Re: [Vserver] hostname ?

2006-07-09 Thread Gregory (Grisha) Trubetskoy
be missing something. On Fri, 7 Jul 2006, Daniel Hokka Zakrisson wrote: Gregory (Grisha) Trubetskoy wrote: Sorry if this was already asked - I searched and couldn't find anything. Recently I went from 2.6.12.4-vs2.0 to 2.6.17-vs2.0.2-rc24 on one of the machines (needed 2.6.17 because

[Vserver] hostname ?

2006-07-07 Thread Gregory (Grisha) Trubetskoy
Sorry if this was already asked - I searched and couldn't find anything. Recently I went from 2.6.12.4-vs2.0 to 2.6.17-vs2.0.2-rc24 on one of the machines (needed 2.6.17 because of a hardware issue). Inside a vserver: with 2.6.12.4-vs2.0: # hostname blah # hostname blah with

Re: [Vserver] Copy VServer

2005-12-02 Thread Gregory (Grisha) Trubetskoy
On Thu, 1 Dec 2005, Lars Hallberg wrote: Herbert Poetzl wrote: On Thu, Dec 01, 2005 at 06:50:56PM +0100, Lars Hallberg wrote: inode based backup tools will preserve the tagging (like dump/restore), other tools (like rsync or tar) have to be 'enhanced' to know about the xid tags. similar is

Re: [Vserver] loopback device inside a vserver?

2005-11-28 Thread Gregory (Grisha) Trubetskoy
On Tue, 29 Nov 2005, [ISO-8859-1] St?phane GAUTIER wrote: |-- interfaces | |-- 0 | | |-- ip | | |-- mask | | |-- name | | `-- dev | `-- 1 | |-- ip | `-- nodev Interface 1 is loopback. File ip : 127.0.0.1 touch nodev But just to clarify - I don't think you

Re: [Vserver] BIND (named) and lo interface inside vserver

2005-11-17 Thread Gregory (Grisha) Trubetskoy
On Thu, 17 Nov 2005, Herbert Poetzl wrote: I obligate to say that today I installed http://openvz.org Has anyone here looked at this openvz stuff and care to outline some architectural differences? Grisha ___ Vserver mailing list

Re: [Vserver] audit interface

2005-11-14 Thread Gregory (Grisha) Trubetskoy
regardless). Grisha On Mon, 14 Nov 2005, Serge E. Hallyn wrote: Quoting Gregory (Grisha) Trubetskoy ([EMAIL PROTECTED]): On Thu, 14 Jul 2005, Enrico Scholz wrote: [EMAIL PROTECTED] (Enrico Scholz) writes: | # auditctl -m 'foo' | Error sending user message request (Operation not permitted

Re: [Vserver] audit interface

2005-11-13 Thread Gregory (Grisha) Trubetskoy
On Thu, 14 Jul 2005, Enrico Scholz wrote: [EMAIL PROTECTED] (Enrico Scholz) writes: | # auditctl -m 'foo' | Error sending user message request (Operation not permitted) ... This gives problems on Fedora Core 4 as recent pam upgrade is using this functionality and most actions (su, cron) will

Re: [Vserver] unique uptime report per guest

2005-10-18 Thread Gregory (Grisha) Trubetskoy
On Tue, 18 Oct 2005, Chuck wrote: ok found that but now where do i put the virt_uptime flag? into what file? Most likely in /etc/vservers/vserver name/flags (one flag per line) Grisha ___ Vserver mailing list Vserver@list.linux-vserver.org

Re: [Vserver] strange ext3 corruption

2005-08-31 Thread Gregory (Grisha) Trubetskoy
Just curious - does your card have a battery and does it have write cache enabled? If you have no battery backup and write cache enabled and hard power off the server, you may see some corruption. On the other hand aacraid driver has had all kinds of problems, it was definitely unusable in

Re: [Vserver] FC4 Guest

2005-07-19 Thread Gregory (Grisha) Trubetskoy
On Tue, 19 Jul 2005, Darryl Ross wrote: Then it's a case of cleaning up the initscripts so they don't do anything with hardware and stopping programs that aren't needed (kudzu, ntpd, etc etc) inside a guest. BTW - OpenVPS does all that for FC4 (you'll need the latest snapshots for FC4

Re: [Vserver] Stopping a vserver which config dir has been deleted

2005-07-12 Thread Gregory (Grisha) Trubetskoy
Lookup the xid of the vserver (e.g. using vserver-stat), then: # vkill --xid xid -s TERM # vkill --xid xid -s KILL Grisha On Tue, 12 Jul 2005, Nicolas Costes wrote: Ahem... I made a mistake : I wanted to delete a vserver, and I just erased /etc/vserver_name. Then, when I wanted to

Re: [Vserver] Virtual Cluster Question

2005-06-25 Thread Gregory (Grisha) Trubetskoy
On Sun, 26 Jun 2005, Hans Eschler wrote: What are the possibilities of using linux-vserver virtual machines with loadbalancers. Roundrobin, direct routing or nat? We've had succesfully set up direct server return load-balancing, where vservers were on different physical machines. Direct

RE: [Vserver] solaris containers/zones

2005-06-25 Thread Gregory (Grisha) Trubetskoy
On Sat, 25 Jun 2005, Ehab Heikal wrote: Xen allows different Operating systems to run on the same server, now only linux and I think freebsd. Vserver only allows linux. The uppoint of vserver is that the kernel is shared wich means lower memory footprint. I think unification also reduces

RE: [Vserver] solaris containers/zones

2005-06-24 Thread Gregory (Grisha) Trubetskoy
On Thu, 23 Jun 2005, Gregory (Grisha) Trubetskoy wrote: This is called PR. If you read this, you'll have a better idea of what's going on here: http://www.pycon.org/data/95/pycon-20050325-1-0900-95-ike.mp3 oops, bad paste job - the link is: http://www.paulgraham.com/submarine.html grisha

RE: [Vserver] solaris containers/zones

2005-06-24 Thread Gregory (Grisha) Trubetskoy
On Fri, 24 Jun 2005, Mike Tierney wrote: As much as I like Vservers (we use them on 2 of our Production servers!!) it looks like the Xen project (open source virtual machine software) IS getting LOTS of media coverage and attention/resources from vendors (Novell, IBM, Sun, HP, Redhat, etc).

[Vserver] 2.0 question

2005-05-27 Thread Gregory (Grisha) Trubetskoy
I've been trying to follow: http://linux-vserver.org/NGNET-Testing-HOWTO with 2.6.11.10-vs2.0-rc2, but I get: # vnet -x -n -d lo vc_add_vndev: Function not implemented I must be missing something obvious :-) TIA Grisha ___ Vserver

Re: [Vserver] MySQL inside a vserver - permission denied?

2005-05-16 Thread Gregory (Grisha) Trubetskoy
On Mon, 16 May 2005, Werner Schalk wrote: # touch /var/run/mysqld/mysqld.sock # chown mysql:mysql /var/run/mysqld/mysqld.sock # ls /var/run/mysqld/mysqld.sock -la -rw-r--r-- 1 mysql mysql 0 May 26 04:11 /var/run/mysqld/mysqld.sock Just a suggestion: # chown mysql:mysql /var/run/mysqld Grisha

Re: [Vserver] cpu counters in 1.9.5

2005-05-12 Thread Gregory (Grisha) Trubetskoy
On Thu, 12 May 2005, Herbert Poetzl wrote: okay, adding the 'counters' back should not be too hard, so I take that as 'feature request' ... ... or a 'feature return' :-) Thanks, Grisha ___ Vserver mailing list Vserver@list.linux-vserver.org

[Vserver] cpu counters in 1.9.5

2005-05-11 Thread Gregory (Grisha) Trubetskoy
Has something changed in the way vs1.9.5 accounts for CPU? We've upgraded from 2.6.10-vs1.9.4 to 2.6.11.7-vs1.9.5 and in /proc/virtual/xid/sched I see: snip cpu 0: 0 0 0 cpu 1: 0 0 0 cpu 2: 0 0 0 cpu 3: 0 0 0 after having run cat /dev/zero | bzip2 /dev/null in this vserver for a while. Let

Re: [Vserver] Summary of recent improvement discussion

2005-05-04 Thread Gregory (Grisha) Trubetskoy
On Tue, 3 May 2005, Sam Vilain wrote: Bootstrapping Images The status of debootstrap and `rpmstrap' in the current utilities was briefly discussed, so that vservers of lots of different types could easily be built without installing extra utilities manually. I haven't seen

Re: [Vserver] Summary of recent improvement discussion

2005-05-04 Thread Gregory (Grisha) Trubetskoy
On Wed, 4 May 2005, Herbert Poetzl wrote: heh, how far is OpenVPS now? and what about it's 'current' targets/aims/whatever ... maybe you could give a short overview? Well... targets/aims is a big question that I've been trying to answer for a long time :-) The idea is to provide the missing

Re: [Vserver] automount anyone?

2005-04-27 Thread Gregory (Grisha) Trubetskoy
On Wed, 27 Apr 2005, Herbert Poetzl wrote: On Tue, Apr 26, 2005 at 03:31:33PM -0400, Gregory (Grisha) Trubetskoy wrote: Has anyone here tried using automount with vservers? did you try to mount the autofs 'just' inside the vserver namespace (well, that's what I would do anyways) 'just' would

Re: [Vserver] vserver application

2005-04-15 Thread Gregory (Grisha) Trubetskoy
I also like the file format - indentation as a delimiter... Very Pythonic and IOS-ish at the same time :) On Sat, 16 Apr 2005, Herbert Poetzl wrote: On Fri, Apr 15, 2005 at 03:11:24PM +0400, Peter V. Saveliev wrote: ... I did it :) Test build of RAD GNU/Linux uses vserver for regular service

Re: [Vserver] Stable release for 2.6 kernel ...

2005-04-11 Thread Gregory (Grisha) Trubetskoy
Excellent! Is NG going to be part of it? Grisha On Mon, 11 Apr 2005, Herbert Poetzl wrote: Greetings Folks! we had a longer discussion last night and we came to the conclusion that this is the right time to start working on a stable 2.0 release (for 2.6.x) so while this will involve a lot of work

Re: [Vserver] CentOs distribution

2005-04-06 Thread Gregory (Grisha) Trubetskoy
This may be somewhat off-topic, but why is it that people like centos which seems to me like REL without support. Since support is what REL is all about, wouldn't it be better to go with FC3 (soon 4) rather than a bunch of outdated software that comprises EL? What am I missing? Grisha On Mon,

Re: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Gregory (Grisha) Trubetskoy
I would also keep measurements of CPU ticks used. Since IO requires CPU cycles - is it possible that a CPU sched_hard indirectly limits IO just as well? Grisha On Fri, 1 Apr 2005, Matthew Nuzum wrote: On Thu, Mar 31, 2005 at 09:22:10PM -0600, Matthew Nuzum wrote: I think I can create a test

RE: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Gregory (Grisha) Trubetskoy
The CPU ticks are in /proc/virtual/xid/sched Grisha On Fri, 1 Apr 2005, Matthew Nuzum wrote: I would also keep measurements of CPU ticks used. Since IO requires CPU cycles - is it possible that a CPU sched_hard indirectly limits IO just as well? Grisha How do you do that? P.S. I'm still compiling

Re: [RE:] Re: [Vserver] Linux Vserver - Feature Question

2005-03-31 Thread Gregory (Grisha) Trubetskoy
There is something like this in a patch to UML developed by the Linode folks: http://www.linode.com/forums/archive/o_t/t_790/linode.com_status_update_04_06_04.html Looks like a token bucket, only for IO. It may be easier to do something like this in UML because their IO driver is a constant

Re: [Vserver] vsched

2005-03-31 Thread Gregory (Grisha) Trubetskoy
see this thread (read the whole thread, my post has some inaccuracies corrected in follow-ups) http://www.mail-archive.com/vserver@list.linux-vserver.org/msg03324.html Grisha On Fri, 1 Apr 2005, Peter V. Saveliev wrote: ... # vsched --help Usage: vsched [--xid xid]

Re: [vserver] who?

2005-03-25 Thread Gregory (Grisha) Trubetskoy
Here is a ./ link from old times: http://slashdot.org/articles/01/11/06/2034233.shtml Grisha On Fri, 25 Mar 2005, [ISO-8859-1] Benoit St-Andr? wrote: Timo M?ller a ?crit : Hi, who exactly has started the vserver Project and when? Thanx ___ Vserver

Re: [Vserver] util-vserver (becoming stable ?)

2005-03-22 Thread Gregory (Grisha) Trubetskoy
How much (balpark) does an internet connection cost? On Tue, 22 Mar 2005, Herbert Poetzl wrote: Hi Community! the util-vserver tools (which started as a rewrite of the existing tools jacques provided) did see a lot of innovative changes and overall improvements in the last year (or a little

Re: [Vserver] util-vserver (becoming stable ?)

2005-03-22 Thread Gregory (Grisha) Trubetskoy
I think OpenHosting could spare about $100/month (about half of 8 hr) - anyone else would like to pitch in? Grisha On Wed, 23 Mar 2005, Herbert Poetzl wrote: On Tue, Mar 22, 2005 at 02:24:35PM -0500, Gregory (Grisha) Trubetskoy wrote: How much (balpark) does an internet connection cost? a quick

Re: [Vserver] Linux (2.6.10) Patch Vserver (1.9.4) + Grsecurity (2.1.1-2.6.10-as2-20050124225)

2005-03-02 Thread Gregory (Grisha) Trubetskoy
On Wed, 2 Mar 2005, Herbert Poetzl wrote: kernel, is there any chance VServer patch ever will? well, actually I do not really consider linux-vserver so general that it should be on every linux box, be it my mobile phone or your favorite linux game engine it's very specific software and I guess

Re: [Vserver] Regarding Hard CPU scheduler

2005-02-25 Thread Gregory (Grisha) Trubetskoy
On Fri, 25 Feb 2005, Herbert Poetzl wrote: Speaking of token-buckets - is there a disk IO TB in the plans somewhere? I saw a reference to something like that on some UML board today... Cheers! Grisha ___ Vserver mailing list

Re: [Vserver] Fw: [Xen-devel] Tiny patch: xen and vserver

2005-02-23 Thread Gregory (Grisha) Trubetskoy
What I think would be even more interesting/useful is to run UML inside a vserver. Has anyone tried it? Grisha On Tue, 22 Feb 2005, Matt Ayres wrote: Here is a patch for Vserver to run under Xen that was posted to the Xen devel list. It might be useful for some people.

Re: [Vserver] Linux-VServer Community Fund?!

2005-02-21 Thread Gregory (Grisha) Trubetskoy
On Mon, 21 Feb 2005, Herbert Poetzl wrote: sure, as this is a new concept (basically the linux-vserver developers are all working for fun in their spare time) so nobody has really thought about that yet (input appreciated) What I've seen work great in the past is if you establish a target amount,

Re: [Vserver] Re: Linux-VServer Agenda ...

2005-02-20 Thread Gregory (Grisha) Trubetskoy
On Sun, 20 Feb 2005, Nicolas Costes wrote: You need to deeply discuss those facts with the company, and why not try to secure the vservers' future in the job contract... My english is too bad when it comes to that domain, but I can try to say it like this: I agree to work for you if you agree to

Re: [Vserver] openvps

2005-01-31 Thread Gregory (Grisha) Trubetskoy
Dimitry - OpenVPS has a mailing list- [EMAIL PROTECTED] Grisha On Fri, 28 Jan 2005, Abdrashitov Dmitry wrote: Hello! Is anybody use vserver-hosting from www.openvps.org ? I have some questions... Dmitry ___ Vserver mailing list

[Vserver] memory accounting - impossible?

2005-01-31 Thread Gregory (Grisha) Trubetskoy
I just wanted to confirm this on the list, let me know if the following statement isn't true. (I think that if true, this is something that should be well documented somewhere): There is no way to accurately account for a context's memory utilization. The values reported by vserver-stat and in

[Vserver] stopping a context with zombie

2005-01-24 Thread Gregory (Grisha) Trubetskoy
Hi - Has anyone else had trouble killing a context that has zombie processes in it? This creates an annoying situation where the context cannot be started back up because utils-vserver complain that it is running already, yet I'm not aware of a way to eliminate a zombie. This is vs 1.9.3 and

Re: next gen platform (was Re: [Vserver] VServer 2.6.9-1.9.3 uptime 63d :-))

2005-01-19 Thread Gregory (Grisha) Trubetskoy
FC3 seems pretty stable: # cat /etc/fedora-release Fedora Core release 3 (Heidelberg) # uptime 15:13:32 up 40 days, 17:59, 2 users, load average: 0.04, 0.05, 0.01 # uname -a Linux XXX 2.6.9-vs1.9.3x #11 SMP Thu Dec 9 21:10:52 EST 2004 i686 i686 i386 GNU/Linux Grisha On Wed, 19 Jan 2005, Eric

Re: next gen platform (was Re: [Vserver] VServer 2.6.9-1.9.3 uptime 63d :-))

2005-01-19 Thread Gregory (Grisha) Trubetskoy
On Wed, 19 Jan 2005, Roderick A. Anderson wrote: Jacques did a pretty good promo for Vserver on the linuxconf list and I got the impression from it he has at least one Vserver running FC3. I was going to ask him about the steps he uses to build the the FC3 vserver kernel -- plus a few other

Re: next gen platform (was Re: [Vserver] VServer 2.6.9-1.9.3 uptime 63d :-))

2005-01-19 Thread Gregory (Grisha) Trubetskoy
On Wed, 19 Jan 2005, Roderick A. Anderson wrote: I keep forgeting to check in at openvps.org I used some instructions I think you provided to build a FC1 Vserver RPM and it was smooth process. That system is a AMD K6/2 500 with 256 MBtye RAM and currently running 6 vservers ; four of them web

Re: [Vserver] Regarding Hard CPU scheduler

2005-01-13 Thread Gregory (Grisha) Trubetskoy
This thread has lots of info: http://www.mail-archive.com/vserver@list.linux-vserver.org/msg03324.html Grisha On Thu, 13 Jan 2005, shishir randive wrote: Hi , I am new to vserver , I want to know the details about the Hard CPU scheduler used by the vserver. There is a very little

Re: [Vserver] ugly unchecked capability dependency in util-vserver

2005-01-13 Thread Gregory (Grisha) Trubetskoy
On Thu, 13 Jan 2005, Herbert Poetzl wrote: On Thu, Jan 13, 2005 at 03:27:19PM +0100, Thomas Weber wrote: So I think the util-vserver package should make sure that there is capability support in the kernel before starting the vserver or else it will silently run insecure vservers! well, IMHO that

[Vserver] CAN-2004-1235 anyone?

2005-01-11 Thread Gregory (Grisha) Trubetskoy
Is this something to worry about on vs 1.9.3 kernels? http://isec.pl/vulnerabilities/isec-0021-uselib.txt I saw Fedora released an updated kernel, though the comment at the beginning of the exploit code in the link above says tested only on 2.4.x. I for one could get it to compile, though I

Re: [Vserver] Sys V IPC tracking

2004-12-28 Thread Gregory (Grisha) Trubetskoy
On Tue, 28 Dec 2004, Herbert Poetzl wrote: On Mon, Dec 27, 2004 at 02:45:12PM -0500, Gregory (Grisha) Trubetskoy wrote: Hi all, Merry XMas - Is there a simpler way to track IPC resources short of entering every context and running ipcs? It seems that context 1 can only see its own semaphores

[Vserver] Sys V IPC tracking

2004-12-27 Thread Gregory (Grisha) Trubetskoy
Hi all, Merry XMas - Is there a simpler way to track IPC resources short of entering every context and running ipcs? It seems that context 1 can only see its own semaphores/locks/etc, wouldn't it make more sense if it saw all of them? vs1.9.3 Thanks! Grisha

Re: [Vserver] Mini Howto for CPU hard limits

2004-12-20 Thread Gregory (Grisha) Trubetskoy
Another tip - put ^19 (without quotes) in the flags file to get virtualized load average. (This will probably be replaced with a word eventually in utils, but for now this works). This will make the vservers see their own load average. Originally, we were using sched_hard to peg the load on

Re: [Vserver] Next Generation Networking ...

2004-12-09 Thread Gregory (Grisha) Trubetskoy
On Thu, 9 Dec 2004, Herbert Poetzl wrote: ifconfig en0 hw ether 00:01:02:03:04:05 and it doesn't work with non-ngnet setups ... But wouldnt your solution give the same MAC to all vservers? I thought he wanted different MAC's for all vservers? nope, ngnet includes 'virtual' devices per vserver so

Re: [Vserver] Next Generation Networking ...

2004-12-07 Thread Gregory (Grisha) Trubetskoy
On Tue, 7 Dec 2004, Darryl Ross wrote: I haven't had a look to see how you're doing the network stuff, but does it support (or will it support) the ability to set the ethernet MAC address for the virtual interface inside a vserver? AFAIK the decision on whether to accept a packet destined for a

[Vserver] bypass xid enforcement flag?

2004-12-02 Thread Gregory (Grisha) Trubetskoy
Is there a flag that can be set that ignores persistent xids and allows a context to access files which are set to xids other than 0 or itself? (this is vs 1.9.3) Thanks! Grisha ___ Vserver mailing list [EMAIL PROTECTED]

Re: [Vserver] cpu limits clone vservers

2004-11-24 Thread Gregory (Grisha) Trubetskoy
On Wed, 24 Nov 2004, Herbert Poetzl wrote: Then, if you are a fat jabba, maybe you might end up getting rescheduled instead of getting more memory whenever you want it! thought about a simpler approach, with a TB for the actual page-ins, so that every page-in will consume a token, and you get a

Re: [Vserver] cpu limits clone vservers

2004-11-23 Thread Gregory (Grisha) Trubetskoy
On Tue, 23 Nov 2004, Andreea Gansac wrote: [EMAIL PROTECTED] util-vserver]# vlimit -c 49168 --cpu 30 vc_set_rlimit(): Success If I run a process that does only while(1){} inside the vserver, the cpu is used only 25%-30%. If I'm not mistaken, this simply sets the cpu time to

Re: [Vserver] cpu limits clone vservers

2004-11-23 Thread Gregory (Grisha) Trubetskoy
On Tue, 23 Nov 2004, [iso-8859-1] J?rn Engel wrote: What most people want in plain English: o Every user gets some guaranteed lower bound. o Sum of lower bounds doesn't exceed total resources. o Most of the time, not all resources get consumed. Add them to the 'leftover' pool. o Users that

Re: [Vserver] 1.9.3 kernel rpm

2004-11-21 Thread Gregory (Grisha) Trubetskoy
On Sat, 20 Nov 2004, Herbert Poetzl wrote: hmm, just discovered that CONFIG_INOXID_INTERN is broken in 1.9.3 so it will probably not work at all ... Do you have more details on this? It seems to work OK here. Grisha ___ Vserver mailing list [EMAIL

[Vserver] 1.9.3 kernel rpm

2004-11-18 Thread Gregory (Grisha) Trubetskoy
there is a 2.6.9 vs 1.9.3 kernel RPM here, if you're interested: http://www.openvps.org/dist/misc/kernel-2.6.9vs1.9.3-1.i386.rpm it was built using the config that comes with FC3 rpm, but without any redhat patches. so it's large and it's got more modules compiled than there are stars in the

Re: [Vserver] Best backup of tagxid?

2004-11-09 Thread Gregory (Grisha) Trubetskoy
On Tue, 9 Nov 2004, [ISO-8859-1] Bj?rn Steinbrink wrote: On Tue, 9 Nov 2004 12:56:32 -0500 (EST) Gregory (Grisha) Trubetskoy [EMAIL PROTECTED] wrote: On Tue, 9 Nov 2004, [ISO-8859-1] Bj?rn Steinbrink wrote: On Tue, 9 Nov 2004 12:01:33 -0500 (EST) Gregory (Grisha) Trubetskoy [EMAIL PROTECTED] wrote

Re[2]: [Vserver] Plesk 7

2004-11-01 Thread Gregory (Grisha) Trubetskoy
On Mon, 1 Nov 2004, vs-technik wrote: GGT Not with SMP, redundant power supplies and SCSI hardware RAID. Cheap GGT dedicated servers are completely worthless IMHO, too bad most people GGT don't understand it. oh no! this is (only) a faith-question. we use (for all hosting-solutions) _cheap_

[Vserver] Memory limits

2004-10-27 Thread Gregory (Grisha) Trubetskoy
I haven't seen memory discussed on this list for a while :-) I see that there are limits listed in the /proc/virtual/XXX/limits file, but I couldn't find any documentation on what they mean and how to set them. I'm especially curious about the RSS limit. I _think_ I've seen mentions that the

Re: [Vserver] Template server files

2004-10-24 Thread Gregory (Grisha) Trubetskoy
Here is what we do in OpenVPS. This is Fedora biased. I think the utils strategy is copy-everything-then-unify, whereas we stuck to hardlink-as-you-copy-then-leave-it-alone. Either strategy is fine, it probably more depends on what you're doing. In our case the vserver is intended to passed to

Re: [Vserver] Replication

2004-10-21 Thread Gregory (Grisha) Trubetskoy
On Thu, 21 Oct 2004, Thomas Hug wrote: Hi On Wed, 20 Oct 2004 11:20, David MacKinnon wrote: It's also a bit more cpu intensive than drbd. This may or may not be a concern for you. On the 1.9.x vserver this can be addressed with vsched. I've been able to make it work pretty well and plan on

[Vserver] quick vsched howto

2004-10-21 Thread Gregory (Grisha) Trubetskoy
As promised, here are my vsched findings. My set up is util-vserver 0.30.195 and vs 1.9.3. The token-bucket scheduler principle is pretty well explained here: http://www.linux-vserver.org/index.php?page=Linux-VServer-Paper-06 vsched takes the following arguments: --fill-rate The

Re: [Vserver] quick vsched howto

2004-10-21 Thread Gregory (Grisha) Trubetskoy
On Thu, 21 Oct 2004, Herbert Poetzl wrote: yes, this is if the hard scheduler is actually enabled That's one I forgot to mention - none of this has any visible effect (and by that I mean inability to drive the load to 30) unless sched_hard flag is set. So the pacing example should really be:

Re: [Vserver] quick vsched howto

2004-10-21 Thread Gregory (Grisha) Trubetskoy
On Fri, 22 Oct 2004, Sam Vilain wrote: Gregory (Grisha) Trubetskoy wrote: On Thu, 21 Oct 2004, Herbert Poetzl wrote: yes, this is if the hard scheduler is actually enabled That's one I forgot to mention - none of this has any visible effect (and by that I mean inability to drive the load to 30

Re: [Vserver] [PATCH] immulink ioctl is not available on vs1.9.3-rc2, even with CONFIG_VSERVER_LEGACY

2004-10-19 Thread Gregory (Grisha) Trubetskoy
On Tue, 19 Oct 2004, Herbert Poetzl wrote: already in 2.6.9-final-vs1.9.3-rc4 ;) What's the URL to get the patches these days? The stuff on the site is 1.9.1. Thanks, Grisha ___ Vserver mailing list [EMAIL PROTECTED]

Re: [Vserver] bind mounts within a vserver?

2004-10-15 Thread Gregory (Grisha) Trubetskoy
On Fri, 17 Sep 2004, Herbert Poetzl wrote: On Thu, Sep 16, 2004 at 10:29:52PM -0400, Gregory (Grisha) Trubetskoy wrote: Is it possible to somehow use mount --bind from within a vserver? (vs1.28). not in a secure way with the 2.4 stable branch, but it is with recent 2.6 (vs1.9.x) devel branch

[Vserver] ping without cap_net_raw in 1.9.3 - how?

2004-10-14 Thread Gregory (Grisha) Trubetskoy
I noticed that in vs 1.9.3 ping appears to work even without CAP_NET_RAW (This is Fedora Core 2). Just curious, how's this possible? Thanks! Grisha ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] Bringing down vsever brings down _all_ interfaces

2004-10-12 Thread Gregory (Grisha) Trubetskoy
I had something similar happen, but then it turned out the problem was with my config. I figured it out by inserting an occasional echo statement into /usr/local/lib/util-vserver/vserver.functions (disableInterfaces() is the func you'd probably be most interested in) to see what 'ip' commands

[Vserver] interfaces show ip addresses?

2004-10-06 Thread Gregory (Grisha) Trubetskoy
In vs 1.9.3 I noticed that ifconfig from within a vserver shows the inet addr of eth0 and lo (in 1.2x it did not) - is this the way it's supposed to be, or am I missing a configuration option of some kind? Thanks! Grisha ___ Vserver mailing list

Re: [Vserver] interfaces show ip addresses?

2004-10-06 Thread Gregory (Grisha) Trubetskoy
Strange... after a reboot it behaves differently - pretty much gives me what I need - hide the IP of eth0, but show the vserver IP. Before it would hide all interfaces sompletely. Not sure what happened there... Grisha On Wed, 6 Oct 2004, Gregory (Grisha) Trubetskoy wrote: On Wed, 6 Oct 2004

Re: [Vserver] interfaces show ip addresses?

2004-10-06 Thread Gregory (Grisha) Trubetskoy
) Thanks, Grisha On Wed, 6 Oct 2004, Herbert Poetzl wrote: On Wed, Oct 06, 2004 at 04:28:03PM -0400, Gregory (Grisha) Trubetskoy wrote: In vs 1.9.3 I noticed that ifconfig from within a vserver shows the inet addr of eth0 and lo (in 1.2x it did not) - is this the way it's supposed to be, or am I missing

[Vserver] vdlimit question

2004-10-05 Thread Gregory (Grisha) Trubetskoy
Hello - this is vdlimit 0.01, linux 2.6.8.1, vs 1.9.2. I'm not sure vdlimit is supposed to behave this way, or am I missing something (as is not unusual): # df -k Filesystem 1K-blocks Used Available Use% Mounted on /dev/hda5 26193716 18202564 6660572 74% /

[Vserver] 2.6 kernel and links to immutable files

2004-10-04 Thread Gregory (Grisha) Trubetskoy
I noticed that in 2.6 kernel you cannot create (hard) links to immutable files. So if I am trying to build a unified server, is my only option to remove the immutable flag temporarily while I link to it? This seems insecure. Or am I missing something obvious? Has anyone else ran into this?

Re: [Vserver] Announcing the OpenVPS ISO (first stab)

2004-10-01 Thread Gregory (Grisha) Trubetskoy
On Thu, 30 Sep 2004, Herbert Poetzl wrote: The (very basic so far) instructions on how to use it and the link to the ISO itself are here: http://www.openvps.org/Plone/download/ISO b) 2.4.27 and vs1.29 are out ... how hard is an update? is it planned in the near future or will this take some

Re: [Vserver] Announcing the OpenVPS ISO (first stab)

2004-09-30 Thread Gregory (Grisha) Trubetskoy
On Thu, 30 Sep 2004, Matt Nuzum wrote: Cool. Could you please detail on the documentation website what happens during this stage: from http://www.openvps.org/Plone/download/ISO You also will need internet access at this point as the buildref process pulls a few RPM's from the openvps.org site. I

Re: [Vserver] bind mounts within a vserver?

2004-09-17 Thread Gregory (Grisha) Trubetskoy
On Fri, 17 Sep 2004, Herbert Poetzl wrote: On Thu, Sep 16, 2004 at 10:29:52PM -0400, Gregory (Grisha) Trubetskoy wrote: Is it possible to somehow use mount --bind from within a vserver? (vs1.28). not in a secure way with the 2.4 stable branch, but it is with recent 2.6 (vs1.9.x) devel branch

[Vserver] bind mounts within a vserver?

2004-09-16 Thread Gregory (Grisha) Trubetskoy
Is it possible to somehow use mount --bind from within a vserver? (vs1.28). Grisha ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] vserver 2.4.26-vs1.28 kernel rpm howto

2004-08-27 Thread Gregory (Grisha) Trubetskoy
If anyone is interested, here is how I was able to build a vs kernel RPM: http://www.openvps.org/Plone/docs/developer/kernelrpm (BTW - anyone feel free to copy this to copy this to the VServer wiki if you feel its appropriate) Grisha ___ Vserver

Re: [Vserver] ipt_owner patch fo vserver

2004-08-05 Thread Gregory (Grisha) Trubetskoy
Any chance that this will get rolled in to 1.29? This could be very useful when you have a back-end network that you do not vservers to have access to... Grisha On Fri, 30 Jul 2004, Herbert Poetzl wrote: On Fri, Jul 30, 2004 at 04:28:02PM +0200, Pavel Semerad wrote: Hello, I am long time using

Re: [Vserver] Problems with Per Context Disk Limis

2004-08-02 Thread Gregory (Grisha) Trubetskoy
Here is a Python version of a similar thing: http://www.openvps.org/cvs/viewcvs.cgi/oh-host/scripts/ohdisk?rev=1.2content-type=text/vnd.viewcvs-markup This isn't really a standalone script because it relies on some other libs to enumerate vservers, but nonetheless, could be interesting for

Re: [Vserver] Lycos goes Linux-VServer ...

2004-07-29 Thread Gregory (Grisha) Trubetskoy
On Tue, 27 Jul 2004, Herbert Poetzl wrote: PR Now you can! Lycos (Europe) has started their VDS beta testing program, which is 100% bleeding edge Linux-VServer Technology (vs1.9.2.10 exp. kernel) /PR Is there a URL? :-) Grisha ___ Vserver mailing list

Re: [Vserver] util-vserver docs

2004-06-17 Thread Gregory (Grisha) Trubetskoy
I actually think that in the ideal world the building of the vserver should be outside the scope of the vserver project anyway, and should be something that the people in charge of distributions should be providing. My $0.02 Grisha On Thu, 17 Jun 2004, Bernhard Duebi wrote: On Thu,

[Vserver] the new kernel-crash

2004-06-14 Thread Gregory (Grisha) Trubetskoy
http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html Anyone tested this from within a vserver? I'm not near a computer that I could try this on. Grisha ___ Vserver mailing list [EMAIL PROTECTED]

[Vserver] lock flag question

2004-06-09 Thread Gregory (Grisha) Trubetskoy
What does the lock flag do? It seems that requesting another context from within a context is impossible anyway? Grisha ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] new utils configuration

2004-06-08 Thread Gregory (Grisha) Trubetskoy
I've been looking at the documentation for the new utils (nice stylesheet, btw), and it looks like there is a shift from using a single config file describing a vserver to a hierarchy of files (kinda reminds me of qmail)... Just curious - what was the rationale for this shift? Thanks! Grisha

Re: [Vserver] hostname in hosts

2004-06-08 Thread Gregory (Grisha) Trubetskoy
Does your apache config have a Listen directive, and if so, what is it? When Listen does not specify an IP address (e.g. Listen 80), apache should bind to 0.0.0.0, which doesn't have much to do with the hostname AFAIK. If you're using Apache 1.3, then also check the BindAddress directive.

Re: [Vserver] VServer management

2004-06-04 Thread Gregory (Grisha) Trubetskoy
IMHO snmp is very complex by design and as a consequence of that is a significant security threat. If I was a potential customer of your and you insisted that I must run snmpd in my server, I'd balk. There are probably ways to accomplish anything you do via snmp by other means. E.g. to count

Re: [Vserver] grsecurity ending

2004-06-03 Thread Gregory (Grisha) Trubetskoy
On Tue, 1 Jun 2004, Herbert Poetzl wrote: currently I have _no_ sponsor sending money, and, although I would _love_ to spend all my time doing linux-vserver, I have to _work_ to earn the money to buy food and pay for shelter, connectivity and clothing ... Well - having been in this boat

Re: [Vserver] unixbench results: vanilla/1.9.1 host/1.9.1 vserver

2004-05-21 Thread Gregory (Grisha) Trubetskoy
Thanks, Ryan! It'd be interesting to see numbers for the same test on the same machine but using User-Mode Linux... :-) Grisha On Sat, 22 May 2004, Herbert Poetzl wrote: On Fri, May 21, 2004 at 11:19:26PM +, [EMAIL PROTECTED] wrote: Just FYI... thanks for checking this for us ...

Re: [Vserver] Immutable files and chattr

2004-05-14 Thread Gregory (Grisha) Trubetskoy
: On Fri, May 14, 2004 at 05:12:34PM -0400, Gregory (Grisha) Trubetskoy wrote: It looks like the attributes that do not require CAP_LINUX_IMMUTABLE (i.e. anything except IMMUTABLE_[FILE|LINK]FL and APPEND_FL) can by modified by root from within a vserver: ]# vserver grisha enter ipv4root

[Vserver] Capability suid ?

2004-05-13 Thread Gregory (Grisha) Trubetskoy
Has there been any discussion of having a feature whereby a binary would be executed with higher capabilities automatically? Something like having a config file of some sort in the main server that lists a binary, its timestamp, size, an MD5/SHA hash and the capability. Whenever this binary

Re: [Vserver] vserver service command

2004-05-07 Thread Gregory (Grisha) Trubetskoy
On Fri, 7 May 2004, Bjoern Steinbrink wrote: The vserver script just calls itself with 'exec /sbin/service' instead of 'service' so that option really just saves a few keystrokes, that's all, you could also just use the exec call directly. This is a bit on a different topic, but I just

[Vserver] Re: /etc/hosts

2004-04-15 Thread Gregory (Grisha) Trubetskoy
nevermind, I think I found the problem :-) On Thu, 15 Apr 2004, Gregory (Grisha) Trubetskoy wrote: I may be missing something obvious, if so forgive me: For some reason all my vservers resolve names using the main server's /etc/hosts, not their own This OS is Fedora C1 (both inside

Re: [Vserver] util-vserver -- future directions

2004-04-08 Thread Gregory (Grisha) Trubetskoy
On Thu, 8 Apr 2004, Liam Helmer wrote: I actually looked, for quite a long time, to try and find something that was similar to the freebsd (?) union mount, or else the uml copy-on-write system. I haven't found anything that works well yet. So, instead of that, I worked with the existing

Re: [Vserver] util-vserver -- future directions

2004-04-07 Thread Gregory (Grisha) Trubetskoy
Am I missing something - you're mounting things that are in the shadow server via --bind - but doesn't this mean that if one of the vservers unlinks the file in a directory mounted this way, it will be gone for all other vservers? BTW, I really wish Linux had something like the FreeBSD unionfs.

[Vserver] ctx disk limits and inodes

2004-04-02 Thread Gregory (Grisha) Trubetskoy
I've got a vserver that keeps running out of inodes. from the vserver root dir, find . | wc -l shows 42287. but df -i from within vserver shows: df -i FilesystemInodes IUsed IFree IUse% Mounted on /dev/hdv1 20 105933 94067 53% / 105933 - 42287 = 63646

Re: [Vserver] FreeVPS 1.3 features announce

2004-04-02 Thread Gregory (Grisha) Trubetskoy
It looks to me as if FreeVPS is somehow trying to compete with VServer by keeping its own fork of the project. What is the reason for that? Why not work on incorporating all these features into VServer? Grisha On Thu, 1 Apr 2004, Alexander Suvorov wrote: Dear coleagues! Let us to announce

Re: [Vserver] FreeVPS 1.3 features announce

2004-04-02 Thread Gregory (Grisha) Trubetskoy
[I can translate the russian below if someone needs it, it's more than I need to know :-)] Anyway - I find the features that FreeVPS describes cool, especially since we use VServer for commercial hosting I could really use them, but I do not like the idea of having to use a specific kernel, and

[Vserver] [RESOLVED] Re: sshd weirdness: PAM session setup failed[6]: Permission denied

2004-03-30 Thread Gregory (Grisha) Trubetskoy
bug?) So the solution is either: 1. not to use S_NICE 2. comment out pam_limits.so from both /etc/pam.d/sshd and /etc/pam.d/system-auth Grisha On Mon, 8 Mar 2004, Gregory (Grisha) Trubetskoy wrote: I saw this posting earlier on: http://www.paul.sladen.org/vserver/archives/200309/0176

  1   2   >