Re: [Vserver] Debian guest on a Gentoo Host?

2007-06-13 Thread Peter Mann
On Wed, Jun 13, 2007 at 11:26:27AM +0300, jepa kazol wrote:
I am trying to move all of my gentoo servers to debian and for now I am
trying to install a debian guest vserver on a gentoo host. But I couldn't
find out how to do that. Is there anyone on this list did the job? Please
share your experiences with me...

debootstrap

http://gentoo-portage.com/dev-util/debootstrap

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Couldn't download base-config

2007-02-28 Thread Peter Mann
On Mon, Feb 05, 2007 at 05:16:44PM +0100, Peter Mann wrote:
 On Mon, Feb 05, 2007 at 06:11:04AM +0100, Herbert Poetzl wrote:
   - debian tends to break things, and then avoid to
 fix up the breakage for a long time (see kernel)
 
 just now it's special case, because of preparing next stable, 
 so testing is frozen
 
 http://www.debian.org/doc/FAQ/ch-ftparchives#s-testing


now we have new vserver kernel in Etch/testing:

http://packages.debian.org/changelogs/pool/main/l/linux-2.6/linux-2.6_2.6.18.dfsg.1-11/changelog

   * Update vserver patch to 2.0.2.2-rc9. (closes: #402743, #403790)

http://bugs.debian.org/402743
http://bugs.debian.org/403790

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Couldn't download base-config

2007-02-28 Thread Peter Mann
On Wed, Feb 28, 2007 at 03:53:27PM +0100, Herbert Poetzl wrote:
 On Wed, Feb 28, 2007 at 01:12:04PM +0100, Peter Mann wrote:
  On Mon, Feb 05, 2007 at 05:16:44PM +0100, Peter Mann wrote:
   On Mon, Feb 05, 2007 at 06:11:04AM +0100, Herbert Poetzl wrote:
 - debian tends to break things, and then avoid to
   fix up the breakage for a long time (see kernel)
   
   just now it's special case, because of preparing next stable, 
   so testing is frozen
   
   http://www.debian.org/doc/FAQ/ch-ftparchives#s-testing
  
  
  now we have new vserver kernel in Etch/testing:
  
  http://packages.debian.org/changelogs/pool/main/l/linux-2.6/linux-2.6_2.6.18.dfsg.1-11/changelog
  
 * Update vserver patch to 2.0.2.2-rc9. (closes: #402743, #403790)
 
 well, unfortunately still an old one, and not the
 2.2.0 branch, but hey, better than nothing 

now Etch is frozen, so no new versions is accepted, only bugfixes ... 
so Etch will be released with 2.6.18 ...

anyway vs2.2 for 2.6.18 is very old too:   04-Dec-2006 06:19  ;-)
http://ftp.linux-vserver.org/pub/kernel/vs2.2/testing/patch-2.6.18.5-vs2.2.0-pre5.diff
and
The latest prepatch version of the stable Linux-VServer patch is: vs2.0.3-rc1
http://linux-vserver.org/ChangeLog-2.0
so only small difference between vs2.0.3-rc1 and vs2.0.2.2-rc9  

so stable vserver patch with next stable Debian release will be fine for
long time on many servers ... so anyone can use only apt-get to install
vserver utils and kernel:  

apt-get install linux-image-vserver-686 util-vserver vserver-debiantools

if someone want newer versions, then he can use The latest prepatch version 
of the upcoming stable Linux-VServer patch for 2.6.19 or 2.6.20 with
vanilla kernel ... 

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] keeping a mirror machine synched

2007-02-24 Thread Peter Mann
On Sat, Feb 24, 2007 at 04:13:43PM +0100, Eugen Leitl wrote:
 I run a nightly script (over a private network) which does the
 following synchronisation from the production to the backup machine:
 rsync -a -e ssh /home/ [EMAIL PROTECTED]:/home/
 rsync -a -e ssh /usr/local/etc/vservers/ [EMAIL 
 PROTECTED]:/usr/local/etc/vservers/
 
 My vservers live in /vservers which is a symlink to /home/vservers.
 Apart from /usr/local/etc/vservers/ is there anything else I should synch?

my tip: use rsync --numeric-ids  and --exclude vservers/name1/proc ...
(and you can use rsync without -e ssh, because it's default in Debian;
and maybe -e 'ssh -c blowfish')

i'm using some similar rsync scripts ...

 Another question: Debian 4.0 is ante portas. Given that 3.1 had everything
 way out of date, can one rely on stock vserver kernel and tools in Debian 4.0?

i upgraded all my sarge host servers to etch ... some guest servers is
still sarge, but almost all are etch ... there is problem with default
debian vserver kernel in TESTING, but i have my own recompiled kernels
and new debian kernels are almost ready for entering testing (and
debian-installer etch rc2/final)

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Couldn't download base-config

2007-02-04 Thread Peter Mann
On Sun, Feb 04, 2007 at 09:45:31AM +0300, [EMAIL PROTECTED] wrote:
 vserver sid64 build -n sid64 --hostname sid64.deb.com --interface
 eth1:192.168.1.30/24 -m debootstrap -- sid
 Couldn't download base-config
 
 stop .. how can fix it ?

try another debian mirror ... maybe temporary missing file, maybe
mirroring script in progress and base-config unfinished or newer
Packages.gz, but unfinished .deb files ... 

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vserver enter eating cpu and vkill problem

2007-01-13 Thread Peter Mann
On Sat, Jan 13, 2007 at 12:31:52AM +0100, Philippe Teuwen wrote:
 This is on a remote server in a datacenter so I'm not that fan
 to try a vanilla home-patched remotely :-/

i know ... i had same problem ;-) 

 Nevertheless I tried some upgrade:
 the last kernel and the last util-vserver tools of etch and sid:
 
 Linux version 2.6.18-3-vserver-amd64 (Debian 2.6.18-7) 
 ([EMAIL PROTECTED]) (gcc version 4.1.2 20061115 (prerelease) (Debian 
 4.1.1-20)) #1 SMP Mon Dec 4 17:19:24 CET 2006
 vserver patch: 2.0.2.2-rc8
 util-vserver: 0.30.212-1
 
 I have the same problems with this single difference:
 now killing a process of a guest with a single kill in context 0
 does not work anymore (as expected), so the only way is
 # vserver  exec kill 
 as vkill still does not work.

yes 2.6.18-3-vserver-amd64 was bad too ...

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vserver enter eating cpu and vkill problem

2007-01-13 Thread Peter Mann
On Sat, Jan 13, 2007 at 12:44:05PM +0100, Philippe Teuwen wrote:
 
 yes 2.6.18-3-vserver-amd64 was bad too ...
   
 Are the kernels here better?
 http://linux-vserver.derjohn.de/debian-etch-sid/debian/dists/sid/main/binary-amd64/
 as seen in the faq
 http://linux-vserver.org/Frequently_Asked_Questions#Were_can_I_get_newer_versions_of_VServer_as_ready_made_packages_for_Debian.3F

i don't know ... 

you can make own kernel with vanilla source + vserver patch by using
your kernel config and make-kpkg ... IMHO it's easy and safe ...

i sent to this list mail about Etch vserver kernels a few days ago:

 Subject: Re: [Vserver] stop vserver cause error/oops - with new debian 4.0
vserver kernel version
 Date: Tue, 9 Jan 2007 09:47:36 +0100

On Tue, Jan 09, 2007 at 06:11:10AM +0100, [EMAIL PROTECTED] wrote:
  On Mon, Jan 08, 2007 at 11:05:50AM +0100, Oliver Paulus wrote:
 
  I have used Linux kernel 2.6.17.13 with VServer 2.0.2.1 before -
  everything worked correctly. Now I have installed the Debian 4.0
  (Etch) vserver kernel 2.6.18-3-vserver-amd64. If I stop a specific
  vserver instance with vserver name stop I get the following
  error:
 
  please try with a mainstream kernel, preferable one of
  the 2.2.0-rc* kernels, and mainstream util-vserver (0.30.212)
  if the issue remains, please let us know, otherwise please
  contact the debian maintainers about those issues ...
 
  TIA,
  Herbert

 The Debian maintainers are aware, and it's the bug fixed in
 2.0.2.2-rc9
 (off by one cacct). From what I gathered, the most recent Debian
 snapshot
 kernel should work fine, but I didn't quite understand how or where to
 get
 it.

Debian Etch is now frozen, so every package update into Etch is
processed through debian-release team ... some new linux-2.6 (kernel)
is scheduled:
http://lists.debian.org/debian-release/2007/01/msg00085.html

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vserver enter eating cpu and vkill problem

2007-01-12 Thread Peter Mann
On Fri, Jan 12, 2007 at 07:18:42PM +0100, Philippe Teuwen wrote:
 Here are some problems I have with vserver.
 
 My environment:
 Kernel: Debian vserver_pre-patched kernel for AMD64:
 Linux version 2.6.17-2-vserver-amd64 (Debian 2.6.17-9) ([EMAIL PROTECTED]) 
 (gcc version 4.1.2 20060901 (prerelease) (Debian 4.1.1-13)) #1 SMP Wed Sep 
 13 18:02:36 CEST 2006
 According to changelog.Debian, this version is using vserver patch v2.0.2
 util-vserver: 0.30.211-6

i had same problem with debian kernels ... new kernel are waiting to
enter Etch (which is now frozen) ... so it's (temporary) debian specific 
problem

Etch is still 'testing' so try your own kernel ... i recompiled vanilla
+ vserver patch and all works fine ...

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] stop vserver cause error/oops - with new debian 4.0 vserver kernel version

2007-01-09 Thread Peter Mann
On Tue, Jan 09, 2007 at 06:11:10AM +0100, [EMAIL PROTECTED] wrote:
  On Mon, Jan 08, 2007 at 11:05:50AM +0100, Oliver Paulus wrote:
 
  I have used Linux kernel 2.6.17.13 with VServer 2.0.2.1 before -
  everything worked correctly. Now I have installed the Debian 4.0
  (Etch) vserver kernel 2.6.18-3-vserver-amd64. If I stop a specific
  vserver instance with vserver name stop I get the following error:
 
  please try with a mainstream kernel, preferable one of
  the 2.2.0-rc* kernels, and mainstream util-vserver (0.30.212)
  if the issue remains, please let us know, otherwise please
  contact the debian maintainers about those issues ...
 
  TIA,
  Herbert
 
 The Debian maintainers are aware, and it's the bug fixed in 2.0.2.2-rc9
 (off by one cacct). From what I gathered, the most recent Debian snapshot
 kernel should work fine, but I didn't quite understand how or where to get
 it.

Debian Etch is now frozen, so every package update into Etch is
processed through debian-release team ... some new linux-2.6 (kernel) 
is scheduled: 
http://lists.debian.org/debian-release/2007/01/msg00085.html

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Re: future vserver on ubuntu

2006-11-28 Thread Peter Mann
On Tue, Nov 28, 2006 at 05:11:32PM +0100, alexander goeres - lieblinx GmbH 
wrote:
 just one question aside: is anybody able to figure out, what vserver-versions 
 the debian-kernel-packagers are using?

http://packages.debian.org/linux-image-vserver-686
http://packages.debian.org/linux-image-vserver-k7

http://packages.debian.org/changelogs/pool/main/l/linux-2.6/linux-2.6_2.6.17-9/changelog

* Update vserver patch to 2.0.2.

http://packages.debian.org/changelogs/pool/main/l/linux-2.6/linux-2.6_2.6.18-5/changelog

* Update vserver patch to 2.0.2.2-rc6.

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Running bind 9.2.4 on Debian Sarge without caps

2006-10-24 Thread Peter Mann
On Tue, Oct 24, 2006 at 03:52:58PM +0200, Holger Nowak wrote:
I know that running bind in a vserver guest is a bit problematic, so I
decided to recompile Bind with linux-caps disabled according to
 

 [1]http://linux-vserver.org/Problematic_Programs#Bind9_on_Debian_GNU.2FLinux_Woody_.283.0.29_and_Sarge_.283.1.29
and
[2]http://www.newt.com/debian/acornHOWTO/ (Section bind9)
 
But I couldn't start named properly. No error messages neither on promt
nor on syslog occur but the name server isn't running.
 
If I want to stop the service I receive the well known message:
 
Stopping domain name service: namedrndc: connect failed: connection
refused

which kernel and which vserver patch ???

i talk about debian bind9 a few weeks ago with Herbert on irc, but i was
very busy ... 

so try 'normal' debian packages WITH enabled linux-caps ... on 2.6.17.11
and vs2.0.2 bind9 can work normally like other programs ... (maybe) ... 

i must deeply investigate all my settings ... i have my own recompiled 
kernel and my own recompiled bind9 ...

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Fedora 3 Vserver Guest under Debian Sarge

2006-07-02 Thread Peter Mann
On Sun, Jul 02, 2006 at 05:54:56PM +0200, Guenther Fuchs wrote:
 saen I haven't really tried, because I know I will need something
 saen like this (but don't know where to get it for Fedora):
 saen http://host/debian/pool/main/d/debootstrap/debootstrap_0.3.3_all.deb
 
 I don't think you will need this for Fedora at all, no.

rpmstrap

http://packages.debian.org/testing/admin/rpmstrap

bootstrap a basic RPM-based system

rpmstrap is a tool for bootstrapping a basic RPM-based system. It is
inspired by debootstrap, and allows you to build chroots and basic
systems from RPM sources.

At present rpmstrap can build basic Fedora Core 2, Fedora Core 3, Fedora
Core 4, Yellowdog 4, CentOS 3, CentOS 4, Mandriva and Scientific Linux
systems. It also has support for custom RPM-based systems managed by PDK.

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] What is the best way to connect from 1 vserver to other vserver within the same host ?

2006-05-06 Thread Peter Mann
On Fri, May 05, 2006 at 10:22:13PM +0200, Sébastien CRAMATTE wrote:
 What is the best way to connect from 1 vserver to other vserver within 
 the same host ?
 
 I've got an Ldap directory inside one vserver  and  a postfix that use 
 ldap in another vserver.
 I search the best way to connect to the ldap server with the maximum of 
 security.

use your ldap and postfix like any other network servers (forget
vserver technology for a minute) and use SSL connection  - ldaps:// or stunnel4

the best way is IMHO using SSL connection independent on vserver
technology ...

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [vserver] Root users differentiation

2006-05-05 Thread Peter Mann
On Fri, May 05, 2006 at 09:15:01AM +0200, joeytrviano wrote:
I would like to know how host root user and each vserver root users are
differentiated by the system.
Are they one same user just chrooted in each vserver directory or are
there several users named root at different levels?

every root user is different ... 

http://linux-vserver.org/

Linux-VServer provides virtualization for GNU/Linux systems. This is
accomplished by kernel level isolation. It allows to run multiple
virtual units at once. Those units are sufficiently isolated to
   
guarantee the required security, but utilize available resources
^^^
efficiently, as they run on the same kernel.


simply try different passwords for each root user ...



http://linux-vserver.org/short+presentation

Why do you need vservers ?

A) Many Tasks on the same Box

 Also, you can give the root password of a vserver to one administrator
 and he will be able to perform updates, restart services and so on
 without having to know about every other project hosted on a server.

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] cdrecording inside vserver?

2006-05-04 Thread Peter Mann
On Fri, Apr 28, 2006 at 10:18:06AM +0200, Martin Grunert wrote:
 Is it possible to use cdrecording software inside a vserver?
 
 The environment has to get direct access to the device, but
 simply copying the hdc devnode ends 

copying devnode is IMHO sufficient for cdrecording

 in a permission denied
 warning, when I try to mount a cd or dvd.

http://linux-vserver.org/Caps+and+Flags

try BINARY_MOUNT capability

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] problem with apt-get

2006-04-03 Thread Peter Mann
On Mon, Apr 03, 2006 at 07:05:36PM +0200, Geoffroy Culot wrote:
 So I have a question is the kernel-image package needed on the client 
 side ??

no

 If not, how to remove it and how clean the apt-get history ?

apt-get remove --purge kernel-image-2.4.27-2-686 kernel-image-2.6.8-2-386

you can remove more packages - look at debian newvserver script and
REMOVE_PACKAGES and REMOVE_SCRIPTS ... how you created your vserver
guest???

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Debian packages (Was: Re: [Vserver] vserver 2.0.2 patch for kernel 2.6.15.6)

2006-03-30 Thread Peter Mann

New Debian package (but for 2.6.16) ...

http://packages.debian.org/unstable/base/linux-image-vserver-amd64-k8
http://packages.debian.org/unstable/base/linux-image-2.6-vserver-amd64-k8
http://packages.debian.org/unstable/base/linux-image-2.6.16-1-vserver-amd64-k8

Linux kernel 2.6.16 image on AMD64 K8 machines

This package provides the binary image and pre-built loadable modules
for Linux kernel 2.6.16 on 64bit AMD Athlon64, AthlonFX, Opteron and
Turion64 machines.

This packages is produced using an updated kernel packaging system and
replaces older kernel-image packages 

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vserver 2.0.2 patch for kernel 2.6.15.6

2006-03-27 Thread Peter Mann
On Tue, Mar 28, 2006 at 07:58:03AM +0200, Tom Coetser wrote:
 Hi Corey,
 
 On Tuesday 28 March 2006 01:01, Corey Wright wrote:
 ...
  with ubuntu's 6 month release cycle and 18 months of security support, i
  can use their kernel (with vserver patch) at release and have 1.5 years and
  3 more ubuntu releases before i lose security support.  for example, i'm
  currently using breezy's 2.6.12 with vserver's 2.0, and pretending that i
  can't get any vserver release to apply to dapper's 2.6.15, i can continue
  using my current setup and i'll still have another year and 2 more ubuntu
  releases before i have to upgrade to continue receiving security support. 
  i still have the problem with using older kernels on newer hardware, but i
  have another chance to upgrade every 6 months (and can even adapt my
  purchasing to accomodate that schedule).  maybe i'm making too big of a
  deal over this, but after enduring the sarge release cycle, i'm cautious.
 
 Sounds like a very good solution.

yes, i'm using similar solution

i'm using kernel 2.4.31+vserver1.2.10 on many machines ... so i
switched to 2.6.x a few weeks ago on two production machines ...

but 2.6 kernel and still many changes on vanilla isn't good for me ...
so i decided to use some 'distribution' kernel ...

and Ubuntu Dapper will be supported for 5 years !!!

 As a matter of interest, how do you use the ubuntu kernels with vserver 
 patches on your sarge box? Do you add the ubuntu repositories to sources.list 
 and install the ubuntu kernel source of choice? - which vserver patches do 
 you use then? those from the ubuntu vserver-patch package or directly from 
 Herbert?
 How do you then deal with security updates? Get the updated kernel source 
 release and patch and rebuild?

i'm just testing 2.6.15-19.27 from ubuntu.uni-klu.ac.at ...
look at my mini howto in my previous mail ... sources from ubuntu, but
recompiled on sarge ...

vanilla 2.6.15.6 + vserver working fine too, but i want kernel with no
big changes ... and dapper will be official at 2006-06-01 ... 

i welcome some cooperation from experienced users with supporting
ubuntu dapper kernel with stable vserver 2.0.x patch ... no new
features, just updated patch every time dapper kernel changes - like
vserver 1.2.10 and vanilla kernel 2.4

so who can support dapper vserver kernel? 
Gerald Hochegger [EMAIL PROTECTED] ???
Herbert Poetzl [EMAIL PROTECTED] ???

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] host and guest UID and GID

2006-03-26 Thread Peter Mann
On Sun, Mar 26, 2006 at 01:31:47PM +0300, Nikolay Kichukov wrote:
 Is there a way this can be solved, or do I have to start numbering the UIDs
 and GIDs on the Guest from higher numbers?

chmod 000 /var/lib/vservers

-- 

5o   Peter.Mann at tuke.sk


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver