[Vserver] Re: A possible new idea
On 10/05/06 14:46 -0400, Fareha Shafique wrote: After asking various questions about unification, I don't think vhashify quite supports what I have in mind. I wanted to get some opinions/ideas from the users of this mailing list. I am thinking if vservers can somehow be used to provide MAC (Mandatory Access Control) through containers. For example, a vserver shares the same filesystem as the host server, with read and write access to the host files being defined through a set of MAC policies. In this way, different policies can be defined for different vservers. Also, writes can be contained within a vserver (so that if a file is written to, a copy is made in the vserver's space) and integrated with the host only through explicit 'commits' to allow, for example, new configurations to be tested in an environment exactly the same as the host server and then transferred to the host using a commit. Any comments please? Rsync backup copy, do update, if smth fails - restore from backup. BTW if smth fails - you are likely updating developement version. Or I mistaken? -- Matvey Gladkikh ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: forcedeth module for 2.6.14-amd64-smp-vs
On 19/04/06 18:22 +0200, Eugen Leitl wrote: I'm running 2.6.14-amd64-smp-vs on a Sun Fire X2100. Unfortunately, 2.6.14-amd64-smp-vs lacks the forcedeth module, so only the Broadcom NIC is usable. I didn't catch this in time to try building my own 2.6.14-amd64-smp-vs Does anyone here have a new Debian package for 2.6.14-amd64-smp-vs or a similiar vs version of an AMD64 kernel? May be you wish to build debian kernel like a mainstream with all include? 1. Install 2.6.14-amd64-smp kernel 2. Download source package for 2.6.14-amd64-smp 3. cat /boot/config.2.6.14-amd64-smp /usr/src/2.6.14-amd64-smp/.config cd /usr/src/2.6.14-amd64-smp/ patch -p1 2.6.14-vs-patch make oldconfig make menuconfig (to check modules) 4. (later I used make-kpkg --initrd kernel-image and build my own kernel with ONLY difference to debian kernel - vserver applied ) I ve done this for i386 2.6.12 kernel - you can try for your one. It is not very good to make kernels with reduced ammount of drivers - because they will not be portable across different hardware. -- Matvey Gladkikh ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: [EMAIL PROTECTED]
On 13/04/06 14:02 +0200, Falk Hamann wrote: Common causes are: * /etc/rc.d/rc on Fedora Core 1 and RH9 fails always; the 'apt-rpm' build method knows how to deal with this, but on existing installations, appending 'true' to this file will help. echo true /path/to/vserver/etc/rc.d/rc -- Matvey Gladkikh ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: many ip addys
On 06/04/06 07:00 -0400, Chuck wrote: On Friday 21 October 2005 12:23 pm, Chuck wrote: On Friday 21 October 2005 12:12 pm, Herbert Poetzl wrote: On Fri, Oct 21, 2005 at 06:58:38AM -0400, Chuck wrote: i forget.. was it ngnet that would support a few hundred ip addys in a guest? i have a few big machines i cant move over until it can efficiently support several hundred ip addys (minimum a /24) ... if ngnet is the answer im gonna try to raise some funding from my boss .. no promises as he does not let go easily.. :D hehe, well, ngnet will provide that indeed, but for a quick and dirty hack you can raise the limit from the current 16 to something higher, but you should be aware that the current implementation will slow down with every ip address you add ... does anyone have some facts about how slow this would get with 130 or 140 ip addys added to a current vserver? is it just measurable or is it visible? unfortunately this mail server is very busy so i am extremely hesitant to try this. I am useing 256 per vserver guest. About ~80 ips usually. Have not seen any big differences in speed. My pathched sources can be found: deb http://matvey.org.ru/pub/debian stable main -- Matvey Gladkikh ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: 32 bit debian/sarge on a 64 bit RedHat ES?
On 07/02/06 14:22 +0100, Daniel Kraft wrote: Hi List! I will get some Dual-Xeon-Servers soon and have to install RedHat ES on them. I want to install debian/sarge-based linux-vservers on top of the RedHat. I have the choice between RedHat ES 32 bit and RedHat ES 64 bit. The questions are: 1. Can I have a 32 bit debian/sarge on a 64 bit RedHat or will I have to install a 64 bit debian? 64 debian better. 2. Is it possible to patch a RedHat Kernel with linux-vserver? I don't want to use a patched vanilla kernel on these systems. Are there pre-patched RedHat-Kernels? for 32RHEL4 we use fedora 2.6.12 kernel. 3. Should I use RedHat ES 32 bit and just ignore the ~20% performance loss for comfortability? it is you to decide. P.S. Debian on top - RHEL inside IMHO will be easier to maintain. -- Matvey Gladkikh ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: Vserver newbie question
I have no clue what this means anyone? First you need to find vprocunhide script end execute it once per server reboot. second you do not need to create /vserver/NAME dir cause creation script will do it for you. Cheers, Matvey ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: Vserver newbie question
On 14/09/05 10:39 +0200, [eMAXX] Sys-Admin wrote: I saw Debian unstable adopted util-vserver-0.30.208 (http://packages.debian.org/unstable/net/util-vserver), but I'm want to use the stable branch. Should I mix? no, I think you should backport 2.6.12 kernel from sid for using it on sarge only. To much decisions to make ...what's wise to do? other packeges I compile myself with the help of checkinstall for stable distro. guest vservers should be updated by apt-get. get 2.6.12 kernel-sources from sid get patch vserver 2.6.12 cd /usr/src/2.6.12sources/ patch -p1 ./patch* make oldconfig make menuconfig (to enable some options) make-kpkg --initrd kernel-image dpkg -i ../kernel-image*.deb tar xvfz util-vserver...tgz cd util-vserver ./configure checkinstall (you should apt-get install checkinstall first) dpkg -i util-vserver*.deb Cheers, Matvey ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: Vserver newbie question
On 14/09/05 11:36 +0200, Daniel Kraft wrote: To much decisions to make ...what's wise to do? I'll have to meditate about this... I will write down this :-) Cheers, Matvey ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: Vserver newbie question
Ok ... let's start that install again :) Whenever I get it to work, you'll notice it by my questions about the configuration ;) Have you found vprocunhide script on your server? apt-get install slocate locate -u / locate vprocunhide /path/to/vprocunhide start vserver-stat should work after that. and your allready build vservers too. cheers, Matvey ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: Vserver newbie question
On 14/09/05 13:26 +0200, [eMAXX] Sys-Admin wrote: You're going to fast for me; as far as I can see, sid does not provide the 2.6.12 kernel-sources: http://packages.debian.org/unstable/allpackages Would this be ok as well: http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.4.tar.bz2 ? This is exactly where it goes wrong with me ... I think I miss some basic experience to make a sane decision in these cases (right now I think there is no important difference between the two sources). If you need debian kernel with .config from debian team you should download prepatched sources 2.6.12 from debian sid. You allso can download kernel.org kernel 2.6.12 in this case you should install apt-get install kernel-patch (smth like that) and patch kernel sources with cramfs patch patch -p1 /usr/src/debian-patches(or smth like that)/blablabla/fs.cramfs.diff this is for make-kpkg --initrd kernel-image to produce initrd image correctly. after that you should patch with vserver kernel diff. configure and compile kernel. if you need I can give mine kernel 2.6.12 for sarge with utils and sources. or you can use those on linux-vserver site (derjohn's) Whichone will it be? Regards, Vincent Pluk eMAXX, Netherlands ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver -- С уважением, Матвей Гладких ООО Скай-Медиа г. Москва, ул. Сущевский вал, 9, оф. 803 Тел./факс (095) 981-60-42 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: rlimit for memory usage
On 22/08/05 14:59 +0200, Herbert Poetzl wrote: I don't know about rlimits/ directory, but for vlimit it can look like: vlimit --xid X --data 1572864 Is there a way to limit each vserver's maximum memory usage to 64 MB? This instruction should be issued each time guest boots up? -- С уважением, Матвей Гладких ООО Скай-Медиа г. Москва, ул. Сущевский вал, 9, оф. 803 Тел./факс (095) 981-60-42 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] RHEL-4.0
Is it possible to backport vserver 2.0 patch to kernel 2.6.9 ? (RHEL 4.0 default) Cheers, Matvey -- С уважением, Матвей Гладких ООО Скай-Медиа г. Москва, ул. Сущевский вал, 9, оф. 803 Тел./факс (095) 981-60-42 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: rlimits
On 17/08/05 14:28 +0200, Herbert Poetzl wrote:
On Wed, Aug 17, 2005 at 11:59:07AM +0200, Matvey Gladkikh wrote:
Thank you Herbert!
What is the sintax of /etc/vservers/rlimits/{cpu.hard, soft, minimal}
files and other limits possible values.
(from the FlowerPage)
# resource.hard
A file which contains the hard- of the given resource in the first
line. The special keyword 'inf' is recognized.
so basically positive numbers and the keyword 'inf'
do you really want to set the rlimit for the cpu resource?
because this isn't implemented yet as we all think that
nobody really wants to do that ...
( -t The maximum amount of cpu time in seconds )
HTH,
Herbert
And how to setup cpu limits so that CPUBURN will not eat all the server cpu
running on guest server?
BTW i did not fully understood the spelling of resource.any
if I put:
echo 15inf /etc/vservers/.../rlimits/cpu.hard
what will it be 15 second of hard cpu what :-)?
what will be if i put:
echo 15inf /etc/vservers/.../rlimits/cpu.soft
and what if i put:
echo 15inf /etc/vservers/.../rlimits/cpu.min
how can I limit guest server which for example runs CPUBURN all the time
to use 15% of the server CPU?
--
С уважением,
Матвей Гладких
ООО Скай-Медиа
г. Москва, ул. Сущевский вал, 9, оф. 803
Тел./факс (095) 981-60-42
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] vserver + vlans
I have small question. Can vserver guests be bind to vlan interfaces eg. bond0.10 not phisical eth0 and eth1? -- Matvey Gladkikh SKY-Media msk: +70959816042 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [OBORONA-SPAM] [Vserver] newbie: testme.sh errors
Hello [eMAXX], eSA I tried to setup an alias interface for the vserver, but I can't get it eSA to work. SSH connections still connect at the host server. The problem you've done correct, all deamons on master host should listen certain ip - NOT 0.0.0.0 !!! bind sshd on master host ip :-) -- Matvey Gladkikh ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
