Re: [Vserver] great flower page

2006-04-23 Thread Dennis Roos
ows proposes a script to > translate an old-style file to a new-style tree ? may be it already > exists ? There is a conversion script available: http://linux-vserver.org/Legacy-To-Newstyle-Config -- Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76 1097 BS Amsterdam T

Re: [Vserver] vserver distribution? (was CentOS 4(.2) utils RPM/YUM repository)

2006-02-15 Thread Dennis Roos
On 15 Feb 2006 at 16:35, Matthew Sayler wrote: > I've been thinking for some time that it would be great to tailor a > distribution especially for Linux-Vserver -- that is, an installable > ISO-imagable Linux distribution configured to lay down a very minimal > system by default. Mostly I want n

Re: [Vserver] The nano-vserver package.

2005-12-27 Thread Dennis Roos
ver designed for small memory environments" HOMEPAGE="http://matt.ucc.asn.au/dropbear/dropbear.html"; -- Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76 1097 BS Amsterdam Tel: +31 (0)20 6752060 Fax: +31 (0)20 6758429 ___ Vserver

Re: [Vserver] Re: OT: something like VServer, but for Windows platform?

2005-12-07 Thread Dennis Roos
really vserver like, but definately an only execution environment: www.sandboxie.com -- Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76 1097 BS Amsterdam Tel: +31 (0)20 6752060 Fax: +31 (0)20 6758429 ___ Vserver mailing list Vserver

Re: [OT][Vserver] VServer vs OpenVZ

2005-12-07 Thread Dennis Roos
n is that life is about choice... Some decide to use Linux-VServer, some decide to use OpenVZ while managers tend to go for a Virtuozzo license. Some prefer vi, some prefer joe while others can not live without emacs; a different subject, same discussion ;) Everyone has a different need

Re: [Vserver] Re: [PATCH] race condition in procfs

2005-11-29 Thread Dennis Roos
ers just running the below tar commands will take the box down. On another side note ;) I remember that when running 2.4 based hosts I experienced the same type of crashes, though less frequent, but mostly on heavily loaded machines (lots of java threads and lots of open files) -- Regards, Dennis Ro

Re: [Vserver] Re: [PATCH] race condition in procfs

2005-11-29 Thread Dennis Roos
ual celeron running gentoo linux and the gentoo vserver kernel from a month orso ago, which is vs2.1.0pre5 afaik - all prior functions crashed at the same rate as well. -- Regards, Dennis Roos Network Engineer @ InTouch N.V. Middenweg 76 1097 BS Amste

Re: [Vserver] Re: Chasing kernel crashes on SMP

2005-11-28 Thread Dennis Roos
t; > > The p4 kernel crashes in the very same assembly instruction. > > > > I'm off to relate the assembly to the kernel source. I'll report as > > soon as I find something but I wanted to share this with vserver-gurus > > (it'll probably be easier to spot t

Re: [Vserver] BIND (named) and "lo" interface inside vserver

2005-11-15 Thread Dennis Roos
start or post-start and use the ip address assigned at time as nameserver. > Seems networking stack isolation in linux-vserver is not finished > yet? I don't know the answer to this one, but it seems that it is doing its job quite nicely ;) -- Regards, Dennis Roos Network Engineer @ I

RE: [Vserver] Re: Nagios 2.x on a vserver. Anyone?

2005-11-11 Thread Dennis Roos
Available APIs: compat,v11,v13,fscompat,net,oldproc,olduts ext2fs Source: e2fsprogs syscall(2) invocation: fast vserver(2) syscall#: 273/default cat /proc/virtual/82/status (Nagios host) UseCnt: 85 Tasks: 38 Flags: 00020215 BCaps: d44c04ff CCaps: 000

Re: [Vserver] Re: Nagios 2.x on a vserver. Anyone?

2005-11-11 Thread Dennis Roos
.0.1 * compile nagios * configure nagios * run nagios :) -- Regards, Dennis Roos Network Engineer @ InTouch N.V. Middenweg 76 1097 BS Amsterdam Tel: +31 (0)20 6752060 Fax: +31 (0)20 6758429 -=[Assumption is the mother of all f*ckups]=- ___ Vserv

Re: [Vserver] [SOLVED]need a point in the right direction in certain kernel networking settings

2005-09-27 Thread Dennis Roos
024 # Disable ICMP echo-request to broadcast addresses (Smurf amplifier): net.ipv4.icmp_echo_ignore_broadcasts = 1 # Enable defrag error protection: net.ipv4.icmp_ignore_bogus_error_responses = 1 # Enable time-wait assassination hazards in tcp (RFC 1337): net.ipv4.tcp_rfc1337 = 1 net.ipv4.tcp_t

Re: [Vserver] Reproducable crash of machine running 2.6.11.6-grsec-vs1.9.5

2005-09-07 Thread Dennis Roos
On Wed, 2005-09-07 at 03:12 +0200, Herbert Poetzl wrote: > On Tue, Sep 06, 2005 at 11:35:42AM +0200, Dennis Roos wrote: > > Hi, > > > > By accident I ran into a crash of the complete host (nicely reboots > > luckily), but still... I can reproduce this on the same se

[Vserver] Reproducable crash of machine running 2.6.11.6-grsec-vs1.9.5

2005-09-06 Thread Dennis Roos
.XXX.XXX.55 closed. Whah! The machine dies, and reboots -- Regards, Dennis Roos Network Engineer @ InTouch N.V. Middenweg 76 1097 BS Amsterdam Tel: +31 (0)20 6752060 Fax: +31 (0)20 6758429 -=[Assumption is the mother of all f*ckups]=- __

Re: [Vserver] Gameserver

2005-09-01 Thread Dennis Roos
gt; sideeffects when running them in a vserver guest? One of our customers run some gameservers within vservers, I am not into gaming, so I wouldn't know which ;) But beware of memory leaks due to sloppy coding ;) so prepare to limit the vservers. -- Regards, Dennis Roos Network Engine

RE: [Vserver] vserver + vlans

2005-08-18 Thread Dennis Roos
ip rule add from ${MYNET}/${SVRPFX} table ${VLAN} ip route add ${MYNET}/${SVRPFX} dev eth1.${MYVLAN} table ${VLAN} ip route add default via ${MYGW} dev eth1.${MYVLAN} table ${VLAN} -- Regards, Dennis Roos Network Engineer @ InTouch N.V. M

Re: [Vserver] Re: Conversion script for legacy config files to new config directory

2005-08-15 Thread Dennis Roos
On Sat, 2005-08-13 at 08:21 +0200, Dirk Ruediger wrote: > Hi Dennis, > > Dennis Roos wrote (some time ago): > > > > After half an hour of scripting I came up with a somewhat working > > conversion script for Linux-VServer configs to the new directory > > conf

Re: [Vserver] vserver+vlan=127.0.0.1

2005-07-13 Thread Dennis Roos
On Wed, 2005-07-13 at 12:46 +0200, Alberto Cammozzo wrote: > > Hello, > > I am setting up a vserver with vlans: each vserver one or > more dot1q vlans. So do I ;) > Seems to work fine, except that the "vserver start" insists > on giving the interface a fake 127.0.0

Re: [Vserver] Migration from legacy utils to the new version

2005-06-06 Thread Dennis Roos
On Mon, 2005-06-06 at 09:00 -0400, Benoit des Ligneris wrote: > Hello, > > We have to migrate several vservers (40) using the legacy tools > (jacques ones) to the new tools. > > Has someone done a script that kind of automate the whole process ? Well ... sort of... see if you can use the attache

Re: [Vserver] Confused by routing

2005-05-24 Thread Dennis Roos
On Tue, 2005-05-24 at 12:12 +0200, Gilles wrote: > Hello. > > > > > > > 1. How do the "users" of the gateway know their source address? > > AFAIK it is the first interface that was created when starting the > > vserver. > > > > Euh, I meant, how to set up things so that the programs (== "users")

Re: [Vserver] Confused by routing

2005-05-24 Thread Dennis Roos
On Sun, 2005-05-22 at 11:25 +0200, Gilles wrote: > Hi. > > > > > > Is it OK to have several "default" routes. > > > > yes, it _is_ okay, as long as they are bound to a source address, > > otherwise they do not make too much sense ... > > > > 1. How do the "users" of the gateway know their sou

Re: [Vserver] Gentoo Build fails

2005-04-27 Thread Dennis Roos
On Wed, 2005-04-27 at 15:14 +0200, Oliver Welter wrote: > Hi Dennis, > > >>>Could you please post the output of `emerge info`? > > > > > > > >>virtual/os-headers: 2.4.22-r1 > > > > > > > > Try updating your kernel headers > > Hmm, ok I use a 2.6 series kernel but these are 2.4 - but there

Re: [Vserver] Gentoo Build fails

2005-04-27 Thread Dennis Roos
On Wed, 2005-04-27 at 08:19 +0200, Oliver Welter wrote: > Hi Bene > > > Could you please post the output of `emerge info`? > virtual/os-headers: 2.4.22-r1 Try updating your kernel headers ___ Vserver mailing list Vserver@list.linux-vserver.org http

[Vserver] Conversion script for legacy config files to new config directory

2005-04-01 Thread Dennis Roos
Heyaz, After half an hour of scripting I came up with a somewhat working conversion script for Linux-VServer configs to the new directory configuration layout. It has been created for my specific environment, but I hope it helps someone ;) vscfg-convert.sh Description: application/shellscript

Re: [Vserver] VServer utils vlan interface problem

2005-02-24 Thread Dennis Roos
On Thu, 2005-02-24 at 14:00 +0100, Herbert Poetzl wrote: > On Thu, Feb 24, 2005 at 11:55:51AM +0100, Dennis Roos wrote: > > Heyaz, > > > > I am trying to migrate to the new configuration method of util-vserver > > (0.30.196) and have come across the following problem:

Re: [Vserver] VServer utils vlan interface problem

2005-02-24 Thread Dennis Roos
On Thu, 2005-02-24 at 14:38 +0100, Oliver Heinz wrote: > Herbert Poetzl schrieb: > > >On Thu, Feb 24, 2005 at 11:55:51AM +0100, Dennis Roos wrote: > > > > > >>Heyaz, > >> > >>I am trying to migrate to the new configuration method of util-vserve

Re: AW: [Vserver] VServer utils vlan interface problem

2005-02-24 Thread Dennis Roos
On Thu, 2005-02-24 at 12:01 +0100, [EMAIL PROTECTED] wrote: > Change content of file 'dev' to 'eth1' and add another file in same directory > called 'name' with '4000'. Thanks for the quick response; but that creates an named alias eth1:4000 It should become eth1.4000:${SVRNAME} eg: interface et

[Vserver] VServer utils vlan interface problem

2005-02-24 Thread Dennis Roos
Heyaz, I am trying to migrate to the new configuration method of util-vserver (0.30.196) and have come across the following problem: * vlan support is either broken, or changed in a way I am unable to understand (very probable as this is my first go at the new configuration method); an example:

Re: [Vserver] Little Script !

2005-01-24 Thread Dennis Roos
XXX/XX dev ethY.${MYVLAN} table ${MYVLAN} ip route add default via XXX.XXX.XXX.XXX dev ethY.{$MYVLAN} table ${MYVLAN} ip rule add from XXX.XXX.XXX.XXX/XX table ${MYVLAN} fi ;; pre-stop) ;; post-stop) ### Gentoo specifics if

Re: [Vserver] Problems with mount on bootup

2004-12-08 Thread Dennis Roos
scripts :( There are several places in init.d scripts where you have to add exit 0 before calling the scripts. -- Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76 1097 BS Amsterdam Tel: +31 (0)20 6752060 Fax: +31 (0)20 6758429 ___ Vserv

Re: [Vserver] Template server files

2004-10-27 Thread Dennis Roos
r other copy tools > handle such files, as the documentation seems to be a bit > sparse on the tools. Any enlightment on these matters will > be highly appreciated. I can't help you with that, I have no experience with these tools ;) > Best regards > Tor Rune Skoglund > [EM

Re: [Vserver] Proxy, DMZ

2004-09-29 Thread Dennis Roos
rds too, so I'd assume it is > well defined for that too, which doesn't mean > that your network hardware supports it ... 802.1Q (or vlan) is an addition to all ethernet standards (10Base*, 100Base*, 1000Base*) AFAIK, however tagging vlans on interfaces requires that all e

Re: [Vserver] hostname in the vserver and vserver name

2004-07-07 Thread Dennis Roos
NAME.conf and the vserver_hostname is set in this file by specifying a value for S_HOSTNAME="" -- Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76 1097 BS Amsterdam Tel: +31 (0)20 6752060 Fax: +31 (0)20 6758429 ___ Vserver ma

Re: [Vserver] PRoblems entering vserver an ps

2004-07-01 Thread Dennis Roos
_RAWIO CAP_NET_BROADCAST" Add "CAP_NET_RAW" to the S_CAPS... You might have to add a source interface to ping/traceroute commands eg: traceroute -i eth0:vserver3 192.168.0.1 Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76 1097 BS Amsterdam T

Re: [Vserver] the new kernel-crash

2004-06-14 Thread Dennis Roos
server as I type this ;) Kernel: 2.4.24-vs1.26 #1 Gentoo ebuild Ancient history I know... I'll see if I can obtain a newer ebuild :( -- Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76 1097 BS Amsterdam Tel: +31 (0)20 6752060

Re: [Vserver] VServer management

2004-06-07 Thread Dennis Roos
ese steps, hence the question on SNMP or alternate ways to do remote management. I prefer a trigger->reply mechanism to accomplish these tasks. However, there is an easier way to better the uptime, using the lvs way. The only issue here is keeping 2 vservers online and in-sync the latter is

Re: [Vserver] VServer management

2004-06-04 Thread Dennis Roos
nd. The configuration data, etc. - in our case - is already in the database. Maintainance can be done from a central management server. And monitoring as well... Monitoring is done via SNMP, why not do the management via SNMP as well ? That was the question I intended to ask ;) Regards, Denni

[Vserver] VServer management

2004-06-04 Thread Dennis Roos
ng to take. To make a long story short, I am wondering if someone else considers using SNMP is a worthwile approach, or perhaps people have different ideas ? Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76 1097 BS Amsterdam Tel: +31 (0)20 6752060 Fax: +3

Re: [Vserver] Documentation

2004-05-27 Thread Dennis Roos
ed from: http://vserveradmin.intouch.nl/ I'm writing these documents as I go (running/installing/administer vservers), so the number of documents is likely to grow. Even though the notes are not on the page yet, the documents are released under the Attribution-ShareAlike 2.0 license - http:

Re: [Vserver] traceroute issues

2004-05-13 Thread Dennis Roos
put and hardcoded values, but feel free to try it and don't expect too much yet ;) You can find it at: http://vserveradmin.intouch.nl/ Comments/Improvements/Flames are all welcome ;) -- Regards, Dennis Roos Network Engineer InTouch N.V. Middenweg 76

Re: [Vserver] traceroute issues

2004-05-13 Thread Dennis Roos
On Thu, 2004-05-13 at 01:17, Liam Helmer wrote: > On Wed, 2004-05-12 at 17:31, Dennis Roos wrote: > > Hi, > > Here's the problem: > > Users inside the vserver are unable to traceroute (ping works fine, due > > to the CAP_NET_RAW)... traceroute complains about the

[Vserver] traceroute issues

2004-05-12 Thread Dennis Roos
a side note, we are working on a php/ldap based vserver configuration management tool, as the only tool I am aware of is still unavailable... If anyone is interested, I'd be willing to put it online somewhere... Contact me off-list about this. -- Regards, Dennis Roos Network Engineer InTo