[Vserver] Mount
Hi All, I am wondering if the mount command can be run within a vserver? I am trying to mount a nfs mount within a vserver and I get permission denied. I can mount the nfs share from another machine that is not a vserver and it works. Thanks in advance, Jon Scottorn Systems Administrator The Possibility Forge, Inc. http://www.possibilityforge.com 435.635.0591 x.1004 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Mount
Is it recommended to not use mount within a vserver, should I just mount it from the host side or does it not really matter if I do mount it within the vserver? Thanks again. On Wed, 2006-02-22 at 23:15 +0100, Herbert Poetzl wrote: On Wed, Feb 22, 2006 at 03:08:46PM -0700, Jon Scottorn wrote: Hi All, I am wondering if the mount command can be run within a vserver? I am trying to mount a nfs mount within a vserver and I get permission denied. I can mount the nfs share from another machine that is not a vserver and it works. with sufficient capabilities you can do that http://linux-vserver.org/Caps+and+Flags check out binary_mount and secure_mount capability HTH, Herbert Thanks in advance, Jon Scottorn Systems Administrator The Possibility Forge, Inc. http://www.possibilityforge.com 435.635.0591 x.1004 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver Jon Scottorn Systems Administrator The Possibility Forge, Inc. http://www.possibilityforge.com 435.635.0591 x.1004 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] radlinux 0.2.7 announce
Peter V. Saveliev wrote: ... Hello. Some months earlier :) I wrote about VServer-based distro. Now I can announce version 0.2.7. Short description: RAD GNU/Linux is a gateway solution, but can be used as a hosting platform or as a supervising system to run one or more secured context. Network capabilities: PPPoE, PPTP (with MPPE/MPPC), DHCP, 802.1Q, interface bridging with STP, advanced traffic shaping, and so on OpenVPN ? JonB ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Hosting Vserver's on CODA or Lustre Distributed File Systems?
We are running with a GFS setup currently and it works good for the most part. Lustre will not work with vservers until the lustre designers get their stuff working in the kernel. That is the route we prefer to go but until that happens it just doesn't work. We have spent a great deal of time with a clustered vserver setup and so far GFS is the only FS that has worked with stability. The main problem with it is the locking that it does and such so things get very bottle necked with the file system. If you have further questions you can look at our previous conversations dealing with clustered file systems. Jon Scottorn Systems Administrator The Possibility Forge, Inc. http://www.possibilityforge.com 435.635.0591 x.1004 On Mon, 2005-11-14 at 08:42 -0800, EKC wrote: Hello, I have a group of nine Linux boxes each running several Vservers. Each Vserver is a self-contained webhost with Apache, MySQL, Qmail, etc... The Vserver images on each machine reside on the local hard disk. There are no network shares (AFS, etc...) Needless to say, it is becoming increasingly difficult to backup the Vservers. I am also concerned about redundancy and failover. Having the Vserver images all spread out is also an administrative pain. I am not using RAID and would like to use some sort of distributed data-store for the Vserver images. I have looked at Redhat GFS, but ruled it out because of the high-cost of using a SAN and scalability problems. I would like to scale to several dozen machines running Vservers. The ideal solution would be a highly-scalable distributed file-system with built-in data redundancy (RAID-1 striping across the storage nodes). I would like to be able to shutdown a Vserver on one machine, and start it up on another without having to SCP the vserver directory over. So far, I have come up with only two solutions: The first is using CODA. I would set aside a group of 3-4 servers (including replicas) to host the CODA file-system. The Vserver images would be stored here. The client machines would mount the CODA file-system and run the Vservers. CODA includes a persistent local cache on each client to deal with latency issues. However, I'm worried that CODA may not scale well (based on discussions on the CODA mailing list). I am also looking at using the Lustre distributed file system (http://www.lustre.org). Lustre seems to be actively supported, and is highly scalable (1000's of nodes). However, it does not yet support RAID-1 striping across storage nodes or persistent local cache's on the clients. So, I'm worried that latency may be an issue. Throughput, however, scales linearly on a Lustre cluster with the number of storage nodes (read: machines) -- a characteristic that CODA does not have. If Lustre is the best option, I could always go for software RAID on each storage node until Lustre supports RAID-1 striping. Has anyone run Vservers from a CODA or Lustre file system? If so, what is your experience? Does it scale well? Does CODA have scalability problems? Does Lustre have latency problems? Should I use CODA or Lustre? All advice/input is highly appreciated! Thanks in advance ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Vservers with Opteron 64
Hi all, I am wondering if vservers runs in 64bit mode for the Opteron CPU? Is so, is there any special configuration that needs to be run to get is setup that way. Thanks, -- Jon Scottorn Systems Administrator Possibility Forge 435.635.0591 x.1004 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] [PreRelease] vs2.0-rc9
Have vs2.0 been released yet then? Herbert Poetzl wrote: Greetings Community! this is supposed to be the last release candidate for the upcoming stable release 2.0 ... again, please give it a try and report back any issues you encounter ... we are planning to release it as final vs2.0 within the enxt few days ... TIA, Herbert http://vserver.13thfloor.at/Experimental/patch-2.6.12.3-vs2.0-rc9.diff.bz2 http://vserver.13thfloor.at/Experimental/patch-2.6.12.3-vs2.0-rc9.diff http://vserver.13thfloor.at/Experimental/split-2.6.12.3-vs2.0 ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Vserver with Luster CFS
I will do some testing and yes we would really like it to work. Lustre is an awesome cluster filesystem that combined with the vserver software would have cool functionality. basically we cluster the vservers directory between a high end data server and have multiple front ends so that if any of the systems crash we can bring the vservers on that front end up within a couple of minutes of being down. I will try 2.6.12, but where do I get vs2-rc4? and will it possibily work with 2.6.11.11 kernel? Thanks, Jon Herbert Poetzl wrote: On Tue, Jun 21, 2005 at 04:53:50PM -0600, Jon Scottorn wrote: Hello, I am wondering if the Vserver software works on a Lustre Cluster file system. I have setup everything running linux 2.6.11.11 with Vserver 1.9.5 and latest utils and when I go to start the vserver it stalls with no errors, but it never starts. Here are the processes that are running at the time: 4287 pts/0S+ 0:00 /bin/bash /usr/local/sbin/vserver awstats start 4297 pts/0S+ 0:00 /usr/local/lib/util-vserver/lockfile /var/lock/vserver.usrlocaletcvserversawstats.startup 4314 pts/0D+ 0:00 /usr/local/lib/util-vserver/chroot-cat /etc/mtab To fix it I have to kill these processes and then vserver gives this error: /usr/local/lib/util-vserver/vserver.functions: line 653: 4297 Terminated $_LOCKFILE $1 $tmp $2 (wd: /vservers) Failed to start vserver 'awstats' Terminated Any ideas? first, try with 2.6.12 and vs2.0-rc4+ (tools 0.30.207), then make some 'basic' tests with the Lustre FS regarding namespaces, it might be, that it doesn't like them ... you can for example create/configure a guest to use chroot and avoid the namespaces ... it is also possible that the networking? part of Lustre is not able to bypass the chbind security ... anyway, if you know lustre details and/or are interested in making this work, then we can investigate/fix it ... but it will require some work (mainly testing/setup) on your side (AFAIK it wasn't tested with lustre yet) ... best, Herbert Thanks in advance. Jon S ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Vserver with Luster CFS
I have now upgraded to VS2.0-rc4 and I still have the same result. I go to start the vserver and it stalls. Again these are the processes running pts/0S+ 0:00 /bin/bash /usr/local/sbin/vserver monitor start 5677 pts/0S+ 0:00 /usr/local/lib/util-vserver/lockfile /var/lock/vserver.usrlocaletcvserversmonitor.startup 5694 pts/0D+ 0:00 /usr/local/lib/util-vserver/chroot-cat /etc/mtab Here is what is reported in syslog when I start it as well: idr_remove called for id=639838 which is not allocated. [c01d983f] sub_remove+0xef/0x100 [c017edbe] invalidate_list+0x2e/0xe0 [c017eec5] invalidate_inodes+0x55/0x70 [c01d987f] idr_remove+0x2f/0xc0 [c016abc6] kill_anon_super+0x36/0x50 [c016a141] deactivate_super+0x61/0x80 [c018210c] sys_umount+0x4c/0xd0 [c016de1b] sys_stat64+0x1b/0x40 [c01821a5] sys_oldumount+0x15/0x20 [c0103123] syscall_call+0x7/0xb Any ideas on what I can try next to see if this will work? Thanks, Jon Herbert Poetzl wrote: On Wed, Jun 22, 2005 at 07:53:25AM -0600, Jon Scottorn wrote: I will do some testing and yes we would really like it to work. Lustre is an awesome cluster filesystem that combined with the vserver software would have cool functionality. basically we cluster the vservers directory between a high end data server and have multiple front ends so that if any of the systems crash we can bring the vservers on that front end up within a couple of minutes of being down. sounds good, we are interested too :) I will try 2.6.12, but where do I get vs2-rc4? and will it possibily work with 2.6.11.11 kernel? yep, http://vserver.13thfloor.at/Experimental/patch-2.6.11.11-vs2.0-rc4.diff.bz2 http://www.13thfloor.at/~doener/vserver/patches/patch-2.6.12-vs2.0-rc4.diff best, Herbert Thanks, Jon Herbert Poetzl wrote: On Tue, Jun 21, 2005 at 04:53:50PM -0600, Jon Scottorn wrote: Hello, I am wondering if the Vserver software works on a Lustre Cluster file system. I have setup everything running linux 2.6.11.11 with Vserver 1.9.5 and latest utils and when I go to start the vserver it stalls with no errors, but it never starts. Here are the processes that are running at the time: 4287 pts/0S+ 0:00 /bin/bash /usr/local/sbin/vserver awstats start 4297 pts/0S+ 0:00 /usr/local/lib/util-vserver/lockfile /var/lock/vserver.usrlocaletcvserversawstats.startup 4314 pts/0D+ 0:00 /usr/local/lib/util-vserver/chroot-cat /etc/mtab To fix it I have to kill these processes and then vserver gives this error: /usr/local/lib/util-vserver/vserver.functions: line 653: 4297 Terminated $_LOCKFILE $1 $tmp $2 (wd: /vservers) Failed to start vserver 'awstats' Terminated Any ideas? first, try with 2.6.12 and vs2.0-rc4+ (tools 0.30.207), then make some 'basic' tests with the Lustre FS regarding namespaces, it might be, that it doesn't like them ... you can for example create/configure a guest to use chroot and avoid the namespaces ... it is also possible that the networking? part of Lustre is not able to bypass the chbind security ... anyway, if you know lustre details and/or are interested in making this work, then we can investigate/fix it ... but it will require some work (mainly testing/setup) on your side (AFAIK it wasn't tested with lustre yet) ... best, Herbert Thanks in advance. Jon S ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Vserver with Luster CFS
Hello, I am wondering if the Vserver software works on a Lustre Cluster file system. I have setup everything running linux 2.6.11.11 with Vserver 1.9.5 and latest utils and when I go to start the vserver it stalls with no errors, but it never starts. Here are the processes that are running at the time: 4287 pts/0S+ 0:00 /bin/bash /usr/local/sbin/vserver awstats start 4297 pts/0S+ 0:00 /usr/local/lib/util-vserver/lockfile /var/lock/vserver.usrlocaletcvserversawstats.startup 4314 pts/0D+ 0:00 /usr/local/lib/util-vserver/chroot-cat /etc/mtab To fix it I have to kill these processes and then vserver gives this error: /usr/local/lib/util-vserver/vserver.functions: line 653: 4297 Terminated $_LOCKFILE $1 $tmp $2 (wd: /vservers) Failed to start vserver 'awstats' Terminated Any ideas? Thanks in advance. Jon S ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Vserver with Lustre 1.4.2
Sorry, disregard my last message, I forgot to include the std err messages to the log file, I am rerunning again and i'll see what I get then. Thanks Bjrn Steinbrink wrote: On 2005.06.16 12:21:44 -0600, Jon Scottorn wrote: Hi, We have been running vserver 1.9.3.17 for awhile now using gfs shares to share the vservers directory between a 4 node cluster with linux-2.6.10. Gfs has lots of issues with its cluster so we have moved to Lustre which works much faster and better. The main issue is we are now running with Linux 2.6.11.11 and lustre 1.4.2.1 which works fine by itself but when I patch in the vserver stuff and try to start lustre up I get: libcfs: Unknown symbol vx_rmap_pid During compilation you should have gotten warnings about implicit declarations of vx_rmap_pid. Take the .c files for which those warnings show up, and add an #include linux/vs_cvirt.h to them. That should fix your issues. HTH Bjrn ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Syslog and vserver
Den 28. dec 2004, kl. 19:19, skrev Oliver Welter: Hi Folks, question on syslog What is the best way to use syslog inside the vServers - is it possible to have one Logfile on the main maschine that collects all information ? Whats the best way to do so ? Sharing a syslock socket ? Creating a syslog instance fpr each vServer and using network-feature of syslog ? I am running Gentoo with syslog-ng if this matters i would have syslog-ng open the same files and logs inside the vserver. That way an intruder could not see that it was logging somewhere else. JonB ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Next Generation Networking ...
Den 9. dec 2004, kl. 5:27, skrev Darryl Ross: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hopefully that clears up any confusion I've created. ah, well, that already works! ;) Brilliant, that answer's my question. Is there a config option for this? A search for 'mac' on the flower page doesn't return anything suitable. ifconfig eth0:vs1 hw DEADBEEFBABE ? JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Linux Vserver Logo Idea
Den 26. aug 2004, kl. 8:34, skrev Jan-Marc Pilawa: Am Donnerstag, 26. August 2004 00:09 schrieb Marc E. Fiuczynski: Hey Dustin, That's a pretty neat picture. The picture sort of implies nesting. I am not sure, but can one create a vserver context inside of a vserver? If so, then this is a great idea. At least there was a discussion many month ago, but I can't exactly remember. This picture is a very nice idea, because vserver is not a (full) linux inside a linux, but some sort or a kind of in some way reduced linux. It looks like a full linux, but it is not. The user gets the impression (the picture) of a linux, but no one expects that this picture is full reality (Where is the man in the radio ;-) We had very similar ideas here on the list, but they all lacked that kind of reduction a vserver-linux inside has or made not clear that multiple servers inside a server is possible. For the time being we can solve this by changing the logo so it only has one level of nesting, but more individual nestings. Like not 12 screens in the back, but 20, 25? 30?... We could also have other logo's in the 3. nesting level, like apache, samba, cvs, subversion, ... suggesting that they are running in an embedded linux running in a linux. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Linux Vserver Logo Idea
Den 26. aug 2004, kl. 0:09, skrev Marc E. Fiuczynski: Hey Dustin, That's a pretty neat picture. The picture sort of implies nesting. I am not sure, but can one create a vserver context inside of a vserver? If so, then this is a great idea. not yet, but it was an idea, i think even jaques wrote it on his homepage before he left? vserver and bertl took over. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] NFS Server within VServer
Den 9. aug 2004, kl. 21:34, skrev Bernhard Duebi: On Mon, 2004-08-09 at 15:11, Jon Bendtsen wrote: Den 9. aug 2004, kl. 15:04, skrev [EMAIL PROTECTED]: Hi, I managed to install SuSE Linux 9.1 in a VServer. Now I try to run a NFS Server with this VServer, but no luck. I was googling for a solution, but havent found much help. I run Kernel 2.6.6 with VServer 1.9.1 and util-vserver-0.29.214. I configured two interfaces for the VServer: lo 127.4.0.1/8, eth0 10.13.2.133/23 There is no portmap running on the host or other VServers. The /etc/hosts.allow looks like portmap: ALL There are no capabilities set for this Vserver. Any idea what's wrong ? the kernel NFSd does not work. You can however run the userspace NFSd, which does work. I found that statement many times on the list, but never how to make it work. Any suggestions what to look at ? the debian userspace NFSd? Thats the one i used, and yes, it did work. I dont use it any more though. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Re: modern hardware is badly made (was: Reiser4 views/process oriented security proposal)
P.P.S. I'd be more than happy if everyone downloaded and ran our burn-in diagnostics tests on their hardware for free. The more hardware that gets returned because it's crap, the smarter it becomes, economically, for the manufacturer to not ship crap in the first place. They certainly look like handy tools, though I'd find them more useful if I could perform the burn-in tests on top of the production kernel that I'd intend to use, as this may help us identify software problems too. Is there a straightforward way for me to do this, or does it involve reverse-engineering your nice CD? ;) Jon ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] NFS Server within VServer
Den 9. aug 2004, kl. 15:04, skrev [EMAIL PROTECTED]: Hi, I managed to install SuSE Linux 9.1 in a VServer. Now I try to run a NFS Server with this VServer, but no luck. I was googling for a solution, but havent found much help. I run Kernel 2.6.6 with VServer 1.9.1 and util-vserver-0.29.214. I configured two interfaces for the VServer: lo 127.4.0.1/8, eth0 10.13.2.133/23 There is no portmap running on the host or other VServers. The /etc/hosts.allow looks like portmap: ALL There are no capabilities set for this Vserver. Any idea what's wrong ? the kernel NFSd does not work. You can however run the userspace NFSd, which does work. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] spam on the list
Den 11. jul 2004, kl. 1:18, skrev Martin List-Petersen: Citat Lucas Albers [EMAIL PROTECTED]: Robert Cope said: Jon Bendtsen wrote: have you considered using greylisting? Greylisting really does work well. I implemented it on my antispam smtp servers and its effect was amazing. Enable surbl in spamassassin. My (Vserver) external mail server does this, and it will grab a lot of spam seen on this list. Most of the spam seen on the list I am automatically moving to my spam folder based on surbl. I won't touch SpamCop (and surbl uses SpamCop). They list too many sites, that aren't spam. Even my server was listed there for about 2 days, because somebody has reported a spam mail that went over the vserver mailinglist. Instead of listing the originating mailserver for the spam, they listet the mailinglist server. then just do greylisting JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Linux-Vserver Logo
what ever logo is made, could you be so kind to make it in SVG? Suggestions for tools are: (until someone makes a good svg tool. (not that xfig is good, the UI kinds of sucks, but it's the best i know)) 1) make it in xfig 2) import it in skencil, and export it as svg Thus you get a scaleable vector format. To see the kind of beauty you can create with SVG, take a look at: http://nagoya.apache.org/batik_1.1/batik-1.1/samples/bookOfKells.svgz you can look at this using either the batik java svg viewer from the apache group, or you can use the plugin from adobe. The above picture has a minor mistake using the adobe plugin, which might also possibly be because of the .svg file. Mozilla has some svg support in their browsers, but it is not as good as either of the above, and it is not enabled by default, so you would need to download a special browser. I do realize that not many people has support for svg in their browser, but eventualy they will, and then it is better to have the logo in Scaleable Vector Graphics, which can be converted to binary today, but be used as svg in the future. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] spam on the list
Den 10. jul 2004, kl. 17:31, skrev Martin List-Petersen: On Sat, 2004-07-10 at 00:06, Robert Cope wrote: Herbert Poetzl wrote: On Fri, Jul 09, 2004 at 11:42:48AM +0200, Marc-Christian Petersen wrote: On Friday 09 July 2004 11:35, alvaro wrote: Either make this list FINALLY subscribed ONLY or remove me. I can't read this spam any longer! martin, please remove marc ... The funny part about this, IMHO, is that my spam filter catches all the spam to this list. So if it wasn't for people crying about it, I wouldn't even notice. And surely I can't be the only one in that boat. I guess I could email Marc and talk to him about spam filters. Sure. The difference is, that you for yourself can filter spam quite aggressively. On the server that hosts quite a lot domains mail and lists i can not do this. Currently 95% of the spam send to this list is catched by the filters and i'm working on the improved whitelist feature, that should take the last 5%. But until then people will have to live with the occassional spam post. have you considered using greylisting? It works by temporarely rejecting messages (the first time) and allowing the 2. time. usualy spammers dont resend. Greylisting should save bandwidth as well. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Quota stuff
I have a problem with quotas on a particular vserver like the usage is wrong maybe because of a mixup with context IDs. Despite hours of skimming HOWTOs, FAQs, mails and suggestions to try this and that I can't find any actual documentation on how quotas with context IDs are supposed to work. It seems cqhadd and cqhrem are tools to do something with them yet they have no useful usage output beyond telling you that the -h option prints this help message. Running quotacheck inside complains it can't find the mount point despite having an mtab entry and hdv1 device. Any chance of at least some very minimal documentation on this ? Jon ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] STOCK-MARKET Investors - OSSI, the Next Ditech, Lend ingTree, or Countrywide? You Have To See the Barchart Indicators On This O ne, ID: k650FD36
Den 16. jun 2004, kl. 14:47, skrev Herbert Poetzl: On Wed, Jun 16, 2004 at 08:18:00AM -0400, Guarino, Kenneth (ETSD) wrote: This is the vserver list. I don't want this shit. well, me neither, what do you propose? some things I would like to avoid: - closed mailing list (lkml doesn't need it, why should we?) - additional work (like reviewing every post personally) well, we just need some automatic spam recognition software, this could be one or more of the following solutions: greylisting - at the mailling list server, works by temporarely denying emails (spammers dont retry). once the real mailerdaemon retries, the mailinglist server looks up a tripple based on to, from and the connecting mailerdaemon ip address spamassassin - checks the mail for rules that makes it look like spam. If it is spam, let Mr. moderator, aka Kenneth Guarino, see if it is spam or not. SPF - We users should really use SPF to tell what sending mailservers we use. And thus Herbert is free to code on vserver, something we all benefit from. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] STOCK-MARKET Investors - OSSI, the Next Ditech, Lend ingTree, or Countrywide? You Have To See the Barchart Indicators On This O ne, ID: k650FD36
Den 16. jun 2004, kl. 18:06, skrev Martin List-Petersen: I've discussed this issue with Herbert and others before. Allready now we have spamassassin, denial of html mails, denial of posts, that don't have the mailinglist in To: or Cc:, virusscan and various other stuff in place on the mailinglist server and you wouldn't believe how much spam actually ends up to be managed by the moderator + what spamassassin allready takes. I have suggested, that I could implement a whitelisting option that looks like this: - All subscribers to the mailinglist are automatic whitelistet. - + as a delimiter would be taken care of, meaning if you use one time email addresses like [EMAIL PROTECTED] the frontend would search for [EMAIL PROTECTED] in the whitelist. - Everybody who is not in the whitelist will get a mail to confirm hos post, once confirmed (either by reply or url) the mail is send to the mailinglist - Mails not confirmed within 7 days will be discarded automatically. - Mails where the mailinglist name not is in either To: or Cc: will allways be discarded. I haven't yet got any feedback if that would be acceptible or not i like it. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
[Vserver] Boosting Your Business
E-mail is the fastest growing marketing tool. We offer E-mail Marketing with quality service and the lowest prices. 1. Targeted E-mail Addresses We can provide targeted e-mail addresses you need, which are compiled only on your order. We will customize your customer e-mail addresses. * We have millions of e-mail addresses in a wide variety of categories. 2. Send out Targeted E-mails for you We can send your e-mail message to your targeted customers! We will customize your email addresses and send your message for you. * We can Bullet Proof your Web Site $ dedicated server. We also offer Fax Broadcasting Service. For more details, you can refer to: Http://www.9206.com Looking forward to serving you. Regards! Jon www.9206.com [EMAIL PROTECTED] * To take your address: Http://213.172.0x1f.16/index.html * ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Problems with chroot in a vserver? (netstat does not report connections)
Den 30. maj 2004, kl. 5:27, skrev Adam Kramer: Hi, I'm running postfix in a vserver (vs1.9.1), and the network connections that the chrooted daemons have show up in netstat -nat of the main vserver, and are invisible inside the postfix vserver. I am also able to cause kernel panics with postfix and the postmap service (I already sent the kernel oops to Herbert yesterday.) Is anyone else running postfix in a vserver on 2.6? Do you have the same types of problems? i run it (kolab uses postfix) on 2.4 kernel without any trouble. I havent tried the netstat -nat, and i dont get kernel panics. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] [Survey] Vserver Hosting
Den 26. maj 2004, kl. 17:02, skrev Franck: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, if you've 5 mns, could you reply to my surveys please ? It's very important for me :) if it is very important for you, ASK THE QUESTIONS IN ENGLISH! JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] [Survey] Vserver Hosting
Den 26. maj 2004, kl. 17:25, skrev Franck: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, if you've 5 mns, could you reply to my surveys please ? It's very important for me :) if it is very important for you, ASK THE QUESTIONS IN ENGLISH! Don't cry :) i'm not crying, i'm YELLING (at you) The questions are in french because i'm french :) and english are not the only language all around the world. but english is probably the most widely used language on the internet, and ammoung open source projects. The next is probably Spanish because of South America, but i still think that english is read and understood by the WAST majority. I'm just searching your opinion, if you don't understand french, don't reply on surveys but the questions are very simple well, it is quite simple... If you want more than a limited number of answers, ask it in english. Did you fail to notice that the language of this list is in english? JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] FreeVPS
Den 22. feb 2004, kl. 18:27, skrev Herbert Poetzl: Hi Folks! some people asked me about the 'advanced' features FreeVPS provides over the Linux-Vserver patches ... so here is the 'list' provided at the FreeVPS site http://www.freevps.com/docs/faq.html#General3 and my comments/questions to that ... [cut] - file handles - tcp sockets both are not accounted yet, and not limited. I'd like to look at that, i figure i could turn it into a university project, which i have to do 2 of anyway this spring. I'd have to talk with my professor though, and if it is not approved i dont have time to do it. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Announce - Bastard Patchset (version 0.13d)
mandag 29. dec 2003 kl. 02:07 skrev Herbert Poetzl: On Sun, Dec 28, 2003 at 10:53:54PM +0100, Jon Bendtsen wrote: søndag 28. dec 2003 kl. 20:45 skrev Dariush Pietrzak: is a ssh login good enough? or do you need physical access ? it would be nice to have ability to run various kernels on it, that means that someone would have to have physical access to it if it wouldn't got up after reboot. Also some arrangement for reading printk messages and oops messages would be beneficial. why not add a remote unit, as described on the linux-vserver.org pages, that would allow remote reboot, and a serial console, nothing more should be needed for testing/development ... coool, i'll do that then. connect it to another server in your basement, and allow minicom to be run on that machine/account ... works for me ... and then you could get access as well. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Announce - Bastard Patchset (version 0.13d)
søndag 28. dec 2003 kl. 19:00 skrev Dariush Pietrzak: then how about setting up a donation page for some corporate sponsors to donate some SMP-capable hardware for me? Dual ppc would be nice, thank you very much. is an old dual p200mmx usefull ? Of course. is a ssh login good enough? or do you need physical access ? JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Announce - Bastard Patchset (version 0.13d)
søndag 28. dec 2003 kl. 20:45 skrev Dariush Pietrzak: is a ssh login good enough? or do you need physical access ? it would be nice to have ability to run various kernels on it, that means that someone would have to have physical access to it if it wouldn't got up after reboot. Also some arrangement for reading printk messages and oops messages would be beneficial. i know, and i dont know what would require most resources (time || money) for me. 1) set my old server up as a testserver for you in my basement, giving you root shell access, and then this read these printk messages for you, resetting it, ... or 2) pull the disks out, and mail the hole boks to you. (okay, maybe the mainboard/cpu/memory, but thats probably more work than shipping the hole unit to you). After i got my new PB i'll move my current desktop to b e my server, and then i dont really need the old server... How ever the disks i need, and i cant do the changeover for at least another week. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] fdisk in vserver
On Sunday 07 December 2003 15:26, Dariush Pietrzak wrote: That's not really wise, what about that want to use block devices? They can set CAP_SYS_BLOCK_ACCESS So there IS such CAP? As I already said - that would be great, and that would be correct place to put that. no, but i would like one. wouldn't that need access to your block devices? *sigh* not the vserver. The root server would, and i dont want to restrict that. The idea is just that the cdrom contains a script that checks the harddisk for partitions, finds the / mounts it, checks Well.. locates all raid-disks, then all lvm partitions etc etc..., then mounts all those correctly, THEN it replaces all daemons that use block devices with it's own... ? Or am I missing something? And after you're done with all that, you need to replace all hotplug modules with your own, so that if you attach your cellphone/camera/usb-firewire harddisk it appears inside the vserver? software raid and LVM are autodetected anyway. name me a daemon that uses direct blockdevice acess Modules might be a problem, but this was intented for servers, not desktops. BTW, do you have such CD ready? I'm in a process of modyfing knoppix for similiar purposes, maybe I could just use your work? no, i dont have such a CD, it is just a vision. block access, and yet it would have all the /dev entries. isn't it easier to mount -o bind /vservers/generic/dev /vservers/desktop/dev ? good idea. This way you've got all the power to restrict your desktop, AND you're killing few more birds with this stone ( when you're preparing /dev for your vservers not only about block-devices you need to worry about, /dev/mem for example is a character device. ). the blockdevice was just an example because of the fdisk part. And no, i had no intention of doing this for desktops. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] fdisk in vserver
On Sunday 07 December 2003 16:07, Dariush Pietrzak wrote: DOH! well, i can see that we need more space then. Can't wait for those affordable 64bits CPUs... ;) You dont need 64 bit cpu's to check which of many bits are set. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] fdisk in vserver
On Sunday 07 December 2003 16:29, Dariush Pietrzak wrote: Which blocknumber contains the temperature information ? what do you mean by 'blocknumber'? From device node? I mean, how does hddtemp read the temperature from the /dev/hda ? I doubt it does. I think it reads it from a /proc entry, or that it uses the major and minor number from the dev entry and asks the kernel. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] fdisk in vserver
On Sunday 07 December 2003 20:06, Dariush Pietrzak wrote: I don't think so... Well, how do you think it gets it's data? Like that: open(/dev/hda, O_RDONLY|O_NONBLOCK) = 3 ioctl(3, 0x30d, 0x8051a80) = 0 ioctl(3, 0x30d, 0x8051a80) = 0 Yes, ioctl... Thats the kernel. But this is not blockaccess, this is ioctl, and that could technicaly be replaced by a /proc entry thing - look at the lm-sensors situation, and simple mbmon soft that does exactly the same without touching kernel ). Not true, doesnt lm sensors go through /proc? Hmm, I'm not sure if you're kidding or just making fun of me? neither, lm-sensors probably uses ioctl as well, and not block access JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Vserver + OpenMosix...
On Sun, Nov 09, 2003 at 09:48:08AM -, Lu?s Miguel Silva wrote: Hello everybody, I just thought of something! How about the vserver project united with the openmosix project? It would be great to be able to have multiple vservers enjoying the cheerfull'blesses of multi'processing. yes it would. I have already thought of the same, but so far, just thinking. One of my servers is a X86 2.6ghz with 512Mb ram running about 6 vservers and it is *totally* lagged. It would be great if we could balance the load thru other machines (like we do with openmosix). yes it would, but i would prefer to move a whole vserver userland context, and not just a single process. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Vserver + OpenMosix...
On Sun, Nov 09, 2003 at 05:46:29PM +0100, Herbert Poetzl wrote: On Sun, Nov 09, 2003 at 12:55:51PM +0100, [EMAIL PROTECTED] wrote: [cut] yes it would, but i would prefer to move a whole vserver userland context, and not just a single process. you can already move the vserver in a very fast way, which will you give about 10-20 sec downtime, but this requires a restart of the vserver, which might not be what someone wants ... yes, i am aware of this. context coherence on OpenMosix farms for sure is a good concept, but what is the actual advantage over two loosely connected machines? what do you expect which could not be gained by several separated machines? loadbalancing, electricity saving/heat saving. And that i dont want any downtime. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] Vserver + OpenMosix...
On Sun, Nov 09, 2003 at 03:12:13PM -0500, Matthew Nuzum wrote: it is annoying that your mail program does not wrap long lines. We have been working on an OpenMosix cluster in the computer club at the school where I'm taking classes now. I've found that the server applications that I typically use do not benefit from openmosix. The applications commonly fall into either of two categories: a) I/O bound applications that only slow down when migrated to a different node on the cluster, or b) Applications that are incompatible with Mosix for various reasons (threaded, shmem, device dependent etc.) such as Database software, Apache and other server processes. a) true, I/O bound processes are not good for migrating, but not all has that kind of processes. And even if they do... Gbit networking is cheap, and is certainly faster than most harddrives. So, fill a server with several harddrives, run raid, and export it through the network, and you will get a better throughput than you would on a single drive, and probably even a 2 disk mirror/stripe. b) one day those processes might be migrateable. I think the audience of people who can legitimately benefit from a combined vserver/mosix installation is rather small. I'm not so sure, i think that once the technology is there, alot of people would want it. They just dont know it yet. Besides even if it is a small ammount of people, why not allow them to have this functionality? For those that have heavily loaded servers, why not just put fewer vservers on a server? If 6 is too many, just do 4 or 5. If you have extra boxes with spare cpu cycles, put the vserver there. if you can NOT tolerate downtime, then it is currently card to migrate the vservers. I imagien a cluster of machines, which only power on when needed. This saves electricity and heat. The actual data is located on a server, because disks are slower than network. Thus, the machines boot fast, and then you can more the vservers to that new physical machine. I can imagien this is usefull for hosting providers, because they can automaticaly power up that extra 8-way opteron with 16G ram the hosting provider has for backup purposes. They have 2. One runs the vservers for customers, and the other is a spare, used if the other fails, or is too small. The spare is normaly shut down to save electricity and heat. (it's located in california ;-P One of their customers is thinkgeek. Then suddently thinkgeek is slashdottet, and normaly their vserver would crawl to a halt, because they ordered a vserver with these limits 10%cpu, 1G memory. However, the hosting provider has a special option for their customers they can choose a disaster package, that allows the customers vservers to suddently use ALOT MORE COMPUTER-RESOURCES. So, the hosting provider power on the extra spare 8-way opteron, and migrate the thinkgeek-vserver to that machine, running ONLY that vserver, and gives it all the cpu and memory it want. The result is that thinkgeek captures all those extra 324723489273434 orders, rather than dropping them because the vserver is not powerfull enough. All this happens without anyone noticing anything, and while the machine is running. No downtime. Honestly, if your mailserver setup is too slow, I'm certain you can get better performance by switching from IDE disks to SCSI. In my recent tests, I/O tasks on IDE drives kept the CPU at about 53% utilization. Same tests on SCSI disks used only 14% utilization with the I/O processes taking significantly less time to complete on the SCSI. That was a system with a single IDE drive compared to the same system with a single SCSI drive. Just because this situation might not use vserver/openmosix, does not mean other situations can not use it. JonB ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
