers

2005-04-01 Thread Gaz Wilson

I have been reading through the list archives about NFS and am trying
to get the userspace server unfs3 working, but when I start it, the
server errors with:

unable to register (NFS3_PROGRAM, NFS_V3, udp)

or, if I force tcp only operation:

unable to register (NFS3_PROGRAM, NFS_V3, tcp)

Did I miss something in the docs about this - do I need to tweak the
portmapper in some way?  I notice a script v_portmap on the main
host - what exactly does this do (am I a being blind, or do these scripts
have no documentation to explain them?)

Once again (and this is the last time this week I'll bother the list),
THANKS

GW

-- 
   /   Gary Wilson, aka dragon/dragonlord/dragonv480\
 .'(_.--.  e: [EMAIL PROTECTED] MSN: dragonv480   .--._)`.
   _   |  Skype:dragonv480 ICQ:342070475 AIM:dragonv480   |   _   
 `.( `--' w: http://volvo480.northernscum.org.uk   `--' ).'
   \w: http://www.northernscum.org.uk   /
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] unable to run ntp on vserver kernel / drop root privileges not allowed

2005-04-01 Thread Oliver Welter
Hi Herbert,
hmm - so I think I have to mod the sources as I cant find appropriate
kernel config params...
check for security modules and capabilities in particular
Can you tell me what I must look for ?
If you mean kernel modules - i have a monolithic one - so no modules 
are loaded at all

So, that's not, what I think... I encountered the same problem, but on the
normal kernels 2.6.8/9/10. The solve was to 'modprobe capabilities' or
'modprobe realtime'. But if ntpd runs in the main context, I think, it is not

this diagnosis sounds very accurate to me ... 
I would double check if capabilities are loaded/compiled in

maybe you are in deep trouble and do not even know it ;)
as we use vserver only for process separeratin due to better maintenance 
 it will not affect operational security - but good hint anyway

Oliver
--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat: http://www.ldv.ei.tum.de/page72


smime.p7s
Description: S/MIME Cryptographic Signature
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Matthew Nuzum
 On Thu, Mar 31, 2005 at 09:22:10PM -0600, Matthew Nuzum wrote:
  I think I can create a test case for this. I have a server that is not
  currently running any vserver stuff that will be ok with a reboot now
 and
  then.
 
 sounds good, please try to get 1.9.5.5 working there,
 because it already contains some blkio accounting
 and it would be very interesting to monitor those
 values ... (maybe with rrdtools)
 
 TIA,
 Herbert

I'm still doing my month-end backup, but when that's done I'll start
installing the vserver 1.9.5.5. 

Here is the test case that seems most logical to me, but advice on how to
actually do concrete tests would be useful.

1. Create two vservers (vsa and vsb), start both.
2. In vsa start some heavily i/o intensive operation
3. In vsb try to do some tasks and notice how much i/o bandwidth I have
available.

Alternative plan:
1. Create 1 vserver and start it
2. In the vserver, start some heavily i/o intensive operation
3. In the host server try to do some tasks and notice how much i/o bandwidth
I have available
4. After step 2 completes, in host server start a heavily i/o intensive
operation
5. In vserver, try to do some tasks and notice how much i/o bandwidth I have
available

I have two ideas on heavily i/o intensive operation
1. I have a database with 35 million records. Doing any aggregate function
such as max() requires several sequential scans and takes a significant
amount of time.
2. Preparing my month end backup requires copying 13 GB of data.

Any other suggestions?

Question:
I have only subjectively noticed a dramatic decrease in server performance
when a vserver is performing i/o intensive tasks. How can I objectively
measure and produce concrete numbers?

-- 
Matthew Nuzum [EMAIL PROTECTED]
www.followers.net - Makers of Elite Content Management System
View samples of Elite CMS in action by visiting
http://www.followers.net/portfolio/

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Herbert Poetzl
On Fri, Apr 01, 2005 at 12:23:00PM -0600, Matthew Nuzum wrote:
  On Thu, Mar 31, 2005 at 09:22:10PM -0600, Matthew Nuzum wrote:
   I think I can create a test case for this. I have a server that is not
   currently running any vserver stuff that will be ok with a reboot now
  and
   then.
  
  sounds good, please try to get 1.9.5.5 working there,
  because it already contains some blkio accounting
  and it would be very interesting to monitor those
  values ... (maybe with rrdtools)
  
  TIA,
  Herbert
 
 I'm still doing my month-end backup, but when that's done I'll start
 installing the vserver 1.9.5.5. 
 
 Here is the test case that seems most logical to me, but advice on how to
 actually do concrete tests would be useful.
 
 1. Create two vservers (vsa and vsb), start both.
 2. In vsa start some heavily i/o intensive operation
 3. In vsb try to do some tasks and notice how much i/o bandwidth I have
 available.
 
 Alternative plan:
 1. Create 1 vserver and start it
 2. In the vserver, start some heavily i/o intensive operation
 3. In the host server try to do some tasks and notice how much i/o bandwidth
 I have available
 4. After step 2 completes, in host server start a heavily i/o intensive
 operation
 5. In vserver, try to do some tasks and notice how much i/o bandwidth I have
 available
 
 I have two ideas on heavily i/o intensive operation
 1. I have a database with 35 million records. Doing any aggregate function
 such as max() requires several sequential scans and takes a significant
 amount of time.
 2. Preparing my month end backup requires copying 13 GB of data.
 
 Any other suggestions?
 
 Question:
 I have only subjectively noticed a dramatic decrease in server performance
 when a vserver is performing i/o intensive tasks. How can I objectively
 measure and produce concrete numbers?

there are two 'aspects' of what you 'experience' as performance
here. first the increased latency when doing I/O (which is the
result of several I/O transactions already going on when you do
whatever you do), and the decreased throughput (which IMHO is
not really the issue here, just think 40MB/s transfer with UDMA
and 4MB/s without ...)

I would suggest to 'test' with different I/O schedulers activated,
because I think that the default I/O scheduler might be sub-optimal
for vserver-type I/O loads anyways ...

TIA (for testing)
Herbert

 -- 
 Matthew Nuzum [EMAIL PROTECTED]
 www.followers.net - Makers of Elite Content Management System
 View samples of Elite CMS in action by visiting
 http://www.followers.net/portfolio/
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] unable to run ntp on vserver kernel / drop root privileges not allowed

2005-04-01 Thread Herbert Poetzl
On Fri, Apr 01, 2005 at 07:31:07PM +0200, Oliver Welter wrote:
 Hi Herbert,
 
 hmm - so I think I have to mod the sources as I cant find appropriate
 kernel config params...
 
 check for security modules and capabilities in particular
 
 Can you tell me what I must look for ?
 If you mean kernel modules - i have a monolithic one - so no modules 
 are loaded at all

CONFIG_SECURITY=y
CONFIG_SECURITY_CAPABILITIES=y

or 

CONFIG_SECURITY=n

both will use the capabilities compiled in ...

 So, that's not, what I think... I encountered the same problem, but on the
 normal kernels 2.6.8/9/10. The solve was to 'modprobe capabilities' or
 'modprobe realtime'. But if ntpd runs in the main context, I think, it 
 is not
 
 this diagnosis sounds very accurate to me ... 
 I would double check if capabilities are loaded/compiled in
 
 maybe you are in deep trouble and do not even know it ;)
 
 as we use vserver only for process separeratin due to better maintenance 
  it will not affect operational security - but good hint anyway

it will, it will. trust me ... 
most checks in linux-vserver kernel code are
based on linux capabilities, so they are a
requirement, not some kind of addon/feature ...

best,
Herbert

 Oliver
 -- 
 Diese Nachricht wurde digital unterschrieben
 oliwel's public key: http://www.oliwel.de/oliwel.crt
 Basiszertifikat: http://www.ldv.ei.tum.de/page72



 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Portmapper within vservers

2005-04-01 Thread Herbert Poetzl
On Fri, Apr 01, 2005 at 05:36:29PM +0100, Gaz Wilson wrote:
 
 I have been reading through the list archives about NFS and am trying
 to get the userspace server unfs3 working, but when I start it, the
 server errors with:
 
 unable to register (NFS3_PROGRAM, NFS_V3, udp)
 
 or, if I force tcp only operation:
 
 unable to register (NFS3_PROGRAM, NFS_V3, tcp)
 
 Did I miss something in the docs about this - do I need to tweak the
 portmapper in some way?  I notice a script v_portmap on the main
 host - what exactly does this do (am I a being blind, or do these scripts
 have no documentation to explain them?)

the v_* wrappers on the host are there to restrict
the services '*' to some IPs, so that similar services
inside the guests could bind to their IPs ...
(otherwise they would fail, because the host's service
is already bound to that port ...)

depending on the portmap, it might be tricky to get it
working inside a guest ...

HTH,
Herbert

 Once again (and this is the last time this week I'll bother the list),
 THANKS
 
 GW
 
 -- 
/   Gary Wilson, aka dragon/dragonlord/dragonv480\
  .'(_.--.  e: [EMAIL PROTECTED] MSN: dragonv480   .--._)`.
_   |  Skype:dragonv480 ICQ:342070475 AIM:dragonv480   |   _   
  `.( `--' w: http://volvo480.northernscum.org.uk   `--' ).'
\w: http://www.northernscum.org.uk   /
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Gregory (Grisha) Trubetskoy

I would also keep measurements of CPU ticks used. Since IO requires CPU 
cycles - is it possible that a CPU sched_hard indirectly limits IO just as 
well?

Grisha
On Fri, 1 Apr 2005, Matthew Nuzum wrote:
On Thu, Mar 31, 2005 at 09:22:10PM -0600, Matthew Nuzum wrote:
I think I can create a test case for this. I have a server that is not
currently running any vserver stuff that will be ok with a reboot now
and
then.
sounds good, please try to get 1.9.5.5 working there,
because it already contains some blkio accounting
and it would be very interesting to monitor those
values ... (maybe with rrdtools)
TIA,
Herbert
I'm still doing my month-end backup, but when that's done I'll start
installing the vserver 1.9.5.5.
Here is the test case that seems most logical to me, but advice on how to
actually do concrete tests would be useful.
1. Create two vservers (vsa and vsb), start both.
2. In vsa start some heavily i/o intensive operation
3. In vsb try to do some tasks and notice how much i/o bandwidth I have
available.
Alternative plan:
1. Create 1 vserver and start it
2. In the vserver, start some heavily i/o intensive operation
3. In the host server try to do some tasks and notice how much i/o bandwidth
I have available
4. After step 2 completes, in host server start a heavily i/o intensive
operation
5. In vserver, try to do some tasks and notice how much i/o bandwidth I have
available
I have two ideas on heavily i/o intensive operation
1. I have a database with 35 million records. Doing any aggregate function
such as max() requires several sequential scans and takes a significant
amount of time.
2. Preparing my month end backup requires copying 13 GB of data.
Any other suggestions?
Question:
I have only subjectively noticed a dramatic decrease in server performance
when a vserver is performing i/o intensive tasks. How can I objectively
measure and produce concrete numbers?
--
Matthew Nuzum [EMAIL PROTECTED]
www.followers.net - Makers of Elite Content Management System
View samples of Elite CMS in action by visiting
http://www.followers.net/portfolio/
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


RE: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Matthew Nuzum
 
 I would also keep measurements of CPU ticks used. Since IO requires CPU
 cycles - is it possible that a CPU sched_hard indirectly limits IO just as
 well?
 
 Grisha 

How do you do that?
 
P.S. I'm still compiling the vanilla kernel (I haven't even applied the
vserver patch yet). At this rate I'll probably get back to you on Sunday.
FYI Pii 350 MHz, 128 MB RAM, Ubuntu 4.1, 120 GB UDMA 133 hard drive.

-- 
Matthew Nuzum [EMAIL PROTECTED]
www.followers.net - Makers of Elite Content Management System
View samples of Elite CMS in action by visiting
http://www.followers.net/portfolio/

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


RE: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Gregory (Grisha) Trubetskoy
The CPU ticks are in /proc/virtual/xid/sched
Grisha
On Fri, 1 Apr 2005, Matthew Nuzum wrote:

I would also keep measurements of CPU ticks used. Since IO requires CPU
cycles - is it possible that a CPU sched_hard indirectly limits IO just as
well?
Grisha
How do you do that?
P.S. I'm still compiling the vanilla kernel (I haven't even applied the
vserver patch yet). At this rate I'll probably get back to you on Sunday.
FYI Pii 350 MHz, 128 MB RAM, Ubuntu 4.1, 120 GB UDMA 133 hard drive.
--
Matthew Nuzum [EMAIL PROTECTED]
www.followers.net - Makers of Elite Content Management System
View samples of Elite CMS in action by visiting
http://www.followers.net/portfolio/
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] NGnet for vserver 1.9.5 ?

2005-04-01 Thread Benedikt Boehm
On Friday 01 April 2005 17:37, Herbert Poetzl wrote:
 On Fri, Apr 01, 2005 at 03:16:40PM +0200, Benedikt Boehm wrote:
  On Friday 01 April 2005 13:51, Bert De Vuyst wrote:
   Hello,
  
   Did enyone get NGnet running on vserver 1.9.5?
  
   Best regards,
 
  http://distfiles.gentoo.org/distfiles/vspatches-1.9.5-00.tar.bz2 contains
  ngnet 9.4 against 1.9.5

 interesting! who did the forward port?

/me


 TIA,
 Herbert

   Bert.
   ___
   Vserver mailing list
   Vserver@list.linux-vserver.org
   http://list.linux-vserver.org/mailman/listinfo/vserver
 
  --
  He who asks a question is a fool for a minute,
  He who doesn't ask is a fool for a lifetime.
  ___
  Vserver mailing list
  Vserver@list.linux-vserver.org
  http://list.linux-vserver.org/mailman/listinfo/vserver

-- 
He who asks a question is a fool for a minute,
He who doesn't ask is a fool for a lifetime.
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] NGnet for vserver 1.9.5 ?

2005-04-01 Thread Herbert Poetzl
On Sat, Apr 02, 2005 at 01:02:04AM +0200, Benedikt Boehm wrote:
 On Friday 01 April 2005 17:37, Herbert Poetzl wrote:
  On Fri, Apr 01, 2005 at 03:16:40PM +0200, Benedikt Boehm wrote:
   On Friday 01 April 2005 13:51, Bert De Vuyst wrote:
Hello,
   
Did enyone get NGnet running on vserver 1.9.5?
   
Best regards,
  
   http://distfiles.gentoo.org/distfiles/vspatches-1.9.5-00.tar.bz2 contains
   ngnet 9.4 against 1.9.5
 
  interesting! who did the forward port?
 
 /me

ah, well, then it's fine (case closed ;)

thanks,
Herbert

  TIA,
  Herbert
 
Bert.
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
  
   --
   He who asks a question is a fool for a minute,
   He who doesn't ask is a fool for a lifetime.
   ___
   Vserver mailing list
   Vserver@list.linux-vserver.org
   http://list.linux-vserver.org/mailman/listinfo/vserver
 
 -- 
 He who asks a question is a fool for a minute,
 He who doesn't ask is a fool for a lifetime.
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver