[Vserver] question from a jail(8) user

2004-01-05 Thread Gregory (Grisha) Trubetskoy
Hi - I've been using FreeBSD jail for a while, but am new to Vserver, which seems like cool stuff, I'm thinking of using it for hosting customers. I've got a few questions for the list. 1. On FreeBSD, a common way to share files across virtual servers is to mount them using unionfs read-only,

Re: [Vserver] Vserver and Security

2004-01-08 Thread Gregory (Grisha) Trubetskoy
On Thu, 8 Jan 2004, Herbert Poetzl wrote: recently (end of december last year) somebody posted a mystic message to one of the german webhosting lists stating, that vserver is insecure, and that he would suggest not to use it (no details where given) ... it 'seems' that the poster was

[Vserver] Commercial virtual server sofware

2004-01-08 Thread Gregory (Grisha) Trubetskoy
Sorry, this is a bit off-topic: I've seen quite a few mentions of Virtuozzo and Ensim VPS solutions. Virtuozzo seems to be particularly keen on how they are so super advanced, no open source thing comes even close. Anyone here have any experience with those and can give the skinny on what those

[Vserver] newbie question

2004-01-31 Thread Gregory (Grisha) Trubetskoy
Sorry if these are FAQ's: Are there any problems with SMP and vserver (1.24)? We're thinking of ordering a dual cpu xeon machine, but I wanted to check first to make sure that there are no known problems. Also - how stable/unstable is the 1.3.x release - is it better to try 1.3 if starting from

Re: [Vserver] Running master and vservers in different ip subnets

2004-03-09 Thread Gregory (Grisha) Trubetskoy
I did some testing, and it works for me with the setup below but even without adding the explicit route for the network, i.e. the vservers with the interface with netmask of /32 stays up and responsive after I take the first ip in the scope (and the whole scope with it) down - am I missing

Re: [Vserver] SSH login inside vserver not working

2004-03-12 Thread Gregory (Grisha) Trubetskoy
Have you tried restarting sshd after starting vserver: # vserver blah exec service sshd restart [or whatever the command may be for your Linux distro] I'm curious if this is a similar problem to what I saw (see messages from last week) with permission denied to pts/X (X is a number). For me

Re: [Vserver] proc not mounted and other suggestions

2004-03-17 Thread Gregory (Grisha) Trubetskoy
On Wed, 17 Mar 2004, Dariush Pietrzak wrote: /proc/mounts is evil too since it discloses the devices where the virtual server and other virtual servers are mounted. I don't think proc/mounts counts as 'evil'. Although it would be nice to have virutalised and configurable proc/mounts

Re: [Vserver] AW: several sendmail running, how to deliver mail local?

2004-03-18 Thread Gregory (Grisha) Trubetskoy
Just to clarify - this is only a problem for the sendmail running on the main (ctx 0) server, correct? Grisha On Thu, 18 Mar 2004, Stadt Zirndorf, EDV wrote: I found the solution, there is a submit.cf for sendmail being used when sendmails gets invoked like this: sendmail -v [EMAIL

Re: [Vserver] Ctx disk limits question

2004-03-18 Thread Gregory (Grisha) Trubetskoy
On Thu, 18 Mar 2004, Herbert Poetzl wrote: saving the 'current' value on vserver stop and restoring it on vserver start should be sufficient ... I guess I'm confused as to whether mounting the filesystem with tagctx is sufficient. I'm on 1.26 (so I don't have lsxid), and I was following

Re: AW: [Vserver] AW: several sendmail running, how to deliver mail l ocal?

2004-03-19 Thread Gregory (Grisha) Trubetskoy
- Von: Gregory (Grisha) Trubetskoy [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 18. M?rz 2004 20:56 An: '[EMAIL PROTECTED]' Betreff: Re: [Vserver] AW: several sendmail running, how to deliver mail local? Just to clarify - this is only a problem for the sendmail running on the main (ctx 0

Re: [Vserver] /proc must be mounted error

2004-03-20 Thread Gregory (Grisha) Trubetskoy
On Sat, 20 Mar 2004, Enrico Scholz wrote: There you have a 'vprocunhide' (init)script which unhides some files; the current list is available at http://savannah.nongnu.org/cgi-bin/viewcvs/util-vserver/util-vserver/distrib/misc/vprocunhide-files?rev=HEAD Would you consider this a pretty

[Vserver] iptables

2004-03-25 Thread Gregory (Grisha) Trubetskoy
I know someone who has a virtuozzo-base hosting account, and it appears that their latest version aloows for iptalbes/ipchains to work somehow. Anyone know how it works, and is this something that might be possible with VServer, perhaps in the future? Grisha

[Vserver] [RESOLVED] Re: sshd weirdness: PAM session setup failed[6]: Permission denied

2004-03-30 Thread Gregory (Grisha) Trubetskoy
bug?) So the solution is either: 1. not to use S_NICE 2. comment out pam_limits.so from both /etc/pam.d/sshd and /etc/pam.d/system-auth Grisha On Mon, 8 Mar 2004, Gregory (Grisha) Trubetskoy wrote: I saw this posting earlier on: http://www.paul.sladen.org/vserver/archives/200309/0176

[Vserver] ctx disk limits and inodes

2004-04-02 Thread Gregory (Grisha) Trubetskoy
I've got a vserver that keeps running out of inodes. from the vserver root dir, find . | wc -l shows 42287. but df -i from within vserver shows: df -i FilesystemInodes IUsed IFree IUse% Mounted on /dev/hdv1 20 105933 94067 53% / 105933 - 42287 = 63646

Re: [Vserver] FreeVPS 1.3 features announce

2004-04-02 Thread Gregory (Grisha) Trubetskoy
It looks to me as if FreeVPS is somehow trying to compete with VServer by keeping its own fork of the project. What is the reason for that? Why not work on incorporating all these features into VServer? Grisha On Thu, 1 Apr 2004, Alexander Suvorov wrote: Dear coleagues! Let us to announce

Re: [Vserver] FreeVPS 1.3 features announce

2004-04-02 Thread Gregory (Grisha) Trubetskoy
[I can translate the russian below if someone needs it, it's more than I need to know :-)] Anyway - I find the features that FreeVPS describes cool, especially since we use VServer for commercial hosting I could really use them, but I do not like the idea of having to use a specific kernel, and

Re: [Vserver] util-vserver -- future directions

2004-04-07 Thread Gregory (Grisha) Trubetskoy
Am I missing something - you're mounting things that are in the shadow server via --bind - but doesn't this mean that if one of the vservers unlinks the file in a directory mounted this way, it will be gone for all other vservers? BTW, I really wish Linux had something like the FreeBSD unionfs.

Re: [Vserver] util-vserver -- future directions

2004-04-08 Thread Gregory (Grisha) Trubetskoy
On Thu, 8 Apr 2004, Liam Helmer wrote: I actually looked, for quite a long time, to try and find something that was similar to the freebsd (?) union mount, or else the uml copy-on-write system. I haven't found anything that works well yet. So, instead of that, I worked with the existing

[Vserver] Re: /etc/hosts

2004-04-15 Thread Gregory (Grisha) Trubetskoy
nevermind, I think I found the problem :-) On Thu, 15 Apr 2004, Gregory (Grisha) Trubetskoy wrote: I may be missing something obvious, if so forgive me: For some reason all my vservers resolve names using the main server's /etc/hosts, not their own This OS is Fedora C1 (both inside

[Vserver] Capability suid ?

2004-05-13 Thread Gregory (Grisha) Trubetskoy
Has there been any discussion of having a feature whereby a binary would be executed with higher capabilities automatically? Something like having a config file of some sort in the main server that lists a binary, its timestamp, size, an MD5/SHA hash and the capability. Whenever this binary

Re: [Vserver] vserver service command

2004-05-07 Thread Gregory (Grisha) Trubetskoy
On Fri, 7 May 2004, Bjoern Steinbrink wrote: The vserver script just calls itself with 'exec /sbin/service' instead of 'service' so that option really just saves a few keystrokes, that's all, you could also just use the exec call directly. This is a bit on a different topic, but I just

Re: [Vserver] Immutable files and chattr

2004-05-14 Thread Gregory (Grisha) Trubetskoy
: On Fri, May 14, 2004 at 05:12:34PM -0400, Gregory (Grisha) Trubetskoy wrote: It looks like the attributes that do not require CAP_LINUX_IMMUTABLE (i.e. anything except IMMUTABLE_[FILE|LINK]FL and APPEND_FL) can by modified by root from within a vserver: ]# vserver grisha enter ipv4root

Re: [Vserver] unixbench results: vanilla/1.9.1 host/1.9.1 vserver

2004-05-21 Thread Gregory (Grisha) Trubetskoy
Thanks, Ryan! It'd be interesting to see numbers for the same test on the same machine but using User-Mode Linux... :-) Grisha On Sat, 22 May 2004, Herbert Poetzl wrote: On Fri, May 21, 2004 at 11:19:26PM +, [EMAIL PROTECTED] wrote: Just FYI... thanks for checking this for us ...

Re: [Vserver] grsecurity ending

2004-06-03 Thread Gregory (Grisha) Trubetskoy
On Tue, 1 Jun 2004, Herbert Poetzl wrote: currently I have _no_ sponsor sending money, and, although I would _love_ to spend all my time doing linux-vserver, I have to _work_ to earn the money to buy food and pay for shelter, connectivity and clothing ... Well - having been in this boat

Re: [Vserver] VServer management

2004-06-04 Thread Gregory (Grisha) Trubetskoy
IMHO snmp is very complex by design and as a consequence of that is a significant security threat. If I was a potential customer of your and you insisted that I must run snmpd in my server, I'd balk. There are probably ways to accomplish anything you do via snmp by other means. E.g. to count

[Vserver] new utils configuration

2004-06-08 Thread Gregory (Grisha) Trubetskoy
I've been looking at the documentation for the new utils (nice stylesheet, btw), and it looks like there is a shift from using a single config file describing a vserver to a hierarchy of files (kinda reminds me of qmail)... Just curious - what was the rationale for this shift? Thanks! Grisha

Re: [Vserver] hostname in hosts

2004-06-08 Thread Gregory (Grisha) Trubetskoy
Does your apache config have a Listen directive, and if so, what is it? When Listen does not specify an IP address (e.g. Listen 80), apache should bind to 0.0.0.0, which doesn't have much to do with the hostname AFAIK. If you're using Apache 1.3, then also check the BindAddress directive.

[Vserver] lock flag question

2004-06-09 Thread Gregory (Grisha) Trubetskoy
What does the lock flag do? It seems that requesting another context from within a context is impossible anyway? Grisha ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] the new kernel-crash

2004-06-14 Thread Gregory (Grisha) Trubetskoy
http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html Anyone tested this from within a vserver? I'm not near a computer that I could try this on. Grisha ___ Vserver mailing list [EMAIL PROTECTED]

Re: [Vserver] util-vserver docs

2004-06-17 Thread Gregory (Grisha) Trubetskoy
I actually think that in the ideal world the building of the vserver should be outside the scope of the vserver project anyway, and should be something that the people in charge of distributions should be providing. My $0.02 Grisha On Thu, 17 Jun 2004, Bernhard Duebi wrote: On Thu,

Re: [Vserver] Lycos goes Linux-VServer ...

2004-07-29 Thread Gregory (Grisha) Trubetskoy
On Tue, 27 Jul 2004, Herbert Poetzl wrote: PR Now you can! Lycos (Europe) has started their VDS beta testing program, which is 100% bleeding edge Linux-VServer Technology (vs1.9.2.10 exp. kernel) /PR Is there a URL? :-) Grisha ___ Vserver mailing list

Re: [Vserver] Problems with Per Context Disk Limis

2004-08-02 Thread Gregory (Grisha) Trubetskoy
Here is a Python version of a similar thing: http://www.openvps.org/cvs/viewcvs.cgi/oh-host/scripts/ohdisk?rev=1.2content-type=text/vnd.viewcvs-markup This isn't really a standalone script because it relies on some other libs to enumerate vservers, but nonetheless, could be interesting for

Re: [Vserver] ipt_owner patch fo vserver

2004-08-05 Thread Gregory (Grisha) Trubetskoy
Any chance that this will get rolled in to 1.29? This could be very useful when you have a back-end network that you do not vservers to have access to... Grisha On Fri, 30 Jul 2004, Herbert Poetzl wrote: On Fri, Jul 30, 2004 at 04:28:02PM +0200, Pavel Semerad wrote: Hello, I am long time using

[Vserver] vserver 2.4.26-vs1.28 kernel rpm howto

2004-08-27 Thread Gregory (Grisha) Trubetskoy
If anyone is interested, here is how I was able to build a vs kernel RPM: http://www.openvps.org/Plone/docs/developer/kernelrpm (BTW - anyone feel free to copy this to copy this to the VServer wiki if you feel its appropriate) Grisha ___ Vserver

[Vserver] bind mounts within a vserver?

2004-09-16 Thread Gregory (Grisha) Trubetskoy
Is it possible to somehow use mount --bind from within a vserver? (vs1.28). Grisha ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] bind mounts within a vserver?

2004-09-17 Thread Gregory (Grisha) Trubetskoy
On Fri, 17 Sep 2004, Herbert Poetzl wrote: On Thu, Sep 16, 2004 at 10:29:52PM -0400, Gregory (Grisha) Trubetskoy wrote: Is it possible to somehow use mount --bind from within a vserver? (vs1.28). not in a secure way with the 2.4 stable branch, but it is with recent 2.6 (vs1.9.x) devel branch

Re: [Vserver] Bringing down vsever brings down _all_ interfaces

2004-10-12 Thread Gregory (Grisha) Trubetskoy
I had something similar happen, but then it turned out the problem was with my config. I figured it out by inserting an occasional echo statement into /usr/local/lib/util-vserver/vserver.functions (disableInterfaces() is the func you'd probably be most interested in) to see what 'ip' commands

[Vserver] ping without cap_net_raw in 1.9.3 - how?

2004-10-14 Thread Gregory (Grisha) Trubetskoy
I noticed that in vs 1.9.3 ping appears to work even without CAP_NET_RAW (This is Fedora Core 2). Just curious, how's this possible? Thanks! Grisha ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] bind mounts within a vserver?

2004-10-15 Thread Gregory (Grisha) Trubetskoy
On Fri, 17 Sep 2004, Herbert Poetzl wrote: On Thu, Sep 16, 2004 at 10:29:52PM -0400, Gregory (Grisha) Trubetskoy wrote: Is it possible to somehow use mount --bind from within a vserver? (vs1.28). not in a secure way with the 2.4 stable branch, but it is with recent 2.6 (vs1.9.x) devel branch

Re: [Vserver] Announcing the OpenVPS ISO (first stab)

2004-09-30 Thread Gregory (Grisha) Trubetskoy
On Thu, 30 Sep 2004, Matt Nuzum wrote: Cool. Could you please detail on the documentation website what happens during this stage: from http://www.openvps.org/Plone/download/ISO You also will need internet access at this point as the buildref process pulls a few RPM's from the openvps.org site. I

Re: [Vserver] Announcing the OpenVPS ISO (first stab)

2004-10-01 Thread Gregory (Grisha) Trubetskoy
On Thu, 30 Sep 2004, Herbert Poetzl wrote: The (very basic so far) instructions on how to use it and the link to the ISO itself are here: http://www.openvps.org/Plone/download/ISO b) 2.4.27 and vs1.29 are out ... how hard is an update? is it planned in the near future or will this take some

[Vserver] 2.6 kernel and links to immutable files

2004-10-04 Thread Gregory (Grisha) Trubetskoy
I noticed that in 2.6 kernel you cannot create (hard) links to immutable files. So if I am trying to build a unified server, is my only option to remove the immutable flag temporarily while I link to it? This seems insecure. Or am I missing something obvious? Has anyone else ran into this?

[Vserver] vdlimit question

2004-10-05 Thread Gregory (Grisha) Trubetskoy
Hello - this is vdlimit 0.01, linux 2.6.8.1, vs 1.9.2. I'm not sure vdlimit is supposed to behave this way, or am I missing something (as is not unusual): # df -k Filesystem 1K-blocks Used Available Use% Mounted on /dev/hda5 26193716 18202564 6660572 74% /

[Vserver] interfaces show ip addresses?

2004-10-06 Thread Gregory (Grisha) Trubetskoy
In vs 1.9.3 I noticed that ifconfig from within a vserver shows the inet addr of eth0 and lo (in 1.2x it did not) - is this the way it's supposed to be, or am I missing a configuration option of some kind? Thanks! Grisha ___ Vserver mailing list

Re: [Vserver] interfaces show ip addresses?

2004-10-06 Thread Gregory (Grisha) Trubetskoy
Strange... after a reboot it behaves differently - pretty much gives me what I need - hide the IP of eth0, but show the vserver IP. Before it would hide all interfaces sompletely. Not sure what happened there... Grisha On Wed, 6 Oct 2004, Gregory (Grisha) Trubetskoy wrote: On Wed, 6 Oct 2004

Re: [Vserver] interfaces show ip addresses?

2004-10-06 Thread Gregory (Grisha) Trubetskoy
) Thanks, Grisha On Wed, 6 Oct 2004, Herbert Poetzl wrote: On Wed, Oct 06, 2004 at 04:28:03PM -0400, Gregory (Grisha) Trubetskoy wrote: In vs 1.9.3 I noticed that ifconfig from within a vserver shows the inet addr of eth0 and lo (in 1.2x it did not) - is this the way it's supposed to be, or am I missing

Re: [Vserver] [PATCH] immulink ioctl is not available on vs1.9.3-rc2, even with CONFIG_VSERVER_LEGACY

2004-10-19 Thread Gregory (Grisha) Trubetskoy
On Tue, 19 Oct 2004, Herbert Poetzl wrote: already in 2.6.9-final-vs1.9.3-rc4 ;) What's the URL to get the patches these days? The stuff on the site is 1.9.1. Thanks, Grisha ___ Vserver mailing list [EMAIL PROTECTED]

Re: [Vserver] Replication

2004-10-21 Thread Gregory (Grisha) Trubetskoy
On Thu, 21 Oct 2004, Thomas Hug wrote: Hi On Wed, 20 Oct 2004 11:20, David MacKinnon wrote: It's also a bit more cpu intensive than drbd. This may or may not be a concern for you. On the 1.9.x vserver this can be addressed with vsched. I've been able to make it work pretty well and plan on

[Vserver] quick vsched howto

2004-10-21 Thread Gregory (Grisha) Trubetskoy
As promised, here are my vsched findings. My set up is util-vserver 0.30.195 and vs 1.9.3. The token-bucket scheduler principle is pretty well explained here: http://www.linux-vserver.org/index.php?page=Linux-VServer-Paper-06 vsched takes the following arguments: --fill-rate The

Re: [Vserver] quick vsched howto

2004-10-21 Thread Gregory (Grisha) Trubetskoy
On Thu, 21 Oct 2004, Herbert Poetzl wrote: yes, this is if the hard scheduler is actually enabled That's one I forgot to mention - none of this has any visible effect (and by that I mean inability to drive the load to 30) unless sched_hard flag is set. So the pacing example should really be:

Re: [Vserver] quick vsched howto

2004-10-21 Thread Gregory (Grisha) Trubetskoy
On Fri, 22 Oct 2004, Sam Vilain wrote: Gregory (Grisha) Trubetskoy wrote: On Thu, 21 Oct 2004, Herbert Poetzl wrote: yes, this is if the hard scheduler is actually enabled That's one I forgot to mention - none of this has any visible effect (and by that I mean inability to drive the load to 30

Re: [Vserver] Template server files

2004-10-24 Thread Gregory (Grisha) Trubetskoy
Here is what we do in OpenVPS. This is Fedora biased. I think the utils strategy is copy-everything-then-unify, whereas we stuck to hardlink-as-you-copy-then-leave-it-alone. Either strategy is fine, it probably more depends on what you're doing. In our case the vserver is intended to passed to

[Vserver] Memory limits

2004-10-27 Thread Gregory (Grisha) Trubetskoy
I haven't seen memory discussed on this list for a while :-) I see that there are limits listed in the /proc/virtual/XXX/limits file, but I couldn't find any documentation on what they mean and how to set them. I'm especially curious about the RSS limit. I _think_ I've seen mentions that the

Re[2]: [Vserver] Plesk 7

2004-11-01 Thread Gregory (Grisha) Trubetskoy
On Mon, 1 Nov 2004, vs-technik wrote: GGT Not with SMP, redundant power supplies and SCSI hardware RAID. Cheap GGT dedicated servers are completely worthless IMHO, too bad most people GGT don't understand it. oh no! this is (only) a faith-question. we use (for all hosting-solutions) _cheap_

Re: [Vserver] Best backup of tagxid?

2004-11-09 Thread Gregory (Grisha) Trubetskoy
On Tue, 9 Nov 2004, [ISO-8859-1] Bj?rn Steinbrink wrote: On Tue, 9 Nov 2004 12:56:32 -0500 (EST) Gregory (Grisha) Trubetskoy [EMAIL PROTECTED] wrote: On Tue, 9 Nov 2004, [ISO-8859-1] Bj?rn Steinbrink wrote: On Tue, 9 Nov 2004 12:01:33 -0500 (EST) Gregory (Grisha) Trubetskoy [EMAIL PROTECTED] wrote

[Vserver] 1.9.3 kernel rpm

2004-11-18 Thread Gregory (Grisha) Trubetskoy
there is a 2.6.9 vs 1.9.3 kernel RPM here, if you're interested: http://www.openvps.org/dist/misc/kernel-2.6.9vs1.9.3-1.i386.rpm it was built using the config that comes with FC3 rpm, but without any redhat patches. so it's large and it's got more modules compiled than there are stars in the

Re: [Vserver] 1.9.3 kernel rpm

2004-11-21 Thread Gregory (Grisha) Trubetskoy
On Sat, 20 Nov 2004, Herbert Poetzl wrote: hmm, just discovered that CONFIG_INOXID_INTERN is broken in 1.9.3 so it will probably not work at all ... Do you have more details on this? It seems to work OK here. Grisha ___ Vserver mailing list [EMAIL

Re: [Vserver] cpu limits clone vservers

2004-11-23 Thread Gregory (Grisha) Trubetskoy
On Tue, 23 Nov 2004, Andreea Gansac wrote: [EMAIL PROTECTED] util-vserver]# vlimit -c 49168 --cpu 30 vc_set_rlimit(): Success If I run a process that does only while(1){} inside the vserver, the cpu is used only 25%-30%. If I'm not mistaken, this simply sets the cpu time to

Re: [Vserver] cpu limits clone vservers

2004-11-23 Thread Gregory (Grisha) Trubetskoy
On Tue, 23 Nov 2004, [iso-8859-1] J?rn Engel wrote: What most people want in plain English: o Every user gets some guaranteed lower bound. o Sum of lower bounds doesn't exceed total resources. o Most of the time, not all resources get consumed. Add them to the 'leftover' pool. o Users that

Re: [Vserver] cpu limits clone vservers

2004-11-24 Thread Gregory (Grisha) Trubetskoy
On Wed, 24 Nov 2004, Herbert Poetzl wrote: Then, if you are a fat jabba, maybe you might end up getting rescheduled instead of getting more memory whenever you want it! thought about a simpler approach, with a TB for the actual page-ins, so that every page-in will consume a token, and you get a

[Vserver] bypass xid enforcement flag?

2004-12-02 Thread Gregory (Grisha) Trubetskoy
Is there a flag that can be set that ignores persistent xids and allows a context to access files which are set to xids other than 0 or itself? (this is vs 1.9.3) Thanks! Grisha ___ Vserver mailing list [EMAIL PROTECTED]

Re: [Vserver] Next Generation Networking ...

2004-12-07 Thread Gregory (Grisha) Trubetskoy
On Tue, 7 Dec 2004, Darryl Ross wrote: I haven't had a look to see how you're doing the network stuff, but does it support (or will it support) the ability to set the ethernet MAC address for the virtual interface inside a vserver? AFAIK the decision on whether to accept a packet destined for a

Re: [Vserver] Next Generation Networking ...

2004-12-09 Thread Gregory (Grisha) Trubetskoy
On Thu, 9 Dec 2004, Herbert Poetzl wrote: ifconfig en0 hw ether 00:01:02:03:04:05 and it doesn't work with non-ngnet setups ... But wouldnt your solution give the same MAC to all vservers? I thought he wanted different MAC's for all vservers? nope, ngnet includes 'virtual' devices per vserver so

Re: [Vserver] Mini Howto for CPU hard limits

2004-12-20 Thread Gregory (Grisha) Trubetskoy
Another tip - put ^19 (without quotes) in the flags file to get virtualized load average. (This will probably be replaced with a word eventually in utils, but for now this works). This will make the vservers see their own load average. Originally, we were using sched_hard to peg the load on

[Vserver] Sys V IPC tracking

2004-12-27 Thread Gregory (Grisha) Trubetskoy
Hi all, Merry XMas - Is there a simpler way to track IPC resources short of entering every context and running ipcs? It seems that context 1 can only see its own semaphores/locks/etc, wouldn't it make more sense if it saw all of them? vs1.9.3 Thanks! Grisha

Re: [Vserver] Sys V IPC tracking

2004-12-28 Thread Gregory (Grisha) Trubetskoy
On Tue, 28 Dec 2004, Herbert Poetzl wrote: On Mon, Dec 27, 2004 at 02:45:12PM -0500, Gregory (Grisha) Trubetskoy wrote: Hi all, Merry XMas - Is there a simpler way to track IPC resources short of entering every context and running ipcs? It seems that context 1 can only see its own semaphores

[Vserver] CAN-2004-1235 anyone?

2005-01-11 Thread Gregory (Grisha) Trubetskoy
Is this something to worry about on vs 1.9.3 kernels? http://isec.pl/vulnerabilities/isec-0021-uselib.txt I saw Fedora released an updated kernel, though the comment at the beginning of the exploit code in the link above says tested only on 2.4.x. I for one could get it to compile, though I

Re: [Vserver] Regarding Hard CPU scheduler

2005-01-13 Thread Gregory (Grisha) Trubetskoy
This thread has lots of info: http://www.mail-archive.com/vserver@list.linux-vserver.org/msg03324.html Grisha On Thu, 13 Jan 2005, shishir randive wrote: Hi , I am new to vserver , I want to know the details about the Hard CPU scheduler used by the vserver. There is a very little

Re: [Vserver] ugly unchecked capability dependency in util-vserver

2005-01-13 Thread Gregory (Grisha) Trubetskoy
On Thu, 13 Jan 2005, Herbert Poetzl wrote: On Thu, Jan 13, 2005 at 03:27:19PM +0100, Thomas Weber wrote: So I think the util-vserver package should make sure that there is capability support in the kernel before starting the vserver or else it will silently run insecure vservers! well, IMHO that

Re: next gen platform (was Re: [Vserver] VServer 2.6.9-1.9.3 uptime 63d :-))

2005-01-19 Thread Gregory (Grisha) Trubetskoy
FC3 seems pretty stable: # cat /etc/fedora-release Fedora Core release 3 (Heidelberg) # uptime 15:13:32 up 40 days, 17:59, 2 users, load average: 0.04, 0.05, 0.01 # uname -a Linux XXX 2.6.9-vs1.9.3x #11 SMP Thu Dec 9 21:10:52 EST 2004 i686 i686 i386 GNU/Linux Grisha On Wed, 19 Jan 2005, Eric

Re: next gen platform (was Re: [Vserver] VServer 2.6.9-1.9.3 uptime 63d :-))

2005-01-19 Thread Gregory (Grisha) Trubetskoy
On Wed, 19 Jan 2005, Roderick A. Anderson wrote: Jacques did a pretty good promo for Vserver on the linuxconf list and I got the impression from it he has at least one Vserver running FC3. I was going to ask him about the steps he uses to build the the FC3 vserver kernel -- plus a few other

Re: next gen platform (was Re: [Vserver] VServer 2.6.9-1.9.3 uptime 63d :-))

2005-01-19 Thread Gregory (Grisha) Trubetskoy
On Wed, 19 Jan 2005, Roderick A. Anderson wrote: I keep forgeting to check in at openvps.org I used some instructions I think you provided to build a FC1 Vserver RPM and it was smooth process. That system is a AMD K6/2 500 with 256 MBtye RAM and currently running 6 vservers ; four of them web

[Vserver] stopping a context with zombie

2005-01-24 Thread Gregory (Grisha) Trubetskoy
Hi - Has anyone else had trouble killing a context that has zombie processes in it? This creates an annoying situation where the context cannot be started back up because utils-vserver complain that it is running already, yet I'm not aware of a way to eliminate a zombie. This is vs 1.9.3 and

Re: [Vserver] openvps

2005-01-31 Thread Gregory (Grisha) Trubetskoy
Dimitry - OpenVPS has a mailing list- [EMAIL PROTECTED] Grisha On Fri, 28 Jan 2005, Abdrashitov Dmitry wrote: Hello! Is anybody use vserver-hosting from www.openvps.org ? I have some questions... Dmitry ___ Vserver mailing list

[Vserver] memory accounting - impossible?

2005-01-31 Thread Gregory (Grisha) Trubetskoy
I just wanted to confirm this on the list, let me know if the following statement isn't true. (I think that if true, this is something that should be well documented somewhere): There is no way to accurately account for a context's memory utilization. The values reported by vserver-stat and in

Re: [Vserver] Re: Linux-VServer Agenda ...

2005-02-20 Thread Gregory (Grisha) Trubetskoy
On Sun, 20 Feb 2005, Nicolas Costes wrote: You need to deeply discuss those facts with the company, and why not try to secure the vservers' future in the job contract... My english is too bad when it comes to that domain, but I can try to say it like this: I agree to work for you if you agree to

Re: [Vserver] Linux-VServer Community Fund?!

2005-02-21 Thread Gregory (Grisha) Trubetskoy
On Mon, 21 Feb 2005, Herbert Poetzl wrote: sure, as this is a new concept (basically the linux-vserver developers are all working for fun in their spare time) so nobody has really thought about that yet (input appreciated) What I've seen work great in the past is if you establish a target amount,

Re: [Vserver] Fw: [Xen-devel] Tiny patch: xen and vserver

2005-02-23 Thread Gregory (Grisha) Trubetskoy
What I think would be even more interesting/useful is to run UML inside a vserver. Has anyone tried it? Grisha On Tue, 22 Feb 2005, Matt Ayres wrote: Here is a patch for Vserver to run under Xen that was posted to the Xen devel list. It might be useful for some people.

Re: [Vserver] Regarding Hard CPU scheduler

2005-02-25 Thread Gregory (Grisha) Trubetskoy
On Fri, 25 Feb 2005, Herbert Poetzl wrote: Speaking of token-buckets - is there a disk IO TB in the plans somewhere? I saw a reference to something like that on some UML board today... Cheers! Grisha ___ Vserver mailing list

Re: [Vserver] Linux (2.6.10) Patch Vserver (1.9.4) + Grsecurity (2.1.1-2.6.10-as2-20050124225)

2005-03-02 Thread Gregory (Grisha) Trubetskoy
On Wed, 2 Mar 2005, Herbert Poetzl wrote: kernel, is there any chance VServer patch ever will? well, actually I do not really consider linux-vserver so general that it should be on every linux box, be it my mobile phone or your favorite linux game engine it's very specific software and I guess

Re: [Vserver] util-vserver (becoming stable ?)

2005-03-22 Thread Gregory (Grisha) Trubetskoy
How much (balpark) does an internet connection cost? On Tue, 22 Mar 2005, Herbert Poetzl wrote: Hi Community! the util-vserver tools (which started as a rewrite of the existing tools jacques provided) did see a lot of innovative changes and overall improvements in the last year (or a little

Re: [Vserver] util-vserver (becoming stable ?)

2005-03-22 Thread Gregory (Grisha) Trubetskoy
I think OpenHosting could spare about $100/month (about half of 8 hr) - anyone else would like to pitch in? Grisha On Wed, 23 Mar 2005, Herbert Poetzl wrote: On Tue, Mar 22, 2005 at 02:24:35PM -0500, Gregory (Grisha) Trubetskoy wrote: How much (balpark) does an internet connection cost? a quick

Re: [vserver] who?

2005-03-25 Thread Gregory (Grisha) Trubetskoy
Here is a ./ link from old times: http://slashdot.org/articles/01/11/06/2034233.shtml Grisha On Fri, 25 Mar 2005, [ISO-8859-1] Benoit St-Andr? wrote: Timo M?ller a ?crit : Hi, who exactly has started the vserver Project and when? Thanx ___ Vserver

Re: [RE:] Re: [Vserver] Linux Vserver - Feature Question

2005-03-31 Thread Gregory (Grisha) Trubetskoy
There is something like this in a patch to UML developed by the Linode folks: http://www.linode.com/forums/archive/o_t/t_790/linode.com_status_update_04_06_04.html Looks like a token bucket, only for IO. It may be easier to do something like this in UML because their IO driver is a constant

Re: [Vserver] vsched

2005-03-31 Thread Gregory (Grisha) Trubetskoy
see this thread (read the whole thread, my post has some inaccuracies corrected in follow-ups) http://www.mail-archive.com/vserver@list.linux-vserver.org/msg03324.html Grisha On Fri, 1 Apr 2005, Peter V. Saveliev wrote: ... # vsched --help Usage: vsched [--xid xid]

Re: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Gregory (Grisha) Trubetskoy
I would also keep measurements of CPU ticks used. Since IO requires CPU cycles - is it possible that a CPU sched_hard indirectly limits IO just as well? Grisha On Fri, 1 Apr 2005, Matthew Nuzum wrote: On Thu, Mar 31, 2005 at 09:22:10PM -0600, Matthew Nuzum wrote: I think I can create a test

RE: [Vserver] Linux Vserver - Feature Question

2005-04-01 Thread Gregory (Grisha) Trubetskoy
The CPU ticks are in /proc/virtual/xid/sched Grisha On Fri, 1 Apr 2005, Matthew Nuzum wrote: I would also keep measurements of CPU ticks used. Since IO requires CPU cycles - is it possible that a CPU sched_hard indirectly limits IO just as well? Grisha How do you do that? P.S. I'm still compiling

Re: [Vserver] CentOs distribution

2005-04-06 Thread Gregory (Grisha) Trubetskoy
This may be somewhat off-topic, but why is it that people like centos which seems to me like REL without support. Since support is what REL is all about, wouldn't it be better to go with FC3 (soon 4) rather than a bunch of outdated software that comprises EL? What am I missing? Grisha On Mon,

Re: [Vserver] Stable release for 2.6 kernel ...

2005-04-11 Thread Gregory (Grisha) Trubetskoy
Excellent! Is NG going to be part of it? Grisha On Mon, 11 Apr 2005, Herbert Poetzl wrote: Greetings Folks! we had a longer discussion last night and we came to the conclusion that this is the right time to start working on a stable 2.0 release (for 2.6.x) so while this will involve a lot of work

Re: [Vserver] vserver application

2005-04-15 Thread Gregory (Grisha) Trubetskoy
I also like the file format - indentation as a delimiter... Very Pythonic and IOS-ish at the same time :) On Sat, 16 Apr 2005, Herbert Poetzl wrote: On Fri, Apr 15, 2005 at 03:11:24PM +0400, Peter V. Saveliev wrote: ... I did it :) Test build of RAD GNU/Linux uses vserver for regular service

Re: [Vserver] automount anyone?

2005-04-27 Thread Gregory (Grisha) Trubetskoy
On Wed, 27 Apr 2005, Herbert Poetzl wrote: On Tue, Apr 26, 2005 at 03:31:33PM -0400, Gregory (Grisha) Trubetskoy wrote: Has anyone here tried using automount with vservers? did you try to mount the autofs 'just' inside the vserver namespace (well, that's what I would do anyways) 'just' would

Re: [Vserver] Summary of recent improvement discussion

2005-05-04 Thread Gregory (Grisha) Trubetskoy
On Tue, 3 May 2005, Sam Vilain wrote: Bootstrapping Images The status of debootstrap and `rpmstrap' in the current utilities was briefly discussed, so that vservers of lots of different types could easily be built without installing extra utilities manually. I haven't seen

Re: [Vserver] Summary of recent improvement discussion

2005-05-04 Thread Gregory (Grisha) Trubetskoy
On Wed, 4 May 2005, Herbert Poetzl wrote: heh, how far is OpenVPS now? and what about it's 'current' targets/aims/whatever ... maybe you could give a short overview? Well... targets/aims is a big question that I've been trying to answer for a long time :-) The idea is to provide the missing

[Vserver] cpu counters in 1.9.5

2005-05-11 Thread Gregory (Grisha) Trubetskoy
Has something changed in the way vs1.9.5 accounts for CPU? We've upgraded from 2.6.10-vs1.9.4 to 2.6.11.7-vs1.9.5 and in /proc/virtual/xid/sched I see: snip cpu 0: 0 0 0 cpu 1: 0 0 0 cpu 2: 0 0 0 cpu 3: 0 0 0 after having run cat /dev/zero | bzip2 /dev/null in this vserver for a while. Let

Re: [Vserver] cpu counters in 1.9.5

2005-05-12 Thread Gregory (Grisha) Trubetskoy
On Thu, 12 May 2005, Herbert Poetzl wrote: okay, adding the 'counters' back should not be too hard, so I take that as 'feature request' ... ... or a 'feature return' :-) Thanks, Grisha ___ Vserver mailing list Vserver@list.linux-vserver.org

Re: [Vserver] MySQL inside a vserver - permission denied?

2005-05-16 Thread Gregory (Grisha) Trubetskoy
On Mon, 16 May 2005, Werner Schalk wrote: # touch /var/run/mysqld/mysqld.sock # chown mysql:mysql /var/run/mysqld/mysqld.sock # ls /var/run/mysqld/mysqld.sock -la -rw-r--r-- 1 mysql mysql 0 May 26 04:11 /var/run/mysqld/mysqld.sock Just a suggestion: # chown mysql:mysql /var/run/mysqld Grisha

[Vserver] 2.0 question

2005-05-27 Thread Gregory (Grisha) Trubetskoy
I've been trying to follow: http://linux-vserver.org/NGNET-Testing-HOWTO with 2.6.11.10-vs2.0-rc2, but I get: # vnet -x -n -d lo vc_add_vndev: Function not implemented I must be missing something obvious :-) TIA Grisha ___ Vserver

RE: [Vserver] solaris containers/zones

2005-06-24 Thread Gregory (Grisha) Trubetskoy
On Thu, 23 Jun 2005, Gregory (Grisha) Trubetskoy wrote: This is called PR. If you read this, you'll have a better idea of what's going on here: http://www.pycon.org/data/95/pycon-20050325-1-0900-95-ike.mp3 oops, bad paste job - the link is: http://www.paulgraham.com/submarine.html grisha

RE: [Vserver] solaris containers/zones

2005-06-24 Thread Gregory (Grisha) Trubetskoy
On Fri, 24 Jun 2005, Mike Tierney wrote: As much as I like Vservers (we use them on 2 of our Production servers!!) it looks like the Xen project (open source virtual machine software) IS getting LOTS of media coverage and attention/resources from vendors (Novell, IBM, Sun, HP, Redhat, etc).

Re: [Vserver] Virtual Cluster Question

2005-06-25 Thread Gregory (Grisha) Trubetskoy
On Sun, 26 Jun 2005, Hans Eschler wrote: What are the possibilities of using linux-vserver virtual machines with loadbalancers. Roundrobin, direct routing or nat? We've had succesfully set up direct server return load-balancing, where vservers were on different physical machines. Direct

  1   2   >