/dpatch-run
## 22_fai.dpatch by Sam Vilain [EMAIL PROTECTED]
##
## All lines beginning with `## DP:' are a description of the patch.
## DP: No description.
@DPATCH@
diff -urN util-vserver-0.30.210.orig/Makefile.in
util-vserver-0.30.210/Makefile.in
--- util-vserver-0.30.210.orig/Makefile.in 2006-06
The documentation was a little out of date to what the command
supports. This makes the entry for this build method a little long, but
at least it's there.
---
vserver-build |6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
--- scripts/vserver-build.orig 2006-09-27 11:41:48.0
Herbert Poetzl wrote:
basically I do not see a good reason for assigning
127.x.x.x to a guest, but if you have to, then try
to choose different ones, e.g. 127.0.0.2, 127.0.0.3 ...
Does that work with ssh port forwarding?
I ran into this problem when I tried that:
Herbert Poetzl wrote:
On Tue, May 30, 2006 at 04:26:10PM +0200, Oliver Welter wrote:
Hi Folks,
there was a disussion some time ago here on multiple IPs assigned to one
vServer. I now have the need to assign a 32 Address net to one guest -
anybody here did some tests on this or can give me
Chuck wrote:
we are completely restructuring our entire physical network around the vserver
concept.
it has proven itself in stability and performance in production to the point
we no longer see the need for dedicated servers except in the most demanding
instances (mostly our email server
Oliver Welter wrote:
Hi Manish,
Has anybody done any work or study on security of vserver. What are the
possible security downsides and possible areas of attack on vserver both
from other vservers on the same host and from external agent. Any pointers
on this would be very helpful. Thanks,
Sam Vilain wrote:
This patchset allows per-VFS mount options, such as noatime,
nodiratime, and in partitular, read-only.
ie, `mount -o ro --bind` can work with this patch.
This is the invention of Herbert Pötzl.
So, here's what's new;
1. more parts
Even more fine grained :-)
2. longer
Herbert Poetzl wrote:
This is the invention of Herbert Pötzl.
(sent to the Linux-VServer list as a 'dry run', and to give
Herbert a chance to veto/comment)
are there any changes to this one?
http://lkml.org/lkml/2006/1/21/19
(except for possible updates to newer kernels?)
Heh, well, that's
Oliver Welter wrote:
eergh - it seems that vunify does not support gentoo guest. Anyone
here can help me out ?
Implementing the 'get-conffiles' operation for the 'gentoo' case in
'scripts/vpkg' should help. I do not know gentoo enough to develop it
myself.
As gentoo hast no binary packages
Herbert Poetzl wrote:
My unify-dirs script is completely ambivalent to the packaging system
in use by the installed systems. So long as the files have the same
contents, permissions, ownership and relative location, they will be
unified. However it does currently rely on a 'legacy' ioctl.
hmm
that are
printed in the options output column when the bit is unset.
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
fs/namespace.c | 49 ++---
1 files changed, 26 insertions(+), 23 deletions(-)
diff --git a/fs/namespace.c b/fs/namespace.c
index b12ea35
function that sets up a
bind mount, that allows the value of vfsmount.mnt_flags to be set.
Signed-off-by: Herbert Pötzl [EMAIL PROTECTED]
Acked-by: Christoph Hellwig [EMAIL PROTECTED]
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
fs/namespace.c |8 ++--
1 files changed, 6 insertions(+), 2
into
chown_common() to allow for vfsmount based checks there.
An accompanying MNT_IS_RDONLY() check inside chown_common rejects
changes to the dentry.
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
fs/open.c | 11 ++-
1 files changed, 6 insertions(+), 5 deletions(-)
diff --git a/fs/open.c b/fs/open.c
Previously, only the inode's idea of a read-only flag was considered
for touch_atime() and file_update_time(). Add a call to the
MNT_IS_RDONLY macro to correctly exclude this update on read-only
vfsmounts.
---
fs/inode.c |4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git
the new flag is put in the right
place to make it to do_loopback. It is also by side effect passed to
do_remount and do_new_mount, it is of little discernable effect as the
underlying mount will be read-only.
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
fs/namespace.c|2 ++
include
From: Herbert Pötzl [EMAIL PROTECTED]
The IS_RDONLY macro is defined inconsistently. Tidy up.
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
include/linux/fs.h |2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/include/linux/fs.h b/include/linux/fs.h
index e059da9..2a0866a
This patchset allows per-VFS mount options, such as noatime,
nodiratime, and in partitular, read-only.
ie, `mount -o ro --bind` can work with this patch.
This is the invention of Herbert Pötzl.
--
Sam Vilain, Catalyst IT (NZ) Ltd.
http://www.catalyst.net.nz/
phone: +64 4 499 2267PGP ID
permissions with
MNT_IS_RDONLY().
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
arch/sparc64/solaris/fs.c |4 ++--
fs/ext2/ioctl.c |7 +--
fs/ext3/ioctl.c | 16 +++-
fs/hfsplus/ioctl.c|3 ++-
fs/nfs/dir.c |3 ++-
fs/nfsd/vfs.c
to setxattr() and removexattr() for the
MNT_RDONLY flag via MNT_IS_RDONLY, and EROFS returned accordingly.
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
fs/xattr.c | 23 +++
1 files changed, 15 insertions(+), 8 deletions(-)
diff --git a/fs/xattr.c b/fs/xattr.c
index 80eca7d..ad83a51
().
This allows for proper checks in may_create(), may_delete() and
permission().
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
fs/namei.c | 59 ++-
fs/nfsd/vfs.c | 16 --
fs/reiserfs/xattr.c |3 ++-
include/linux/fs.h | 12
From: Herbert Pötzl [EMAIL PROTECTED]
Previously, the vfs functions did not enforce per-vfsmount flags such
as read-only. Wherever we use the macro IS_RDONLY, we also need to
use MNT_IS_RDONLY on the corresponding vfsmount structure.
Acked-by: Sam Vilain [EMAIL PROTECTED]
---
fs/namei.c
Add an extra parameter to the do_loopback function that sets up a
bind mount, that allows the value of vfsmount.mnt_flags to be set.
--
Sam Vilain, Catalyst IT (NZ) Ltd.
http://www.catalyst.net.nz/
phone: +64 4 499 2267PGP ID: 0x66B25843
)
--
Sam Vilain, Catalyst IT (NZ) Ltd.
http://www.catalyst.net.nz/
phone: +64 4 499 2267PGP ID: 0x66B25843
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Add an extra flag to the mount flags (along with noatime, noexec,
etc) for a read-only mount. Note that this will only affect bind
mounts as normally this is performed through the inode.
--
Sam Vilain, Catalyst IT (NZ) Ltd.
http://www.catalyst.net.nz/
phone: +64 4 499 2267PGP ID
New possibilities for flags makes this function change slightly.
The opportunity is taken to simplify the function.
--
Sam Vilain, Catalyst IT (NZ) Ltd.
http://www.catalyst.net.nz/
phone: +64 4 499 2267PGP ID: 0x66B25843
___
Vserver mailing list
In order to have a file that is accessed through the same inode have
different permissions, VFS functions must pass the mount structure.
--
Sam Vilain, Catalyst IT (NZ) Ltd.
http://www.catalyst.net.nz/
phone: +64 4 499 2267PGP ID: 0x66B25843
The IS_RDONLY macro is defined inconsistently.
--
Sam Vilain, Catalyst IT (NZ) Ltd.
http://www.catalyst.net.nz/
phone: +64 4 499 2267PGP ID: 0x66B25843
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman
Sam Vilain wrote:
Add an extra parameter to the do_loopback function that sets up a
bind mount, that allows the value of vfsmount.mnt_flags to be set.
Wohoo! no patch ... go stgit :)
___
Vserver mailing list
Vserver@list.linux-vserver.org
http
)
---
Sam Vilain, Catalyst IT (NZ) Ltd.
http://www.catalyst.net.nz/
phone: +64 4 499 2267PGP ID: 0x66B25843
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Add an extra flag to the mount flags (along with noatime, noexec,
etc) for a read-only mount. Note that this will only affect bind
mounts as normally this is performed through the inode.
Signed-off-by: Sam Vilain [EMAIL PROTECTED]
---
fs/namespace.c|2 ++
include/linux/mount.h
Add an extra parameter to the do_loopback function that sets up a
bind mount, that allows the value of vfsmount.mnt_flags to be set.
Signed-off-by: Sam Vilain [EMAIL PROTECTED]
---
fs/namespace.c |8 ++--
1 files changed, 6 insertions(+), 2 deletions(-)
diff --git a/fs/namespace.c b
The IS_RDONLY macro is defined inconsistently.
Signed-off-by: Sam Vilain [EMAIL PROTECTED]
---
include/linux/fs.h |2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/include/linux/fs.h b/include/linux/fs.h
index 250b002..3000655 100644
--- a/include/linux/fs.h
+++ b
In order to have a file that is accessed through the same inode have
different permissions, VFS functions must pass the mount structure.
Signed-off-by: Sam Vilain [EMAIL PROTECTED]
---
arch/sparc64/solaris/fs.c |4 +--
fs/ext2/ioctl.c |7 +++--
fs/ext3/ioctl.c | 16
Sorry about that, guys.
Ok, other than the minor issue with encoding, I think the first
optimised-for-inclusion patch looks good to go.
I haven't tested it yet ;), nor double-checked that all the places where
BME should touch are touched, but feedback on the patch submission style
and the
-
---
t/02-legacy.t 255 6528013 24 184.62% 2-13
Failed 1/4 test scripts, 75.00% okay. 12/25 subtests failed, 52.00% okay.
Press ctrl+d to shutdown
root@(none):/var/testing# exit
'shutting down'
vserver-qemu-test: command completed in 31.3s
- --
Sam Vilain, Catalyst IT (NZ) Ltd
-VServer.git
- --
Sam Vilain, Catalyst IT (NZ) Ltd.
phone: +64 4 499 2267PGP ID: 0x66B25843
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFD+qvM/AZAiGayWEMRAuAQAJ9ecDsl2zxbTdqNLkVbP+851tNDiwCeIxIO
A7nKfus
Ehab Heikal wrote:
I have bad experience with LVM and raid it is near impossible to fix LVM
if you have problems mounting them after a kernel change. LVM is not as
supported in the resucue mode in most distro's CDs
Which distro was that? Almost every LiveCD I've tried has good LVM
support.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
This tutorial has now concluded, and you can get the unannotated IRC log
for it at:
~ http://irc.13thfloor.at/LOG/2006-02/LOG_2006-02-16.txt
Sam Vilain wrote:
| Hi all,
|
| Some people have requested an IRC Git tutorial. I will be running
Odile Bénassy wrote:
Hello,Jacques, hello all!
I have set up a few vservers for hosting different web sites on the same
machine and keep a separate control of each, and so far I'm happy, thanks!
Time comes to get it running for the public, and as the server has a
RAID controler (it is Dell's
Christian Heim wrote:
well, only on debian the vservers dir goes to /var
on all other distros, it's /vservers :)
Also on Gentoo ;)
I hate that! Such a deep directory... besides, the unix conventions of
var, /usr, etc, were made before this use case was considered (/com,
anyone?). I think it
the commitdiff for the commit labeled from
2.6.16-rc1-vs2.1.0.9/04_syscall.diff, it currently only has one hunk
left. The very top commit takes it to exactly what you get from
a plain 2.6.16-rc2 + Herbert's vs2.1.0.11 patch.
Enjoy!
- --
Sam Vilain, Catalyst IT (NZ) Ltd.
phone: +64 4 499 2267PGP
be
familiar with, such as Subversion, CVS, SVK or darcs.
- --
Sam Vilain, Catalyst IT (NZ) Ltd.
phone: +64 4 499 2267PGP ID: 0x66B25843
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFD8Av0
I always like to recommend fwbuilder for building firewalls for vserver
hosts. It takes some of the headaches out of building firewall chains,
plus you know that you can manage non-Linux firewalls with it too
(having varied network stack implementations through your firewall is a
common
useful from experienced
kernel/vserver developers who know how the vserver patch works, and are
able to check that the code there matches their expectations.
Experienced vserver/userspace developers could help out with the test suite.
- --
Sam Vilain, Catalyst IT (NZ) Ltd.
* - the term 'pure' applied
On Thu, 2006-02-02 at 15:20 +0100, Wilhelm Meier wrote:
is the argument good enough for you to supply the split bme and cow patches
for 2.6.15?
2.6.15? That's like ancient history, man.
There's a historic release here; it's for a much older release, but
maybe it will apply without much
On Mon, 2005-11-07 at 13:58 +0100, Grzegorz Nosek wrote:
The test cases I've found are:
- no QoS at all
everything runs smoothly
- root qdisc on eth0 set to htb (or pfifo, or sfq)
still everything nice and smooth
- default class on eth0 set to htb (rate 1Gbit, so it's not true
bandwith
On Fri, 2005-10-21 at 15:40 -0400, Chuck wrote:
so then just for clarity, using the current vserver software
(2.1.0-r4) with up to 16 ip addys does not give any performance hits
at all compared to 1 but beyond that is when it gets nasty.
no, that is a linear search, so every new ip
On Mon, 2005-10-24 at 19:29 -0400, Chuck wrote:
ok.. so how may ips in a guest do you estimate could be used before a
perceptable change in performance happens? and by this are we talking
about
per interface or gross totals among all interfaces?
That really is a hard question to
On Tue, 2005-10-18 at 15:46 -0400, Michel Belleau (malaiwah.com) wrote:
I tried limiting a vserver memory this week-end but had no luck doing it..
I tried setting the AS and RSS files in the configuration directory, but
it doesn't seem to work the way I wanted. It kills processes (like
On Tue, 2005-10-18 at 14:24 +0200, Herbert Poetzl wrote:
for some time (maybe still? and at least in sarge) the
tools are broken, so better get them as source tarball
or from unstable/testing ...
The ones on apt.utsl.gen.nz/debian include all the fixes I could find.
If there are any new
Tue, 2005-09-13 at 09:49 -0600, [EMAIL PROTECTED] wrote:
I am looking to mount a NFS filesystem into a vserver. I have
searched the archives, the site, and the web but can not find a
straight answer to this.
What is the proper/preferred method of doing this?
Does anyone have the steps?
I
On Mon, 2005-09-12 at 10:37 +0200, Gilles wrote:
When stopping the vserver, Xfree86 (on the host) starts to
use ~99% of the CPU and the keyboard is dead; but not the
[...]
Linux 2.6.12.4-vs2.0+g1+g1 x86_64/0.30.208/0.30.208 [Ea] (0)
VCI: 0002:0001 236 0374
Make sure you've got the
The attached patch fixes a bug when you use vsched on a running
vserver on amd64, in which the high 32 bits of various scheduling
parameters could be filled with garbage, causing tokens to be allocated
at vastly incorrect rates.
Patch is against -vs2.0
diff -ur
On Mon, 2005-09-05 at 17:15 +0200, Herbert Poetzl wrote:
On Mon, Sep 05, 2005 at 08:53:55PM +1200, Sam Vilain wrote:
The attached patch fixes a bug when you use vsched on a running
vserver on amd64, in which the high 32 bits of various scheduling
parameters could be filled with garbage
Oliver Dietz wrote:
{...}
# Block everything between 2 vserver
iptables -A INPUT -d 192.168.0.155 -s 192.168.0.157 -j DROP
iptables -A INPUT -d 192.168.0.157 -s 192.168.0.155 -j DROP
{...}
The INPUT chain is for packets entering the box, but with vservers
packets don't enter the box, all
Tilo Kaltenecker wrote:
how can I use an indepentend loopback-device (127.0.0.1/8) in a
vserver (patch vs2.0-rc5).
You'll need to use NGN to do that. After extensive testing and
experimentation, I concluded that the GNU C libraries had it hardcoded
in too many places that localhost ==
Gilles wrote:
Bootstrapping Images
I haven't seen this being discussed on the list, I hope I'm not about to
say anything sacreligious, but am I in the minority to think that the
build tools do not belong in util-vserver at all?
Although not knowing much about it, I would
Ola Lundqvist wrote:
As I now have the possiblity to apply a number of fixes directly to this
upstream version I will do so. I need your advice on a number of things
though. If you do not want me to modify some parts here please tell
me as I may do it quite soon. :)
This is wiki-style development;
Christian Heim wrote:
Well, if you like, i got holidays now and would like to do something for
vserver ;)
Excellent! Well, you should have received your invitation, so feel free
to muck in!
If you're stuck for ideas, even exploring open issues and adding notes
to the code where you think it
Michal Ludvig wrote:
Don't take it personally as I just wonder - is your effort blessed by
current project maintainers? (Herbert, Enrico, ...) Or is it a fork attempt?
No-one's trying to fork anything. If anything, we're trying to help
people pull their forks into the one repository. We so far
Hi all,
I have set up a new project on OpenFoundry.org for util-vserver.
OpenFoundry is like SourceForge, except it doesn't suck.
http://utilvserver.openfoundry.org/
(no hyphens allowed in project names! bummer)
For now the important thing it has is a public read-only Subversion
server, and is
Herbert made an open call for suggestions for improvements today in IRC.
It was noted that a list of enhancements and feature requests already
exists;
http://linux-vserver.org/ToDo+List+Tools
As well as a list of bugs for util-vserver (anyone care to add these to
the OpenFoundry issue
Matthew Nuzum wrote:
I'm a big postgres fan and closely follow the performance mailing list.
These features sound intriguing so I'm going to enquire about their status.
Ah, my plan is falling into place... rubs hands together
features are available to me. BTW, one interesting feature that Oracle
Herbert Poetzl wrote:
yeah, well, that's the beauty of proprietary services ...
btw, postgresql is a very fine alternative to oracle, and
this is not just hogwash told by folks who never used
oracle before ... but of course YMMV
Sadly, Postgres is missing these important features;
- bitmap
Herbert Poetzl wrote:
Sadly, Postgres is missing these important features;
- bitmap indexes
- OLAP query re-writing
I have absolutely no idea what you are talking about ...
but:
New Enterprise Features in 7.4
* Hash aggregation in memory to make data warehousing and
OLAP queries up to 20
what you asked for.
This is a great example: http://people.freebsd.org/~phk/funding.html
Interesting.
How about making hosting company's ranking on:
http://linux-vserver.org/VServer+Hosting
depend on how much coin they've put forward!
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
Gregory (Grisha) Trubetskoy wrote:
I'm not aware of a way to eliminate a zombie.
kill the PPID. Use vps j or vps -o ppid to see what they are. If
they're zombies owned by init or the fakeinit you've got a worse
problem :).
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my
is enough for this)
- run program with gdb, and use bt to get a stack trace;
$ gdb /path/to/binary
(gdb) run --xid 49161 ...
...
SEGV
(gdb) bt
Posting the entire gdb session output is usually worthwhile.
In this case, it's pretty obvious where the fault is happening, but for
next time ;-).
--
Sam Vilain
.html
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering)
___
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org/mailman/listinfo/vserver
Matt Nuzum wrote:
Some NICs (all?) have the ability to set or change the MAC address, or
at least somehow affect what their mac address appears to be.
That's right, some do. I've tried this on many chipsets and found
support varies even between boards based on the same chipset. But the
general
something to act as a damper to pull a context's jabba nearer
towards the zero point during lulls of VM activity.
Then, if you are a fat jabba, maybe you might end up getting rescheduled
instead of getting more memory whenever you want it!
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
Björn Steinbrink wrote:
And here it finally is... It's a pretty hackish patch, but who cares? ;)
Did you mean to include this link you posted on IRC?
http://doener.homeip.net/doener/vserver/util-vserver-0.30.196-clean-namespace-test5.diff
--
Sam Vilain, sam /\T vilain |T net, PGP key ID
are referring to them).
And I'd like a Pony.
TIA,
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering)
___
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org/mailman
Sam Vilain wrote:
I'd like /proc/PID/mounts to be:
- a symlink to /proc/mounts if the namespace hasn't been changed from
the last pivot_root (or boot) in the host system, or if it is the
same as the ``system'' namespace, if such a thing exists
- a symlink to /proc/virtual/XID/mounts
{^/(vservers(/$VS(/.*)?)?)?$} or $dev !~ /dev/) {
print not unmounting $loc ($dev)
} else {
print unmounting $loc ($dev);
system(umount, -nv, $loc)
}
' $VS
---
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam
Gregory (Grisha) Trubetskoy wrote:
and rising energy costs. As servers get faster, they will consume more
power (9W for a 90MHz Pentium vs 75W for a 2GHz), and at some point this
FWIW the VIA C3 Nehemiah running at 1GHz draws only 11.25W. Drop it
down to a 600MHz and you're down to 4.5W.
--
Sam
. I look forward to that time.
Apologies for not mentioning anyone else who deserves an honourable
mention, interested readers should definitely get a feeling for the size
of the community by browsing:
http://www.linux-vserver.org/Hall+of+Fame
--
Sam Vilain, sam /\T vilain |T net, PGP key ID
:
Kernel: 2.6.9-final-vs1.9.3-rc3
VS-API: 0x00010022
util-vserver: 0.30.195; Oct 10 2004, 16:55:15
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering
to issuing commands like the above as well as providing nicer
interfaces for doing all other things iptables.
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering)
___
Vserver mailing
.
Sending -KILL signals would clean it up pretty quickly (as soon as
enough tokens are allocated for the processes to run), as chances are
they won't consume any tokens to receive a KILL signal. Though, it
would be nice if they didn't need tokens allocated to be stopped via KILL.
--
Sam Vilain, sam /\T
)) {
+ return -EPERM;
}
/*
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering)
___
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org
to
remove the interfaces.
Enrico,
Could you please make `chcontext --secure' confirm that the capabilities
mask was changed, or that the `capability' module is loaded - this is
extremely nasty behaviour that we should work around at all costs!
--
Sam Vilain, sam /\T vilain |T net, PGP key ID
*/
+#endif
/*
* ioctl commands
I've attached the immucp script that I find smashing
for building new vservers in seconds. Shortly (once I get
the vs1.9.3-rcX server I'm building up the way I like it ;-)),
it will be online.
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP
transparent to host-based firewall implementations (is that possible?),
or entirely administered by them?
Or some mixture?
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering
Jörn Engel wrote:
There is vunify which is part of util-vserver package. What is
better for general usage is Sam's unify-dirs script. It is located
at http://mirrors.paul.sladen.org/sam.vilain.net/vserver/unify-dirs.
Just use this without the -l or -i options and it will just do hard
links,
for writing a very useful utility. Apart from this it
really works great!
Glad to hear. Thanks for the test script, with it the bug stood out
like a sore thumb. I've just uploaded ReadDir 0.03 to CPAN.
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID
Christian,
Actually, my thoughts are that it would be nice to be able to disable
the SSH X11 forwarding from listening on any IPv4 address at all.
The /unix xauth entry is for connection over the unix socket, rather
than TCP/IP. Unix sockets are very much like a TCP/IP socket, but the
to 2.4.26-X (which should be done by the
debian vserver maintainers, btw ...)
best,
Herbert
good day !
Berk
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering)
___
Vserver
vservers in *3 seconds* (not counting the mkreiserfs
time) in the past.
Would this be a welcome enhancement if brushed up for the current util-vserver
release?
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering)
on the filesystem on top.
But what about removing files? How does unionfs handle that? ie, if
there is a file present on the master, can you remove it from the
union mounted version? Or only replace it?
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal
On Mon, 15 Mar 2004 20:10, Sam Vilain wrote;
Use sshd -t -p NNN (where NNN is a port number) inside the vserver.
Gah, correction - ssh -d -p NNN
d for debug, not t for test :-}
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid
-ck1.bz2
Make sure you are running the right version of the util-vserver package too.
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering)
A Project Manager is like the madam in a brothel. His job is to see
that everything
fails in a different place, then it is more probably a fault in the
platform than the script...
--
Sam Vilain, sam /\T vilain |T net, PGP key ID: 0x05B52F13
(include my PGP key ID in personal replies to avoid spam filtering)
It is a rather pleasent experience to be alone in a bank at night
, or
otherwise take the system down to single and fsck the partition.
If it *does* work, but `unify-dirs' doesn't, then there is something
wierder going on - in which case, mail me /tmp/trace (off-list) from:
strace -fae -o /tmp/trace unify-dirs -d ref tc
--
Sam Vilain, [EMAIL PROTECTED
path to proc here,
to be sure you are getting the whole server.
Passing:
`-x' to rsync or cp
`l' to tar
`-xdev' to find
Will stop the process from crossing filesystem boundaries. This is
another quite clean approach.
--
Sam Vilain, [EMAIL PROTECTED]
'Martyrdom' is the only way
-vs1.1.0.diff
2. http://www.vilain.net/linux/ctx/split-2.4.22-ac4-c17g2/
--
Sam Vilain, [EMAIL PROTECTED]
If youve seen one redwood, youve seen them all.
RONALD REAGAN
___
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org/mailman
in the past for this.
Have you got implementations for all these parts too?
--
Sam Vilain, [EMAIL PROTECTED]
A complex system that works is invariably found to have evolved from a
simple system that worked.
- anon.
___
Vserver mailing list
[EMAIL
97 matches
Mail list logo
