Re: [Vserver] Step by Step Guide to a nano-vserver

2006-02-03 Thread Michael S. Zick
On Wed December 28 2005 16:28, Michael S. Zick wrote:
> Joel and Group,
> Today's update is available.
> 
> Baby-01 now does proper networking,
> only the directions where wrong.
> 
> 
The December 28th version of the guide has been removed,
but my server logs show folks still looking for it.

So a small progress note:

After a serious re-think of the project...
After a very major re-write...
After getting past the glibc nonsense...

I am now back on the job;
The next revision should be posted RSN. (I hope)

Mike
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Re: 2.6.16-rc1-vs2.1.0.9 latest test on parisc

2006-02-03 Thread Herbert Poetzl
On Fri, Feb 03, 2006 at 05:11:55PM -0500, micah wrote:
> In gmane.linux.vserver, you wrote:
> > On Thu, Feb 02, 2006 at 02:29:38PM -0500, Micah Anderson wrote:
> >> -BEGIN PGP SIGNED MESSAGE-
> >> Hash: SHA1
> >> 
> >> Herbert Poetzl wrote:
> >> > On Thu, Feb 02, 2006 at 09:33:12AM +0100, Joel Soete wrote:
> >> >>On toh for my private build from upstream src (on going to build latest
> >> >>0.30.210), I disabled use of dietlibc (not yet available for hppa at this
> >> >>time) and all seems to works fine.
> >> > 
> >> > 
> >> > really depends on the dietlibc, but I'd assume it
> >> > is _still_ broken on HPPA, nevertheless the glibc
> >> > is _not_ a good alternative, although it _might_ 
> >> > work for simple things.
> >> 
> >> I guess we can find out when Joel sends results of tests?
> >
> > possible, well, testme and testfs will not 
> > detect the insecurities introduced by glibc
> 
> Ah, I meant we can find out if dietlibc is broken on HPPA or not. I
> did not mean we can find out if glibc insecurities still exist.

hmm, well, then see:

http://list.linux-vserver.org/archive/vserver/msg12138.html

> >> > PS: I hope that dietlibc on hppa will be fixed soon.
> >> 
> >> Have the issues on HPPA been brought to the dietlibc developers?
> >
> > yes, but AFAICT, they were ignored ...
> 
> I tried to google around for references to this to see if I could help
> push these up, but didn't find anything. Sometimes all it takes is a
> ping to the right place to get people to realise that they overlooked
> something.

please do so if possible :)

TIA,
Herbert

> Micah
> ___
> Vserver mailing list
> Vserver@list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Q: Using the vserver list for kernel development.

2006-02-03 Thread Martin List-Petersen
On Fri, 2006-02-03 at 21:58 +0100, Cedric Le Goater wrote:
> Eric W. Biederman wrote:
> 
> >>>I have recently been doing some vserver related kernel development
> >>>but have had no luck CC my patches to the vserver list.  This
> >>>last round because I CC to many interested parties.
> >>>
> >>>Is the vserver list supposed to be a place where we can post
> >>>patches for discussion?  
> >>
> >>IMHO yes, so please if possible, make that happen ...
> > 
> > Doing my best to CC the interested parties.  It looks like the next
> > patchset will go out to 14 different recipients.
> 
> :)
> 
> time for a new mailing list ?

Well, the limitation might be, that we don't allow attachments or very
small ones. I can have a look at things this weekend to increase it.
That was the decision mad when we moved the mailinglist the last time.

/Martin

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] [glibc] Usage of glibc with VServer tools

2006-02-03 Thread Michael S. Zick
On Fri February 3 2006 10:14, Michael S. Zick wrote:
> Group,
> 
> An update on the discussions in m-l threads:
> re: http://list.linux-vserver.org/archive/vserver/msg09336.html
> re: http://list.linux-vserver.org/archive/vserver/msg12349.html
> 
- - - snip - - -
>
> messages - pointing to the culprits:
> 
> 
> warning: Using 'getgrent' in statically linked applications requires at
> runtime the shared libraries from the glibc version used for linking.
> 
> 
> With the same warning for:
> setgrent, endgrent, getpwent, getpwnam, getpwuid, setpwent, endpwent,
> getaddrinfo, getservent, setservent, endservent
> 
> There might be others, those are the ones that Bash-3.1 complains about.
> 
- - - Yup, there are others - - -
> 
> The solution is to include some 'linker magic' in the build of Bash (and
> the VServer tools) to include the glibc static library implementation of
> those calls.
> 
Close, but no golden ring.

First, you have to build a special version of glibc with the dynamic,
name system service disabled using instead the older static nss.
(The glibc doc's claim it can be done, but I haven't tried it.)

After all of that work, a static link of the VServer tools against
the special glibc is still just a work-around, same as if the tools
where linked against a *libc* that does not provide dynamic nss.

I.E: A lot of work for no noticeable benefit or even lost functionality.

When the linux dynamic loader can unlink and relink a different DSO
in a process image - the situation might change.  That feature has been
on the glibc wish list for nearly a decade - don't hold your breath.

None of this means that you can not use glibc with the dynamic nss enabled, 
it only places restrictions on version compatibility of the libraries in 
the host and the guest.

Aw, well, back to my own project that sidesteps this whole issue.
Mike


___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Re: 2.6.16-rc1-vs2.1.0.9 latest test on parisc

2006-02-03 Thread Michael S. Zick
On Fri February 3 2006 16:14, micah wrote:
> In gmane.linux.vserver, you wrote:
> > On Fri February 3 2006 12:04, Joel Soete wrote:
> >> > 
> >> Appologies for late answer but this isp webmail interface is very a 
> >> nightmare
> >> (it tooks me all this afternoon to reach to login Grrr).
> >> 
> > Joel,
> >
> > I sent you a possible solution to that problem.
> > Of course, that does not mean you received it.
> 
> If this was a solution to Joel's problem with dietlib, can you re-send
> it to the list so the rest of us can know the answer? I'd like to be
> able to reference it in the future if other HPPA users come here with
> the same problem. :)
> 
Sorry, I wasn't clear...

The ISP problem, not the dietlibc problems.
Due to the ISP problem, I had to steal a little m-l bandwidth.

Apologies,
Mike

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Re: 2.6.16-rc1-vs2.1.0.9 latest test on parisc

2006-02-03 Thread micah
In gmane.linux.vserver, you wrote:
> On Fri February 3 2006 12:04, Joel Soete wrote:
>> > 
>> Appologies for late answer but this isp webmail interface is very a nightmare
>> (it tooks me all this afternoon to reach to login Grrr).
>> 
> Joel,
>
> I sent you a possible solution to that problem.
> Of course, that does not mean you received it.

If this was a solution to Joel's problem with dietlib, can you re-send
it to the list so the rest of us can know the answer? I'd like to be
able to reference it in the future if other HPPA users come here with
the same problem. :)

micah
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Re: 2.6.16-rc1-vs2.1.0.9 latest test on parisc

2006-02-03 Thread micah
In gmane.linux.vserver, you wrote:
> On Thu, Feb 02, 2006 at 02:29:38PM -0500, Micah Anderson wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>> 
>> Herbert Poetzl wrote:
>> > On Thu, Feb 02, 2006 at 09:33:12AM +0100, Joel Soete wrote:
>> >>On toh for my private build from upstream src (on going to build latest
>> >>0.30.210), I disabled use of dietlibc (not yet available for hppa at this
>> >>time) and all seems to works fine.
>> > 
>> > 
>> > really depends on the dietlibc, but I'd assume it
>> > is _still_ broken on HPPA, nevertheless the glibc
>> > is _not_ a good alternative, although it _might_ 
>> > work for simple things.
>> 
>> I guess we can find out when Joel sends results of tests?
>
> possible, well, testme and testfs will not 
> detect the insecurities introduced by glibc

Ah, I meant we can find out if dietlibc is broken on HPPA or not. I
did not mean we can find out if glibc insecurities still exist.

>> > PS: I hope that dietlibc on hppa will be fixed soon.
>> 
>> Have the issues on HPPA been brought to the dietlibc developers?
>
> yes, but AFAICT, they were ignored ...

I tried to google around for references to this to see if I could help
push these up, but didn't find anything. Sometimes all it takes is a
ping to the right place to get people to realise that they overlooked
something.

Micah
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Q: Using the vserver list for kernel development.

2006-02-03 Thread Cedric Le Goater
Eric W. Biederman wrote:

>>>I have recently been doing some vserver related kernel development
>>>but have had no luck CC my patches to the vserver list.  This
>>>last round because I CC to many interested parties.
>>>
>>>Is the vserver list supposed to be a place where we can post
>>>patches for discussion?  
>>
>>IMHO yes, so please if possible, make that happen ...
> 
> Doing my best to CC the interested parties.  It looks like the next
> patchset will go out to 14 different recipients.

:)

time for a new mailing list ?

c.
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Q: Using the vserver list for kernel development.

2006-02-03 Thread Eric W. Biederman
Herbert Poetzl <[EMAIL PROTECTED]> writes:

> On Thu, Feb 02, 2006 at 10:55:53AM -0700, Eric W. Biederman wrote:
>> 
>> I have recently been doing some vserver related kernel development
>> but have had no luck CC my patches to the vserver list.  This
>> last round because I CC to many interested parties.
>> 
>> Is the vserver list supposed to be a place where we can post
>> patches for discussion?  
>
> IMHO yes, so please if possible, make that happen ...

Doing my best to CC the interested parties.  It looks like the next
patchset will go out to 14 different recipients.

Eric
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Samba and Vserver Best Practices

2006-02-03 Thread Michael S. Zick
On Fri February 3 2006 12:49, Matt Nuzum wrote:
> On 2/3/06, Charles Baker <[EMAIL PROTECTED]> wrote:
> > I'm setting up a host server and several vservers that developers in my
> > organization will use to test bug fixes of our software. They will
> > occasionally need access to certain directories on the vservers to check
> > logs, etc.
> >
> > For convenience sake samba shares to the needed directories would be the
> > thing to have. Is the best practice to set up samba on the host server
> > and share directories within the /vservers/$SERVERNAME/path/to/log/dir
> > or set up samba w/in the vserver itself and share it that way?
> 
> I've pondered this question myself and haven't come to a definite
> conclusion. I've had some problems with locking, although that was an
> older version of Samba and I here the problem I had has been resolved.
> 
> No matter what I try, I keep coming back to SSH and tail -f and some
> other custom tools I've written.
> 
> I've thought about using named pipes that will automatically spit out
> log files into multiple places, but I haven't taken the time yet to
> persue this.
>
You mean like: /dev/log (syslog socket)?

> 
> I envision a daemon process that watches the named pipe and (in my
> case) spit out a full log file, like normal, then grab "interesting"
> log entries and spit them out as separate files into a share that can
> be accessed elsewhere. 
>
Perhaps name the daemon syslogd?
Try: man syslogd

You can specify selected information to be remotely logged.

That is the 'common' syslogd on Linux systems, if using one of the
alternatives, remote logging might not be supported.


Mike

> For me, debugging log files containe snippets 
> of XML and SQL and it would be nice if those XML snippets are saved
> out as *.xml files so that they open in XML spy with just a double
> click and the sql is saved as *.sql files.
> 
> The only doubt I have about this working is the challenge of keeping
> the daemon running. I realize this problem has probably been solved,
> but I still wonder how it will work in a named pipe scenario.
> 
> Just food for thought and mindless rambling...
> 
> --
> Matthew Nuzum <[EMAIL PROTECTED]>
> www.followers.net - Makers of "Elite Content Management System"
> View samples of Elite CMS in action by visiting
> http://www.followers.net/portfolio/
> ___
> Vserver mailing list
> Vserver@list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
> 
> 
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Samba and Vserver Best Practices

2006-02-03 Thread Matt Nuzum
On 2/3/06, Charles Baker <[EMAIL PROTECTED]> wrote:
> I'm setting up a host server and several vservers that developers in my
> organization will use to test bug fixes of our software. They will
> occasionally need access to certain directories on the vservers to check
> logs, etc.
>
> For convenience sake samba shares to the needed directories would be the
> thing to have. Is the best practice to set up samba on the host server
> and share directories within the /vservers/$SERVERNAME/path/to/log/dir
> or set up samba w/in the vserver itself and share it that way?

I've pondered this question myself and haven't come to a definite
conclusion. I've had some problems with locking, although that was an
older version of Samba and I here the problem I had has been resolved.

No matter what I try, I keep coming back to SSH and tail -f and some
other custom tools I've written.

I've thought about using named pipes that will automatically spit out
log files into multiple places, but I haven't taken the time yet to
persue this.

I envision a daemon process that watches the named pipe and (in my
case) spit out a full log file, like normal, then grab "interesting"
log entries and spit them out as separate files into a share that can
be accessed elsewhere. For me, debugging log files containe snippets
of XML and SQL and it would be nice if those XML snippets are saved
out as *.xml files so that they open in XML spy with just a double
click and the sql is saved as *.sql files.

The only doubt I have about this working is the challenge of keeping
the daemon running. I realize this problem has probably been solved,
but I still wonder how it will work in a named pipe scenario.

Just food for thought and mindless rambling...

--
Matthew Nuzum <[EMAIL PROTECTED]>
www.followers.net - Makers of "Elite Content Management System"
View samples of Elite CMS in action by visiting
http://www.followers.net/portfolio/
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] Samba and Vserver Best Practices

2006-02-03 Thread Charles Baker
I'm setting up a host server and several vservers that developers in my
organization will use to test bug fixes of our software. They will
occasionally need access to certain directories on the vservers to check
logs, etc.

For convenience sake samba shares to the needed directories would be the
thing to have. Is the best practice to set up samba on the host server
and share directories within the /vservers/$SERVERNAME/path/to/log/dir
or set up samba w/in the vserver itself and share it that way?
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Re: 2.6.16-rc1-vs2.1.0.9 latest test on parisc

2006-02-03 Thread Michael S. Zick
On Fri February 3 2006 12:04, Joel Soete wrote:
> > 
> Appologies for late answer but this isp webmail interface is very a nightmare
> (it tooks me all this afternoon to reach to login Grrr).
> 
Joel,

I sent you a possible solution to that problem.
Of course, that does not mean you received it.

When you get a chance this weekend to beat on your
e-mail service, let me know off-list if you didn't receive it.

Mike
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Re: 2.6.16-rc1-vs2.1.0.9 latest test on parisc

2006-02-03 Thread Joel Soete
Hello Micah, Herbert, Mike, ...

>
> Herbert Poetzl wrote:
> > On Thu, Feb 02, 2006 at 09:33:12AM +0100, Joel Soete wrote:
> >>On toh for my private build from upstream src (on going to build latest
> >>0.30.210), I disabled use of dietlibc (not yet available for hppa at this
> >>time) and all seems to works fine.
> >
> >
> > really depends on the dietlibc, but I'd assume it
> > is _still_ broken on HPPA, nevertheless the glibc
> > is _not_ a good alternative, although it _might_
> > work for simple things.
>
> I guess we can find out when Joel sends results of tests?
>
Appologies for late answer but this isp webmail interface is very a nightmare
(it tooks me all this afternoon to reach to login Grrr).

That said if this interface was more confortable I would probably 'subject'
it: 'new util-vserver-0.30.209-2.deb failled to restart my vps ;_('

Let me tail more few words:
1/ when I installed the pkg a vps (a guest) was still runing and I want
   to check that:
# vserver-stat
CTX   PROCVSZRSS  userTIME   sysTIMEUPTIME NAME
0   76 135.7M  46.7M  18m55s70  17m46s40   6h15m00 root server
491529  38.3M  10.8M   0m03s20   0m14s73   6h08m37 <== it
would show DebSid

too bad ;-(

(mmm, btw wouldn't have to stop vps before upgrading? [very no idea])

2/ I then restart the host and try to re-start my guest:
# vserver DebSid start
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
check-unixfile: lseek(): Invalid argument
secure-mount: read(): Success

GRrrr.

Definitly, dietlibc is broken for hppa (not only test) ;-(

I so rebuild latest util-vserver-0.30.210 (disabling dietlibc use) and make
install by hand and restart my guest without pb, though.

> > PS: I hope that dietlibc on hppa will be fixed soon.
>
> Have the issues on HPPA been brought to the dietlibc developers?
>
mmm, as I just discover that it was re-enable since short, I didn't
investigate more, I will try to get some more info?

Tx for kind attention,
Joel

PS: I will take care of all other kind answers from my linux box at home this
week end. 

---
A free anti-spam and anti-virus filter on all Scarlet mailboxes
More info on http://www.scarlet.be/

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


[Vserver] [glibc] Usage of glibc with VServer tools

2006-02-03 Thread Michael S. Zick
Group,

An update on the discussions in m-l threads:
re: http://list.linux-vserver.org/archive/vserver/msg09336.html
re: http://list.linux-vserver.org/archive/vserver/msg12349.html

At the time of this writing, there are a lot of distributions which
have glibc-2.3.2 deployed (Debian/Sarge for one).  
The glibc project has released glibc-2.3.6 recently.

There are distributions which have deployed all versions inbetween, 
complicated by distribution specific patches.

If that is not confusing enough, even the same distribution may not
use the same version of glibc (and with the same build options) depending
on the system hardware.  
For example, a Debian/Sarge/parisc and a Debian/Sarge/x86 system does 
not deploy the same glibc with the same options.

The VServer tools are a combination of low level, compiled tools and
high level, Bash scripts.  Both of which need to lookup names.
These programs expect the name lookup functions to be supplied by
the system library[1].

When executing within the host (0) context, the host system library
will be used.
When executing within the guest (>1) context, the guest system library
will be used.

The problems encountered in the referenced m-l threads are related to
when a process has to execute in both/either context(s).
Such behavior happens during the creation of and/or entry into a guest
context.

This is due to there being no guarantee that the libraries in the host
and the guest have compatable name lookup implementations.

Enforcing such a guarantee is not an option - the guest context should
be able to run any system library that is compatable with the host kernel.

One work-around is to staticly link the VServer tools - this 'hardcodes'
the name lookup implementation to whatever code the library used for
linking provided.

But what about the copy of Bash that is running the high level scripts?
Ah, so...

Building a staticly linked[2] copy of Bash-3.1 provides a set of warning
messages - pointing to the culprits:


warning: Using 'getgrent' in statically linked applications requires at
runtime the shared libraries from the glibc version used for linking.


With the same warning for:
setgrent, endgrent, getpwent, getpwnam, getpwuid, setpwent, endpwent,
getaddrinfo, getservent, setservent, endservent

There might be others, those are the ones that Bash-3.1 complains about.

Since this warning is related to how glibc implements those functions (in
an external DSO), it applies to any program that makes those function calls 
and staticly linked against glibc-2.3.{2,3,4,5,6} even if that program's
build does not report the warnings.

The staticly linked Bash-3.1 will run, without runtime error reports, with
those calls not present.  Of course, those functions will not work, but
Bash-3.1 will survive.

The Bash-3.1 config-bot.h may be modified to avoid the features that call
those functions.  But that is not the real solution, the VServer tools
need to call those functions also.

The solution is to include some 'linker magic' in the build of Bash (and
the VServer tools) to include the glibc static library implementation of
those calls.

I have not determined that 'linker magic' yet - but the static archives
are present, even with Debian/Sarge binary only, installations.

- - - - -

Notes:

[1] Which flavor of glibc am I building against?

On your VServer tools build system, examine a dynamicly linked application;
your distribution's Bash is probably dynamicly linked, use the ldd script:

enter: ldd /bin/bash

If you see a: linux-gate.so.1 => (high memory address)
then the program is linked to use the kernel's 'fast sys-call' entry.
This is a kernel code provided, virtual, DSO - there should not
be any such file on the system.

Note the actual location of libc.so.6 (on the right of the => thing);
execute the actual library:
(Debian/Sarge/x86 - your milage will vary)

enter: /lib/tls/libc.so.6

Which will report some identifying information.

Determine the library binaries by:
enter: cat /usr/include/gnu/lib-names.h

It is the static libraries for libnss_dns*, libnss_files*, and
libnss_compat* that will need to be included in the 'linker magic'.

- - - - -

[2] Translation of "build a staticly linked Bash"

./configure --enable-net-redirections --enable-static-link \
--disable-rpath --prefix=

(Yes, that is --prefix=, not a typo)

make
make prefix=/opt/gnu/bash-static install-strip

- - - - -

Probably more than anyone wanted to know.
Mike
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Re: 2.6.16-rc1-vs2.1.0.9 latest test on parisc

2006-02-03 Thread Michael S. Zick
On Thu February 2 2006 21:55, Herbert Poetzl wrote:
> On Thu, Feb 02, 2006 at 08:08:38PM -0600, Michael S. Zick wrote:
> > On Thu February 2 2006 19:32, Herbert Poetzl wrote:
> > > On Thu, Feb 02, 2006 at 04:33:16PM -0600, Michael S. Zick wrote:
> > > > On Thu February 2 2006 14:09, Herbert Poetzl wrote:
> > > > > On Thu, Feb 02, 2006 at 02:29:38PM -0500, Micah Anderson wrote:
> > > > > > > 
> > > > > > > 
> > > > > > > really depends on the dietlibc, but I'd assume it
> > > > > > > is _still_ broken on HPPA, nevertheless the glibc
> > > > > > > is _not_ a good alternative, although it _might_ 
> > > > > > > work for simple things.
> > > > > > 
> > > > > > I guess we can find out when Joel sends results of tests?
> > > > > 
> > > > > possible, well, testme and testfs will not 
> > > > > detect the insecurities introduced by glibc
> > > > > 
> > > > Are there any tests available to check for these glibc problems?
> > > 
> > > I don't know of explicit tests, but it should be
> > > possible to create some, given that somebody wants
> > > to spend time on it ...
> > > 
> > > > If not, perhaps a pointer or two into the mail archives on
> > > > the subject or pointer(s) to a discussion of the problems found?
> > > 
> > > http://list.linux-vserver.org/archive/vserver/msg09379.html
> > > (there are others, just goolge for it)
> 
> > Thanks, now I read what the concerns are. . .
> > 
> > That message is about the date of glibc-2.3.2 - current is 2.3.6
> >
> > There has been a fair number of changes done between those versions.
> > Some affecting getpwnam() and friends when used in staticly linked
> > programs.
> 
> well, please also check how 'small' the statically
> linked tools would be when linked against recent glibc
> (statically of course :)
> 
That I can do - Just need to look up the information on build machine.

This is off topic for the subject - so will break this thread.

> > I think both of the mentioned restrictions can now be enforced.
> 
> would be good as a last resort when dietlibc is failing
> (as it is currently the case for parisc)
> 
> > Let me spend some time on checking that statement before I go too
> > far out on a limb.
> 
> please do so, and keep us posted ...
> 
Next update will be a thread tagged: [glibc] for future m-l reference.

Mike
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Proc problem

2006-02-03 Thread Herbert Poetzl
On Fri, Feb 03, 2006 at 09:22:28AM +0100, Norbert Klamann (Firma) wrote:
> Herbert Poetzl schrieb:
> 
> 
> >after that, whatever path was configured for your
> >install (they are somewhat strange on debian, but
> >check with 'vserver-info - SYSINFO' if you didn't
> >look at the ./configure output), will contain the
> >vprocunhide runlevel script, which just has to be
> >executed once at system startup ...
> >
> >HTH,
> >Herbert
> 
> Thanks a lot, Herbert, they are there. Does it make sense to integrate
> them in the /etc/rc.X.d system ?

yes, makes sense to put them there, together with
the default guest startup script ...

> These tools are very nice, if one gets the hang on them.

best,
Herbert

> Greetings
> 
> Norbert
> ___
> Vserver mailing list
> Vserver@list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Proc problem

2006-02-03 Thread Norbert Klamann (Firma)

Herbert Poetzl schrieb:



after that, whatever path was configured for your
install (they are somewhat strange on debian, but
check with 'vserver-info - SYSINFO' if you didn't
look at the ./configure output), will contain the
vprocunhide runlevel script, which just has to be
executed once at system startup ...

HTH,
Herbert


Thanks a lot, Herbert, they are there. Does it make sense to integrate 
them in the /etc/rc.X.d system ?


These tools are very nice, if one gets the hang on them.

 

Greetings

Norbert
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver