RE: [Vserver] Kernel 2.6.11.5 Problem

2005-04-11 Thread Ehab Heikal
I am confused, if it is stable why is the 1.9 branch called development.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Arne
Blankerts
Sent: Sunday, April 10, 2005 2:27 PM
To: vserver@list.linux-vserver.org
Subject: RE: [Vserver] Kernel 2.6.11.5 Problem


On Sun, 2005-04-10 at 12:41 +0200, Ehab Heikal wrote:
 how stable is the 2.6 branch of vserver, would you run it in a 
 production envoirnment.

Stable is very relative definition [tm]
I've been using the 2.6 branch on two production servers for quite some
time now with no known problems. Actually, it's more stable then the 2.4
version ever was for me...

CYA Arne
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] util-vserver + dietlibc ...

2005-04-11 Thread Enrico Scholz
Herbert Poetzl [EMAIL PROTECTED] writes:

  no, thanks I already figured it, the dietlibc needs
  patching as the syscall(2) for x86_64 isn't implemented
  
  .o( I wonder _what_ is running on your machine ;)
 
 I guess it was using _syscall3() instead of syscall(). Shouldn't it?

 yes, after I read your 'other' email ... this makes
 some sense ... I just wondered because I didn't know
 that it is available on x86_64 (headers)

To clearify things:

util-vserver prefers to use _syscall3() (which is called 'fast'
syscall invocation method in the ./configure output) when it is
available.  _syscall3() is often implemented with inline assembler
in asm/unistd.h.  But at least on i386, it can not be used in
combination with dynamic linking as it writes to the %ebx register
which is reserved for PIC addressing.

Therefore, most glibc kernel-headers do not provide the _syscallX()
functions overall and the 'traditional' syscall(2) must be used.



Enrico


pgphpOigxwzJp.pgp
Description: PGP signature
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] util-vserver + dietlibc ...

2005-04-11 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes:

  according to Enrico (please confirm or correct) the glibc
  has issues with the fake name resolver and is generally
  considered insecure because usually dynamically linked ...
 
  This really needs further explanation and justification.  What about
  glibc being dynamically linked (and able to load other libraries)
  makes it insecure, specifically?
 
 1. 'insecure', because the dynamical loading of libnss_* is
uncontrollable. There is no (documented??) way to disable this
loading e.g. when the chroot was entered. Executing a function which
would load an nss-library does not give any guarantee that the next
call to this function with another argument would not load another
library.

 It's not uncontrollable- just don't call NSS functions after you've
 chroot'd.

That's not possible. During the extraction phase, 'rpm' has to do
an username - uid mapping with the setup from the inside of the
chroot. So at least there, I need getpwname() after chroot().




Enrico


pgpxCsneViktQ.pgp
Description: PGP signature
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Kernel 2.6.11.5 Problem

2005-04-11 Thread Herbert Poetzl
On Mon, Apr 11, 2005 at 01:43:50PM +0200, Ehab Heikal wrote:
 I am confused, if it is stable why is the 1.9 branch called development.

probably because 'our' standards are somewhat higher,
and we prefer to call it development as long as we are not
damn sure that it is rock solid ...

(the 2.0 branch will be labeled 'stable')

HTH,
Herbert

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Arne
 Blankerts
 Sent: Sunday, April 10, 2005 2:27 PM
 To: vserver@list.linux-vserver.org
 Subject: RE: [Vserver] Kernel 2.6.11.5 Problem
 
 
 On Sun, 2005-04-10 at 12:41 +0200, Ehab Heikal wrote:
  how stable is the 2.6 branch of vserver, would you run it in a 
  production envoirnment.
 
 Stable is very relative definition [tm]
 I've been using the 2.6 branch on two production servers for quite some
 time now with no known problems. Actually, it's more stable then the 2.4
 version ever was for me...
 
 CYA Arne
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vProcunhide Error

2005-04-11 Thread Herbert Poetzl
On Mon, Apr 11, 2005 at 12:56:57PM +0200, Dennis Paulisch wrote:
 
 Hi,
 
 another Problem when I start:
 /etc/init.d/vprocunhide start
 
 I got many errors like this Ones:

you sure you are using proper tools 64bit on 64bit kernel
and 32bit on 32bit kernel?  looks the the not yet
implemented 32bit on 64bit kernel case ...

best,
Herbert

 ...
 ...
 ..
 .
 /proc/net/rt6_stats: No such file or directory
 /proc/net/ipv6_route: No such file or directory
 /proc/net/if_inet6: No such file or directory
 /proc/net/anycast6: No such file or directory
 /proc/net/sockstat6: No such file or directory
 /proc/net/snmp6: Bad address
 /proc/net/udp6: No such file or directory
 /proc/net/tcp6: No such file or directory
 /proc/net/raw6: No such file or directory
 /proc/net/mcfilter6: No such file or directory
 /proc/net/igmp6: Bad address
 /proc/net/unix: No such file or directory
 /proc/net/sockstat: No such file or directory
 /proc/net/snmp: Bad address
 /proc/net/netstat: No such file or directory
 /proc/net/route: Bad address
 /proc/net/udp: No such file or directory
 /proc/net/tcp: No such file or directory
 /proc/net/raw: No such file or directory
 /proc/net/ip_mr_cache: No such file or directory
 /proc/net/ip_mr_vif: No such file or directory
 /proc/net/mcfilter: No such file or directory
 /proc/net/igmp: Bad address
 /proc/net/rt_acct: No such file or directory
 /proc/net/rt_cache: No such file or directory
 /proc/net/arp: Bad address
 /proc/net/tr_rif: No such file or directory
 /proc/net/psched: No such file or directory
 /proc/net/dev_mcast: No such file or directory
 /proc/net/wireless: No such file or directory
 /proc/net/softnet_stat: No such file or directory
 ...
 ..
 .
 .
 
 What could i do?
 
 greetz Dennis
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Antwort: Re: [Vserver] vProcunhide Error

2005-04-11 Thread Dennis Paulisch




Hi,
yes this Problem is on the 32bit system, with 32bit kernel nothing now on
64bit.
This Test is on a Pentium III (Coppermine) System. with Suse 9.2 Kernel
2.6.11.5-vs1.9.5 with the latest Utilities.

Currently it work now... but your test.sh dropped the same error.
But now i can login into my vservers.. and can do my things

greetz,
Dennis




On Mon, Apr 11, 2005 at 12:56:57PM +0200, Dennis Paulisch wrote:

 Hi,

 another Problem when I start:
 /etc/init.d/vprocunhide start

 I got many errors like this Ones:

you sure you are using proper tools 64bit on 64bit kernel
and 32bit on 32bit kernel?  looks the the not yet
implemented 32bit on 64bit kernel case ...

best,
Herbert

 ...
 ...
 ..
 .
 /proc/net/rt6_stats: No such file or directory
 /proc/net/ipv6_route: No such file or directory
 /proc/net/if_inet6: No such file or directory
 /proc/net/anycast6: No such file or directory
 /proc/net/sockstat6: No such file or directory
 /proc/net/snmp6: Bad address
 /proc/net/udp6: No such file or directory
 /proc/net/tcp6: No such file or directory
 /proc/net/raw6: No such file or directory
 /proc/net/mcfilter6: No such file or directory
 /proc/net/igmp6: Bad address
 /proc/net/unix: No such file or directory
 /proc/net/sockstat: No such file or directory
 /proc/net/snmp: Bad address
 /proc/net/netstat: No such file or directory
 /proc/net/route: Bad address
 /proc/net/udp: No such file or directory
 /proc/net/tcp: No such file or directory
 /proc/net/raw: No such file or directory
 /proc/net/ip_mr_cache: No such file or directory
 /proc/net/ip_mr_vif: No such file or directory
 /proc/net/mcfilter: No such file or directory
 /proc/net/igmp: Bad address
 /proc/net/rt_acct: No such file or directory
 /proc/net/rt_cache: No such file or directory
 /proc/net/arp: Bad address
 /proc/net/tr_rif: No such file or directory
 /proc/net/psched: No such file or directory
 /proc/net/dev_mcast: No such file or directory
 /proc/net/wireless: No such file or directory
 /proc/net/softnet_stat: No such file or directory
 ...
 ..
 .
 .

 What could i do?

 greetz Dennis

 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Stable release for 2.6 kernel ...

2005-04-11 Thread Herbert Poetzl

Greetings Folks!

we had a longer discussion last night and we came to
the conclusion that this is the right time to start
working on a stable 2.0 release (for 2.6.x)

so while this will involve a lot of work and testing
in various places this also means that there will
be some kind of feature freeze for the 2.0 release
candidates and we would like to ask you to participate
in testing those release candidates and feed back
whatever you consider important for the stable release

we will also try to get a 'stable' release of the
alpha util-vserver done, so consider both, kernel and
tools as the upcoming 2.0 release ...

we expect first release candidates to show up in one
or two weeks, depending on the amount of immediate
feedback to the email ...

TIA,
Herbert

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Stable release for 2.6 kernel ...

2005-04-11 Thread Gregory (Grisha) Trubetskoy
Excellent! Is NG going to be part of it?
Grisha
On Mon, 11 Apr 2005, Herbert Poetzl wrote:
Greetings Folks!
we had a longer discussion last night and we came to
the conclusion that this is the right time to start
working on a stable 2.0 release (for 2.6.x)
so while this will involve a lot of work and testing
in various places this also means that there will
be some kind of feature freeze for the 2.0 release
candidates and we would like to ask you to participate
in testing those release candidates and feed back
whatever you consider important for the stable release
we will also try to get a 'stable' release of the
alpha util-vserver done, so consider both, kernel and
tools as the upcoming 2.0 release ...
we expect first release candidates to show up in one
or two weeks, depending on the amount of immediate
feedback to the email ...
TIA,
Herbert
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


RE: [Vserver] Kernel 2.6.11.5 Problem

2005-04-11 Thread Ehab Heikal
Cool now it will be called stable. 
I have one question, is virtual networking like with freevps doable? Or
is it not there yet or not planned.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ehab Heikal
Sent: Monday, April 11, 2005 1:44 PM
To: vserver@list.linux-vserver.org; [EMAIL PROTECTED]
Subject: RE: [Vserver] Kernel 2.6.11.5 Problem


I am confused, if it is stable why is the 1.9 branch called development.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Arne
Blankerts
Sent: Sunday, April 10, 2005 2:27 PM
To: vserver@list.linux-vserver.org
Subject: RE: [Vserver] Kernel 2.6.11.5 Problem


On Sun, 2005-04-10 at 12:41 +0200, Ehab Heikal wrote:
 how stable is the 2.6 branch of vserver, would you run it in a
 production envoirnment.

Stable is very relative definition [tm]
I've been using the 2.6 branch on two production servers for quite some
time now with no known problems. Actually, it's more stable then the 2.4
version ever was for me...

CYA Arne
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] util-vserver + dietlibc ...

2005-04-11 Thread Michal Ludvig
Enrico Scholz wrote:
 Herbert Poetzl [EMAIL PROTECTED] writes:
 
what if we implement the _syscall3 for all known platforms
in a proper way, and feed them back to glibc/kernel headers
as well as integrate them into dietlibc and/or util-vserver?
 
 
 The kernel (resp. projects like [1] which provide sanitized
 headers) would be the right place for such changes. But there
 will pass much time before you can rely on it. These headers
 are/should not be provided by libc implementations.

E.g. glibc.rpm from SUSE Linux 9.2 contains _syscall3() for both x86 and
amd64. I'm not sure if it was in the original glibc-2.3.3 tarball or
only added later by SUSE. Anyway this macro is unlikely to change and
could safely be in the headers, why not?

Michal Ludvig
-- 
* Personal homepage: http://www.logix.cz/michal
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver