[Devel] [PATCH 0/2] systemd-autofs-restart.sh: check systemctl results more

carefully https://jira.sw.ru/browse/PSBM-67544 The following series implements... --- Stanislav Kinsburskiy (2): scripts: check service mountpoint is not empty in systemd-autofs-restart.sh scripts: cleanup error output in systemd-autofs-restart.sh scripts/systemd-autofs

[Devel] [PATCH 1/2] scripts: check service mountpoint is not empty in systemd-autofs-restart.sh

Systemctl may fail. Let's check its result and mountpoint string after call. https://jira.sw.ru/browse/PSBM-67544 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/systemd-autofs-restart.sh | 10 ++ 1 file changed, 10 insertions(+) diff --git a/s

[Devel] [PATCH libvzctl] Suppress SUNRPC traffic on "fast stop".

This is needed to break infinite loop in SUNRPC state machine, leading to unstoppable container in case of unreachable network. https://jira.sw.ru/browse/PSBM-67544 Note: needs kernel rh7-3.10.0-514.16.1.vz7.32.12 or newer Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.

[Devel] [PATCH 0/2] Handle SUNRPC tasks on container stop when network is

unreachable https://jira.sw.ru/browse/PSBM-66510 --- Stanislav Kinsburskiy (2): ve: add boolean "sunrpc_abort" attribute to VE cgroup sunrpc: bring back SUNRPC task abort logic include/linux/ve.h |3 +++ kernel/ve/ve.c | 15 ++- net/sunrpc/sche

[Devel] [PATCH 1/2] ve: add boolean "sunrpc_abort" attribute to VE cgroup

Intended to be used to abort all SUNRPC operations. For example in case of fast stop with unreachable network. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- include/linux/ve.h |3 +++ kernel/ve/ve.c | 15 ++- 2 files changed, 17 insertions

[Devel] [PATCH 2/2] sunrpc: bring back SUNRPC task abort logic

his solution allows us to mimic hardware behaviour closely. IOW, on normal stop (or migration) SUNRPC operates normally. But when user wants to stop it fast (i.e. he doesn't care about data, etc), then he can use "--fast" option and this patch comes into play. https://jira.sw.ru/brows

[Devel] [PATCH vz7 v2 1/2] mounts: add unsupported mount helper

Call it on mount points validation and abort in case NFS is overmounted. This patch also adds nfs_mount helper, which fixes the issue with skipping this check for NFSv4 mount point. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- criu/mount.c

[Devel] [PATCH vz7 v2 2/2] mounts: print NFS nested mountpoint info

https://jira.sw.ru/browse/PSBM-67466 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- criu/mount.c |7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/criu/mount.c b/criu/mount.c index 667b279..edbd140 100644 --- a/criu/mount.c +++ b/criu/m

[Devel] [PATCH vz7 v2 0/2] mounts: fix check for overmounted NFS

This series fixes "NFS is overmounted" check to be appied for all NFS versions. Also, it prints additional information about nested mountpoint The following series implements... --- Stanislav Kinsburskiy (2): mounts: add unsupported mount helper mounts: print NFS nested

Re: [Devel] [PATCH 0/2] mounts: fix check for overmounted NFS

Please, ignore this series 20.06.2017 17:28, Stanislav Kinsburskiy пишет: This series fixes two issues: 1) Moves "NFS is overmounted" check to the right place 2) Apply "NFS is overmounted" check to all versions Also, it prints additional information about nested mount

Re: [Devel] [PATCH 1/2] mounts: add unsupported mount helper

Thanks, Kirill! I'm sorry, but this series is wrong. I'll send another one soon. 20.06.2017 17:46, Kirill Tkhai пишет: One minor nit below On Tue, Jun 20, 2017 at 18:28, Stanislav Kinsburskiy wrote: Call it on mount points tree building and abort in case NFS is overmounted. This logic

[Devel] [PATCH vz7 v2] mounts: add unsupported mount helper

-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- criu/mount.c | 27 ++- 1 file changed, 22 insertions(+), 5 deletions(-) diff --git a/criu/mount.c b/criu/mount.c index 942515e..46ad66c 100644 --- a/criu/mount.c +++ b/criu/mount.c @@ -397,6 +397,25 @@ stati

[Devel] [PATCH 2/2] mount: print NFS nested mountpoint info

https://jira.sw.ru/browse/PSBM-67466 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- criu/mount.c |5 + 1 file changed, 5 insertions(+) diff --git a/criu/mount.c b/criu/mount.c index 46ad66c..0b612a3 100644 --- a/criu/mount.c +++ b/criu/mount.c @@ -411,6 +

[Devel] [PATCH 1/2] mounts: add unsupported mount helper

-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- criu/mount.c | 35 ++- 1 file changed, 22 insertions(+), 13 deletions(-) diff --git a/criu/mount.c b/criu/mount.c index cc54e68..46ad66c 100644 --- a/criu/mount.c +++ b/criu/mount.c @@ -397,6 +397,25 @@

[Devel] [PATCH 0/2] mounts: fix check for overmounted NFS

This series fixes two issues: 1) Moves "NFS is overmounted" check to the right place 2) Apply "NFS is overmounted" check to all versions Also, it prints additional information about nested mountpoint The following series implements... --- Stanislav Kinsburskiy (2

Re: [Devel] Fwd: [PATCH] fuse: allow to mount if process is in init_user_ns

13.06.2017 11:53, Kirill Tkhai пишет: On 09.06.2017 16:27, Stanislav Kinsburskiy wrote: Kirill, please, review. Перенаправленное сообщение Тема: [Devel] [PATCH] fuse: allow to mount if process is in init_user_ns Дата: Fri, 9 Jun 2017 17:09:49 +0400 От: Stanislav

Re: [Devel] [PATCH 0/2] spfs: update to work with CRIU v3

https://jira.sw.ru/browse/PSBM-66943 09.06.2017 15:44, Stanislav Kinsburskiy пишет: SPFS doesn't work with CRIU v3. This patch set fixes the issue on the CRIU side. The following series implements... --- Stanislav Kinsburskiy (2): spfs: pass both "mountpoint" and &quo

[Devel] [PATCH 0/2] spfs: update to work with CRIU v3

SPFS doesn't work with CRIU v3. This patch set fixes the issue on the CRIU side. The following series implements... --- Stanislav Kinsburskiy (2): spfs: pass both "mountpoint" and "ns_mountpoint" paths to manager spfs: fix usage of mi->ns_mountpoint

[Devel] [PATCH 1/2] spfs: pass both "mountpoint" and "ns_mountpoint" paths to manager

mount to. One more difference: "root" is not required anymore. Originally, path to mount SPFS was constructed as follows: SPFS_mnt_path = CT_root + mi->ns_mountpoint Now mounts are created elsewhere and full path is defined in mi->mountpoint. Signed-off-by: Stanislav Kinsb

[Devel] [PATCH 2/2] spfs: fix usage of mi->ns_mountpoint

Previously this path had slash at the end. Now it doesn't have. Update usage then. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- criu/files-reg.c |6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/criu/files-reg.c b/criu/files-reg.c index e

[Devel] [PATCH] fuse: allow to mount if process is in init_user_ns

Regardless its current VE. https://jira.sw.ru/browse/PSBM-67185 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- fs/fuse/inode.c |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/fs/fuse/inode.c b/fs/fuse/inode.c index 090a7ab..a8d7924 100644 --

Re: [Devel] [PATCH] files: remove extra newline from a message create_ghost_dentry

08.06.2017 16:33, Dmitry Safonov пишет: On 06/08/2017 05:00 PM, Stanislav Kinsburskiy wrote: Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- criu/files-reg.c |4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/criu/files-reg.c b/criu/files

[Devel] [PATCH] files: remove extra newline from a message create_ghost_dentry

Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- criu/files-reg.c |4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/criu/files-reg.c b/criu/files-reg.c index bcfe1fd..f749445 100644 --- a/criu/files-reg.c +++ b/criu/files-reg.c @@ -219,7

Re: [Devel] [PATCH] netfilter: get UID and GID from container user ns on rule match

06.06.2017 12:27, Cyrill Gorcunov пишет: On Tue, Jun 06, 2017 at 01:23:55PM +0300, Cyrill Gorcunov wrote: On Tue, Jun 06, 2017 at 02:00:32PM +0400, Stanislav Kinsburskiy wrote: It's good enough for us. It won't work properly in case of setting rules by joining container network namespace

[Devel] [PATCH] netfilter: get UID and GID from container user ns on rule match

It's good enough for us. It won't work properly in case of setting rules by joining container network namespace without VE cgroup, but it's acceptable, because proper fix needs a lot of backporting. https://jira.sw.ru/browse/PSBM-43609 Signed-off-by: Stanislav Kinsburskiy <skins

[Devel] [PATCH] netfilter: allow adding matches from the container initial user namespace

https://jira.sw.ru/browse/PSBM-43609 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- net/netfilter/xt_owner.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/netfilter/xt_owner.c b/net/netfilter/xt_owner.c index 79558fe..942cce1 100644 ---

[Devel] [PATCH] scripts: use absolute binaries paths systemd-autofs-restart.sh

That's the way to support multiple distributions, including those without $PATH variable being set. https://jira.sw.ru/browse/PSBM-66967 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/systemd-autofs-restart.sh | 28 ++-- 1 file chang

[Devel] [PATCH] scripts: use absolute binaries paths nfs-ports-allow.sh

That's the way to support multiple distributions. https://jira.sw.ru/browse/PSBM-66901 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/nfs-ports-allow.sh | 21 - 1 file changed, 12 insertions(+), 9 deletions(-) diff --git a/scripts/nfs

[Devel] [PATCH] net: fix silly mistake with TCP cgroup memory pressure check

Memmory pressure is referenced as a pointer in socket structure. Simple check for pointer address will always return true for each socket, allocated with enabled mem_cg. Memory pressure value has to checked instead. https://jira.sw.ru/browse/PSBM-66468 Signed-off-by: Stanislav Kinsburskiy

[Devel] [PATCH 4/6] venet: veip_shutdown() helper introduced

It takes spinlock only once for both __veip_stop and __venet_ext_clean (which is converted to unprotected, because now called only from this helper). New helper is now used in venet_dellink. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- drivers/net/venetdev.c

[Devel] [PATCH 6/6] venet: VEIP "SHUTDOWN" hook introduced

ttps://jira.sw.ru/browse/PSBM-64869 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- drivers/net/venetdev.c | 13 - 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/drivers/net/venetdev.c b/drivers/net/venetdev.c index b7d7596..5e832d3 1006

[Devel] [PATCH 3/6] venet: split veip_stop() into protected and unprotected versions

Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- drivers/net/venetdev.c | 13 - 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/drivers/net/venetdev.c b/drivers/net/venetdev.c index 192ca3c..5a09575 100644 --- a/drivers/net/venetdev.c +++ b/d

[Devel] [PATCH 0/6] Fix VEIP object handling on container destroy

Major changes to current behaviour: 1) "SHUTDOWN" hook chain added 2) VEIP object is destroyed in "SHUTDOWN" hook 3) Now VEIP object live cycle is tightly bound to VE object. IOW, it won't be reused, but EEXIST will be returned instead. https://jira.sw.ru/browse/PSBM-64

[Devel] [PATCH 5/6] ve: add one more SHUTDOWN hooks chain

It will be used to release VEIP object. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- include/linux/ve_proto.h |1 + kernel/ve/ve.c |2 ++ 2 files changed, 3 insertions(+) diff --git a/include/linux/ve_proto.h b/include/linux/ve_proto.h index d

[Devel] [PATCH 1/6] venet: make veip_find() helper static

This one is used only in one place. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- drivers/net/venetdev.c |3 +-- include/linux/venet.h |1 - 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/drivers/net/venetdev.c b/drivers/net/venetdev.c index 4

[Devel] [PATCH 2/6] venet: treat presence of veip object with the same VEID as error

This shouldn't happen. VEIP object is identified by veid, which is unique per VE structure. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- drivers/net/veip_mgmt.c |2 ++ drivers/net/venetdev.c |2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff

[Devel] [PATCH] venet: remove SS hook

/PSBM-64015 Notes: this patch obsoletes the following commits: 455d5ba9506998f589b9929266c12627c9baf589 3e48f57a452b597b23039c3278e67788ac48f8d4 ed93afb07e58beb447556adbb25af11b9da1b62c Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- drivers/net/venetdev.c

[Devel] [PATCH] sunrpc: print connect status value upon retry

And current VE name and VE net_ns pointer. https://jira.sw.ru/browse/PSBM-63769 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- net/sunrpc/xprt.c |9 ++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/net/sunrpc/xprt.c b/net/sunrpc/xprt.c

[Devel] [PATCH] sunrpc: fix ve is dying check on -ENETUNREACH error upon connect

This operations can be asynchonious. So, current VE is not the right one. VE from transport network has to be taken instead. Fixes commit 4ad21d242066afcb4f55000c308322c3bad98a2b https://jira.sw.ru/browse/PSBM-62616 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --

Re: [Devel] [PATCH] sunrpc: handle -ENETUNREACH error on connect as fatal if VE is dying

22.02.2017 18:04, Dmitry Safonov пишет: On 02/22/2017 08:05 PM, Stanislav Kinsburskiy wrote: Have no idea, why kernel_connect() in xs_tcp_setup_socket() return -ENETUNREACH with this call stack: [root@uqvm098 ~]# cat /proc/14753/stack [] rpc_wait_bit_killable+0x11/0x60 [sunrpc

[Devel] [PATCH] sunrpc: handle -ENETUNREACH error on connect as fatal if VE is dying

dead alredy. Don't see any better solution so far (except investigation, why -ENETUNREACH is returned). So let's simply break the loop when it's called from ve_drop_context(). https://jira.sw.ru/browse/PSBM-60905 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- net/sunrpc/

Re: [Devel] [PATCH vz7] modules: allow NFS modules autoload in containers

28.12.2016 14:49, Dmitry Safonov пишет: On 12/28/2016 04:37 PM, Stanislav Kinsburskiy wrote: Otherwise migration can fail https://jira.sw.ru/browse/PSBM-58178 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> Just for check - these modules should be loaded on sys

[Devel] [PATCH vz7] modules: allow NFS modules autoload in containers

Otherwise migration can fail https://jira.sw.ru/browse/PSBM-58178 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- kernel/kmod.c |4 1 file changed, 4 insertions(+) diff --git a/kernel/kmod.c b/kernel/kmod.c index 63748d4..5253cae 100644 --- a/kernel/kmod.c

Re: [Devel] [PATCH 0/2] fuse: fix signals handling while processing request

ault). > > > Thanks, > > Maxim > > > On 10/17/2016 04:59 AM, Stanislav Kinsburskiy wrote: > > > > > > > 16.10.2016 05:21, Maxim Patlasov пишет: > >> Stas, > >> > >> > >> On 10/14/2016 03:30 AM, Stanislav

Re: [Devel] [PATCH 2/2] fuse: handle only fatal signals while waiting request answer

Kostya, please, modify patch comment with the following substitution: s/ it doesn't drop pending signal flag/ it doesn't drop pending signal flag, if processes is traced/ g Thanks. 13.10.2016 12:03, Stanislav Kinsburskiy пишет: This patch is backport

Re: [Devel] [PATCH 0/2] fuse: fix signals handling while processing request

16.10.2016 05:21, Maxim Patlasov пишет: Stas, On 10/14/2016 03:30 AM, Stanislav Kinsburskiy wrote: 14.10.2016 02:23, Maxim Patlasov пишет: Stas, The series look fine, so: Acked-by: Maxim Patlasov <mpatla...@virtuozzo.com> But, please, refine the description of the second

Re: [Devel] [PATCH 0/2] fuse: fix signals handling while processing request

03:03 AM, Stanislav Kinsburskiy wrote: This patch fixes wrong SIGBUS result in page fault handler for fuse file, when process received a signal. https://jira.sw.ru/browse/PSBM-53581 --- Stanislav Kinsburskiy (2): new helper: wait_event_killable_exclusive() fuse: handle only

[Devel] [PATCH 1/2] new helper: wait_event_killable_exclusive()

Backport of 6a0fb306738994d6f091791aeb11a5dc87ad8f4c. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- include/linux/wait.h | 26 ++ 1 file changed, 26 insertions(+) diff --git a/include/linux/wait.h b/include/linux/wait.h index 65da9e3..8

[Devel] [PATCH 0/2] fuse: fix signals handling while processing request

This patch fixes wrong SIGBUS result in page fault handler for fuse file, when process received a signal. https://jira.sw.ru/browse/PSBM-53581 --- Stanislav Kinsburskiy (2): new helper: wait_event_killable_exclusive() fuse: handle only fatal signals while waiting request answer

[Devel] [PATCH 2/2] fuse: handle only fatal signals while waiting request answer

is called, will lead to request interruption, producing SIGBUS error in page fault handler (filemap_fault). https://jira.sw.ru/browse/PSBM-53581 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- fs/fuse/dev.c | 42 -- 1 file chang

Re: [Devel] [RFC PATCH] sunrpc: do not allow process to freeze within RPC state machine

04.08.2016 15:16, Jeff Layton пишет: On Thu, 2016-08-04 at 12:55 +0200, Stanislav Kinsburskiy wrote: 03.08.2016 19:36, Jeff Layton пишет: On Wed, 2016-08-03 at 20:54 +0400, Stanislav Kinsburskiy wrote: Otherwise freezer cgroup state might never become "FROZEN". Here is a deadl

Re: [Devel] [RFC PATCH] sunrpc: do not allow process to freeze within RPC state machine

03.08.2016 19:36, Jeff Layton пишет: On Wed, 2016-08-03 at 20:54 +0400, Stanislav Kinsburskiy wrote: Otherwise freezer cgroup state might never become "FROZEN". Here is a deadlock scheme for 2 processes in one freezer cgroup, which is freezing: CPU 0

[Devel] [RFC PATCH] sunrpc: do not allow process to freeze within RPC state machine

cbff18ec385c6ab4d58f33b100192a96a. 3) This patch is not aimed to fix the issue, but to show the problem root. Look like this problem moght be applicable to other hunks from the commit, mentioned above. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- net/sunrpc/sched.c |1 -

[Devel] [PATCH] vz-rst: temove spfs scripts from criu restore parameters

These scripts are obsolete, and their logic is integrated to the source code starting from version 2.4.0.3. This means, that libvzctl wtih this patch applied has to depend on criu 2.4.0.3 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/vz-rst.in |8 -

Re: [Devel] [TRD] NFS migration

UNIX sockets are supported starting from version spfs-0.08.0-1.vz7 27.05.2016 12:09, Stanislav Kinsburskiy пишет: 1. Feature NFS mount point migration via CRIU https://jira.sw.ru/browse/PSBM-26967 2. Description CRIU now supports NFS file system migration (all versions). CRIU itself does

Re: [Devel] [TRD] NFS migration

Unlinked files are supported starting from version spfs-0.07.0-1.vz7 27.05.2016 12:09, Stanislav Kinsburskiy пишет: 1. Feature NFS mount point migration via CRIU https://jira.sw.ru/browse/PSBM-26967 2. Description CRIU now supports NFS file system migration (all versions). CRIU itself does

[Devel] [PATCH rh7] locks: check for fl->fl_owner != filp in show_fd_locks

NFS emulates flocks via posix lock on server and fl->fl_owner is set to filp. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- fs/locks.c |1 + 1 file changed, 1 insertion(+) diff --git a/fs/locks.c b/fs/locks.c index cb7da61..a5ab0c0 100644 --- a/fs/locks.c

[Devel] [PATCH rh7] ve: drop xattr policy toggle

Set of immutable attribute is protected by CAP_LINUX_IMMUTABLE, which is dropped in containers. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- fs/xattr.c |9 - include/uapi/linux/xattr.h |7 --- kernel/ve/veowner.c|8 3 f

Re: [Devel] [TRD] NFS migration

FIFOs are supported starting from version spfs-0.06.0-1.vz7 27.05.2016 12:09, Stanislav Kinsburskiy пишет: 1. Feature NFS mount point migration via CRIU https://jira.sw.ru/browse/PSBM-26967 2. Description CRIU now supports NFS file system migration (all versions). CRIU itself does mount

[Devel] [TRD] NFS migration

1. Feature NFS mount point migration via CRIU https://jira.sw.ru/browse/PSBM-26967 2. Description CRIU now supports NFS file system migration (all versions). CRIU itself does mount of SPFS file system (fuse based) instead of NFS and starts SPFS manager program. SPFS-manager does NFS remount

[Devel] [PATCH -E] scripts: add dump files save script

This script can be added to vz-rst as action script and will save dump.log and restore.log in format: dump--.tgz in /vz/private//dump directory. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/vz-save-dump.sh | 10 ++ 1 file changed, 10 inse

[Devel] [PATCH v2] scripts: add /usr/libexec/criu/scripts/spfs-release-replace.sh to vz-rst

Add one more spfs-related restore script (this time for "post-restore" stage), which is required to release spfs manager replace processes (they are waiting for it to proceed with actual remount and replacement). v2: Use for loop over scripts Signed-off-by: Stanislav Kinsburskiy

[Devel] [PATCH] scripts: add /usr/libexec/criu/scripts/spfs-release-replace.sh to vz-rst

Add one more spfs-related restore script (this time for "post-restore" stage), which is required to release spfs manager replace processes (they are waiting for it to proceed with actual remount and replacement). Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com>

[Devel] [PATCH] scripts: add /usr/libexec/criu/scripts/spfs-release-replace.sh to vz-rst

Add one more spfs-related restore script (this time for "post-restore" stage), which is required to release spfs manager replace processes (they are waiting for it to proceed with actual remount and replacement). Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com>

[Devel] [PATCH libvzctl v2 0/3] NFS migration precursor patches

This patch set is required to allow criu to migrate NFS mounts and processes, using it. ___ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel

[Devel] [PATCH libvzctl v2 2/3] vz-cpt: NFS port allow script added

This script is used to allow back NFS-related ports on dump stage. Without it CRIU won't be able to access NFS files. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/vz-cpt.in |7 +++ 1 file changed, 7 insertions(+) diff --git a/scripts/vz-cpt.in b/s

[Devel] [PATCH libvzctl v2 1/3] vz-rst: SPFS to stub mode script added

This script is used to switch all the spfs mounts to Stub mode during restore. Required to make sure, that all requests to NFS files will stuck once processes are released. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/vz-rst.in |7 +++ 1 file chan

[Devel] [PATCH libvzctl v2 3/3] env setup: allow fuse device on start

Fuse is be used for network file systems restore Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- lib/env_nsops.c |1 + 1 file changed, 1 insertion(+) diff --git a/lib/env_nsops.c b/lib/env_nsops.c index dc8b062..40eba60 100644 --- a/lib/env_nsops.c +++ b/lib/env_n

Re: [Devel] [PATCH libvzctl 0/4] NFS migration precursor patches

Please ignore. Another version will be sent. 13.05.2016 19:31, Stanislav Kinsburskiy пишет: This patch set is required to allow criu to migrated NFS mounts and processes, using it. ___ Devel mailing list Devel@openvz.org https://lists.openvz.org

[Devel] [PATCH libvzctl 4/4] vz-cpt: treat /var/run/rpcbind.sock as external

This socket appears when portmapper is running. Mark it as an external, so criu can skip it during dump. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/vz-cpt.in |1 + 1 file changed, 1 insertion(+) diff --git a/scripts/vz-cpt.in b/scripts/vz-cpt.in

[Devel] [PATCH libvzctl 0/4] NFS migration precursor patches

This patch set is required to allow criu to migrated NFS mounts and processes, using it. ___ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel

[Devel] [PATCH libvzctl 3/4] vz-rst: SPFS to stub mode script added

This script is used to switch all the spfs mounts to Stub mode during restore. Required to make sure, that all requests to NFS files will stuck once processes are released. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/vz-rst.in |7 +++ 1 file chan

[Devel] [PATCH libvzctl 2/4] vz-cpt: NFS suppress added

This patch add usage of new special toggle, which suppresses NFS requests to server when enabled. Required to allow criu to dump NFS mounts. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- scripts/vz-cpt.in | 12 1 file changed, 12 insertions(+) diff

[Devel] [PATCH libvzctl 1/4] env setup: alllow fuse device on start

Fuse will be used for network file systems migration Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- lib/env_nsops.c |1 + 1 file changed, 1 insertion(+) diff --git a/lib/env_nsops.c b/lib/env_nsops.c index dc8b062..40eba60 100644 --- a/lib/env_nsops.c +++

[Devel] [TRD] Autofs migration

1. Feature Autofs mount points migration via CRIU https://jira.sw.ru/browse/PSBM-41217 2. Description CRIU now supports autofs file system migration, including direct, indirect and offset mount types. 3. Products Virtuozzo 7 Packages: criu-2.1.0.4.vz7 libvzctl-7.0.199 4. Testing

Re: [Devel] CRIU-2.1.0.1 is out

Hi, Nothing what I need to develop NFS is present in repo. NFS development is still based on criu-1.8. And the reason for this, is that Makefile is broken starting from 2.0. 14.04.2016 18:36, Cyrill Gorcunov пишет: Guys, I'm pleased to announce criu 2.1.0.1, it's based on top of vanilla

Re: [Devel] [Q] Connecting a physical HDD/partition to a container

27.01.2016 16:02, Evgenii Shatokhin пишет: 27.01.2016 16:38, Igor Sukhih пишет: On 01/27/2016 04:29 PM, Stanislav Kinsburskiу wrote: 27 янв. 2016 г. 14:24 пользователь Evgenii Shatokhin написал: I created it with vzctl set 101 --devnodes sdb1:rw --save The node

Re: [Devel] [Q] Connecting a physical HDD/partition to a container

27.01.2016 12:58, Evgenii Shatokhin пишет: 27.01.2016 13:29, Stanislav Kinsburskiу пишет: 27 янв. 2016 г. 11:12 AM пользователь Evgenii Shatokhin написал: Hi, Is there a way to make a partition of a physical HDD, say, sdb1 directly available to a container,

Re: [Devel] [RFC rhel7] Disabling mounting cgroups from inside of container

18.01.2016 16:16, Cyrill Gorcunov пишет: On Mon, Jan 18, 2016 at 01:33:39PM +0300, Konstantin Khorenko wrote: JFYI: i'm not going to drop rh7-revert-ve-mark because otherwise cgroups mounted in 1 CT will be visible from other Containers as well. (those cgroups which are mounted during CT

Re: [Devel] [RFC rhel7] Disabling mounting cgroups from inside of container

18.01.2016 16:16, Cyrill Gorcunov пишет: On Mon, Jan 18, 2016 at 01:33:39PM +0300, Konstantin Khorenko wrote: JFYI: i'm not going to drop rh7-revert-ve-mark because otherwise cgroups mounted in 1 CT will be visible from other Containers as well. (those cgroups which are mounted during CT

[Devel] [PATCH rh7] fcntl: allow pipes with O_DIRECT regardless "odirect_enable" status

This flag represents packetized mode for pipes, which only changes how pipe holds packets, and shouldn't be affected by "odirect_enable" toggle. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- fs/fcntl.c |2 +- 1 file changed, 1 insertion(+), 1 deletio

[Devel] [PATCH rh7] autofs: show pipe inode in mount options

This is required for CRIU to migrate a mount point, when write end in user space is closed. https://jira.sw.ru/browse/PSBM-41217 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- fs/autofs4/inode.c |4 1 file changed, 4 insertions(+) diff --git a/fs/autofs4/i

Re: [Devel] [PATCH rh7] autofs: show pipe inode in mount options

https://jira.sw.ru/browse/PSBM-41961 03.12.2015 15:34, Stanislav Kinsburskiy пишет: This is required for CRIU to migrate a mount point, when write end in user space is closed. https://jira.sw.ru/browse/PSBM-41217 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --

Re: [Devel] [PATCH rh7] vtty: Register devices in sysfs

01.12.2015 11:17, Cyrill Gorcunov пишет: On Mon, Nov 30, 2015 at 05:58:15PM +0300, Cyrill Gorcunov wrote: On Mon, Nov 30, 2015 at 05:47:19PM +0300, Cyrill Gorcunov wrote: and dev_match_devt helper. Why not do it from userspace? You mean via udev? Drop this question. I got what you mean.

[Devel] [PATCH rh7 v2] tun: expose "owner", "group" and "tun_flags" attributes in container

https://jira.sw.ru/browse/PSBM-39726 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- drivers/net/tun.c |5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/drivers/net/tun.c b/drivers/net/tun.c index dd14140..e6735c8 100644 --- a/drivers/net

[Devel] [PATCH rh7] net_namespace.h: move net_access_allowed definition under CONFIG_NET_NS

It was under NETNS_REFCNT_DEBUG by mistake. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- include/net/net_namespace.h | 20 ++-- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/include/net/net_namespace.h b/include/net/net_names

[Devel] [PATCH rh7] net: Kill hold_net release_net

hold_net and release_net were an idea that turned out to be useless. The code has been disabled since 2008. Kill the code it is long past due. Upstead commit efd7ef1c1929d7a0329d4349252863c04d6f1729 Signed-off-by: "Eric W. Biederman" Acked-by: Eric Dumazet

Re: [Devel] [PATCH rh7] net: avoid reference counter overflows on fib_rules in multicast forwarding

24.11.2015 09:34, Andrey Ryabinin пишет: On 11/23/2015 07:08 PM, Stanislav Kinsburskiy wrote: From: Hannes Frederic Sowa <han...@stressinduktion.org> Bob Falken reported that after 4G packets, multicast forwarding stopped working. This was because of a rule reference counter overflow

[Devel] [PATCH rh7 4/4] configs: adjust to reflect CONFIG_NETNS_REFCNT_DEBUG option

Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- configs/kernel-3.10.0-x86_64-debug.config |1 + configs/kernel-3.10.0-x86_64.config |1 + 2 files changed, 2 insertions(+) diff --git a/configs/kernel-3.10.0-x86_64-debug.config b/configs/kernel-3.10.0-

[Devel] [PATCH rh7 2/4] net_namespace.h: set NETNS_REFCNT_DEBUG if CONFIG_NETNS_REFCNT_DEBUG

Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- include/net/net_namespace.h |3 +++ 1 file changed, 3 insertions(+) diff --git a/include/net/net_namespace.h b/include/net/net_namespace.h index 6559905..02c7663 100644 --- a/include/net/net_namespace.h +++ b/inclu

[Devel] [PATCH rh7 1/4] init/Kconfig: NETNS_REFCNT_DEBUG option added

This option enables network namespace usage counter, forgotten long time ago. Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- init/Kconfig |7 +++ 1 file changed, 7 insertions(+) diff --git a/init/Kconfig b/init/Kconfig index 34002de..f8575d7 100644 ---

[Devel] [PATCH rh7 3/4] net_namespace: taint kernel on free, if users exist

Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- net/core/net_namespace.c |1 + 1 file changed, 1 insertion(+) diff --git a/net/core/net_namespace.c b/net/core/net_namespace.c index 2332c41..8f5a76f 100644 --- a/net/core/net_namespace.c +++ b/net/core/net_names

[Devel] [PATCH rh7 0/4] Revive forgotten NETNS_REFCNT_DEBUG option

This explicit check on network namespace usage on free was forgottent for ages, or maybe it was never used. This patch set ressurects it. However: 1) There is no garantee, that corresponding code works as expected 2) This code was throwed away from upstream kernel in May 2015. --- Stanislav

[Devel] [PATCH rh7] fib_rules: mark default fib reles as BLACK

This patch fixed flase positive, reported by KASan. https://jira.sw.ru/browse/PSBM-41453 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> --- net/core/fib_rules.c |4 1 file changed, 4 insertions(+) diff --git a/net/core/fib_rules.c b/net/core/fib_rules.c index 0

Re: [Devel] [PATCH rh7] fib_rules: mark default fib reles as BLACK

23.11.2015 14:49, Andrey Ryabinin пишет: On 11/23/2015 03:47 PM, Stanislav Kinsburskiy wrote: This patch fixed flase positive, reported by KASan. s/flase/false s/KASan/kmemleak https://jira.sw.ru/browse/PSBM-41453 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> ---

Re: [Devel] [PATCH rh7] fib_rules: mark default fib reles as BLACK

23.11.2015 14:49, Andrey Ryabinin пишет: On 11/23/2015 03:47 PM, Stanislav Kinsburskiy wrote: This patch fixed flase positive, reported by KASan. s/flase/false s/KASan/kmemleak https://jira.sw.ru/browse/PSBM-41453 Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> ---

Re: [Devel] [PATCH rh7] fib_rules: mark default fib reles as BLACK

23.11.2015 16:09, Stanislav Kinsburskiy пишет: 23.11.2015 14:49, Andrey Ryabinin пишет: On 11/23/2015 03:47 PM, Stanislav Kinsburskiy wrote: This patch fixed flase positive, reported by KASan. s/flase/false s/KASan/kmemleak https://jira.sw.ru/browse/PSBM-41453 Signed-off-by: Stanislav

[Devel] [PATCH rh7] net: avoid reference counter overflows on fib_rules in multicast forwarding

sinduktion.org> Acked-by: Eric Dumazet <eduma...@google.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Stanislav Kinsburskiy <skinsbur...@odin.com> --- net/ipv4/ipmr.c |7 +-- net/ipv6/ip6mr.c |7 +-- 2 files changed, 10 insertions(

Re: [Devel] [PATCH rh7] fib_rules: mark default fib reles as BLACK

Please, ignore this patch. It's replaced by: "net: avoid reference counter overflows on fib_rules in multicast forwarding" 23.11.2015 13:47, Stanislav Kinsburskiy пишет: This patch fixed flase positive, reported by KASan. https://jira.sw.ru/browse/PSBM-41453 Signed-off-by:

Re: [Devel] [PATCH rh7] net: avoid reference counter overflows on fib_rules in multicast forwarding

Andrey, please review 23.11.2015 17:08, Stanislav Kinsburskiy пишет: From: Hannes Frederic Sowa <han...@stressinduktion.org> Bob Falken reported that after 4G packets, multicast forwarding stopped working. This was because of a rule reference counter overflow which freed the rule a

<    1   2   3   4   5   >