[Lxc-users] blkio.weight doesn't work
Hi， i'm using lxc in my project, i want to control disk io speed, so i use blkio.weight. I test it, but the result is confusing. I create two container A and B: A: blkio.weight = 100B : blkio.weight=1000 the running process in A and B are the same, which is bash script : dd if=/tmp/xxx of=/dev/null the size of xxx is 400Mb I suppose that A would be slower than B, since its weight is small, while the test turns out that B run as fast as A, they are in same speed. Can any help me figure it out ? PS: my kernel is 2.6.32, and lxc is 0.7.5 -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] seeing a network pause when starting and stopping LXCs - how do I stop this ?
Dear Michael, I always hate replying to my own posts but I have stumbled onto some interesting clarification as I've continued to play with this... Below in-line. [...] Again a well-done investigation. For everyone who don't have the time to carefully read this threads, i want to sum the (imho) key statements: * With kernel 2.6.27ff, one MAY make a MAC sticky to a bridge using standard tools, e.g. ifconfig br0 hw ether 12:34:56:78:90:ab This will turn off the auto-select-the-lowest-MAC-algorithm. * But the MAC MUST be one of the attached NICs to get the stacks layer2 packet routing working. The problem is that the bridge only thinks a packet is local if it arrives with destination hw addr == incoming device address. You might have more than one bridge and they may attached to different groups of NICs. Therefore, there have to be a layer 2 instrument (the MAC) to find the right bridge by its table of MACs spanned by the attached interfaces. For us LXC-users it means, we should make the MAC of the hosts interface sticky to the attached bridge. Unfortunately, there's no support by the brctrl command for it (, like 'brctrl addif bridge interface [--sticky]'). Therefore, one have to use something like ifconfig $BRIDGE hw ether `LANG= ifconfig $HOSTNIC | sed -ne /HWaddr/ s/.* HWaddr \(.*\)$/\1/p` in an ifup-post-script. greetings Guido -- Dr. Guido Jäkel Deutsche Nationalbibliothek IT SG 2.2 (Infrastruktur Unix) Adickesallee 1 60322 Frankfurt am Main Tel. +49-69-1525-1750 Fax +49-69-1525-1799 mailto:g.jae...@dnb.de http://www.dnb.de -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] blkio.weight doesn't work
And neither slice_idle nor group_idle is zero? Did you change any default parameters for CFQ? -zyh 在 2011年12月14日 下午4:55，陈竞 cj.mag...@gmail.com 写道： my io scheduler is CFQ So the result is weird 在 2011年12月14日 下午4:12，陈竞 cj.mag...@gmail.com写道： Hi， i'm using lxc in my project, i want to control disk io speed, so i use blkio.weight. I test it, but the result is confusing. I create two container A and B: A: blkio.weight = 100 B : blkio.weight=1000 the running process in A and B are the same, which is bash script : dd if=/tmp/xxx of=/dev/null the size of xxx is 400Mb I suppose that A would be slower than B, since its weight is small, while the test turns out that B run as fast as A, they are in same speed. Can any help me figure it out ? PS: my kernel is 2.6.32, and lxc is 0.7.5 -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] blkio.weight doesn't work
在 2011年12月14日 下午5:30，陈竞 cj.mag...@gmail.com 写道： i got the problem, my script is wrong, it should drop the cache, or it will read data from cache, the script is : sync echo 3 /proc/sys/vm/drop_caches dd if=/tmp/file1 of=/dev/null size of file1 is 400M, and i get new test result: A: blkio.weight=100 cost 11.12s speed is 37.5MB/s B: blkio.weight=1000 cost 6.4s speed is 65.7MB/s so the blkio.weight has some effect, bu the result is not as good as 1:10 No, it is good. Blkio controller doesn't reserve bandwith for any groups, so what happened in your test is Group B finished before Group A, and after that Group A was able to occupy all bandwith, which made it much faster. So if the size of input files are the same, then the expect run time is: For Group B: Runtime A = size / 10B For Group A: Runtiem B = size / 10B + 0.9 * size / 11B Then Runtime A / Runtime B = 0.55 In your test, 6.4 / 11.12 = 0.5755, so it works well. -- Thanks, Zhu Yanhai 2011/12/14 Zhu Yanhai zhu.yan...@gmail.com And neither slice_idle nor group_idle is zero? Did you change any default parameters for CFQ? -zyh 在 2011年12月14日 下午4:55，陈竞 cj.mag...@gmail.com 写道： my io scheduler is CFQ So the result is weird 在 2011年12月14日 下午4:12，陈竞 cj.mag...@gmail.com写道： Hi， i'm using lxc in my project, i want to control disk io speed, so i use blkio.weight. I test it, but the result is confusing. I create two container A and B: A: blkio.weight = 100 B : blkio.weight=1000 the running process in A and B are the same, which is bash script : dd if=/tmp/xxx of=/dev/null the size of xxx is 400Mb I suppose that A would be slower than B, since its weight is small, while the test turns out that B run as fast as A, they are in same speed. Can any help me figure it out ? PS: my kernel is 2.6.32, and lxc is 0.7.5 -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] blkio.weight doesn't work
2011/12/14 Zhu Yanhai zhu.yan...@gmail.com: 在 2011年12月14日 下午5:30，陈竞 cj.mag...@gmail.com 写道： i got the problem, my script is wrong, it should drop the cache, or it will read data from cache, the script is : sync echo 3 /proc/sys/vm/drop_caches dd if=/tmp/file1 of=/dev/null size of file1 is 400M, and i get new test result: A: blkio.weight=100 cost 11.12s speed is 37.5MB/s B: blkio.weight=1000 cost 6.4s speed is 65.7MB/s so the blkio.weight has some effect, bu the result is not as good as 1:10 No, it is good. Blkio controller doesn't reserve bandwith for any groups, so what happened in your test is Group B finished before Group A, and after that Group A was able to occupy all bandwith, which made it much faster. So if the size of input files are the same, then the expect run time is: For Group B: Runtime A = size / 10B For Group A: Runtiem B = size / 10B + 0.9 * size / 11B oops, a typo here, one couple of A and B are inverted, anyway the point still stands. -zyh Then Runtime A / Runtime B = 0.55 In your test, 6.4 / 11.12 = 0.5755, so it works well. -- Thanks, Zhu Yanhai 2011/12/14 Zhu Yanhai zhu.yan...@gmail.com And neither slice_idle nor group_idle is zero? Did you change any default parameters for CFQ? -zyh 在 2011年12月14日 下午4:55，陈竞 cj.mag...@gmail.com 写道： my io scheduler is CFQ So the result is weird 在 2011年12月14日 下午4:12，陈竞 cj.mag...@gmail.com写道： Hi， i'm using lxc in my project, i want to control disk io speed, so i use blkio.weight. I test it, but the result is confusing. I create two container A and B: A: blkio.weight = 100 B : blkio.weight=1000 the running process in A and B are the same, which is bash script : dd if=/tmp/xxx of=/dev/null the size of xxx is 400Mb I suppose that A would be slower than B, since its weight is small, while the test turns out that B run as fast as A, they are in same speed. Can any help me figure it out ? PS: my kernel is 2.6.32, and lxc is 0.7.5 -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] blkio.weight doesn't work
thank you very much. I really get it 2011/12/14 Zhu Yanhai zhu.yan...@gmail.com 在 2011年12月14日 下午5:30，陈竞 cj.mag...@gmail.com 写道： i got the problem, my script is wrong, it should drop the cache, or it will read data from cache, the script is : sync echo 3 /proc/sys/vm/drop_caches dd if=/tmp/file1 of=/dev/null size of file1 is 400M, and i get new test result: A: blkio.weight=100cost 11.12s speed is 37.5MB/s B: blkio.weight=1000cost 6.4s speed is 65.7MB/s so the blkio.weight has some effect, bu the result is not as good as 1:10 No, it is good. Blkio controller doesn't reserve bandwith for any groups, so what happened in your test is Group B finished before Group A, and after that Group A was able to occupy all bandwith, which made it much faster. So if the size of input files are the same, then the expect run time is: For Group B: Runtime A = size / 10B For Group A: Runtiem B = size / 10B + 0.9 * size / 11B Then Runtime A / Runtime B = 0.55 In your test, 6.4 / 11.12 = 0.5755, so it works well. -- Thanks, Zhu Yanhai 2011/12/14 Zhu Yanhai zhu.yan...@gmail.com And neither slice_idle nor group_idle is zero? Did you change any default parameters for CFQ? -zyh 在 2011年12月14日 下午4:55，陈竞 cj.mag...@gmail.com 写道： my io scheduler is CFQ So the result is weird 在 2011年12月14日 下午4:12，陈竞 cj.mag...@gmail.com写道： Hi， i'm using lxc in my project, i want to control disk io speed, so i use blkio.weight. I test it, but the result is confusing. I create two container A and B: A: blkio.weight = 100B : blkio.weight=1000 the running process in A and B are the same, which is bash script : dd if=/tmp/xxx of=/dev/null the size of xxx is 400Mb I suppose that A would be slower than B, since its weight is small, while the test turns out that B run as fast as A, they are in same speed. Can any help me figure it out ? PS: my kernel is 2.6.32, and lxc is 0.7.5 -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- 陈竞，中科院计算技术研究所，高性能计算机中心 Jing Chen HPCC.ICT.AC China -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] lxc and guest /proc/kcore access restriction
Hi Serge, -Ursprüngliche Nachricht- Von: Serge Hallyn [mailto:serge.hal...@canonical.com] An: Fiedler Roman Cc: lxc-users@lists.sourceforge.net Betreff: Re: [Lxc-users] lxc and guest /proc/kcore access restriction Quoting Fiedler Roman (roman.fied...@ait.ac.at): Hello List, I have problems finding information about lxc with system virtualization and access restriction to /proc/kcore. In my setup, root in guest can read /proc/kcore, data from host shows up in container kcore, so kcore is not somehow faked/virtualized. I did not find no suitable information about securing /proc use inside container, so perhaps someone could point me to information to these questions? * Is secure /proc use (no escape, no major host/container or inter- container info leaks) inside guest possible? ATM I recommend you use an LSM to do that. Thanks for the hint, I'm looking into that. Is there anyone on this list, who is already using kernel memory isolation between guest and host or between guests? Which LSM variant and configuration is useful? Is there a good base configuration to start with? I'm using http://www.ibm.com/developerworks/linux/library/l-lxc-security/index.html?ca=dgr-lnxw961ELinux-Smack-ContainsS_TACT=105AGX59S_CMP=grsitelnxw961 for a start, but I guess it is a long road until all access to all critical /proc components and syscalls is restricted. Thanks, Roman -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
Re: [Lxc-users] lxc and guest /proc/kcore access restriction
Quoting Fiedler Roman (roman.fied...@ait.ac.at): Hi Serge, -Ursprüngliche Nachricht- Von: Serge Hallyn [mailto:serge.hal...@canonical.com] An: Fiedler Roman Cc: lxc-users@lists.sourceforge.net Betreff: Re: [Lxc-users] lxc and guest /proc/kcore access restriction Quoting Fiedler Roman (roman.fied...@ait.ac.at): Hello List, I have problems finding information about lxc with system virtualization and access restriction to /proc/kcore. In my setup, root in guest can read /proc/kcore, data from host shows up in container kcore, so kcore is not somehow faked/virtualized. I did not find no suitable information about securing /proc use inside container, so perhaps someone could point me to information to these questions? * Is secure /proc use (no escape, no major host/container or inter- container info leaks) inside guest possible? ATM I recommend you use an LSM to do that. Thanks for the hint, I'm looking into that. Is there anyone on this list, who is already using kernel memory isolation between guest and host or between guests? Which LSM variant and configuration is useful? Is there a good base configuration to start with? Yes, check out http://osdir.com/ml/lxc-chroot-linux-containers/2011-08/msg4.html for Olivier using Smack. I don't know of anyone using SELinux, but it should be a snap. I'm using http://www.ibm.com/developerworks/linux/library/l-lxc-security/index.html?ca=dgr-lnxw961ELinux-Smack-ContainsS_TACT=105AGX59S_CMP=grsitelnxw961 for a start, but I guess it is a long road until all access to all critical /proc components and syscalls is restricted. In the next few months we hope to have effective (not very flexibile, but effective) apparmor support. Then over the next 6 months after that, more flexibility will be added. (I can say more about the limitations etc, but I suspect as you can't use it right now that's less interesting to you than following up on the Smack usage.) http://wiki.ubuntu.com/LxcSecurity may be of interest. -serge -- Cloud Computing - Latest Buzzword or a Glimpse of the Future? This paper surveys cloud computing today: What are the benefits? Why are businesses embracing it? What are its payoffs and pitfalls? http://www.accelacomm.com/jaw/sdnl/114/51425149/ ___ Lxc-users mailing list Lxc-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-users
[Lxc-users] Broken pipe when ssh from host to container
Hi, I setup a container on Ubuntu 10.04, using kernel 3.0 (backported from oneiric) and lxc 0.7.5. If I ssh from the host to the container, my session will be terminated in about 5 seconds with a error message Write failed: broken pipe. Ssh keep alive doesn't seem to be the issue, as I've enabled/set all relevant options. Interestingly, if I ssh from another machine rather from the host, I do not encounter this issue. Any insight on solving this problem is appreciated. ps. I'm including the debug output of ssh -vvv for your reference. = begin ssh log verdi.march@opencirrus-07308:~$ ssh -vvv root@198.55.37.111 OpenSSH_5.3p1 Debian-3ubuntu7, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug2: ssh_connect: needpriv 0 debug1: Connecting to 198.55.37.111 [198.55.37.111] port 22. debug1: Connection established. debug1: identity file /home/verdi.march/.ssh/identity type -1 debug1: identity file /home/verdi.march/.ssh/id_rsa type -1 debug1: identity file /home/verdi.march/.ssh/id_dsa type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_5.1p1 Debian-5 debug1: match: OpenSSH_5.1p1 Debian-5 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu7 debug2: fd 3 setting O_NONBLOCK debug1: SSH2_MSG_KEXINIT sent debug3: Wrote 792 bytes for a total of 831 debug1: SSH2_MSG_KEXINIT received debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-...@lysator.liu.se debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-...@lysator.liu.se debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac...@openssh.com,hmac-ripemd160,hmac-ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac...@openssh.com,hmac-ripemd160,hmac-ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,z...@openssh.com,zlib debug2: kex_parse_kexinit: none,z...@openssh.com,zlib debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,rijndael-...@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,rijndael-...@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac...@openssh.com,hmac-ripemd160,hmac-ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac...@openssh.com,hmac-ripemd160,hmac-ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,z...@openssh.com debug2: kex_parse_kexinit: none,z...@openssh.com debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: mac_setup: found hmac-md5 debug1: kex: server-client aes128-ctr hmac-md5 none debug2: mac_setup: found hmac-md5 debug1: kex: client-server aes128-ctr hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(102410248192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug3: Wrote 24 bytes for a total of 855 debug2: dh_gen_key: priv key bits set: 139/256 debug2: bits set: 537/1024 debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug3: Wrote 144 bytes for a total of 999 debug3: check_host_in_hostfile: filename /home/verdi.march/.ssh/known_hosts debug3: check_host_in_hostfile: match line 1 debug1: Host '198.55.37.111' is known and matches the RSA host key. debug1: Found key in /home/verdi.march/.ssh/known_hosts:1 debug2: bits set: 516/1024 debug1: ssh_rsa_verify: signature correct debug2: kex_derive_keys debug2: set_newkeys: mode 1 debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug3: Wrote 16 bytes for a total of 1015 debug2: set_newkeys: mode 0 debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug3: Wrote 48 bytes for a total of 1063 debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug2: key: /home/verdi.march/.ssh/identity ((nil)) debug2: key: /home/verdi.march/.ssh/id_rsa ((nil))
