[Vserver] alpha and dietlibc
There is a problem with programs compiled against dietlibc on alpha segfaulting when SIGHUP is trapped. This affects lockfile in the util-vserver package. It was suggested on irc that the flags and mask varibales in the sigaction struct for alpha were around the wrong way. Swapping sa_flags and sa_mask makes the alpha section the same as the ia64 and hppa section. This patch also tidies that up. So far no more segfaults when trapping SIGHUP. diff -urN dietlibc-0.29-orig/include/signal.h dietlibc-0.29/include/signal.h --- dietlibc-0.29-orig/include/signal.h Tue Mar 15 18:51:22 2005 +++ dietlibc-0.29/include/signal.h Thu Jun 23 15:46:02 2005 @@ -438,14 +438,7 @@ } sigset_t; struct sigaction { -#if defined(__alpha__) - union { -sighandler_t _sa_handler; -void (*_sa_sigaction)(int, siginfo_t*, void*); - } _u; - sigset_t sa_mask; - unsigned long sa_flags; -#elif defined(__ia64__) || defined(__hppa__) +#if defined(__alpha__) || defined(__ia64__) || defined(__hppa__) union { sighandler_t _sa_handler; void (*_sa_sigaction)(int, siginfo_t*, void*); -- James ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Re: capchroot: chroot(): Permission denied
the debian tools/patches are broken, please switch to 2.0-rc4 and 0.30.207, then try again either with a new guest/volume or by removing any dubious permissions/flags from the guest root dir like this: chmod 755 /path/to/vserver/guest chattr -t -i /path/to/vserver/guest setattr --~barrier /path/to/vserver/guest Thanks a lot. I'll try this and let you know if it doesn't solve the problem. Thanks again ! Marc ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] alpha and dietlibc
On Thu, 23 Jun 2005, James Boddington wrote: diff -urN dietlibc-0.29-orig/include/signal.h dietlibc-0.29/include/signal.h --- dietlibc-0.29-orig/include/signal.h Tue Mar 15 18:51:22 2005 +++ dietlibc-0.29/include/signal.h Thu Jun 23 15:46:02 2005 Did you CC [EMAIL PROTECTED] -- Bug? That's not a bug, that's a feature. ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] alpha and dietlibc
Bodo Eggert wrote: Did you CC [EMAIL PROTECTED] I have also sent an email to that list. -- James ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] cannot remove directory
Hello, --- hostserver:/vservers/suse92/etc/rc.d # vserver suse92 start WARNING: can not find configuration, assuming legacy method Starting the virtual server suse92 Server suse92 is not running rm: cannot remove `var/lock/subsys/sysconfig': Is a directory ipv4root is now 192.168.0.180 Host name is now suse92 New security context is 49176 --- is the rm-error an problem inside my guest or a util-vserver problem? Or should i just ignore it? Thx, Oliver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Suse and Yast inside VServer
Hi, I use SuSE SLES 9 guests, except I cheated. Wow, thats great! Exactly what i need! i've tried that one week ago (with suse 9.2 prof.) ... (1) made 2 partitions (2) installed suse to each partition (making 2 minimal installations) (3) used the one as vserver-host, the other as a template for a vserver (4) deploy-vserver ... skeleton (5) copied the template to there (6) replaced fstab (7) done some thinks i don't remind Yep I think 7) is where the problem is :) Luckily I remember what I did mostly! The main problems are because of the way SuSE init works. ok, started from the beginning - seem's to work now :-)) 1) edit the main init script /vservers/foo/etc/init.d/rc and after the initial comment, add: RUNLEVEL=$1 ok, this was the point i didn't do ... 2) edit the /vservers/foo/etc/init.d/network script and put some exit 0's in it. Otherwise you get a hang on vserver startup/shutdown when the guest tries to flush the interfaces/addresses or something. hm, i had to comment-out and disable some other stuff ... things like hotplug-scan-on-boot and boot-logging to /dev/console (which does not exist inside a vserver) ... but no problem - the errors while vserver-start have pointed me in the right direction ;-) Again, thx very much! Oliver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Vserver with Luster CFS
On Thu, Jun 23, 2005 at 08:05:53AM -0600, Jon Scottorn wrote: Sorry, that was at the end of my day. I can today if you guys are yes, please do so ... there, or through email, which ever works for me. best, Herbert Thanks, Herbert Poetzl wrote: On Wed, Jun 22, 2005 at 03:55:54PM -0600, Jon Scottorn wrote: I have now upgraded to VS2.0-rc4 and I still have the same result. okay, looks like you're still? awake, so why not join us at #vserver, irc.oftc.net? best, Herbert I go to start the vserver and it stalls. Again these are the processes running pts/0S+ 0:00 /bin/bash /usr/local/sbin/vserver monitor start 5677 pts/0S+ 0:00 /usr/local/lib/util-vserver/lockfile /var/lock/vserver.usrlocaletcvserversmonitor.startup 5694 pts/0D+ 0:00 /usr/local/lib/util-vserver/chroot-cat /etc/mtab Here is what is reported in syslog when I start it as well: idr_remove called for id=639838 which is not allocated. [c01d983f] sub_remove+0xef/0x100 [c017edbe] invalidate_list+0x2e/0xe0 [c017eec5] invalidate_inodes+0x55/0x70 [c01d987f] idr_remove+0x2f/0xc0 [c016abc6] kill_anon_super+0x36/0x50 [c016a141] deactivate_super+0x61/0x80 [c018210c] sys_umount+0x4c/0xd0 [c016de1b] sys_stat64+0x1b/0x40 [c01821a5] sys_oldumount+0x15/0x20 [c0103123] syscall_call+0x7/0xb Any ideas on what I can try next to see if this will work? Thanks, Jon Herbert Poetzl wrote: On Wed, Jun 22, 2005 at 07:53:25AM -0600, Jon Scottorn wrote: I will do some testing and yes we would really like it to work. Lustre is an awesome cluster filesystem that combined with the vserver software would have cool functionality. basically we cluster the vservers directory between a high end data server and have multiple front ends so that if any of the systems crash we can bring the vservers on that front end up within a couple of minutes of being down. sounds good, we are interested too :) I will try 2.6.12, but where do I get vs2-rc4? and will it possibily work with 2.6.11.11 kernel? yep, http://vserver.13thfloor.at/Experimental/patch-2.6.11.11-vs2.0-rc4.diff.bz2 http://www.13thfloor.at/~doener/vserver/patches/patch-2.6.12-vs2.0-rc4.diff best, Herbert Thanks, Jon Herbert Poetzl wrote: On Tue, Jun 21, 2005 at 04:53:50PM -0600, Jon Scottorn wrote: Hello, I am wondering if the Vserver software works on a Lustre Cluster file system. I have setup everything running linux 2.6.11.11 with Vserver 1.9.5 and latest utils and when I go to start the vserver it stalls with no errors, but it never starts. Here are the processes that are running at the time: 4287 pts/0S+ 0:00 /bin/bash /usr/local/sbin/vserver awstats start 4297 pts/0S+ 0:00 /usr/local/lib/util-vserver/lockfile /var/lock/vserver.usrlocaletcvserversawstats.startup 4314 pts/0D+ 0:00 /usr/local/lib/util-vserver/chroot-cat /etc/mtab To fix it I have to kill these processes and then vserver gives this error: /usr/local/lib/util-vserver/vserver.functions: line 653: 4297 Terminated $_LOCKFILE $1 $tmp $2 (wd: /vservers) Failed to start vserver 'awstats' Terminated Any ideas? first, try with 2.6.12 and vs2.0-rc4+ (tools 0.30.207), then make some 'basic' tests with the Lustre FS regarding namespaces, it might be, that it doesn't like them ... you can for example create/configure a guest to use chroot and avoid the namespaces ... it is also possible that the networking? part of Lustre is not able to bypass the chbind security ... anyway, if you know lustre details and/or are interested in making this work, then we can investigate/fix it ... but it will require some work (mainly testing/setup) on your side (AFAIK it wasn't tested with lustre yet) ... best, Herbert Thanks in advance. Jon S ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] cannot remove directory
On Thu, Jun 23, 2005 at 12:46:44PM +0200, Oliver Dietz wrote: Hello, --- hostserver:/vservers/suse92/etc/rc.d # vserver suse92 start WARNING: can not find configuration, assuming legacy method Starting the virtual server suse92 Server suse92 is not running rm: cannot remove `var/lock/subsys/sysconfig': Is a directory try: cd /tmp mkdir xxx rm xxx rm: cannot remove directory `xxx': Is a directory maybe your rm 'forgot' to mention the 'directory' part? (check with both rm, the host and the guest one) if so, check that var/lock/subsys/sysconfig isn't a directory (by some accident) ... if not, and you are sure that your filesystem is okay, and no other security related patches are present, let me know (i.e. we will investigate it further) best, Herbert ipv4root is now 192.168.0.180 Host name is now suse92 New security context is 49176 --- is the rm-error an problem inside my guest or a util-vserver problem? Or should i just ignore it? Thx, Oliver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] cannot remove directory
Hi Herbert, rm: cannot remove `var/lock/subsys/sysconfig': Is a directory maybe your rm 'forgot' to mention the 'directory' part? (check with both rm, the host and the guest one) --- stargate:/vservers/suse92/var/lock/subsys # ls -l drwxr-xr-x 3 root root 4096 Jun 23 11:03 . drwxrwxr-t 4 root uucp 4096 Jun 23 12:35 .. drwxr-xr-x 2 root root 4096 Oct 26 2004 sysconfig stargate:/var/lock/subsys # ls -l drwxr-xr-x 3 root root 4096 May 13 21:53 . drwxrwxr-t 4 root uucp 4096 Jun 21 17:24 .. drwxr-xr-x 2 root root 4096 Oct 26 2004 sysconfig --- sysconfig is a directory. Host and guest is both Suse 9.2 ... Is this non-standart compared to other distros? if so, check that var/lock/subsys/sysconfig isn't a directory (by some accident) ... if not, and you are sure that your filesystem is okay, and no other security related patches are present, let me know (i.e. we will investigate it further) hm, does the util-vserver-tools remove that file/directory when starting a vserver? Thx, Oliver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Mailinglist
PLEASE Herbet or somebody else, remove me from this list ! I´ve done it know 5 times but i think i do something wrong... PLEASE REMOVE ME PLEASE This is Spam for me !!! Greatz Timo ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] solaris containers/zones
I just saw this article come through the big-admin newsletter. I don't currently have any Solaris computers and I haven't used Solaris 10 (or 9 for that matter), so all I can do is read about it. This seems kind of cool and in-line with what my ideal linux-vserver usage would look like. I just use vservers to logically separate applications so that as they grow they can spin off to their own server w/out hassle. Of course, vserver is great for that because it has so little resource overhead. http://www.sun.com/bigadmin/content/submitted/dollar_container.html The feature that strikes me as so intriguing is the ability to allocate CPU resources to zones. Also, look how they create a zone for tomcat. That strikes me as a very easy to use tool (no editing config files, just use set). Not that I'm trying to critique any of the work being done on vserver; I just thought you might like a glimpse of one other way someone is doing this sort of thing. -- Matthew Nuzum [EMAIL PROTECTED] www.followers.net - Makers of Elite Content Management System View samples of Elite CMS in action by visiting http://www.followers.net/portfolio/ ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] solaris containers/zones
On Thu, Jun 23, 2005 at 12:15:54PM -0500, Matthew Nuzum wrote: I just saw this article come through the big-admin newsletter. I don't currently have any Solaris computers and I haven't used Solaris 10 (or 9 for that matter), so all I can do is read about it. This seems kind of cool and in-line with what my ideal linux-vserver usage would look like. I just use vservers to logically separate applications so that as they grow they can spin off to their own server w/out hassle. Of course, vserver is great for that because it has so little resource overhead. http://www.sun.com/bigadmin/content/submitted/dollar_container.html The feature that strikes me as so intriguing is the ability to allocate CPU resources to zones. Also, look how they create a zone for tomcat. That strikes me as a very easy to use tool (no editing config files, just use set). Not that I'm trying to critique any of the work being done on vserver; I just thought you might like a glimpse of one other way someone is doing this sort of thing. hmm, you sure you know what linux-vserver 2.6/vs2.0 can do? anyway, thanks for the input! best, Herbert -- Matthew Nuzum [EMAIL PROTECTED] www.followers.net - Makers of Elite Content Management System View samples of Elite CMS in action by visiting http://www.followers.net/portfolio/ ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
RE: [Vserver] solaris containers/zones
I just thought you might like a glimpse of one other way someone is doing this sort of thing. hmm, you sure you know what linux-vserver 2.6/vs2.0 can do? anyway, thanks for the input! best, Herbert :-[ I guess I don't... I'm running out of hardware to experiment with, so I haven't been playing with the new stuff too much. You know, if a distro wanted to get some media attention, they could put some effort behind the vserver project and roll it into their distro as an optional module with a nice config tool. Of course, I don't know if vserver can be built as an optional module, I've only built it into a vanilla kernel, but still... they could raise a lot of hype and woo some enterprise (aka paying customer) market share, I think. -- Matthew Nuzum [EMAIL PROTECTED] www.followers.net - Makers of Elite Content Management System View samples of Elite CMS in action by visiting http://www.followers.net/portfolio/ ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] solaris containers/zones
On Thu, Jun 23, 2005 at 12:36:29PM -0500, Matthew Nuzum wrote: I just thought you might like a glimpse of one other way someone is doing this sort of thing. hmm, you sure you know what linux-vserver 2.6/vs2.0 can do? anyway, thanks for the input! best, Herbert :-[ I guess I don't... I'm running out of hardware to experiment with, so I haven't been playing with the new stuff too much. you can get a feeling by reading my paper or just looking at the version matrix ... http://linux-vserver.org/Linux-VServer-Paper http://linux-vserver.org/Release+FAQ You know, if a distro wanted to get some media attention, they could put some effort behind the vserver project and roll it into their distro as an optional module with a nice config tool. probably ... Of course, I don't know if vserver can be built as an optional module, I've module is not really an option, we change too many things which are not covered by LSM hooks or such only built it into a vanilla kernel, but still... they could raise a lot of hype and woo some enterprise (aka paying customer) market share, I think. only time will tell ... best, Herbert -- Matthew Nuzum [EMAIL PROTECTED] www.followers.net - Makers of Elite Content Management System View samples of Elite CMS in action by visiting http://www.followers.net/portfolio/ ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
RE: [Vserver] solaris containers/zones
-Original Message- From: [EMAIL PROTECTED] [mailto:vserver- [EMAIL PROTECTED] On Behalf Of Matthew Nuzum Sent: Friday, 24 June 2005 5:36 a.m. To: vserver@list.linux-vserver.org Subject: RE: [Vserver] solaris containers/zones I just thought you might like a glimpse of one other way someone is doing this sort of thing. hmm, you sure you know what linux-vserver 2.6/vs2.0 can do? I guess I don't... I'm running out of hardware to experiment with, so I haven't been playing with the new stuff too much. VMware Workstation (virtual machine software) will let you have as many different distributions of Linux (or *BSD or Solaris 10) running as you have disk space for. It has both Windows and Linux versions. It costs money to buy the software but you can download an Evaluation Copy. It also lets you clone your virtual machines as well, or even snapshot them while they are running. Great tool for messing about with stuff and/or cross-platform development. You know, if a distro wanted to get some media attention, they could put some effort behind the vserver project and roll it into their distro as an optional module with a nice config tool. As much as I like Vservers (we use them on 2 of our Production servers!!) it looks like the Xen project (open source virtual machine software) IS getting LOTS of media coverage and attention/resources from vendors (Novell, IBM, Sun, HP, Redhat, etc). Apparently the current version (v2) isn't that great but the next version (due out in August) sounds like a huge leap forward. Even though its virtual machines rather than virtual servers, they claim way less overhead than other Virtual Machine software (like the VMware server products). Check out http://www.theregister.co.uk/2005/06/15/xen_goes_three Then do a few googles and you find lots of other interesting stuff, like IBM sinking research people into making a security enchanced version (XenSE), etc. Of course, I don't know if vserver can be built as an optional module, I've only built it into a vanilla kernel, but still... they could raise a lot of hype and woo some enterprise (aka paying customer) market share, I think. Xen RPM's are available for some distro's now and the two big Enterprise players (Redhat and SuSE) are incorporating it into their next major release. It's also going into the mainstream 2.6 kernel soon. Anyway, I like Vservers. I use Vservers. However owing to the luck of the draw it looks like Xen is getting lots and LOTS of attention. Having said that, I'd not run a Production server on it yet! So I'll be sticking with Vservers for another 10 months at least. Then again, if the Solaris people got their Linux emulation stuff (Janus?) working properly, you could also run your Linux servers inside Solaris Containers! ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] solaris containers/zones
On Fri, Jun 24, 2005 at 09:39:38AM +1200, Mike Tierney wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:vserver- [EMAIL PROTECTED] On Behalf Of Matthew Nuzum Sent: Friday, 24 June 2005 5:36 a.m. To: vserver@list.linux-vserver.org Subject: RE: [Vserver] solaris containers/zones I just thought you might like a glimpse of one other way someone is doing this sort of thing. hmm, you sure you know what linux-vserver 2.6/vs2.0 can do? I guess I don't... I'm running out of hardware to experiment with, so I haven't been playing with the new stuff too much. VMware Workstation (virtual machine software) will let you have as many different distributions of Linux (or *BSD or Solaris 10) running as you have disk space for. It has both Windows and Linux versions. It costs money to buy the software but you can download an Evaluation Copy. It also lets you clone your virtual machines as well, or even snapshot them while they are running. Great tool for messing about with stuff and/or cross-platform development. You know, if a distro wanted to get some media attention, they could put some effort behind the vserver project and roll it into their distro as an optional module with a nice config tool. As much as I like Vservers (we use them on 2 of our Production servers!!) it looks like the Xen project (open source virtual machine software) IS getting LOTS of media coverage and attention/resources from vendors (Novell, IBM, Sun, HP, Redhat, etc). Apparently the current version (v2) isn't that great but the next version (due out in August) sounds like a huge leap forward. Even though its virtual machines rather than virtual servers, they claim way less overhead than other Virtual Machine software (like the VMware server products). Check out http://www.theregister.co.uk/2005/06/15/xen_goes_three also check out: http://www.freesoftwaremagazine.com/free_issues/issue_05/focus-linux_vserver/ Then do a few googles and you find lots of other interesting stuff, like IBM sinking research people into making a security enchanced version (XenSE), etc. Of course, I don't know if vserver can be built as an optional module, I've only built it into a vanilla kernel, but still... they could raise a lot of hype and woo some enterprise (aka paying customer) market share, I think. Xen RPM's are available for some distro's now and the two big Enterprise players (Redhat and SuSE) are incorporating it into their next major release. It's also going into the mainstream 2.6 kernel soon. Anyway, I like Vservers. I use Vservers. However owing to the luck of the draw it looks like Xen is getting lots and LOTS of attention. Having said that, I'd not run a Production server on it yet! So I'll be sticking with Vservers for another 10 months at least. Then again, if the Solaris people got their Linux emulation stuff (Janus?) working properly, you could also run your Linux servers inside Solaris Containers! which means you get less features for a higher price, so what's the point there? the solaris compatibility? best, Herbert ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver