[Vserver] network isolation implementation - pros and cons

2006-07-25 Thread Daniel Lezcano

Hi guys,

I am collecting informations concerning existing network 
isolation/virtualization done in several container solutions like 
openvz, xen, vserver, metacluster, bsd jails, etc ...


The objective is to find the cons and pros for each solutions. For 
example, can we do broadcast and multicast between containers on the 
same machine ? What is the performance impact ? Is the ressource 
management easy to implement ? Is the network more difficult to manage ? 
Do we need specific user tools ? If my application does bind 
INADDR_ANY:80, can I connect via loopback address ? etc ...


The collected information will be compiled in order to write a paper.

Has someone informations on that ? url ? faq (not vserver) ? or time to 
answer ? ;)


Thanks in advance

-- Daniel
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Problem using vcopy and vyum

2006-07-25 Thread Thomas Frenken
Hi all,

I recently was priviliged to work with vserver the first time and I can
only say "great" - really easy to use and simply a joy to work with (and
along the way very usefull too ;-).

I was able to set up the necessary environment, to create some guest
with some additional packages beeing installed via vyum, but one awkward
problem is left which I really need to be solved. As I mentioned I can
use vyum after I created a guest using "vserver ... build ... -m yum ...
-d fc5" - all additional packages installed without any problems.

If I now use vcopy to clone a guest, the guest itself (after changing
ip-adress etc.) works fine (it can be started and entered) but vyum
doenst work anymore on those cloned guests (but still works on the
original guest). As far as I can see vyum is the absolutely only thinkg
that doesn't work on cloned guests. The error message I get is:

# vyum clone -- install less
Can not find file for 'RPMSTATEDIR'; aborting

I am using yum 2.6.1, util-vserver (-core etc.) 0.30.210 on fc5
(2.6.17-1.2157_FC5.vs2.0.2.0.rc26.1smp), all guests are fc5 too (created
according to http://linux-vserver.org/VServer+installation+Fedora+Core
+5). 

Any ideas on this, what could be the problem, are there any other steps
to perform to clone a guest but using vcopy and changing the individual
configuration of the clone?

Thanks in advance!

Regards,

Thomas Frenken


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] guest network interface disappears

2006-07-25 Thread Guenther Fuchs
Hi there,

on Tuesday, July 25, 2006 at 5:58:17 PM there was posted:

MSZ> There is a flag in /proc, I forget where, that can be set
MSZ> to change the above behavior.

# /sbin/sysctl -w net.ipv4.conf.all.promote_secondaries=1

MSZ> With the flag set - then when you take down the (current)
MSZ> primary address, one of the secondary addresses becomes
MSZ> primary.

MSZ> This has been on the mailing list before, should be findable.

See above.

-- 
regards 'n greez,

Guenther Fuchs
(aka "muh" and "powerfox")

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] guest network interface disappears

2006-07-25 Thread Michael S. Zick
On Tue July 25 2006 09:01, Martin Pajak wrote:
> Herbert Poetzl schrieb:
> 
> > suspect that one guest gets a 'primary' (i.e. not
> > secondary) ip on the network (check with ip a ls)
> 
> I tested this and all guests have only their designated addresses bound, 
>   so this shouldn't be the cause here. I don't know the 
> "primary/secondary propagation", but I guess I don't need it in this 
> scenario.
> 

The first address assigned to a nic becomes the primary (only).
Additional addresses become 'secondary'.

With the default set-up, then if you take down the primary,
all addresses go down.

There is a flag in /proc, I forget where, that can be set
to change the above behavior.

With the flag set - then when you take down the (current)
primary address, one of the secondary addresses becomes
primary.

This has been on the mailing list before, should be findable.

Mike
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] guest network interface disappears

2006-07-25 Thread Martin Pajak

Herbert Poetzl schrieb:

On Thu, Jul 13, 2006 at 05:29:28PM +0200, Martin Pajak wrote:

We are running latest Gentoo vserver with 8 guest instances on it.
Most of them are migrated from a xen environment to vserver and are
running fine, but we encountered a strange problem there:

3 of the systems lost their network interface 4 times within a week

If I enter the guest in such a case, the "ip" or "ifconfig" commands
shows no network interfaces and I can only restart the guest to get it
to work again for now.

Have anyone an idea how it comes to and how can I avoid it?




Meanwhile I tested a bit more and found out that there are 3 of 8 
systems involved. One backup system and two production systems. 
Everytime time if I shutdown the backup system (normally every midnight 
to reset the snapshots for backup) the both other systems looses
their network interface. If I shutdown the systems to restart them, I 
get "RTNETLINK answers: Cannot assign requested address" error. After 
restart everything is fine.



although I have no details about your setup, I'd


Our setup:

single amd64 with 2GB ram
2 300GB hdd running as softraid 1 with lvm2 and evms
latest gentoo vserver
all guests have own internet ip's and are running on a evms volumes with 
snapshot feature for backup purposes



suspect that one guest gets a 'primary' (i.e. not
secondary) ip on the network (check with ip a ls)


I tested this and all guests have only their designated addresses bound, 
 so this shouldn't be the cause here. I don't know the 
"primary/secondary propagation", but I guess I don't need it in this 
scenario.



Does anyone have a suggestion with these additional infos?


Thanks in advance
Martin

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver