1106179201 M * Bertl now if that is done once, then a second attempt to start it will fail, because the port is already bound, okay? 1106179210 M * nayco yes ! 1106179222 M * Bertl now let's assume there is an option to specify the IPs ... 1106179231 M * Bertl (to make it simpler, just one IP) 1106179243 M * Doener nayco: just a random guess, did you also specify a port? Either with "Port x" or with "Listen x.x.x.x:y"... maybe cups ignores 'half' assignments 1106179283 M * Bertl while the host knows IP_A, IP_B and IP_C the second service just uses IP_C 1106179300 M * nayco Doener: It shouldn't, according to the conf file, it accepts "hostname" "hostname:port" "ip" "ip:port"... But 'ill try. 1106179303 M * Bertl but startup will fail too, why? 1106179323 M * Bertl because the first service has already been bound to _all_ IPs 1106179342 M * Bertl now let's invert the setup, and start with the IP_C only service first 1106179363 M * nayco mmm 1106179366 M * Bertl it will succeed, and after that we try to start the other one, binding IP_ADDR_ANY 1106179380 M * Bertl which will fail again ... 1106179390 M * nayco yes... 1106179413 M * nayco so, I must tell BOTH to bind to ONE ip ? 1106179415 M * Bertl now the vserver uses chbind --ip <...> 1106179433 M * Bertl (which is a configured subset of all host IPs) 1106179465 M * Bertl and this magically restricts IP_ADDR_ANY bindings to just those IPs 1106179496 M * Bertl now you can use that to verify _some_ issues 1106179533 M * nayco ...IPs which are the ones used by the VS ? 1106179545 M * Bertl for example, simply using the chbind (as in the v_* wrappers) to limit the IPs on the host, to some IPs not shared with a vserver, you can verify that the services indeed uses IP_ADDR_ANY 1106179575 M * Bertl (because it will fail without the wrapper and work just fine with the wrapper) 1106179636 M * nayco So, you say I must try chbind (And read its man before) on the host ? 1106179674 M * Bertl check the v_* wrapper scripts on the host, and adapt one for cups 1106179686 M * nayco ok. Thanks a lot. 1106179706 M * Bertl you're welcome! 1106179720 Q * jsambrook Ping timeout: 480 seconds 1106179749 M * nayco ...knowing the best solution would be NOT to run cups on the host, and run several instances in several vserver, i'm right ? 1106179762 M * Bertl yep, probably ... 1106179802 M * nayco Because the IP_ADDR_ANY are prevented ? 1106179815 M * Bertl they are 'restricted' yep 1106179819 M * nayco If I understood well.... Ok 1106179902 M * nayco Basically, I only have to write "exec $USR_LIB_VSERVER/vsysvwrapper service $" ? 1106179933 M * Bertl yep 1106179942 M * nayco I'm doing it. 1106179967 M * Bertl but every 'service' (wrapper wise) has a config file too 1106179979 M * nayco arf. 1106179982 M * Bertl (to list the ips) 1106180039 M * nayco where is it ? 1106180115 M * Bertl if you look at vsysvwrapper ... 1106180119 M * Bertl /etc/vservices/$SERVICE.conf 1106180135 M * nayco ? 1106180165 M * nayco Oh, none is provided by defeult, huh ? 1106180169 M * nayco -e+a 1106180174 M * Bertl http://list.linux-vserver.org/archive/vserver/msg05498.html 1106180200 M * Bertl (it's actually very old stuff ;) 1106180219 M * nayco /etc/init.d/v_cups restart 1106180219 M * nayco exec /usr/sbin/chbind --ip eth0 /etc/init.d/cups restart 1106180219 M * nayco ipv4root is now 192.168.0.1 1106180219 M * nayco Arrêt du service d'impression CUPS : [ OK ] 1106180219 M * nayco Lancement du service d'impression CUPS : [ OK ] 1106180223 M * nayco Yess ! 1106180230 M * Bertl ;) 1106180268 M * nayco # vps xa | grep cupsd 1106180268 M * nayco 10790 0 MAIN ? Ss 0:00 cupsd 1106180268 M * nayco 10973 49152 vserver1 ? Ss 0:00 cupsd 1106180270 M * nayco Cool. 1106180284 M * nayco Ok, I gonna write this down tomorrow... 1106180380 M * nayco ...At work. I'm making a french Linux-Vserver HowTo (Mandrake Oriented... But well ;-)) Once finished, do you think I could post it on the wiki (Or somewhere else) ? 1106180431 M * Bertl sure, we already have some franch doku there ... IIRC 1106180455 M * Bertl (although I prefer english docu for several reasons) 1106180490 M * nayco Hey, I could even translate it, i'm not anti-english ;) 1106180519 M * nayco anyway, I gonna write one for work.... 1106180530 M * Bertl excellent ... 1106180567 T * Bertl http://linux-vserver.org/ | latest stable 1.29, devel 1.3.9, 1.9.3, ng8.9 1106180755 T * Bertl http://linux-vserver.org/ | latest stable 1.29, devel 1.9.3, 1.9.4-rc2, ng8.9 1106181096 Q * mugwump Quit: Have to resize root filesystem 1106181190 J * mugwump ~samv@210-54-92-184.ipnets.xtra.co.nz 1106181340 M * nayco Ok, I gonna sleep. Tomorrow, documentation, then samba-vserver ;-) 1106181354 M * mugwump damn, ext2resize really didn't work properly ... 1106181362 Q * mugwump Remote host closed the connection 1106181384 Q * nayco Quit: "sleep 86400" 1106181706 N * chris|out chrish01 1106181720 Q * monrad Quit: Leaving 1106181818 J * mugwump ~samv@210-54-92-184.ipnets.xtra.co.nz 1106181843 M * mugwump http://rafb.net/paste/results/sFWBas82.html # wierd 1106181846 M * Bertl mugwump: hmm, sounds strange ... 1106181859 M * chrish01 hey Bertl! 1106181874 M * chrish01 got anything i can test with vserver ngnet? 1106181886 M * mugwump I just used ext2resize to resize a filesystem that started very small (~150MB), got to 350MB and this one bumped it up to 2GB 1106181898 M * Bertl chrish01: I updated to ng8.9 1106181908 M * chrish01 oh cool ... i build a new kernel in a few 1106181919 M * mugwump I doubt it's vserver related of course, just interesting/disappointing behaviour 1106182085 M * Bertl chrish01: no vshelper adaptations yet ... 1106182093 M * chrish01 ok gotcha 1106182104 M * chrish01 is just the kernel updated? or user-space too 1106182112 M * Bertl just kernel 1106182115 M * chrish01 k 1106182185 M * Bertl linux-2.6.11-rc1-vs1.9.4-rc2-ng8.9 (ng8.8 + delta) 1106182217 M * Bertl will address the vserver/vshelper part when I got some sleep ... 1106182240 M * chrish01 no problem ... im much busier than expected this week =P 1106182383 M * Bertl okay, off to bed now ... have a nice one everyone! cya tomorrow! 1106182391 M * chrish01 night Bertl 1106182391 N * Bertl Bertl_zZ 1106184519 M * ndim Bertl_zZ: linux-2.6.11-rc1-vs1.9.4-rc2-ng8.9 sounds quite like what I need... :) 1106188194 M * click ROTFL! http://www.spaca.nu/singel 1106188210 M * click I just HAD to write a quickie on that story 1106190237 J * monrad ~monrad@213083190130.sonofon.dk 1106191240 Q * monrad Ping timeout: 480 seconds 1106192217 J * chrish01_ ~chrish01@69.90.131.10 1106195765 Q * ntrs Read error: Connection reset by peer 1106196269 J * nox- ~nox@c135082.adsl.hansenet.de 1106196614 Q * nox Ping timeout: 480 seconds 1106196629 N * nox- nox 1106201214 M * _are_ meebey: sorry, fell asleep yesterday. samba oplocks don't work as some 127.0.0.1 message path is hardcoded into the daemons and they even verify it. but oplocks are just to speedup single clients that are the only ones to ... 1106201214 M * _are_ access some files and are allowed to assume so with oplocks.. Normal locking seems to work. 1106201270 M * _are_ for the cups problem: i understand right nayco had it on the mainserver started, too and so all IP addresses had been blocked already? 1106202505 Q * _are_ Ping timeout: 480 seconds 1106205460 Q * chrish01 Quit: Leaving 1106205483 Q * chrish01_ Quit: chrish01_ 1106207056 J * chrish01 ~chrish01@69.90.131.10 1106207900 Q * prae Quit: leaving 1106208063 J * nish ~nish@220.224.7.179 1106208784 J * _are_ ~are@212.185.72.226 1106208791 M * _are_ hi 1106209400 J * mhepp ~mhepp@r72s22p13.home.nbox.cz 1106209917 Q * nish Quit: Leaving 1106210473 J * nish ~nish@220.224.7.179 1106210521 M * nish NOT able to hardlink /lib anywhere ,anybody ??? 1106211117 J * prae ~prae@sherpadown.net 1106211381 M * xmb hard linking dirs is no good idea.. thats why 1106211389 M * xmb maybe mount --bind 1106211906 M * nish basically to create a virtual m/c min file rqd need to be hard linked and imp ones to be created a fresh copy 1106211906 Q * grecea Read error: Connection reset by peer 1106211955 J * grecea ~grecea@h-195-22-237-74.mdl.net 1106211959 M * nish Is mount --bind is same as hardlinkin ?? 1106212483 M * chrish01 mount --bind lets you have the same fs mounted in multiple places 1106212494 M * chrish01 great for chroots that need proc access 1106212524 M * nish thats what we dont need,same fs in multiple places 1106212573 M * nish suppose i delete a file in chrooted enviromnet it shouldnt be deleted in root context 1106212679 M * nish also if we change a file in chrooted enviromnet , fresh copy should be created,not changin other linked files 1106212685 Q * mcp Ping timeout: 480 seconds 1106212721 M * nish isnt hardlinkin best idea for this 1106212878 M * xmb nish, u cant hardlink dirs 1106212887 M * xmb which would be 'the same' as mount --bind 1106212902 M * xmb if you want a fresh copy, do one 1106212983 M * _are_ hardlinks !=mount --bind 1106213001 M * _are_ hardlinks are a feature of the filesystem, mount --bind is a kernel feature and they work quite different 1106213048 M * _are_ the 'do a new file if I delete the link' behaviour you get with hardlinks + immutable bit + iunlink (or similar name) 1106213090 M * _are_ mount --bind is the same file. no immutable atribute, no iunlink, gone is gone. 1106213111 M * xmb meant 'the same' in regarding of his needs 1106213112 M * _are_ (or same directory) 1106213131 M * _are_ xmb: then I understood his needs differently :-) 1106213157 M * nish do i have to set immutable bit for every file or only dirs 1106213179 M * _are_ every hardlinked file you want to have this behaviour 1106213255 M * nish with immutable bit set the file cannot be changed in chroot , right 1106213259 M * _are_ this is what server unification does, btw. which rmeinds me I anted to do that server unification some time. :-) 1106213275 M * _are_ nish: yes, no change possible, but with iunlink set you can delete it and do a new one 1106213375 M * xmb whats iunlink, no other flag containing 'link' around in chattr(1) 1106213416 J * root_ ~nish@220.224.19.167 1106213425 M * xmb r00t! 1106213434 M * _are_ xmb: this is the part I have not come round to 1106213445 N * Bertl_zZ Bertl 1106213451 M * _are_ I know it exists and is mentioned here several times. 1106213455 M * xmb k, if u come to it soon, lemme know by chance =) 1106213456 M * _are_ but Bertl can tell you :-) 1106213459 M * Bertl morning folks! 1106213461 M * Doener morning! 1106213465 M * _are_ Hi Bertl 1106213471 M * matti Morning Bertl ;] 1106213472 M * xmb hiya bertl 1106213553 M * Bertl hey xmb! to answer your question, it's a flag, which when set, inverts the meaning of the immutable flag regarding unlink() 1106213613 M * xmb i thought so after some.. where is it in the docs 1106213694 M * Doener Bertl: linux-vserver.org seems dead... 1106213723 M * Bertl hmm ... let me check ... 1106213725 M * root_ im trying it for long not running 1106213737 M * Bertl hey nish, cool nick! ;) 1106213747 M * root_ hmm... 1106213815 Q * nish Ping timeout: 480 seconds 1106213825 Q * root_ Quit: Leaving 1106213865 J * nish ~nish@220.224.19.167 1106213871 M * nish hi 1106213872 M * Bertl Doener: should work now ... 1106213881 M * Doener yep 1106213912 M * chrish01 morning Bertl 1106213920 M * Bertl morning chrish01! 1106213939 M * chrish01 im pulling the midnight shift today, so let me know when you got some ngnet vserver love :) 1106213971 M * Bertl k, will start hacking on it in an hour or so ... 1106213974 M * Doener xmb: http://linux-vserver.org/Linux-VServer-Paper-06 1106213982 M * chrish01 awesome bertl 1106214094 M * xmb ah its an attr implented by the vserver kernel patch? 1106214212 M * Bertl yes, that is correct! 1106214389 M * xmb then i get it =) nice paper i gotta read later 1106214608 M * _are_ has anyone experiences with software raid5? I need to add 2 devices and enhance the raid capaticity by that. mdadm claims to be able to do this with raid1, and adjust size for larger disks with raid5. is there something to ... 1106214610 M * _are_ just add disks to raid5? the checksums would need to be recalced ofc. 1106214703 M * Bertl xmb: thanks! 1106214776 M * Bertl _are_: in theory it is easy, if the disks are of same or larger size than the other disks ... but I haven't tried yet ... 1106214828 M * _are_ well, theory had been yesterday, today I have the disks and get an error message of mdadm :-) 1106214861 M * _are_ i don't care if online or offline adding, just need some tool that converts the data structures and appareantly mdadm is unable to do so 1106214871 M * Bertl what does it say? 1106214886 M * _are_ # mdadm --grow /dev/md2 --raid-disks=8 1106214886 M * _are_ mdadm: Cannot set device size/shape for /dev/md2: Invalid argument 1106214908 M * _are_ but basically: This usage causes mdadm to attempt to reconfigure a running array. 1106214908 M * _are_ This is only possibly if the kernel being used supports a particular 1106214908 M * _are_ reconfiguration. This version only supports changing the number of 1106214908 M * _are_ devices in a RAID1, and changing the active size of all devices in 1106214908 M * _are_ a RAID1/4/5/6. 1106214934 M * _are_ -> mdadm can only add disks to raid1 and enhance size with same amount of disks with raid 4/5/6 1106214939 M * Bertl ah, well it basically says, it doesn't supoort it ... 1106214988 M * _are_ yes, the tool says so. but perhaps anyone has come across a tool permitting that. 1106215018 M * Bertl do you have just a single partition on that array? 1106215033 M * _are_ yes 1106215063 M * _are_ actually: scsi disks -> md-raid5 -> lvm -> lb -> drbd 1106215070 M * _are_ lb->lv 1106215243 M * _are_ there seems to be a command named 'raidreconf' :-) 1106215280 M * _are_ 'Currently raidreconf can grow and shrink RAID-0 and RAID-5 arrays, and import non-RAID devices into a new RAID-0 or RAID-5. ' 1106215293 M * _are_ and ofc a big and fat 'don't use' warning 1106215684 M * Doener Hollow: i just noticed that your gentoo vserver guide does only "chmod 000" the vservers directory. this does not give full security. You also need to do "setattr --barrier /vservers"... (IIRC with namespaces this is not necessary, but still...) 1106215784 M * Bertl hmm, with 1.2x you need to set the iunlink flag, with 1.9.x the 000 is just bogus ... IIRC 1106216372 M * Doener yeah, 000 is bogus, 700 is as good if you just want to keep your local users out of the vserver directory 1106216768 J * Mega\work ~Megabart2@host208-101.pool80182.interbusiness.it 1106216774 M * Mega\work hi all 1106216774 M * Bertl welcome Mega\work! 1106216780 M * Mega\work :D 1106216801 M * Mega\work good morning Bertl! 1106216872 M * Mega\work this morning, i have a problem......Stopping the virtual server ldap 1106216872 M * Mega\work {usb_unlink_urb} {usb_driver_release_interface} 1106216872 M * Mega\work Warning: /boot/System.map-2.4.28-vs1.29-grsec does not match kernel data. 1106216904 M * Bertl sounds like you didn't update it (or the modules) 1106216931 M * Mega\work what? 1106216940 M * Bertl the System.map 1106216942 M * Mega\work i don't understand 1106216973 M * Bertl when you build a kernel, you get (among other stuff) two files, the bzImage and the System.map 1106216989 M * Mega\work and the config file :D 1106216994 M * Mega\work ok 1106217101 M * Mega\work i don't understand where's the problem and how can resolv it..... 1106217117 M * Mega\work i have recompiled the kernel 1106217124 M * Bertl yes, and then? 1106217175 M * Mega\work and first, i have had this error when vserver stopping 1106217186 M * Mega\work and after, i have had this error when vserver stopping 1106217218 M * Bertl you get the error on the host, I assume, right? 1106217302 M * Mega\work uhm......yes 1106217320 M * Mega\work when i run and stop vserver i get the error 1106217330 M * Bertl so you did build a new kernel and did you install it? 1106217355 M * Mega\work yes 1106217365 M * Bertl how? please let me know the steps ... 1106217419 M * Mega\work make menuconfig 1106217475 M * Mega\work and I had change the grsecurity menu 1106217478 M * Mega\work after 1106217506 M * Mega\work make dep && make bzImage && make modules && make modules install && make install 1106217571 M * Bertl hmm, make isntall should have installed the System.map too ... 1106217583 M * Bertl and you rebooted after that? 1106217587 M * Mega\work yes 1106217598 M * Bertl and since then you get that message? 1106217626 M * Mega\work yes 1106217646 M * Bertl could it be grsec related? maybe you protected /proc/ksyms or such? 1106217668 M * Mega\work but only when i start and stop vserver 1106217687 M * Mega\work uhm.........i have change this entry of grsecurity menu 1106217740 M * Mega\work one moment.......i had search the entry :D 1106217770 Q * nish Ping timeout: 480 seconds 1106217846 M * Mega\work Address Space Layout Randomization 1106217852 M * Mega\work i have disabled this entry 1106217865 M * Bertl hmm, should not hurt I guess ... 1106217900 M * Bertl it seems usb related, could it be that some runlevel script inside the vserver does something usb related? 1106217910 M * Mega\work then........the problem was that..... 1106217956 M * Bertl you get it only on shutdown, so I'd check the K* scripts/links 1106218001 M * Mega\work i get error when i run and stop vserver 1106218017 M * Mega\work and in all vserver 1106218027 J * jsambrook ~jsambrook@host-62-69-64-93.bsve.net 1106218035 M * Bertl welcome jsambrook! 1106218049 M * Bertl Mega\work: do you have a chkconfig tool inside your vservers? 1106218084 M * eyck is there vs1.29 for 2.4.29 available? 1106218101 M * eyck I don't know what to do about xfs_cap.c which no longer exists 1106218118 M * Bertl hmm, k, will look into it ... 1106218164 M * Mega\work what is chkconfig tool? 1106218205 M * eyck oh well, it looks like this xfs_cap.c modification comes from me and not vs itself. so let's ignore it. 1106218221 M * Mega\work Bertl 1106218233 M * Bertl Mega\work! 1106218238 M * Mega\work i try to rebuild kernel! 1106218245 M * Mega\work :D 1106218248 J * nish ~nish@220.224.41.71 1106218253 M * eyck good luck. 1106218261 M * Bertl Mega\work: well, might help ... but I'd look for the scripts ... 1106218369 Q * v00dY Read error: Operation timed out 1106218371 M * Doener off to the dentist... later 1106218376 N * Doener Doener|gone 1106218421 M * Mega\work Bertl: i can patch kernel witch vserver+grsecurity+ path o matic? 1106218436 M * Bertl maybe .. no idea ... 1106218440 M * Mega\work :D 1106218446 M * eyck yes you can. 1106218453 M * eyck you've got channel's blessing 1106218458 M * eyck go ahead, have fun. 1106218467 M * Mega\work grsecurity+vserver.........noproblem 1106218501 J * v00dY v00dy@62.241.52.143 1106218542 M * Mega\work but....with more kernel patch always there are problems 1106218555 M * eyck hmm, I thought you wanted problems...? 1106218592 M * Mega\work no thanks :D 1106218669 M * Mega\work I don't want problem, but I prepare in case them are :D 1106218718 M * Mega\work Bertl: what linux distribution do you use? 1106218732 M * Bertl mandrake 8-9 1106218738 M * Mega\work azz 1106218787 M * Mega\work i use debian because is lite....... 1106218811 M * Mega\work mandrake is too heavy 1106218819 M * Bertl feel free to do so ;) 1106218884 M * Mega\work I thought that you used to slackware :D 1106218933 M * eyck nope, Bertl always was Mandrake guy. 1106218940 M * eyck quite surprising really, 1106218954 M * chrish01 i was, until about 7.2 ... then didnt like where their gui stuff was going 1106218970 M * Bertl ah, well, not always mandrake ... 1106218987 M * chrish01 i have sworn off RPM ever since =P 1106219003 M * Bertl something like suse, redhat, debian (eek), mandrake ... 1106219046 M * eyck (eek) 1106219157 M * Mega\work eek? 1106219160 M * Mega\work what is eek? 1106219201 M * eyck Eek \Eek\, Eeke \Eeke\, v. t. 1106219202 M * eyck See {Eke}. [Obs.] --Spenser. 1106219290 M * Mega\work ?????? 1106219381 M * Bertl Eek is a short form of Eeeeek, which is an onomatopoetic expression for disgust ... 1106219418 M * Mega\work ahhhhhhhhhh 1106219434 M * Mega\work you disgust debian? 1106219455 M * Bertl yes, I don't really like it, too many modifications, too less features ... 1106219560 M * Mega\work i like debian because is lite and because apt is very good to manage package 1106219576 M * eyck and I like brunettes, 1106219598 M * Mega\work and blondes? 1106219599 M * eyck they look fine and are good in bed. 1106219599 M * Bertl hmm, not redheads? 1106219605 Q * nish Ping timeout: 480 seconds 1106219609 M * Mega\work ahahahahahah 1106219649 M * eyck blonds are usually ugly and tend to use too much makeup 1106219669 M * Bertl the expert speaks on linux-vserver ;) 1106219672 M * Mega\work eych where are you from? 1106219707 M * eyck central europe 1106219758 M * Mega\work I'm italia and the blonde are very very good look........but in the bed i don't know 1106219780 M * Bertl eyck: btw, the xfs_cap thingy is not caused by you ... 1106219814 M * eyck Bertl: any idea where they moved that? (or why?) 1106219823 M * Bertl looking into it right now ... 1106219861 M * Bertl most likely they removed xfs specific parts and replaced them by generic ones 1106219922 M * eyck that'd be good. 1106219971 M * Mega\work i can to use, into vserver, iptables? 1106220092 M * eyck you should. 1106220141 J * nish ~nish@220.224.10.203 1106220197 M * Bertl hmm, iptables are not allowed inside a vserver 1106220206 M * Bertl (this will change with future ngnet) 1106220244 M * Mega\work ok 1106220267 M * Mega\work then i use iptables only to host 1106220361 M * nish Bertl: Linux-vserver.org showing me a Test page ??? 1106220391 M * Bertl does it? 1106220423 M * Bertl ah, ... well redhat apache update *sigh* 1106220425 M * nish yeah 1106220518 M * Bertl better now ;) 1106220524 M * Bertl thanks for the info ... 1106221094 M * nish Bertl: still not working here 1106221140 M * Bertl force reload, probably your cache ... 1106221670 M * nish there u r .. 1106221884 J * pulsar ~pulsar@82.209.246.234 1106221890 M * pulsar Hi ! 1106221904 M * Bertl welcome pulsar! 1106221917 M * Bertl eyck: http://vserver.13thfloor.at/Stuff/patch-2.4.29-vs1.2.10.diff 1106221923 M * pulsar vsched: WARNING: the '--cpu_mask' parameter is deprecated and will not have any effect what does it mean ? 1106221942 M * Bertl it means that it is deprecated and will have no effect ;) 1106222020 M * Bertl you can achieve what was intended by this interface with the affinity syscalls ... 1106222060 M * meebey _are_: yes he had cupsys running in the root server 1106222078 M * meebey _are_: and a strange mandrake init.d script doing crazy stuff with 127.0.0.1 1106222095 M * meebey _are_: so what do you need to change to get samba to work, disable oplocks explicit? 1106222182 M * eyck Bertl: thnx. 1106222210 M * pulsar Bertl> So , I don't need to plase sched_hard into flags ? 1106222302 M * Bertl with plase being put? 1106222431 M * Bertl you need the sched_hard flag and an enabled hard scheduler (compile time) to limit the cpu resources available to a vserver 1106222453 M * Bertl the cpu_mask part has been removed/replaced by mainline stuff ... 1106222460 M * pulsar yes - andits works 1106222469 M * Bertl excellent! 1106222521 M * pulsar but I vserver start produce this message :-) Is it OK ? 1106222545 Q * nish Ping timeout: 480 seconds 1106222619 M * Bertl most likely you have one line to many in * /etc/vservers//schedule 1106222639 M * Bertl (the one used for the cpu_mask) 1106222645 M * Bertl but you can safely ignore it 1106222790 M * pulsar hm , my schedule -> 50 /n 100 /n 500 /n 0 /n 500 /n 0 , as descibed in mini-howto ... 1106222855 Q * chrish01 Read error: Operation timed out 1106222857 M * Mega\work uff 1106222858 M * Mega\work grsec: attempted resource overstep by 1106222858 M * Mega\work requesting 1024 for RLIMIT_NOFILE against limit 1024 by 1106222877 J * chrish01 ~chrish01@69.90.131.25 1106222883 M * Mega\work why i have this error 1106222887 M * Mega\work ?? 1106223046 M * Mega\work i don't must use grsecurity 1106223075 M * Mega\work too many problems 1106223329 M * Bertl ;) 1106223390 M * Mega\work and i have more unlucky 1106223405 M * Mega\work and i'm more unlucky 1106223434 M * Bertl several people working with grsec reported that you need to configure it properly ... 1106223508 M * Bertl pulsar: docu (within your tools) says: (from doc/configuration.xml) 1106223524 M * Mega\work Bertl, I have followed the grsecurity man in this link 1106223534 M * Bertl pulsar: Contains the scheduler parameters, one per line. 1106223543 M * Mega\work http://www.grsecurity.net/quickstart.pdf 1106223562 M * Bertl pulsar: fill-rate, interval, tokens, tokens-min, tokens-max, cpu-mask 1106223593 M * Bertl Mega\work: maybe they didn't think about linux-vserver in that quickstart guide? 1106223662 N * Doener|gone Doener 1106223682 M * Bertl wb Doener! 1106223713 M * Mega\work yes Bertl 1106223740 M * Mega\work i must try to search a configuration guide for grsecurity+vserver 1106224027 M * Mega\work hello Doener 1106224038 M * Doener hey Bertl, Mega\work 1106224052 M * Mega\work uff.......another kernel rebuilding 1106224056 M * Mega\work :( 1106224062 M * Mega\work 2 OO 1106224063 M * Mega\work :D 1106224143 M * Mega\work the problem is that i must use samba+openldap 1106224169 M * Doener and that forces you to use grsec? 1106224176 M * Bertl probably ;) 1106224181 M * Mega\work and i have installed ldap e samba in two separate vserver 1106224204 M * Mega\work I've the problem when samba try to search the user into ldap 1106224276 M * Mega\work Doener: the problem are grsec....... 1106224289 M * Doener then get rid of it ;) 1106224301 M * _are_ meebey: samba works out of the box, it only breaks when tools use oplocks -> disable them globally 1106224320 M * Mega\work therefor i remove grsec....... 1106224325 M * meebey _are_: ah ic 1106224328 M * _are_ Mega\work: I run samba via ldap in 2 vservers and it works fine 1106224348 M * meebey _are_: how come the oplocks dont work? 1106224355 M * meebey _are_: where does it fail, CAPs? 1106224365 M * Mega\work _are_: but do you have grsecurity installed? 1106224545 M * _are_ meebey: 127.0.0.1 seems to be hardcoded for oplock breaking 1106224550 M * _are_ Mega\work: no 1106224555 M * Mega\work :) 1106224572 M * _are_ the only patch i use is vserver and on the box I install right now, drbd and vserver 1106224586 M * Mega\work good 1106224599 M * Mega\work then i will remove grsec 1106224622 M * meebey _are_: ah ic 1106224634 M * meebey _are_: so either allow lo device or disable oplock 1106224662 M * Bertl I doubt the lo device will work here ;) 1106224683 M * meebey why? 1106224684 M * _are_ meebey: nope, lo gets masked via ip route from master 1106224688 M * _are_ i tried that one. 1106224698 M * meebey hu? 1106224788 M * _are_ meebey: whatever originates from 127.0.0.1 will be rewritten to your vservers IP by ip tool from the main server 1106224889 M * meebey even if it comes from the vservers 127.0.0.1? 1106224895 M * _are_ even then. 1106224900 M * meebey ic 1106224905 M * _are_ even if you allow it to have the 127.0.0.1 ip 1106224917 M * Bertl Doener: do you have any idea what a return code (from call_usermodehelper) of 256 means? 1106224960 J * mbucc ~konversat@host-216-153-147-194.spr.choiceone.net 1106224970 M * Bertl welcome mbucc! 1106224976 M * mbucc bertl: hi! 1106224986 M * mbucc bertl: just gunna lurk for a while 1106225226 M * Bertl mbucc: feel free to lurk ;) 1106225327 M * Doener Bertl: 256? i thought retvals are somehow limited to 8bit... at least WEXITSTATUS makes me think so... 1106225369 M * Bertl well, can't help ... 1106225370 M * Bertl vs_context_state(): (/sbin/vshelper startup 100 ) returned with 256 1106225379 M * Bertl if ((ret = call_usermodehelper(vshelper_path, argv, envp, 1))) { 1106225858 Q * jsambrook Ping timeout: 480 seconds 1106225872 M * Bertl seems to me like 256 means everything is fine, and 512 means error 1106227084 J * aba ~aba@sol.turmzimmer.net 1106227090 M * aba Hi 1106227093 M * Bertl welcome aba! 1106227112 M * aba One question: Are there gpg-signatures of the patches available? 1106227117 M * Bertl Doener: was solved, some strange behaviour of the interpreter (/bin/sh, busybox) 1106227137 M * Bertl aba: for some patches, yes ... 1106227165 M * aba I'm especially asking for the devel version, and I didn't find a sig at the web page. 1106227179 M * Bertl which patch do you need? 1106227230 M * aba I _think_ to patch-2.6.9-vs1.9.3.diff 1106227247 M * aba (and as that one was inside a tar-file, why not just add a signature to that tar file?) 1106227269 M * Bertl hmm, may I suggest to use the 1.9.4-rc2 for 2.6.10 or 2.6.11-rc1 ? 1106227342 M * aba ok. They are signed? 1106227430 M * aba Hm, where are these patches? I currently fail to see them. 1106227545 M * Bertl no they are not signed, but I can sign the md5 sums for you ... 1106227569 M * Bertl http://vserver.13thfloor.at/Experimental/RC-1.9.4/ 1106227592 M * aba would be great, if you can do ... 1106227738 J * rs rs@ice.aspic.com 1106227743 M * rs hi 1106227782 M * Bertl aba: http://vserver.13thfloor.at/Experimental/RC-1.9.4/md5.txt.asc 1106227786 M * Bertl welcome rs! 1106227808 M * aba thanks, Bertl 1106227848 M * Bertl you're welcome! 1106227877 M * Bertl rs: I fixed the issue from yesterday ... 1106227920 M * aba Bertl: Uh, your key is both expired and not signed by anybody else ... 1106227924 M * rs great! 1106227929 M * rs what was the problem ? 1106227962 M * Bertl aba: hmm, did I use the wrong one? 1106228024 M * Bertl rs: bug in loopback handling ... 1106228042 M * Bertl aba: did you check the keys on 13thfloor.at, are they the same? 1106228091 M * rs ok so I compile a .11-rc1 with ng8.9 to test it 1106228093 M * aba eh? That key is pub 1024D/4B1AE351 2003-11-02 Herbert Pötzl (Bertl) 1106228214 M * Bertl yep, expired 01.11.2004 ... well I guess I have to make a new one then ... 1106228393 J * weasel ~weasel@weasel.noc.oftc.net 1106228460 M * aba Bertl: you can just sign your key again to de-expiry it. 1106228474 M * Bertl ah, how does that work? 1106228476 M * aba (weasel knows more about that however) 1106228487 M * weasel gpg --edit 1106228489 M * aba Bertl: IIRc, that requires some low-level operations, but it works. 1106228489 M * weasel expire 1106228500 M * weasel (and for each subkey: key \nexpire) 1106228510 M * weasel aba: --edit is hardly low level 1106228518 M * weasel aba: if I tell you to vi the raw packets, that's low level :) 1106228519 M * aba weasel: it's too low for me. :) 1106228526 M * Bertl slowly ;) 1106228540 M * Bertl gpg --edit-key (I presume) 1106228558 M * Bertl but that wants an user-id? 1106228580 M * Bertl or maybe I should update my gpg software ... 1106228586 M * weasel your keyid, or any part of your uid, or anything else that identifies your key 1106228592 M * Bertl k 1106228594 M * weasel gpg --edit 94c09c7f for instance 1106228626 J * yarihm ~yarihm@80-218-3-55.dclient.hispeed.ch 1106228633 M * Bertl welcome yarihm! 1106228705 M * Bertl weasel: okay, tahnks that seems to have worked ... 1106228816 M * weasel and you can sign patches inline 1106228826 M * Bertl hmm, how so? 1106228855 M * Bertl ah, you mean with --clearsign 1106228856 M * weasel gpg --clearsign --not-dash-escaped < foo.diff 1106228860 M * weasel --not-dash-escaped 1106228860 M * weasel This option changes the behavior of cleartext signatures so 1106228861 M * weasel that they can be used for patch files. 1106228866 M * weasel together with --not-dash-escaped, yes 1106228901 M * yarihm hi Bertl 1106228915 M * yarihm hi weasel ... 1106228922 M * yarihm long not seen :) 1106228926 M * Bertl weasel, aba: okay, but the basic issue is, that I do not want to put the private key on the machines where the patches are ... 1106228939 M * aba which is a feature IMHO :=) 1106228968 M * Bertl and actually I would like to avoid to copy every patch twice ... 1106228979 M * Bertl any good solution for that? 1106229042 M * weasel download it to your private box, sign it, and rsync it back to the server again 1106229082 M * Bertl well, that's what I want to avoid ... 1106229097 M * _are_ sign on the server, if it is a trusted one :-) 1106229109 M * Bertl guess I'll keep signing the md5sums on request ... 1106229246 M * Bertl btw, how do I get the overview info (i.e. fingerprints and such) for a key? 1106229344 M * Bertl ah, found it, nevermind ... 1106229462 M * aba Bertl: I have a script for remote signing of debian packages where only md5sums are downloaded and signed. But that's done automatic. :) 1106229479 M * Bertl sounds good ... url? 1106229506 M * Bertl weasel: btw, gpg --fingerprint does still show the old expire date? 1106229582 M * weasel Bertl: please show me the output of 'gpg --with-colons --list-key ' 1106229623 M * aba Bertl: dpkg-sig, it's a debian package 1106229628 M * Bertl pub:u:1024:17:0D1B83CA4B1AE351:2003-11-02:2006-01-20::u:Herbert Pötzl (Bertl) ::scSC: 1106229631 M * Bertl sub:e:1024:16:9CDED6BBDCD75B9F:2003-11-02:2004-11-01:::::e: 1106229639 M * aba (and it's really _only_ for them, not a generic thing() 1106229643 M * weasel your primary key expires in 2006, your subkey expired in 2004. 1106229645 M * weasel Thu 14:41:40 (and for each subkey: key \nexpire) 1106229654 M * weasel you only extended your primary key's lifetime. 1106229664 M * Bertl hmm ... 1106229667 M * weasel you don't want to sign md5 checksums, you want to sign the real thing pretty please 1106229677 M * weasel Bertl: gpg --edit 0D1B83CA4B1AE351, key 1, expire. 1106229776 M * Bertl ok, that worked, thanks again ... 1106229866 Q * chrish01 Quit: Leaving 1106230436 M * Bertl aba: okay, I updated the md5.txt.ac ... 1106230481 M * Bertl ... and my key at 13thfloor.at, for the moment, I guess that is the best I can do ;) 1106230507 M * Bertl (and you can always check the source for evil stuff ;) 1106230626 M * weasel Bertl: btw, your website is pretty broken. 1106230630 M * weasel HEAD /vserver/s_release/v1.29/patch-2.4.27-vs1.29.diff.sign HTTP/1.1 1106230631 M * weasel host: www.13thfloor.at 1106230632 M * weasel 1106230633 M * weasel HTTP/1.1 200 OK 1106230640 M * weasel this should give me a 404, not a 200 OK 1106230723 M * Bertl hmm, right ... 1106230900 M * Bertl weasel: but I guess it's not define what scripts return when they do not understand the arguments ... 1106230907 M * weasel Bertl: also, it would be nice if your .diff files came with content-type text/plain rather than application/octet-stream 1106230935 M * Bertl add .asc 1106230997 M * aba Bertl: thanks. 1106231005 M * weasel weasel@galaxy:~$ diff patch-2.4.27-vs1.29.diff patch-2.4.27-vs1.29.diff.asc 1106231006 M * weasel weasel@galaxy:~$ 1106231039 M * weasel Bertl: that didn't quite work 1106231064 M * Bertl ahem? you must be kidding, right? 1106231069 M * weasel no. 1106231083 M * weasel the patch-2.4.27-vs1.29.diff.asc file is just the same as patch-2.4.27-vs1.29.diff 1106231094 M * Bertl you expect the content-type to be _in_ the patch file? 1106231094 M * Doener yeah, but different Content-Type 1106231105 M * weasel erm 1106231113 M * weasel I thought you were talking about the signing stuff. 1106231119 M * weasel because that's what .asc is usually 1106231124 M * weasel a detached armored signature. 1106231126 M * Bertl ah, oaky ... 1106231143 M * Bertl well, it would work, but where would be the benefit there ... 1106231155 M * Bertl (i.e. autosigning without any interaction on my side ;) 1106231166 M * Doener Bertl: but why is your .diff delivered as app/octet anyway? 1106231168 M * Bertl but you can get md5 sums this may ... 1106231187 M * Bertl Doener: to allow to download (instead of view) it 1106231191 M * weasel are the diffs created on the fly? 1106231196 M * rs Bertl: ping still not work 1106231205 M * weasel Bertl: that's a stupid argument, sorry. 1106231209 M * Bertl rs: which version now? 1106231213 M * weasel Bertl: a browser does allow downloading of text/plain files. 1106231221 M * rs 2.6.11-rc1-vs1.9.4-rc2-ng8.8-node 1106231227 M * Doener Bertl: what about Content-Disposition? 1106231265 M * Bertl weasel: yes, but by default text/plain is displayed ... 1106231273 M * weasel which is a good thing. 1106231283 M * weasel I can't even get the app/oct-stream get displayed. 1106231286 M * Bertl not for patch download IMHO, but YMMV 1106231297 M * weasel so you are actually taking away options 1106231308 M * Bertl no, there is the .asc ;) 1106231315 M * weasel not linked from anywhere. 1106231326 M * weasel (and .asc is for signature..) 1106231335 M * Bertl okay, what's for ascii then? 1106231384 M * weasel if you want, you could make it .txt, but I think that's wrong 1106231389 M * Bertl anyway, feel free to put up the patches in whatever form you consider appropriate ... 1106231412 M * Bertl (I'll do the same here ;) 1106231439 M * weasel you're missing the point. *shrugs* 1106231461 M * Bertl well, no, I guess _you_ are missing the point ;) 1106231472 M * weasel if you think so. 1106231574 M * Bertl rs: http://vserver.13thfloor.at/Experimental/NGNET/delta-ng8.8-ng8.9.diff 1106232061 M * meebey uh 2.4.29 released 1106232133 M * Bertl well, yes, yesterday ;) 1106232173 M * meebey yeah 1106232177 M * meebey closes 3 CANs 1106232198 M * meebey is there a diff for 1.29? 1106232209 M * meebey I would like to update my machines 1106232210 M * Bertl no, but ... http://vserver.13thfloor.at/Stuff/patch-2.4.29-vs1.2.10.diff 1106232218 M * meebey cool! 1106232220 M * meebey weee 1106232236 M * meebey Bertl: that makes a update much more useful :) 1106232264 M * meebey updating 2 things at the same time is better IMHO 1106232274 M * Bertl after updating, check the barrier, the rules have been relaxed 1106232283 M * meebey barrier? 1106232300 M * Bertl the chroot escape protection 1106232332 M * meebey aha 1106232335 M * meebey I will check 1106232360 M * meebey relaxed == less secure? 1106232363 M * meebey or relaxed == esier? 1106232366 M * meebey easier even 1106232429 M * Bertl same security, but the barrier code allows to change chmod 000 dirs back (unless they are a barrier) inside the vserver 1106232480 M * Bertl which might cause security issues if your 'barrier' is not a barrier but just a chmod 000 dir ... 1106232496 M * meebey hm I never understood that 000 thing 1106232510 M * Bertl (barrier = chmod 000 + iunlink for 2.4/1.2.x) 1106232521 M * meebey ups 1106232528 M * meebey I only got 000 1106232530 M * meebey no +i 1106232553 M * Bertl +i = immutable ( +t = iunlink ) 1106232565 M * meebey I read somewhere +i is not required anymore 1106232569 M * meebey only in older versions 1106232594 M * meebey sounds like I should check that carefully 1106232604 M * Bertl it's easy to verify ... 1106232644 M * meebey noooo! 1106232649 M * meebey meebey@bullfrog:~$ uptime 1106232649 M * meebey 15:50:36 up 166 days, 14:36, 1 user, load average: 0.26, 0.16, 0.10 1106232658 M * meebey meebey@bigpuma:~$ uptime 1106232658 M * meebey 15:50:40 up 227 days, 16:51, 1 user, load average: 0.00, 0.00, 0.00 1106232668 M * meebey I don't wanna reboot them, f**** 1106232695 M * meebey linux is getting worse like windows when it comes to rebooting because of updates 1106232703 M * meebey :( 1106232714 M * meebey uptime records was always the + of linux 1106232740 M * meebey only kernel updates need a reboot, and they happen so often since the last months 1106232806 M * meebey Linux bigpuma 2.4.26-1-686 #1 Sun May 2 18:33:36 CEST 2004 i686 unknown 1106232808 M * meebey hrm 1106232882 M * _are_ meebey: don't worry, there are bugs that will wraparound your uptime anyway 1106232910 M * meebey hm? bugs? 1106232912 M * _are_ are@init:~$ uptime 1106232912 M * _are_ 15:54:51 up 149 days, 17:36, 1 user, load average: 0.04, 0.23, 0.31 1106232912 M * _are_ are@init:~$ uname -a 1106232912 M * _are_ Linux init 2.2.19 #1 Sat Jun 9 13:04:06 EST 2001 i586 unknown 1106232921 M * meebey eeeks, 2.2 1106232932 M * _are_ 149 is lies, it has been booted on 2001-06-09 1106232948 M * meebey uptime overrun, thats normal, yeah 1106232979 M * meebey is that machine online? 1106232986 M * _are_ well, this box has the luck not to run any of the kernel services that have been exploitable since then 1106232992 M * _are_ yes, it is 1106233004 M * _are_ and ofc the software is up to date 1106233010 M * meebey did you test the exploits against it? 1106233029 M * _are_ almost all exploits are firewalling stuff and no firewalling code in kernel there 1106233046 M * _are_ actually the kernel does nothing at all. 1106233067 M * _are_ there is an DOS possible, I think, but that's it 1106233069 M * eyck then why do you need it? 1106233092 M * _are_ eyck: it is my mail and webserver, the kernel does nothing advanced, the machine does. 1106233135 M * meebey _are_: do you run netcraft against it? 1106233141 M * meebey _are_: it can track your uptime record 1106233149 M * eyck hmm, remove kernel if you don't need it 1106233150 M * _are_ nope 1106233158 M * _are_ eyck: yes, boot emacs directly ;) 1106233158 M * meebey _are_: whats the hostname 1106233197 M * _are_ meebey: is netcraft a service? 1106233204 M * meebey _are_: you dont know netcraft? 1106233209 M * meebey _are_: netcraft.com 1106233218 M * meebey its the monitor of the internet :) 1106233256 M * meebey http://uptime.netcraft.com/up/graph/?host=www.meebey.net 1106233257 M * meebey check that out 1106233261 M * meebey its an example 1106233288 M * daniel_hozac doesn't netcraft just poll the host every now and then? 1106233289 J * nish ~nish@220.224.54.45 1106233299 M * _are_ it just polls now and then. it seems 1106233316 M * meebey yes 1106233322 M * daniel_hozac leaving things like a reboot to upgrade the kernel unnoticed. 1106233345 M * meebey daniel_hozac: afaik it uses the timestamp in TCP packets 1106233352 M * meebey daniel_hozac: it knows when it rebooted 1106233358 M * meebey linux got that timestamp I think 1106233400 M * _are_ http://uptime.netcraft.com/up/graph/?host=www.lihas.de 1106233404 M * _are_ no uptime avaliable 1106233422 M * meebey http://uptime.netcraft.com/up/accuracy.html#whichos 1106233438 M * meebey _are_: you need an amount of probes 1106233451 M * meebey _are_: query your server every week and it will get a graph 1106233512 M * _are_ i will forget to query it every week 1106233541 M * _are_ i am no uptime junkie, on this machine there has just not been a necessity to reboot and for some unknown reason the hardware is stable. 1106233548 M * _are_ I have the box to replace it here for ages 1106233570 M * _are_ the current one is an amd k6 300 with 128MB ram and 4GB scsi disk. 1106233578 M * meebey _are_: cron does the job pretty good with wget 1106233585 M * _are_ meebey: i know 1106233625 M * _are_ a well, guess I can afford the traffic ;) 1106233751 M * meebey http://admin.qnetp.net/cgi-bin/bigpuma/mrtg-rrd.cgi/ 1106233760 M * meebey I am tracking uptime myself via SNMP fun 1106233830 M * _are_ i mostly track my services avaliability, broken samba/cups/mail occurs by far more often than a real downtime. nagios helps and fixes it, though. 1106233830 M * meebey Bertl: I am still not sure if I should patch all servers with vserver support, like dedicated routers 1106233838 M * meebey Bertl: but they run sometimes snmpd and other daemons 1106233851 M * meebey _are_: yeah nagios is nice 1106233872 M * Bertl meebey: well, if you do not need vserver support, why would you patch it in? 1106233877 M * meebey _are_: http://www.meebey.net/temp/gsd-net2.png 1106233883 M * meebey _are_: the network of the company 1106233898 M * meebey Bertl: for the just-in-case scenerio maybe 1106233906 M * aba Bertl: one never knows, and having a single kernel source also has advantages. 1106233910 M * meebey Bertl: if a server fails... 1106233922 M * meebey hi aba! 1106233926 M * aba Hi meebey 1106233927 M * meebey didn't know you are here :) 1106233934 M * aba same for you :) 1106233937 M * _are_ meebey: so you actually doid the work and link the servers together with layout info? ;) 1106233964 M * meebey aba: I am here a permanent user :-P 1106233972 A * aba not 1106233992 M * meebey _are_: layout info? 1106233995 M * aba (at least I'm here for the first time :) 1106234007 M * _are_ meebey: for the hosts to display in the right tree 1106234015 M * meebey _are_: if you feed nagios enough it can generate such trees by itself 1106234030 M * _are_ meebey: yes, I know, but you *have* to feed enough 1106234037 M * _are_ and I tend not to do that :-> 1106234039 M * meebey _are_: I used balanced tree 1106234058 M * meebey aba: hehe 1106234080 Q * nish Ping timeout: 480 seconds 1106234091 M * meebey aba: the servers at work are heavy vserver based 1106234111 M * meebey aba: since then I am idling here and ask from time to time dumb questions and so on 1106234148 M * meebey I was brought to vserver by panther_1 btw :) 1106234151 M * meebey the freenet man 1106234153 M * aba meebey: I'm just starting with a vserver-based server. This will definitly be an interessting experience for me. 1106234166 M * meebey aba: nice to hear 1106234180 M * _are_ anyway, driving home, cu later 1106234182 Q * _are_ Quit: Disconnecting 1106234190 M * aba meebey: especially as I'm going to run a buildd on one of the vservers, means: need be able to chroot often there. 1106234218 M * meebey ic 1106234258 M * meebey aba: those guys here are very friendly and very helpful too :) 1106234281 J * nish ~nish@220.224.54.141 1106234311 M * meebey without their support I could not run openswan in a vserver for instace :-P 1106234395 M * aba meebey: is that now integrated into upstream? 1106234478 M * aba And, any progress on the ipv6 status? :P 1106234501 M * Bertl ipv6 status of? 1106234528 M * aba of vserver. I read that vserver doesn't support that till now (or is the webpage outdated?). 1106234564 M * meebey aba: I don't know if Berl integrated the patch, he was going to think about it 1106234655 M * Bertl the 'allow' ipv6 on the host is in for some time 1106234680 M * Bertl and once ngnet is working as expected, you'll have ipv6 inside vservers too 1106234688 M * aba Bertl: great. Than just documentation is out of date. 1106234762 M * Bertl I assume documentation on the wiki ... 1106234963 M * Bertl rs: are you still around? 1106235055 M * meebey aba: that buildd, will it be an official debian buildd? 1106235069 M * aba meebey: define "official" :P 1106235084 M * meebey aba: builds packages that go into the debian archive 1106235090 M * aba in that sense, yes. 1106235095 M * meebey aba: nice 1106235108 M * aba (experimental packages, woody-volatile and some others) 1106235120 M * meebey ah cool 1106235134 M * meebey volatile I think is a great step forward 1106235168 M * Bertl volatile? 1106235188 M * aba volatile.debian.net 1106235309 Q * mbucc Read error: Connection reset by peer 1106235324 M * meebey aba: has ubuntu something like that? 1106235334 M * aba meebey: no. They release more often. 1106235349 M * meebey aba: so different release policy, ic 1106235368 M * aba frankly speaking, sarge should be out of the door for at least 9 months 1106235371 M * xmb anyone with an idea why 2x2.66GHz / 512k xeon procs on a dual asus mobo run at 1063MHz since ever? 1106235389 M * meebey I know the "release fast, release often" thing, but I don't believe in it 1106235406 M * Bertl meebey: thanks :P 1106235411 M * meebey xmb: did you try different kernels, OS? 1106235416 M * meebey Bertl: hu? 1106235428 M * xmb 2.6.8-1-686-smp debian currently 1106235441 M * xmb other kernels been around as the time goes by, not my machine, still same 1106235447 M * xmb bios shows nothing, he says 1106235455 M * meebey xmb: try 2.4 kernel, could be hardware problem 1106235459 M * meebey xmb: if all OSs do the same 1106235494 M * meebey Bertl: did I saw something wrong, or why did you say thanks 1106235497 M * meebey s/saw/say/ 1106235524 M * Bertl for the "release fast, release often" part ... 1106235536 A * aba doesn't want to comment on that 1106235551 M * xmb told him, he'll try soon somewhen 1106235606 M * Bertl meebey: next time you'll have to wait for your patch ;) 1106235627 M * xmb the bios already shows it as 1GHz, so doubt 2.4 would work 1106235639 M * meebey Bertl: lol 1106235650 J * mbucc ~konversat@host-216-153-147-194.spr.choiceone.net 1106235669 M * meebey Bertl: often and fast are very relative, you know 1106235830 M * xmb no bus speed settings in the bios, maybe per jumper.. multiplier should be 20 1106235966 M * meebey check that stuff 1106235971 M * meebey could be also wrong memory 1106235979 M * meebey you need probably 400mhz DDR 1106236015 M * meebey I bet those 2,66 run at FSB800 1106236016 M * meebey right? 1106236031 M * meebey then you need 400mhz DDR ram, if not it cant run at full speed 1106236186 M * Mega\work azz 1106236315 M * Mega\work i had rebuilded the kernel.......but when the system run vserver samba and the daemon samba, linux stop and i must reset pc! 1106236318 M * Mega\work :((( 1106236343 M * Mega\work Someone use ldap+samba in two separate vserver? 1106236526 M * meebey Mega\work: I have ldap in a vserver but not samba 1106236596 M * meebey Bertl: hu? I just found 1.2.10 is not official released? 1106236645 M * Bertl yep, didn't get around doing so yet ... 1106236650 M * meebey k 1106236692 M * meebey Bertl: I know that releasing is a lot of work 1106236709 M * meebey Bertl: must be done very careful with tests etc... 1106236729 M * meebey and last minute changes :) 1106236787 M * Bertl yes, especially the last minute changes ... 1106236808 M * Bertl consider it an -rc1 1106236816 M * meebey :) 1106236824 M * meebey I will try it now 1106236830 M * meebey on 2 home serves 1106236853 M * meebey security has higher priority than uptime 1106237220 Q * lilo Quit: bbiab 1106237574 M * rs re 1106237673 M * rs Bertl: hmm still don't work with 8.9 1106237700 M * Mega\work meebey: in ldap vserver, with the command "getent group" you view all system group + ldap group? 1106237716 M * Bertl rs: ping to local ip or remote? 1106237741 M * rs both 1106237780 M * rs I tried with my self IP and with the router IP 1106237794 M * rs ping to localhost works 1106237863 M * Bertl hmm, ping to the own IPs works fine here ... 1106237895 M * Bertl (basically with your setup script) 1106237922 M * rs strange 1106238000 M * Mega\work Jan 20 17:23:18 ldap slapd[653]: warning: cannot open /etc/hosts.allow: Too many open files 1106238001 M * Mega\work Jan 20 17:23:18 ldap slapd[653]: daemon: accept(6) failed errno=24 (Too many open files) 1106238645 M * Bertl hmm, too many open files I guess ... 1106239126 M * pulsar Can I add fake capabilities to VPS ? pure-ftpd want to drop capabilities, but first it want to catch all of its ... 1106239173 M * Bertl hehe, actually we are working on something like this, but for now, not really, better change the broken daemon 1106239960 Q * pulsar Ping timeout: 480 seconds 1106239994 M * Bertl rs: okay, issue identified and fixed ... expect patch in a minute 1106240023 M * Mega\work caos 1106240137 M * aba Hm, is there a "cheap" possibility to share e.g. home partitions between different vservers, either read-only for some of them, or r/w? 1106240162 M * Bertl you can --bind (or --rbind) mount them into the vserver pathes 1106240193 M * rs cool 1106240230 M * aba Bertl: and --bind works with the different contextIDs on files? 1106240257 M * Bertl if the filesystem being bind mounted does not have xid tagging enabled, then yes 1106240277 M * Bertl there is also an 'experimental' feature allowing xid= mounts ... 1106240312 M * Bertl rs: http://vserver.13thfloor.at/Experimental/NGNET/delta-ng8.9-ng8.10.diff 1106240330 M * Bertl aba: but it's a little trickier to get that right with the different namespaces ... 1106240347 M * aba Hm. And mount --bind is still writeable afterwards ... 1106240399 M * aba (and how do I enable xid tagging? "just" as an option to mount? 1106240538 M * Bertl aba: yes, without the BME stuff, it will be rw/ro like the original path 1106240583 M * aba ok. 1106240897 M * aba Another question: What do I do wrong if I get "vserver-stat: unable to switch in context security #1" after running vservers-stat within a vserver-enabled kernel? 1106240962 M * Bertl sounds like something isn't quite the way you expect ... I'd say the kernel doesn't support the syscall ... 1106240977 M * Bertl please check with the following script ... 1106240981 M * aba that's what I fear. How to debug that? :) 1106240995 M * Bertl http://vserver.13thfloor.at/Stuff/SCRIPT/testme.sh 1106241003 M * aba thanks 1106241084 J * monrad ~monrad@213083190130.sonofon.dk 1106241100 M * aba Bertl: pretty much everything fails with that ... 1106241201 M * Bertl so, did you patch your kernel? 1106241202 M * aba it start's with a: Can't set the new security context 1106241205 M * aba yes, I did. 1106241218 M * Bertl did you install and boot it? 1106241221 M * aba yes. 1106241228 M * aba 2.6.10-vs1.9.4-rc2 1106241234 M * Bertl cat /proc/virtual/info 1106241235 M * aba that version pretty much hints into that :) 1106241242 M * Bertl (on the host does?) 1106241250 M * aba VCIVersion: 0001:0025 1106241250 M * aba VCISyscall: 257 1106241261 M * Bertl looks good, 257? non x86 hardware 1106241266 M * aba ppc 1106241285 M * Bertl hmm ... 32bit? 1106241286 M * aba (don't even assume that I do easy things :) 1106241288 M * aba yes. 1106241295 M * Bertl both kernel and userspace? 1106241313 M * aba userspace: definitly. kernel: AFAIK, but I can check ... 1106241386 M * Bertl I did check on ppc some time ago ... but not recently so, it might be that something got broken there ... 1106241447 M * Bertl aba: if you got time, let's try to fix it, unlikely it's a big deal ... 1106241449 M * aba is there a way how I could start checking that up? 1106241456 M * aba I have time for that, yes. 1106241461 M * Bertl excellent! 1106241479 M * Bertl okay, first, check if the tools use 257 as syscall entry 1106241482 M * aba and - I didn't patch an upstream kernel, but a debian-patched one. Might also do a difference. 1106241494 M * aba how do I check that? strace them? 1106241499 M * Bertl hmm, yeah, might be the case ... 1106241515 M * Bertl aba: use vserver-info 1106241533 M * Bertl should list something like: 1106241533 M * Bertl vserver(2) syscall#: 273/default 1106241543 M * Bertl (of course 257 in your case) 1106241552 M * aba you mean this line: SYS_273(0, 0x3f, 0, 0x4, 0xff4dbe0) = -1 ENOSYS (Function not implemented) 1106241561 M * Bertl yep, that's wrong ... 1106241563 M * aba (no vserver-info here) 1106241571 M * aba that was from vserver-stat. 1106241572 M * Bertl hmm, old/outdated tools? 1106241576 M * aba might be, yes. 1106241592 M * Bertl get util-vserver 0.30.196 1106241612 A * aba has 0.30-10 1106241623 M * Bertl the old tools do not support other arch than x86 1106241639 M * Bertl don't know what the debian versions include (or not) 1106241655 M * aba ok. I'll check that ... 1106241918 J * _are_ ~are@dsl-084-056-157-118.arcor-ip.net 1106241924 M * Bertl wb _are_! 1106241945 M * aba ok, where are these tools? I don't see the link from the web page ... 1106241993 M * Bertl http://www.tu-chemnitz.de/~ensc/util-vserver/alpha/ 1106241997 M * _are_ hi 1106242016 M * Bertl aba: here is some docu: http://linux-vserver.org/alpha+util-vserver 1106242112 M * nish lll 1106242186 M * aba thanks 1106242188 M * nish how do you install multiple versions of linux on the same computer.. i tried it and GRUB was giving some problems 1106242232 M * Bertl what problems? 1106242236 Q * prae Quit: leaving 1106242260 M * nish dude it doesnt show the other versions on Linux installed 1106242299 M * nish shows Windows option and doesnt load windows on selection 1106242299 M * Bertl well, did you configure it properly? 1106242382 M * nish configure what ??? 1106242388 M * Bertl grub of course! 1106242408 M * Bertl it has a config file, located in /boot/grub/ called menu.lst 1106242422 M * Bertl and the grub will do what you write/put there ... 1106242436 M * nish just a sec 1106242485 M * nish you are basically talking about grub.conf rite ?? 1106242552 M * _are_ menu.lst 1106242583 M * nish whats the difference between the two ?? 1106242605 M * _are_ i have no grup.conf 1106242616 M * _are_ and all manuals I know talk about menu.lst 1106242624 M * nish check /etc/grub.conf 1106242671 M * _are_ $LANG=C ls /etc/grub.conf 1106242672 M * _are_ ls: /etc/grub.conf: No such file or directory 1106242687 M * _are_ might be a special thing of your distribution 1106242698 M * nish what linux are you using ?? 1106242702 J * narender1983_ait ~root@220.224.54.141 1106242725 M * _are_ debian woody, sarge and sid. and I have not seen a grub.conf on SuSE, either 1106242730 M * nish I use Fedora, Redhat 7.3, Redhat 9.0, 8.0 1106242765 M * nish havent you used any distribution of Redhat ?? 1106242773 M * aba Bertl: if the configure script says: "checking for number of syscall 'vserver'... 273/default" - is that a bad sign? 1106242799 M * narender1983_ait hi dude 1106242807 M * nish hey narender1983_ait 1106242814 M * nish kaisa hai ?? 1106242818 M * _are_ nish: not since 7.x, afaik 1106242820 M * narender1983_ait aur kaisa hai? 1106242829 M * nish changaa 1106242836 M * nish afaik ??!! 1106242839 M * nish _are_ 1106242845 M * Bertl aba: yes 1106242861 M * aba Bertl: ok. May I cite you? :) 1106242874 M * _are_ nish: I offer support for linux distributions, no matter what brand, last time someone asked for a redhat had been 7.x, I think. 1106242880 M * aba Bertl: with recompiling debians utils on my machine with a kernel, it works .. 1106242923 M * _are_ have a few customers using mandrake, but had not to adjust boot stuff there so far 1106242970 M * nish _are_ : Thanks dude... but can I generalize this statement to all versions of Linux "configuration of grub can be done thru /boot/menu.lst" 1106242998 M * _are_ nish: 15m ago I would have clearly stated 'yes' 1106243055 M * _are_ a quick google states: grub.conf is redhats way of doing a menu.lst, the syntax is the same 1106243056 Q * v00dY Read error: Operation timed out 1106243091 M * nish thanx _are_ 1106243115 M * meebey aba: problem is then the precompiled binary 1106243129 M * meebey aba: the debian kernel of the buildd was different than yours 1106243185 M * Bertl aba: good! 1106243206 M * Mega\work meebey: you have ldap right? 1106243224 M * meebey typical problem when userspace tools are kernel dependend 1106243241 M * meebey Mega\work: yes 1106243244 M * aba meebey: Agreed. 1106243249 M * Mega\work What's distribution do you use? 1106243251 M * aba meebey: I just submitted an rc-bug. 1106243256 M * meebey Mega\work: I do not use it for passwd auth though 1106243262 M * meebey aba: k 1106243265 M * Mega\work I've debian 1106243270 M * meebey Mega\work: me too 1106243316 M * aba Mega\work: I also 1106243339 M * Mega\work i've configured ldap but with command getent group or getent passwd i've only local users and groups 1106243343 M * Mega\work why? 1106243362 M * Mega\work i have modified pam_ldap.conf file 1106243362 J * mbucc_ ~konversat@host-216-153-147-194.spr.choiceone.net 1106243370 M * Mega\work slapd.conf 1106243372 M * Mega\work ldap.conf 1106243394 M * Mega\work common-account common-password 1106243402 M * Mega\work common-auth common-session 1106243452 M * _are_ Mega\work: you adjusted /etc/nsswitch.conf? 1106243459 M * Mega\work I must modify another config file? 1106243467 M * aba Mega\work: use nsswitch instead of pam. 1106243470 Q * mbucc Ping timeout: 480 seconds 1106243486 M * _are_ pam is only authentication, libnss is the name resolution you look for 1106243629 M * Mega\work _are_: I have modified also that one 1106243712 M * Mega\work _are_:what file you have modified? 1106243764 M * Mega\work do you remember? 1106243780 M * _are_ ofc, did it 20 times this week, 1/vserver ;) 1106243792 M * _are_ do you run nscd? 1106243870 M * Mega\work yes 1106243888 M * _are_ killit (for now) 1106243911 M * _are_ it caches answers, so when you change something and ask again, you get the old answer. :-> 1106243966 M * _are_ and does 'ls /lib/libnss_ldap* 1106243967 M * _are_ ' give any result? 1106244059 J * mcp ~hightower@81.17.110.148 1106244062 M * Mega\work yes 1106244070 M * _are_ ok 1106244079 M * Mega\work uhm 1106244086 M * Mega\work one moment please 1106244179 M * Mega\work i've removed nscd 1106244181 M * Mega\work :D 1106244223 M * _are_ removed? ah well, for not it is ok, later you want nscd to chache your ldap queries on loaded servers at least 1106244260 M * Mega\work _are_: you have modified common-account common-password common-auth common-session 1106244261 M * meebey aba: nscd is a buzzword for alioth :-P 1106244282 M * _are_ Mega\work: we don't care about pam till we get the userlist 1106244283 M * Mega\work i don't want cache! 1106244287 M * aba meebey: alioth is just moving to costa. And it's no ldap anymore there ... 1106244302 M * meebey aba: btw I think nobody payed attention to my findings 1106244309 M * meebey aba: I wrote an email to the admin 1106244337 M * _are_ meebey: when I encounter any problems on a linux box and nscd runs, I kill it. If there are still problems, I investigate further. I rarely have to investigate further. 1106244355 M * aba meebey: which findings? (sorry, I'm out-of-sync now) 1106244358 M * meebey aba: I found a possible sign for a harware problem 1106244359 M * _are_ Mega\work: with nscd gone, does getent passwd give all users? 1106244365 M * aba meebey: ah. Ok, thanks. 1106244381 M * meebey aba: but I got no response about that, ever 1106244395 M * aba meebey: consider to join #alioth on oftc. 1106244405 M * meebey aba: I did and reported it 1106244409 M * meebey aba: no idea of someone read it 1106244415 M * meebey aba: joey said I should email taggart, I did 1106244416 M * meebey From: Mirco Bauer 1106244416 M * meebey To: taggart@debian.org 1106244416 M * meebey Subject: Strange things on Alioth 1106244417 M * meebey Date: Sun, 12 Dec 2004 16:51:37 +0100 1106244420 M * _are_ alioth, sunds familiar, this si amd64/debian stuff? 1106244420 M * meebey no reply 1106244431 M * aba _are_: alioth is debian *forge. 1106244439 M * _are_ ahhh 1106244442 M * meebey aba: aba@debian.org? 1106244443 M * Mega\work _are_: gatent passwd retrive only local user 1106244453 M * meebey aba: I can forward it to you 1106244460 M * meebey aba: at least _you_ are alive 1106244495 M * aba meebey: aba@not.so.argh.org - but won't help you, I'm _not_ an debian admin, nor something else. 1106244497 M * _are_ Mega\work: ok, have you tried querying the ldap server with ldapsearch? 1106244522 M * aba meebey: join #alioth, and prod wiggy or Lo-Lan-Do. 1106244537 M * _are_ or, if we don't go that far already: you have something in /etc/nsswitch.conf like: 1106244540 M * meebey aba: still I wanna let you know 1106244541 M * _are_ passwd: compat ldap 1106244542 M * _are_ group: compat ldap 1106244542 M * _are_ shadow: compat ldap 1106244543 M * Mega\work _are_:can i tell you in query? 1106244550 M * aba meebey: well, just send mail than ... 1106244550 M * Mega\work i use 1106244560 M * _are_ Mega\work: ofc, I don't see me blocking queries. ;) 1106244563 M * Mega\work files ldap 1106244573 M * meebey aba: sent 1106244582 M * Mega\work ok 1106244598 M * Mega\work then 1106244600 M * meebey aba: its about processor/vmstat/nscd 1106244642 M * Mega\work ldapsearch retrives all ldap database entry 1106244651 M * meebey aba: thats how I remeber that email, I forgot already about it 1106244655 Q * mbucc_ Ping timeout: 480 seconds 1106244688 M * _are_ Mega\work: ok, the what is the content of /etc/libnss-ldap.conf? 1106244798 M * Mega\work host 127.0.0.1 1106244808 M * Mega\work base dc=domain,dc=net 1106244819 M * Mega\work uri ldap://127.0.0.1/ 1106244833 M * Mega\work ldap_version 3 1106244836 M * _are_ lalala 1106244852 M * _are_ as i doubt your base dn is dc=domain,dc=net.... 1106244852 M * Mega\work ecc 1106244870 M * Mega\work in another, not domain.net :D 1106244872 M * Mega\work az 1106244874 M * _are_ and as we are in #vserver probably your ldap is not on 127.0.0.1, either... ;) 1106244905 M * Mega\work uhm........i use the ip of vserver? 1106244913 M * Mega\work i must go out 1106244920 M * Mega\work I return it from my home 1106244939 M * _are_ these should be enough (with adjusted dn/host): 1106244945 M * _are_ base dc=bdu,dc=loc 1106244945 M * _are_ ldap_version 3 1106244945 M * _are_ rootbinddn cn=admin,dc=bdu,dc=loc 1106244945 M * _are_ pam_filter objectclass=account 1106244945 M * _are_ pam_login_attribute uid 1106244964 M * Mega\work uhm...... 1106244970 M * Mega\work olnly this line? 1106244991 M * _are_ these 5 lines, ofc with your dn instead and your ldap server host instead 1106244999 M * Mega\work :D 1106245091 J * v00dY v00dy@62.241.52.143 1106245126 M * Bertl welcome v00dY! 1106245155 M * meebey Bertl: you must have a script for that :-P 1106245195 M * Bertl yeah? 1106245220 M * Bertl meebey: well, I can tell you, it's all wetware here ;) 1106245253 M * meebey Bertl: /lastlog welcome shows me you saying alot "welcome $nick!" 1106245272 Q * Mega\work Remote host closed the connection 1106245290 M * Bertl yes, because morning and evening is not really appropriate for all timezones ;) 1106245296 M * _are_ :-> 1106245305 M * meebey hehe 1106245358 M * Bertl but if it really concerns you, what greeting would you accept to pass (your) touring test? 1106245365 M * daniel_hozac morning is *always* appropriate ;) 1106245379 M * Bertl s/touring/turing/ 1106245395 M * Bertl *sorry alan* 1106245892 M * nish Bertl: myself is in differnet time zone,its 2300hrs here :-) 1106245933 M * Bertl hmm, that is indeed interesting ;) 1106245967 Q * flock Remote host closed the connection 1106245992 M * nish khee khee 1106246103 M * Mega|away re 1106246107 N * Mega|away Megabart 1106246230 M * Megabart _are_: you are here? 1106246244 M * Megabart _are_: are you here? 1106246245 M * Megabart :D 1106246274 M * Megabart Bertl: good evening 1106246277 M * Megabart :) 1106246283 M * Megabart good evening ALL! 1106246478 M * _are_ Megabart: yes 1106246627 M * Bertl evening Megabart! 1106246736 N * virtuoso_ virtuoso 1106246740 M * virtuoso Hi Bert! 1106246760 M * Bertl hey virtuoso! 1106246769 M * virtuoso How's it going? 1106246791 M * Bertl fine, thanks! ... 1106246802 M * Bertl off for dinner now ... back later ... 1106246807 N * Bertl Bertl_oO 1106246950 Q * serving Ping timeout: 480 seconds 1106247033 J * ntrs ntrs@68.188.50.87 1106247042 J * flock ~restless@l192-117-111-12.broadband.actcom.net.il 1106247082 J * prae ~prae@sherpadown.net 1106247192 M * Megabart bood 1106247194 M * Megabart good 1106247457 M * Megabart _are_: this is my nsswitch.conf 1106247459 M * Megabart passwd: files ldap 1106247460 M * Megabart group: files ldap 1106247460 M * Megabart shadow: files ldap 1106247488 M * Megabart and, i have modified libnss-ldap.conf 1106247523 M * Megabart I must modify pam_ldap.conf? 1106247555 M * _are_ Megabart: well, if getent passwd gives the ldap users we can go on to pam. 1106247558 M * _are_ does it? 1106247561 Q * yarihm Quit: Leaving 1106247606 M * Megabart uhm.......one moment, i've restart the ldap vserver :D 1106247606 Q * sannes Read error: Connection reset by peer 1106247617 M * _are_ :-> 1106247664 M * Megabart no 1106247735 M * Megabart lisa:/# ldapsearch -x "ou=prova" 1106247736 M * Megabart ldap_bind: Can't contact LDAP server (81) 1106247740 M * Megabart uff 1106247742 M * Megabart another problem 1106247745 M * Megabart :/ 1106247790 M * _are_ Megabart: give the hostname 1106248018 M * Megabart ok..... 1106248338 Q * rs Quit: home 1106248439 M * Snow-Man Anyone have any suggestions/thoughts on how to set up a bunch of vservers using the same files (hard-link'd/immutable)? 1106248452 M * Snow-Man I thought vapt-get did this, but apparently not.. 1106248478 M * Snow-Man Bertl_oO: Don't suppose you have any thoughts on this? 1106248551 M * _are_ Snow-Man: vunify should do this for you after they are created 1106248615 M * Snow-Man _are_: oh? hmmm. 1106248648 M * _are_ 18:27 aba: here is some docu: http://linux-vserver.org/alpha+util-vserver 1106248656 M * _are_ check the part about unifying 1106248678 M * _are_ oh, I assume you use new config format as I do so and am completly ignorant towards old config :-) 1106248696 M * Snow-Man yes. :) 1106249019 M * Snow-Man _are_: What about files that are different per vserver? 1106249086 M * Snow-Man Should I just make sure to remove them from the 'reference' vserver or whatever? 1106249452 M * _are_ uhm, erm, no idea :-) 1106249508 M * Megabart uff 1106249538 M * _are_ Snow-Man: I know unification exists, I have no idea how the tools do it. I'd expoect it to only unify the files that are the same ones indeed 1106249539 M * Megabart _are_:the getent passwd get me all local user 1106249551 M * Snow-Man _are_: hmmmm, ok. 1106249586 M * _are_ Megabart: can you get the ldap database with ldapsearch from the host you try and access the ldap with libnss, too? 1106249616 M * _are_ Megabart: and in that case: do attributes 'uid' exist that contain the login names? 1106249646 M * Megabart _are_: i try to get the ldap database entry from vserver but not from host 1106249678 M * Megabart How can i access to ldap with libnss? 1106249688 M * _are_ Megabart: sorry, I thik I don't get it. I assume your ldap server is in one vserver and you try and access it from another vserver? 1106249701 M * Megabart yes 1106249727 M * _are_ now you are in the vserver that you want to get users from ldap 1106249730 M * Megabart i have used phpldapadmin 1106249750 M * Megabart in another vserver 1106249770 M * Megabart and i have all entry from database 1106249779 Q * SiD3WiNDR Ping timeout: 480 seconds 1106249809 M * _are_ what is your base dn? and the IP of your ldapserver? 1106249820 M * Megabart one moment 1106249827 M * Megabart the ip is a local ip 1106249853 M * _are_ well, I want it to generate the ldapsearch line to make sure we speak of the same stuff 1106249881 M * _are_ no matter if local, public, illigal, as long as you can reach your ldap server there from within the host you want to have ldap-users in 1106249968 M * _are_ basically, in the host you want to have ldap-users in, try if ldapsearch -d 'your,base,dn' -x -h ip.of.your.ldapserver '(objectclass=*)' works 1106250084 M * aba Ok, I seem to need other help. How do I mount the /proc in context 1? 1106250085 J * SiD3WiNDR luser@bastard-operator.from-hell.be 1106250126 M * _are_ aba: I'd assume vnamespace -e 1 mount /proc 1106250181 M * _are_ on the other hand, this doesn't work here :-> 1106250183 M * aba _are_: I don't have vnamespace ... 1106250210 N * Bertl_oO Bertl 1106250236 M * aba or to be more correct, my real problem is: /usr/sbin/chcontext --ctx 1 /usr/sbin/vps gives: 1106250244 M * aba New security context is 1 1106250244 M * aba Error: /proc must be mounted 1106250256 M * _are_ erm, why chcontext for vps? 1106250258 M * aba however, that is required to work for some tools like vserver start ... 1106250265 M * Bertl see proc security for details .. the tools are just wrong here ... 1106250269 M * aba _are_: because vserver start uses it internally. 1106250275 M * Bertl (i.e. ps doesn't know better ...) 1106250338 M * Bertl http://linux-vserver.org/Proc-Security 1106250342 M * _are_ based on this comment of Bertl I'd just call vprocunhide, or am I misleaded? 1106250342 M * aba Bertl: Hm. neither setattr nor vprocunide exists here. 1106250355 M * Bertl well, they are part of util-vserver ... 1106250376 M * _are_ aba: /usr/lib/util-vserver/vprocunhide 1106250408 M * aba not here. Indicates that my utils-vserver are too old? 1106250410 M * _are_ id has not been stuffed in my $PATH here by the install routine 1106250431 M * Bertl aba: probably ... 1106250470 M * Megabart YESSSSSSSSSSSSSSSSSSSSSSSSSSS 1106250475 M * Megabart YESYESYESYES 1106250487 M * Bertl sounds promising ;) 1106250488 A * _are_ assumes megabart found his ldap users :-) 1106250499 M * Megabart dehihihihio 1106250503 M * _are_ what has been the solution? 1106250535 M * Megabart _are_: the ldap database first...... 1106250544 M * Megabart and the ldap conf 1106250549 M * Megabart good 1106250575 M * Megabart if i want to autenticate the user that want to connect at sshd 1106250605 M * Megabart i must modify the ssh file in /etc/pam.d directory? 1106250626 M * _are_ yes, if it should only be ssh 1106250663 M * Megabart only /etc/pam.d/ssh i must modify? 1106250681 M * Megabart only /etc/pam.d/ssh i must to modify? 1106250683 M * _are_ basically, wherever you find pam_unix in it, change it saying pam_ldap instead. to only log in via ldap 1106250694 M * Megabart yes 1106250696 M * _are_ if it includes files, you have to change them instead 1106250720 M * _are_ if you want both, it is a bit more advanced as you have allow one of them to fail and use the other afterwards 1106250809 M * Megabart uhm.......why getent passwd read the user from ldap and getent group don't read from ldap? 1106250828 M * _are_ probably wrong classes/ou there? 1106250853 M * _are_ check the # lines in /etc/libnss_ldap.conf to see the default attriutes they check 1106250892 M * _are_ and ofc make sure /etc/nsswitch.conf has group: ... ldap 1106250921 M * Megabart the nsswitch is ok 1106251387 Q * mhepp Quit: mhepp caught signal: Autobus error 1106251584 Q * narender1983_ait Quit: Leaving 1106252358 J * root_ ~nish@220.224.43.238 1106252604 Q * eyck Remote host closed the connection 1106252715 Q * nish Ping timeout: 480 seconds 1106252877 J * mbucc ~konversat@host-216-153-147-194.spr.choiceone.net 1106253344 M * Bertl k, back later ... 1106253348 N * Bertl Bertl_oO 1106253523 J * sannes ~ace@home.skarby.no 1106253635 M * sannes :) 1106253685 J * serving ~serving@213.186.191.158 1106254094 M * meebey erm 1106254104 M * meebey Bertl_oO: your path has 1.29 as version 1106254112 M * meebey Bertl_oO: patch I mean 1106254968 J * nayco ~nayco@lns-vlq-47-nan-82-252-240-43.adsl.proxad.net 1106255004 M * nayco 'llo all !!! 1106255071 M * mugwump hi! 1106255451 J * eyck eyck@81.219.64.71 1106255543 P * mbucc Konversation terminated! 1106255589 M * nayco I need someone to try a mandrake vserver image... 1106255605 M * nayco it's a minimal 10.1 official 1106255635 M * nayco All is needed is untar in a vserver, edit /etc/resolv.conf, and launch ! 1106255790 P * root_ Leaving 1106255791 J * root_ ~nish@220.224.43.238 1106255962 M * nayco no one interrested ? 1106256061 M * aba Hm. The more current util-vservers don't know my already existing vserver any more. Error is: "WARNING: can not find configuration, assuming legacy method" and "No directory for this vserver: /var/lib/vservers/metis". 1106256103 M * meebey aba: you got the /etc/vservers/$vservername? 1106256111 Q * root_ Quit: Leaving 1106256114 M * nayco Hello ! => that's because the configuration files's organization changed.... 1106256115 M * meebey aba: maybe you mispelled it :-P 1106256125 M * aba meebey: I have /etc/vservers/metis.conf 1106256137 M * meebey aba: and /var/lib/vservers/metis? 1106256140 M * aba nayco: I excect that, yes. But - how do I migrate? 1106256143 M * aba meebey: no. 1106256152 M * meebey aba: where is your vserver? 1106256159 J * nish ~nish@220.224.43.238 1106256161 M * aba meebey: you mean: my root? /vservers 1106256171 M * meebey aba: change /etc/vserver/util-vservers 1106256186 M * meebey bullfrog:/usr/src# cat /etc/vservers/util-vserver-vars 1106256187 M * meebey PKGLIBDIR='/usr/lib/util-vserver' 1106256187 M * meebey SBINDIR='/usr/sbin' 1106256187 M * meebey VROOTDIR='/vservers' 1106256195 M * meebey aba: that one 1106256203 M * aba Hm, should VROOTDIR='/vservers' 1106256210 M * aba you meant that ^ 1106256214 M * aba that's fine, thanks :) 1106256226 M * meebey you mean its set right? 1106256275 M * aba yes. Hm, there is also a much longer /usr/lib/util-verservs/util-vserver-vars 1106256298 J * narender1983 ~root@220.224.43.238 1106256310 M * nayco so, no one wanna try my mandrake image ;) ? 1106256318 M * aba DEFAULT_VSERVERDIR='/vservers' 1106256321 M * aba helps 1106256364 M * aba Ok, I still get: WARNING: can not find configuration, assuming legacy method 1106256437 M * narender1983 hi everybody? 1106256515 M * narender1983 can anybody tell me what channges do i need to make to linux file system to get a minimum virtual server 1106256617 M * aba meebey: any hint on why the WARNING still exists, and I can't really start anything in the server? 1106256653 M * mugwump presumably because /etc/vservers/foo/ doesn't exist 1106256685 Q * sladen Ping timeout: 480 seconds 1106256711 M * mugwump you could just put a symlink in /var/lib 1106256747 M * meebey aba: you switched from debian package to upstream? 1106256757 M * aba meebey: yes. 1106256761 M * meebey aba: so... 1106256762 M * aba Hm, I'm getting a: 1106256763 M * aba SYS_257(0, 0x3f, 0, 0xfefefeff, 0x7f7f7f7f) = 65573 1106256763 M * aba SYS_257(0x3f010001, 0xc004, 0x7ffffaa8, 0x10003f0c, 0) = -1 EINVAL (Invalid argument) 1106256776 M * meebey aba: the debian package used a different structure seems like 1106256781 M * aba which prevents setting a new context. 1106256788 M * aba meebey: or is way outdated. Or whatever. 1106256788 M * narender1983 what about xid tags 1106256802 M * meebey aba: 0.30 is not way outdated 1106256809 M * meebey aba: its current but the maintainer uses patches 1106256810 M * aba meebey: but too for 2.6 kernels. 1106256815 M * meebey aba: oh ic 1106256824 M * meebey aba: yeah drop package use full upstream 1106256841 M * aba meebey: it would be enough if they upload a newer version to experimental ... 1106256852 M * nayco narender1983: What do you mean by " changes to linux file system" ? 1106256873 M * meebey aba: vserver in debian is haevily patched, I dont know why though 1106256876 M * aba ok, 'll come back later (and hope that Bertl_oO has some hints for me ...) 1106256879 M * mugwump aba: you might have to change your *.conf files to the new directory based config layou 1106256882 M * mugwump t 1106256890 J * sladen paul@starsky.19inch.net 1106256903 M * aba mugwump: It seems that they old files are recognized as legacy, but the syscall doesn't work :( 1106256908 M * narender1983 like what do i need to add to ext2 file system i read the paper about vserver 1106256909 A * aba goes to have dinner ... 1106256910 M * mugwump make sure you have legacy options turned on in config 1106256922 M * nayco narender1983: Hmmmm, nothing ;) ? 1106256923 M * mugwump bon appetit 1106256929 M * aba mugwump: bash -x $script has toldme that they're recognized ... 1106256953 M * meebey aba: 2.6.x is bleeding edge you know ;) 1106256956 M * nayco narender1983: I think you just have to patch you kernel, copile and install it, and install the util-vserver... 1106256970 Q * sannes Read error: Connection reset by peer 1106257215 M * aba meebey: just that 2.4 doesn't want my network card. 1106257226 M * meebey aba: which nic? 1106257271 M * aba mv64340_eth 1106257493 M * mugwump 2.6.x works, it's just as far as I've experienced so far, the legacy ioctl's don't work too well. but once you grok the new directory based config it's all good 1106257525 M * aba mugwump: can you give me a clearer hint how to do that? 1106257651 M * mugwump aba: have a look at http://www.utsl.gen.nz/etc-vservers.tar.gz 1106257720 M * mugwump aba: but be careful not to include the files in .defaults/scripts/ 1106257756 M * narender1983 i want to make a minimal vserver that can only run a simple client server application where do i need to start 1106257783 M * aba mugwump: how can I say "please, I have a chroot at $PLACE, create it as vserver with this ip, and that name"? 1106257850 M * mugwump /usr/local/lib/util-vserver/vserver-build --help 1106257881 M * mugwump personally I just construct /etc/vservers directories manually. I find them simple enough, which is why I posted the example. 1106257887 M * aba mugwump: and how can I tell that script that already everything is in place? 1106257947 M * mugwump aba: use -m skeleton, but with a different name. have a look at what it makes and copy to the name you want 1106257990 M * mugwump The documentation for the directory layout is on the flower page, linked from http://www.linux-vserver.net/alpha+util-vserver 1106258046 M * mugwump However, the flower page currently has a bug ... the background is a leaf, not a flower. So make sure to switch to the "gras1" stylesheet (View ... Page Style in Firefox) 1106258047 M * aba hm, ok. 'll try that ... 1106258052 J * DuckMaster ~Duck@dyn-83-157-200-212.ppp.tiscali.fr 1106258197 N * Bertl_oO Bertl 1106258206 M * Bertl evening folks! 1106258334 Q * duckx Read error: Operation timed out 1106258405 M * aba Hi Bertl 1106258416 M * aba ok, the next one is now: * The configured vshelper '/sbin/vshelper' does not match the 'vshelper' 1106258419 M * aba script of the util-vserver package 1106258450 M * Bertl well, seems you are still with the debian tools (or parts of them ;) 1106258570 M * aba Bertl: I'm trying to get rid of them ... 1106258588 M * aba (why does the maintainer not just upload the new version? He told me he has them. :( ) 1106258668 M * Bertl yeah, well ... 1106258684 M * Bertl let's put it this way: ' we are working on it!' 1106258701 M * aba and? He can put them on people.d.o, and let me do the debugging :) 1106258720 M * Bertl it's not a technical issue ;) 1106258726 M * aba (well, I do the same with users of my packages) 1106259367 M * ndim aba: http://backend.verfaction.de/~kk/util-vserver/ 1106259369 M * ndim aba: http://vserver.lauft.net/wegen/util-vserver/debian/merge/ 1106259380 M * ndim aba: Use either :) 1106259493 M * ndim Oh, and if you don't like the background of the flower page: http://vserver.lauft.net/wegen/util-vserver/docs/merge/ :) 1106259683 M * narender1983 i mean the root can install packages he can run various services like httpd 1106259705 M * Bertl for the other folks, a short introduction: 1106259747 M * Bertl narender1983: plans to (or is in progress of) developing something like linux-vserver is (or maybe something better) 1106259783 M * narender1983 something like that. but with some changes 1106259807 M * Bertl together with some other folks (we do not know yet) they are trying to analyze the existing code, where narender1983 is responsible for the filesystem (whatever that means) part ... 1106259815 M * narender1983 like every vserver has its own init 1106259839 M * Bertl yes, we have that too ... (it's called fakeinit and initpid) 1106259889 M * Bertl but maybe you want to start it from the kernel side instead ... this would be a different approach ... 1106259909 J * root_ ~root@220.224.43.99 1106259917 J * root__ ~nish@220.224.43.99 1106259929 M * daniel_hozac it's bad to IRC as root ;) 1106259976 J * tchan_ ~tchan@c-24-13-81-164.client.comcast.net 1106259989 M * root_ we should see the normal bootup procedure for each vserver while the host is running 1106260024 P * root_ 1106260090 Q * tchan Ping timeout: 480 seconds 1106260219 M * nayco Bertl: Do you need a Mdk 10.1 image (48Mb) ? I'm looking for someone to check it on a different machine than mine ? 1106260254 J * root_ ~nish@220.224.41.19 1106260300 Q * nish Ping timeout: 480 seconds 1106260305 Q * narender1983 Ping timeout: 480 seconds 1106260464 M * Bertl nayco: guess rs will be interested, once he is back ... 1106260470 M * Bertl guess he'll put it somewhere to download (if that is in your interest) 1106260485 J * narender1983_ait ~root@220.224.41.19 1106260513 M * nayco Ok. I put it on my Wiki : http://nayco.free.fr/wiki/doku.php?id=linux-vserver 1106260530 M * aba Hm. I failed to have a network interface up in my newly created vserver. However, interfaces/0/ip has the right ip address. 1106260546 M * Bertl welcome back narender1983_ait! 1106260560 M * narender1983_ait hi am on the channel 1106260571 M * nayco One thing i'd like to know: Are there files that absolutely need to be removed from such an image ? 1106260616 M * narender1983_ait so what changes do i need to make to ext2 filesystem 1106260622 Q * root_ Quit: Leaving 1106260630 Q * root__ Ping timeout: 480 seconds 1106260633 M * aba Any hint on my networking problem? 1106260669 M * Bertl if it is a new style config, check with 'ip addr ls' inside the vserver 1106260680 M * Bertl (i.e. do not expect ifconfig to show it) 1106260699 M * aba Hm. iproute is not installed, and I don't have network :( 1106260708 J * nish ~nish@220.224.41.19 1106260830 M * aba Bertl: nothing. 1106260843 M * daniel_hozac narender1983_ait: may i ask what linux-vserver doesn't provide that you need so badly? 1106260843 M * Bertl how was the vserver created? 1106260878 M * nayco he me have the same problem than me a few days ago... Wrong build command line ;) 1106260889 M * aba By creating one with /usr/lib/util-vserver/vserver-build -m skeleton -n testxxx --context 15 --hostname metis --interface 10.2.3.17 --initstyle sysv, and than copying files around and changing them (and symlinks). 1106260916 M * nayco mmmm, no alias... 1106260956 M * aba I could take an dev and an prefix file ... 1106260975 M * narender1983_ait i just want to do it my self 1106260980 M * Bertl aba: this config means that the ip is already there 1106261002 M * Bertl if you want the tools to create it, you ahve to specify eth0:10.2.3.17 1106261019 M * aba Bertl: "already there" means: it is one ip address of my main system? 1106261026 M * Bertl and if you would like to get an alias you have to use test=eth0:10.2.3.17 1106261033 M * Bertl aba: precisely 1106261040 M * aba well, that's ok. 1106261063 M * Bertl the tools will neither create nor remove it ... 1106261129 M * aba Hm. Still doesn't give me that address on the inside ... 1106261197 M * Bertl did you configure it on the host? 1106261224 M * aba Hm. Good question ... 1106261280 M * aba You mean: On the real host, or on the virtual? 1106261305 M * Bertl look, there are 3 option with the config: 1106261328 M * Bertl a) an existing IP (already present on the host, configure with ip or ifconfig) is used inside the vserver 1106261345 M * Bertl b) the tools create a new ip style config on vserver startup and use this 1106261345 M * aba yes. I take a). 1106261353 M * Bertl c) the same with an alias ... 1106261374 M * Bertl in the a) case, you have to get the ip up/working before you start the vserver 1106261379 M * aba ip addr show on the master server tell me: 1106261380 M * aba inet 10.2.3.17/32 scope global eth0 1106261385 M * aba (and others) 1106261398 M * aba so, I should be able to use that ip address inside? 1106261436 M * Bertl yep 1106261455 M * Bertl check with grep ipv4 /proc/self/status 1106261458 M * aba ok. Than I start the server with vserver $name start, and enter it with vserver $name enter. 1106261466 M * aba Bertl: inside or outside? 1106261470 M * Bertl inside 1106261486 M * aba ipv4root: 1106261486 M * aba ipv4root_bcast: ffffffff 1106261492 M * aba I guess this is not what I want 1106261494 M * Bertl nope 1106261515 M * Bertl let's check the config .... 1106261534 M * aba ok. what first? 1106261554 M * Bertl the network related part ;) 1106261560 M * aba :) 1106261570 M * Bertl # /etc/vservers/vserver-name/interfaces 1106261582 M * Bertl what does it contain ... 1106261582 M * aba not interfaces/0/ip ? 1106261600 M * aba Ah, 1 dir called 0, which has one file called 1, which has one line 10.2.3.17 1106261614 M * aba ed, called ip, not 1. 1106261635 M * Bertl hmm, nothing more? 1106261651 M * aba no. 1106261658 M * aba you want a dev, or a prefix, or? 1106261674 M * Bertl did you play around with that config, or is this the result of the vserver build? 1106261699 M * aba it's the result of aboves command, except that I changed the nodename, and a few symlinks. 1106261745 M * Bertl hmm ... strange ... 1106261756 M * Bertl you are missing the nodev entry 1106261772 M * aba ah, ok. 1106261788 M * Bertl interfaces/0/nodev 1106261797 M * aba and that should contain? 1106261807 M * Bertl doesn't matter 1106261824 M * Bertl it's existance is sufficient ... 1106261836 M * Bertl s/it's/its/ 1106261843 M * aba ok. 1106261854 M * nayco Bertl: Do you know why removing /vservers/.../etc/rc.d/rc*.d/* prevents the vserver from starting at all (On a new install), but chkconfig --del'ing nearly all the associated (And unuseful) services works ? I tried to understand what does the vserver.start script, to find wich file may be missing, but it's far too hard for me. Stranger, I the reinstalled the initscripts packagee to build thelinks back, and the vserver was still 1106261854 M * nayco broken... 1106261864 J * marmotte ~marmotte@ca-metz-14-34.w80-8.abo.wanadoo.fr 1106261895 M * Bertl welcome marmotte! 1106261907 M * Bertl nayco: I guess you managed to remove the scripts themselves 1106261909 M * nayco salut ! 1106261941 M * nayco er..... No, I checked that... Or maybe _one_ script (the wrong ;) ? 1106261961 P * meebey 1106261961 J * meebey meebey@meebey.net 1106262012 M * aba Bertl: no change. 1106262036 M * Bertl okay, let's check with vserver --debug start 1106262046 M * Bertl (please upload the output somewhere) 1106262054 M * aba ok. 1106262078 M * nayco strangely, the ip alias was created, and a good part of the starting process seemed to work, but it didn't go to the end. And vserver...enter failed... So I still have to play with "chkconfig --del" on new vservers. Well, now I've got a mandrake image ;) 1106262079 M * nish Bertl: once i enter the chroot environment do i hve to modify the deamons so that we can let that deamon work for that chroot only 1106262135 M * Bertl nish: what do you mean? 1106262141 J * chrish01 ~chrish01@69.90.131.10 1106262197 M * aba people.debian.org/~aba/vserver-log 1106262205 M * nayco I think nish's answer is "no" because the daemon doesn't even know he's chroot'ed, no ? 1106262254 M * nish i mean inside chroot, httpd should handle all http request for that chroot (VPS ) only.for that do i have to chnge deamons 1106262269 M * Megabart good night all! 1106262276 M * nayco 'night ! 1106262311 N * Megabart Mega|zzz 1106262343 M * nayco I think you don't need to. 1106262384 M * aba Bertl: any hint on that? 1106262403 M * nayco because in a vserver, httpd runs exactly as in a real server, and will answer to the requests incoming on the interface you assigned it... 1106262486 M * nayco well, I run two test apache-dedicated vservers at work, one with MediaWiki, DokuWiki, GLPI, winventory, and I modified nothing in httpd's conf ! 1106262549 M * Bertl aba: well, the values are read properly, but the chbind command is missing some options ... 1106262581 M * aba Bertl: I just tried it out with having a dev, and I can at least ping from inside out. Let's check that furtger ... 1106262618 M * aba Bertl: ok, I can log into. 1106262628 M * aba Great. Now I can continue finding the next issues ... 1106262637 M * Bertl ;) 1106262639 M * aba Bertl: Are you interessted in some more debugging of the other issue? 1106262670 M * Bertl on issue I'd check in your place is, if the capabilities module is loaded ... 1106262682 M * aba how? 1106262689 M * Bertl (just because this _is_ issue #1 on debian) 1106262723 M * chrish01 hey Bertl, got a vserver ngnet patch for me? :) 1106262736 M * Bertl aba: the best option is to compile linux capabilities into the kernel (as was done for several years now) 1106262756 M * Bertl aba: second best solution is to load it on system start (if it is modular at all) 1106262781 M * Bertl chrish01: sure ... and it was already tested with vserver startup ... 1106262789 M * chrish01 sweet dude 1106262802 M * aba Bertl: IIRC, I compiled them in. But anycase, I seem not to be able to mknod /dev/hdc in the vserver. 1106262810 M * aba that should hint me to that it is working ... 1106262818 M * Bertl yep 1106262832 M * aba (I always prefer the test over some logical reasoning :) 1106262848 M * Bertl hmm, is that an argument? 1106262856 M * aba I can access to whatever devices from inside, provided they exist? 1106262861 M * Bertl yep 1106262877 M * aba I mean: I prefer to try it out, especially if it is critical. Of course, logical consideration goes first. 1106262916 M * aba I think rest will go tomorrow. Next one is to install a fax receiving daemon inside ... 1106262927 M * Bertl hylafax? 1106262939 M * aba mgetty of course :) 1106262946 M * Bertl good ;) 1106262960 Q * narender1983_ait Ping timeout: 480 seconds 1106262961 M * aba why? 1106262975 M * nayco http://linux-vserver.org/ProblematicPrograms 1106262980 Q * nish Ping timeout: 480 seconds 1106262983 M * nayco aba: ^ 1106263002 M * aba well, I have a real isdn modem, attached to an usb serial port. 1106263039 M * nayco oh, I still got problems with cups, at work..... 1106263093 M * nayco strange, it worked here, at home, i've done the same config at work, and it fails. Still trying to bind to 0.0.0.0 :( 1106263124 M * nayco and there is even no cups running in the host server , that time.... 1106263127 A * aba waves to all. Good night. 1106263132 M * Bertl night aba! 1106263133 M * nayco 'higth 1106263184 Q * prae Quit: Pwet 1106263228 M * chrish01 Bertl, could you please send me a link to the patches once again 1106263240 M * Bertl http://vserver.13thfloor.at/Experimental/NGNET/ 1106263243 M * chrish01 ty 1106263267 M * Bertl http://vserver.13thfloor.at/Experimental/NGNET/diff-2.6.11-rc1-vs1.9.4-rc2-ng8.8.diff 1106263281 M * Bertl + deltas up to ng8.11 1106263289 M * Bertl http://vserver.13thfloor.at/Experimental/NGNET/delta-ng8.8-ng8.9.diff 1106263291 M * chrish01 that includes both the vserver and ngnet to 8.8 right? 1106263295 M * Bertl http://vserver.13thfloor.at/Experimental/NGNET/delta-ng8.9-ng8.10.diff 1106263299 M * Bertl http://vserver.13thfloor.at/Experimental/NGNET/delta-ng8.10-ng8.11.diff 1106263308 M * Bertl nope it's ontop of the vserver patch ... 1106263314 M * chrish01 k gotcha 1106263325 M * Bertl http://vserver.13thfloor.at/Experimental/RC-1.9.4/patch-2.6.11-rc1-vs1.9.4-rc2.diff 1106263371 M * nayco is NgNet giong to be included in future releases of linux-vserver ? 1106263416 Q * marmotte Quit: Leaving 1106263484 M * Bertl nayco: once it is working, yes 1106263515 M * nayco seems great. 1106264053 J * sannes ~ace@home.skarby.no 1106264061 M * Bertl hello sannes! 1106264927 J * tchan ~tchan@c-24-13-81-164.client.comcast.net 1106265033 Q * tchan_ Read error: Operation timed out 1106265438 J * narender1983_ait ~root@220.224.20.197 1106265482 M * narender1983_ait need help