Re: [Vserver] FC5 Install note.

2006-09-08 Thread Roderick A. Anderson

John Francis Lee wrote:

Yes, it's "just" documentation... but I'd never know about Danlle and
Bertl's good coding if I hadn't had your help getting it up and running
so easily.

Thank you Guenther. Thank you Daniel. Thank you Bertl. Thank you
Herbert.


Reference my previous post:  I forgot to mention Herbert.  With all the 
nome-de-plume's floating around I'm keep getting confused as to whom is 
whom.  :-)


Rod
--


On ศ., 2006-09-08 at 23:50 +0200, Guenther Fuchs wrote:


Hi there,

on Friday, September 8, 2006 at 10:39:01 PM there was posted:

RAA> Who did the Fedora Core 5 Install on the wiki?

Mmmm - looks like me ;-)

RAA> Well someone did add it ( yum ) to the exclude line.

Oh yes - also looks like me. Didn't remeber that. Seems I'm getting
older ;-)

RAA> Good job Guenther!

Thanks. But it's "just" documentation. Main cred's are to go to Daniel
and Bertl for doing the codings.



___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] FC5 Install note.

2006-09-08 Thread Roderick A. Anderson

Guenther Fuchs wrote:

Hi there,

on Friday, September 8, 2006 at 10:39:01 PM there was posted:

RAA> Who did the Fedora Core 5 Install on the wiki?

Mmmm - looks like me ;-)

RAA> Well someone did add it ( yum ) to the exclude line.

Oh yes - also looks like me. Didn't remeber that. Seems I'm getting
older ;-)

RAA> Good job Guenther!

Thanks. But it's "just" documentation. Main cred's are to go to Daniel
and Bertl for doing the codings.


Just documentation?  It is great.  It took me from beating my head 
against a keyboard to getting a host setup in record time with minimal 
beer and aspirin consumption.


I'm not lowering what Bertl and Daniel have been doing.  Vserver has 
made major jumps because of Bertl; and Daniel's interest and willingness 
to make Fedora RPMs and a repository turn it into an _easy_ distribution 
choice.


But documentation is what turns it from an "interesting" project to a 
"valuable" project.  Don't discount your contribution.


Ok down from my soapbox.

My thanks to everyone!


Rod
--
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] FC5 Install note.

2006-09-08 Thread John Francis Lee
Yes, it's "just" documentation... but I'd never know about Danlle and
Bertl's good coding if I hadn't had your help getting it up and running
so easily.

Thank you Guenther. Thank you Daniel. Thank you Bertl. Thank you
Herbert.

On ?., 2006-09-08 at 23:50 +0200, Guenther Fuchs wrote:
> Hi there,
> 
> on Friday, September 8, 2006 at 10:39:01 PM there was posted:
> 
> RAA> Who did the Fedora Core 5 Install on the wiki?
> 
> Mmmm - looks like me ;-)
> 
> RAA> Well someone did add it ( yum ) to the exclude line.
> 
> Oh yes - also looks like me. Didn't remeber that. Seems I'm getting
> older ;-)
> 
> RAA> Good job Guenther!
> 
> Thanks. But it's "just" documentation. Main cred's are to go to Daniel
> and Bertl for doing the codings.
> 
-- 
John Francis Lee
1/9-10 Thanon Trairat
Mueang Chiang Rai 57000
Thailand

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] FC5 Install note.

2006-09-08 Thread Guenther Fuchs
Hi there,

on Friday, September 8, 2006 at 10:39:01 PM there was posted:

RAA> Who did the Fedora Core 5 Install on the wiki?

Mmmm - looks like me ;-)

RAA> Well someone did add it ( yum ) to the exclude line.

Oh yes - also looks like me. Didn't remeber that. Seems I'm getting
older ;-)

RAA> Good job Guenther!

Thanks. But it's "just" documentation. Main cred's are to go to Daniel
and Bertl for doing the codings.

-- 
regards 'n greez,

Guenther Fuchs
(aka "muh" and "powerfox")

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] FC5 Install note.

2006-09-08 Thread Roderick A. Anderson

Daniel Hokka Zakrisson wrote:

Guenther Fuchs wrote:


Hi there,

on Friday, September 8, 2006 at 8:37:04 PM there was posted:

RAA> If you are using Daniel's repository for a system that you built 
awhile
RAA> ago you should edit your /etc/yum/repos.d/fedora-updates.repo 
file and

RAA> add yum to the exclude line.

RAA> You don't want Fedora messing up Daniel's fix to yum so vyum 
doesn't RAA> complain all the time.  :-)


I certainly don't - but I've not yet had any problem with that. I'm
using Danel's yum-2.6.1-0.fc5.chroot3 on my FC5 building host which
never was trying to get updated by a Fedora package, so I can't really
see what happend at your side.



As far as I can see there is no newer version available.


Daniel - what do you think, should yum be added to the "exclude" line
same as kernel or do you ensure by using epoch numbers or such that
the Fedora packages can't get precene over your's?



No, I'm not using any ugly hacks like that ;) Yeah, I think it belongs 
on the exclude line.


Who did the Fedora Core 5 Install on the wiki?  Well someone did add it 
( yum ) to the exclude line.  I was looking at the 'new' wiki and ended 
up back on the old so looked to see what might have changed and noticed 
that.


The "View History" on the old wiki sucks a bit.  All the dates show last 
December.  I know my change wasn't then.  ( rod.homebydesign.com ). 
Since the dates are mostly bogus we get to blame powerfox :-) for the 
recent most recent editing and additions.  Good job Guenther!



Rod
--




___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] FC5 Install note.

2006-09-08 Thread Daniel Hokka Zakrisson

Guenther Fuchs wrote:

Hi there,

on Friday, September 8, 2006 at 8:37:04 PM there was posted:

RAA> If you are using Daniel's repository for a system that you built awhile
RAA> ago you should edit your /etc/yum/repos.d/fedora-updates.repo file and
RAA> add yum to the exclude line.

RAA> You don't want Fedora messing up Daniel's fix to yum so vyum doesn't 
RAA> complain all the time.  :-)


I certainly don't - but I've not yet had any problem with that. I'm
using Danel's yum-2.6.1-0.fc5.chroot3 on my FC5 building host which
never was trying to get updated by a Fedora package, so I can't really
see what happend at your side.


As far as I can see there is no newer version available.


Daniel - what do you think, should yum be added to the "exclude" line
same as kernel or do you ensure by using epoch numbers or such that
the Fedora packages can't get precene over your's?


No, I'm not using any ugly hacks like that ;) Yeah, I think it belongs 
on the exclude line.


--
Daniel Hokka Zakrisson
GPG id: 06723412
GPG fingerprint: A455 4DF3 990A 431F FECA  7947 6136 DDA2 0672 3412
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] FC5 Install note.

2006-09-08 Thread Guenther Fuchs
Hi there,

on Friday, September 8, 2006 at 8:37:04 PM there was posted:

RAA> If you are using Daniel's repository for a system that you built awhile
RAA> ago you should edit your /etc/yum/repos.d/fedora-updates.repo file and
RAA> add yum to the exclude line.

RAA> You don't want Fedora messing up Daniel's fix to yum so vyum doesn't 
RAA> complain all the time.  :-)

I certainly don't - but I've not yet had any problem with that. I'm
using Danel's yum-2.6.1-0.fc5.chroot3 on my FC5 building host which
never was trying to get updated by a Fedora package, so I can't really
see what happend at your side.

Daniel - what do you think, should yum be added to the "exclude" line
same as kernel or do you ensure by using epoch numbers or such that
the Fedora packages can't get precene over your's?

-- 
regards 'n greez,

Guenther Fuchs
(aka "muh" and "powerfox")

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] FC5 Install note.

2006-09-08 Thread Roderick A. Anderson
I don't know if this _particular_ piece of information came through the 
list so I'll mention it.


If you are using Daniel's repository for a system that you built awhile 
ago you should edit your /etc/yum/repos.d/fedora-updates.repo file and 
add yum to the exclude line.


You don't want Fedora messing up Daniel's fix to yum so vyum doesn't 
complain all the time.  :-)



Cheers,
Rod
--
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Using SECURE_MOUNT

2006-09-08 Thread Herbert Poetzl
On Fri, Sep 08, 2006 at 09:23:01AM +0200, Wilhelm Meier wrote:
> Am Mittwoch, 6. September 2006 22:13 schrieb Herbert Poetzl:
> > On Tue, Sep 05, 2006 at 12:35:48PM +0200, Wilhelm Meier wrote:
> > > Hi,
> > >
> > > I wonder how to use SECURE_MOUNT.
> > >
> > > I want to give a vserver secure access to a device so that
> > > mounting the device does not introduce any new device nodes.
> >
> > that's the idea behind the secure mount
> >
> > > What do I have to include in /etc/vservers/vsxx/bcapabilities?
> > > CAP_SYS_ADMIN?
> >
> > nope, just the SECURE_MOUNT context capability (ccapabilities)
> 
> Thanks, it works as desired.
> 
> As I understand, the context caps are a new set of capabilities   
> introduced by vserver-patches, right? 

yep, correct, they are 'simple' capability flags 
per guest (i.e. all tasks inside that context will
have the same set)

best,
Herbert

> -- 
> Wilhelm 
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] clean-up hash directory

2006-09-08 Thread Roderick A. Anderson
My thanks to Corey and Daniel.  This explains a lot.  I love the vserver 
incantations but really like it when I know what they are doing instead 
of having to treat them as magic.


My thanks to all those that make Linux-Vserver such a great tool.


Rod
--
Corey Wright wrote:

On Fri, 08 Sep 2006 06:46:17 +0200
Daniel Hokka Zakrisson <[EMAIL PROTECTED]> wrote:



Roderick A. Anderson wrote:


Corey Wright wrote:



i was curious if vhashify cleaned up after itself (delete orphaned
instances of files in hash directory), and it appears it doesn't.
these commands should do the job. well, technically this just lists
files with a
hardlink count of 1 and prints the total size in bytes of all listed 
files

on the last line (so you know how much space you are saving).

find /etc/vservers/.defaults/vdirbase/.hash/ -type f -printf "%n %s 
%p\n" |

grep '^1[[:space:]]' | awk '{ sum += $2; print $3 } END { print sum }'


You could easily eliminate the grep by using -links 1 in the find command.



thanks.  guess i didn't see that in the man page (and i've never had reason
to mess with hardlinks before, especially using find).



to delete those listed files, add to the end:
  | while read FILE; do rm -f ${FILE}; done


Would be far more efficient to use -print0 | xargs -0 rm -f.



correct, but that would have required me to offer two commands:
- one for calculating total size of all orphaned hardlinks (people, me
included, like to see the effects of what they are doing quantified for
purposes of justification and "warm fuzzies")
- another for deleting orphaned hardlinks

not an issue for me or hopefully most people, but i wanted to keep my
instructions as simple as possible (and just adding another piped command
is easiest as it simply builds upon what was already instructed).  i try to
keep it KISS (Keep It Simple, Stupid) when dealing with people (the entire
mailing list) of unknown experience levels.

of course, also make sure you don't have a file in the current directory
named the same as the total size (in bytes) of all the orphaned hardlinks
or that file will be deleted (as it is the last line printed by awk), but i
didn't worry about that as the statistical odds are pretty low. when i sent the
email i wondered if anybody was going to reply noting that, so i already
had this response ready. :-D

so yeah, my suggested commands are not "production quality". ;-)


Did you hear anything on this?  I ran the query on a 12+ guest system ( 
all FC5 ) and it ran for well over a couple of minutes before I got 
tired of watching the output.  This leads me to think I've got lots of 
orphans.  I'd like to get rid of them ( Save the inodes! ) but want to 
understand what I'm doing first.  Rather not fubar a live system.


This should be a perfectly safe command, I always run some cleanup after 
hashifying my guests.



i hashify my guests daily as part of a daily-maintenance cron job as i
often forget after installing/upgrading a package and my vserver is not too
heavily loaded.  i might toss this in there too.


I'm not sure I fully understand how vhashify works.  Where are the 
actual files located.  Are the entries in

   /etc/vservers/.defaults/vdirbase/.hash/
links to the actual files and then each guest links to these -- links?


Those would be the actual files (the file in the .hash directory is 
created by vhashify as a copy of the file it's hashifying), and vhashify 
then creates links to those in the guest(s).



roderick, if daniel's explanation is too succinct for you, i can reference
a few of my prior postings where i ramble on forever trying to stumble
through my own hypothesizing of how hashifying works. ;-)

thanks daniel.  your expert knowledge on vserver is always welcomed and
appreciated (no matter how bad it makes me look).

corey


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] clean-up hash directory

2006-09-08 Thread Corey Wright
On Fri, 08 Sep 2006 06:46:17 +0200
Daniel Hokka Zakrisson <[EMAIL PROTECTED]> wrote:

> Roderick A. Anderson wrote:
> > Corey Wright wrote:
> > 
> >> i was curious if vhashify cleaned up after itself (delete orphaned
> >> instances of files in hash directory), and it appears it doesn't.
> >> these commands should do the job. well, technically this just lists
> >> files with a
> >> hardlink count of 1 and prints the total size in bytes of all listed 
> >> files
> >> on the last line (so you know how much space you are saving).
> >>
> >> find /etc/vservers/.defaults/vdirbase/.hash/ -type f -printf "%n %s 
> >> %p\n" |
> >> grep '^1[[:space:]]' | awk '{ sum += $2; print $3 } END { print sum }'
> 
> You could easily eliminate the grep by using -links 1 in the find command.

thanks.  guess i didn't see that in the man page (and i've never had reason
to mess with hardlinks before, especially using find).

> >> to delete those listed files, add to the end:
> >>| while read FILE; do rm -f ${FILE}; done
> 
> Would be far more efficient to use -print0 | xargs -0 rm -f.

correct, but that would have required me to offer two commands:
- one for calculating total size of all orphaned hardlinks (people, me
included, like to see the effects of what they are doing quantified for
purposes of justification and "warm fuzzies")
- another for deleting orphaned hardlinks

not an issue for me or hopefully most people, but i wanted to keep my
instructions as simple as possible (and just adding another piped command
is easiest as it simply builds upon what was already instructed).  i try to
keep it KISS (Keep It Simple, Stupid) when dealing with people (the entire
mailing list) of unknown experience levels.

of course, also make sure you don't have a file in the current directory
named the same as the total size (in bytes) of all the orphaned hardlinks
or that file will be deleted (as it is the last line printed by awk), but i
didn't worry about that as the statistical odds are pretty low. when i sent the
email i wondered if anybody was going to reply noting that, so i already
had this response ready. :-D

so yeah, my suggested commands are not "production quality". ;-)

> > Did you hear anything on this?  I ran the query on a 12+ guest system ( 
> > all FC5 ) and it ran for well over a couple of minutes before I got 
> > tired of watching the output.  This leads me to think I've got lots of 
> > orphans.  I'd like to get rid of them ( Save the inodes! ) but want to 
> > understand what I'm doing first.  Rather not fubar a live system.
> 
> This should be a perfectly safe command, I always run some cleanup after 
> hashifying my guests.

i hashify my guests daily as part of a daily-maintenance cron job as i
often forget after installing/upgrading a package and my vserver is not too
heavily loaded.  i might toss this in there too.

> > I'm not sure I fully understand how vhashify works.  Where are the 
> > actual files located.  Are the entries in
> > /etc/vservers/.defaults/vdirbase/.hash/
> > links to the actual files and then each guest links to these -- links?
> 
> Those would be the actual files (the file in the .hash directory is 
> created by vhashify as a copy of the file it's hashifying), and vhashify 
> then creates links to those in the guest(s).

roderick, if daniel's explanation is too succinct for you, i can reference
a few of my prior postings where i ramble on forever trying to stumble
through my own hypothesizing of how hashifying works. ;-)

thanks daniel.  your expert knowledge on vserver is always welcomed and
appreciated (no matter how bad it makes me look).

corey
-- 
[EMAIL PROTECTED]
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Nested contexts or chaining of context creation (proliferation)

2006-09-08 Thread Wilhelm Meier
Hi,

I saw this PROLIFIC context flag and I wonder (haven't tried until now) if 
with this flag it is possoble to allow a context (not the root context) to 
create new contexts. Is this true?

Are the contexts nested (assume no)? How can I enter the new context from the 
creating non-root context?

-- 
Wilhelm 
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Using SECURE_MOUNT

2006-09-08 Thread Wilhelm Meier
Am Mittwoch, 6. September 2006 22:13 schrieb Herbert Poetzl:
> On Tue, Sep 05, 2006 at 12:35:48PM +0200, Wilhelm Meier wrote:
> > Hi,
> >
> > I wonder how to use SECURE_MOUNT.
> >
> > I want to give a vserver secure access to a device so that mounting
> > the device does not introduce any new device nodes.
>
> that's the idea behind the secure mount
>
> > What do I have to include in /etc/vservers/vsxx/bcapabilities?
> > CAP_SYS_ADMIN?
>
> nope, just the SECURE_MOUNT context capability (ccapabilities)

Thanks, it works as desired.

As I understand, the context caps are a new set of capabilities introduced by 
vserver-patches, right? 

-- 
Wilhelm 
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver