[Vserver] inconsistency about memory rlimits in vserver docs
Hi, just tried to figure out a reasonable memory rlimit configuration for our vservers I had a look at vserver wiki. It seems that there is an inconsistency: http://linux-vserver.org/Memory_Limits - The Resident Set Size (rss) is the amount of virtual memory (RAM + swap) that the context is allowed to use; http://oldwiki.linux-vserver.org/Memory+Allocation - RSS: resident set size= the number of pages currently present in RAM http://linux-vserver.org/Frequently_Asked_Questions - echo %%insertYourPagesHereSmallerThanMaxram%% /etc/vserver/ guest/rlimits/rss So, does swap space count for rss limits or not? What exactly is the meaning of the soft limit? http://linux-vserver.org/Memory_Limits is a bit vague: Each resource has a soft and a hard limit. The soft limit has little effect, but the hard limit does http://linux-vserver.org/Frequently_Asked_Questions (How do I limit a guests RAM? ...) obviously suggests to set soft limits. Why doing so if the soft limit has little effect? Is as (address space) the same thing that is called VM (virtual memory) in /proc/virtual/1234/limit ? If so, why using different names for the same quantity? Thanks, Th. Gebhardt ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] inconsistency about memory rlimits in vserver docs
On Tue, Jan 02, 2007 at 05:04:39PM +0100, Gebhardt Thomas wrote: Hi, just tried to figure out a reasonable memory rlimit configuration for our vservers I had a look at vserver wiki. It seems that there is an inconsistency: http://linux-vserver.org/Memory_Limits - The Resident Set Size (rss) is the amount of virtual memory (RAM + swap) that the context is allowed to use; that is wrong ... http://oldwiki.linux-vserver.org/Memory+Allocation - RSS: resident set size = the number of pages currently present in RAM that is correct http://linux-vserver.org/Frequently_Asked_Questions - echo %%insertYourPagesHereSmallerThanMaxram%% /etc/vserver/ guest/rlimits/rss So, does swap space count for rss limits or not? nope, rss will _never_ account swap space, but ... What exactly is the meaning of the soft limit? http://linux-vserver.org/Memory_Limits is a bit vague: Each resource has a soft and a hard limit. The soft limit has little effect, but the hard limit does http://linux-vserver.org/Frequently_Asked_Questions (How do I limit a guests RAM? ...) obviously suggests to set soft limits. Why doing so if the soft limit has little effect? the soft limit is _shown_ inside the guest as the maximum available memory, and being over the soft limit will give your guest an extra bonus for the OOM killer (proportional to the oversize), while the hard limit is shown as memory + swap and once it is reached, your guest _will_ lose processes to the OOM killer ... Is as (address space) the same thing that is called VM (virtual memory) in /proc/virtual/1234/limit ? If so, why using different names for the same quantity? HTC, Herbert Thanks, Th. Gebhardt ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] setting /proc/sys/kernel/shmmax on the guest
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel Hokka Zakrisson a écrit : Herbert Poetzl wrote: On Mon, Jan 01, 2007 at 02:05:30PM +0100, william Famy wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To begin with Happy new year to every vserver guy. and a happy new year to you too ... I have to extand the shmmax for my guest but I do not manage to do it. cat /proc/sys/kernel/shmmax 134217728 I have tried the /etc/vserver/host/rlimits I have tried to add bcapability but I do not manage to go ahead with it. I've run under 2.6.19.1 with the last devel vserver patch under debian etch as host. Could somebody tell me how to modify the guest config to execute echo 134217728 /proc/sys/kernel/shmmax for my guest. as 2.6.19.x incorporates the mainline namespace stuff, you have to set those values from one of the early guest startup script (e.g. prepre-start) while you still have 'enough' capabilities ... I assume this requires the IPC namespace to be created? That doesn't happen until the context is created, so none of the scripts would work for this particular problem. Having a non-executable one that does something like VSERVER_EXTRA_CMDS=( $_CHAINECHO /proc/sys/kernel/shmmax 134217728 ) is probably the only way to make it happen (with current tools). [wf:] I try the prepre-start but does not work. vserver-stat CTX PROCVSZRSS userTIME sysTIMEUPTIME NAME 0 69 211.3M 62.2M 0m06s98 0m04s69 6m15s90 root server 49152 16 194M 30.5M 0m00s80 0m00s30 0m31s99 zm4 ___ cat /etc/vservers/zm4/bcapabilities CAP_SYS_RESOURCE CAP_SYS_ADMIN CAP_IPC_LOCK CAP_IPC_OWNER __ ls /etc/vservers/zm4/rlimits/ as rss shmem ___ cat /etc/vservers/zm4/rlimits/a cat /etc/vservers/zm4/rlimits/as 9 cat /etc/vservers/zm4/rlimits/rss 1 cat /etc/vservers/zm4/rlimits/shmem 134217728 ___ cat /proc/virtual/49153/nsproxy NSProxy:c9d27fe0 [c5fba740,cbbf8800,cab7bbc0] Namespace: c5fba740 [#2] RootPath: / SysName:Linux NodeName: zm4 Release:2.6.19.1-vs2.1.1.7.1 Version:#1 Fri Dec 29 10:53:07 CET 2006 Machine:i686 DomainName: (none) SEMS: 250 32000 32 128 0 MSG:8192 16384 16 SHM:33554432 2097152 4096 181 cat /proc/virtual/49153/limit Limitcurrent min/maxsoft/hard hits PROC: 24 0/ 27 -1/ -1 0 VM:49660 0/ 51941 9/ 9 0 VML: 0 0/ 0 -1/ -1 0 RSS:7812 0/8496 1/ 1 0 ANON: 4544 0/4730 -1/ -1 0 RMAP: 3268 0/3796 -1/ -1 0 FILES: 212 0/ 255 -1/ -1 0 OFD: 152 0/ 152 -1/ -1 0 LOCKS: 2 0/ 2 -1/ -1 0 SOCK: 7 0/ 7 -1/ -1 0 MSGQ: 0 0/ 0 -1/ -1 0 SHM: 181 0/ 181 134217728/134217728 0 SEMA: 0 0/ 0 -1/ -1 0 SEMS: 0 0/ 0 -1/ -1 0 DENT:153 0/ 154 -1/ -1 0 I try number of combinaison but nothing looks great :-(. I have to contact the tool maintainers. I will do it tomorow. regards. If someone have any idea feel free to send them :-). I have to install my soft under the hosts computer instead of the guest. also using the sysctl interface instead of the deprecated procfs one (which might as well be hidden away :) is advised ... maybe special tool support will be added soon, so please double check with the tool maintainers I guess some nicer way to support it would be required, especially as more of these settings become available. HTH, Herbert Thanks for any help. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFmp3ytBZWkq9aICARAmIkAKCxIwvyTIzHvTYersrmy/7agXM4EwCfeYGC IjZ19E4OndOqQR1YON15WrM= =szF7 -END PGP SIGNATURE- ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] setting /proc/sys/kernel/shmmax on the guest
On Tue, Jan 02, 2007 at 03:47:35AM +0100, Daniel Hokka Zakrisson wrote: Herbert Poetzl wrote: On Mon, Jan 01, 2007 at 02:05:30PM +0100, william Famy wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To begin with Happy new year to every vserver guy. and a happy new year to you too ... I have to extand the shmmax for my guest but I do not manage to do it. cat /proc/sys/kernel/shmmax 134217728 I have tried the /etc/vserver/host/rlimits I have tried to add bcapability but I do not manage to go ahead with it. I've run under 2.6.19.1 with the last devel vserver patch under debian etch as host. Could somebody tell me how to modify the guest config to execute echo 134217728 /proc/sys/kernel/shmmax for my guest. as 2.6.19.x incorporates the mainline namespace stuff, you have to set those values from one of the early guest startup script (e.g. prepre-start) while you still have 'enough' capabilities ... I assume this requires the IPC namespace to be created? That doesn't happen until the context is created, so none of the scripts would work for this particular problem. hmm, isn't the context supposed to exist in the post-start script? if not, please could you once and for all clarify which script is started when and in what context(s)? Having a non-executable one that does something like VSERVER_EXTRA_CMDS=( $_CHAINECHO /proc/sys/kernel/shmmax 134217728 ) is probably the only way to make it happen (with current tools). okay, any plans to allow for such support? also using the sysctl interface instead of the deprecated procfs one (which might as well be hidden away :) is advised ... maybe special tool support will be added soon, so please double check with the tool maintainers I guess some nicer way to support it would be required, especially as more of these settings become available. what do you have in mind ... please share your thoughts, as I think those settings _might_ become essential for certain setups ... TIA, Herbert HTH, Herbert Thanks for any help. -- Daniel Hokka Zakrisson GPG id: 06723412 GPG fingerprint: A455 4DF3 990A 431F FECA 7947 6136 DDA2 0672 3412 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] inconsistency about memory rlimits in vserver docs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi, Gebhardt Thomas wrote: just tried to figure out a reasonable memory rlimit configuration for our vservers I had a look at vserver wiki. It seems that there is an inconsistency: i was going to reply but Bertl beat me to it. just as a slight addition, you might find http://oldwiki.linux-vserver.org/Memory+Management may help to explain some of the concepts underlying virtual memory and how it is related to actual memory (physical and swap) and how everything relates to vservers. it's based on a tutorial that Bertl gave me on irc one time. happy new year all! --gdm - -- http://docs.indymedia.org/view/Main/GarconDuMonde gpg --keyserver pgp.mit.edu --recv-keys 594B97C2 Key fingerprint = 7B70 F22D F275 D111 3A04 F9EE 0E25 4944 594B 97C2 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.1 (Darwin) iD8DBQFFmqFhDiVJRFlLl8IRAkQoAJ9eA9Cs/WuJ6+Py+/CmkN5rCm3sOACeMnW4 zqNxpw9mhCYWXxb3+bw+RC0= =itJ3 -END PGP SIGNATURE- ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] setting /proc/sys/kernel/shmmax on the guest
Herbert Poetzl wrote:
On Tue, Jan 02, 2007 at 03:47:35AM +0100, Daniel Hokka Zakrisson wrote:
Herbert Poetzl wrote:
On Mon, Jan 01, 2007 at 02:05:30PM +0100, william Famy wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
To begin with Happy new year to every vserver guy.
and a happy new year to you too ...
I have to extand the shmmax for my guest but I do not manage to do it.
cat /proc/sys/kernel/shmmax
134217728
I have tried the /etc/vserver/host/rlimits
I have tried to add bcapability
but I do not manage to go ahead with it.
I've run under 2.6.19.1 with the last devel vserver patch under
debian etch as host.
Could somebody tell me how to modify the guest config to execute
echo 134217728 /proc/sys/kernel/shmmax for my guest.
as 2.6.19.x incorporates the mainline namespace
stuff, you have to set those values from one of
the early guest startup script (e.g. prepre-start)
while you still have 'enough' capabilities ...
I assume this requires the IPC namespace to be created?
That doesn't happen until the context is created, so none of
the scripts would work for this particular problem.
hmm, isn't the context supposed to exist in
the post-start script? if not, please could
you once and for all clarify which script is
started when and in what context(s)?
The context will exist in the post-start scripts, but they won't be run
inside the context, and the context will already have lost the extra
capabilities.
Having a non-executable one that does something like
VSERVER_EXTRA_CMDS=( $_CHAINECHO /proc/sys/kernel/shmmax 134217728 )
is probably the only way to make it happen (with current tools).
okay, any plans to allow for such support?
also using the sysctl interface instead of the
deprecated procfs one (which might as well be
hidden away :) is advised ...
maybe special tool support will be added soon,
so please double check with the tool maintainers
I guess some nicer way to support it would be required,
especially as more of these settings become available.
what do you have in mind ... please share
your thoughts, as I think those settings _might_
become essential for certain setups ...
I guess something like /etc/vservers/guest/sysctl/id/{setting,value}
shouldn't be a problem, should it?
TIA,
Herbert
HTH,
Herbert
Thanks for any help.
--
Daniel Hokka Zakrisson
GPG id: 06723412
GPG fingerprint: A455 4DF3 990A 431F FECA 7947 6136 DDA2 0672 3412
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] setting time out on vserver stop
Hi I have(It seems ... I am not sure I have understood all) a slow ldap service to stop ( on FC6 ). That service exceed the time limit on vserver stop command and killall is launched = desorderely shutdown for the ldap. Where can I increase time out on a vserver stop to wait for normally terminated process ? (sync-timeout seems to be ignored.) Thanks and meilleurs voeux to all vserver guys. NB: There will be a return of experience on vserver/xen/vmware by C.N.R.S. - University - Rectorat de Montpellier for 1/2 day in Montpellier France in the beginning of february. ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] setting time out on vserver stop
jean-marc pouchoulon wrote: Hi I have(It seems ... I am not sure I have understood all) a slow ldap service to stop ( on FC6 ). That service exceed the time limit on vserver stop command and killall is launched = desorderely shutdown for the ldap. Where can I increase time out on a vserver stop to wait for normally terminated process ? (sync-timeout seems to be ignored.) Oh? /etc/vservers/.defaults/apps/vshelper/sync-timeout works as expected here, how did you set it and what did you set it to? -- Daniel Hokka Zakrisson GPG id: 06723412 GPG fingerprint: A455 4DF3 990A 431F FECA 7947 6136 DDA2 0672 3412 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] setting /proc/sys/kernel/shmmax on the guest
On Tue, Jan 02, 2007 at 08:08:40PM +0100, Daniel Hokka Zakrisson wrote:
Herbert Poetzl wrote:
On Tue, Jan 02, 2007 at 03:47:35AM +0100, Daniel Hokka Zakrisson wrote:
Herbert Poetzl wrote:
On Mon, Jan 01, 2007 at 02:05:30PM +0100, william Famy wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
To begin with Happy new year to every vserver guy.
and a happy new year to you too ...
I have to extand the shmmax for my guest but I do not manage to do it.
cat /proc/sys/kernel/shmmax
134217728
I have tried the /etc/vserver/host/rlimits
I have tried to add bcapability
but I do not manage to go ahead with it.
I've run under 2.6.19.1 with the last devel vserver patch under
debian etch as host.
Could somebody tell me how to modify the guest config to execute
echo 134217728 /proc/sys/kernel/shmmax for my guest.
as 2.6.19.x incorporates the mainline namespace
stuff, you have to set those values from one of
the early guest startup script (e.g. prepre-start)
while you still have 'enough' capabilities ...
I assume this requires the IPC namespace to be created?
That doesn't happen until the context is created, so none of
the scripts would work for this particular problem.
hmm, isn't the context supposed to exist in
the post-start script? if not, please could
you once and for all clarify which script is
started when and in what context(s)?
The context will exist in the post-start scripts, but they won't be run
inside the context, and the context will already have lost the extra
capabilities.
ah, but that script could actually 'enter' the
context with capabilities still intact and
do whatever manipulation necessary ...
(but sounds too complicated)
Having a non-executable one that does something like
VSERVER_EXTRA_CMDS=( $_CHAINECHO /proc/sys/kernel/shmmax 134217728 )
is probably the only way to make it happen (with current tools).
okay, any plans to allow for such support?
also using the sysctl interface instead of the
deprecated procfs one (which might as well be
hidden away :) is advised ...
maybe special tool support will be added soon,
so please double check with the tool maintainers
I guess some nicer way to support it would be required,
especially as more of these settings become available.
what do you have in mind ... please share
your thoughts, as I think those settings _might_
become essential for certain setups ...
I guess something like /etc/vservers/guest/sysctl/id/{setting,value}
shouldn't be a problem, should it?
sounds good to me,
TIA,
Herbert
Thanks for any help.
--
Daniel Hokka Zakrisson
GPG id: 06723412
GPG fingerprint: A455 4DF3 990A 431F FECA 7947 6136 DDA2 0672 3412
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Bandwidth Monitoring
Hi and happy new year ! I'd like to monitor bandwidth through snmp from the master server. When I hit ifconfig in the master I only get it's interfaces not the ones of the vservers. Is it possible to see the vserver interfaces from the master ? Thanks Adrien -- Adrien Laurent - CIO (514) 284-2020 x 202 http://www.modulis.ca ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] /sbin/vserver: line 686 685 Error
Hi All;
=
aden:/home/ybanafa# vserver-info
Versions:
Kernel: 2.6.19.1-vs2.2.0-rc6
VS-API: 0x00020102
util-vserver: 0.30.212; Jan 2 2007, 20:18:57
Features:
CC: gcc, gcc (GCC) 3.3.5 (Debian 1:3.3.5-13)
CXX: g++, g++ (GCC) 3.3.5 (Debian 1:3.3.5-13)
CPPFLAGS: ''
CFLAGS: '-g -O2 -std=c99 -Wall -pedantic -W'
CXXFLAGS: '-g -O2 -ansi -Wall -pedantic -W
-fmessage-length=0'
build/host: i686-pc-linux-gnu/i686-pc-linux-gnu
Use dietlibc: yes
Build C++ programs: yes
Build C99 programs: yes
Available APIs: v13,net,v21
ext2fs Source: e2fsprogs
syscall(2) invocation: alternative
vserver(2) syscall#: 273/glibc
Paths:
prefix:
sysconf-Directory: ${prefix}/etc
cfg-Directory: ${prefix}/etc/vservers
initrd-Directory: $(sysconfdir)/init.d
pkgstate-Directory: ${prefix}/var/run/vservers
vserver-Rootdir: /vservers
Assumed 'SYSINFO' as no other option given; try '--help' for more
information.
aden:/home/ybanafa# vserver care start
/sbin/vserver: line 686: xargs: command not found
/sbin/vserver: line 685: /usr/bin/find: No such file or directory
Failed to start vserver 'care'
--
---
ThanksAll the Best;
YassinB
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] /sbin/vserver: line 686 685 Error
On Wed, Jan 03, 2007 at 08:54:35AM +0300, [EMAIL PROTECTED] wrote:
Hi All;
=
aden:/home/ybanafa# vserver-info
Versions:
Kernel: 2.6.19.1-vs2.2.0-rc6
VS-API: 0x00020102
util-vserver: 0.30.212; Jan 2 2007, 20:18:57
Features:
CC: gcc, gcc (GCC) 3.3.5 (Debian 1:3.3.5-13)
CXX: g++, g++ (GCC) 3.3.5 (Debian 1:3.3.5-13)
CPPFLAGS: ''
CFLAGS: '-g -O2 -std=c99 -Wall -pedantic -W'
CXXFLAGS: '-g -O2 -ansi -Wall -pedantic -W
-fmessage-length=0'
build/host: i686-pc-linux-gnu/i686-pc-linux-gnu
Use dietlibc: yes
Build C++ programs: yes
Build C99 programs: yes
Available APIs: v13,net,v21
ext2fs Source: e2fsprogs
syscall(2) invocation: alternative
vserver(2) syscall#: 273/glibc
Paths:
prefix:
sysconf-Directory: ${prefix}/etc
cfg-Directory: ${prefix}/etc/vservers
initrd-Directory: $(sysconfdir)/init.d
pkgstate-Directory: ${prefix}/var/run/vservers
vserver-Rootdir: /vservers
Assumed 'SYSINFO' as no other option given; try '--help' for more
information.
aden:/home/ybanafa# vserver care start
/sbin/vserver: line 686: xargs: command not found
/sbin/vserver: line 685: /usr/bin/find: No such file or directory
sounds like xargs and /usr/bin/find is missing ...
what system do you use on the host?
are you root when you try to start the guest?
HTH,
Herbert
Failed to start vserver 'care'
--
---
ThanksAll the Best;
YassinB
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] /sbin/vserver: line 686 685 Error
My host is Sarge-3.1 (updated upgraded)
My guest is same.(10 of them..aka: care, care2, care3.care10)
How can I fix this issue ...?
Thanks All the Best
[EMAIL PROTECTED]
On 1/3/07, Herbert Poetzl [EMAIL PROTECTED] wrote:
On Wed, Jan 03, 2007 at 08:54:35AM +0300, [EMAIL PROTECTED] wrote:
Hi All;
=
aden:/home/ybanafa# vserver-info
Versions:
Kernel: 2.6.19.1-vs2.2.0-rc6
VS-API: 0x00020102
util-vserver: 0.30.212; Jan 2 2007, 20:18:57
Features:
CC: gcc, gcc (GCC) 3.3.5 (Debian 1:3.3.5-13)
CXX: g++, g++ (GCC) 3.3.5 (Debian 1:3.3.5-13)
CPPFLAGS: ''
CFLAGS: '-g -O2 -std=c99 -Wall -pedantic -W'
CXXFLAGS: '-g -O2 -ansi -Wall -pedantic -W
-fmessage-length=0'
build/host: i686-pc-linux-gnu/i686-pc-linux-gnu
Use dietlibc: yes
Build C++ programs: yes
Build C99 programs: yes
Available APIs: v13,net,v21
ext2fs Source: e2fsprogs
syscall(2) invocation: alternative
vserver(2) syscall#: 273/glibc
Paths:
prefix:
sysconf-Directory: ${prefix}/etc
cfg-Directory: ${prefix}/etc/vservers
initrd-Directory: $(sysconfdir)/init.d
pkgstate-Directory: ${prefix}/var/run/vservers
vserver-Rootdir: /vservers
Assumed 'SYSINFO' as no other option given; try '--help' for more
information.
aden:/home/ybanafa# vserver care start
/sbin/vserver: line 686: xargs: command not found
/sbin/vserver: line 685: /usr/bin/find: No such file or directory
sounds like xargs and /usr/bin/find is missing ...
what system do you use on the host?
are you root when you try to start the guest?
HTH,
Herbert
Failed to start vserver 'care'
--
---
ThanksAll the Best;
YassinB
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
