Re: [Vserver] hrm... another odd thing.. /dev/initctl?

2003-11-17 Thread Enrico Scholz
[EMAIL PROTECTED] (Allen D. Parker II) writes: I'm no programmer, but I do believe, it would be pretty nice if the owner of a context (fake root user) could halt/reboot *their* vserver via /sbin/init, /sbin/reboot or /sbin/halt. It'd be nice to have a way to pass messages *securely* back to

Re: [Vserver] [Announcement] util-vserver 0.25

2003-11-19 Thread Enrico Scholz
[EMAIL PROTECTED] (Christian Mayrhuber) writes: ln -sf '/lib/modules/2.4.22-c17h-xfs/build/include/linux/virtual.h' 'linuxvirtual.h' test -e 'linuxvirtual.h' || \ ln -sf './lib/virtual.h' 'linuxvirtual.h' ... In file included from lib/syscall_rlimit.c:29:

[Vserver] [Announcement] util-vserver 0.26

2003-11-21 Thread Enrico Scholz
Hello, I just released version 0.26 of util-vserver which can be downloaded at http://savannah.nongnu.org/files/?group=util-vserver It is mainly a bugfix release; the new items in detail are: * BUGFIX: uninitialized variables in 'ifspec' were fixed and error-messages will be given

Re: [Vserver] vrpm code questions

2003-11-24 Thread Enrico Scholz
[EMAIL PROTECTED] (Bert De Vuyst) writes: After looking at the code of tool vrpm (part of vserver and util-vserver), I have some questions. 1. The location of /vservers is hardcoded in this tool. Not in util-vserver. In stable branch, this value is set at ./configure time. In alpha branch,

Re: [Vserver] vrpm code questions

2003-11-24 Thread Enrico Scholz
[EMAIL PROTECTED] (Bert De Vuyst) writes: No, 'vrpm' creates a new context without doing any ip configuration. OK. I was looking at the vrpm code to see if I could make a vapt-get utility for debian. alpha branch has a vapt-get for Red Hat based systems. It runs in host ctx and calls the

[Vserver] chroot(safe) issues

2003-11-25 Thread Enrico Scholz
Hello, on IRC two days ago we had a discussion about secure chroot() implementation. To make it short: it does not exist a such one. The details: the problem of current chroot(2) is that this syscall is not stackable -- on every new chroot(2) invocation the dead zone will be set to a new value

Re: [Vserver] My patches are now online

2003-12-12 Thread Enrico Scholz
[EMAIL PROTECTED] (Jonathan Sambrook) writes: http://jonathan.dsvr.co.uk/kernel Enrico: Likewise, but I've not looked at your stuff yet... WOuld you be interested? (Once Savannah gets back up again.) util-vserver provides a library (libvserver.a) which can be used for tasks

Re: [Vserver] util-vserver: compile problem with dietlibc

2003-12-13 Thread Enrico Scholz
[EMAIL PROTECTED] (Bodo Eggert) writes: dietlibc doesn't define uint64_t if __STRICT_ANSI__ is set, and -std=c99 defines __STRICT_ANSI__. Reported several times to [EMAIL PROTECTED] but not fixed yet :( Btw, same happens with 'inline'. To compile it, I had to add -U __STRICT_ANSI__ after

[Vserver] [Announcement] util-vserver 0.27

2003-12-30 Thread Enrico Scholz
Hello, to finish some pending tasks of this year, I just released version 0.27 of util-vserver. It can be found at an interim place at http://www.tu-chemnitz.de/~ensc/util-vserver/ When savannah's functionality is recovered entirely, it will be uploaded to the known page at

Re: [Vserver] S_START/S_STOP

2004-01-23 Thread Enrico Scholz
[EMAIL PROTECTED] (Erik Smit) writes: Most of my vservers are actually chrooted services (apache/mysqld/etc.) which don't use runlevels or /sbin/init so I've changed the following in util-vserver 0.27: Thx, will be in 0.28; please try the release candidate at

[Vserver] [Announcement] util-vserver 0.28

2004-01-29 Thread Enrico Scholz
Hello, I uploaded version 0.28 of util-vserver to http://www.tu-chemnitz.de/~ensc/util-vserver/ Its changes are - BUGFIX: fixed context creation when both fakeinit-flag and a static context is wanted; previous versions ignored the fakeinit flag in this situation

Re: [Vserver] Re: testing on vs0.06 for 2.6.2rc2

2004-01-29 Thread Enrico Scholz
[EMAIL PROTECTED] (Matthew Excell) writes: On Wed, 2004-01-28 at 02:39, Enrico Scholz wrote: [EMAIL PROTECTED] (Matthew Excell) writes: Seems to be the root of all evil... 'ps' (used by vps) and alpha vserver-stat are accessing (and requiring) /proc/uptime which is not visibly by default

Re: [Vserver] Re: testing on vs0.06 for 2.6.2rc2

2004-01-29 Thread Enrico Scholz
[ Sorry, last mail went out before being finished; when I would have a dog I could say my dog went over the keyboard but unfortunately I do not have a dog and no excuse therefore ] [EMAIL PROTECTED] (Enrico Scholz) writes: I couldn't think of any huge security holes that would create

Re: [Vserver] Development 1.3.6

2004-02-01 Thread Enrico Scholz
[EMAIL PROTECTED] (James Noble) writes: Hello, trying vserver 1.3.6 on fedora, mostly went well, however, after running newvserver, (all looked like it worked) i tried: Strange... you are using the alpha branch which should not have 'newvserver' anymore... FYI, when you have a broadband

Re: [Vserver] problem with 2.6.2-rc2-vs0.06 and vserver-utils-0.28.190

2004-02-02 Thread Enrico Scholz
[EMAIL PROTECTED] (Andreas Schultz) writes: ++ /usr/sbin/chbind --silent --ip 10.0.0.244/24 --ip 192.168.2.103/24 /usr/lib/util-vserver/exec-ulimit /etc/vservers/db01/ulimits /usr/sbin/chcontext --silent --flag lock --flag nproc --cap CAP_NET_RAW --secure --hostname db01-dev.tpip.net

Re: [Vserver] [Release] Stable vs1.25 Security Update

2004-02-06 Thread Enrico Scholz
[EMAIL PROTECTED] (Alex Lyashkov) writes: And chmod obviously fails. Proper fix should probably check exact inode of /vservers/ dir and protect only this one particular inode. Proper fix - use separated disknamespace for each vserver. Do you have working code for that? I already tried |

Re: [Vserver] Analyze root-exploit with 1.26 and util 0.28

2004-02-09 Thread Enrico Scholz
[EMAIL PROTECTED] (Michael Hilscher) writes: chmod +t /vservers exploid dont work anymore. But on the other hand, i cant create a new vserver anymore: vserver beta build cp: cannot create hard link `/vservers/beta/./sbin/e2fsck' to `/vservers/beta/./sbin/fsck.ext3': Operation not permitted

[Vserver] [Announcement] util-vserver 0.29

2004-02-11 Thread Enrico Scholz
Hello, I uploaded version 0.29 of util-vserver to http://www.tu-chemnitz.de/~ensc/util-vserver/ The changes in this release are minimal and mainly caused by the new barrier behavior: - further compilation fixes - adapted the 'vserver ... build' command to the new barrier

Re: AW: [Vserver] still problems with util-vserver 0.26

2004-02-19 Thread Enrico Scholz
[EMAIL PROTECTED] writes: The /vserver filesystem, where the images reside was mounted as reiserfs. After changing it to ext2 (or ext3) I can start the vservers without problems. So it seems like reiserfs doesn't work with the util-vserver 0.26. Have you tested 0.27 and 0.28 already? Are

Re: [Vserver] util-vserver tools - 16 ip address limit

2004-02-19 Thread Enrico Scholz
[EMAIL PROTECTED] (Kevin Gray) writes: We've been using Jacques vserver tools for quite some time, but would like to move to the util-vserver tools. We can successfully modify Jacques tools to allow for more than 16 ip addresses, but have not been successful with the util-vserver tools.

Re: [Vserver] util-vserver tools - 16 ip address limit

2004-02-19 Thread Enrico Scholz
[EMAIL PROTECTED] (Enrico Scholz) writes: [EMAIL PROTECTED] (Kevin Gray) writes: We've been using Jacques vserver tools for quite some time, but would like to move to the util-vserver tools. We can successfully modify Jacques tools to allow for more than 16 ip addresses, but have not been

Re: [Vserver] Vunify error util-vserver-0.29.192

2004-02-20 Thread Enrico Scholz
[EMAIL PROTECTED] (Dan Winfield) writes: I am running 2.4.24 vs 1.26 debian. I have installed the tools util-vserver-0.29.192 and am trying to get the new vunify running. Have followed the instructions on http://www.linux-vserver.org/index.php?page=alpha+util-vserver When I run vunify I get

Re: AW: AW: [Vserver] still problems with util-vserver 0.26

2004-02-20 Thread Enrico Scholz
[EMAIL PROTECTED] writes: sh -x ./vserver VSLPFRA1 stop: + /DBA/users/lang72/UTIL/sbin/chbind --ip 145.228.183.185 --bcast 145.228.205.255 /DBA/users/lang72/UTIL/sbin/chcontext --cap CAP_NET_RAW --secure --ctx 49153 /DBA/users/lang72/UTIL/lib/util-vserver/capchroot . /sbin/init 6 ipv4root

Re: [Vserver] Vunify error util-vserver-0.29.192

2004-02-23 Thread Enrico Scholz
[EMAIL PROTECTED] (Dan Winfield) writes: | # vserver foo build -m skeleton --hostname foo --netdev eth0 | --interface 10.1.2.3/20 --context 42 Managed to create a vserver using this command. Used debootstrap. This put all config into /usr/local/etc/vservers and not /etc/vservers as

Re: [Vserver] Support with chroot problem

2004-03-03 Thread Enrico Scholz
[EMAIL PROTECTED] (Bodo Eggert) writes: I observerd the same on SuSE9.0. Therefore, i just used the binaries built in a Suse8.2 environment hoping that this works as well. So far it does. But of course i am interested in a 'clean' solution, i.e. the vserver-utils compiled with gcc 3.3.1 on

Re: [Vserver] Error compiling util-vserver 0.29.2

2004-03-04 Thread Enrico Scholz
Micah Anderson [EMAIL PROTECTED] writes: This seems to compile ok! However, there are some ANSI warnings at the beginning. Just ignore them... util-vserver is C99 (and compiles without warnings there). Pre-C99 compilers might give some warnings but they should compile it. Enrico

Re: [Vserver] Can't chroot Operation not permitted and other stuff

2004-03-18 Thread Enrico Scholz
[EMAIL PROTECTED] (Thomas Guettler) writes: If you use --cap CAP_NET_RAW with chcontext chroot is not possible. I know about miscompilations with SuSE 9 (gcc 3.3.1). Can you try the '-O0' flag and see if problem still exists? - util-vserver-0.29.3/NEWS: Version 0.30 -- What is it?

Re: [Vserver] Defaults Caps of chcontext and whish list

2004-03-18 Thread Enrico Scholz
[EMAIL PROTECTED] (Thomas Guettler) writes: - Introduction at http://dns.solucorp.qc.ca/miscprj/s_context.hc has some old parts. - newvserver does not exist (I think you use vserver foo build now) You need the -linuxconf subpackage; but it is deprecated. - Is there a tool

Re: [Vserver] proc not mounted and other suggestions

2004-03-19 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: vproc was an experimental tool, and should by now be replaced by setattr (from util-vserver), enrico, please confirm ... True for alpha branch, false for stable... Enrico ___ Vserver mailing list [EMAIL

Re: [Vserver] /proc must be mounted error

2004-03-19 Thread Enrico Scholz
[EMAIL PROTECTED] (Christian Jung) writes: Error: /proc must be mounted ... The System is a debian. Kernel 2.6.3 + vserver patch-2.6.3-vs0.09.diff Since you are using the experimental kernel patch, you can try the alpha branch of util-vserver:

Re: [Vserver] /proc must be mounted error

2004-03-22 Thread Enrico Scholz
[EMAIL PROTECTED] (Gregory (Grisha) Trubetskoy) writes: http://savannah.nongnu.org/cgi-bin/viewcvs/util-vserver/util-vserver/distrib/misc/vprocunhide-files?rev=HEAD Would you consider this a pretty safe list of things to be visible in a vserver? It is probably too restrictive and removes too

Re: [Vserver] /proc must be mounted error

2004-03-22 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: did a quick, first impression classification on those entries, so it is a start, but nothing final, and YMMV /proc/net/(C) required at least for firewall- or VPN-setup vservers -/proc/net/rpc/ (D) proof-of-concept code

Re: [Vserver] compiling util-vserver

2004-03-23 Thread Enrico Scholz
[EMAIL PROTECTED] (Gregory (Grisha) Trubetskoy) writes: When compiling util-vserver-0.29.196, I get this: diet gcc -g -O2 -std=c99 -Wall -pedantic -W -o src/reducecap src/reducecap.o lib/.libs/libvserver.a src/reducecap.o(.text+0x1fd): In function `show': src/reducecap.c:202: undefined

Re: [Vserver] [RFC] Future Linux-Vserver Networking (Part 1)

2004-03-30 Thread Enrico Scholz
[EMAIL PROTECTED] (Liam Helmer) writes: One possible scenario is the following. I'll work on a patch for vserver-utils if anyone's interested in this: Ok, I implemented the first part of your suggestion into util-vserver[1]; for the second one (iptables), I am not sure how to realize it

Re: [Vserver] iptables

2004-04-05 Thread Enrico Scholz
[EMAIL PROTECTED] (Gregory (Grisha) Trubetskoy) writes: Given that vserver won't allow you to use iptables, has anyone tried a solutions where tha iptables command is replaced by a stub command that talks to a daemon in context 0 to set up tables? vserver-djinni[1] is such a daemon and it

[Vserver] util-vserver -- future directions

2004-04-06 Thread Enrico Scholz
Hello, the alpha branch of util-vserver has reached a state where it becomes usably and a real replacement for the current stable branch[1]. So I am planning to put it into beta state in the next days (the exact date is not fixed yet, but it happens in the next days ;)). When you want to get an

Re: [Vserver] util-vserver -- future directions

2004-04-07 Thread Enrico Scholz
[EMAIL PROTECTED] (Sam Vilain) writes: Allow me to throw mine into the fold, then; these additions let you have each vserver on a seperate filesystem, whilst still having the benefits of unification; all changes are in /usr/sbin/vserver: With new tools you could do this with: * add a line

Re: [Vserver] reboot does not work with util-vserver-0.29.207

2004-04-13 Thread Enrico Scholz
[EMAIL PROTECTED] (Christian Jaeger) writes: 1.- Not a problem of the utils but of my setup: I have a setup where the vserver tools are inside a chroot, not on the plain host. This is because I want to keep woody on the host, but the alpha tools only compile on sarge/sid. Hmm, I tested it on

Re: [Vserver] reboot does not work with util-vserver-0.29.207

2004-04-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Christian Jaeger) writes: Hmm, I tested it on plain woody and it built there. Which errors do you get? Well, I had built and installed the .201 version on woody before, but couldn't use vunify; same thing with .207: Ah ok, this behavior is expected. Since vunify is linked

Re: [Vserver] util-vserver -- future directions

2004-04-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Noèl Köthe) writes: * tests, tests, tests; especially with the new 2.6 kernel features[2] would it be helpful to package your beta for Debian and upload it to experimental? Yes, but because of some other tasks, the beta will be delayed till next week. It only make sense

Re: [Vserver] Documentation

2004-05-27 Thread Enrico Scholz
[EMAIL PROTECTED] (Mike Fischer) writes: I've already got some vservers up and running nicely. (Kernel 2.4.22, vserver 1.00, utils 0.25) Mmmh... these are very old version and lots of security leaks have been fixed in the meantime. I found Enrico's speech-slides which tell me that the

Re: [Vserver] new utils configuration

2004-06-10 Thread Enrico Scholz
[EMAIL PROTECTED] (Gregory (Grisha) Trubetskoy) writes: I've been looking at the documentation for the new utils (nice stylesheet, btw), and it looks like there is a shift from using a single config file describing a vserver to a hierarchy of files (kinda reminds me of qmail)... Just

Re: [Vserver] new utils configuration

2004-06-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Roderick A. Anderson) writes: I justed needed something which is easy parseble by *both* C programs and shell scripts, and which supports the new features. The old .conf files support none of these requirements. The util-vserver commands seem to support the old files. I

Re: [Vserver] Alpha vserver tools (0.29.294) OPTION_INSECURE

2004-06-17 Thread Enrico Scholz
[EMAIL PROTECTED] (Liam Helmer) writes: I've been playing with the alpha vserver tools, and I'm trying to figure out how to expand a vservers capabilities. I hacked the previous version to not pass the --secure flag with a certain commandline option, so that I could do things like run

Re: [Vserver] new utils configuration

2004-06-17 Thread Enrico Scholz
[EMAIL PROTECTED] (Roderick A. Anderson) writes: There is no upgrade command (yet??). A process could be to create the metadata with the skeleton method and to do the remaining actions manually. The 'vskel' package? No, with the 'skeleton' method: | vserver vserver-id build -m skeleton

Re: [Vserver] syncing vservers

2004-06-17 Thread Enrico Scholz
[EMAIL PROTECTED] (Roderick A. Anderson) writes: basically rpm, vrpm and vunify ... How about perl packages? They are typically not RPM based 'vunify' of alpha util-vserver is not rpm based anymore (although its metadata can be used to detect non-unifyable files). vunify will not unify

[Vserver] release-candidate for stable branch (0.29.90)

2004-06-29 Thread Enrico Scholz
Hello, I uploaded a release-candidate for the stable branch to http://www-user.tu-chemnitz.de/~ensc/util-vserver/rc/ and plan to make this the next stable version in the next days. Except for a small EOL fix, this is identically to 0.29.5. Please report every bug which you find there;

[Vserver] linuxtag papers

2004-07-01 Thread Enrico Scholz
Hello, my linuxtag papers about vserver are available at http://www.tu-chemnitz.de/~ensc/util-vserver/doc/lt2004/ Beside the german version, there is a quick-and-dirty english translation of the presentation slides also. The paper itself is available in german only. Enrico

[Vserver] Fwd: [Announcement] util-vserver 0.30

2004-07-06 Thread Enrico Scholz
Hello, as mailman seems to have eat the posting below without any comment, I will try it again... Enrico ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] Fwd: 0.30.190 update warning

2004-07-06 Thread Enrico Scholz
Hello, as mailman seems to have eat the posting below without any comment, I will try it again... Enrico ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] Fwd: [Announcement] util-vserver 0.30

2004-07-06 Thread Enrico Scholz
[EMAIL PROTECTED] (Enrico Scholz) writes: as mailman seems to have eat the posting below without any comment, I will try it again... Ok, I am giving up as mailman seems to be a little bit misconfigured... The original mail can be found at http://www.tu-chemnitz.de/~ensc/util-vserver/mails

Re: [Vserver] vrpm error

2004-08-12 Thread Enrico Scholz
[EMAIL PROTECTED] (Roderick A. Anderson) writes: vrpm nicn -- -Uvh awstats-6.1-1.1.fc1.dag.noarch.rpm I get these lines. Updating server nicn error: cannot open Packages index using db3 - Permission denied (13) [You do not tell the util-vserver version, but as you mentioned

Re: [Vserver] Where to find vproc?

2004-08-17 Thread Enrico Scholz
[EMAIL PROTECTED] (Ola Lundqvist) writes: the flags needed for unification. That's why i said you should backport setattr from the unstable branch. I see. Is the setattr from unstable well tested it works for me and backwards compatible? yes regarding core functionality (you can set

Re: [Vserver] [Release] Development vs1.9.2

2004-08-27 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: src/secure-mount.c no defined file sys/param.h, that provide PATH_MAX, and sources not builded Thx; but this should not be an issue anymore as new code in CVS does not use PATH_MAX anymore. when will it be released as 0.30.191 or so? 0.30.191

Re: [Vserver] vserver-stat ?

2004-09-02 Thread Enrico Scholz
[EMAIL PROTECTED] (Roderick A. Anderson) writes: What I came to realise was that vserver-stat only shows the virtual servers if a service is running. # vserver-stat (see nothing but main) # vserver foo enter foo# /etc/rc.d/init.d/httpd start # vserver-stat (should now list main and

Re: [Vserver] problem with development vserver, new utils, fakeinit, fixed context id

2004-09-09 Thread Enrico Scholz
[EMAIL PROTECTED] (Henrik Heil) writes: 1) Chroot Barrier Flag http://www-user.tu-chemnitz.de/~ensc/util-vserver/doc/lt2004/paper.html#fig:rmattack ---8--- Die Anfälligkeit gegen Symlinkattacken und andere Races ist ein weiterer Nachteil des stable Branches, weshalb vom Einsatz in

Re: [Vserver] vsched bug?

2004-10-19 Thread Enrico Scholz
[EMAIL PROTECTED] (Gregory (Grisha) Trubetskoy) writes: And it looks like utils pass v3 while the kernel treats it as v2 and so my fill_rate becomes set_mask, Thanks for the report and the analysis; should be fixed in 0.30.196 Enrico ___ Vserver

Re: [Vserver] Casual, naïve implementation of namespace cleanup

2004-11-02 Thread Enrico Scholz
[EMAIL PROTECTED] (Sam Vilain) writes: The following patch, to vservers.functions in the util-vserver distribution, will do something of a `namespace cleanup' in lieu of the rework to the vserver startup and mount cleanup process that Enrico has planned (I'm told). Currently there are two

Re: [Vserver] Casual, naïve implementation of namespace cleanup

2004-11-02 Thread Enrico Scholz
Herbert Poetzl [EMAIL PROTECTED] writes: Currently there are two conflicting requirements: (a) 'vserver ... enter' and operating from the outside in the vserver, and (b) cleaning /proc/mounts first, I would like to split up (a) into (a1) 'vserver ... enter' and (a2) operating from

Re: [Vserver] Compile troube util-vserver (alpha branch)

2004-12-13 Thread Enrico Scholz
[EMAIL PROTECTED] (Baltasar Cevc) writes: I want to create a Debian woody package of the current util-vserver tools. During the packaging process, all files are installed in .../debian/tmp as a virtual root and then packed together. The problem now is that make install recreates pathconfig.h

Re: [Vserver] Opteron, debian-amd64, util-vserver compile bug and workaround

2004-12-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Adrian Reyer) writes: when I tried to compile util-vserver-0.30.196, i got this error: src/keep-ctx-alive.c: In function `doit': src/keep-ctx-alive.c:145: error: `__arr' undeclared (first use in this function) ... digging through the various header files I found all

Re: [Vserver] util-vserver-0.30.196 build fails on AMD64.

2004-12-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Andrew Glen-Young) writes: I have noticed someone asking about this when I searched for this error and it was mentioned that this was fixed in util-vserver-0.30.193 (architecture is never mentioned). if diet gcc -DHAVE_CONFIG_H -I. -I. -I. -I ./lib -I

Re: [Vserver] Re: vsched segfault (and workaround ;)

2004-12-20 Thread Enrico Scholz
[EMAIL PROTECTED] (Adrian Reyer) writes: as pointed out by Hollow, confirmed by me and workarounded by Bertl, vsched with hard limits segfaults after setting the values. by ading '-- true' to the command line, it stops segfaulting while continue working correctly. Sorry, can not

Re: [Vserver] packaging review for new Debian packages

2004-12-27 Thread Enrico Scholz
[EMAIL PROTECTED] (Kilian Krause) writes: | * /etc/vserver/util-vserver-vars Please do not install 'util-vserver-vars' into /etc. ... Yet the option to allow a relocation of the default vserver rootdir would be highly appreciated. (and IMHO broken if not availble at all) The default

Re: [Vserver] packaging review for new Debian packages

2004-12-27 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: | * pkglibdir is /usr/lib/util-vserver instead of /var/lib/util-vserver ??? this is standard in autoconf packages. I was wondering a bit about this myself.. The difference between /usr/lib and /var/lib is pretty clear- is there stuff in

Re: [Vserver] packaging review for new Debian packages

2004-12-27 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: As there is some discussion about the package-count let me explain the background of the packaging: |- How should the packaging devide up the groups most conveniently? util-vserver-core-0.30.196 Contains low-level utilities which use the

Re: [Vserver] packaging review for new Debian packages

2004-12-27 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: Alright, then maybe a -legacy or some such package, or just a really stern warning at the start of all the -legacy stuff saying this is legacy, you shouldn't be using it, or just don't distribute it at all (my personal favorite). the thing is,

Re: [Vserver] packaging review for new Debian packages

2004-12-27 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: and that it perhaps shouldn't even be packaged at all No, things like $PACKAGE_VERSION are changing with every version and must be told to the single scripts. Same holds for the configured paths. So, it's used by scripts *and* is compiled into

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: [... absolute paths vs. resolution with $PATH ...] using execvp(3) would mean: * trusting in $PATH that it contains the wanted path (this has to deal with packaging philosophies also which expect all 3rd party apps under /opt/name) --

Re: [Vserver] packaging review for new Debian packages

2004-12-29 Thread Enrico Scholz
[EMAIL PROTECTED] (Kilian Krause) writes: [ ... util-vserver.spec ...] Hrmpf. Then can we just not delete it in make clean? I will think about this; but I still do not understand the problem there. very easy to tell. You're talking about what configure builds, make clean purges yet

[Vserver] Re: alpha util-vserver patch: fix typo in $_MKTEMPDIR definition

2005-01-06 Thread Enrico Scholz
Hans Ulrich Niedermann [EMAIL PROTECTED] writes: fix typo in $_MKTEMPDIR: Use $_MKTEMP not $MKTEMP thx, fixed in CVS Enrico ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] Re: alpha util-vserver patch: improve/fix dietlibc version detection

2005-01-07 Thread Enrico Scholz
Hans Ulrich Niedermann [EMAIL PROTECTED] writes: What they fix: * handle a version number like 0.27-7 Can you check if CVS ([1]) fixes your problem? It does not. For _dietlibc_ver_min=27-7, the line _dietlibc_ver_min=${_dietlibc_ver_min%%[!0-9]*} doesn't do what it is supposed to

[Vserver] Re: alpha util-vserver patch: improve/fix dietlibc version detection

2005-01-07 Thread Enrico Scholz
Hans Ulrich Niedermann [EMAIL PROTECTED] writes: For _dietlibc_ver_min=27-7, the line _dietlibc_ver_min=${_dietlibc_ver_min%%[!0-9]*} doesn't do what it is supposed to do. What do you expect there? | $ _dietlibc_ver_min=27-7 | $ echo ${_dietlibc_ver_min%%[!0-9]*} | 27 seems to be

Re: [Vserver] bcapabilities not working?

2005-01-26 Thread Enrico Scholz
[EMAIL PROTECTED] (Andrew Mendelsohn) writes: Here is the Debug output. There is no corresponding line for bcap, as ++ OPTS_VATTRIBUTE=([EMAIL PROTECTED] --ccap $cap) for ccap. ... ++ local f=/etc/vservers/apache2server/bcapabilities ++ test -e /etc/vservers/apache2server/bcapabilities

[Vserver] Re: Strange vshelper behaviour (reboot)

2005-01-28 Thread Enrico Scholz
Herbert Poetzl [EMAIL PROTECTED] writes: after a decent debug session we now know that the vshelper reboot functionality is broken with 0.30.196 on vs1.2.10 (I suspect on older versions too) ... the culprit seems to be vserver-info, which, for whatever reason, is not able to 'reverse' the

Re: [Vserver] Re: Strange vshelper behaviour (reboot)

2005-01-31 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: after a decent debug session we now know that the vshelper reboot functionality is broken with 0.30.196 on vs1.2.10 (I suspect on older versions too) ... the culprit seems to be vserver-info, which, for whatever reason, is not able to

Re: [Vserver] Small bug report and feature request

2005-01-31 Thread Enrico Scholz
[EMAIL PROTECTED] (Micah Anderson) writes: A small bug report and a feature request: 1. vserver --help shows me: running ... succeeds iff the vserver is running -^^^ should only be one f :) Really? It is meant as | From The Free On-line Dictionary of Computing

Re: [Vserver] vunify problem

2005-01-31 Thread Enrico Scholz
[EMAIL PROTECTED] (Micah Anderson) writes: Then I followed the instructions on http://linux-vserver.org/alpha+util-vserver to unify vservers: 1. mkdir -p /usr/local/etc/vservers/MT/apps/vunify 2. ln -s /usr/local/etc/vservers/seedbank /usr/local/etc/vservers/MT/apps/vunify/refserver.00

Re: [Vserver] Small bug report and feature request

2005-02-01 Thread Enrico Scholz
[EMAIL PROTECTED] (Micah Anderson) writes: |* make a 'clone' build method | |which allows to clone an existing vserver (with modified options) I would like to have a generic CLI tool which modifies the configuration, before I implement this method. 'vcopy' needs testing also;

Re: [Vserver] Mandrakelinux's patch for 0.30.204

2005-02-20 Thread Enrico Scholz
[EMAIL PROTECTED] (Velu Erwan) writes: I do not know if urpmi supports this, but it should be possible to specify the version of Mandrake Linux. E.g. | vserver ... build -m urpmi -- -d mdk10 Of course it could be done, but the main idea was to install the vserver using the virtual

Re: [Vserver] Mandrakelinux's patch for 0.30.204

2005-02-23 Thread Enrico Scholz
[EMAIL PROTECTED] (Velu Erwan) writes: I have to admit that I do not know anything about 'urpmi', but with 'yum' and 'apt' I can configure the repository which is going to be used. This makes it possible to install FC2 guests on FC3 hosts by using '... -d fc2'. In urpmi you can choose the

Re: [Vserver] [vservers] Two Problems

2005-03-09 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: I´ve build a fc2 vserver and I can start it and enter it but I can´t stop it. This error comes or it dont go on (i think it can´t shutdown that interface) But why ??: mmh... the network initscripts should have been disabled by 'vserver ... build' (the

Re: [vserver] build problem

2005-03-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: this error comes wehen I want to build a fc3 vserver! ... 2:filesystem ### [ 29%] Fehler: unpacking of archive failed on file /usr/bin/X11;422ffd85: cpio: symlink failed - No such file or directory I was

Re: [vserver] Config

2005-03-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: where can i change that ?? Can not find a vserver-setup at '/usr/local/etc/vservers//'. See README for the ./configure options which create expected paths. Enrico pgpVWwiaozYHy.pgp Description: PGP signature

Re: [vserver] security context ?

2005-03-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: I´ve a FedoraCore3 vserver and I wanna change the password for an user and then ... passwd test passwd: root:system_r:unconfined_t is not authorized to change the password of test Disable SELinux. Its kernel API (/proc/self/attr + /selinux) makes it

Re: [vserver] build problem

2005-03-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Mueller) writes: But just for my understanding: What is this -initpre- and whydoes it work now? This is a script which will be executed before unpackaging the files. It works because it workarounds https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=52725 There

Re: [vserver] rpmpriorities

2005-03-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Mueller) writes: Can I here: /usr/src/redhat/BUILD/util-vserver-0.30.204/distrib/fc3/apt/rpmpriorities Configure what packages been installed when I build a new vserver? Or what stand this (rpmpriorities) for? That's a configuration file for apt. It is used by

Re: [vserver] security context ?

2005-03-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: hmm how can I disable selinux? http://fedora.redhat.com/docs/selinux-faq-fc3/index.html#id2825880 Enrico ___ Vserver mailing list Vserver@list.linux-vserver.org

Re: [Vserver] util-vserver (becoming stable ?)

2005-03-25 Thread Enrico Scholz
[EMAIL PROTECTED] (Olivier Poitrey) writes: what about LYCOS? They are using vserver and get much money with it. They also provide Internet-Access. Here a link for the german readers: http://www.lycos.de/startseite/online/internetzugang.html Should Enrico ask them for some money to stay

Re: [Vserver] [announce] util-vserver 0.30.205 + status report

2005-03-25 Thread Enrico Scholz
[EMAIL PROTECTED] (Paul S. Gumerman) writes: Where can I find this? Sorry, please use the http://www.nongnu.org/util-vserver/ homepage or the savannah projectpage https://savannah.nongnu.org/projects/util-vserver/ Enrico pgpg07da9qMcN.pgp Description: PGP signature

Re: [Vserver] I'm in trouble now ....

2005-03-28 Thread Enrico Scholz
[EMAIL PROTECTED] (Paul S. Gumerman) writes: Ran vserver fc3-reference hashify, which ran ok with one message (sorry, can't recall it now). The exact message would be helpful perhaps. Then tried vserver loco-reference hashify which failed with a message saying vserver ... suexec is support

[Vserver] Fakeinit issues

2005-04-03 Thread Enrico Scholz
Hello, I discovered some irregularities regarding fakeinit functionality. The following program gives different output on host and vservers: | int main(int argc, char *argv[]) | { | printf(%i\n, getsid(atoi(argv[1]))); | } On host: | # ./a.out 1 | 0 on VServer: | # chcontext --xid 100

[Vserver] Re: another vserver build bug

2005-04-08 Thread Enrico Scholz
Kevin Pendleton [EMAIL PROTECTED] writes: When I try to use the vserver build -m apt-rpm function to create a fc3 vserver on a centos host with util-vserver-0.30.205, I get the following output: vserver base-fc3 build -m apt-rpm --hostname domain.com --interface domain=eth0:192.168.0.129/24

Re: [Vserver] vserver build bug

2005-04-08 Thread Enrico Scholz
[EMAIL PROTECTED] (Kevin Pendleton) writes: When you try to use the vserver build -m copy function it requires a file that does not exist. Yes, this is expected because this method is not implemented yet. Sorry, I should remove it from the help text Enrico pgptFzisI6GK1.pgp

Re: [Vserver] util-vserver + dietlibc ...

2005-04-11 Thread Enrico Scholz
Herbert Poetzl [EMAIL PROTECTED] writes: no, thanks I already figured it, the dietlibc needs patching as the syscall(2) for x86_64 isn't implemented .o( I wonder _what_ is running on your machine ;) I guess it was using _syscall3() instead of syscall(). Shouldn't it? yes, after I

Re: [Vserver] util-vserver + dietlibc ...

2005-04-11 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: according to Enrico (please confirm or correct) the glibc has issues with the fake name resolver and is generally considered insecure because usually dynamically linked ... This really needs further explanation and justification. What about

[Vserver] Re: util-vserver-0.30.206 ... timetravel?

2005-04-16 Thread Enrico Scholz
Herbert Poetzl [EMAIL PROTECTED] writes: just tried to 'update' my rpms to the latest release of util-vserver for testing (0.30.206) but it seems that this version will need some time to become usable, no? checking whether to enable dietlibc... no (too old; 0.29+ required, 0.28 found)

Re: [Vserver] util-vserver + dietlibc ...

2005-04-22 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: That's not possible. During the extraction phase, 'rpm' has to do an username - uid mapping with the setup from the inside of the chroot. So at least there, I need getpwname() after chroot(). Sorry for the double-reply but additionally, is that the

Re: [Vserver] shutting down all vservers

2005-04-22 Thread Enrico Scholz
[EMAIL PROTECTED] (Marcel de Riedmatten) writes: I am playing with with the new debian package util-vserver 0.30.204-5, thanks to Ola for that. I dont want some vserver to be started automaticaly at startup so i don't put the default mark for that one. But when i shutdown the machine and this

Re: [Vserver] Problem to build util-vserver on ia64.

2005-04-24 Thread Enrico Scholz
[EMAIL PROTECTED] (Ola Lundqvist) writes: lib_internal/unify-copy.c: In function `copyMMap': lib_internal/unify-copy.c:142: error: `MADV_SEQUENTIAL' undeclared (first use in this function) mmh... a dietlibc issue

  1   2   >