[Vserver] x with nvidia module in vserver?
Hello List, I try to run a complete workstation in a vserver including a x-server. This is no problem since I do not try to use the hardware acceleration with the nvidia kernel module. I have set several capabilities for the vserver: CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_FSETID CAP_KILL CAP_SETGID CAP_SETUID CAP_SETPCAP CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_MODULE CAP_SYS_RAWIO CAP_SYS_CHROOT CAP_SYS_PTRACE CAP_SYS_PACCT CAP_MKNOD CAP_LEASE I copied the device files from the host to the vserver. If I use the "nv" driver for xfree all is well. But if I try to use "nvidia" xfree fails with the error "unable to load kernel module". This is clear for me. Then I tried to figure out which device is used with the "nv" driver. I tried to copa the device file /dev/nvidia0-4 from the host to /dev/video0-4 in the vserver. But the 3d-accel does not function... Does anyone have a hint for me, how I can manage this? Or is it impossible? I use this configuration to deploy the workstations to a pool of pc's. Therefor the security between host and vserver is not first goal. Greets, Torsten ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] x with nvidia module in vserver?
On Tuesday 04 October 2005 08:08 am, Torsten Becker wrote: I have not tried this yet, but this is one of my priorities after I finish the servers. I also would be interested in a solution. One question. Do you pre-load the nvidia module at startup so X doesn't have to try to insert it into the kernel? I am going to need full functionality since I run a heavily loaded twinview desktop. > Hello List, > > I try to run a complete workstation in a vserver including a x-server. > This is no problem since I do not try to use the hardware acceleration > with the nvidia kernel module. > I have set several capabilities for the vserver: > > CAP_CHOWN > CAP_DAC_READ_SEARCH > CAP_FOWNER > CAP_FSETID > CAP_KILL > CAP_SETGID > CAP_SETUID > CAP_SETPCAP > CAP_NET_BIND_SERVICE > CAP_NET_BROADCAST > CAP_NET_RAW > CAP_SYS_MODULE > CAP_SYS_RAWIO > CAP_SYS_CHROOT > CAP_SYS_PTRACE > CAP_SYS_PACCT > CAP_MKNOD > CAP_LEASE > > I copied the device files from the host to the vserver. If I use the > "nv" driver for xfree all is well. But if I try to use "nvidia" xfree fails > with the error "unable to load kernel module". This is clear for me. > Then I tried to figure out which device is used with the "nv" driver. I > tried to copa the device file /dev/nvidia0-4 from the host to > /dev/video0-4 in the vserver. > But the 3d-accel does not function... > > Does anyone have a hint for me, how I can manage this? Or is it impossible? > I use this configuration to deploy the workstations to a pool of pc's. > Therefor the security between host and vserver is not first goal. > > Greets, Torsten > > ___ > Vserver mailing list > Vserver@list.linux-vserver.org > http://list.linux-vserver.org/mailman/listinfo/vserver > -- Chuck "...and the hordes of M$*ft users descended upon me in their anger, and asked 'Why do you not get the viruses or the BlueScreensOfDeath or insecure system troubles and slowness or pay through the nose for an OS as *we* do?!!', and I answered...'I use Linux'. " The Book of John, chapter 1, page 1, and end of book ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] x with nvidia module in vserver?
Chuck schrieb: Since the vserver can not load a module I load it in the host. The host is my also my testsystem for the nvidia-module. I have a complete x-workstation installed in the host. Greets, Torsten On Tuesday 04 October 2005 08:08 am, Torsten Becker wrote: I have not tried this yet, but this is one of my priorities after I finish the servers. I also would be interested in a solution. One question. Do you pre-load the nvidia module at startup so X doesn't have to try to insert it into the kernel? I am going to need full functionality since I run a heavily loaded twinview desktop. Hello List, I try to run a complete workstation in a vserver including a x-server. This is no problem since I do not try to use the hardware acceleration with the nvidia kernel module. I have set several capabilities for the vserver: CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_FSETID CAP_KILL CAP_SETGID CAP_SETUID CAP_SETPCAP CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_MODULE CAP_SYS_RAWIO CAP_SYS_CHROOT CAP_SYS_PTRACE CAP_SYS_PACCT CAP_MKNOD CAP_LEASE I copied the device files from the host to the vserver. If I use the "nv" driver for xfree all is well. But if I try to use "nvidia" xfree fails with the error "unable to load kernel module". This is clear for me. Then I tried to figure out which device is used with the "nv" driver. I tried to copa the device file /dev/nvidia0-4 from the host to /dev/video0-4 in the vserver. But the 3d-accel does not function... Does anyone have a hint for me, how I can manage this? Or is it impossible? I use this configuration to deploy the workstations to a pool of pc's. Therefor the security between host and vserver is not first goal. Greets, Torsten ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] x with nvidia module in vserver?
On Tuesday 04 October 2005 08:22 am, Torsten Becker wrote: hmm...for me maybe I should leave my big workstation alone and just create a vserver for one guest workstation on it which im assuming could load nv since it is local and honestly it doesnt even need to access the video card. will research to see if i can run x without a video device:). i only use that 2nd workstation via a vnc window off my main one and 2 other people access it from remote. what im trying to do is to free up a whole computer dedicated only to running a remote desktop. did you copy the video0-4 device file or did you use mknod to create it? this will be interesting if someone who has been successful can tell us what needs to be done :) > Chuck schrieb: > Since the vserver can not load a module I load it in the host. > The host is my also my testsystem for the nvidia-module. I have a > complete x-workstation installed in the host. > > Greets, Torsten > > >On Tuesday 04 October 2005 08:08 am, Torsten Becker wrote: > > > >I have not tried this yet, but this is one of my priorities after I finish the > >servers. I also would be interested in a solution. > > > >One question. Do you pre-load the nvidia module at startup so X doesn't have > >to try to insert it into the kernel? > > > >I am going to need full functionality since I run a heavily loaded twinview > >desktop. > > > > > > > >>Hello List, > >> > >>I try to run a complete workstation in a vserver including a x-server. > >>This is no problem since I do not try to use the hardware acceleration > >>with the nvidia kernel module. > >>I have set several capabilities for the vserver: > >> > >>CAP_CHOWN > >>CAP_DAC_READ_SEARCH > >>CAP_FOWNER > >>CAP_FSETID > >>CAP_KILL > >>CAP_SETGID > >>CAP_SETUID > >>CAP_SETPCAP > >>CAP_NET_BIND_SERVICE > >>CAP_NET_BROADCAST > >>CAP_NET_RAW > >>CAP_SYS_MODULE > >>CAP_SYS_RAWIO > >>CAP_SYS_CHROOT > >>CAP_SYS_PTRACE > >>CAP_SYS_PACCT > >>CAP_MKNOD > >>CAP_LEASE > >> > >>I copied the device files from the host to the vserver. If I use the > >>"nv" driver for xfree all is well. But if I try to use "nvidia" xfree fails > >>with the error "unable to load kernel module". This is clear for me. > >>Then I tried to figure out which device is used with the "nv" driver. I > >>tried to copa the device file /dev/nvidia0-4 from the host to > >>/dev/video0-4 in the vserver. > >>But the 3d-accel does not function... > >> > >>Does anyone have a hint for me, how I can manage this? Or is it impossible? > >>I use this configuration to deploy the workstations to a pool of pc's. > >>Therefor the security between host and vserver is not first goal. > >> > >>Greets, Torsten > >> > >>___ > >>Vserver mailing list > >>Vserver@list.linux-vserver.org > >>http://list.linux-vserver.org/mailman/listinfo/vserver > >> > >> > >> > > > > > > > > > ___ > Vserver mailing list > Vserver@list.linux-vserver.org > http://list.linux-vserver.org/mailman/listinfo/vserver > -- Chuck "...and the hordes of M$*ft users descended upon me in their anger, and asked 'Why do you not get the viruses or the BlueScreensOfDeath or insecure system troubles and slowness or pay through the nose for an OS as *we* do?!!', and I answered...'I use Linux'. " The Book of John, chapter 1, page 1, and end of book ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] x with nvidia module in vserver?
On Tuesday 04 October 2005 08:22 am, Torsten Becker wrote: just thought of something. I have not tried this yet, but have you tried loading X without a driver in the device configuration? or maybe a 'dummy' driver is needed.. i would think it can be made to latch onto the driver already loaded. > Chuck schrieb: > Since the vserver can not load a module I load it in the host. > The host is my also my testsystem for the nvidia-module. I have a > complete x-workstation installed in the host. > > Greets, Torsten > > >On Tuesday 04 October 2005 08:08 am, Torsten Becker wrote: > > > >I have not tried this yet, but this is one of my priorities after I finish the > >servers. I also would be interested in a solution. > > > >One question. Do you pre-load the nvidia module at startup so X doesn't have > >to try to insert it into the kernel? > > > >I am going to need full functionality since I run a heavily loaded twinview > >desktop. > > > > > > > >>Hello List, > >> > >>I try to run a complete workstation in a vserver including a x-server. > >>This is no problem since I do not try to use the hardware acceleration > >>with the nvidia kernel module. > >>I have set several capabilities for the vserver: > >> > >>CAP_CHOWN > >>CAP_DAC_READ_SEARCH > >>CAP_FOWNER > >>CAP_FSETID > >>CAP_KILL > >>CAP_SETGID > >>CAP_SETUID > >>CAP_SETPCAP > >>CAP_NET_BIND_SERVICE > >>CAP_NET_BROADCAST > >>CAP_NET_RAW > >>CAP_SYS_MODULE > >>CAP_SYS_RAWIO > >>CAP_SYS_CHROOT > >>CAP_SYS_PTRACE > >>CAP_SYS_PACCT > >>CAP_MKNOD > >>CAP_LEASE > >> > >>I copied the device files from the host to the vserver. If I use the > >>"nv" driver for xfree all is well. But if I try to use "nvidia" xfree fails > >>with the error "unable to load kernel module". This is clear for me. > >>Then I tried to figure out which device is used with the "nv" driver. I > >>tried to copa the device file /dev/nvidia0-4 from the host to > >>/dev/video0-4 in the vserver. > >>But the 3d-accel does not function... > >> > >>Does anyone have a hint for me, how I can manage this? Or is it impossible? > >>I use this configuration to deploy the workstations to a pool of pc's. > >>Therefor the security between host and vserver is not first goal. > >> > >>Greets, Torsten > >> > >>___ > >>Vserver mailing list > >>Vserver@list.linux-vserver.org > >>http://list.linux-vserver.org/mailman/listinfo/vserver > >> > >> > >> > > > > > > > > > ___ > Vserver mailing list > Vserver@list.linux-vserver.org > http://list.linux-vserver.org/mailman/listinfo/vserver > -- Chuck "...and the hordes of M$*ft users descended upon me in their anger, and asked 'Why do you not get the viruses or the BlueScreensOfDeath or insecure system troubles and slowness or pay through the nose for an OS as *we* do?!!', and I answered...'I use Linux'. " The Book of John, chapter 1, page 1, and end of book ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] x with nvidia module in vserver?
> research to see if i can run x without a video device:). Maybe have a look at Xvfb ? Dunno about remote sessions though. -- --|-- | Patrice Levesque http://ptaff.ca/ [EMAIL PROTECTED] | --|-- -- pgpMUaSC8UN7a.pgp Description: PGP signature ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] x with nvidia module in vserver?
On Tue, 4 Oct 2005, Torsten Becker wrote: > I try to run a complete workstation in a vserver including a x-server. > This is no problem since I do not try to use the hardware acceleration > with the nvidia kernel module. > I have set several capabilities for the vserver: That's enough to make the vserver insecure. > Does anyone have a hint for me, how I can manage this? Or is it impossible? > I use this configuration to deploy the workstations to a pool of pc's. > Therefor the security between host and vserver is not first goal. If your X11 is exploited, you're toast, so you can as well run X11 from the host and make it contact the xdm running in the vserver. Off cause this isn't as flexble as running in the vserver, but unless you're testing different X-Servers, this should be a minor problem. However, I don't know if 3d support is network transparent, and I can't test it here. -- Funny quotes: 30. Why is a person who plays the piano called a pianist but a person who drives a race car not called a racist? ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver
Re: [Vserver] x with nvidia module in vserver?
Hello On Tue, Oct 04, 2005 at 02:08:23PM +0200, Torsten Becker wrote: > Hello List, > > I try to run a complete workstation in a vserver including a x-server. > This is no problem since I do not try to use the hardware acceleration > with the nvidia kernel module. > I have set several capabilities for the vserver: > > CAP_CHOWN > CAP_DAC_READ_SEARCH > CAP_FOWNER > CAP_FSETID > CAP_KILL > CAP_SETGID > CAP_SETUID > CAP_SETPCAP > CAP_NET_BIND_SERVICE > CAP_NET_BROADCAST > CAP_NET_RAW > CAP_SYS_MODULE > CAP_SYS_RAWIO > CAP_SYS_CHROOT > CAP_SYS_PTRACE > CAP_SYS_PACCT > CAP_MKNOD > CAP_LEASE > > I copied the device files from the host to the vserver. If I use the > "nv" driver for xfree all is well. But if I try to use "nvidia" xfree fails > with the error "unable to load kernel module". This is clear for me. > Then I tried to figure out which device is used with the "nv" driver. I > tried to copa the device file /dev/nvidia0-4 from the host to > /dev/video0-4 in the vserver. > But the 3d-accel does not function... > > Does anyone have a hint for me, how I can manage this? Or is it impossible? > I use this configuration to deploy the workstations to a pool of pc's. > Therefor the security between host and vserver is not first goal. What I did when I set up such a system (about 1.5 years ago) on a 2.4 kernel I did just like you did. What I also did was to load the kernel module on the host system (not in the vserver). It worked like a charm. However it was some time ago and on 2.4 kernel. Regards, // Ola > Greets, Torsten > > ___ > Vserver mailing list > Vserver@list.linux-vserver.org > http://list.linux-vserver.org/mailman/listinfo/vserver > -- - Ola Lundqvist --- / [EMAIL PROTECTED] Annebergsslingan 37 \ | [EMAIL PROTECTED] 654 65 KARLSTAD | | +46 (0)54-10 14 30 +46 (0)70-332 1551 | | http://www.opal.dhs.org UIN/icq: 4912500 | \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / --- ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver