[Vserver] fedora 7 and vserver
Hi all, Do daniel's repository will contain in the near future kernel and vserver-util for fedora 7 ? thanks jean-marc ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] fedora 7 and vserver
jean-marc pouchoulon a écrit : Hi all, Do daniel's repository will contain in the near future kernel and vserver-util for fedora 7 ? it seems that util-vserver are in fedora 7. yum install util-vserver* Loading installonlyn plugin Setting up Install Process Parsing package install arguments Resolving Dependencies -- Running transaction check --- Package util-vserver-lib.i386 0:0.30.212-3.fc7 set to be updated --- Package util-vserver.i386 0:0.30.212-3.fc7 set to be updated Importing additional filelist information no kernel support ? ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] OCS Inventory
Bonjour, We are using ocs both on vserver guests (fedora core 5/6 ) and hosts without any problems and no need to add more capabilities than these provide in standard install.But we are not using RPM to do install ocs Jean-Michel Caricand a écrit : Hi, I want to install OCS Inventory Agent on a guest. When I launch agent, I can read this error in log file: Lauching OCS Inventory NG Agent Thu Mar 15 13:46:31 2007 = You don't have enough rights to run this program *** ERROR: Unable to launch OCS Inventory NG Agent I'am under root account. How can I resolve this ? Thank. Jean-Michel Caricand mail : [EMAIL PROTECTED] Envoyez vos cartes de voeux depuis www.laposte.net Elles seront ensuite distribuées par le facteur : pratique et malin ! ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] setting time out on vserver stop
Oh? /etc/vservers/.defaults/apps/vshelper/sync-timeout works as expected here, how did you set it and what did you set it to? Ok sync-timeout works as expected. ( put it at 120s value and it wait after killall 2 mn - I think that timeout was before killall ) The problem came from my script ( must flag /var/lock/subsys/ in the script or the service wasn't stopped ) Thanks Daniel NB: Did you plan to make a quickstart for vserver fedora core 6 in the near future ? The formers were great and usefull ... ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] setting time out on vserver stop
Hi I have(It seems ... I am not sure I have understood all) a slow ldap service to stop ( on FC6 ). That service exceed the time limit on vserver stop command and killall is launched = desorderely shutdown for the ldap. Where can I increase time out on a vserver stop to wait for normally terminated process ? (sync-timeout seems to be ignored.) Thanks and meilleurs voeux to all vserver guys. NB: There will be a return of experience on vserver/xen/vmware by C.N.R.S. - University - Rectorat de Montpellier for 1/2 day in Montpellier France in the beginning of february. ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] bind9 in vserver
Eugen Leitl a écrit : Can I run BIND9 in a vserver? If yes, is there something I need to be aware of? (One of my nameservers died, so I'm considering virtualizing DNS). Yes you can but you need to be aware of these capabilities CAP_MKNOD ( first launch on fedora , you can remove it after ) and CAP_SYS_RESOURCE in /etc/vservers/vserver_name/bcapabilities. Or you have to compile bind with --disable-linux-caps ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] bind9 in vserver
Or you have to compile bind with --disable-linux-caps -- MUCH better ! (security wise) I'd like to know what is the security problem with CAP_SYS_RESSOURCE ? Herbert said Currently the following Linux Capabilities are considered secure, if you add others to them, you will probably open some security hole. but what is the problem with override resource limits, quota, reserved space on fs, ...? DOS on another vserver using the whole ressources ? what else ? thanks ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] simple questions about centos kernel and fc 4 to 5 upgrade guest
Thanks (herbert and Guenther) for yours answers why not use a vanilla (mainline from kernel.org) kernel instead? I am going to present tomorrow vserver to an audience that want to use Red Hat AS not Fedora/debian for the major part of them. It's a fact, not a judgement, they want something certified , with a life 2 years ( the big problem with fedora ) and I can understand that. Daniel's repository and FC howto makes upgrading, managing vserver and his kernel very easy ( thanks again to daniel) and I search something as easy as that for AS 4 environment.( or a clone like centos wich can be a solution). We can build a vanilla kernel but it is less simple vserver must , to persuade in my professionnal environment, be easy to install , upgrade , reassuring people , giving time to time they will understand how vserver is intresting. fedora seems for me to be the more industrialize solution for the moment, and centos a gateway between 2 worlds but not mature enough in a vserver environment. I will do to my best with that tomorrow. jean-marc ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] simple questions about centos kernel and fc 4 to 5 upgrade guest
helo , I've read in the mailing list archive that centos kernel cannot be patched with vserver patch. Is it always true with centos 4.3 ? How to upgrade FC4 guest to FC5 ? yum ? new vserver build in FC5 environment and reinstall ? If you have experiment it , I am interested to know if there are troubles. thanks jean-marc ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] use of vserver logo for a presention
I'm going to present vserver to other sysadmin of french state education. :-) Is there is an official and free vserver logo that I can use for my presentation ? thanks ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] secure http architecture with vserver howto ?
Hello, I'd like to manage all my web user site ( LAMP base configuration) in a secure way with vserver. One context per user/site could be usefull to limit damage in case of intrusion. How to compartmentilize , without overburden and complicated configuration ? Have you got any recommendation, link, security tips on that type of configuration ? use of vunify ? What are the usage for isp ? thanks in advance for your advice. ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Host guest
What's wrong with my install ? sshd listen by default to all ip address (0.0.0.0) change /etc/ssh/sshd_config both in guest ListenAddress ip_guest and host ListenAddress ip_host jean-marc ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] heartbeat inside a vserver bcast error
Helo, I'am not familiar with heartbeat et I try to test it using two vservers ( on fc5 thanks daniel for your work ...). First all all is heartbeat can run inside a vserver ? It seems that heartbeat needs to configure network interfaces and i am not sure it is possible inside a vserver... Also I can't start heartbeat due to bcast address: heartbeat[6515]: 2006/03/27_12:04:03 ERROR: glib: Get broadcast for interface eth0:test0 failed: Cannot assign requested address heartbeat[6515]: 2006/03/27_12:04:03 ERROR: glib: IP interface [eth0:test0] does not exist heartbeat[6515]: 2006/03/27_12:04:03 ERROR: Illegal bcast [UDP/IP broadcast] in config file [eth0:test0] heartbeat[6515]: 2006/03/27_12:04:03 ERROR: Heartbeat not started: configuration error. heartbeat[6515]: 2006/03/27_12:04:03 ERROR: Configuration error, heartbeat not started. The bcast address in ha.cf is logfacility daemon # Log to syslog as facility daemon node test1.ac-montpellier.fr test2.ac-montpellier.fr# List our cluster members keepalive 1# Send one heartbeat each second warntime 3# Warn when heartbeats are late deadtime 10# Declare nodes dead after 10 seconds udpport 694 bcast eth0:test0 # Broadcast heartbeats on eth0 and eth1 interfaces ping 192.168.253.2# Ping our router to monitor ethernet connectivity auto_failback yes # Keep resources on their preferred hosts - needed for active/active respawn hacluster /usr/lib/heartbeat/ipfail # Failover on network failures eth0:test0:test Link encap:Ethernet HWaddr 00:0C:29:B1:36:66 inet adr:192.168.253.130 Bcast:192.168.253.255 Masque:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Interruption:17 Adresse de base:0x1400 thanks for your advices. ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] fc5 rpm-fake.so: vc_set_vhi_name(): function not implemented
hello I try to build a vserver on fc5 on my laptop ( under vmware workstation...) and I've got the following error: vserver test1 build -m yum --hostname=test.ac-montpellier.fr --interface test0=eth0:192.168.253.130/24 -- -d fc5 rpm-fake.so: vc_set_vhi_name(): Function not implemented rpm-fake.so: failed to initialize communication with resolver Maybe I am too impatient ? ./testme.sh Linux-VServer Test [V0.15] Copyright (C) 2003-2006 H.Poetzl chcontext is working. chbind is working. Linux 2.6.16-1.2064_FC5.vs2.0.2.0.rc13.1 #1 Tue Mar 21 14:32:21 EST 2006 i686 Ea 0.30.210 273/glibc (DSa) compat,v11,fscompat,v13,net,oldproc,olduts VCI: 0002:0001 273 0336 (TbLgnP) --- [000]# succeeded. [001]# succeeded. [011]# succeeded. [031]# succeeded. [101]# succeeded. [102]# succeeded. [201]# succeeded. [202]# succeeded. utilvserver came from dhozac repository jmp ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] debian guest under fedora core 4 errors messages
Daniel Kraft wrote: Hi Jean-Marc! Hi Daniel and thanks. That's ok last point on vserver enter mesg: /dev/pts/1: Operation not permitted I found this answer 1133720616 M * robig on entering an vserer a message like mesg: /dev/pts/1: Operation not permitted apperars, can this be a problem? 1133720648 M * daniel_hozac it shouldn't be. if it is, just use ssh to enter the vserver. a better one ? thanks again Cleaning up ifupdown...done. Deactivating swap...umount: none: not found umount: /tmp: must be superuser to umount Not superuser. done. Unmounting local filesystems...umount: none: not found umount: /tmp: must be superuser to umount umount: /dev/hdv1: not found umount: /: must be superuser to umount Saving the System Clock time to the Hardware Clock... hwclock is unable to get I/O port access: the iopl(3) call failed. Hardware Clock updated to Fri Mar 17 07:17:18 UTC 2006. cd /vservers/$NAME/etc/ rm rc0.d/K20makedev rc0.d/K25hwclock.sh rc0.d/S30urandom rc0.d/S31umountnfs.sh rm rc0.d/S35networking rc0.d/S36ifupdown rc0.d/S40umountfs rc0.d/S90halt rc0.d/K89klogd rm rc6.d/K20makedev rc6.d/K25hwclock.sh rc6.d/S30urandom rc6.d/S31umountnfs.sh rm rc6.d/S35networking rc6.d/S36ifupdown rc6.d/S40umountfs rc6.d/S90reboot rc6.d/K89klogd rm rcS.d/S05keymap.sh rcS.d/S48console-screen.sh rcS.d/S50hwclock.sh rcS.d/S40networking rm rcS.d/S45mountnfs.sh rcS.d/S10checkroot.sh rcS.d/S02mountvirtfs rm rcS.d/S30procps.sh rcS.d/S35mountall.sh rcS.d/S36mountvirtfs rcS.d/S39ifupdown rm rcS.d/S30checkfs.sh rcS.d/S18ifupdown-clean rcS.d/S18hwclockfirst.sh rm rc2.d/S20makedev rc2.d/S11klogd hth, Daniel ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] debian guest under fedora core 4 errors messages
As I said there, it's not really a problem. If you're really concerned about that message though, see patch #4969 for a patch that will fix it. for my own technical skills what is the problem ? jean-marc ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] vyum issue
Hello, I try to use : vyum vdns61-02 -- search yum vcontext: execvp(yum): No such file or directory vyum for other vservers on the same physical machines are working. How can I trace that ? thanks ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] vyum issue
I 'v just upgraded to rpm -qa|grep vserver util-vserver-debuginfo-0.30.209-5.fc4 util-vserver-devel-0.30.210-4.fc4 util-vserver-core-0.30.210-4.fc4 util-vserver-sysv-0.30.210-4.fc4 util-vserver-lib-0.30.210-4.fc4 util-vserver-0.30.210-4.fc4 util-vserver-build-0.30.210-4.fc4 util-vserver-legacy-0.30.210-4.fc4 But vyum vsmtp2 -- search yum vlogin: execvp(): No such file or directory thanks for you help jean-marc pouchoulon wrote: Hello, I try to use : vyum vdns61-02 -- search yum vcontext: execvp(yum): No such file or directory vyum for other vservers on the same physical machines are working. How can I trace that ? thanks ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] vyum issue
any ideas ? vyum vsmtp2 -- install vim Can not find file for 'YUMCACHEDIR'; aborting jean-marc pouchoulon wrote: I 'v just upgraded to rpm -qa|grep vserver util-vserver-debuginfo-0.30.209-5.fc4 util-vserver-devel-0.30.210-4.fc4 util-vserver-core-0.30.210-4.fc4 util-vserver-sysv-0.30.210-4.fc4 util-vserver-lib-0.30.210-4.fc4 util-vserver-0.30.210-4.fc4 util-vserver-build-0.30.210-4.fc4 util-vserver-legacy-0.30.210-4.fc4 But vyum vsmtp2 -- search yum vlogin: execvp(): No such file or directory thanks for you help jean-marc pouchoulon wrote: Hello, I try to use : vyum vdns61-02 -- search yum vcontext: execvp(yum): No such file or directory vyum for other vservers on the same physical machines are working. How can I trace that ? thanks ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] lsixd error
Bonjour, Could anyone told me why lsxid seems to be broken ? ( 2.6.15 kernel fedora 4) lsxid /vservers/etab/ !!ERR!! /vservers/etab/ !!ERR!! /vservers/etab/bin !!ERR!! /vservers/etab/boot !!ERR!! /vservers/etab/dev !!ERR!! /vservers/etab/etc !!ERR!! /vservers/etab/halt !!ERR!! /vservers/etab/home !!ERR!! /vservers/etab/lib thanks in advance ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] fedora core 4 and ibm 336
Bonjour, I try to use vserver on an ibm 336 server and fedora core 4. Ibm 336 does not seem to support 2.6.14 kernel and by extension 2.6.14 vserver kernel Only 2.6.11 boots correctly. Any solution to find a vserver 2.6.11 rpm kernel ? a vserver patch to 2.6.11 ? thanks in advance. Jean-Marc ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver