[Vserver] Re: Vserver Digest, Vol 16, Issue 14
Hello, We just compiled RPMs of the kernel for Mandrake 10.2 *(should work with 10.0 and 10.1 also but this is untested)*. http://download.revolutionlinux.com/Vservers/mandrake/10.2/i586/ This is also a urpmi source : urpmi.addmedia --update vserver-rl \ http://download.revolutionlinux.com/Vservers/mandrake/10.2/i586/ Then you can urpmi kernel-vs2.6 And you should be able to test the latest release... Ben -- Benoit des Ligneris Ph. D. President de Revolution Linuxhttp://www.revolutionlinux.com/ Hi Ben, for your Kernel 2.6, it's a Official Mandriva Kernel with vs patchs or just a official 2.6 and vs patchs ? ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Re: Vserver Digest, Vol 16, Issue 14
Hello, It is vanilla kernel + vserver patch with .config from Mandriva 10.2 (well cooker 2.6.12.2 in fact) in order to have as much similar modules as possible. As a consequence : no supermount, etc. Following the Mandriva kernel with the vs patch will require much more manpower kernel expertise than we have ;-( Ben Benjamin GIGON a écrit : Hello, We just compiled RPMs of the kernel for Mandrake 10.2 *(should work with 10.0 and 10.1 also but this is untested)*. http://download.revolutionlinux.com/Vservers/mandrake/10.2/i586/ This is also a urpmi source : urpmi.addmedia --update vserver-rl \ http://download.revolutionlinux.com/Vservers/mandrake/10.2/i586/ Then you can urpmi kernel-vs2.6 And you should be able to test the latest release... Ben -- Benoit des Ligneris Ph. D. President de Revolution Linuxhttp://www.revolutionlinux.com/ Hi Ben, for your Kernel 2.6, it's a Official Mandriva Kernel with vs patchs or just a official 2.6 and vs patchs ? ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver -- Benoît des Ligneris Ph. D. Président / C.E.O. Revolution Linux http://www.revolutionlinux.com/ Toutes les opinions et les prises de position exprimées dans ce courriel sont celles de son auteur et ne représentent pas nécessairement celles de Révolution Linux. Any views and opinions expressed in this email are solely those of the author and do not necessarily represent those of Revolution Linux. ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Firewall between two vserver
Hi Sam, Well, using FWBuilder, which generally Just Works, the commands it generates look like this; $IPTABLES -A INPUT -i lo -p tcp \ -s 192.168.255.49 -d 192.168.255.0/24 --dport 22 \ -m state --state NEW -j ACCEPT I think the packets end up going through PREROUTING, INPUT and OUTPUT, but not FORWARD. However, note that they are going via the lo interface, even though in this case the servers are all set up on interface dummy0. yepp, works now great :-)) Thank you very very much! Oliver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Vserver 2.0, prod server and news
Hello, all ! I've been running a vserver host (2.6.9-vs1.9.3) for several months now (~6), and it never failed or something. Ok, the load is quite low (~0.00 ;-)), but there is 10 vs in it, for Cups printing, samba sharing, MySQL, Apache, etc... Providing services for 4 people (Hence he load). It's now server-kill time, and i'm reinstalling/upgrading all my file servers. I thought it was time to try the latest version of linux-vserver, but I know that it's still RC (6, IIRC). Well, I'm planning to turn all my file servers in vserver hosts, then create one or more vservers in it to perform the same task they did before. But with the advantage to have the possibility to create vservers here or there to fit the needs... So, is it reasonable to do this, knowing that once done, it'll be locked for an entire year ? Are VS2.0 mature/stable enough ? One last: Are there any important changes that may make 2.0 work differently than 1.9.3 ? Do I have to learn again all from the start ;-) ? Thanks. -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Clé publique: http://www.keyserver.net/ ^ ^ Musique libre: http://musique-legale.info/ - http://www.jamendo.com/ pgpmoNhy2VKnw.pgp Description: PGP signature ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Vserver 2.0, prod server and news
So, is it reasonable to do this, knowing that once done, it'll be locked for an entire year ? Are VS2.0 mature/stable enough ? Depends what you mean by locked. In a year I would suspect a number of user land security updates being needed, quite possibly kernel updates as well. As long as you test it properly to start with I don't think you'll find adding vservers will alter the stability as versus any custom kernel. IMHO, no hard evidence. One last: Are there any important changes that may make 2.0 work differently than 1.9.3 ? Do I have to learn again all from the start ;-) ? There are are some new features but AFAIK no major ones have been removed so what worked before should work now. Cheers, - Martin ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Re: Vserver Digest, Vol 16, Issue 14
On Tue, Jul 12, 2005 at 07:19:16AM -0400, Benoît des Ligneris wrote: Hello, It is vanilla kernel + vserver patch with .config from Mandriva 10.2 (well cooker 2.6.12.2 in fact) in order to have as much similar modules as possible. As a consequence : no supermount, etc. Following the Mandriva kernel with the vs patch will require much more manpower kernel expertise than we have ;-( well, supermount for example is easy, patched it myself for some time, let me know if you are interested in a linux-vserver 'addon' with such stuff ... best, Herbert Ben Benjamin GIGON a écrit : Hello, We just compiled RPMs of the kernel for Mandrake 10.2 *(should work with 10.0 and 10.1 also but this is untested)*. http://download.revolutionlinux.com/Vservers/mandrake/10.2/i586/ This is also a urpmi source : urpmi.addmedia --update vserver-rl \ http://download.revolutionlinux.com/Vservers/mandrake/10.2/i586/ Then you can urpmi kernel-vs2.6 And you should be able to test the latest release... Ben -- Benoit des Ligneris Ph. D. President de Revolution Linuxhttp://www.revolutionlinux.com/ Hi Ben, for your Kernel 2.6, it's a Official Mandriva Kernel with vs patchs or just a official 2.6 and vs patchs ? ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver -- Benoît des Ligneris Ph. D. Président / C.E.O. Revolution Linux http://www.revolutionlinux.com/ Toutes les opinions et les prises de position exprimées dans ce courriel sont celles de son auteur et ne représentent pas nécessairement celles de Révolution Linux. Any views and opinions expressed in this email are solely those of the author and do not necessarily represent those of Revolution Linux. ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Problems building util-vserver-0.30.207 Debian woody
On Tue, Jul 12, 2005 at 11:39:43AM +0930, Darryl Ross wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Herbert Poetzl wrote: yep, but you do not necessarily need to 'build' it on the machine you want to install it *hint* You could give us some credit. no, I'm just saying that ip hiding is not a matter of newer tools, it primarily requires a recent kernel and linux-vserver patch ... Just using the 1.9.5 kernel patch does not seem to hide the IP addresses. Doing some reading I found something which said that the default is to not hide the addresses and a flag must be given to do this. This is contrary to my experiences on a RH box, but does match the behavior I'm seeing on these Woody boxes. http://vserver.13thfloor.at/Experimental/TOOLS/vflags-0.02.tar.bz2 best, Herbert The woody kernel was built with the following options: # # Linux VServer # CONFIG_VSERVER_LEGACY=y CONFIG_VSERVER_LEGACYNET=y # CONFIG_VSERVER_PROC_SECURE is not set # CONFIG_VSERVER_HARDCPU is not set # CONFIG_INOXID_NONE is not set # CONFIG_INOXID_UID16 is not set # CONFIG_INOXID_GID16 is not set CONFIG_INOXID_UGID24=y # CONFIG_INOXID_INTERN is not set # CONFIG_INOXID_RUNTIME is not set # CONFIG_VSERVER_DEBUG is not set Please note that we're still using the legacy config structure on the particular machine we're having the current problem because we're having other issues with the new config structure. Regards Darryl -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFC0yZn/XQ6DbmPjokRAkvhAJ0YReJ1EEbSjVKNmx7wDRq6Pw7AWACgg+09 5bqkS0OonMbCXJHRJugNk48= =Slmo -END PGP SIGNATURE- ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Problems building util-vserver-0.30.207 Debian woody
On Tue, Jul 12, 2005 at 11:40:29AM +0930, Darryl Ross wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Resending as I used the wrong source address.
Herbert Poetzl wrote:
On Tue, Jul 12, 2005 at 08:04:49AM +0930, Mike O'Connor wrote:\
The reason why I need to have a woody version of the tools is that is
just to hard to upgrade all the systems I have out there, particularly
as they a mostly in data center in places a long way a way.
hmm, and I always thought that gentoo uses source only
packages not debian :)
The problem we are having is that we have a large number of Debian Woody
machines deployed which are are not able to easily upgrade to Sarge.
Smiley aside, the errors Mike posted were from attempting to backport
the version of the tools in Sarge to Woody. We'd love to try a recent
compiler if you can let us know where one is for Woody!
http://gcc.gnu.org/releases.html
The other option would be if someone could tell me how I could hide the
ip addresses of other client OS's using the old tools, this would delay
my requirments to upgrades.
it requires a newer kernel not newer tools ...
As far as I can work out it requires both.
http://vserver.13thfloor.at/Experimental/TOOLS/
vserver2:/etc/vservers# uname -r
2.6.11.6-smp-vs.1.9.5
I believe the behavior changed at 1.9.5 for how the interfaces are
configured and hidden. We can't specify the flag required to hide the
addresses using version 0.30-6 of the tools and we can't build the new
tools on Woody.
nonsense ...
When we enter the vservers on any of the machines we've done a kernel
upgrade on and do an ifconfig, we can see all of the IP addresses that
are assigned to the machine. This means that sendmail cannot send mail
between different vservers on the same host because it thinks it's
sending to itself. ('Oh, that resolves to my IP address, must be talking
to myself. Don't want to do that!')
Downgrading the kernel is not an option for both security and other
required features.
Is there some way we can build the 0.30.204 util-vserver tools on Woody
(or has someone already done it?)
get a gcc/binutils, build them yourself, build a
recent dietlibc, build the tools, make your binary
package install it on your woody system ...
HTH,
Herbert
Regards
Darryl
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFC0yaV/XQ6DbmPjokRAm4PAJ4kxWfMxtEJFvg2zrAhl0IoNP0vjACcDf34
UbMY/LoOxXBzAG/fgCeh/3g=
=eUsJ
-END PGP SIGNATURE-
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] More FC4 problems
On Mon, Jul 11, 2005 at 09:57:24PM -0700, Eric Jorgensen wrote: I usually try to be more self-sufficient than this, but I can't seem to get a vserver created under fedora core 4. I am running 2.6.11.11-vs2.0-rc4 kernel, and vserver-utils 0.30.207. The command that I'm using is: vserver --verbose test4 build --force -m yum -- --debug -d fc4 I've been trying to see why it doesn't work, but can't seem to make any progress. I'm attaching the debugging output in hopes that someone can spot something and help me out. If more information is needed, I can provide it. please submit a bugreport on savannah (for util-vserver) after you verified that the mainline tools 0.30.207 give you the same results (if that was a fc4 package) TIA, Herbert Thanks in advance, jorgy ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: Vserver 2.0, prod server and news
Le Mardi 12 Juillet 2005 15:48, Martin a écrit : So, is it reasonable to do this, knowing that once done, it'll be locked for an entire year ? Are VS2.0 mature/stable enough ? Depends what you mean by locked. In a year I would suspect a number of user land security updates being needed, quite possibly kernel updates as well. As long as you test it properly to start with I don't think you'll find adding vservers will alter the stability as versus any custom kernel. IMHO, no hard evidence. Well, I've got to setup my file servers now. But after that, I won't be able to re-install nor get them down until july next year ;-) I don't plan to add many Vservers on those boxes, as I said, they will host one or two for a start. I don't even plan to use advanced functionalities like NgNet, unification,etc... What I want to know is that if I setup my file servers now with the last 2.0 RC, is it risky, provided that once installed I cannot touch these servers until july 2006 ? The only thing that'll be done is individual security updates to the hosted vservers and the host. But I do not want to touch the kernel... The load will be low : These are Samba file servers for ~120 accounts and max. 30-40 people connected at a time, for each host : I usually peak at 0.15 load. One last: Are there any important changes that may make 2.0 work differently than 1.9.3 ? Do I have to learn again all from the start ;-) ? There are are some new features but AFAIK no major ones have been removed so what worked before should work now. The only thing I do with my vservers is : Build them (- m skeleton), fill them with urpmi --root, lauch them, and play ! Basically, the only commands I use are vserver xxx (build|start|stop|enter). So nothing of this has changed since 1.9.3 ? Thx ;-) -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Clé publique: http://www.keyserver.net/ ^ ^ Musique libre: http://musique-legale.info/ - http://www.jamendo.com/ pgp22FWUNQBjL.pgp Description: PGP signature ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Re: Vserver 2.0, prod server and news
On Tue, Jul 12, 2005 at 04:37:28PM +0200, Nicolas Costes wrote: Le Mardi 12 Juillet 2005 15:48, Martin a écrit : So, is it reasonable to do this, knowing that once done, it'll be locked for an entire year ? Are VS2.0 mature/stable enough ? Depends what you mean by locked. In a year I would suspect a number of user land security updates being needed, quite possibly kernel updates as well. As long as you test it properly to start with I don't think you'll find adding vservers will alter the stability as versus any custom kernel. IMHO, no hard evidence. Well, I've got to setup my file servers now. But after that, I won't be able to re-install nor get them down until july next year ;-) I don't plan to add many Vservers on those boxes, as I said, they will host one or two for a start. I don't even plan to use advanced functionalities like NgNet, unification,etc... What I want to know is that if I setup my file servers now with the last 2.0 RC, is it risky, provided that once installed I cannot touch these servers until july 2006 ? I'd wait for 2.0 if possible (and at least for rc7, if not) best, Herbert The only thing that'll be done is individual security updates to the hosted vservers and the host. But I do not want to touch the kernel... The load will be low : These are Samba file servers for ~120 accounts and max. 30-40 people connected at a time, for each host : I usually peak at 0.15 load. One last: Are there any important changes that may make 2.0 work differently than 1.9.3 ? Do I have to learn again all from the start ;-) ? There are are some new features but AFAIK no major ones have been removed so what worked before should work now. The only thing I do with my vservers is : Build them (- m skeleton), fill them with urpmi --root, lauch them, and play ! Basically, the only commands I use are vserver xxx (build|start|stop|enter). So nothing of this has changed since 1.9.3 ? Thx ;-) -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Clé publique: http://www.keyserver.net/ ^ ^ Musique libre: http://musique-legale.info/ - http://www.jamendo.com/ ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: Vserver 2.0, prod server and news
Le Mardi 12 Juillet 2005 18:12, Herbert Poetzl a écrit : I'd wait for 2.0 if possible (and at least for rc7, if not) Hello, Herbert ;-) Er... You mean rc6 has problems ? Well, can I use safely rc5 or older ? Or maybe rc7 will be released in a few days ? -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Clé publique: http://www.keyserver.net/ ^ ^ Musique libre: http://musique-legale.info/ - http://www.jamendo.com/ pgpIibf4RIqjU.pgp Description: PGP signature ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Stopping a vserver which config dir has been deleted
Ahem... I made a mistake : I wanted to delete a vserver, and I just erased /etc/vserver_name. Then, when I wanted to delete /vservers/vserver_name, I got errors : The vserver was still running :((( So, the processes still run in their contexts, but I dont know how to kill them, I mean, I want to totally erase this vserver... Any ideas ? -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Clé publique: http://www.keyserver.net/ ^ ^ Musique libre: http://musique-legale.info/ - http://www.jamendo.com/ pgpWOet0deJPU.pgp Description: PGP signature ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Stopping a vserver which config dir has been deleted
Lookup the xid of the vserver (e.g. using vserver-stat), then: # vkill --xid xid -s TERM # vkill --xid xid -s KILL Grisha On Tue, 12 Jul 2005, Nicolas Costes wrote: Ahem... I made a mistake : I wanted to delete a vserver, and I just erased /etc/vserver_name. Then, when I wanted to delete /vservers/vserver_name, I got errors : The vserver was still running :((( So, the processes still run in their contexts, but I dont know how to kill them, I mean, I want to totally erase this vserver... Any ideas ? -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Cl? publique: http://www.keyserver.net/ ^ ^ Musique libre: http://musique-legale.info/ - http://www.jamendo.com/ ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: Stopping a vserver which config dir has been deleted
Le Mardi 12 Juillet 2005 20:27, Gregory (Grisha) Trubetskoy a écrit : Lookup the xid of the vserver (e.g. using vserver-stat), then: # vkill --xid xid -s TERM # vkill --xid xid -s KILL Worked like a charm, thanks a lot :-) ! -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Clé publique: http://www.keyserver.net/ ^ ^ Musique libre: http://musique-legale.info/ - http://www.jamendo.com/ pgpzwH2qSk9IB.pgp Description: PGP signature ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Ports no open
Hello My vserver funtionallity, the open ports is open in the vserver. The ports open is 80, 110, 2081 and others.. But not i cant listen ports mysql and i cant listen port 25 for postfix. The error mysql is [EMAIL PROTECTED]:/# /etc/rc.d/rc.mysqld start [EMAIL PROTECTED]:/# Starting mysqld daemon with databases from /var/lib/mysql STOPPING server from pid file /var/run/mysql/mysql.pid 050712 15:01:43 mysqld ended the log is 050712 15:01:43 mysqld started 050712 15:01:43 Can't start server : Bind on unix socket: Permission denied 050712 15:01:43 Do you already have another mysqld server running on socket: /var/run/mysql/mysql.sock ? 050712 15:01:43 Aborting 050712 15:01:43 /usr/libexec/mysqld: Shutdown Complete 050712 15:01:43 mysqld ended the mysql in server master is closed. The error postfix is Jul 12 15:06:41 martin postfix[2155]: fatal: bad string length 0 1: mydomain = and no open port ... Thanks Excuseme my english... -- Martin Archanco OpenSource Technology Tel: 5238.3211 Cel: 15.5307.7842 http://www.nulit.com.ar Mail: [EMAIL PROTECTED] ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Re: Vserver 2.0, prod server and news
On Tue, Jul 12, 2005 at 07:09:59PM +0200, Nicolas Costes wrote: Le Mardi 12 Juillet 2005 18:12, Herbert Poetzl a écrit : I'd wait for 2.0 if possible (and at least for rc7, if not) Hello, Herbert ;-) Er... You mean rc6 has problems ? Well, can I use safely rc5 or older ? Or maybe rc7 will be released in a few days ? probably tonight ... best, Herbert -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Clé publique: http://www.keyserver.net/ ^ ^ Musique libre: http://musique-legale.info/ - http://www.jamendo.com/ ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
