[Vserver] clone(..., CLONE_NEWNS) -> -EPERM with 2.6.22.1-vs2.2.0.3-rc1

2007-08-03 Thread Enrico Scholz
Hi, since 2.6.22-1-vs2.2.0.3-rc1, clone(..., CLONE_NEWNS) fails with -EPERM. Previous kernels allowed this when the VXC_SECURE_MOUNT ccap was set: With 2.6.21.5-vs2.2.0-rc3: | # vcontext --create -- vattribute --secure --ccap VXC_SECURE_MOUNT -- \ | vcontext --migrate-self --endsetup -- vnames

Re: [Vserver] Hashify 'etch' trouble?

2007-05-11 Thread Enrico Scholz
[EMAIL PROTECTED] (Corey Wright) writes: > "clean-up hash directory" > http://www.paul.sladen.org/vserver/archives/200609/0016.html Can be written much shorter as | find /vservers/.hash/ -links 1 | xargs rm -f | find /vservers/.hash/ -type d | xargs rmdir 2>/dev/null (no need for '-0' flag)

[Vserver] Relaxing the mount-nodev behavior

2007-05-06 Thread Enrico Scholz
Hi, it would be nice when the current | + if (!capable(CAP_SYS_ADMIN)) | + mnt_flags |= MNT_NODEV; behavior can be relaxed a little bit. I need it e.g. to bind-mount a /dev filesystem into buildroots which will be created during runtime of the vserver. On first glance, | +

Re: [Vserver] anybody has experience for Vserver on ARM

2007-05-02 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: >> [EMAIL PROTECTED]:/work/test# strace -fF -o vcmd.trace ./vcmd >> syscall: unknown syscall trap 0xef000139 this might be/is an EABI issue >> "unknow syscall" should be a strace bug, I think. The >> basic failure is becuase of "illegal instruction" du

Re: [Vserver] Re: Vhashify segmentation fault

2006-03-30 Thread Enrico Scholz
[EMAIL PROTECTED] (Herve Guillemet) writes: > There was some mail exchanges some month ago on the list between > Enrico and Alberto about vhashify SIGSEGV on Debian x86_64. How did > this end ? I seem to have the same problem: Does 'make check' report errors for the hashcalc* tests? If so, somebo

Re: [Vserver] Pseudo terminal proxy for util-vserver

2006-03-04 Thread Enrico Scholz
[EMAIL PROTECTED] (Benedikt Böhm) writes: > With regard to the /dev/pts issue on "vserver enter" i have ported > the vlogin application from vserver-utils to util-vserver-0.30.210 Mmmh... without looking at the complete code, doing operations in the shown order is insecure: > + if (vc_ctx_

Re: [Vserver] Trying to create vserver on logical volume fails....

2006-03-04 Thread Enrico Scholz
[EMAIL PROTECTED] (Brian Ipsen) writes: > I've created my own repo with Whitebox Enterprise Linux 4 - but when trying > to add a vserver (for which a logical volume has been created and mounted in > /vservers/vsrv01-mysql) I get this error: > ... > | error: unpacking of archive failed on file /u

Re: [Vserver] Unifying Gentoo Guests

2006-02-25 Thread Enrico Scholz
[EMAIL PROTECTED] (Oliver Welter) writes: > eergh - it seems that vunify does not support gentoo guest. Anyone > here can help me out ? Implementing the 'get-conffiles' operation for the 'gentoo' case in 'scripts/vpkg' should help. I do not know gentoo enough to develop it myself. Enrico pgp

Re: [Vserver] How to vunify/vhashify on Gentoo

2006-01-22 Thread Enrico Scholz
[EMAIL PROTECTED] (Wilhelm Meier) writes: > I'm using Gentoo as a host and also Gentoo as VPSs. If I try to > vunify/vhashify two VPS, I get: > > gs vservers # ln > -s /etc/vservers/vs01 /etc/vservers/vs01c/apps/vunify/refserver.00 > > gs vservers # vserver vs01c unify > Can not determine packag

Re: [Vserver] Virtualizing /proc/version

2006-01-04 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: >> it would be nice when /proc/version could be virtualized (e.g. using >> values from VCMD_set_vhi_name). Currently, it reveals information about >> the real host (e.g. real os version, buildhost/-user). > > hmm, looking at the code, I see: > > static in

[Vserver] Virtualizing /proc/version

2006-01-04 Thread Enrico Scholz
Hello, it would be nice when /proc/version could be virtualized (e.g. using values from VCMD_set_vhi_name). Currently, it reveals information about the real host (e.g. real os version, buildhost/-user). Hiding /proc/version is not possible because some programs (e.g. 'pidof') use it to check whet

Re: [Vserver] How do I unify my guests?

2005-12-24 Thread Enrico Scholz
[EMAIL PROTECTED] (John Francis Lee) writes: > I have succeeded in building an FC4 vserver host with several guest > servers. > > I would like to "unify" them, share as many files among them as possible > via hardlinks. > > [EMAIL PROTECTED] ~]# /lib/util-vserver/vunify -nv dhcp-dns > Failed to in

Re: [Vserver] When to mount lvm? (vs2.0)

2005-12-13 Thread Enrico Scholz
[EMAIL PROTECTED] (Lars Braeuer) writes: > I'm not sure where to mount an LVM2 device with vs2.0. I do > not want to mount it on system boot, but when starting the > guest vserver. > > The fstab file in the vserver config directory seems to be the right place. > > But when including an entry like

Re: [Vserver] Problem with shutdown

2005-12-07 Thread Enrico Scholz
[EMAIL PROTECTED] (Roché Compaan) writes: > Squid takes longer than most processes to stop, and this seems be a > problem when stopping a vserver: > ... > Stopping proxy server: (waiting.../usr/sbin/vserver: line > 85: 20939 Killed "[EMAIL PROTECTED]" ${USE_VNAMESPACE:

Re: [Vserver] vserver-build

2005-12-05 Thread Enrico Scholz
[EMAIL PROTECTED] (John Francis Lee) writes: > [EMAIL PROTECTED] ~]# vserver dns build -m yum > ... > Execution will continue in 5 seconds... > ... > The process hangs after the 5 seconds message Does it really hang or does it download the repository metadata? Can be e.g. checked with 'netstat' o

Re: [Vserver] util-vserver: make install tries to compile

2005-11-24 Thread Enrico Scholz
[EMAIL PROTECTED] (Bodo Eggert) writes: > If I run 'make install', the make script tries to compile a > file. Can not reproduce that > Off cause this can't work out, since I transfered the pre-built > directory from the machine with my compiler to my server, where > I want to install. What is

Re: [Vserver] PPC build failure of util-vserver

2005-11-23 Thread Enrico Scholz
[EMAIL PROTECTED] (Enrico Scholz) writes: > two check of util-vserver 0.30.209 are failing on a PPC machine... > > | /bin/sh: line 1: 18778 Killed ensc_use... ok, seems to be caused by a bug in the kernel elf loader http://bugzilla.kernel.org/show_bug.cg

Re: [Vserver] unregister_netdevice errors with 2.6.14-vs2.0.1-pre3-prelim

2005-11-13 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: >> my VPN VServer do not work anymore with 2.6.14-vs2.0.1-pre3-prelim >> kernels. There, I get >> >> | unregister_netdevice: waiting for tun50 to become free. Usage count = 1 > ... > could you check if this patch fixes the issue for you? > > http://vserv

Re: [Vserver] Vhashify segmentation fault

2005-11-12 Thread Enrico Scholz
[EMAIL PROTECTED] (alberto) writes: > I finally had time to test vhasify on an i386 with valgrind, attached > is the output. Same debian source package as I used for x86_64 and > same options (added beecrypt2{,-dev} to dependencies so pbuilder > builds it with vhashify). Using 'valgrind' on the '

Re: [Vserver] vserver-copy deprecated?!

2005-11-12 Thread Enrico Scholz
[EMAIL PROTECTED] (Jens Holze) writes: > I just realised that there is this copy program among the utils but it > doesn't work (obviously because of the changes since the alpha, looks > for .conf file). While copying the servers is not hard to do manually, > is somebody actually working on this to

[Vserver] unregister_netdevice errors with 2.6.14-vs2.0.1-pre3-prelim

2005-11-06 Thread Enrico Scholz
Hello, my VPN VServer do not work anymore with 2.6.14-vs2.0.1-pre3-prelim kernels. There, I get | unregister_netdevice: waiting for tun50 to become free. Usage count = 1 like errors and every netdevice related operation (e.g. 'ip route show') stucks in 'D' state. Exactly the same setup works wi

Re: [Vserver] PPC build failure of util-vserver

2005-11-03 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: >> >> two check of util-vserver 0.30.209 are failing on a PPC machine. >> ... >> http://ensc.de/vserver/cflags >> http://ensc.de/vserver/personality > > $ ./cflags > Killed > > $ ./personality > Killed > > here are my versions: > > http://vserver.

Re: [Vserver] Error when creating centos min vserver

2005-11-03 Thread Enrico Scholz
[EMAIL PROTECTED] ("Peter McGregor") writes: > No Match for argument: indexhtml-4-1.centos4 > No Match for argument: redhat-logos-1.1.25-1.centos4.3 > No Match for argument: setup-2.5.37-1.1 > No Match for argument: tzdata-2004e-2 > No Match for argument: glibc-2.3.4-2 > > Yum can find some files,

Re: [Vserver] Error when creating centos min vserver

2005-11-02 Thread Enrico Scholz
[EMAIL PROTECTED] ("Peter McGregor") writes: > [EMAIL PROTECTED] ~]# yum --version > 2.4.0 Try to apply http://savannah.nongnu.org/cgi-bin/viewcvs/util-vserver/util-vserver/scripts/vyum-worker.diff?r1=1.5&r2=1.6 (not in 0.209). yum-2.4 problems were easier to solve than I thought... ;) E

Re: [Vserver] PPC build failure of util-vserver

2005-11-01 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: >> as you can see in >> >> >> http://buildsys.fedoraproject.org/logs/fedora-development-extras/349-util-vserver-0.30.209-2.fc5/ppc/build.log >> >> two check of util-vserver 0.30.209 are failing on a PPC machine. > ... > http://vserver.13thfloor.at/S

[Vserver] PPC build failure of util-vserver

2005-10-31 Thread Enrico Scholz
Hello, as you can see in http://buildsys.fedoraproject.org/logs/fedora-development-extras/349-util-vserver-0.30.209-2.fc5/ppc/build.log two check of util-vserver 0.30.209 are failing on a PPC machine. AFAIR same happened once for 0.30.208 but succeeded suddenly. Unfortunately, I do not have

Re: [Vserver] gentoo util-vserver -r5 problem

2005-10-30 Thread Enrico Scholz
[EMAIL PROTECTED] (Chuck) writes: > phoenix rio # /etc/init.d/vservers start > * Unhiding /proc entries ... > > > [ ok ] > * Starting vservers of type 'default' .

Re: [Vserver] Vhashify segmentation fault

2005-10-30 Thread Enrico Scholz
[EMAIL PROTECTED] (alberto) writes: > Mmmm, so it could be a beecrypt2 problem... right? > I'll try installing from non-debian sources util-vserver and beecrypt > to see what happens. The hash belongs to a real executable though > (according to "file "), not sure which executable but > something t

Re: [Vserver] vhashify

2005-10-24 Thread Enrico Scholz
[EMAIL PROTECTED] (Thorsten Gunkel) writes: > In general this works great, but I had once or twice the problem > that a service stopped working because it could not longer write to > its files. Now I like to exclude the affected directory from the > vhashify. http://linux-vserver.org/alpha+util-v

Re: [Vserver] Vhashify segmentation fault

2005-10-23 Thread Enrico Scholz
[EMAIL PROTECTED] (alberto) writes: > I'm running debian sarge on amd64 (though I can reproduce the problem > on another machine running on i386). Custom built debian package for > util-vserver-0.30.208-fix2 with beecrypt2 enabled > ... > lstat("/etc/vservers/.defaults/apps/vunify/hash/0/04/00/000

Re: [Vserver] Done with building guest server on FC4 and now what?

2005-10-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Steven Truong) writes: > 1. I already got FC4 built with yum method, but then within the guest server > I could not find yum command anywhere despite having the /etc/yum.repos.d/* > in place. The guest server does not have anything beside syslog running. > ... > 3. Could somebo

Re: [Vserver] Vserver: Newbiew question regarding public key for tzdata is not installed

2005-10-11 Thread Enrico Scholz
[EMAIL PROTECTED] (Steven Truong) writes: > Hi, all. After following the advices from some experts here to > use yum method instead of apt-rpm. I updated yum-2.4.0.0 to > yum-2.4.0-0.chroot.fc4. > > However, I got this error of public key for tzdata is not > installed error. GPG keys are searched

Re: [Vserver] Unexpected behaviour with bind mounts

2005-10-08 Thread Enrico Scholz
[EMAIL PROTECTED] (Jim Wight) writes: > I am seeing odd behaviour with bind mounts. For example, if I specify > > mount --bind /tmp /vservers/tkt/opt > > in pre-start, and Be very careful when doing such stuff (resp. make sure that the vserver is trusted). Else, an attacker within the vserver c

Re: [Vserver] Vserver newbie: problems when build guest server on FC4

2005-10-06 Thread Enrico Scholz
[EMAIL PROTECTED] (Guenther Fuchs) writes: >> Please try the patch from the contrib/ dir (the 2.3.4 one applies to 2.4 >> also). I built lots of FC4 vservers on FC4 hosts so it seems to work ;) > > Hmmm - found the patch but no real explanation on how to use it / i.e. > what files to patch?! Is th

Re: [Vserver] Vserver newbie: problems when build guest server on FC4

2005-10-06 Thread Enrico Scholz
[EMAIL PROTECTED] (Guenther Fuchs) writes: > So I would recommend using yum - this works very fine here (as long as > you ensure not using yum version 2.3 and _not_ 2.4 - later version > breaks compatibility with Enrico's util-vserver tools) Please try the patch from the contrib/ dir (the 2.3.4 o

Re: [Vserver] Vserver newbie: problems when build guest server on FC4

2005-10-06 Thread Enrico Scholz
[EMAIL PROTECTED] (Steven Truong) writes: > Hello, all. I am a vservers newbie. I have tried to setup vservers > and learn more about it. I have FC4 x86 with kernel 2.6.12. I > applied the patch-2.6.12.4-vs4 to the vanilla kernel. I also > installed dietlibc-0.29, beecrypt-4.1.2-8, and util-v

Re: [Vserver] what am i doing wrong with vserver exec?

2005-10-04 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Harris) writes: >> /usr/sbin/vserver prometheus exec /bin/rm -f >> /var/spool/qmailscan/quarantine/new/* > ... > However, why not just use the host to remove the files? Because of symlinks like | /vservers/prometheus/var/spool/qmailscan/quarantine/new -> /etc or an o

Re: [Vserver] build -m rpm does not work

2005-09-05 Thread Enrico Scholz
[EMAIL PROTECTED] (Jun OKAJIMA) writes: > I installed util-vserver-0.30.208 from tar ball and succeeded > to compile it on my Debian Sarge box. And vserver start/enter > and build -m debootsrap work. > > But, build -m rpm and vhashify does not work. (I assume you mean '-m apt-rpm' here as it is u

Re: [Vserver] can not deactivate any block device with running vserver 2.0

2005-08-17 Thread Enrico Scholz
[EMAIL PROTECTED] ("lukas.rueegg [pixworx multimedia]") writes: >> c) using the cleanup feature we added to the kernel >> (please discuss this with Enrico) > enrico, we read your talk with sam and others in november '04 but didn't > get any hints about the current status. is there any way o

Re: [Vserver] vs2.0 and Fedora Core 3

2005-08-16 Thread Enrico Scholz
[EMAIL PROTECTED] ("Roderick A. Anderson") writes: > I've followed the instructions for FC3 -- > http://linux-vserver.org/FedoraCore3_HowTo -- Version number of util-vserver (0.30.205) is a little bit low in this HowTo; there should be native support for fc3 in recent versions (see point 8). >

Re: [Vserver] Re: util-vserver 0.30.208 debs?

2005-08-16 Thread Enrico Scholz
[EMAIL PROTECTED] (Karsten Horsmann) writes: >> Somebody should report it at the Debian bugtracking system. > > Would be this Report enough? > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=320425 it seems to be the same issue, but I do not know if this report is enough ;) Enrico pgpewVFeS

Re: [Vserver] Re: util-vserver 0.30.208 debs?

2005-08-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Harald Kapper) writes: >>It was really trivial (<5 min) to take the 207 and make 208 debs. I've >>posted my source packages at http://www.complete.org/~jgoerzen/vs/ for >>anyone that wants them. >> >>They include fix1. > > thanks for the dsc - one odd thing came up through buil

Re: [Vserver] vs2.0 and the tools

2005-08-11 Thread Enrico Scholz
[EMAIL PROTECTED] ("Roderick A. Anderson") writes: > I went ahead and started building the utils as RPMs and ran > into a couple of dependency issues. This is probably more an > Enrico question. > > Why tetex-latex? Is it Redhat ( RPM ) build-documentation > requirement? It is only a build-req

Re: [Vserver] running old style vservers on vs2.0-rc

2005-08-09 Thread Enrico Scholz
[EMAIL PROTECTED] ("Dariush Pietrzak,,,") writes: >> >> legacy configuration does not have a big future and *would* >> >> need security fixes first, this has a very low priority. >> > What security fixes? >> >> Oh... where shall I begin? Basically, the filesystem operations >> are full of races

Re: [Vserver] running old style vservers on vs2.0-rc

2005-08-09 Thread Enrico Scholz
[EMAIL PROTECTED] ("Dariush Pietrzak,,,") writes: >> legacy configuration does not have a big future and *would* >> need security fixes first, this has a very low priority. > What security fixes? Oh... where shall I begin? Basically, the filesystem operations are full of races and contain enough

Re: [Vserver] vserver build and no rpm displayed..

2005-08-08 Thread Enrico Scholz
[EMAIL PROTECTED] (Jean-Christophe Petit) writes: > 2.6.12.3-vs2.0-rc9 with util-vserver-0.30.208 under CentOS 4 > followed the http://linux-vserver.org/CentOS_HowTo > > when in the vserver, "rpm -qa" gives nothing. Expected; external packagemangement is used by default which holds rpm database o

Re: [Vserver] running old style vservers on vs2.0-rc

2005-08-08 Thread Enrico Scholz
[EMAIL PROTECTED] (Bert De Vuyst) writes: > During some tests with the vserver 2.0-rc, I did have a problemen running > vservers with a old style configuration. The vservers do run fine, but the > vserver utils (vps, vserver-stat) can't display the vserver it's name. > > I run 2 vservers in the

Re: [Vserver] Feature Request: comment char in VS20/new-style

2005-08-08 Thread Enrico Scholz
[EMAIL PROTECTED] (Andreas John) writes: > I wanted to create commented version of /etc/vservers//flags, > but I was not able to find the right char for commenting out a line, > neither # nor ; worked even // was not the solution. Sorry; bug in util-vserver. Afair, somebody else mentioned it

Re: [Vserver] Problem with shutdown (yes..)

2005-08-01 Thread Enrico Scholz
[EMAIL PROTECTED] (Jean-Christophe Petit) writes: > is it possible to upload a new version in > http://www.13thfloor.at/~ensc/util-vserver/files/ ? I will see; but there were some non-trivial changes in the script part which I have to test first. When you need the fix, you can try http://savan

Re: [Vserver] Vserver-build fails with WBEL4 when specifying context

2005-07-28 Thread Enrico Scholz
[EMAIL PROTECTED] (Brian Ipsen) writes: > Trying to build a new vserver using: > > # ./vserver-build -m yum -n test2 --hostname test2.domain.dk --interface > test2=eth0:192.168.3.37/24 --context 10037 -- -d wbel4 > > Due to the fact, that after RPM installation, I get a whole bunch of errors: > >

Re: [Vserver] Problem with shutdown (yes..)

2005-07-27 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: > hmm, isn't vwait --timeout 30 supposed to time out after > 30 seconds and go wild on your remaining processes? > (this one is for enrico) There was a classical bug in the signal handling (glibc does not interrupt vc_wait_exit() but restarts it by defau

Re: [Vserver] stuck (can't set the ipv4 root - invalid argument)

2005-07-25 Thread Enrico Scholz
[EMAIL PROTECTED] (Matt Paine) writes: > Its complaining about the GPG keys, so I installed it with. > > 8< > rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY > #(that didn't work, so i tried another one) > rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora > -->8- That's not the right

Re: [Vserver] V_xxxx not running ?

2005-07-25 Thread Enrico Scholz
[EMAIL PROTECTED] (Benoît des Ligneris) writes: > "Chasing" each and every config file of services started on your > host (apache:443, SSH, mySQL, postgreSQL, etc.) ssh should never be started through v_ssh as every shell inherits the network restrictions else.So it will be impossible to do admin

Re: [Vserver] Install issue with yum - /var/lib/rpm/ ?

2005-07-25 Thread Enrico Scholz
[EMAIL PROTECTED] (Brian Ipsen) writes: > Hmm... But the .rpmdb directory inside the guest os is empty > when the yum installation finishes ? Should it be like that ? Yes; that's ok and expected. Because of security reasons, the rpmdb is located outside of the vserver. | vserver pkgmgmt interna

Re: [Vserver] Install issue with yum - /var/lib/rpm/ ?

2005-07-24 Thread Enrico Scholz
[EMAIL PROTECTED] (Brian Ipsen) writes: > I'm trying to install a WBEL4 client OS via yum (the RPM list has been > attached here). The rpm list does not matter (and is ignored by the '-m yum' method). > Unfortunately, I have some issues with a messages, that pops up during > installation. It's

Re: [Vserver] V_xxxx not running ?

2005-07-24 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: >> I will fix it, although the v_* scripts will disappear soon. > > and be replaced by? nothing ;) I do not see much sense in these scripts. Most affected applications (httpd, named, sendmail, ssh, xinetd) can be configured with "native" methods to list

Re: [Vserver] V_xxxx not running ?

2005-07-23 Thread Enrico Scholz
[EMAIL PROTECTED] (Brian Ipsen) writes: > After upgrading to v2.0-rc8.1 and installing utils 0.30.208 I get this > error dusing startup of my server: > > Starting v_httpd: exec --ip eth0 /etc/init.d/httpd start oops... some legacy scripts (inclusive vsysvwrapper) were not updated to a new naming

Re: [Vserver] vserver build - one remaining issue...

2005-07-23 Thread Enrico Scholz
[EMAIL PROTECTED] (Brian Ipsen) writes: > # ./vserver-build --force -m yum -n dns-int1 -- -d wbel4 > ... > error: unpacking of archive failed on file /usr/bin/X11;42dd8791: cpio: > symlink failed - No such file or directory Happens due to a bug in rpm[1]. That's why, an 'initpre' script must be e

Re: [Vserver] How to build first vserver ?

2005-07-23 Thread Enrico Scholz
[EMAIL PROTECTED] (Brian Ipsen) writes: > #./vserver-build --force -m yum -n dns-int1 -- -d wbel4 > Renamed '/etc/vservers/dns-int1' to '/etc/vservers/dns-int1.~1121798195~' > ftp://ftp.riken.jp/Linux/whitebox/Null/en/os/i386/repodata/repomd.xml: The yum a

Re: [Vserver] How to build first vserver ?

2005-07-19 Thread Enrico Scholz
[EMAIL PROTECTED] (Brian Ipsen) writes: > My "base" vserver is up and running (with the vserver kernel) - the problem > is creating a virtual server... I'm running WhiteBox Enterprise Linux 4 (a > RHEL clone), but have difficulties figuring out how to create the > distribution stuff - and where d

Re: [Vserver] audit interface

2005-07-17 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: >> > it seems to be impossible to use the audit (CONFIG_AUDIT) interface >> > of the kernel within a vserver: >> > >> > | # auditctl -m 'foo' >> > | Error sending user message request (Operation not permitted) >> > ... >> > This gives problems on Fedora

Re: [Vserver] audit interface

2005-07-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Enrico Scholz) writes: > | # auditctl -m 'foo' > | Error sending user message request (Operation not permitted) > ... > This gives problems on Fedora Core 4 as recent pam upgrade is > using this functionality and most actions (su, cron) will fail >

[Vserver] audit interface

2005-07-14 Thread Enrico Scholz
Hello, it seems to be impossible to use the audit (CONFIG_AUDIT) interface of the kernel within a vserver: | # auditctl -m 'foo' | Error sending user message request (Operation not permitted) The generated syscalls are: | socket(PF_NETLINK, SOCK_RAW, 9) = 3 | fcntl64(3, F_SETFD, FD_CLOE

Re: [Vserver] util-vserver-0.30.207-1mdk building error

2005-07-13 Thread Enrico Scholz
[EMAIL PROTECTED] (Nicolas Costes) writes: > make[3]: Entering directory `/usr/src/RPM/BUILD/util-vserver-0.30.207' > ... > PASS: src/testsuite/chcontext-test > Invalid IP number or host name 'localhost' 'localhost' can not be resolved. Depending on your distribution, /etc/hosts might not be crea

Re: [Vserver] realloc(3)/mremap(2) errors

2005-07-08 Thread Enrico Scholz
[EMAIL PROTECTED] (Enrico Scholz) writes: > | $ diet gcc x.c > | $ strace ./a.out > | execve("./a.out", ["./a.out"], [/* 41 vars */]) = 0 > | old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) = 0x97f47000 > | mremap(0x97f4

[Vserver] realloc(3)/mremap(2) errors

2005-07-08 Thread Enrico Scholz
Hi, just to exclude possible failure-sources (I do not have time to test a real vanilla 2.6.12.2 kernel, but at least a RH kernel is fine), does somebody see why code like | #include | int main() | { | char *p = malloc(3000); | realloc(p, 5000); | } fails on 2.6.12.2 + patch-2.6

Re: [Vserver] VPN within vserver, what I have found

2005-05-29 Thread Enrico Scholz
[EMAIL PROTECTED] (gary ng) writes: > I just did a little more experiment and can now establish vpn links > with outside using either pptp(Windows) or openvpn, from within a > vserver. I run a lot of vservers with OpenVPN (indeed, every physical host has such a vserver). Important settings are: N

Re: [Vserver] Re: building from savannah CVS

2005-05-18 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: >> That's the kind of tests which can only be done by the developer ;) >> But other work and fear of zombies stopped me to play with 'vserver >> ... stop' till now... > > didn't get a bugreport regarding those zombies yet afais, Gilles reported in [EMAIL

Re: [Vserver] Re: building from savannah CVS

2005-05-18 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: >> > while we are at it, how would I 'build' a release tar archive >> > (i.e. clean everything up which doesn't go into your releases) >> > or a source rpm from the cvs sources? >> >> Do you mean something like 'make dist'? >> ... >> rpms can be built wi

Re: [Vserver] Re: building from savannah CVS

2005-05-18 Thread Enrico Scholz
[EMAIL PROTECTED] (Herbert Poetzl) writes: > while we are at it, how would I 'build' a release tar archive > (i.e. clean everything up which doesn't go into your releases) > or a source rpm from the cvs sources? Do you mean something like 'make dist'? Specifying 'CVS2CL=: RCS2LOG=:' should speedu

[Vserver] Re: building from savannah CVS

2005-05-17 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: > probably I'm just too dumb to figure it myself, but how would you > build the tools from the savannah CVS? checkout, execute 'autoreconf -i -f' and then './configure ...' && make > /usr/share/aclocal/pkg.m4:5: warning: underquoted definition of > PK

Re: [Vserver] Upgrade main server from 2.4 to 2.6 kernel

2005-05-11 Thread Enrico Scholz
[EMAIL PROTECTED] ("Roderick A. Anderson") writes: > If I upgrade/install a new 2.6 vserver kernel on an existing > system _*should*_ my old vservers ( created with a 2.4 kernel ) > still work. I realize there might be a few gotchas but for the > most part should they work? File attributes have

Re: [Vserver] FC3 with yum on vs2.0-pre4

2005-05-11 Thread Enrico Scholz
[EMAIL PROTECTED] (Eric Jorgensen) writes: > However, I'm getting errors about gpg keys not existing. I had > set gpgcheck=0 in all the *.repo files (both in /etc/yum.repos.d > and /usr/lib/util-vserver/...). GPG keys will be added automatically from | "$__CONFDIR/.distributions/$DISTRIBUTI

Re: [Vserver] problems with vserver create -m yum

2005-05-06 Thread Enrico Scholz
[EMAIL PROTECTED] ("Paul S. Gumerman") writes: > Is there anywhere to be found an explanation of how package management > works with the new util-vserver system? I would suggest (for Fedora based systems): 1. create your own yum or apt repository by: a) copy all the shipped RPMs somewhere int

Re: [Vserver] OpenFoundry project for Vserver Utilities

2005-05-05 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: >> mmh... I am not very happy with the way how this was solved, because: > > well, if you would show up now and then on the channel > we might have taken a different approach ... but I > guess although the various aspects might not be perfect, > IMHO the

Re: [Vserver] OpenFoundry project for Vserver Utilities

2005-05-04 Thread Enrico Scholz
[EMAIL PROTECTED] (Sam Vilain) writes: > I have set up a new project on OpenFoundry.org for util-vserver. > OpenFoundry is like SourceForge, except it doesn't suck. > > http://utilvserver.openfoundry.org/ > > (no hyphens allowed in project names! bummer) > > For now the important thing it has

Re: [Vserver] OpenFoundry project for Vserver Utilities

2005-05-04 Thread Enrico Scholz
[EMAIL PROTECTED] (Ola Lundqvist) writes: > * Is a dependency on perl for building acceptable? I need it as one > of the manpages (vserver-build) is written in .pod format and need > pod2man (provided by perl) to convert to manpage format. I'm not > sure what you think about that. I can probably r

Re: [Vserver] Problem to build util-vserver on ia64.

2005-04-24 Thread Enrico Scholz
[EMAIL PROTECTED] (Ola Lundqvist) writes: > lib_internal/unify-copy.c: In function `copyMMap': > lib_internal/unify-copy.c:142: error: `MADV_SEQUENTIAL' undeclared (first use > in this function) mmh... a dietlibc issue http://cvs.fedora.redhat.com/viewcvs/devel/dietlibc/dietlibc-0.28-madv.patch

Re: [Vserver] shutting down all vservers

2005-04-22 Thread Enrico Scholz
[EMAIL PROTECTED] (Marcel de Riedmatten) writes: > I am playing with with the new debian package util-vserver 0.30.204-5, > thanks to Ola for that. I dont want some vserver to be started > automaticaly at startup so i don't put the "default" mark for that one. > But when i shutdown the machine and

Re: [Vserver] Vserver content too minimal

2005-04-22 Thread Enrico Scholz
[EMAIL PROTECTED] ("Commission Scolaire de Laval Laval") writes: > I believe I'm experiencing problems with my vserver since I miss a > great amount of commands, like "passwd" and "rpm" for example. I'd > like to know what I did wrong. Nothing; it is intended to work in this way. Depending on you

Re: [Vserver] util-vserver + dietlibc ...

2005-04-22 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: >> That's not possible. During the extraction phase, 'rpm' has to do >> an username -> uid mapping with the setup from the inside of the >> chroot. So at least there, I need getpwname() after chroot(). > > Sorry for the double-reply but additionally, is th

[Vserver] Re: util-vserver-0.30.206 ... timetravel?

2005-04-16 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: > just tried to 'update' my rpms to the latest release of util-vserver > for testing (0.30.206) but it seems that this version will need some > time to become usable, no? > > checking whether to enable dietlibc... no (too old; 0.29+ required, 0.28 > foun

Re: [Vserver] util-vserver + dietlibc ...

2005-04-11 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: >> >> I guess it was using _syscall3() instead of syscall(). >> ... >> To clearify things: >> >> util-vserver prefers to use _syscall3() (which is called 'fast' >> syscall invocation method in the ./configure output) when it is >> available. _syscall3()

Re: [Vserver] util-vserver + dietlibc ...

2005-04-11 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: >> >> according to Enrico (please confirm or correct) the glibc >> >> has issues with the fake name resolver and is generally >> >> considered insecure because usually dynamically linked ... >> > >> > This really needs further explanation and justification

Re: [Vserver] util-vserver + dietlibc ...

2005-04-11 Thread Enrico Scholz
Herbert Poetzl <[EMAIL PROTECTED]> writes: >> > no, thanks I already figured it, the dietlibc needs >> > patching as the syscall(2) for x86_64 isn't implemented >> > >> > .o( I wonder _what_ is running on your machine ;) >> >> I guess it was using _syscall3() instead of syscall(). Shouldn't it?

Re: [Vserver] util-vserver + dietlibc ...

2005-04-08 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: >> according to Enrico (please confirm or correct) the glibc has issues >> with the fake name resolver and is generally considered insecure >> because usually dynamically linked ... > > This really needs further explanation and justification. What about >

Re: [Vserver] vserver build bug

2005-04-08 Thread Enrico Scholz
[EMAIL PROTECTED] (Kevin Pendleton) writes: > When you try to use the vserver build -m copy function it requires a > file that does not exist. Yes, this is expected because this method is not implemented yet. Sorry, I should remove it from the help text Enrico pgptFzisI6GK1.pgp Descripti

[Vserver] Re: another vserver build bug

2005-04-08 Thread Enrico Scholz
Kevin Pendleton <[EMAIL PROTECTED]> writes: > When I try to use the vserver build -m apt-rpm function to create a fc3 > vserver on a centos host with util-vserver-0.30.205, I get the following > output: > > vserver base-fc3 build -m apt-rpm --hostname domain.com --interface > domain=eth0:192.168.0

[Vserver] Fakeinit issues

2005-04-03 Thread Enrico Scholz
Hello, I discovered some irregularities regarding fakeinit functionality. The following program gives different output on host and vservers: | int main(int argc, char *argv[]) | { | printf("%i\n", getsid(atoi(argv[1]))); | } On host: | # ./a.out 1 | 0 on VServer: | # chcontext --xid 100 --f

Re: [Vserver] I'm in trouble now ....

2005-03-28 Thread Enrico Scholz
[EMAIL PROTECTED] ("Paul S. Gumerman") writes: > Ran "vserver fc3-reference hashify", which ran ok with one message > (sorry, can't recall it now). The exact message would be helpful perhaps. > Then tried "vserver loco-reference hashify" which failed with a > message saying "vserver ... suexec

Re: [Vserver] [announce] util-vserver 0.30.205 + status report

2005-03-25 Thread Enrico Scholz
[EMAIL PROTECTED] ("Paul S. Gumerman") writes: > Where can I find this? Sorry, please use the http://www.nongnu.org/util-vserver/ homepage or the savannah projectpage https://savannah.nongnu.org/projects/util-vserver/ Enrico pgpg07da9qMcN.pgp Description: PGP signatu

Re: [Vserver] util-vserver (becoming stable ?)

2005-03-25 Thread Enrico Scholz
[EMAIL PROTECTED] (Olivier Poitrey) writes: >> what about LYCOS? They are using vserver and get much money with >> it. They also provide Internet-Access. >> Here a link for the german readers: >> http://www.lycos.de/startseite/online/internetzugang.html >> >> Should Enrico ask them for some mon

[Vserver] [announce] util-vserver 0.30.205 + status report

2005-03-24 Thread Enrico Scholz
Hello, version 0.30.205 util-vserver (alpha branch) is out. Noticable changes are a new 'vhashify' command which is a successor of 'vunify'. It uses some aggressive techniques like mmap'ing of files and the creation of sparse files. To prevent data lossage, it is strongly recommended to execute 'm

Re: [vserver] security context ?

2005-03-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: > hmm > how can I disable selinux? http://fedora.redhat.com/docs/selinux-faq-fc3/index.html#id2825880 Enrico ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinf

Re: [vserver] rpmpriorities

2005-03-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Mueller) writes: > Can I here: > /usr/src/redhat/BUILD/util-vserver-0.30.204/distrib/fc3/apt/rpmpriorities > > Configure what packages been installed when I build a new vserver? > Or what stand this (rpmpriorities) for? That's a configuration file for apt. It is used by ut

Re: [vserver] build problem

2005-03-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Mueller) writes: > But just for my understanding: What is this -initpre- and > whydoes it work now? This is a script which will be executed before unpackaging the files. It works because it workarounds >>https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=52725 The

Re: [vserver] security context ?

2005-03-15 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: > I´ve a FedoraCore3 vserver and I wanna change the password for an > user and then ... > > passwd test > passwd: root:system_r:unconfined_t is not authorized to change the > password of test Disable SELinux. Its kernel API (/proc/self/attr + /selinux) mak

Re: [vserver] Config

2005-03-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: > where can i change that ?? > > Can not find a vserver-setup at '/usr/local/etc/vservers//'. See README for the ./configure options which create "expected" paths. Enrico pgpVWwiaozYHy.pgp Description: PGP signature

Re: [vserver] build problem

2005-03-14 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: > this error comes wehen I want to build a fc3 vserver! > ... >2:filesystem >### [ 29%] > Fehler: unpacking of archive failed on file /usr/bin/X11;422ffd85: > cpio: symlink failed - No such file or directory I

Re: [Vserver] [vservers] Two Problems

2005-03-09 Thread Enrico Scholz
[EMAIL PROTECTED] (Timo Müller) writes: > I´ve build a fc2 vserver and I can start it and enter it but I can´t > stop it. > This error comes or it dont go on (i think it can´t shutdown that > interface) But why ??: mmh... the network initscripts should have been disabled by 'vserver ... build' (t

  1   2   3   >