[Vserver] mount a NFS filesystem into a vserver

2005-09-13 Thread smagnuson


I am looking to mount a NFS filesystem into a vserver.  I have searched the 
archives, the site, and the web but can not find a straight answer to this.
What is the proper/preferred method of doing this?
Does anyone have the steps?

I would like to mount a nfs filesystem from a non vserver (nfs server) into a 
vserver (nfs client).

Thanks
sig


--
Linux-VServer Test [V0.13] Copyright (C) 2003-2005 H.Poetzl
chcontext is working.
chbind is working.
Linux 2.6.12.4-vs2.0 i686/0.30.208/0.30.208 [Ea] (0)
VCI:  0002:0001 273 0316
---
[000]# succeeded.
[001]# succeeded.
[011]# succeeded.
[031]# succeeded.
[101]# succeeded.
[102]# succeeded.
[201]# succeeded.
[202]# succeeded.


---
Versions:
   Kernel: 2.6.12.4-vs2.0
   VS-API: 0x00020001
 util-vserver: 0.30.208; Aug 24 2005, 21:26:20

Features:
   CC: gcc, gcc (GCC) 3.4.3 (CRUX)
  CXX: g++, g++ (GCC) 3.4.3 (CRUX)
 CPPFLAGS: ''
   CFLAGS: '-g -O2 -std=c99 -Wall -pedantic -W -funit-at-a-time'
 CXXFLAGS: '-g -O2 -ansi -Wall -pedantic -W -fmessage-length=0 
-funit-at-a-time'
   build/host: i686-pc-linux-gnu/i686-pc-linux-gnu
 Use dietlibc: yes
   Build C++ programs: yes
   Build C99 programs: yes
   Available APIs: compat,v11,v13,fscompat,net,oldproc,olduts
ext2fs Source: e2fsprogs
syscall(2) invocation: alternative
  vserver(2) syscall#: 273/glibc

Paths:
   prefix: /usr/local
sysconf-Directory: ${prefix}/etc
cfg-Directory: ${prefix}/etc/vservers
 initrd-Directory: $(sysconfdir)/init.d
   pkgstate-Directory: ${prefix}/var/run/vservers
Kernelheaders: /lib/modules/2.6.12.4-vs2.0/build/include
  vserver-Rootdir: /vservers


Assumed 'SYSINFO' as no other option given; try '--help' for more information.

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] mount a NFS filesystem into a vserver

2005-09-13 Thread Herbert Poetzl
On Tue, Sep 13, 2005 at 09:49:42AM -0600, [EMAIL PROTECTED] wrote:
 
 
 I am looking to mount a NFS filesystem into a vserver. I have searched
 the archives, the site, and the web but can not find a straight answer
 to this. What is the proper/preferred method of doing this? Does
 anyone have the steps?

depends on your setup/permissions ... if you have
access to the host system, simply mount it there

 I would like to mount a nfs filesystem from a non vserver (nfs server)
 into a vserver (nfs client).

inside, you have to use some kind of userspace nfs
daemon as you do not have/get kernel support without
proper permissions ...

HTH,
Herbert

PS: I really appreciate the system description below!

 Thanks
 sig
 
 
 --
 Linux-VServer Test [V0.13] Copyright (C) 2003-2005 H.Poetzl
 chcontext is working.
 chbind is working.
 Linux 2.6.12.4-vs2.0 i686/0.30.208/0.30.208 [Ea] (0)
 VCI:  0002:0001 273 0316
 ---
 [000]# succeeded.
 [001]# succeeded.
 [011]# succeeded.
 [031]# succeeded.
 [101]# succeeded.
 [102]# succeeded.
 [201]# succeeded.
 [202]# succeeded.
 
 
 ---
 Versions:
Kernel: 2.6.12.4-vs2.0
VS-API: 0x00020001
  util-vserver: 0.30.208; Aug 24 2005, 21:26:20
 
 Features:
CC: gcc, gcc (GCC) 3.4.3 (CRUX)
   CXX: g++, g++ (GCC) 3.4.3 (CRUX)
  CPPFLAGS: ''
CFLAGS: '-g -O2 -std=c99 -Wall -pedantic -W 
 -funit-at-a-time'
  CXXFLAGS: '-g -O2 -ansi -Wall -pedantic -W 
 -fmessage-length=0 -funit-at-a-time'
build/host: i686-pc-linux-gnu/i686-pc-linux-gnu
  Use dietlibc: yes
Build C++ programs: yes
Build C99 programs: yes
Available APIs: compat,v11,v13,fscompat,net,oldproc,olduts
 ext2fs Source: e2fsprogs
 syscall(2) invocation: alternative
   vserver(2) syscall#: 273/glibc
 
 Paths:
prefix: /usr/local
 sysconf-Directory: ${prefix}/etc
 cfg-Directory: ${prefix}/etc/vservers
  initrd-Directory: $(sysconfdir)/init.d
pkgstate-Directory: ${prefix}/var/run/vservers
 Kernelheaders: /lib/modules/2.6.12.4-vs2.0/build/include
   vserver-Rootdir: /vservers
 
 
 Assumed 'SYSINFO' as no other option given; try '--help' for more information.
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


RE: [Vserver] mount a NFS filesystem into a vserver

2005-09-13 Thread smagnuson


-Original Message-
From: Herbert Poetzl [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 13, 2005 10:10 AM
To: Magnuson, Sig
Cc: vserver@list.linux-vserver.org
Subject: Re: [Vserver] mount a NFS filesystem into a vserver


On Tue, Sep 13, 2005 at 09:49:42AM -0600, [EMAIL PROTECTED] wrote:
 
 
 I am looking to mount a NFS filesystem into a vserver. I have searched
 the archives, the site, and the web but can not find a straight answer
 to this. What is the proper/preferred method of doing this? Does
 anyone have the steps?

depends on your setup/permissions ... if you have
access to the host system, simply mount it there


I have tried this, I can mount the nfs filesystem but it is not viewable inside 
the vserver.  Something else I need to do?

On the host system
df -k
Filesystem   1K-blocks  Used Available Use% Mounted on
...
...
calnfs01:/nfs_oracle_u99
 524272000 158032896 366239104  31% /vservers/unixdev1/mnt

ls -la /vservers/unixdev1/mnt
total 460911
drwxrwxrwx   6  201  201   160 Sep  8 16:11 .
drwxr-xr-x  18 root root  4096 Sep  7 08:55 ..
drwxr-xr-x   9 ops  2001   384 Sep 13 09:33 bashful-restore
-rw-r--r--   1 root root 471506944 Aug 18 11:00 failedlogin
drwxr-xr-x  25  201  201   984 Sep  9 16:38 oracle
drwxr-xr-x   3  201  20172 Sep  8 16:11 oradata

On the guest system (unixdev1)
df -k
Filesystem   1K-blocks  Used Available Use% Mounted on
/dev/hdv1 60199660   8360668  48731624  15% /
none 65536 0 65536   0% /tmp

ls -la /mnt
total 8
drwxr-xr-x   2 root root 4096 Sep  7 00:00 .
drwxr-xr-x  18 root root 4096 Sep  7 08:55 ..

sig
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Vserver newbie question

2005-09-13 Thread Xavier Montagutelli
On Tuesday 13 September 2005 22:32, [eMAXX] Sys-Admin wrote:
 Hi folks,

 Ok, I'm totally lost. I don't seem to get a vserver install to work...
 well at least not the latest version..

I am also a newbie, and I have done it with Debian recently, so let's see 
what's different.

 I'm trying to install vserver from this source:
 http://linux-vserver.derjohn.de/ on Debian Sarge. I written down the
 steps I took for this vserver installation:
[..]
 --
 [1] Wget:

 http://linux-vserver.derjohn.de/kernel-image-2.6.12-p3_10.00.vserver20_i386
.deb http://linux-vserver.derjohn.de/util-vserver_0.30.208-1_i386.deb

I have used the sources from Linus 2.6.12.4 :

wget ftp://ftp.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.4.tar.bz2
wget http://www.13thfloor.at/vserver/s_rel26/v2.0/patch-2.6.12.4-vs2.0.diff

make menuconfig
more /boot/config-2.6.12.4-vs2.0-scivm-xm2
#
# Block devices
#
# CONFIG_BLK_DEV_VROOT is not set
#
# Kernel hacking
#
CONFIG_VSERVER=y
CONFIG_VSERVER_SECURITY=y
CONFIG_VSERVER_LEGACYNET=y
#
# Linux VServer
#
CONFIG_VSERVER_LEGACY=y
# CONFIG_VSERVER_LEGACY_VERSION is not set
# CONFIG_VSERVER_NGNET is not set
CONFIG_VSERVER_PROC_SECURE=y
CONFIG_VSERVER_HARDCPU=y
# CONFIG_VSERVER_HARDCPU_IDLE is not set
# CONFIG_INOXID_NONE is not set
# CONFIG_INOXID_UID16 is not set
# CONFIG_INOXID_GID16 is not set
CONFIG_INOXID_UGID24=y
# CONFIG_INOXID_INTERN is not set
# CONFIG_INOXID_RUNTIME is not set
# CONFIG_XID_TAG_NFSD is not set
# CONFIG_VSERVER_DEBUG is not set

make-kpkg 


 [2] Install new kernel:
 ~# dpkg -i kernel-image-2.6.12-p3_10.00.vserver20_i386.deb

 [2a] Update /boot/grub/menu.lst to change the label so it contains vs
 ~# nano /boot/grub/menu.lst

 [3] Reboot...

 ---

 [4] Install Util-Vserver:
 ~# dpkg -i util-vserver_0.30.208-1_i386.deb

I used the sources :

wget 
http://www.13thfloor.at/vserver/s_rel26/v2.0/util-vserver-0.30.208.tar.bz2

apt-get install vlan iproute e2fslibs-dev
apt-get install dietlibc-dev beecrypt2-dev
./configure --sysconfdir=/etc --localstatedir=/var
make  make install  make install-distribution

mkdir -p /var/lock/subsys
update-rc.d vprocunhide start 74 0 2 .
update-rc.d rebootmgr start 98 2 . stop 02 0 6 .
update-rc.d vservers-default start 98 2 . stop 02 0 6 .

 [5] download and run the testscript:
 ~# wget http://vserver.13thfloor.at/Stuff/SCRIPT/testme.sh
[..]

 [6] So, vserver 2.0 and vserver-util should be running now:
 ~# vserver-info
[..]
 Paths:
prefix: /usr
 sysconf-Directory: ${prefix}/etc
 cfg-Directory: ${prefix}/etc/vservers
  initrd-Directory: $(sysconfdir)/init.d
pkgstate-Directory: ${prefix}/var/run/vservers

these paths seems strange : under Debian, the sysconf-Directory should be /etc 
instead of /usr/etc, cfg-Direfctory should be /etc/vservers instead 
of /usr/etc/vservers, etc.

 [7] Create Vserver basedir since the default location isn't there:
 ~# mkdir /vservers

make install-distribution makes it for you if you compile the userland 
tools. Perhaps you forgot to setattr --barrier /vservers during this step ? 

 ~# mkdir /vservers/vstest01

not necessary. The next step (vserver .. build) should do it for you.


 [8] Create new Context/Virtual Server:
 ~# vserver vstest01 build -m debootstrap --hostname vstest01
 --netdev eth0:vs01 --interface 192.168.27.33 --context 42 -- -d sarge -m
 ftp://ftp.nl.debian.org/debian/

 [9] /proc/sys/kernel/vshelper contains: /sbin/vshelper, must be updated:
 ~# echo /usr/lib/util-vserver/vshelper /proc/sys/kernel/vshelper

make install-distribution makes the link under /sbin

In your case, you could also put it in the /etc/sysctl.conf file (to make it 
persistent across reboots) :

kernel.vshelper = /usr/lib/util-vserver/vshelper


 [10] Then Vserver should run?
 ~# vserver vstest01 start
 /proc/uptime can not be accessed. Usually, this is caused by
 procfs-security. Please read the FAQ for more details
 http://www.linux-vserver.org/index.php?page=Linux-Vserver+FAQ

That's normal (from what I have understood) : the default is that everything 
is protected, you have to unlock things under /proc

 I search the irc-log and then tried this:
 ~# /usr/lib/util-vserver/vprocunhide

Normally, this script is called by /etc/init.d/vprocunhide during the boot 
process of the host system (if your Debian package configures it correctly). 
The files to unhide are listed 
in /usr/lib/util-vserver/defaults/vprocunhide-files (or 
in /etc/vservers/.defaults/apps/vprocunhide/files if that file exists)

 /proc/net/: Bad address
[.. every file to unhide with an error ..]
 I have no clue what this means anyone?

I don't have any idea about that. Do you use devfs ? On my machine, there's no 
devfs.

You could also try some basic commands :

cat /proc/uptime
showattr -d /proc/net
setattr --~hide /proc/net/arp

(the script 

Re: [Vserver] Proc Security in V2.0

2005-09-13 Thread Herbert Poetzl
On Tue, Sep 13, 2005 at 11:39:10PM +0200, Tor Rune Skoglund wrote:
 Søndag 11 september 2005 04:08, skrev Herbert Poetzl:
   A timeout occured while waiting for the vserver to finish and it was
   killed by sending a SIGKILL signal. Please investigate the reasons
   and/or increase the timeout in apps/vshelper/sync-timeout.
  
   on vserver xxx stop. I'm not sure how to debug this.
 
  well, for some reason the guest has still programs
  running after a shutdown, best check with 'vps auxwww'
  and look for processes inside your guest (while waiting
  for the timeout to occur)
 
 OK, you experts have a look at this:
 
 First, minimizing the processes in the vserver to:
 
 templategentoo / # ps ax
   PID TTY  STAT   TIME COMMAND
 1 ?S  0:00 init [3]
 17335 pts/1S  0:00 /bin/bash -login
 17429 pts/1R+ 0:00 ps ax
 templategentoo / # 
 
 Then checking vps on the host:
 
 linuxserver ~ # vps auxwww | grep 100
 root  1008 0 MAIN   0.0  0.0   1444   468 ?Ss  Sep11 
 0:00 udevd
 root 16616   100 templategentoo  0.0  0.0   1464   496 ?Ss   
 23:17 
 0:00 init [3]
 root 17335   100 templategentoo  0.0  0.1   2328  1368 pts/1S+   
 23:17 
 0:00 /bin/bash -login
 root 17460 0 MAIN   0.0  0.0   1484   452 pts/8S+   23:20 
 0:00 grep 100
 
 Stopping the vserver from the host:
 
 linuxserver ~ # vserver templategentoo stop
 A timeout occured while waiting for the vserver to finish and it was
 killed by sending a SIGKILL signal. Please investigate the reasons
 and/or increase the timeout in apps/vshelper/sync-timeout.
 
 Before that timeout arrives, checking vps repeatedly from the host:
 
 linuxserver ~ # vps auxwww | grep 100
 root  1008 0 MAIN   0.0  0.0   1444   468 ?Ss  Sep11 
   
 0:00 udevd
 root 16616   100 templategentoo  0.0  0.0   1464   496 ?Ss   
 23:17   
 0:00 init [3]
 root 17335   100 templategentoo  0.0  0.1   2328  1368 pts/1S+   
 23:17   
 0:00 /bin/bash -login
 root 17556 0 MAIN   0.0  0.010828 pts/6S+   23:20 
   
 0:00 /usr/sbin/vwait --timeout 20 --terminate --status-fd 3 100
 root 17612 0 MAIN   0.0  0.0   1484   448 pts/8S+   23:20 
   
 0:00 grep 100
 
 vwait just waits 20 seconds, and then the vserver is killed.
 
 So I checked to see if it stops the services gracefully first: It doesn't. It 
 just
 goes into that timeout directly without the stopping the init.d scripts:
 
 linuxserver ~ # vps auxwww | grep 100
 root  1008 0 MAIN   0.0  0.0   1444   468 ?Ss  Sep11 
   
 0:00 udevd
 root 17832   100 templategentoo  0.0  0.0   1468   500 ?Ss   
 23:29   
 0:00 init [3]
 root 18403   100 templategentoo  0.0  0.0   1712   664 ?Ss   
 23:29   
 0:00 /usr/sbin/syslog-ng
 root 18499   100 templategentoo  0.0  0.1   3944  1644 ?Ss   
 23:29   
 0:00 /usr/sbin/sshd
 root 18522   100 templategentoo  0.0  0.3   7652  3296 ?Ss   
 23:29   
 0:00 /usr/sbin/apache2 -k start
 apache   18558   100 templategentoo  0.0  0.3   7596  3252 ?S
 23:29   
 0:00 /usr/sbin/apache2 -k start
 apache   18559   100 templategentoo  0.0  0.3   7788  3336 ?S
 23:29   
 0:00 /usr/sbin/apache2 -k start
 apache   18560   100 templategentoo  0.0  0.3   7788  3336 ?S
 23:29   
 0:00 /usr/sbin/apache2 -k start
 apache   18561   100 templategentoo  0.0  0.3   7788  3336 ?S
 23:29   
 0:00 /usr/sbin/apache2 -k start
 apache   18562   100 templategentoo  0.0  0.3   7788  3336 ?S
 23:29   
 0:00 /usr/sbin/apache2 -k start
 apache   18563   100 templategentoo  0.0  0.3   7788  3336 ?S
 23:29   
 0:00 /usr/sbin/apache2 -k start
 root 18608 0 MAIN   0.0  0.010424 pts/6S+   23:29 
   
 0:00 /usr/sbin/vwait --timeout 20 --terminate --status-fd 3 100
 root 18706 0 MAIN   0.0  0.0   1488   452 pts/8S+   23:29 
   
 0:00 grep 100
 
 Sorry, I have no clue here... This might be a gentoo problem or something
 with the init-style (which is 'plain')  --- I don't know. 

could you also add the output of testme.sh
(http://vserver.13thfloor.at/Stuff/SCRIPT/testme.sh)
to this information?

TIA,
Herbert

 More info:
 linuxserver ~ # uname -a
 Linux linuxserver 2.6.13-vs2.1.0-pre5-gentoo #1 Sat Sep 10 16:25:41 CEST 2005 
 i686 AMD Duron(tm) processor AuthenticAMD GNU/Linux
 linuxserver ~ # vserver-info
 Versions:
Kernel: 2.6.13-vs2.1.0-pre5-gentoo
VS-API: 0x00020001
  util-vserver: 0.30.208; Aug 31 2005, 22:13:08
 
 Features:
CC: i386-pc-linux-gnu-gcc, i386-pc-linux-gnu-gcc (GCC) 
 3.3.5-20050130 (Gentoo 3.3.5.20050130-r1, ssp-3.3.5.20050130-1, pie-8.7.7.1)
   CXX: i386-pc-linux-gnu-g++, i386-pc-linux-gnu-g++ (GCC) 
 3.3.5-20050130 (Gentoo 3.3.5.20050130-r1, ssp-3.3.5.20050130-1, 

Re: [Vserver] mount a NFS filesystem into a vserver

2005-09-13 Thread Sam Vilain
 Tue, 2005-09-13 at 09:49 -0600, [EMAIL PROTECTED] wrote:
 I am looking to mount a NFS filesystem into a vserver.  I have
 searched the archives, the site, and the web but can not find a
 straight answer to this.
 What is the proper/preferred method of doing this?
 Does anyone have the steps?
 
 I would like to mount a nfs filesystem from a non vserver (nfs server)
 into a vserver (nfs client).

You should be able to put the mount entry in /etc/vservers/XXX/fstab,
and it will be mounted at the appropriate time on vserver startup.

The alternative is to turn on secure mounts, whereby the vserver can
do mount operations, with certain restrictions.  I haven't needed to use
this myself.

Sam.

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Error when making skeleton

2005-09-13 Thread Chuck
I am running a Gentoo system and am installing vserver for the first time in 
an already running machine. I installed the kernel, util-vserver versions of 
which are below, and ran the testme script which passed.

when i run this command to create the skeleton as instructed in hollow's guide 
I get the result under it. Any clues?

davin ~ # vserver gentoo build -m skeleton --hostname gentoo --initstyle plain 
--context 84 --interface gentoo=eth0:64.113.38.84/255.255.255.240

chattr: Inappropriate ioctl for device while reading flags 
on /etc/vservers/.defaults/vdirbase/gentoo



the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
the util-vserver version is util-vserver-0.30.208-r2
the host ip is 64.113.38.83 on eth0. when i saw the above error I tried adding 
the .84 ip to the host as eth0:1 but it didn't make a difference
-- 

Chuck



___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Error when making skeleton

2005-09-13 Thread Herbert Poetzl
On Tue, Sep 13, 2005 at 11:01:55PM -0400, Chuck wrote:
 I am running a Gentoo system and am installing vserver for the
 first time in an already running machine. I installed the kernel,
 util-vserver versions of which are below, and ran the testme script
 which passed.

could you paste the output of this script please?

 when i run this command to create the skeleton as instructed in
 hollow's guide I get the result under it. Any clues?
 
 davin ~ # vserver gentoo build -m skeleton --hostname gentoo --initstyle 
 plain 
 --context 84 --interface gentoo=eth0:64.113.38.84/255.255.255.240
 
 chattr: Inappropriate ioctl for device while reading flags 
 on /etc/vservers/.defaults/vdirbase/gentoo

where does /etc/vservers/.defaults/vdirbase/gentoo point to
and what filesystem is used there?

 the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
 the util-vserver version is util-vserver-0.30.208-r2
 the host ip is 64.113.38.83 on eth0. when i saw the above error I
 the tried adding .84 ip to the host as eth0:1 but it didn't make a
 the difference

TIA,
Herbert

 -- 
 
 Chuck
 
 
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Error when making skeleton

2005-09-13 Thread Chuck
On Tuesday 13 September 2005 11:20 pm, Herbert Poetzl wrote:
 On Tue, Sep 13, 2005 at 11:01:55PM -0400, Chuck wrote:
  I am running a Gentoo system and am installing vserver for the
  first time in an already running machine. I installed the kernel,
  util-vserver versions of which are below, and ran the testme script
  which passed.
 
 could you paste the output of this script please?
 

davin ~ # ./testme.sh
Linux-VServer Test [V0.13] Copyright (C) 2003-2005 H.Poetzl
chcontext is working.
chbind is working.
Linux 2.6.13-vs2.1.0-pre5-gentoo i686/0.30.208/0.30.208 [Ea] (0)
VCI:  0002:0001 273 03000116
---
[000]# succeeded.
[001]# succeeded.
[011]# succeeded.
[031]# succeeded.
[101]# succeeded.
[102]# succeeded.
[201]# succeeded.
[202]# succeeded.





  when i run this command to create the skeleton as instructed in
  hollow's guide I get the result under it. Any clues?
  
  davin ~ # vserver gentoo build -m skeleton --hostname gentoo --initstyle 
plain 
  --context 84 --interface gentoo=eth0:64.113.38.84/255.255.255.240
  
  chattr: Inappropriate ioctl for device while reading flags 
  on /etc/vservers/.defaults/vdirbase/gentoo
 
 where does /etc/vservers/.defaults/vdirbase/gentoo point to
 and what filesystem is used there?

vdirbase is a symlink pointing to /vservers which then contains the gentoo 
directory. i intended this /vservers as a mount point to another drive. i 
tried the skeleton creation with /vservers unmounted as well so it lived on 
the same hdd... same error.

 using reiserfs v3


 
  the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
  the util-vserver version is util-vserver-0.30.208-r2
  the host ip is 64.113.38.83 on eth0. when i saw the above error I
  the tried adding .84 ip to the host as eth0:1 but it didn't make a
  the difference
 
 TIA,
 Herbert
 
  -- 
  
  Chuck
  
  
  
  ___
  Vserver mailing list
  Vserver@list.linux-vserver.org
  http://list.linux-vserver.org/mailman/listinfo/vserver
 

-- 

Chuck

...and the hordes of M$*ft users descended upon me in their anger,
and asked 'Why do you not get the viruses or the BlueScreensOfDeath
or insecure system troubles and slowness or pay through the nose 
for an OS as *we* do?!!', and I answered...'I use Linux'. 
The Book of John, chapter 1, page 1, and end of book


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Error when making skeleton

2005-09-13 Thread Herbert Poetzl
On Tue, Sep 13, 2005 at 11:39:53PM -0400, Chuck wrote:
 On Tuesday 13 September 2005 11:20 pm, Herbert Poetzl wrote:
  On Tue, Sep 13, 2005 at 11:01:55PM -0400, Chuck wrote:
   I am running a Gentoo system and am installing vserver for the
   first time in an already running machine. I installed the kernel,
   util-vserver versions of which are below, and ran the testme script
   which passed.
  
  could you paste the output of this script please?
 
 davin ~ # ./testme.sh
 Linux-VServer Test [V0.13] Copyright (C) 2003-2005 H.Poetzl
 chcontext is working.
 chbind is working.
 Linux 2.6.13-vs2.1.0-pre5-gentoo i686/0.30.208/0.30.208 [Ea] (0)
 VCI:  0002:0001 273 03000116
 ---
 [000]# succeeded.
 [001]# succeeded.
 [011]# succeeded.
 [031]# succeeded.
 [101]# succeeded.
 [102]# succeeded.
 [201]# succeeded.
 [202]# succeeded.
 
   when i run this command to create the skeleton as instructed in
   hollow's guide I get the result under it. Any clues?
   
   davin ~ # vserver gentoo build -m skeleton --hostname gentoo --initstyle 
 plain 
   --context 84 --interface gentoo=eth0:64.113.38.84/255.255.255.240
   
   chattr: Inappropriate ioctl for device while reading flags 
   on /etc/vservers/.defaults/vdirbase/gentoo
  
  where does /etc/vservers/.defaults/vdirbase/gentoo point to
  and what filesystem is used there?
 
 vdirbase is a symlink pointing to /vservers which then contains the gentoo 
 directory. i intended this /vservers as a mount point to another drive. i 
 tried the skeleton creation with /vservers unmounted as well so it lived on 
 the same hdd... same error.
 
  using reiserfs v3

ah, yes, reiser v3 requires the 'attrs' mount option
to support xattrs (those you can set with chattr), and
some of those flags are used for the barrier and the
unification, so you have to add that to the mount options

best,
Herbert

   the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
   the util-vserver version is util-vserver-0.30.208-r2
   the host ip is 64.113.38.83 on eth0. when i saw the above error I
   the tried adding .84 ip to the host as eth0:1 but it didn't make a
   the difference
  
  TIA,
  Herbert
  
   -- 
   
   Chuck
   
   
   
   ___
   Vserver mailing list
   Vserver@list.linux-vserver.org
   http://list.linux-vserver.org/mailman/listinfo/vserver
  
 
 -- 
 
 Chuck
 
 ...and the hordes of M$*ft users descended upon me in their anger,
 and asked 'Why do you not get the viruses or the BlueScreensOfDeath
 or insecure system troubles and slowness or pay through the nose 
 for an OS as *we* do?!!', and I answered...'I use Linux'. 
 The Book of John, chapter 1, page 1, and end of book
 
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Error when making skeleton

2005-09-13 Thread Chuck
On Tuesday 13 September 2005 11:45 pm, Herbert Poetzl wrote:

   using reiserfs v3
 
 ah, yes, reiser v3 requires the 'attrs' mount option
 to support xattrs (those you can set with chattr), and
 some of those flags are used for the barrier and the
 unification, so you have to add that to the mount options
 

do i add that only to the fstab entryt for the /vservers mount point or do I 
add that to the system / as well?

also the kernel has some extended reiserfs options which are unchecked at this 
time as I have never known a need for them. Should they be enabled as well?

Chuck

 best,
 Herbert
 
the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
the util-vserver version is util-vserver-0.30.208-r2
the host ip is 64.113.38.83 on eth0. when i saw the above error I
the tried adding .84 ip to the host as eth0:1 but it didn't make a
the difference
   
   TIA,
   Herbert
   
-- 

Chuck



___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
   
  
  -- 
  
  Chuck
  
  ...and the hordes of M$*ft users descended upon me in their anger,
  and asked 'Why do you not get the viruses or the BlueScreensOfDeath
  or insecure system troubles and slowness or pay through the nose 
  for an OS as *we* do?!!', and I answered...'I use Linux'. 
  The Book of John, chapter 1, page 1, and end of book
  
  
  ___
  Vserver mailing list
  Vserver@list.linux-vserver.org
  http://list.linux-vserver.org/mailman/listinfo/vserver
 

-- 

Chuck

...and the hordes of M$*ft users descended upon me in their anger,
and asked 'Why do you not get the viruses or the BlueScreensOfDeath
or insecure system troubles and slowness or pay through the nose 
for an OS as *we* do?!!', and I answered...'I use Linux'. 
The Book of John, chapter 1, page 1, and end of book


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Error when making skeleton

2005-09-13 Thread Herbert Poetzl
On Tue, Sep 13, 2005 at 11:49:56PM -0400, Chuck wrote:
 On Tuesday 13 September 2005 11:45 pm, Herbert Poetzl wrote:
 
using reiserfs v3
  
  ah, yes, reiser v3 requires the 'attrs' mount option
  to support xattrs (those you can set with chattr), and
  some of those flags are used for the barrier and the
  unification, so you have to add that to the mount options
  
 
 do i add that only to the fstab entryt for the /vservers mount point
 or do I add that to the system / as well?

should be sufficient for the /vservers partition

 also the kernel has some extended reiserfs options which are unchecked
 at this time as I have never known a need for them. Should they be
 enabled as well?

you probably want CONFIG_REISERFS_FS_XATTR=y but
I'm not sure if this is required ...

best,
Herbert

 Chuck
 
  best,
  Herbert
  
 the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
 the util-vserver version is util-vserver-0.30.208-r2
 the host ip is 64.113.38.83 on eth0. when i saw the above error I
 the tried adding .84 ip to the host as eth0:1 but it didn't make a
 the difference

TIA,
Herbert

 -- 
 
 Chuck
 
 
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver

   
   -- 
   
   Chuck
   
   ...and the hordes of M$*ft users descended upon me in their anger,
   and asked 'Why do you not get the viruses or the BlueScreensOfDeath
   or insecure system troubles and slowness or pay through the nose 
   for an OS as *we* do?!!', and I answered...'I use Linux'. 
   The Book of John, chapter 1, page 1, and end of book
   
   
   ___
   Vserver mailing list
   Vserver@list.linux-vserver.org
   http://list.linux-vserver.org/mailman/listinfo/vserver
  
 
 -- 
 
 Chuck
 
 ...and the hordes of M$*ft users descended upon me in their anger,
 and asked 'Why do you not get the viruses or the BlueScreensOfDeath
 or insecure system troubles and slowness or pay through the nose 
 for an OS as *we* do?!!', and I answered...'I use Linux'. 
 The Book of John, chapter 1, page 1, and end of book
 
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Error when making skeleton

2005-09-13 Thread Chuck
On Tuesday 13 September 2005 11:58 pm, Herbert Poetzl wrote:
 On Tue, Sep 13, 2005 at 11:49:56PM -0400, Chuck wrote:
  On Tuesday 13 September 2005 11:45 pm, Herbert Poetzl wrote:
  
 using reiserfs v3
   
   ah, yes, reiser v3 requires the 'attrs' mount option
   to support xattrs (those you can set with chattr), and
   some of those flags are used for the barrier and the
   unification, so you have to add that to the mount options
   
  
  do i add that only to the fstab entryt for the /vservers mount point
  or do I add that to the system / as well?
 
 should be sufficient for the /vservers partition

I added it to the /vservers mount statement in fstab and it worked perfectly!

 
  also the kernel has some extended reiserfs options which are unchecked
  at this time as I have never known a need for them. Should they be
  enabled as well?
 
 you probably want CONFIG_REISERFS_FS_XATTR=y but
 I'm not sure if this is required ...
 

Guess it cannot hurt to enable it anyway for safety. 

Thank you!

now i just hope vservers live up to my expectations.. I have been given the 
task of finding a way to consolidate which means looking at 
virtualizing/partitioning to cut the number of servers down. What I am hoping 
for is enough performance to be able to reduce 39 servers to just 8 or 9 
hosts.. we are a fairly busy isp so some of the servers are hit pretty hard..

the only other problem I fear I will run into is in one host there will hve to 
be at least 4 nics since the servers are on various vlans and each subnet has 
its assigned switch port. to complicate matters even more, several of the 
vservers will have to support a few hundred ip addresses each (email and web 
for domains with dedicated ip addresses). I only hope this can do it as i 
have found nothing else suitable other than the ibm partitioned minis or 
blades.($$$).. I believe UML has entirely too much overhead for our 
needs.

 best,
 Herbert
 
  Chuck
  
   best,
   Herbert
   
  the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
  the util-vserver version is util-vserver-0.30.208-r2
  the host ip is 64.113.38.83 on eth0. when i saw the above error I
  the tried adding .84 ip to the host as eth0:1 but it didn't make a
  the difference
 
 TIA,
 Herbert
 
  -- 
  
  Chuck
  
  
  
  ___
  Vserver mailing list
  Vserver@list.linux-vserver.org
  http://list.linux-vserver.org/mailman/listinfo/vserver
 

-- 

Chuck

...and the hordes of M$*ft users descended upon me in their anger,
and asked 'Why do you not get the viruses or the BlueScreensOfDeath
or insecure system troubles and slowness or pay through the nose 
for an OS as *we* do?!!', and I answered...'I use Linux'. 
The Book of John, chapter 1, page 1, and end of book


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
   
  
  -- 
  
  Chuck
  
  ...and the hordes of M$*ft users descended upon me in their anger,
  and asked 'Why do you not get the viruses or the BlueScreensOfDeath
  or insecure system troubles and slowness or pay through the nose 
  for an OS as *we* do?!!', and I answered...'I use Linux'. 
  The Book of John, chapter 1, page 1, and end of book
  
  
  ___
  Vserver mailing list
  Vserver@list.linux-vserver.org
  http://list.linux-vserver.org/mailman/listinfo/vserver
 

-- 

Chuck

...and the hordes of M$*ft users descended upon me in their anger,
and asked 'Why do you not get the viruses or the BlueScreensOfDeath
or insecure system troubles and slowness or pay through the nose 
for an OS as *we* do?!!', and I answered...'I use Linux'. 
The Book of John, chapter 1, page 1, and end of book


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Error when making skeleton

2005-09-13 Thread Herbert Poetzl
On Wed, Sep 14, 2005 at 12:10:29AM -0400, Chuck wrote:
 On Tuesday 13 September 2005 11:58 pm, Herbert Poetzl wrote:
  On Tue, Sep 13, 2005 at 11:49:56PM -0400, Chuck wrote:
   On Tuesday 13 September 2005 11:45 pm, Herbert Poetzl wrote:
   
  using reiserfs v3

ah, yes, reiser v3 requires the 'attrs' mount option
to support xattrs (those you can set with chattr), and
some of those flags are used for the barrier and the
unification, so you have to add that to the mount options

   
   do i add that only to the fstab entryt for the /vservers mount point
   or do I add that to the system / as well?
  
  should be sufficient for the /vservers partition
 
 I added it to the /vservers mount statement in fstab and it worked
 perfectly!

good to hear!

   also the kernel has some extended reiserfs options which are
   unchecked at this time as I have never known a need for them.
   Should they be enabled as well?
  
  you probably want CONFIG_REISERFS_FS_XATTR=y but
  I'm not sure if this is required ...
 
 Guess it cannot hurt to enable it anyway for safety. 
 
 Thank you!

you're welcome!

 now i just hope vservers live up to my expectations.. I have been
 given the task of finding a way to consolidate which means looking at
 virtualizing/partitioning to cut the number of servers down. What I am
 hoping for is enough performance to be able to reduce 39 servers to
 just 8 or 9 hosts.. we are a fairly busy isp so some of the servers
 are hit pretty hard..

well, up to 200 guest for a dual CPU Xeon system were 
reported working, although I would not suggest to go
that hight, especially if you expect higher load ...

 the only other problem I fear I will run into is in one host there
 will hve to be at least 4 nics since the servers are on various
 vlans and each subnet has its assigned switch port. 

well, 4 nics with GB can be rarely satisfied with PC
(and especially 32bit) arch ... if you think about 
several 100Mbit interfaces, consider using vlans instead

 to complicate matters even more, several of the vservers will have to
 support a few hundred ip addresses each (email and web for domains
 with dedicated ip addresses). 

the current limit is at 16 IPs for each guest, but it 
can be raised (easily) but this comes with a drawback
to the overall performance ...

you might want to check if it isn't possible to break
the hosted IPs down into smaller chunks, and take e.g.
10 guests for 16 IPs each (or maybe 5 with 32)

 I only hope this can do it as i have found nothing else suitable other
 than the ibm partitioned minis or blades.($$$).. I believe UML has
 entirely too much overhead for our needs.

I'm pretty sure it will ... but keep us updated

best,
Herbert

 
  best,
  Herbert
  
   Chuck
   
best,
Herbert

   the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
   the util-vserver version is util-vserver-0.30.208-r2
   the host ip is 64.113.38.83 on eth0. when i saw the above error I
   the tried adding .84 ip to the host as eth0:1 but it didn't make a
   the difference
  
  TIA,
  Herbert
  
   -- 
   
   Chuck
   
   
   
   ___
   Vserver mailing list
   Vserver@list.linux-vserver.org
   http://list.linux-vserver.org/mailman/listinfo/vserver
  
 
 -- 
 
 Chuck
 
 ...and the hordes of M$*ft users descended upon me in their anger,
 and asked 'Why do you not get the viruses or the BlueScreensOfDeath
 or insecure system troubles and slowness or pay through the nose 
 for an OS as *we* do?!!', and I answered...'I use Linux'. 
 The Book of John, chapter 1, page 1, and end of book
 
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver

   
   -- 
   
   Chuck
   
   ...and the hordes of M$*ft users descended upon me in their anger,
   and asked 'Why do you not get the viruses or the BlueScreensOfDeath
   or insecure system troubles and slowness or pay through the nose 
   for an OS as *we* do?!!', and I answered...'I use Linux'. 
   The Book of John, chapter 1, page 1, and end of book
   
   
   ___
   Vserver mailing list
   Vserver@list.linux-vserver.org
   http://list.linux-vserver.org/mailman/listinfo/vserver
  
 
 -- 
 
 Chuck
 
 ...and the hordes of M$*ft users descended upon me in their anger,
 and asked 'Why do you not get the viruses or the BlueScreensOfDeath
 or insecure system troubles and slowness or pay through the nose 
 for an OS as *we* do?!!', and I answered...'I use Linux'. 
 The Book of John, chapter 1, page 1, and end of book
 
 
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] Error when making skeleton

2005-09-13 Thread Chuck
On Wednesday 14 September 2005 12:29 am, Herbert Poetzl wrote:

  
  I added it to the /vservers mount statement in fstab and it worked
  perfectly!
 
 good to hear!
 
also the kernel has some extended reiserfs options which are
unchecked at this time as I have never known a need for them.
Should they be enabled as well?
   
   you probably want CONFIG_REISERFS_FS_XATTR=y but
   I'm not sure if this is required ...
  
  Guess it cannot hurt to enable it anyway for safety. 
  
  Thank you!
 
 you're welcome!
 
  now i just hope vservers live up to my expectations.. I have been
  given the task of finding a way to consolidate which means looking at
  virtualizing/partitioning to cut the number of servers down. What I am
  hoping for is enough performance to be able to reduce 39 servers to
  just 8 or 9 hosts.. we are a fairly busy isp so some of the servers
  are hit pretty hard..
 
 well, up to 200 guest for a dual CPU Xeon system were 
 reported working, although I would not suggest to go
 that hight, especially if you expect higher load ...
 
  the only other problem I fear I will run into is in one host there
  will hve to be at least 4 nics since the servers are on various
  vlans and each subnet has its assigned switch port. 
 
 well, 4 nics with GB can be rarely satisfied with PC
 (and especially 32bit) arch ... if you think about 
 several 100Mbit interfaces, consider using vlans instead
 

even if all the vservers on a single host were in the same network segment, 
there would still have to be 2 nics due to eth1 being the private admin 
network and also the one that the servers use to communicate to each other 
privately for nfs or remote logging.


  to complicate matters even more, several of the vservers will have to
  support a few hundred ip addresses each (email and web for domains
  with dedicated ip addresses). 
 
 the current limit is at 16 IPs for each guest, but it 
 can be raised (easily) but this comes with a drawback
 to the overall performance ...
 

 you might want to check if it isn't possible to break
 the hosted IPs down into smaller chunks, and take e.g.
 10 guests for 16 IPs each (or maybe 5 with 32)

hmmm... wonder how much of a hit in performance. it is impossible to separate 
them as the large chunks reside on machines with commercially licensed and 
paid for software which means we cannot duplicate these hosts to spread the 
load. it is all or nothing.  I was anticipating future growth with those 
numbers. In real numbers today, the email machine has i think around 97 ip 
addresses and the web machine has in the neighborhood of 124 addresses with 
the rest of the sites using name space off the main machine ip.

all the mail ips are on the same network segment and all the web are also on 
their own segment..  each network segment is its own vlan within the 
switching system and each machine has its own assigned switch port. since the 
vlans are physical separations, it would not be possible to combine them onto 
one nic.. this is why there would have to be a single nic for each vserver 
guest. we have several quad-nic cards that we could use. we had 2 of those 
for 8 nics on our news server once.

 not only that but the load would be horrendous using a single nic for 
multiple vservers.. we are already beyond the limits of 100mbit bandwidth on 
the web server and the email server is pushing about 50mbit continuous at 
this time. our entire network is gigabit even into the border routers.

if i can't do this, then my only other choice is to leave those 2 as dedicated 
servers which i really don't want to do. the rest of the machines have less 
than 10 ip addresses in each of  their nics. many of these smaller servers 
are sharing the same net segment so packing those into the same host would 
allow them to share a single nic or two without trouble.

its just the 2 big servers that has my ulcers churning. the boss wants them 
all consolidated.

 
  I only hope this can do it as i have found nothing else suitable other
  than the ibm partitioned minis or blades.($$$).. I believe UML has
  entirely too much overhead for our needs.
 
 I'm pretty sure it will ... but keep us updated
 
 best,
 Herbert
 
  
   best,
   Herbert
   
Chuck

 best,
 Herbert
 
the kernel version is 2.6.13-vs2.1.0-pre5-gentoo
the util-vserver version is util-vserver-0.30.208-r2
the host ip is 64.113.38.83 on eth0. when i saw the above 
error I
the tried adding .84 ip to the host as eth0:1 but it didn't 
make a
the difference
   
   TIA,
   Herbert
   
-- 

Chuck



___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
   
  
  -- 
  
  Chuck
  
  ...and the hordes of M$*ft users descended upon me in their 

Re: [Vserver] Error when making skeleton

2005-09-13 Thread Herbert Poetzl
On Wed, Sep 14, 2005 at 12:59:53AM -0400, Chuck wrote:
 On Wednesday 14 September 2005 12:29 am, Herbert Poetzl wrote:
 
   I added it to the /vservers mount statement in fstab and it worked
   perfectly!
  
  good to hear!
  
 also the kernel has some extended reiserfs options which are
 unchecked at this time as I have never known a need for them.
 Should they be enabled as well?

you probably want CONFIG_REISERFS_FS_XATTR=y but
I'm not sure if this is required ...
   
   Guess it cannot hurt to enable it anyway for safety. 
   
   Thank you!
  
  you're welcome!
  
   now i just hope vservers live up to my expectations.. I have been
   given the task of finding a way to consolidate which means looking
   at virtualizing/partitioning to cut the number of servers down.
   What I am hoping for is enough performance to be able to reduce 39
   servers to just 8 or 9 hosts.. we are a fairly busy isp so some of
   the servers are hit pretty hard..
  
  well, up to 200 guest for a dual CPU Xeon system were 
  reported working, although I would not suggest to go
  that hight, especially if you expect higher load ...
  
   the only other problem I fear I will run into is in one host there
   will hve to be at least 4 nics since the servers are on various
   vlans and each subnet has its assigned switch port.
  
  well, 4 nics with GB can be rarely satisfied with PC
  (and especially 32bit) arch ... if you think about 
  several 100Mbit interfaces, consider using vlans instead
 
 even if all the vservers on a single host were in the same network
 segment, there would still have to be 2 nics due to eth1 being the
 private admin network and also the one that the servers use to
 communicate to each other privately for nfs or remote logging.

well, this could also be done via vlans, but 2 NICs
are fine, no?

   to complicate matters even more, several of the vservers will have
   to support a few hundred ip addresses each (email and web for
   domains with dedicated ip addresses).
  
  the current limit is at 16 IPs for each guest, but it 
  can be raised (easily) but this comes with a drawback
  to the overall performance ...
  
 
  you might want to check if it isn't possible to break
  the hosted IPs down into smaller chunks, and take e.g.
  10 guests for 16 IPs each (or maybe 5 with 32)
 
 hmmm... wonder how much of a hit in performance. it is impossible to
 separate them as the large chunks reside on machines with commercially
 licensed and paid for software which means we cannot duplicate these
 hosts to spread the load. it is all or nothing.

the performance hit is basically a linear O(N) search 
for each connection/request which is not terribly
expensive with 4 or 8 IPs but might have some impact
with 128 or 256 IPs ...

 I was anticipating future growth with those numbers. In real numbers
 today, the email machine has i think around 97 ip addresses and the
 web machine has in the neighborhood of 124 addresses with the rest of
 the sites using name space off the main machine ip.

most services can be satisfied with a single IP
(e.g. mail, ftp, web) only unfortunate ones require
a separate ip (ssl)

 all the mail ips are on the same network segment and all the web are
 also on their own segment.. each network segment is its own vlan
 within the switching system and each machine has its own assigned
 switch port. 

 since the vlans are physical separations, it would not be possible to
 combine them onto one nic..

interesting, I always considered virtual lans (vlans) 
virtual ones not physical ones :)

 this is why there would have to be a single nic for each vserver
 guest. we have several quad-nic cards that we could use. we had 2 of
 those for 8 nics on our news server once.

IMHO a dual GB nic and a proper switch (which is vlan aware)
would be a much better solution ... but YMMV

 not only that but the load would be horrendous using a single nic
 for multiple vservers.. we are already beyond the limits of 100mbit
 bandwidth on the web server and the email server is pushing about
 50mbit continuous at this time. our entire network is gigabit even
 into the border routers.

and this is exactly where vlans on a GB interface
would improve throughput while reducing the load

 if i can't do this, then my only other choice is to leave those 2 as
 dedicated servers which i really don't want to do. the rest of the
 machines have less than 10 ip addresses in each of their nics. many
 of these smaller servers are sharing the same net segment so packing
 those into the same host would allow them to share a single nic or two
 without trouble.

everything is possible ... I'm just suggesting better
solutions, so you get a picture ...

 its just the 2 big servers that has my ulcers churning. the boss wants
 them all consolidated.

well, and if the boss wants it, then it has to be
done no matter what the costs are ... right?
(I've no problem with that either :)

best,
Herbert

   I only hope this can