Re: [Vserver] Abnormal NFS behaviour

2007-06-27 Thread Asier Baranguán
Ben Green escribió: I have discovered, though, that NFS mounting works in the guests if the host runs as an NFS server (with no exports). What could be responsible for this abnormal behaviour? I can't think of anything I have done differently this time. Jim Is the NFS server a vserver guest

Re: [Vserver] Re: Re: Re: Re: Re: Re: java crash in vserver...

2007-05-10 Thread Asier Baranguán
Herbert Poetzl escribió: not unexpected, giving any capabilities beyond the default set can be considered a (sometimes severe) reduction in guest security (i.e. you are handing over control to host specific parts which can be used either for DoS or in most cases direct control over host

Re: [Vserver] Re: Re: Re: Re: Re: java crash in vserver...

2007-05-09 Thread Asier Baranguán
Thomas Besser escribió: Guest have the CAP_NET_BROADCAST and CAP_SYS_RESOURCE enabled. Perhaps you can try with other kernel. I tried several kernels till now. Whats about this CAP_SYS_RESOURCE and where/how to set it? In host or guest? You must write it in the bcapabilities file under the

Re: [Vserver] Re: Re: Re: Re: Re: java crash in vserver...

2007-05-09 Thread Asier Baranguán
Michael S. Zick escribió: host:~# uname -r 2.6.20.11-vs2.2.0.k7-smp-070502 Thanx for testing. I have no clue, what my problem is and no idea how to resolve this. According to this thread, you are running Java 1.5 and the version reported to work is Java 1.6 No, it works for me with 1.5 :)

Re: [Vserver] Re: Re: Re: Re: java crash in vserver...

2007-05-08 Thread Asier Baranguán
Thomas Besser escribió: Ok I tried it also now with 2.6.20.11-vs2.2.0, same error and installation aborts. Perhaps is anybody out there who has debian etch in a vserver with suns java deb package and could test if installation fails too or not? Kernel 2.6.16.49 with vserver 2.0.3-rc2 on

Re: [Vserver] Re: Oops with rejecting routes in vservers instance

2007-03-19 Thread Asier Baranguán
Herbert Poetzl escribió: will try to recreate it here ... Oops. Kernel 2.16.38-vs2.0.3-rc1 and same problem... okay, was actually easy to recreate, thanks to your information and testing ... turned out to be an issue present in recent versions too ... Is there any fix for this in the

Re: [Vserver] Re: Oops with rejecting routes in vservers instance

2007-03-15 Thread Asier Baranguán
Herbert Poetzl escribió: On Tue, Mar 13, 2007 at 10:09:15PM +0100, Markus Neubauer (Liste) wrote: Test this effect: on the host: $ route add -net 192.168.0.0/16 reject dev ppp0 on a vserver do then: $ route -n result: Mar 13 21:52:26 m10 kernel: Unable to handle kernel NULL pointer

Re: [Vserver] Re: Oops with rejecting routes in vservers instance

2007-03-15 Thread Asier Baranguán
Asier Baranguán escribió: ~~~ quite ancient ... could you try something like 2.6.18-4 or even better 2.6.19.7-vs2.2.0-rc17 and tell me if you see the same issues? will try to recreate it here ... Oops. Kernel 2.16.38-vs2.0.3-rc1 and same problem

Re: [Vserver] vserver nfs

2007-03-11 Thread Asier Baranguán
El Domingo, 11 de Marzo de 2007 19:24, Konstantinos Pachopoulos escribió: i haven't found a complete vserver nfs how-to unfortunately... Here is my situation: -host is named vakhos -guest, where nfs is running is called nfs I had a working vserver system/network, with nfs-user-server

Re: [Vserver] Routing in VServers

2007-02-15 Thread Asier Baranguán
Christian Affolter escribió: Could someone point me to some URL or doc? I think this tutorial should be helpful to you: http://iptables-tutorial.frozentux.net/iptables-tutorial.html Thanks! It's a very big document (200 pg), so I'll take a look step by step :) begin:vcard

Re: [Vserver] Routing in VServers

2007-02-15 Thread Asier Baranguán
Herbert Poetzl escribió: http://www.faqs.org/docs/iptables/traversingoftables.html note, in recent kernels the local tables can be selected independantly IIRC ... Hmm... one question not directly related to this. My guests work with 'eth0' interface but I've seen in some mails from the list

[Vserver] Routing in VServers

2007-02-14 Thread Asier Baranguán
Hi all! Networking firewall are not my strong points, so perhaps this could sound a silly question. I've five linux VServers, each with it's own _real_ IP address (not 192.168.x.y, 10.x, etc). Each one has it's own services but I'd like to close access from outside to some ports, but allow