On Fri, Aug 12, 2005 at 09:03:39PM -0400, Stephen Harris wrote: > On Fri, Aug 12, 2005 at 01:55:30AM +0200, Herbert Poetzl wrote: > > On Thu, Aug 11, 2005 at 09:56:20AM -0400, Stephen Harris wrote: > > > > > > [root]/home/sweh > > > backup.pts/2% mount -r backup:/RedHat/updates/core1 > > > /vservers/webssh/RedHat > > > > no idea 'what' filesystem you did mount here, but to me > > it looks like a network filesystem (i.e. nfs) > > Yes, it is. In fact it's an NFS mount from myself to myself; I can't > use bind mounts because I want the vservers to only have read-only > access to the filesystem, and bind mounts don't (or didn't, last time > I tried) allow changes in permissions between the original location > and the bound location.
yeah, right, that's where my BME (Bind Mount Extension) patches come into play (fixing this mainline 'bug/feature') > > > backup.pts/2% vserver webssh enter > > > SIOCSIFBRDADDR: Cannot assign requested address > > > SIOCSIFFLAGS: Cannot assign requested address > > > > this is a good sign of a broken config (network wise) > > Network wise, it actually works. I had thought this had come from the > guest OS trying to do stuff, but I'm a vserver newbie. Hmm. > > Ah... maybe it's because I'm using a 10.* address but have a > 255.255.255.0 netmask; I left IPROOTMASK and IPROOTBCAST unset, so > _maybe_ it's attempting to calculate based on a 255.0.0.0 mask, and > failing to set them. Hmm, no, that's not it. I just tried. > > Could this be ipv6, perhaps? I'm not using ipv6. > > I had noticed that inside the vserver, an "ifconfig -a" shows _all_ > the hosts IP addresses, and not just the one in the vserver. > > But otherwise it all works. > > > > ipv4root is now 10.0.0.2 > > This is the correct address. > > > > New security context is 49173 > > > > and just as sidenote, you should avoid dynamic context > > ids, unless you are looking for trouble :) > > OK; I'm new vserver newbie and just took the defaults which said > > # Select an unused context (this is optional) > # The default is to allocate a free context on the fly > # In general you don't need to force a context what defaults are those? > but I'll take your advice and have assigned fixed contexts now (10001 > and 10002). > > > > bash: ulimit: core file size: cannot modify limit: Invalid argument > > > > this looks evem more like a debian^Wconfig issue, where > > you specified a limit (maybe -H or -S) without raising > > the proper other limit (specify -HS to solve that) > > No, it appears to be from my .profile inside the guest. For historical > reasons I had "ulimit -Sc unlimited" for my own account, and this > seems to be read when entering the guest. > > > this is a different IP than the one before, NFS isn't > > handled that well on 2.4, but of course, the guest > > will send requests with 10.0.0.3 now, which, in turn > > might lead to the Permission denied (if your server > > does not allow 10.0.0.3 to access the share) > > The server allows the whole 10.0.0.* network (my home network). > > Will the guest make a request? The guest hasn't actually made the > mount; the host has made the mount and has made it available to the > guest. So will the request come from the guest's IP address, or will > it fall through to the host, and the host make the request. the host will make the request, but with the guest's ip (NFS isn't really supported with 2.4/1.2.x) > Ah, OK... some network snooping... the request comes from the guest IP > address. That's... broken! The mount came from the host IP address but > the nfs requests came from the guest IP adrress. Hmm.. I'm surprised > it ever worked! well, it is how networking works right now :) > OK, what's the best way of providing a filesystem to the guest with > read-only privs? Clearly NFS is a kludge. see BME note above ... > Huh.. that's odd... I just shut down _all_ vservers and restarted them > and now the mount works in both vserver instances.... that seems like > something confused, but I can probably live with it; my mounts have so > far worked. > > But it does look like I need better solution; how to make a filesystem > available to a vserver with differnt permissions than the host has? > > > hmm, and IDE hotswapping did work with 2.4 but does > > not with 2.6? interesting ... > > Yeah, it's very annoying. Alan Cox has a lot to say about it! he probably has ... fixing it would be better, though :) best, Herbert > -- > > rgds > Stephen > _______________________________________________ > Vserver mailing list > Vserver@list.linux-vserver.org > http://list.linux-vserver.org/mailman/listinfo/vserver _______________________________________________ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver