Hello.

> > I tried to build a vserver with the "debootstrap" method (using
> > the "--arch" and "--foreign" options), but didn't succeed: the
> > "--second-stage" aborts with
> 
> Try building the image with plain debootstrap, ie without vserver xxx
> build -m debootstrap.
> 
> If that doesn't work, it's probably not specifically vserver-related.
> 

That's right.  It was only a missing dependency.

Nevertheless, I have new problems with "debootstrap".

(1)
I used the "--exclude" option in order to not install hardware-related
packages (and some others):

at,base-config,console-common,console-data,console-tools,cpio,cron,dhcp-client,exim4,exim4-base,exim4-config,exim4-daemon-light,fdutils,ifupdown,info,ipchains,iptables,klogd,logrotate,mailx,makedev,man-db,manpages,modutils,mount,netbase,netkit-inetd,nvi,pciutils,ppp,pppconfig,pppoe,pppoeconf,sysklogd,tasksel,telnet,tcpd,wget

But, it seems that, contrary to the manpage warning, "debootstrap"
installs some of them anyway, namely "modutils", "mount" and "makedev".
These are tagged as "required", but should not be in a vserver.

Is there a way to deal with this at the "debootstrap" level or is the
only solution to try and remove them afterwards from within the vserver?

(2)
Here attached are 2 files listing the contents of the "/dev" directory.
One is after the first stage of "debootstrap" (which seems fine), the
other after the completion of the second stage; the former contains
many devices which shouldn't be there in a vserver (strangely, a lot
of them audio-related).
Why does this happen and how can it be avoided?


Although this is more related to Debian than vserver, the main point is
to try and define the proper method to create a "clean" Debian vserver,
where by "clean" I mean:
* Not containing any packages which may attempt to perform actions
  forbidden inside a vserver (i.e. hardware-related stuff).
* Containing only the strict minimum for the vserver to function as a
  Debian distribution (i.e. with the ability to install and remove
  packages).


Thanks for your suggestions.
Gilles
total 0
crw-rw-rw-  1 root root 1, 7 Sep 10 17:36 full
crw-rw-rw-  1 root root 1, 3 Sep 10 17:36 null
crw-rw-rw-  1 root root 5, 2 Sep 10 17:36 ptmx
drwxr-xr-x  2 root root   48 Sep 10 17:36 pts
crw-r--r--  1 root root 1, 8 Sep 10 17:36 random
crw-rw-rw-  1 root root 5, 0 Sep 10 17:36 tty
crw-r--r--  1 root root 1, 9 Sep 10 17:36 urandom
crw-rw-rw-  1 root root 1, 5 Sep 10 17:36 zero
total 0
lrwxrwxrwx  1 root root       13 Sep 10 17:39 MAKEDEV -> /sbin/MAKEDEV
crw-rw----  1 root video 10, 175 Sep 10 17:39 agpgart
crw-rw----  1 root audio 14,   4 Sep 10 17:39 audio
crw-rw----  1 root audio 14,  20 Sep 10 17:39 audio1
crw-rw----  1 root audio 14,  36 Sep 10 17:39 audio2
crw-rw----  1 root audio 14,  52 Sep 10 17:39 audio3
crw-rw----  1 root audio 14,   7 Sep 10 17:39 audioctl
crw-------  1 root tty    5,   1 Sep 10 17:39 console
lrwxrwxrwx  1 root root       11 Sep 10 17:39 core -> /proc/kcore
crw-rw----  1 root audio 14,   3 Sep 10 17:39 dsp
crw-rw----  1 root audio 14,  19 Sep 10 17:39 dsp1
crw-rw----  1 root audio 14,  35 Sep 10 17:39 dsp2
crw-rw----  1 root audio 14,  51 Sep 10 17:39 dsp3
crw-rw-rw-  1 root root   1,   7 Sep 10 17:39 full
prw-------  1 root root        0 Sep 10 17:39 initctl
crw-r-----  1 root kmem   1,   2 Sep 10 17:39 kmem
brw-rw----  1 root disk   7,   0 Sep 10 17:39 loop0
brw-rw----  1 root disk   7,   1 Sep 10 17:39 loop1
brw-rw----  1 root disk   7,   2 Sep 10 17:39 loop2
brw-rw----  1 root disk   7,   3 Sep 10 17:39 loop3
brw-rw----  1 root disk   7,   4 Sep 10 17:39 loop4
brw-rw----  1 root disk   7,   5 Sep 10 17:39 loop5
brw-rw----  1 root disk   7,   6 Sep 10 17:39 loop6
brw-rw----  1 root disk   7,   7 Sep 10 17:39 loop7
crw-r-----  1 root kmem   1,   1 Sep 10 17:39 mem
crw-rw----  1 root audio 35,   0 Sep 10 17:39 midi0
crw-rw----  1 root audio 14,   2 Sep 10 17:39 midi00
crw-rw----  1 root audio 14,  18 Sep 10 17:39 midi01
crw-rw----  1 root audio 14,  34 Sep 10 17:39 midi02
crw-rw----  1 root audio 14,  50 Sep 10 17:39 midi03
crw-rw----  1 root audio 35,   1 Sep 10 17:39 midi1
crw-rw----  1 root audio 35,   2 Sep 10 17:39 midi2
crw-rw----  1 root audio 35,   3 Sep 10 17:39 midi3
crw-rw----  1 root audio 14,   0 Sep 10 17:39 mixer
crw-rw----  1 root audio 14,  16 Sep 10 17:39 mixer1
crw-rw----  1 root audio 14,  32 Sep 10 17:39 mixer2
crw-rw----  1 root audio 14,  48 Sep 10 17:39 mixer3
crw-rw----  1 root audio 31,   0 Sep 10 17:39 mpu401data
crw-rw----  1 root audio 31,   1 Sep 10 17:39 mpu401stat
crw-rw-rw-  1 root root   1,   3 Sep 10 17:39 null
crw-r-----  1 root kmem   1,   4 Sep 10 17:39 port
crw-rw-rw-  1 root root   5,   2 Sep 10 17:36 ptmx
drwxr-xr-x  2 root root       48 Sep 10 17:36 pts
lrwxrwxrwx  1 root root        4 Sep 10 17:39 ram -> ram1
brw-rw----  1 root disk   1,   0 Sep 10 17:39 ram0
brw-rw----  1 root disk   1,   1 Sep 10 17:39 ram1
brw-rw----  1 root disk   1,  10 Sep 10 17:39 ram10
brw-rw----  1 root disk   1,  11 Sep 10 17:39 ram11
brw-rw----  1 root disk   1,  12 Sep 10 17:39 ram12
brw-rw----  1 root disk   1,  13 Sep 10 17:39 ram13
brw-rw----  1 root disk   1,  14 Sep 10 17:39 ram14
brw-rw----  1 root disk   1,  15 Sep 10 17:39 ram15
brw-rw----  1 root disk   1,  16 Sep 10 17:39 ram16
brw-rw----  1 root disk   1,   2 Sep 10 17:39 ram2
brw-rw----  1 root disk   1,   3 Sep 10 17:39 ram3
brw-rw----  1 root disk   1,   4 Sep 10 17:39 ram4
brw-rw----  1 root disk   1,   5 Sep 10 17:39 ram5
brw-rw----  1 root disk   1,   6 Sep 10 17:39 ram6
brw-rw----  1 root disk   1,   7 Sep 10 17:39 ram7
brw-rw----  1 root disk   1,   8 Sep 10 17:39 ram8
brw-rw----  1 root disk   1,   9 Sep 10 17:39 ram9
crw-rw-rw-  1 root root   1,   8 Sep 10 17:39 random
crw-rw----  1 root audio 35,  64 Sep 10 17:39 rmidi0
crw-rw----  1 root audio 35,  65 Sep 10 17:39 rmidi1
crw-rw----  1 root audio 35,  66 Sep 10 17:39 rmidi2
crw-rw----  1 root audio 35,  67 Sep 10 17:39 rmidi3
crw-rw----  1 root audio 14,   1 Sep 10 17:39 sequencer
drwxr-xr-x  2 root root       48 Sep 10 17:39 shm
crw-rw----  1 root audio 35, 128 Sep 10 17:39 smpte0
crw-rw----  1 root audio 35, 129 Sep 10 17:39 smpte1
crw-rw----  1 root audio 35, 130 Sep 10 17:39 smpte2
crw-rw----  1 root audio 35, 131 Sep 10 17:39 smpte3
crw-rw----  1 root audio 14,   6 Sep 10 17:39 sndstat
crw-rw-rw-  1 root tty    5,   0 Sep 10 17:39 tty
crw-------  1 root tty    4,   0 Sep 10 17:39 tty0
cr--r--r--  1 root root   1,   9 Sep 10 17:39 urandom
crw-rw-rw-  1 root root   1,   5 Sep 10 17:39 zero
_______________________________________________
Vserver mailing list
[email protected]
http://list.linux-vserver.org/mailman/listinfo/vserver

Reply via email to