1135556952 M * ag- Bertl: is there any reason for arping not working on the vserver host? 1135557016 M * ag- not working = no reply as it used to reply before kernel patching, 2.6.14.4-vs2.01 1135557067 M * Bertl no, not really ... 1135557100 M * Bertl maybe you could do an strace -fF of the arping together with a tcpdump -vvnei and upload that? 1135557113 M * ag- Bertl: will do... 1135558360 Q * Johnnie Read error: Connection reset by peer 1135558901 J * Marinus Marinus@ip503cfa01.speed.planet.nl 1135558945 M * Marinus hi 1135558974 M * Marinus I was wondering if it is possible to run the Plesk Reloaded control panel under a vserver? 1135559006 M * Bertl welcome Marinus! merry xmas! 1135559041 M * Bertl to answer your question, probably to some extend ... 1135559047 M * Marinus merry xmas to you too :-) 1135559094 M * Marinus what limitations would you expect? 1135559131 M * Bertl probably networking, as linux-vserver networking happens on the host (for now) 1135559164 J * Johnnie ~jdlewis@acs-24-154-53-16.zoominternet.net 1135559186 M * dothebart hy Johnnie 1135559190 M * Marinus alright, that shouldn't be too much of a problem. I'm primarily looking for a good package to manage domains and mailusers 1135559230 M * Bertl well, unless the Plesk folks try to make it _not_ run on linux-vserver, there should be no real reason for issues 1135559254 M * Skram has plesk been tested on linux-vserver.org? 1135559280 M * Skram Personally, I wouldnt run it (using gentoo for the vpshost) but for some other projects... 1135559303 M * Bertl merry xmas Skram! 1135559311 M * Bertl well, let's ask google, shall we? 1135559333 M * Skram Channukah.. say it with me.. Ha-nu-kah :) 1135559348 M * Marinus the thing i'm wondering about is because Plesk themselves offer a vserver-like package virtuozo if it should work with linux-vserver as well. 1135559361 M * Bertl Skram: ah, no problem, happy Channukah then! 1135559364 M * Marinus The only thing i found in the mailing list were some old posts that people had trouble with it, hehe 1135559371 M * Bertl http://list.linux-vserver.org/archive/vserver/msg08208.html 1135559378 M * dothebart http://www.suburbanhomeboy.com/flv/Hanukkah_Bird.swf 1135559384 M * Skram Well.. virtuozzo is like linux-vserver 1135559391 M * Skram i dont see them changing that anytime soon 1135559404 M * Skram i was talking about running plesk on a redhat-vps.. not the vpshost 1135559434 M * Skram unfortunately none of the control panels (with exception to webmin) work on gentoo.. but Id rather knowledgable customers/patrons anyways :) 1135559460 M * dothebart hm. isn't inittab inside of the vservers used? 1135559471 M * Bertl you can do that, if you run init 1135559485 M * Bertl (i.e. it's not required but possible) 1135559522 M * dothebart how would i? or how would i do better? ;-) 1135559546 M * Bertl use inittab? 1135559552 M * dothebart yep. 1135559569 M * dothebart i allso can't killall -HUP the init process... 1135559573 J * sebi_ ~sebi@Fccb5.f.strato-dslnet.de 1135559574 M * Bertl quite simple, if you have the initstyle set to 'plain' then init will be spawned inside 1135559593 M * Bertl if you use 'sysv' then there will be no separate init for the guest 1135559615 M * dothebart how would i add processes to be spawned from the outside into a guest? 1135559641 M * Skram what are you trying to do/ 1135559646 M * Skram (just curious) 1135559654 M * Skram like have the host start something -inside- the vps? 1135559674 M * dothebart the default citadel installation method is to use inittab so far... 1135559676 Q * sebi Ping timeout: 480 seconds 1135559688 M * dothebart and i'd like to run the citadel server inside a vserver. 1135559713 M * Bertl well, if init is running inside the guest, it will spawn new entries in inittab for you 1135559715 A * Skram googles 1135559729 M * dothebart Skram: www.citadel.org 1135559754 M * dothebart Bertl: how would i make it start without running it inside? 1135559773 M * Bertl no I've lost you :) 1135559793 M * dothebart well, there is a process that behaves as if he were init? 1135559796 M * Skram dothebart: you only want the host to be able to spawn the process, not the user? 1135559812 M * dothebart uhm, what? 1135559814 M * Skram citadel is groupware, basically? 1135559818 M * dothebart yep. 1135559818 M * Bertl dothebart: no, either the host init blends through (sysv init style) or you have your own (a real init) 1135559825 M * Skram yeah. 1135559848 M * dothebart Skram: groupware growing out of a bbs bae ;) 1135559851 M * Marinus ok i'll go give plesk a try then! thanks for the advice 1135559858 M * Marinus i'm off to bed now tho, bye! 1135559860 M * Skram Marinus: why plesk?! aahh 1135559870 M * Bertl Marinus: k, good night! 1135559874 M * Skram read my lips, open-source... free :).. 1135559917 M * Bertl Skram: hey, proprietary backdoors and spyware have a place too :) 1135559929 M * Skram :) 1135559934 M * Marinus Skram; I tried out most CPs and Plesk seems the best (compared to Cpanel, ensim, etc.) and easiest to use for endusers 1135559939 M * dothebart hm. is plesk some kind of proprietary webmin? like that c* thing? 1135559948 M * Skram dothebart: indeedi-do 1135559953 M * Skram Bertl: hah 1135559965 M * Skram Well, I need to atleast make a panel so my users can restart their own vps. 1135559990 M * Skram i would need to have it on the vpshost.. and would probably just use php/perl 1135559995 M * Skram has anyone made such yet? 1135560007 M * Bertl there is a project OpenVPS .. don't know the status though 1135560021 M * Skram well, i use linux-vserver :) 1135560041 M * Bertl OpenVPS is a kind-of control panel for that :) 1135560048 M * Bertl (not FreeVPS :) 1135560064 M * Marinus dothebart; plesk is control panel that allows you to create new domains on a server easily, and lets users create mailboxes for these domains 1135560070 M * Skram I thought openvps was a engine, like linux-vserver 1135560085 M * Skram Marinus: you are running it inside a vps, right? 1135560090 M * dothebart so more like hm... sqwebmail? 1135560097 M * Bertl Skram: that's FreeVPS and OpenVZ 1135560103 M * Marinus skram, yeh, that's what i want to do 1135560147 M * Skram OpenVPS is a set of software built on top of the Linux VServer aimed specifically at Web Hosting 1135560150 M * Skram heh 1135560153 M * Skram SWEET! 1135560157 M * Skram i may have to try this out.. 1135560160 M * Marinus dothebart, a bit more extensive than that. they have a demo on their site; http://www.swsoft.com/en/products/plesk75reloaded/demo/ 1135560166 M * Skram but i already have my own images.. 1135560180 M * Bertl Skram: let me know about your findings (regarding OpenVPS) 1135560208 M * Bertl Marinus: just curious, but why not use Plesk with Virtuozzo? 1135560250 M * Marinus i think it's more expensive, although i could not find an exact price for virtuozzo on the plesk site 1135560275 M * Bertl well, it is definitely more expensive, as Linux-VServer is free :) 1135560287 M * harry Bertl: don't forget 1135560295 M * Skram Bertl: you are the main developer, right? 1135560297 M * harry it has a GREAT support team! (linux-vserver) 1135560301 M * Skram and Hollow does most of the utils? 1135560325 M * Marinus bertl, well yeh figures :-) And i have linux-vserver running now and I quite like it 1135560340 M * Loki|muh which capabilities do I need to get mount inside a guest working? echo secure_mount > ccapabilities wasn't enough. do I need binary_mount? 1135560344 M * Bertl Marinus: ah, good to hear, thanks for the answer! 1135560363 M * Bertl Skram: right (kernel side), Enrico and Hollow are doing the userspace tools 1135560385 M * harry and the rest... just fans :) 1135560388 M * harry (like me :)) 1135560391 M * Bertl harry: thanks for the flower! (it's the community :) 1135560403 M * harry Bertl: add it to the flowerpage :p 1135560415 M * Loki|muh we're all loving linux-vserver :) 1135560461 M * Marinus I'll let you know what happens with plesk, i'm off now! bye 1135560462 M * Bertl good, so we continue that project :) 1135560468 A * harry only hopes his boss will allow me to keep using vserver 1135560470 Q * Marinus Quit: 1135560476 M * harry and doesn't say i have to use xen or so 1135560488 M * Skram I really wish it was easier to limit user's RAM/CPU-Usage. 1135560500 M * Skram any insights? 1135560501 M * harry we need "some virtualisation soft" 1135560508 M * dothebart why must there be a dir under /var/lib/ that breaks tab auto completion? 1135560512 M * dothebart this sucks. 1135560545 M * dothebart can't it be debiantools-vserver or so? 1135560559 A * Skram shouts gentoo :) 1135560562 M * Bertl Skram: define users and RAM/CPU usage? 1135560576 M * harry dothebart: i just compile them myself 1135560581 M * Loki|muh hrhr, I changed the debian/rules for matching /vservers :) 1135560582 M * harry a lot easier/safer to upgrade 1135560583 M * dothebart i don't like to spend al my life compiling... 1135560606 M * harry we had one guy here, that had a gentoo 1135560606 M * Skram Bertl: Indeed. 1135560611 M * dothebart Loki|muh: probaby allso a good idea... 1135560614 M * harry his fdisk was totally fscked up 1135560641 M * Skram harry: Johnnie and I work together a lot... he is who turned me onto linux-vserver amoung other things. 1135560650 M * Skram (we both use gentoo on our servers..) 1135560668 M * Skram Bertl: is there an "easy" way to define users and RAM/CPU usage? 1135560697 M * Bertl well, you can use the cpu scheduler and the limits to cotnrol that pretty fine, IMHO 1135560700 M * harry Skram: there are config files for that, yes 1135560722 M * Skram Bertl: Right.. but you limit by percentage of the cpu.. right? 1135560729 M * Skram harry: which ones again? 1135560737 M * Bertl Skram: no, its a little more flexible 1135560742 M * dothebart damn. what was that? [Mon Dec 26 02:32:36 2005] [error] [client 85.178.220.130] client denied by server configuration: proxy:http://127.0.0.1:2000/webcit/ 1135560747 M * harry don't know them by heart... but it's in the flowerpage 1135560752 M * harry (iirc) 1135560752 M * Bertl Skram: and it will get more features in the near future 1135560764 M * Skram http://linux-vserver.org/RESOURCE+LIMITS <-- didnt understand that too well. 1135560769 M * Skram Bertl: Yeah. 1135560786 M * Skram harry: ill go look at the flower page, eh 1135560801 M * Bertl Skram: but %cpu is one thing you can realize with it ... 1135560817 M * harry Bertl: btw. we didn't have aNY probs with the grsec + vserver kernel! :) 1135560877 M * Skram harry: talking about rlimits? 1135560887 M * Skram does anyone have an example config directory of rlimits? 1135560908 M * Skram erg, i have to go.. 1135560912 M * Skram ill be back soon. :) 1135560918 M * harry yes 1135560924 M * Loki|muh Bertl: is SYS_ADMIN really needed for mounting from inside a vserver? aren't the ccapabilites sufficient? 1135560925 M * harry but i don't have a example config 1135560933 M * Skram yes.. examples? could you post them, or email mark@vpses.net? 1135560940 M * Skram okay, speak with you later.. peace all. 1135560995 M * Bertl Loki|muh: yes there are certain ccaps 1135561011 M * Bertl Skram: we have a sheduler page 1135561047 M * Bertl http://linux-vserver.org/Scheduler+Parameters 1135561080 M * Loki|muh Bertl: i set secure_mount secure_remount and binary_mount but I got permission denied when I try "mount -t sysfs sysfs /sys" 1135561094 M * Bertl Skram: if you put interval to let's say 100 and take fill rate as %, you should be fine 1135561112 M * Bertl Loki|muh: probably for good reason, you don't want sysfs inside a guest 1135561154 M * Bertl Loki|muh: or, to rephrase that, if you want that, CAP_SYS_ADMIN is probably fine too 1135561177 J * emp ~emp@70.57.239.35 1135561188 M * Bertl welcome emp! merry xmas! 1135561197 M * emp hey Bertl 1135561204 M * emp thank you, merry xmas to you too! 1135561328 M * dothebart how do i best make a path visible under another vserver? 1135561347 M * dothebart static linking outside the servers if they're on the same fs? 1135561383 M * Bertl please define path ... 1135561398 M * dothebart hm. i'd like to share /var/lib/citadel 1135561402 M * dothebart / 1135561440 M * Bertl you can unify it into the guest (for example) 1135561454 M * dothebart caus' the webcit server with the static files from the packages are in the webcit package... 1135561467 M * Skram Bertl: i only have to define interval and fill? 1135561509 M * dothebart how' s the commandline? 1135561524 M * Bertl Skram: well, you probably want to set max and min to reasonable values too, but jsut for % that should suffice 1135561543 M * Skram okay.. cool 1135561559 M * Loki|muh Bertl: okay thanks, I think I will sleep about it (if there's such a term in english) ;) 1135561593 M * Skram Bertl: okay; so.. what about Memory? 1135561596 M * Skram :) 1135561616 M * Bertl we have hard limits for RSS, VM and VML 1135561634 M * Skram er.. 1135561636 M * Bertl no soft limits yet, but they will come sooner or later 1135561652 M * dothebart apropos unify 1135561653 M * dothebart msguniq (1) - unify duplicate translations in message catalog 1135561658 M * dothebart this can't be it ;-) 1135561700 M * dothebart ah, the util-vserver docu. 1135561745 M * Bertl dothebart: there was a discussion on the ML regarding usage of vhashify (you might look in the archives) 1135561820 M * dothebart /usr/lib/util-vserver/vunify --manually 1135561841 M * dothebart is that it? 1135561872 M * Bertl for vunify yes, but vhashify is more advanced 1135561922 M * dothebart hm. i just like /var/lib/vservers/citadel/var/lib/citadel/ to be visible under the vserver /var/lib/vservers/apache ;-) 1135562081 M * dothebart /usr/lib/util-vserver/vunify --manually -nv /var/lib/vservers/citadel/var/lib/citadel/ "" /var/lib/vservers/apache/var/lib/citadel/ "" 1135562099 M * dothebart produces some way of usefull output... 1135562205 M * dothebart hm, but nothing happenes. 1135562220 M * dothebart well, i'll have a closer look at it tomorow. 1135562230 M * dothebart nite folks. 1135562241 M * Bertl good night! 1135562509 M * emp how should I use SNAT with a dynamic IP, since MASQ does not work for me. My main goal is for it to work w/o having to tweak it after a reboot or something of that nature.. 1135562548 M * Bertl there is a script which is executed whenever you get a new dynamic IP 1135562567 M * Bertl you should add the SNAT rule to that one (and remove the old before= 1135562591 M * emp ahh, right... hmmm 1135562605 Q * Johnnie Quit: G'bye! 1135562674 J * Johnnie ~jdlewis@acs-24-154-53-16.zoominternet.net 1135562727 Q * Johnnie Quit: 1135563421 M * Skram hm.. google linux-vserver and see what comes up on the side 1135563446 M * Skram google is "hiring" 1135563468 M * Bertl hmm, I get Xen as sponsored link 1135563483 M * Skram i get a google ad by google too 1135563501 M * Skram it may be a regional ad.. 1135563501 J * mep__ mep@p5091B6D5.dip0.t-ipconnect.de 1135563515 M * Skram Know vserver linux? 1135563515 M * Skram Google seeks Linux systems gurus - 1135563515 M * Skram Apply for a job with Google! 1135563516 M * Skram www.google.com/jobs 1135563520 M * Skram thats what it says 1135563521 M * Skram oh well 1135563536 M * Bertl ah, well :) 1135563570 M * Bertl after all they make 95% of their money with ads 1135563588 M * Skram yeah 1135563599 M * Skram my company has some ads on there.. for testing and seeing if it works 1135563612 M * Skram we have gotten some hits.. no customer signups from google however 1135563935 Q * mep_ Ping timeout: 480 seconds 1135563937 M * Skram anyone thought of upgrading linux-vserver to a more user-friendly wiki? 1135563956 M * Skram we would galdly provide a website-mirror or vps for you all.. 1135563984 M * Bertl well, there are a few things to consider ... 1135564004 M * Bertl - first, what is a more user-friendly wiki 1135564026 M * Bertl - second, how to get similar features without additional work (like wiki ML and such) 1135564057 M * Bertl - third, mirroring should be smart, i.e. editing can be distributed and/or automatically ends up on the main site 1135564083 M * Bertl - and finally, contents has to be migrated 1135564090 M * Skram well, i have a mirror of get-e.org 1135564099 M * Skram and we just rsync every hour. 1135564108 M * Skram Bertl: mediawiki is extremely nice. 1135564111 M * Skram It is what wikipedia uses. 1135564120 M * Skram as far as ML, im not sure what you all use. 1135564125 M * Bertl yes, I know .. already considered it ... 1135564132 M * Skram There isnt /that/ much data.. so it shouldnt be that hard 1135564145 M * Skram i am just throwing idea out there. 1135564212 M * Bertl let me put it like this, if you want to put some efford into it, then let's try it out ... if not, we can live with what's there (and atm I prefer to spend my time on coding :) 1135564228 M * Skram i would rather you be coding too :) 1135564232 M * Skram haha 1135564239 M * Skram Well, I may play around.. and show you 1135564262 M * Skram does linux-vserver have a logo or slogan? 1135564265 M * Skram just curious 1135564288 M * Bertl not yet, something folks 'wanted' to do some time ago, but was never done/finished 1135564335 M * Bertl there were some ideas what could be done though ... 1135564342 M * Bertl and there is the 'original' slogan 1135564345 M * Skram do you want 'this' to be done, or could you "care less" 1135564362 J * Johnnie ~jdlewis@acs-24-154-53-16.zoominternet.net 1135564380 M * Bertl Skram: I'd appreciate a logo or such, but I won't spend time on it right now 1135564386 M * Skram yeah, of course. 1135564407 M * Bertl let me dig out the ideas/suggestions :) 1135564413 M * Skram Nah, I was just suggesting a slightly more user friendly site.. but its not a big deal 1135564466 M * Bertl could you elaborate on the 'user-friendly' part? because I consider tavi quite user-friendly ... 1135564498 M * Skram Er, lemme think of how to explain it 1135564618 M * Bertl well, if you say that the structure is complicated and the text could need a brushup, I'm on your side ... but how would that change with mediawiki? 1135566186 M * Skram erm, yeah 1135566196 M * Skram you are right 1135566266 M * Bertl nevertheless, I'm pretty much pro-mediawiki 1135566445 M * Skram Well, I have time to contribute.. so if you need anything done, other than actual coding, holla :) 1135566471 M * Skram I think it would help the look, and possibly make it more organized. 1135566497 M * Skram But, never-the-less, the current site is very informative 1135566502 M * Bertl haven't had the time to look into media wiki, so you might do that for me and answer a few questions and/or request I'd have ... 1135566523 M * Bertl maybe even do a simply sandbox setup, so that we can evaluate it 1135566525 M * Skram Ive used it a couple of times... 1135566536 M * Skram sure, i will setup a media wiki on my server for you all. 1135566539 M * Skram No problem-o. 1135566559 M * Skram itll be ls.serv.vpses.net when I have it ready 1135566565 M * Bertl there are a few things I want to make sure, for example that certain elements can be disabled (like images and such) 1135566572 M * Skram Yeah 1135566580 M * Bertl well, at least for the typical user 1135566601 M * Bertl but I want to keep it open (as it is now) 1135566606 M * Skram Indeed. 1135566649 M * Bertl but as I said, mediawiki seems quite nice for that purpose ... 1135566654 M * Skram Indeed. 1135566660 M * Skram Ill setup a sandbox right now 1135566665 M * Bertl okay, great! 1135566675 M * Skram I havent installed it in a while 1135566700 M * Skram its in portage :) 1135566713 M * Skram do you want your own vps, or just a sandbox mediawiki install? 1135566781 M * Bertl whatever is easier for you, the first approach is to figure/test a few things 1135566795 M * Skram alrighty 1135566804 M * Bertl we probably need to refine it and add/modify a few things on the way ... 1135566835 M * Bertl for example, I added the wiki ML functionality to tavi (so if something like that is missing, we need to add it) 1135566841 M * Skram yeah 1135566846 M * Skram well it has it's own ML 1135566861 M * Bertl with the changes? good! 1135566868 M * Skram which changed? 1135566871 M * Skram im not too sure 1135566873 M * Skram ill have to check 1135566876 M * Skram we shall see 1135567121 M * Bertl btw, the 'main' page and http://linux-vserver.org/Resource+Limits would be a good test (to transfer) 1135567152 J * Cru ~mindwarp@bastardrouterfromhell.e.de.wahlich.com 1135567155 M * Cru morning 1135567180 M * Bertl welcome Cru! 1135567200 M * Cru moin bertl 1135567405 M * Skram Bertl: confirm receipt of my private messagess when you get a chance 1135567829 M * Skram http://ls.serv.vpses.net/ - omg hax 1135567837 M * Skram i have to config some stuff, but its installed :| 1135567909 M * Bertl great! 1135567946 M * Skram i need to go work on something else 1135567953 M * Skram i gave you the super user pass, etc. 1135567960 M * Skram ill talk to you soon, sorry i must go for a bit. 1135567968 M * Skram i look forward to speaking with you (all) later. 1135567970 M * Bertl np ... 1135568018 M * Bertl I make a list of things I don't like :) 1135572104 M * Cru bbl 1135572119 Q * Cru Quit: use Unices; $live->free() || die; 1135572237 J * tudenbart ~willi@xdsl-213-196-248-69.netcologne.de 1135572686 Q * dothebart Ping timeout: 480 seconds 1135575548 J * balbir ~balbir@59.145.136.1 1135575559 M * Bertl morning balbir! 1135576728 M * Bertl night everyone .. cya tomorrow! 1135576741 N * Bertl Bertl_zZ 1135577986 J * lilo ~lilo@lilo.usercloak.oftc.net 1135578168 Q * lilo Quit: 1135582017 J * jayeola ~jayeola@host-87-74-46-211.bulldogdsl.com 1135582326 J * Birmaan ~Caty@70.230.73.20 1135584948 J * prae ~prae@ezoffice.mandriva.com 1135585249 J * _nokoya young@hi-230-82.tm.net.org.my 1135585394 Q * Bertl_zZ Read error: Connection reset by peer 1135585399 J * Bertl_zZ herbert@212.16.62.52 1135585428 J * neofutur_ ~neofutur@neofutur.net 1135585436 J * FaUl_ pgzX8kx2mD@verbrennung.org 1135585436 Q * FaUl Read error: Connection reset by peer 1135585438 J * lonewolf1 ~lonewolff@host86-128-0-23.range86-128.btcentralplus.com 1135585460 J * Greek0_ ~greek0@85.255.145.201 1135585485 Q * nokoya Ping timeout: 480 seconds 1135585486 Q * Greek0 Read error: Connection reset by peer 1135585495 N * _nokoya nokoya 1135585505 Q * brc Ping timeout: 480 seconds 1135585509 J * brc bruce@brc.dedicado.info 1135585545 Q * lonewolff Ping timeout: 480 seconds 1135585545 Q * neofutur Ping timeout: 480 seconds 1135585741 Q * Hunger Quit: changing servers 1135585757 J * Hunger Hunger.hu@Hunger.hu 1135586758 J * ddlp ~danieldlp@shell2.sea5.speakeasy.net 1135587522 J * Smutje_ ~Smutje@xdsl-87-78-61-210.netcologne.de 1135587735 Q * Smutje Ping timeout: 480 seconds 1135587847 N * Smutje_ Smutje 1135588761 J * dothebart ~willi@xdsl-81-173-169-66.netcologne.de 1135588946 Q * tudenbart Ping timeout: 480 seconds 1135589441 N * Kelrya Kara_ 1135589870 Q * balbir Quit: Leaving 1135594158 J * PyskoT ~root@66-190-38-142.dhcp.fdul.wi.charter.com 1135594184 M * PyskoT ONION! 1135594229 Q * PyskoT Quit: CheeSE POOF! 1135594237 M * derjohn PyskoT, Onionrouting? 1135595226 N * lonewolf1 lonewolff 1135595643 J * Woschak ~Woschak@83-169-157-250-dynip.superkabel.de 1135595647 M * Woschak hello 1135595724 M * dothebart morschen. 1135595754 M * Loki|muh moin 1135596009 J * shedi ~siggi@213-140-22-77.fastres.net 1135599297 Q * Woschak Quit: Und Tsch??ss ... 1135599562 M * Eyck l8r 1135599563 Q * Eyck Quit: leaving 1135599691 J * Woschak ~Woschak@83-169-157-250-dynip.superkabel.de 1135599844 J * balbir ~balbir@59.145.136.1 1135600117 J * eyck eyck@81.219.64.71 1135600211 Q * Birmaan Ping timeout: 480 seconds 1135600396 Q * eyck Quit: 1135601568 J * pjanzen ~pjanzen@213.197.251.180 1135601593 M * pjanzen Hi all .... 1135601602 N * pjanzen paul 1135601624 N * paul paulJ 1135601710 M * paulJ I have a question about vserver and a pub + priv network .... 1135601757 M * paulJ The priv net is attached to my vserver but i cant get a connection to the internet, i can however ping my router just fine 1135601795 M * derjohn paulJ, you may habe to NAT on the host ... 1135601814 M * paulJ hhmm, That i was afraid of ... :) 1135601820 M * derjohn http://linux-vserver.org/some_hints_from_john -> bottom 1135601833 M * derjohn iptables -t nat -I POSTROUTING -s $VSERVER_NETZ ! -d $VSERVER_NETZ -j SNAT --to $EXT_IP 1135601837 M * paulJ going to check that out ... 1135601930 M * paulJ that way i dont need any extra routing options do I? 1135601979 M * derjohn paulJ, hm, you mean ip_forwarding? with NAT i don't _THINK_ so, but I am nor sure, so you may enable ip_forwardijg in /proc 1135601982 M * derjohn (test= 1135601983 M * derjohn ) 1135601999 J * renihs ~renihs___@193.170.52.70 1135602040 M * paulJ derjohn, Going to play with this info, thnx for the pointer... Have a great 2e Xmas day ... 1135602078 Q * paulJ Quit: BitchX: its how steak is done 1135602105 M * derjohn paulJ, xmas? ah, yeah, I forgot ;) Have Fun with VS2.0 :) Is your kernel already runnning? 1135602515 Q * Johnnie Read error: Connection reset by peer 1135603076 A * dothebart looks out of the window over snowy berlin. 1135603192 M * dothebart derjohn: is there a patch for that 'local whole' yet? 1135603271 M * Woschak may i use dhcp server in a vserver? 1135603313 M * meebey morning 1135603313 M * dothebart ls 1135603313 J * Johnnie ~jdlewis@acs-24-154-53-16.zoominternet.net 1135603315 M * dothebart ups. 1135603333 M * meebey for some reason the /etc/fstab is not written anymore, AFAIK it was written at vserver start? 1135603350 M * meebey thus tools like "df" become anoying saying it can't read the mounted partitions 1135603402 M * Woschak the dhcp server should listen at interface eth1:v00 in a vserver. is this possible? 1135603403 M * derjohn dothebart, ls -l ... :) ... what do you mean by 'local whole' ? 1135603431 M * dothebart derjohn: the rumors about outbound connection overflow by opening too much port... 1135603433 M * derjohn meebey, you mean fstab in a guest? 1135603434 M * dothebart s 1135603450 M * derjohn dothebart, /me gets afraid .. I didnt hear ... 1135603454 M * meebey derjohn: yes 1135603478 M * derjohn meebey, AFAIK wasnt written ever ... or are you refrring to mtab ? 1135603481 M * dothebart http://www.heise.de/newsticker/meldung/67760 1135603508 M * meebey derjohn: ups probably :) 1135603512 M * meebey derjohn: mtab is empty 1135603522 M * derjohn dothebart, explicitly found at Kernel-Version 2.4.22 + 2.6.12 1135603536 M * meebey derjohn: it had fake entries /dev/hdv1 or stuff like that 1135603545 M * derjohn dothebart, I use 2.6.14 Debian (experimental) .. I HTH :/ 1135603547 M * dothebart yep, but not proved if not wrong in newer versions too... 1135603563 M * derjohn dothebart, Yes good to mention. I also read that in heise 1135603579 M * meebey derjohn: it could be the current vserver utils, with that new config structure, maybe I need to set something 1135603591 M * dothebart just proven to work in those versions, but not said to be fixed in the others. 1135603593 M * meebey the old tools did that by default AFAIK 1135603618 M * derjohn dothebart, I dunno if there is a patch. If a patch is out we can be sure that there are exploits out too (the patch referrs to the hole ) 1135603668 M * dothebart well... the exploit would be while /bin/true; do telnet foo & ; done 1135603670 M * derjohn dothebart, I have to lear for xmas-foo towards nuermberg now. Could you ask betl if e knows more than we know? 1135603674 M * dothebart i think... 1135603688 M * dothebart yep. if i meet him... 1135603693 M * meebey has Bertl to pay a fee for using the trademark Linux? :) 1135603711 M * meebey I see its saying "Linux VServer Project" on the page :-P 1135603717 M * dothebart derjohn: are you comming to 22c3? 1135603728 M * derjohn meebey, we call it inuxbertl to avoid that 1135603751 M * meebey derjohn: hehe 1135603751 M * derjohn dothebart, sry, nope. but friends of mine do. 1135603773 M * derjohn meebey, better than atbasch and davinci code ;) 1135603773 M * dothebart ok. else we could have met... 1135603829 M * derjohn dothebart, yes, I would really like to ... the only vserver I know people going there is .. hmm .-.. cemil and maybe kara 1135603839 M * meebey derjohn: afaik only companies (profit) have to pay the fee, else all poor FOSS hackers would be even more poor :-P 1135603874 M * derjohn meebey, I know. But the feed is low anyway 1135603903 M * meebey derjohn: didn't they just rise it? 1135603913 J * infowolfe jthm@66-230-102-182-cdsl-rb1.nwc.acsalaska.net 1135603917 M * derjohn meebey, and: df -h must work in vserver guests. You may set a limited value with vdlimit 1135603938 M * meebey derjohn: df doesnt work because /etc/mtab is empty 1135603952 M * dothebart hm, shouldn't a vserver configure an ip if it's not yet configured on start itself? 1135603960 M * meebey derjohn: its 2.4.29-vs1.2.9 with almost current vserver-utils 1135603968 M * derjohn meebey, I must rise now ... OMG ... I getting to late to after - xmas to my daddy ... "I'll be back" 1135603971 M * derjohn bye2all 1135603982 M * dothebart bye derjohn 1135603983 M * meebey bye derjohn 1135603991 M * derjohn dothebart, maybe you can initiaate a #vserver usermeeting on ccc ? 1135604017 M * dothebart hm, well, if /me as newbe is enabled to do so ;-) 1135604374 T * dothebart meet on 22c3? ask dothebart |http://linux-vserver.org/ | latest stable 2.01, 1.2.10, 1.2.11-rc1, devel 2.1.0 | util-vserver-0.30.209 | He who asks a question is a fool for a minute; he who doesn't ask is a fool for a lifetime -- share the gained knowledge on the wiki, and we'll forget about the minute ;) 1135604452 N * FaUl_ FaUl 1135607234 Q * balbir Quit: Leaving 1135610532 N * Bertl_zZ Bertl 1135610536 M * Bertl morning folks! 1135610629 M * Loki|muh moin Bertl 1135610858 M * Bertl hey Loki|muh! everything fine? 1135610874 M * dothebart Bertl: derjohn meinte ich sollte dich hierzu fragen: http://www.heise.de/newsticker/meldung/67760 1135610882 M * dothebart ups;) 1135610956 M * Loki|muh Bertl: yeah, atm trying to get a nfs-user-server running, but I have to kick the portmapper I think (sometimes I hate the things the debian-maintainer make) 1135611055 M * Bertl dothebart: well, sockets can be limited :) 1135611103 M * Loki|muh uh, I think it is my fault, not the maintainers *g* 1135611107 M * dothebart for vservers? 1135611253 M * Bertl dothebart: yep, sure ... 1135611317 M * Bertl (although all the limits have not had a good testing recently, but I'm optimistic that somebody would have reported it if the limit didn't work) 1135611572 M * dothebart ah, cool. 1135612250 J * kavorka ~mike@69-161-69-17.bflony.adelphia.net 1135612285 P * kavorka 1135612493 M * Loki|muh uhm... I have some problems with setting up a nfs-server inside a guest. the portmapper is complaining about SIOCGIFADDR: Cannot assign requested address. 1135612519 M * Loki|muh the wiki says that the nfs-user-server should work, but how could it work without portmapper? 1135612568 M * Bertl what address is the portmapper trying to assign? 1135612616 M * Loki|muh 192.168.77.89 1135612621 M * Loki|muh which is the ip of the guest 1135612642 M * Loki|muh connect from 192.168.77.89 to set(portmapper): request from non-local host 1135612655 M * Bertl that is a configuration issue 1135612673 M * Bertl you have to configure the portmapper to allow non-local (guest ip) traffic 1135612774 M * Woschak Bertl: may i use a dhcp server in a vserver? 1135612792 M * Bertl Woschak: yes, sure, it just doesn't make too much sense 1135612842 M * Woschak hm..., i've trouble to bind dhcp on a virtual interface 1135612866 M * Bertl there are no virtual interfaces, so that is not unexpected :) 1135612954 M * Woschak i have eth1:v00 in the vserver and the dhcp server should listen at it 1135612982 M * Bertl dhcp is _not_ ip based 1135612999 M * Bertl dhcp is a protocol which can not be done over IP aliases 1135613010 M * Bertl you can only use the interface eth1 for that 1135613038 M * Bertl you might use a vlan interface eth1.10 for example 1135613190 M * Woschak ok, i start dhcp server listen at eth1. the error message in syslog is: Open a socket for LPF: Operation not permitted 1135613212 M * Bertl yep, because again, it opens the socket in a non-ip fashion 1135613231 M * Bertl you have to give at least the CAP_NET_RAW capability to allow non-ip protocols 1135613260 M * Bertl (which, in turn will allow the guest to create arbitrary packets and listen to network traffic) 1135613341 J * SixthSeal XeroGuest@ACA4BC58.ipt.aol.com 1135613346 M * SixthSeal What's Up 1135613352 M * Bertl welcome SixthSeal! 1135613365 M * SixthSeal dang scripts lol 1135613375 M * Bertl yeah, right! :) 1135613390 M * SixthSeal oh wow a real person cool 1135613403 M * Bertl no, just a very smart script! :) 1135613442 M * SixthSeal ::feels embaresed:: i realy do hope im not talking to a bot 1135613463 M * Bertl hmm .. 1135613491 M * SixthSeal hmm .. 1135613499 M * Bertl how do I know that you're not a bot? 1135613507 M * SixthSeal easy you dont 1135613519 M * Bertl k, so how does it matter? 1135613539 M * SixthSeal i guess it dont as long as your a fun bot to talk to 1135613557 M * Bertl great, so: What's up? 1135613562 M * SixthSeal Nothin Much you? 1135613580 M * SixthSeal whats the subject of this room btw? 1135613592 M * Bertl see topic 1135613600 M * SixthSeal 22c3? 1135613604 M * Bertl (well, at least the second part) 1135613606 M * Woschak Bertl: i have no savvy what you mean :/ i read again :) 1135613628 M * Bertl Woschak: dhcp is not ip based, so it requires raw access to the sockets 1135613637 M * SixthSeal all i know i typed irc and anarchist into google and pulled this up lol 1135613639 M * Bertl SixthSeal: Linux-VServer 1135613659 M * Bertl SixthSeal: a very cool virtualization technique 1135613683 M * Woschak that i have understand but i have don't know how i solved it 1135613689 M * Bertl SixthSeal: allows you to run hundreds of linux distros on a single physical machine 1135613703 M * Woschak s/have// 1135613708 M * Bertl Woschak: add CAP_NET_RAW to the bcapabilities of your guest 1135613720 M * SixthSeal okay geting to technical for me lol 1135613725 M * Bertl Woschak: (and be aware that this reduces security) 1135613736 M * Woschak hm... 1135613757 M * Bertl SixthSeal: well, you know linux? 1135613763 M * SixthSeal all i know is alkaline metals are fun 1135613768 M * Woschak is it better to install the dhcp server into the host system? 1135613778 M * SixthSeal peace out 1135613780 P * SixthSeal 1135613867 M * Bertl Woschak: that's what I meant with doesn't make too much sense 1135613886 M * Bertl Woschak: especially as the dhcp has to _know_ about _all_ networks 1135613966 M * Woschak ok 1135613996 M * Woschak thx for the moment :) 1135614059 M * Bertl you're welcome! 1135614738 M * Loki|muh hum: < daniel_hozac> portmap is broken in vservers. @ 2005-08-18/#vserver 1135614775 M * Loki|muh may I assume that this hasn't changed since? 1135614775 Q * Woschak Read error: Connection reset by peer 1135614826 J * Woschak ~Woschak@83-169-157-250-dynip.superkabel.de 1135614838 M * Bertl Loki|muh: you may assume that this is valid for some portmaps 1135614859 M * Bertl Loki|muh: linux-vserver can not do anything for/against broken portmaps 1135614893 M * Loki|muh sorry I don't want to blame vserver for this 1135614928 M * Bertl the ngnet will probably provide an environment which is more suited to what some portmaps might assume 1135614958 M * Bertl but you have the portmap source, so if it isn't configurable, you can change that 1135615005 M * Loki|muh use the source, luke :) 1135615960 M * Woschak Bertl: for a better understanding. it is unsecure to run a dhcp server into a vserver? 1135615990 M * Bertl not less secure than on the host 1135616033 M * Bertl i.e. it does not reduce security (compared to the host) but it also doesn't give you a secure environment as a secure guest would 1135616146 M * Woschak ok, thx, i am away for a while 1135616370 J * meandtheshell ~itsmethem@85-124-13-98.dynamic.xdsl-line.inode.at 1135616509 M * meandtheshell hi folks - I've got a question: what is better/more secure - running a dhcpd inside a Vserver or on the host? 1135616552 M * Bertl hmm, seems we had that question a few minutes ago :) 1135616589 M * meandtheshell right - that guy told me it's better to run a dhcpd on the host. - why? 1135616635 M * Bertl let me put the 'security' like this: 1135616675 M * Bertl (on host) <= (on guest) <= (normal guest) 1135616693 M * Bertl where we could make the second less or equal a less 1135616718 M * Bertl the guest will require CAP_NET_RAW for non-ip protocols (as dhcp is) 1135616747 M * meandtheshell right - thats what the FAQ told me 1135616881 M * Bertl yes, this cap will allow the guest to create arbitrary packets (like the host) and listen (sniff) to network traffci 1135616902 M * Bertl you still get the process isolation, but it doesn't make sense to 'restrict' dhcp to IPs 1135616918 M * meandtheshell ok - I think that answered my question regarding security Issue- is there a generall suggestion where a dhcpd should run (guest or host) 1135616918 M * Bertl dinnertime, back in half an hour ... 1135616942 M * Bertl no, but IMHO the host makes less troubles 1135616949 M * meandtheshell ok - thank's ;-) 1135616959 M * Bertl (as dhcp has to know about all entworks to work) 1135616972 N * Bertl Bertl_oO 1135617551 J * monrad_ ~mikkel@213083190131.sonofon.dk 1135617654 Q * monrad Ping timeout: 480 seconds 1135617729 Q * renihs Remote host closed the connection 1135617774 N * Greek0_ Greek0 1135618220 N * Bertl_oO Bertl 1135618284 M * Loki|muh Bertl: when setting /etc/vservers/vserver-name/interfaces/iface/name, nothing changes inside the guest for me. is this option deprecated? 1135618288 M * Bertl back now 1135618308 M * Loki|muh welcome back 1135618345 M * Bertl no, you are supposed to stop athe guest _before_ you make changes there, then restart it (the guest will get an alias instead of a normal IP) 1135618378 M * Bertl (given that there is a 'dev' entry and no 'nodev' one ) 1135618452 M * Loki|muh ah 1135618472 M * Loki|muh and inside the name file there should be eth0:0 e.g. 1135618583 M * Loki|muh oh name is concatenated 1135618635 M * Loki|muh but it works now, thank you Bertl 1135618656 M * mnemoc .oO( why people use those deprecated aliases these days?? )o 1135618698 M * Loki|muh to get deprecated software to work 1135618712 M * mnemoc yuck 1135618775 Q * prae Quit: Execute Order 69 ! 1135618897 M * Bertl yeah, just removing legacy code from 2.0 patches would get rid of 20-30% 1135619382 M * Loki|muh problems, software or users? *g* 1135619418 M * Bertl lol, code lines :) 1135619426 M * FaUl lol 1135619457 M * FaUl Bertl: i wonder wether vserver is stable on ultrasparc - you will get lot of bug-reports from me if not :-) 1135619499 M * Bertl I hope so, last time I tested it did work quite fine 1135619530 M * Bertl but 2.0 was not tested on sparc at all, as I had no machine available ... 1135619532 M * FaUl sounds great :-) 1135619552 M * FaUl hm, you may get an account on our mashine if you need :-) 1135619567 M * Bertl espeically sparc64/32 compatibility would be interesting 1135619584 M * Bertl (it should work, at least in theory :) 1135619610 M * FaUl Bertl: i'm going to set up our box tomorrow 1135619628 M * Bertl good, keep me updated ... 1135619633 M * FaUl it'll run on debian sarge - with 2.6.14.4-vs2.1.0 i hope 1135619651 M * FaUl (its dual-ultrasparc-II-300 1135619653 M * FaUl ) 1135621392 M * Bertl sounds good ... 1135621497 J * Viper0482 ~Viper0482@p549755D5.dip.t-dialin.net 1135622247 M * Loki|muh http://linux-vserver.org/NFS+and+portmap I added a page concerning this portmap issue, maybe someone likes to review it and correct me if there are some faults ;) 1135622436 Q * ntrs Quit: Leaving 1135622539 M * Bertl Loki|muh: try to add 127.0.0.1 as first IP address for the guest 1135622554 M * Bertl Loki|muh: that further reduces security, but might work around the issue 1135622564 M * Bertl (127.0.0.1 as nodev) 1135623285 M * Woschak cu 1135623287 Q * Woschak Quit: Und Tsch??ss ... 1135624576 M * Loki|muh Bertl: how does adding 127.0.0.1 reduce security? 1135624610 J * eyck eyck@81.219.64.71 1135625082 M * Bertl Loki|muh: well, you can then actively sniff on localhost connections 1135625102 M * Bertl (and or reach the host) 1135625320 M * Loki|muh Bertl: as long as only one vserver has 127.0.0.1 added this won't be a security issue, will it? (if the host does only ssh) 1135625334 Q * Johnnie Quit: G'bye! 1135625344 J * Johnnie ~jdlewis@acs-24-154-53-16.zoominternet.net 1135625367 M * Bertl if there are no services on the host binding/communicating over 127.0.0.1/lo, then no 1135625393 M * Loki|muh okay 1135626577 J * lilo ~lilo@lilo.usercloak.oftc.net 1135626591 M * Bertl merry xmas lilo! 1135626620 M * FaUl *boing* 1135626901 M * Hollow hellas 1135626962 M * Hollow Bertl: i've posted the vserver release on planet gentoo this morning, along with the survey 1135626970 M * Bertl hey Hollow! merry xmas! 1135626988 M * Hollow merry xmas to you too ;) 1135627089 M * Bertl Hollow: great! 1135627201 J * liquid3649_ ~Viper0482@p549758AC.dip.t-dialin.net 1135627291 M * Bertl welcome liquid3649_! 1135627540 M * Hollow btw, for all Gentoo users, the survey is at http://dev.croup.de/survey/survey.php?uid=243afa1992cbee (i also sent this to the ML) 1135627602 A * FaUl uses gentoo on his desktop, but without vserver there 1135627620 M * Hollow too bad :) 1135627630 Q * Viper0482 Ping timeout: 480 seconds 1135627637 M * FaUl my servers are times to slow for gentoo :-) 1135627640 M * Bertl hmm, per context quota is a trick question :) 1135627666 M * Hollow well.. 1135627677 M * Hollow :) 1135627724 M * Hollow imo even non-gentoo users can answer to the survey 1135627737 M * Bertl glad that you say that :) 1135628028 M * Hollow Bertl: i miss gentoo in your answers :P 1135628060 M * Bertl well, I have to be hones, no? :) 1135628064 M * Bertl *honest 1135628073 M * Hollow indeed ;) 1135628102 M * FaUl how can i find out my version of util-vserver? 1135628114 M * Hollow vserver --version 1135628126 M * FaUl ah got it 1135628128 M * FaUl yes :-) 1135628132 M * FaUl 2.30.207 :-) 1135628142 M * FaUl 0.30.207 even 1135628156 M * FaUl what is unification? 1135628225 M * mnemoc hardlink the same file on different guests 1135628235 M * mnemoc to save space 1135628238 M * FaUl ah, ok 1135628250 M * Hollow FaUl: http://linux-vserver.org/Linux-VServer-Paper-06 1135628253 M * FaUl i guess everyone is using this since it is supported, isn't it? 1135628264 M * Hollow i don't use it 1135628265 J * lilo_ ~lilo@lilo.usercloak.oftc.net 1135628269 M * mnemoc neither do i 1135628289 M * FaUl ah 1135628366 Q * lilo Ping timeout: 480 seconds 1135628540 M * FaUl i'm not quite sure how to use this 1135628559 M * FaUl does it work without any special things to do just automagically/ 1135628609 M * Bertl with the devel release 2.1.0 yes (just use vhashify and make sure that link breaking is enabled) 1135628658 M * FaUl wow, ok, then i 'll use this on the ultrasparc... 1135628730 M * Bertl keep in mind, it's development (i.e. not considered stable yet) 1135628752 M * Bertl but you can ask Aiken (when he's around) he tested it on alpha 1135628773 M * FaUl Bertl: yes, but i can cry on irc if something won't work :-) 1135628794 M * Bertl sure you can :) 1135629055 M * FaUl Bertl: thats what you want, isn't it? 1135629076 M * Bertl definitely! well not the cry part, but the feedback :) 1135629087 M * FaUl hehe 1135629716 J * Adrinael adrinael@hoasb-ff09dd00-79.dhcp.inet.fi 1135630012 Q * liquid3649_ Remote host closed the connection 1135630850 M * Bertl welcome Adrinael! 1135631017 M * Adrinael Hello 1135631171 J * kjo ~krischan@csd-ip-139-7-60-20.vodafone-net.de 1135631184 M * Bertl welcome kjo! 1135631208 M * kjo Hi Ho 1135632870 Q * kjo Quit: Verlassend 1135633237 J * Smutje_ ~Smutje@xdsl-87-78-5-129.netcologne.de 1135633369 J * Aiken ~james@tooax8-211.dialup.optusnet.com.au 1135633399 Q * Aiken Quit: 1135633580 Q * Smutje Ping timeout: 480 seconds 1135634075 J * tudenbart ~willi@xdsl-213-196-249-121.netcologne.de 1135634082 M * Bertl wb tudenbart! 1135634146 M * meebey hi Bertl 1135634162 M * meebey Bertl: I got a problem with my /etc/mtab, is not written/created anymore in my vservers 1135634172 M * Bertl interesting ... 1135634182 M * meebey Bertl: AFAIK they was created before, I think since I moved to the new tools, that happened 1135634197 M * Bertl please define new tools 1135634202 M * meebey Bertl: its 2.4.29-vs1.2.9 btw 1135634210 M * meebey Bertl: the new strange layout tools 1135634214 M * meebey Bertl: config layoutr 1135634217 M * Skram Hiya, Bertl 1135634223 M * Bertl hey Skram! 1135634235 M * Bertl meebey: 0.30.209? 1135634236 M * Skram You seem overly excited.. 1135634243 M * meebey Bertl: df complains everyday via cron :) 1135634294 M * Bertl meebey: about your old tools? *G* 1135634321 M * meebey ii util-vserver 0.30.204-5sarge2 tools for Virtual private servers and context switching 1135634342 M * Bertl well, sarge tools are broken, unless you get the inofficial ones 1135634359 M * meebey hm? 1135634366 M * meebey mtab is broken in them? 1135634372 M * Adrinael What's broken in them? 1135634393 M * Bertl there is so much broken that I can't even remember all the details 1135634402 M * meebey please specify broken and don't just generalize 1135634421 M * meebey Bertl: they work perfect except mtab for me 1135634423 M * Bertl they are insecure, they are getting a few things wrong 1135634430 M * meebey Bertl: dont forget that you are upstream and you developed it ;) 1135634450 M * Bertl no, I didn't develop the tools, that is enrico 1135634461 M * meebey so you blame enrico when you say that :) 1135634466 M * Bertl and they were not broken, before Ola adapted' them 1135634476 Q * dothebart Ping timeout: 480 seconds 1135634478 M * meebey so you mean, Ola did bad changes? 1135634488 M * Bertl yep, definitely, ask micah and/or aba 1135634497 M * Bertl (which have to cleanup after him) 1135634517 M * meebey ok thats bad then :) 1135634526 M * Bertl it's also that the tools in sarge are more than a year old now, and that fixes did not get into them 1135634551 M * Bertl so, for me it's quite fine if you use them, but don't complain to me (or enrico) about them:) 1135634569 M * meebey if they are security related, such changes can go in, but just those (backporting security fixes) 1135634570 M * Bertl error/bug reports should be submitted to Ola 1135634594 M * meebey Bertl: so you think the mtab issue comes from the package or because its old? 1135634603 A * Adrinael checks the Debian bug db 1135634604 M * meebey aba: ping 1135634616 M * Bertl meebey: probably, as nobody with the mainline tools did report it yet? 1135634629 A * Adrinael sees that version having a bug about chroot escapes on 2.4 kernel, tagged moreinfo 1135634657 M * Bertl yes, as I said, there are quite some issues 1135634659 M * meebey Bertl: probably because I am the only one with 2.4 :) 1135634674 M * Bertl meebey: nono, micah is testing with 2.4 versions too 1135634680 M * Adrinael Okay, a lot of these bugs are fixed in a version newer-than-sarge 1135634682 M * Adrinael So... 1135634684 A * Adrinael upgrades 1135634709 M * Bertl Adrinael: _if_ you update/upgrade, make sure to get the versions micah uploaded 1135634718 M * Adrinael Will do 1135634740 M * Adrinael Fortunately I haven't deployed anything in those servers yet, I'll just wipe and build again 1135634766 M * Bertl Adrinael: if I may ask, which kernel? 1135634789 M * Adrinael 2.6.12.4 (vanilla kernel.org) with vs2.0 patch 1135634801 M * Bertl okay, you are on the safe side there ... 1135634821 M * meebey Adrinael: that bug is closed 1135634840 M * Bertl Adrinael: but you might also consider using the latest stable 2.01 release 1135634848 M * Adrinael meebey, not on the version in sarge 1135634876 M * meebey Adrinael: its wrongly tagged then 1135634892 M * meebey Adrinael: please reopen if the version in sarge is not fixed 1135634903 M * Adrinael Or I am unable to read bugs.debian.org 1135634931 M * meebey the bug is tagged as security sarge but its closed 1135634941 M * meebey and will be archived in 4 days 1135635021 M * meebey or the BTS is showing it wrong 1135635042 M * meebey its says its fixed in util-vserver 0.30.209-1 but says its resolved and will be archived 1135635048 M * Adrinael There's only one closing mail, for version 0.30.209-1 1135635068 M * Adrinael Yeah, the archiving code doesn't cope yet for the versioned bugs I think 1135635076 M * meebey Adrinael: I know, thats confusing :) 1135635093 M * meebey in 4 days will be see if it got archived or not 1135635101 M * meebey but it should be not in "Resolved" list 1135635103 M * Adrinael Dunno about the status, last I checked it was a known problem that bugs get archived if they are fixed in unstable. 1135635105 M * meebey because its still open for sarge 1135635116 M * Adrinael And bugs get listed as resolved if they are fixed somewhere. 1135635122 M * meebey hmpf 1135635132 M * meebey thats difficult for maintainers to get a clear view 1135635139 M * Adrinael Or maybe one must query the bug in a way to explicitly tell "show only bugs open on this damn version" 1135635144 M * Adrinael *shrug* 1135635196 M * meebey I dont like the debian bts because there is no invalid or bogus tag :) 1135635250 M * Bertl .o( maybe that's redundant ... :) 1135635269 M * Adrinael Well... 1135635299 M * Bertl no seriously, I'm very sad that the debian maintainer (Ola) does such a bad job 1135635301 M * Adrinael The bug is listed as "outstanding" but the information says "Done: dude ; Will be archived yadayada" 1135635314 M * Adrinael So one should listen to the titles or so 1135635327 M * Bertl and I really do not envy the folks like micah who have to clean up the mess 1135635359 M * Adrinael Hm, where can I find the package micah uploaded? 1135635476 M * Bertl I would check the 'normal' debian channels (as micah is debian developer) just look for the magic words ... 1135635487 M * Bertl s/channels/sources/whatever/ 1135635538 M * Adrinael Should packages.qa.debian.org list NMUs? (Which I assume it is) 1135635563 M * Bertl you're not asking that me, are you? 1135635569 M * meebey Adrinael: afaik it does 1135635582 M * Adrinael I'm asking anyone who can answer =) 1135635591 M * Adrinael Well, it doesn't list any non-Ola uploads 1135635599 M * meebey hm interesting 1135635600 M * Adrinael Oh well, some zzZZzz now 1135635605 M * meebey Last Version shows NMUs 1135635612 M * meebey but not Latest news 1135635616 M * meebey seems to be a bit buggy too :) 1135635621 M * meebey http://packages.qa.debian.org/b/boo.html 1135635627 M * meebey I did a NMU on that some time agao 1135635707 M * meebey Adrinael: the changelog should show the NMUs for sure 1135635742 M * meebey there was never a NMU on util-vserver in debian 1135635781 M * Bertl please ask micah about details ... 1135635804 M * meebey micah: ping 1135635856 M * meebey " * Applied patch that make it possible to build on any architecture 1135635856 M * meebey without the need of an vserver aware kernel," 1135635859 M * meebey Bertl: uh? 1135635875 M * meebey you can only build it on a vserver kernel? 1135635881 M * meebey thats very bad for bootstrapping reasons 1135635890 M * Bertl the debian package yes 1135636204 M * Bertl the mainline tools support cross compiling for at least 12 archs since 0.30.207 (tested) without any vserver kernel 1135636244 M * Bertl (and with the proper dietlibc since ever) 1135636315 N * Smutje_ Smutje 1135636586 Q * tudenbart Read error: Connection reset by peer 1135636652 J * dothebart ~willi@xdsl-213-196-249-121.netcologne.de 1135638593 J * Marinus Marinus@ip503cfa01.speed.planet.nl 1135638734 M * Bertl welcome Marinus! 1135638758 M * Marinus hello! 1135638988 M * Marinus I'm having a bit of trouble getting vserver to work on FC3 :-/ 1135639126 M * Bertl let's hear! 1135639156 M * Marinus ok, the thing is, according to the guide i'm using, yum needs to be patched for use with linux-vserver 1135639167 M * Marinus but when i get a yum source, and apply the patch i get a broken yum 1135639186 M * Bertl hmm, do you have a link to the patch? 1135639221 M * Marinus it's in util-vserver 1135639229 M * Bertl 0.30.209, right? 1135639233 M * Marinus yes 1135639239 M * Bertl sec 1135639264 M * Marinus -> /contrib/yum-2.2.1-chroot.patch 1135639397 M * Bertl okay, what yum version do you patch? 1135639419 M * Marinus i downloaded the 2.2.1 source 1135639457 M * Bertl sounds reasonable :) 1135639469 M * Bertl and, in what way does the result break? 1135639482 M * Marinus [root@celes yum-2.2.1]# yum update 1135639483 M * Marinus Traceback (most recent call last): 1135639483 M * Marinus File "/usr/bin/yum", line 7, in ? 1135639483 M * Marinus yummain.main(sys.argv[1:]) 1135639483 M * Marinus File "yummain.py", line 61, in main 1135639483 M * Marinus base.doLock() 1135639483 M * Marinus TypeError: doLock() takes exactly 2 arguments (1 given) 1135639486 M * Marinus i get this :-) 1135639504 P * meandtheshell 1135639596 M * Bertl well, seems like the patch is broken (at least to some extend) 1135639626 M * Bertl it adds a second argument .. but obviously not everywhere 1135639642 M * Marinus thats what it would seem like yeh... 1135639651 M * Bertl ah, no, sorry, it removes it 1135639675 M * Bertl so .. I'd assume that you 'jsut' have to remove the second argument there too 1135639692 M * Bertl in yummain.py", line 61, 1135639721 M * Bertl but, looking at the patch, it does exactly that 1135639728 M * Marinus maybe i applied it wrong? 1135639751 M * Bertl maybe, did you get rejects? 1135639812 M * Marinus nope, it just says that some files are patched 1135639821 M * Bertl sounds good .. 1135639844 M * Bertl could you copy/past the line 61 here? 1135639853 M * Bertl (of the patched version) 1135639905 M * Marinus base.doLock() 1135639934 M * Marinus that's it 1135639946 M * Bertl well, hmm, doLock() takes exactly 2 arguments (1 given) doesn't match for me 1135639990 M * Bertl I _assume_ there are hidden arguments like self and sel 1135640020 M * Marinus okay... 1135640026 M * Bertl but I'm no python expert .. 1135640045 M * Bertl may I suggest to take the next higher version and try a different patch? 1135640058 M * Marinus i'll give that a try, hold on 1135640078 M * Marinus lol, seems like that whole version of yum is broken 1135640082 M * Marinus even a normal source compile gives errors 1135640093 M * Bertl interesting :) 1135640257 M * Marinus hmm, i'm starting to think this has something to do with python instead 1135640287 M * Marinus just did a normal yum install from source 1135640291 M * Marinus [root@celes yum-2.3.4]# yum 1135640291 M * Marinus Traceback (most recent call last): 1135640291 M * Marinus File "/usr/bin/yum", line 14, in ? 1135640291 M * Marinus import yummain 1135640291 M * Marinus File "yummain.py", line 23, in ? 1135640293 M * Marinus from yum import plugins 1135640293 M * Marinus ImportError: cannot import name plugins 1135640434 M * Bertl doesn't look too healthy 1135640457 M * Bertl but, you are interested in a FC3 yum version, right? 1135640491 M * Marinus yes 1135640501 M * Marinus I had linux-vserver running under FC4 without any problems 1135640504 M * Bertl so, why not get the FC3 source RPM for yum 1135640521 M * Bertl edit the spec file (add the proper patch) and rebuild? 1135640548 M * Marinus how would you do that? (never did source rpms before) 1135640557 M * michal_ yum is written in Python :) 1135640577 M * Bertl Marinus: well, that's not that hard, just get the .src.rpm 1135640591 M * Bertl then do rpm -i yum*.src.rpm 1135640607 M * Marinus oh right, just like normal rpm then? 1135640609 M * Bertl after that have a look into the spec file in /usr/src/redhat/SPECS/ 1135640621 M * Bertl (probably named yum.spec) 1135640640 M * Bertl and very likely it will already contain some patches 1135640651 M * Bertl look for Patch and %patch 1135640680 M * Marinus hold on 1135640713 M * Marinus ok 1135640755 M * Marinus nope no patch 1135640784 M * Bertl well, first let's see if that source RPM would work, shall we? 1135640803 M * Bertl try 'rpm -ba /usr/src/redhat/SPECS/yum.spec' 1135640815 M * Bertl (or maybe rpmbuild instead of rpm) 1135640833 M * Marinus command not found... 1135640902 M * Bertl rpmbuild? 1135640913 M * Marinus yeh, just installed it tho 1135640925 M * Marinus ok, did that 1135640951 M * Bertl does it build something? 1135640962 M * Bertl (should list some RPMs at the end) 1135640991 M * Marinus yep, made a yum rpm 1135641004 M * Bertl okay, install that one and see if it works as expected 1135641014 M * Bertl then upload the yum.spec somewhere 1135641029 M * Bertl hey michal_ btw! 1135641039 M * Marinus yep works 1135641126 M * Marinus http://marinusnet.nl/~share/yum.spec 1135641149 M * Bertl okay, copy the 2.2.1 patch to the SOURCES dir 1135641174 M * Bertl right below Source: you add 1135641198 M * Bertl Patch: %{name}-%{version}-chroot.patch 1135641209 M * Bertl and right after the 1135641212 M * Bertl %setup -q 1135641215 M * Bertl you add 1135641224 M * Bertl %patch -p1 -b .chroot 1135641239 M * Bertl then you redo the rpmbuild 1135641491 M * Marinus well, this seems to work :-) 1135641498 M * Marinus now lets see if vserver complains about it 1135641535 M * Marinus hey hey hey! It works :-) 1135641537 M * Marinus Wicked! 1135641570 M * Bertl excellent, so please upload the source RPM somewhere and post something to the ML (maybe even add it somewhere on the wiki)