Re: [Vserver] Host server with 2 physical interfaces

2006-05-20 Thread Herbert Poetzl
On Thu, May 18, 2006 at 03:57:47PM +0200, Jean-Michel Caricand wrote:
 Hi,
 
 I try to configure a server with 2 physical interfaces (eth0
 and eth1).
 The  host uses eth0 with IP 172.20.128.110.
 I created a vserver named vs03. It uses eth1 with IP
 194.57.88.253.
 
 On my host (debian sarge), I configure my network with :
 
 # The loopback network interface
 auto lo
 iface lo inet loopback
 
 # The primary network interface
 auto eth0
 iface eth0 inet static
   address 172.20.128.110
   netmask 255.255.255.0
   network 172.20.128.0
   broadcast 172.20.128.255
   gateway 172.20.128.254
   up ip route add 172.20.128.0/24 dev eth0 src 172.20.128.110
 table 64
   up ip route add default via 172.20.128.254 table 64
   up ip rule add from 172.20.128.0/24 table 64
   post-down ip rule delete from 172.20.128.0/24 table 64
 
 auto eth1
 iface eth1 inet static
   address 194.57.88.253
   netmask 255.255.255.0
   network 194.57.88.0
   broadcast 194.57.88.255
   up ip route add 194.57.88.0/24 dev eth1 src 194.57.88.253
 table 68
   up ip route add default via 194.57.88.254 table 68
   up ip rule add from 194.57.88.0/24 table 68
   post-down ip rule delete from 194.57.88.0/24 table 68
 
 
 When I disconnect eth1, I can ping 172.20.128.110. Why ? 

from where, and why is that unusual?

 Where I make a mistake ?

what do you want to accomplish? 
btw, it would help to have an output of the
routing and rule tables as well as the pure
addr/link setup

best,
Herbert

 
 Thank.
 
 Jean-Michel Caricand
 
 [EMAIL PROTECTED]
  
 
 Accédez au courrier électronique de La Poste : www.laposte.net ; 
 3615 LAPOSTENET (0,34 €/mn) ; tél : 08 92 68 13 50 (0,34€/mn)
 
 
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] schedule values

2006-05-20 Thread Herbert Poetzl
On Fri, May 19, 2006 at 09:34:15AM +0200, Mehdi Bennani wrote:
 Hello,
 
 I hope I wil bee more lucky with that question, I'm making it short and 
 quick!
 Is that schedule config:
 
 1
 10
 500
 200
 1000
 dummy
 
 ...equivalent to that one:
 10
 100
 500
 200
 1000
 dummy

nope, but similar ...

the first one (1/10) will add a token every 10 jiffies
the second one will add 10 tokens every 100 jiffies

now you might ask, what is the difference?

well, simple let's assume you have HZ set to 100,
and your guest is running a CPU hog, then the first
one will look like this:

 |___|___|___|___|___|___|___|___|___|___

while the second one will look more like this:
  ___
 |   |___

the total amount of 'cpu' resources given to the guest
will be the same though ...

HTH,
Herbert

 Thanks,
 Regards,
 
 
 Mehdi Bennani
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] CentOS 4.3 k2.6.9-34 is there a VServer patch for this kernel?

2006-05-20 Thread Herbert Poetzl
On Fri, May 19, 2006 at 12:31:11PM -0400, GreatOak wrote:
 Hello,
 I'm new to this group but have been using VServers for about a year
 now.

 Most of my experience has been fairly straight forward, for the
 examples and don't deviate to much. I have setup about 6 host servers
 mostly AMD based.
 
 Recently, I have been working to get this intel based system up and
 running. I can get it up and running fine, the problem is the onboard
 NIC (Marvel 88E8050) uses the sky2 module which is not included in
 k2.6.14-3. I have tried rebuilding this system with a variety of
 config changes atleast a dozen times to no avail. It wasn't till
 recently that I discovered (through googling) that the problem was
 this unsupported module in k2.6.14.

hmm, why not use a recent kernel (e.g. 2.6.16.16) which
already includes the sky2 module?

patches for linux-vserver can be found here:

http://vserver.13thfloor.at/Experimental/patch-2.6.16.16-vs2.0.2-rc20.diff
http://vserver.13thfloor.at/Experimental/patch-2.6.16.16-vs2.1.1-rc20.diff

 Now that I know... I am posting to know how I can get VServers to run
 on k2.6.9-34... OR which patch of VServers do I use to patch that
 kernel.

 I have tried using the patch for k2.6.12 and k2.6.14 ... That was not
 a good move. It compiled and lead me to false hope as it would not
 load.
 
 Thank you for you time.

HTH,
Herbert

 ~G

 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vserver build docs, and vserver docs in general

2006-05-20 Thread ADNET Ghislain




I will gladly do that if i knowed his email adress. In fact i looked at
the page but i do not see any way to contact him, now i know the name
of the author i searched on the 'hall of fame' page but this is not
spammer friendly so there is no adress :)

If you hear us Enrico ! Accept our respectfull request to switch the
css to weedpage along with our thanks for your work on this project :)

Cordialement,
Ghislain ADNET.

  
well, how about contacting Enrico and kindly asking 
him to make some other stylesheet (e.g. weedpage)
the default stylesheet? ever thought/tried that?

best,
Herbert
  



___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Re: Project Support Open Source (SOS) wanted to donation to your project

2006-05-20 Thread Herbert Poetzl
On Fri, May 19, 2006 at 07:27:30AM -0700, Bob Mutch wrote:
 Hi my name is Bob Mutch ...

Hi Bob!

 .. and I am the owner of Solutions with Service,
 a Canadian company that uses open source software products.

 I have started a project called ?Project SOS? (Support Open Source) to 
 help fund free and open source software projects.

 I would like to make a donation to your open source work 
 http://linux-vserver.org though our project.

sounds good!

 Here is the page that how the donations work.
 
 http://www.seocompany.ca/project-support-open-source.html

sounds good too ...

 There has been a post on digg.com with a few comments from open source 
 developers that have received donations already.
 
 http://digg.com/software/Company_throwing_money_at_open_source_projects

 Do you have a page where you give acknowledgement to your sponsors?

yep, it's on our wiki:

http://linux-vserver.org/Hall+Of+Fame

 Let me know!

and here is our donation page:

http://www.13thfloor.at/vserver/donate/

 Regards,
 
 Bob Mutch

TIA, and it's good to see that OS (and Free) Software
_is_ valued ...

best,
Herbert

 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
 
 SEO Company.ca
 
 519-636-6636
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Re: Project Support Open Source (SOS) wanted to donation to your project

2006-05-20 Thread Michael S. Zick
On Sat May 20 2006 17:14, Herbert Poetzl wrote:
 On Fri, May 19, 2006 at 07:27:30AM -0700, Bob Mutch wrote:
  Hi my name is Bob Mutch ...
 
 Hi Bob!
 
  .. and I am the owner of Solutions with Service,
  a Canadian company that uses open source software products.
 

And a bit of information on the source of that mail:

[EMAIL PROTECTED]:~$ makeviz bobmutch.com

Starting with domain name bobmutch.com.
Using default blacklist server list.
Search depth limit: 2
.,.1::2
Known network pairs.
64.202.189.170   bobmutch.com.
64.202.189.170   pwfwd-v01.prod.mesa1.secureserver.net.
64.202.165.120   park17.secureserver.net.
68.178.211.113   park18.secureserver.net.
64.202.167.31cns1.secureserver.net.
68.178.211.100   cns2.secureserver.net.
64.202.188.201   jomax.net.
64.202.188.208   secureserver.net.
64.202.166.11mailstore1.secureserver.net.
64.202.166.12smtp.secureserver.net.
64.202.165.120   ip-64-202-165-120.secureserver.net.
68.178.211.113   ip-68-178-211-113.ip.secureserver.net.
64.202.188.201   corpweb-v01.prod.mesa1.secureserver.net.
64.202.188.208   corpweb-v08.prod.mesa1.secureserver.net.

Checking Blacklist servers.
Checking address 64.202.189.170
Records from l2.spews.dnsbl.sorbs.net
!!! [2] Sam Talari, see http://spews.org/ask.cgi?S3214;
Checking address 64.202.165.120
Checking address 68.178.211.113
Checking address 64.202.167.31
Checking address 68.178.211.100
Checking address 64.202.188.201
Checking address 64.202.188.208
Checking address 64.202.166.11
Checking address 64.202.166.12

http://spamviz.net; makeviz.bash; v-1.3.0, 2005-msz

- - - - -

Mike
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] vserver build docs, and vserver docs in general

2006-05-20 Thread Herbert Poetzl
On Sat, May 20, 2006 at 04:35:32PM +0200, ADNET Ghislain wrote:
 Hello Herbert,
 
 As you perhaps recall from our talk on the mailling list i am trying
 to build a starter guide for people that, like me discover the great
 vserver project and wants to use it at his best. I am doing the first
 step and of course this is KERNEL config ! :)

 Perhaps you can share with me the option that are a must to have on
 the kernel, and at the contrary the ones that could lead to problems
 with vserver or with security. 

well, contrary to other kernel patches/projects, there
are no special kernel requirements and/or dangers when
configuring the kernel to your likings ...

of course, certain features require certain filesystems
as not all filesystems support xattrs or xid tagging, 
or even quota :)

 Here is the one i saw :
 
 in Block devices
 ?? Virtual Root device support 
 ??? CONFIG_BLK_DEV_VROOT:
 ???
 ??? Saying Y here will allow you to use quota/fs ioctls on a shared
 ??? partition within a virtual server without compromising security.
 
 virtual server hummm ?? :)

yep, required for secure quota support

 * Quota format v2 support
 
 not sure, quota format2 seems desirable becose of the file tagging 
 i guess

well, it's the newer quota format, but basically the
choice is yours (not really related)

 VSERVER part
 [*] Enable Legacy Kernel API (NEW)
 ¦ ¦ [ ] Show a Legacy Version ID (NEW)
 ¦ ¦ [ ] Disable Legacy Networking Kernel API
 ¦ ¦ [*] Enable Proc Security (NEW)
 ¦ ¦ [*] Enable Hard CPU Limits
 ¦ ¦ [ ] Limit the IDLE task (NEW)
 ¦ ¦ Persistent Inode Context Tagging (UID24/GID24) ---
 ¦ ¦ [ ] Tag NFSD User Auth and Files (NEW)
 ¦ ¦ [ ] VServer Debugging Code (NEW)
 
 those are the vserver choice, this seemed from the FAQ/HOW TO 
 the best trouble free choices

hmm, in general I'd opt for the 'defaults' at least if
you want 'trouble free' operation ...

 In Security options
 [ ] Enable access key retention support
 ¦ ¦ [*] Enable different security models
 ¦ ¦ [*] Socket and Networking Security Hooks
 ¦ ¦ --- Default Linux Capabilities
 ¦ ¦   BSD Secure Levels (NEW)
 
 i wondered if this is usefull too, the names of those seems 
 to permit security features that perhaps vserver uses.

no, those are unrelated, they are supposed to work, but
you have to decide if they make sense or not, and of
course you have to _use_ them :)

 IP: Virtual Server Configuration ---
 
 ths one is from the other project with a very similar name so i think
 we can say this is not usefull for vserver virtualisation warning :)
 If you have any hints about what kernel choice are mandatory, usefull
 or dangerous.. please tell me :)

hmm, it might be useful for folks using LVS (that's the
other project) and it does not clash with Linux-VServer
so for me (except for the name) it's not related

 I hope to be able to give some of my WE times to this HOW TO but the
 goal is to make it : vserver team approved as a guide to build the
 most stable vanilla install for vservers .

my general suggestion is to _first_ compile a mainline
kernel and make that work the way you like it. then
apply the Linux-VServer patch, and (re)run 

 # make oldconfig

this will explicitely ask all _new_ options and provide
the defaults too, which should work just fine, otherwise
it's a bug you'd better report :)

HTH,
Herbert

 Cordialement,
 Ghislain ADNET.
 AQUEOS.
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Re: Project Support Open Source (SOS) wanted to donation to your project

2006-05-20 Thread Michael S. Zick
On Sat May 20 2006 17:14, Herbert Poetzl wrote:
 On Fri, May 19, 2006 at 07:27:30AM -0700, Bob Mutch wrote:
  Hi my name is Bob Mutch ...
 
 Hi Bob!
 
  .. and I am the owner of Solutions with Service,
  a Canadian company that uses open source software products.
 
  I have started a project called ?Project SOS? (Support Open Source) to 
  help fund free and open source software projects.
 
  I would like to make a donation to your open source work 
  http://linux-vserver.org though our project.
 
 sounds good!
 
  Here is the page that how the donations work.
  
  http://www.seocompany.ca/project-support-open-source.html
 
 sounds good too ...
 

You might read his answer to why are you doing this question.
quoted in part:

quote
Together we came up with the name Gentoo, registered gentoo.org in 2002 
and I had some minor input into the ports type package system Robin's developed.
/quote

Unfortunately, he can't even get his facts straight:

[EMAIL PROTECTED]:~$ whois -H gentoo.org

Domain ID:D10959563-LROR
Domain Name:GENTOO.ORG
Created On:04-Oct-1999 16:08:45 UTC
Last Updated On:21-May-2005 01:52:15 UTC
Expiration Date:04-Oct-2008 16:08:45 UTC

- - - -

Mike
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver