[Vserver] fedora 7 and vserver

2007-06-27 Thread jean-marc pouchoulon

Hi all,
Do daniel's repository will contain in the near future kernel and 
vserver-util for fedora 7  ?



thanks

jean-marc
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] fedora 7 and vserver

2007-06-27 Thread jean-marc pouchoulon

jean-marc pouchoulon a écrit :

Hi all,
Do daniel's repository will contain in the near future kernel and 
vserver-util for fedora 7  ?



it seems that util-vserver are in fedora 7.

yum install util-vserver*
Loading installonlyn plugin
Setting up Install Process
Parsing package install arguments
Resolving Dependencies
-- Running transaction check
--- Package util-vserver-lib.i386 0:0.30.212-3.fc7 set to be updated
--- Package util-vserver.i386 0:0.30.212-3.fc7 set to be updated
Importing additional filelist information

no kernel support  ?

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] OCS Inventory

2007-03-15 Thread jean-marc pouchoulon

Bonjour,

We are using ocs both on vserver guests (fedora core 5/6 ) and hosts 
without any problems and no need to add  more capabilities than these 
provide in standard install.But we are not using RPM to do install ocs





Jean-Michel Caricand a écrit :

Hi,

I want to install OCS Inventory Agent on a guest. When I
launch agent, I  can read this error in log file:

Lauching OCS Inventory NG Agent
Thu Mar 15 13:46:31 2007 = You don't have enough rights to
run this program
*** ERROR: Unable to launch OCS Inventory NG Agent

I'am under root account. How can I resolve this ?

Thank.




Jean-Michel Caricand 
mail : [EMAIL PROTECTED]
 

Envoyez vos cartes de voeux depuis www.laposte.net 
Elles seront ensuite distribuées par le facteur : pratique et malin !


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
  


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] setting time out on vserver stop

2007-01-03 Thread jean-marc pouchoulon




Oh? /etc/vservers/.defaults/apps/vshelper/sync-timeout works as 
expected here, how did you set it and what did you set it to?


Ok sync-timeout works as expected. ( put it at 120s value and it wait 
after killall 2 mn - I think that timeout was before killall    )


The problem came from my script ( must flag /var/lock/subsys/  in the 
script or the service wasn't stopped )


Thanks Daniel  


NB:
Did you plan to make a quickstart for vserver fedora core 6  in the 
near future ?

The formers were great and usefull ...








___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] setting time out on vserver stop

2007-01-02 Thread jean-marc pouchoulon

Hi
I have(It seems ... I am not sure I have understood all)   a slow ldap 
service to stop ( on FC6 ).
That service exceed the time limit on vserver stop command  and  
killall is launched = desorderely  shutdown  for the ldap.
Where can I increase time out on a vserver stop to wait for normally 
terminated process  ? (sync-timeout  seems to be ignored.)


Thanks and meilleurs voeux to all vserver guys.

NB:  There will be a return of experience on vserver/xen/vmware  by 
C.N.R.S. - University - Rectorat de Montpellier for  1/2 day

in Montpellier France in the beginning of february.






___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] bind9 in vserver

2006-06-11 Thread jean-marc pouchoulon

Eugen Leitl a écrit :

Can I run BIND9 in a vserver? If yes, is there something I
need to be aware of? (One of my nameservers died, so I'm
considering virtualizing DNS).

  
  


Yes you can but you need to be aware of these capabilities

CAP_MKNOD ( first launch on fedora , you can remove it after )

and CAP_SYS_RESOURCE

in /etc/vservers/vserver_name/bcapabilities.

Or you have to compile bind with --disable-linux-caps



___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] bind9 in vserver

2006-06-11 Thread jean-marc pouchoulon



Or you have to compile bind with --disable-linux-caps



-- MUCH better ! (security wise)


  

I'd like to know what is the security problem with CAP_SYS_RESSOURCE ?
Herbert said
Currently the following Linux Capabilities are considered secure, if 
you add others to them, you will probably open some security hole.


but what is the problem  with override resource limits, quota, reserved 
space on fs, ...? DOS on another vserver using the whole ressources ?


what else ?
thanks

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] simple questions about centos kernel and fc 4 to 5 upgrade guest

2006-06-06 Thread jean-marc pouchoulon

Thanks (herbert and  Guenther) for yours answers

 why
not use a vanilla (mainline from kernel.org) kernel 
instead?


  
I am going to present tomorrow vserver to an audience that want to  use 
Red Hat AS  not Fedora/debian for the major part of them.
It's a fact, not a judgement, they want something certified , with a 
life  2 years ( the big problem with fedora ) and I can understand that.
Daniel's repository and FC howto makes upgrading, managing  vserver and 
his kernel very easy ( thanks again to daniel) and I  search
something as easy as that for AS 4 environment.( or a clone like centos 
wich can be a solution).


We can build a vanilla kernel but it is less simple  vserver must 
, to persuade in my professionnal environment, be
easy to install , upgrade , reassuring people , giving time to time 
they will understand how vserver is intresting.


fedora seems for me  to be the more industrialize solution for the 
moment, and centos a gateway between 2 worlds but not mature enough in 
a vserver environment. I will do to my best with that tomorrow.


jean-marc

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] simple questions about centos kernel and fc 4 to 5 upgrade guest

2006-06-01 Thread jean-marc pouchoulon

helo ,

I've read in the mailing list archive that centos kernel cannot be 
patched with vserver patch. Is it always true with centos 4.3 ?


How to upgrade FC4 guest to FC5 ? yum ? new vserver build in FC5 
environment and reinstall ?


If you have experiment it , I  am interested to know if there are troubles.

thanks

jean-marc


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] use of vserver logo for a presention

2006-05-09 Thread jean-marc pouchoulon
I'm going to present vserver to other sysadmin of french state 
education. :-)
Is there is an official and  free vserver logo that I can use for my 
presentation ?


thanks
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] secure http architecture with vserver howto ?

2006-04-13 Thread jean-marc pouchoulon

Hello,

   I'd like to manage all my web user site ( LAMP base configuration)  
in a secure way with vserver.
   One context per user/site could be usefull to limit damage in case 
of intrusion. How to compartmentilize  , without overburden and 
complicated configuration ?
   Have you got any recommendation, link, security tips  on  that type 
of configuration ? use of vunify ?

   What are the usage for isp ?


   thanks in advance for your advice.
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Host guest

2006-04-03 Thread jean-marc pouchoulon



What's wrong with my install ?


 


sshd listen by default to all ip address (0.0.0.0)

change /etc/ssh/sshd_config  both in guest
ListenAddress ip_guest

and host
ListenAddress ip_host

jean-marc


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] heartbeat inside a vserver bcast error

2006-03-27 Thread jean-marc pouchoulon

Helo,

I'am not familiar with heartbeat et I try to test it using two vservers 
( on fc5 thanks daniel for your work ...).


First all all is heartbeat can run inside a vserver ?  It seems that 
heartbeat needs to configure network interfaces and i am not sure it is 
possible inside a vserver...


Also I can't start heartbeat due to  bcast address:

heartbeat[6515]: 2006/03/27_12:04:03 ERROR: glib: Get broadcast for 
interface eth0:test0 failed: Cannot assign requested address
heartbeat[6515]: 2006/03/27_12:04:03 ERROR: glib: IP interface 
[eth0:test0] does not exist
heartbeat[6515]: 2006/03/27_12:04:03 ERROR: Illegal bcast [UDP/IP 
broadcast] in config file [eth0:test0]
heartbeat[6515]: 2006/03/27_12:04:03 ERROR: Heartbeat not started: 
configuration error.
heartbeat[6515]: 2006/03/27_12:04:03 ERROR: Configuration error, 
heartbeat not started.

The bcast address in ha.cf is


logfacility daemon # Log to syslog as facility daemon
node test1.ac-montpellier.fr test2.ac-montpellier.fr# List 
our cluster members

keepalive 1# Send one heartbeat each second
warntime  3# Warn when heartbeats are late
deadtime 10# Declare nodes dead after 10 seconds
udpport 694
bcast eth0:test0   # Broadcast heartbeats on eth0 and eth1 
interfaces
ping  192.168.253.2# Ping our router to monitor ethernet 
connectivity
auto_failback yes  # Keep resources on their preferred hosts - 
needed for active/active

respawn hacluster /usr/lib/heartbeat/ipfail  # Failover on network failures


eth0:test0:test Link encap:Ethernet  HWaddr 00:0C:29:B1:36:66
 inet adr:192.168.253.130  Bcast:192.168.253.255  
Masque:255.255.255.0

 UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
 Interruption:17 Adresse de base:0x1400

thanks for your advices.









___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] fc5 rpm-fake.so: vc_set_vhi_name(): function not implemented

2006-03-23 Thread jean-marc pouchoulon
hello
I try to build a vserver on fc5 on my laptop ( under vmware
workstation...) and I've got the following error:
 vserver test1 build -m yum --hostname=test.ac-montpellier.fr
--interface test0=eth0:192.168.253.130/24 -- -d fc5
rpm-fake.so: vc_set_vhi_name(): Function not implemented
rpm-fake.so: failed to initialize communication with resolver

Maybe I am too impatient ?



 ./testme.sh
Linux-VServer Test [V0.15] Copyright (C) 2003-2006 H.Poetzl
chcontext is working.
chbind is working.
Linux 2.6.16-1.2064_FC5.vs2.0.2.0.rc13.1 #1 Tue Mar 21 14:32:21 EST 2006
i686
Ea 0.30.210 273/glibc (DSa) compat,v11,fscompat,v13,net,oldproc,olduts
VCI: 0002:0001 273 0336 (TbLgnP)
---
[000]# succeeded.
[001]# succeeded.
[011]# succeeded.
[031]# succeeded.
[101]# succeeded.
[102]# succeeded.
[201]# succeeded.
[202]# succeeded.

utilvserver came from dhozac repository

jmp




___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] debian guest under fedora core 4 errors messages

2006-03-17 Thread jean-marc pouchoulon




Daniel Kraft wrote:

  Hi Jean-Marc!
  

Hi Daniel and thanks.
That's ok 
last point on vserver enter

mesg: /dev/pts/1: Operation not permitted

I found this answer
1133720616 M * robig on entering an vserer a message like mesg: /dev/pts/1: Operation not permitted apperars, can this be a problem?
1133720648 M * daniel_hozac it shouldn't be. if it is, just use ssh to enter the vserver.

a better one ?
thanks again







  
  
  
Cleaning up ifupdown...done.
Deactivating swap...umount: none: not found
umount: /tmp: must be superuser to umount
Not superuser.
done.
Unmounting local filesystems...umount: none: not found
umount: /tmp: must be superuser to umount
umount: /dev/hdv1: not found
umount: /: must be superuser to umount

Saving the System Clock time to the Hardware Clock...
hwclock is unable to get I/O port access:  the iopl(3) call failed.
Hardware Clock updated to Fri Mar 17 07:17:18 UTC 2006.

  
  

cd /vservers/$NAME/etc/

rm rc0.d/K20makedev rc0.d/K25hwclock.sh rc0.d/S30urandom rc0.d/S31umountnfs.sh
rm rc0.d/S35networking rc0.d/S36ifupdown rc0.d/S40umountfs rc0.d/S90halt
rc0.d/K89klogd
rm rc6.d/K20makedev rc6.d/K25hwclock.sh rc6.d/S30urandom rc6.d/S31umountnfs.sh
rm rc6.d/S35networking rc6.d/S36ifupdown rc6.d/S40umountfs rc6.d/S90reboot
rc6.d/K89klogd
rm rcS.d/S05keymap.sh rcS.d/S48console-screen.sh rcS.d/S50hwclock.sh
rcS.d/S40networking
rm rcS.d/S45mountnfs.sh rcS.d/S10checkroot.sh rcS.d/S02mountvirtfs
rm rcS.d/S30procps.sh rcS.d/S35mountall.sh rcS.d/S36mountvirtfs
rcS.d/S39ifupdown
rm rcS.d/S30checkfs.sh rcS.d/S18ifupdown-clean rcS.d/S18hwclockfirst.sh
rm rc2.d/S20makedev rc2.d/S11klogd


hth,
Daniel

  




___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] debian guest under fedora core 4 errors messages

2006-03-17 Thread jean-marc pouchoulon


As I said there, it's not really a problem. If you're really concerned 
about that message though, see patch #4969 for a patch that will fix it.




for my own technical skills what is the problem ?
jean-marc
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] vyum issue

2006-03-13 Thread jean-marc pouchoulon

Hello,

I try to use :
vyum vdns61-02 -- search yum
vcontext: execvp(yum): No such file or directory

vyum for other vservers on the same physical machines are working.
How can I trace that ?



thanks
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vyum issue

2006-03-13 Thread jean-marc pouchoulon

I 'v just upgraded to
rpm -qa|grep vserver
util-vserver-debuginfo-0.30.209-5.fc4
util-vserver-devel-0.30.210-4.fc4
util-vserver-core-0.30.210-4.fc4
util-vserver-sysv-0.30.210-4.fc4
util-vserver-lib-0.30.210-4.fc4
util-vserver-0.30.210-4.fc4
util-vserver-build-0.30.210-4.fc4
util-vserver-legacy-0.30.210-4.fc4


But
vyum vsmtp2 -- search yum
vlogin: execvp(): No such file or directory

thanks for  you help

jean-marc pouchoulon wrote:


Hello,

I try to use :
vyum vdns61-02 -- search yum
vcontext: execvp(yum): No such file or directory

vyum for other vservers on the same physical machines are working.
How can I trace that ?



thanks
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver



___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vyum issue

2006-03-13 Thread jean-marc pouchoulon

any ideas ?

vyum vsmtp2 -- install vim
Can not find file for 'YUMCACHEDIR'; aborting



jean-marc pouchoulon wrote:


I 'v just upgraded to
rpm -qa|grep vserver
util-vserver-debuginfo-0.30.209-5.fc4
util-vserver-devel-0.30.210-4.fc4
util-vserver-core-0.30.210-4.fc4
util-vserver-sysv-0.30.210-4.fc4
util-vserver-lib-0.30.210-4.fc4
util-vserver-0.30.210-4.fc4
util-vserver-build-0.30.210-4.fc4
util-vserver-legacy-0.30.210-4.fc4


But
vyum vsmtp2 -- search yum
vlogin: execvp(): No such file or directory

thanks for  you help

jean-marc pouchoulon wrote:


Hello,

I try to use :
vyum vdns61-02 -- search yum
vcontext: execvp(yum): No such file or directory

vyum for other vservers on the same physical machines are working.
How can I trace that ?



thanks
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver




___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver



___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] lsixd error

2006-01-18 Thread jean-marc pouchoulon

Bonjour,

Could  anyone told me why  lsxid seems to  be broken ?
( 2.6.15 kernel fedora 4)

lsxid /vservers/etab/
!!ERR!!   /vservers/etab/
!!ERR!!   /vservers/etab/bin
!!ERR!!   /vservers/etab/boot
!!ERR!!   /vservers/etab/dev
!!ERR!!   /vservers/etab/etc
!!ERR!!   /vservers/etab/halt
!!ERR!!   /vservers/etab/home
!!ERR!!   /vservers/etab/lib

thanks in advance


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] fedora core 4 and ibm 336

2006-01-06 Thread jean-marc pouchoulon

Bonjour,

I try to use vserver on an ibm 336 server and fedora core 4.
Ibm 336 does not seem to support 2.6.14 kernel and by extension 2.6.14 
vserver  kernel

Only 2.6.11 boots correctly.
Any solution to find a vserver 2.6.11  rpm  kernel ? a vserver patch to 
2.6.11 ?


thanks in advance.


Jean-Marc




___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver