1146268858 Q * ntrs_ Ping timeout: 480 seconds 1146268982 M * Bertl btw, I opt for moving daniel_hozac to the developers section on our Hall'o'Fame, any objections? 1146269143 M * Hollow Bertl: for test reports.. http://vtpaste.croup.de/2 1146269154 M * doener fine with me 1146269178 M * Bertl Hollow: hmm, not resolvable? 1146269191 M * daniel_hozac works fine here.. 1146269196 M * doener here as well 1146269212 M * Hollow well, it's in dns < 24 hrs 1146269234 M * Hollow 85.10.237.58 would be the IP 1146269241 M * doener funny, firefox shows the page, but 'host' reports NXDOMAIN :) 1146269250 M * Hollow heh 1146269272 M * daniel_hozac my host both tells me the IP and says NXDOMAIN :) 1146269289 M * Bertl interesting, I see the nameserver entry 1146269310 M * Bertl and the nameserver also 'knows' about it, but I don't get the host entry 1146269374 M * Bertl ah, your third nameserver does not know about it :) 1146269380 M * Hollow anyway, it's just a pastebin i setup for test reports.. 1146269384 M * Hollow Bertl: hm.. 1146269385 M * Bertl and it seems I accidentially got that one :) 1146269411 M * Bertl dig vtpaste.croup.de @85.10.198.150 1146269582 M * Hollow argh 1146269594 M * Hollow The slave I/O thread stops because master and slave have different values for the COLLATION_SERVER global variable 1146269756 J * ntrs ~ntrs@68-188-51-87.dhcp.stls.mo.charter.com 1146269761 M * Bertl welcome ntrs! 1146269778 M * Hollow Bertl: ok, works again ;) 1146269794 M * daniel_hozac i think we'll need http://daniel.hozac.com/vserver/delta-plm-fix03d.diff too (for devel). 1146269811 M * daniel_hozac (at the very least the first hunk) 1146269909 M * Bertl Hollow: great! this one is persistant? 1146269917 M * daniel_hozac hmm, but that won't work... 1146269968 M * daniel_hozac ok, forget all about the mm/filemap.c hunks for now. 1146270035 M * Hollow Bertl: yes, i can leave it there... 1146270046 M * Hollow i also have a .bashrc oneline to paste stdin 1146270065 M * Hollow curl -F poster=Hollow -F "code2=<-" -F "parent_pid=" -F "paste=Send" http://vtpaste.croup.de/pastebin.php 1146270073 M * Bertl okay, then I will learn that url for the future, maybe also a redirect from paste.linux-vserver.org? 1146270112 M * Hollow if you point the domain at the above ip, we even need no redirection.. 1146270128 M * Bertl okay, but you probably need to handle that name then 1146270142 M * Hollow yup, doing it right now 1146270241 M * Hollow ok, done 1146270396 M * daniel_hozac hmm, why does mm/filemap.c use a struct iovec? shouldn't it use a struct kvec? 1146270548 M * Bertl /var/www/paste.linux-vserver.org/lib/pastebin/db.mysql.class.php on line 49 Unable to connect to database 1146270562 M * Bertl hmm, linebreak :) 1146270617 M * Bertl okay, http://paste.linux-vserver.org/ should work 1146270657 M * daniel_hozac hey cool. 1146270668 M * daniel_hozac just for test results or general purpose? 1146270695 M * Bertl well, I'd assume we use it for all posting related stuff, no? 1146270711 M * Bertl (at leat that would make sense to me) 1146270723 M * Hollow yup, ok as well 1146270755 M * Hollow Bertl: but the one-liner above needs no-color output, could you add that to testme.sh? testfs.sh already has -n 1146270769 M * Bertl yep, is in my queue 1146270787 M * Hollow ok, good :) 1146270797 M * Bertl but, funny idea, maybe we should use the color codes for the pastebin too? 1146270818 M * Bertl shouldn't be too hard to rewrite those color sequences ... 1146270818 M * Hollow hm.. i.e. code hacking ;) 1146270854 M * Hollow (and it's php) 1146270858 M * Hollow .. 1146270876 M * Bertl btw, it looks pretty nice IMHO 1146270887 M * Hollow it's the one from pastebin.com 1146270892 M * Hollow you can download the source 1146270918 M * Hollow but i increased the max number of posts, so no entries will be deleted in the next couple of years probably ;) 1146271072 M * Hollow i also tested for the lateancy issue again with rc18, seems all gone now :) 1146271100 M * Bertl great! 1146271170 M * Hollow off to bed then.. night all! 1146271178 M * Bertl good night Hollow! 1146271187 M * daniel_hozac good night! 1146271505 M * daniel_hozac http://daniel.hozac.com/vserver/delta-kvec-fix01.diff 1146271635 M * Bertl hmm, where does the new inline function come from? 1146271695 M * daniel_hozac it's mm/filemap.h:filemap_set_next_iovec for kvec. 1146271736 M * Bertl so we duplicate that? 1146271751 M * daniel_hozac yeah, like all the other functions. 1146271783 M * Bertl okay, do you see a chance to re-unify them? 1146271795 M * Bertl maybe by generalizing one? 1146271838 M * daniel_hozac well, they operate on different structs. 1146271917 M * daniel_hozac (the structs should be the same, with the only difference being the __user of iov_base in iovec) 1146271956 M * Bertl hmm, okay, let's duplicate them for now 1146273333 Q * mkhl Quit: 1146273563 Q * doener Quit: leaving 1146274530 Q * DEac- Ping timeout: 480 seconds 1146275311 J * DEac- ~deac@xdsl-81-173-162-238.netcologne.de 1146276900 M * daniel_hozac hmm, why is buf const char * in generic_kernel_file_write? a constant buffer doesn't make much sense, does it? 1146276945 M * daniel_hozac (plm + kvec gave me a warning about it) 1146277250 M * Bertl checking 1146277358 M * Bertl hmm, seems like the buffer contents is written 1146277377 M * Bertl so a const IMHO makes sense there (from this point of view) 1146277388 M * daniel_hozac hmm? 1146277406 M * daniel_hozac is there a missing no in that sentence? 1146277431 M * Bertl IMHO it's written from the buffer, not to ... 1146277614 M * daniel_hozac ah, yes. 1146277682 M * daniel_hozac we'll need the .iov_base = (char *) buf cast then in generic_kernel_file_write. 1146277864 M * daniel_hozac delta-kvec-fix01 updated in place. 1146278021 M * daniel_hozac that was the only vserver-related warning from the rc18+plm+kvec allyesconfig. 1146286443 M * Bertl okay, off to bed now ... have a good one everyone! 1146286453 N * Bertl Bertl_zZ 1146286656 Q * Smutje Quit: leaving 1146291494 Q * Hollow Remote host closed the connection 1146291882 J * ksf ~krazy_sys@202.80.169.52 1146293304 J * Smutje ~Smutje@xdsl-87-78-98-134.netcologne.de 1146296391 J * Hollow ~hollow@home.xnull.de 1146296967 Q * _coocoon_ Quit: KVIrc 3.2.0 'Realia' 1146298734 J * bonbons ~bonbons@83.222.39.134 1146299479 J * _coocoon_ ~coocoon@p54A0595B.dip.t-dialin.net 1146300185 Q * _coocoon_ Quit: KVIrc 3.2.0 'Realia' 1146301366 J * intrigeri ~user@intrigeri.boum.org 1146301369 M * intrigeri hello 1146301469 M * intrigeri I'm wondering if the BME patch is already included in 2.0.2-rc* against 2.6.1{5,6} 1146301643 M * intrigeri I've tried to compile a 2.6.16 kernel with vs2.0.2-rc15 and patch-2.6.16-rc1-bme0.06.2.diff but the compilation fails, so I guess this is not the tright patch 1146301943 M * intrigeri and when I try to patch a 2.6.15.6+vs2.0.2-rc13 with patch-2.6.15-bme0.06.2.diff, I get tons of "already applied patch detected" errors, 1146301948 M * intrigeri that's why I'm wondering 1146301964 M * intrigeri micah, any clue ? 1146302079 M * intrigeri second question: is BME included in 2.1.x series ? having lost track of vserver patch dev a few months ago, I don't remember 1146302351 Q * ZLinux Ping timeout: 480 seconds 1146302477 J * ZLinux ~Zaki@212.107.125.149 1146303883 J * _coocoon_ ~coocoon@p54A0595B.dip.t-dialin.net 1146304556 Q * DEac- Remote host closed the connection 1146306767 J * Viper0482 ~Viper0482@p54977E50.dip.t-dialin.net 1146308427 Q * softi42 Ping timeout: 480 seconds 1146308583 Q * shedi Quit: Leaving 1146308981 J * softi42 ~softi@p549D59F6.dip.t-dialin.net 1146309768 M * daniel_hozac intrigeri: yes, BME has been included in 2.1, as well as 2.0.2 since the early rcs. 1146310088 M * _coocoon_ daniel_hozac: need a little bit help don't know why i am getting this error on testme.sh http://paste.linux-vserver.org/3, maybe it is stupid but have tried a lot of settings 1146310088 Q * sukria Read error: Connection reset by peer 1146310159 M * daniel_hozac _coocoon_: you enabled the legacy version option in the kernel, and disabled the legacy APIs in util-vserver. 1146310191 M * _coocoon_ hm ok will reconfigure util-vserver 1146310252 J * Zaki_ ~Zaki@212.118.99.60 1146310394 Q * ZLinux Ping timeout: 480 seconds 1146311799 J * sukria ~sukria@www.sukria.net 1146311803 Q * FireEgl Quit: Bye... 1146312123 Q * ksf Quit: 1146312380 Q * _coocoon_ Quit: KVIrc 3.2.0 'Realia' 1146316725 J * lilalinux ~plasma@dslb-084-058-232-034.pools.arcor-ip.net 1146316905 M * tokkee Is it possible to run oidentd in a vserver? 1146316924 M * Loki|muh yep 1146317013 M * tokkee Hum... 1146317034 M * tokkee A default installation does not start... 1146317075 J * _coocoon_ ~coocoon@p54A075BC.dip.t-dialin.net 1146317216 M * tokkee oidentd[17327]: Fatal: Unable to setup listening socket 1146317264 M * tokkee What have I done wrong? 1146317330 M * tokkee *ga* The oidentd in the host already used the address... 1146317344 M * Loki|muh hehe ;) 1146317456 M * tokkee *ga* s/used/uses/ ;-) 1146318886 J * doener ~doener@i5387CAB9.versanet.de 1146319520 M * [PUPPETS]Gonzo doener sounds good, I think I'm going to get one :) 1146320453 J * matti matti@linux.gentoo.pl 1146320719 M * lilalinux tsk 1146320842 Q * Hollow Read error: Connection reset by peer 1146321246 Q * nebuchadnezzar Quit: ERC Version 5.1.2 $Revision: 1.796.2.4 $ (IRC client for Emacs) 1146321310 J * nebuchadnezzar ~nebu@zion.asgardr.info 1146321869 J * FireEgl Atlantica@Atlantica.Tcldrop.Com 1146322146 J * Zaki[] ~Zaki@212.118.97.162 1146322389 Q * Zaki_ Ping timeout: 480 seconds 1146323854 J * hillct ~H@client200-5.dsl.intrex.net 1146323882 M * hillct Good afternoon all 1146323890 M * phedny hi hillct 1146323916 M * hillct I'm running 2.01-pre2 and having problems with RLimits 1146323976 M * phedny I didn't work with RLimits, so you might want someone else to help you ;) 1146323990 M * hillct I just added a couple new vservers to this one box and am now worried about memory usage, but last time I tried limiting memory, it didn't work worth a damn 1146323998 M * hillct Bertl_zZ: ping 1146324017 M * hillct phedny: thanks tho 1146324027 M * Skram Hey all. 1146324039 M * hillct hey Skram 1146324232 J * W0nka ~wklaebe@wonka.toppoint.de 1146324262 Q * Wonka Quit: vserver basteln 1146324292 M * doener hillct: http://linux-vserver.org/Memory+Management and http://linux-vserver.org/Memory+Allocation and some of the pages linked from there, are probably worth reading 1146324329 N * W0nka Wonka 1146324331 M * hillct doener: guess those are new (since I last thought about vserver config 8 montrhs ago) 1146324335 M * hillct thanks 1146324338 A * hillct reads 1146324360 J * shedi ~siggi@inferno.lhi.is 1146326275 M * hillct interesting 1146326284 M * hillct although, aparently inconsistant 1146326292 M * hillct doener: ping 1146326333 M * harry in.imapproxyd[26582]: ServerInit(): setrlimit() failed to set max number 1146326333 M * hillct doener: the Memory Alocation page talks about the limiting files being at the top level of the vserver config tree /etc/vservers//rss etc 1146326334 M * harry of open file descriptors to 6154: Operation not permitted 1146326381 M * hillct doener: the flower page talks about such limits being set inside the rlimits directory /etc/vservers//rlimits/rss etc 1146326424 M * hillct any guedance here? 1146326477 A * harry wasn't following 1146326479 M * harry sry 1146326697 N * Bertl_zZ Bertl 1146326704 M * Bertl morning folks! 1146326708 M * Bertl hillct: pong! 1146326737 M * hillct Bertl: !!! 1146326744 M * hillct Bertl: you're my hero! 1146326752 M * harry hey Bertl 1146326758 M * Bertl hillct: am I? 1146326763 M * Bertl hey harry! 1146326764 M * daniel_hozac hillct: memory allocation is wrong. 1146326767 M * daniel_hozac i meant to update that.. 1146326805 M * hillct so the limits are specified in the rlimits directory as per the flower page? 1146326855 M * daniel_hozac yes. 1146326859 M * daniel_hozac the flower page is always right. 1146326902 M * hillct K 1146326931 M * hillct last time I tried to use an rss limit it just killed the vserver if memory serves (this was 8 months back) 1146326945 M * harry webmailtest:/# ulimit -n 8192 1146326945 M * harry bash: ulimit: open files: cannot modify limit: Operation not permitted 1146326947 M * hillct which i guess is preferable to killing the host 1146326987 M * Bertl hillct: you probably want hard and soft limits with devel 1146327011 M * hillct my last upgrade experience was not good 1146327016 M * hillct live production server 1146327034 M * hillct so I may hold off on that for a bit, but it's good to know they're there. 1146327054 M * Bertl alternatively you can set very high limits 1146327061 M * hillct yeah 1146327064 M * hillct which is fine 1146327068 M * Bertl just to make sure that a rogue guest does not take down the system 1146327081 M * hillct I just had the host run out of memory last night, not 10 minutes after I went to bed 1146327092 M * hillct so i want to try and avoid that in the future 1146327145 M * Bertl hmm, even swap space? 1146327166 M * hillct I have 8GB physical and 2GB swap 1146327187 M * waldi Bertl: does the ccaps problem have a CVE id assigned? 1146327202 M * Bertl CVE? 1146327242 M * waldi read http://cve.mitre.org/ 1146327290 M * Bertl well, it's a little hard to classify 1146327304 M * Bertl the typical setup uses ccaps of 0x101 1146327322 M * Bertl which means that user can set the hostname and use ping 1146327418 M * Bertl so, while I do not want to play down the issue, it is a severe issue from our PoV 1146327432 M * waldi okay, CVE is already requested 1146327443 M * Bertl the typical exploitability is probably not really there 1146327485 M * Bertl okay, off to dinenr now .. back shortly 1146327492 N * Bertl Bertl_oO 1146327496 M * harry hmm... 1146327500 M * harry no answer for my problem? 1146327521 M * harry afaik: echo 8192 > /etc/vservers//rlimits/nofile 1146327523 M * harry ? 1146327540 M * harry or give the vps the appropriate capability? 1146327891 M * daniel_hozac that or disabling the limit setting in your daemon. 1146327910 M * harry it's probably there for a reason 1146327938 M * thorkild I am currently using nfs to let the guests mount a specific subset of directories from the host. This works quite well as far as I can see, but it got me thinking, is there another way? Is it possible to give the guests the capability to mount part of a filesystem from the host? (I am mostly curious, nfs solves my situation) 1146328045 M * Wonka can anyone tell me how a guest can see how much of it's Disk Limit it has used? 1146328216 M * hillct harry: I would go with setting the CAPs 1146328249 M * daniel_hozac Wonka: df 1146328269 M * Wonka argh! i forgot to chxid... 1146328275 M * daniel_hozac hillct: only if you trust your guests... 1146328291 M * daniel_hozac thorkild: mount --bind from the host into the guest provides the lowest overhead. 1146328294 M * hillct this is a mail server right? 1146328304 M * harry now for something completely different 1146328307 M * hillct wou won't have users with significant access 1146328308 M * harry i need a smartphone 1146328311 M * harry with everything on it 1146328325 M * Wonka daniel_hozac: and then, df will show $limit available? 1146328327 M * harry i NEED: wifi, bluetooth, cellphone, ... 1146328342 M * daniel_hozac Wonka: yep. 1146328346 M * hillct I just got a SE z520a 1146328351 M * hillct nice phone 1146328357 M * hillct no EDGE support tho 1146328368 M * hillct get a Z500 if you want EDGE 1146328376 M * hillct although 1146328381 M * Wonka daniel_hozac: can i see which XID a file belongs to? 1146328382 M * hillct no wifi for either 1146328386 M * daniel_hozac Wonka: lsxid. 1146328390 M * Wonka thx 1146328393 M * harry i need wifi 1146328404 M * hillct buily in modem support though, which is what I need 1146328416 M * hillct I use it as a bluetooth modem with my laptop 1146328951 M * thorkild daniel_hozac: cool, I didn't know you could bind through the barrier. I'll try that. thanks. 1146329017 N * Bertl_oO Bertl 1146329021 M * Bertl back now ... 1146329033 M * daniel_hozac thorkild: note that the guest cannot request a mount --bind when it feels like it, you'll need to do that from the host. 1146329043 M * daniel_hozac wb Bertl 1146329054 Q * Viper0482 Ping timeout: 480 seconds 1146329337 M * Bertl harry: regarding your limit issue, did you check hard limits? 1146329527 J * Blissex ~Blissex@82-69-39-138.dsl.in-addr.zen.co.uk 1146329536 M * Bertl welcome Blissex! 1146329549 M * Blissex hi! 1146329608 J * Viper0482 ~Viper0482@p5497502D.dip.t-dialin.net 1146330515 M * Wonka aaaargh! 1146330522 M * Wonka i cannot enter my vserver anymore 1146330538 M * Wonka not even from the host 1146330542 M * daniel_hozac hmm? 1146330552 M * Wonka "file not found", it says 1146330563 M * daniel_hozac for? /dev/pmtx? 1146330567 M * daniel_hozac +spelling 1146330573 M * Wonka after a reboot, i mounted /var/lib/vservers with tagxid 1146330581 M * daniel_hozac ah. 1146330587 M * Wonka then, i ran chxid -R -c chaos /var/lib/vservers/chaos 1146330599 M * Wonka did a "vserver chaos start" 1146330606 M * daniel_hozac and chaos does have a static context? 1146330606 M * Wonka and "vserver chaos enter" errrors 1146330610 M * Wonka yes 1146330630 M * daniel_hozac did you do that to another guest after you did it to chaos? 1146330637 M * daniel_hozac do you have hashified/unified files? 1146330684 M * Wonka they were hashified before, and i did chxid all of my guests 1146330695 M * Wonka hrm 1146330709 M * daniel_hozac chxid -R -c 0 /var/lib/vservers/.hash 1146330724 M * Wonka running... 1146330782 M * Wonka btw, can one automate hashifying all guests at regular intervals? 1146330830 M * daniel_hozac put a cron script that does for i in /etc/vservers/*; do vserver $i hashify; done? 1146330832 M * Skram can anyone think of a clever vanity 800 pertaining to VPSes I should buy? 1146330928 M * Wonka daniel_hozac: thought there was something not as simple looking ;) 1146331022 Q * lilalinux Ping timeout: 480 seconds 1146331172 M * Bertl daniel_hozac: maybe an option to exclude unified files from chxid? 1146331290 M * Wonka daniel_hozac: thanks. seems to work again. 1146331301 M * Bertl btw, didn't Enrico say he would have more time for the tools now? 1146331554 J * lilalinux ~plasma@dslb-084-058-201-160.pools.arcor-ip.net 1146332166 M * Bertl wb lilalinux! 1146332446 M * daniel_hozac Bertl: yeah, that should probably be made default too. 1146332704 M * Wonka where can i find what the flags in /etc/vservers//flags do? 1146332730 M * daniel_hozac http://linux-vserver.org/Caps+and+Flags 1146332774 M * Wonka could someone set a link there in the Great Flower Page? 1146332797 M * Wonka .oO( or even better, move the Flower Page to the wiki? ) 1146332921 M * Wonka are the legacy flags somehow replaced in 2.0? 1146332928 M * Wonka "legacy" sounds to me like "outdated" 1146332952 M * Bertl Wonka: the problem with moving that is that nobody will keep it up-to-date then 1146332983 M * Wonka mh. 1146332996 M * Wonka wouldn't it be as easy to keep up to date in the wiki? 1146333016 M * Bertl if you do that, great! 1146333031 M * Bertl by default, the Flower Page is auto generated from the sources 1146333035 M * Wonka ah, ok 1146333043 M * Bertl (well, the xml description) 1146333047 M * Wonka that's a Reason[tm] 1146333384 M * nebuchadnezzar sorry to be rude but the flower page is far from being great :-) 1146333396 M * Bertl nebuchadnezzar: why? 1146333415 M * nebuchadnezzar I prever the borring style, the flowers hut my eyes 1146333415 M * nebuchadnezzar :-) 1146333441 M * nebuchadnezzar hurt 1146333452 M * Bertl well, that's why there are severalstylesheets :) 1146333760 M * hillct looks like this is working 1146333764 M * hillct thanks all 1146333770 P * hillct Kopete 0.11.1 : http://kopete.kde.org 1146333860 J * ray6 ~ray@vh5.gcsc2.ray.net 1146333887 M * Bertl wb ray6! 1146333894 M * ray6 ree bertl 1146334013 M * Wonka hrmm 1146334032 M * Wonka how do i make mounts show up in a guest's /etc/mtab? 1146334065 M * Wonka when i start a vserver, only /proc and /dev/pts show up there 1146334069 M * Wonka not /tmp or / 1146334083 M * daniel_hozac how do you mount /tmp and /? 1146334121 M * daniel_hozac and are you sure that's not an initscript in your guest? 1146334133 M * Wonka is not specially mounted, and /tmp is in /etc/vservers/chaos/fstab 1146334140 M * Wonka +/ 1146334143 M * Wonka not sure... 1146334190 M * Bertl Wonka: use echo or the mtab in the config 1146334250 M * Wonka "in the config"? 1146334261 M * Wonka like, /etc/vservers//mtab? 1146334261 M * Bertl echo "/dev/hdv1 / ext2 rw 0 0" >/vservers//mtab 1146334275 M * Bertl oops /etc/mtba 1146334284 M * Wonka mh 1146334288 A * Bertl .o( I give up trying to correct that :) 1146334299 M * Wonka should be automatically done on starting, i think... 1146334303 M * daniel_hozac and it is. 1146334314 M * Bertl that's why I said: "or in the config" 1146334360 M * Wonka mh. 1146334489 M * Wonka btw, "df" in a guest shows 161G being available, and 44G being used, despite the guest having a disk limit of 50G and using about 15G 1146334504 M * Wonka i suspect i'm doing something wrong... 1146334718 M * daniel_hozac how did you set the disk limit? 1146335090 Q * Viper0482 Remote host closed the connection 1146335390 M * Wonka daniel_hozac: like said on http://linux-vserver.org/Disk+Limits, put the guest's root into dlimits/0/directory and $((5*1024*1024)) into dlimits/0/space_total 1146335407 M * daniel_hozac you _must_ have inodes_total as well. 1146335421 M * daniel_hozac and reserved. 1146335429 M * daniel_hozac all the entries are required. 1146335440 M * Wonka mhmh 1146335455 Q * mire Quit: Leaving 1146335469 M * daniel_hozac (i suppose we could use some "sane defaults" for those...) 1146335497 M * Wonka sane value for inodes_total? 1146335516 M * Wonka .oO( how do i find out how many inodes the FS supports? 1146335520 M * daniel_hozac if you don't want to limit it, df -i 1146335596 M * harry Bertl: where do i check hard limits? 1146335617 M * daniel_hozac ulimit -H 1146335640 M * harry how do you change hard limits? 1146335641 M * Bertl ulimit -Ha 1146335651 M * Bertl same as soft limits, with ulimit 1146335681 M * Wonka still 44G used, 161G avail 1146335688 M * harry webmailtest:/# ulimit -H -n 8192 1146335688 M * harry bash: ulimit: open files: cannot modify limit: Operation not permitted 1146335709 M * harry and, why can't i find a ulimit binary? 1146335717 M * daniel_hozac Wonka: you'll need to shut the guest down, and then remove the cache file. 1146335719 M * harry which ulimit gives me nothing :s 1146335725 M * Bertl harry: because it's a bash internal := 1146335736 M * harry thought so :s 1146335738 M * daniel_hozac Wonka: and you did restart the guest after setting it too, right? 1146335742 M * harry wasn't sure 1146335747 M * Bertl harry: I suspect that your host has already a hard limit 1146335755 M * harry Bertl: it's all standard 1146335756 J * mire ~mire@231-167-222-85.COOL.ADSL.VLine.verat.net 1146335761 M * harry so i don't know ;) 1146335762 M * Wonka daniel_hozac: i restarted it, but didn't know about removing the cache file 1146335773 M * Bertl harry: on the host, try ulimit -HA 1146335781 M * Bertl ulimit -Ha even 1146335797 M * Bertl the guest will not be able to get over this one easily 1146335849 M * harry it's 1024 :s 1146335859 M * harry can i change this for some vps'es only? 1146335882 M * Bertl basically yes, but I'm not sure if the tools support that, daniel_hozac? 1146335922 M * harry on the flowerpage... /etc/vserver//etc/rlimits/nofile 1146335923 M * harry ? 1146335942 M * daniel_hozac ulimits/nofile 1146335976 M * Bertl harry: the rlimits are for the entire guest 1146335990 M * Wonka noooow it works 1146335992 M * Bertl harry: the ulimit is for the guest but per process 1146336099 Q * Blissex Remote host closed the connection 1146336620 M * _coocoon_ does anyone know who is responsible for this side http://deb.riseup.net/ ? 1146336848 M * daniel_hozac micah 1146336859 M * _coocoon_ oh aha thanx daiel 1146336862 M * _coocoon_ +n 1146337652 J * W0nka produziert@chaos.in-kiel.de 1146337664 M * Bertl wb W0nka! 1146337695 M * eyck WIlly W0nka 1146337736 M * Bertl hey eyck! you missed a chance to improve legacy support a few days ago ... 1146337784 M * Bertl eyck: but I think we made a good choice anyway 1146337878 M * eyck damn, :( I'm always not there when there's something interesting happening, gotta quit my day job :( 1146337906 M * eyck good, I trust you made the right choices :) 1146337915 M * Bertl hehe, well, you can still object ... 1146337936 M * Bertl we decided to add the hide_netif and info_init for legacy guests 1146337966 M * Bertl (hopefully making them look like the originals) 1146338020 Q * Wonka Quit: vserver basteln beendet 1146338020 N * W0nka Wonka 1146338777 J * f_ ~f_@83-215-237-1.seek.stat.salzburg-online.at 1146338791 M * Bertl welcome f_! 1146338804 M * f_ hi Bertl 1146340202 Q * mnemoc Ping timeout: 480 seconds 1146340676 J * mnemoc ~amery@216.241.24.10 1146341997 Q * mire Quit: Leaving 1146342243 J * mire ~mire@1-167-222-85.COOL.ADSL.VLine.Verat.NET 1146342754 Q * f_ Quit: Leaving 1146342771 J * kir_home ~kir@ffm-nat.sw-soft.de 1146343000 M * Bertl wb mire, mnemoc, kir_home! 1146343056 M * kir_home Bertl, hi :) 1146343304 M * mire hello 1146344007 M * micah is there a difference between if (!vx_capable(CAP_SYS_ADMIN, VXC_QUOTA_CTL)) and if (!capable(CAP_SYS_ADMIN) && !vx_ccaps(VXC_QUOTA_CTL)) 1146344026 M * daniel_hozac yes. 1146344033 M * daniel_hozac significant difference. 1146344035 M * micah well, the capable vs vx_capable 1146344041 M * daniel_hozac it's what fixes the security issue. 1146344047 M * micah yes, I am looking at it now 1146344050 M * daniel_hozac (with users being able to use context capabilities) 1146344053 M * micah but I mean... 1146344059 M * daniel_hozac just look at vx_capable's definition. 1146344076 M * micah is there a difference between if (!vx_capable(CAP_SYS_ADMIN, VXC_QUOTA_CTL)) and (!vx_capable(CAP_SYS_ADMIN) && !vx_ccaps(VXC_QUOTA_CTL)) 1146344099 M * micah they both seem to be the same test 1146344131 M * Bertl they are _similar_ 1146344149 M * micah oooh, I see it now 1146344157 M * micah difference between vx_capable and vx_ccaps 1146344276 M * daniel_hozac vx_capable uses capable and vx_ccaps. 1146344342 M * micah so this fix changes any occurance of if (!capable(CAP_SYS_ADMIN) to if (!vx_capable(CAP_SYS_ADMIN...? 1146344350 M * daniel_hozac no. 1146344362 M * daniel_hozac any occurence of capable(...) && vx_ccaps. 1146344468 M * micah ok, I'm updating the older sarge patch 1146344853 M * Bertl hmm? which kernel/patch is that? 1146344866 M * daniel_hozac 2.6.8+1.9.5.* IIRC. 1146344874 M * Bertl eeek! 1146344878 M * daniel_hozac indeed. 1146344890 M * Bertl well, I would not bother ... 1146344907 M * Bertl (guess there are at least 3 other issues with that, no?) 1146345242 M * daniel_hozac just 3? :) 1146345415 A * micah raises eyebrows 1146345420 M * micah other issues? 1146345482 M * daniel_hozac well... 2.0, 2.0.1 and 2.0.2 aren't exactly _just_ rebases to newer kernels :) 1146345544 M * micah i did not see any security announcements about issues in those 1146345616 M * daniel_hozac so as long as the bugs aren't marked security, they're fine? :) 1146345654 M * micah i would hope that security bugs that are uncovered are disclosed so that people are aware of the issues 1146346538 M * _coocoon_ micah: hello, have some questions to SysCP installation from http://deb.riseup.net 1146347683 M * _coocoon_ micah:ok i hope u r there afterinstalling the different vservers for mysql postfix apache2 and bind9 i only need to install syscp, because of there is also a way to install it directly from syscp with all recommended applications 1146347999 M * micah _coocoon_: what is the question? 1146348490 M * ray6 oh, syscp with a vservered environment for the individual services? sounds funny 1146348556 M * _coocoon_ micah: 1. why not the way which syscp preferred 2. what if all vserver has configured do i need only install syscp sw 1146348661 M * micah _coocoon_: 1. I wanted to separate services 1146348683 M * micah _coocoon_: 2. yes, I think so, but I dont know how you configured 1146348701 M * _coocoon_ micah: hehe 1146348723 M * _coocoon_ micah: that is my question how must i configure it then 1146348750 M * _coocoon_ also another question is the bind9 problems do theyx appear only with debian woody and sarge 1146348762 M * _coocoon_ bind9 problems in guests 1146348805 M * micah _coocoon_: in some of those instructions are configuration specifics for syscp, such as: http://deb.riseup.net/web-server/syscp/install/apache-vserver/#changes_to_syscp_configuration 1146348829 M * micah _coocoon_: I dont know, I haven't tested etch/sid bind9 1146348870 M * _coocoon_ micah ok thanx alot 1146348914 M * _coocoon_ micah: another thing which i wanted to say is that i love this side it has helped me in a lot of things, thank u very much for this side 1146348915 J * Viper0482 ~Viper0482@p5497502D.dip.t-dialin.net 1146349000 M * micah _coocoon_: hehe, glad you like it, I need to do some updates 1146349066 M * _coocoon_ yes thats right too, thre best thing i like is "Building CPAN modules as debian packages" 1146349073 M * _coocoon_ ;-) 1146349304 M * _coocoon_ hm i mean does the problem also exist with fedora 1146349316 M * _coocoon_ or only with debian distros 1146349327 M * _coocoon_ the bind9 problem 1146349398 M * Bertl with 2.1.1-rc18 the bind9 problem should be gone 1146349414 M * _coocoon_ oh cool 1146349427 M * _coocoon_ i have this 1146349432 M * _coocoon_ i will try 1146349435 M * _coocoon_ thanx bertl 1146349516 M * _coocoon_ it works 1146349522 M * _coocoon_ why so complicated 1146349562 M * Bertl well, it was worked around a few days ago 1146349578 M * _coocoon_ cool 1146349847 M * _coocoon_ micah: mysql server is the only needed service which shall run on the host right 1146349898 Q * bonbons Quit: Leaving 1146349953 M * micah _coocoon_: I have a vserver for mysql, separate, so the host runs nothing 1146349995 M * _coocoon_ micah: in which vserver do u put spamassassin and antiviral sw 1146350017 M * _coocoon_ micah; and syscp 1146350263 M * _coocoon_ micah: have found it here http://deb.riseup.net/web-server/syscp/Diagram4.png looks good 1146350267 M * _coocoon_ thanx a lot 1146351008 M * micah _coocoon_: we actually do not do any mail processing, but instead only allow forwards 1146351164 M * _coocoon_ micah: ok tahnx a lot 1146351717 Q * brc_ Ping timeout: 480 seconds 1146352990 Q * Viper0482 Quit: bin raus, 1146353116 Q * kir_home Quit: Ухожу я от вас 1146353982 Q * _coocoon_ Ping timeout: 480 seconds 1146354541 M * h01ger micah, pong - are you using the plugins as in svn atm? 1146354569 J * _coocoon_ ~coocoon@p54A0644B.dip.t-dialin.net 1146354596 M * micah h01ger: i am using the ones based off of yours right now 1146354621 M * h01ger as in svn ? or a different version? :) 1146354656 M * micah the ones in svn that are based off of yours :) 1146354669 M * micah I slightly modified yours and checked them in 1146354703 M * h01ger yes :) i just dont wanted to try them out and then hear from u, that you u a locally modified version :) 1146354723 M * h01ger good, so i will update my installation 1146354727 M * _coocoon_ micah:h01ger:apropos svn, i've got from hollow the adress to the xmlrpc frontend but i missed the adress, can u please give me the adress 1146354767 A * h01ger has no idea, _coocoon_ :( 1146354790 M * micah h01ger: no, i dont have any locally modified ones now, I've been too distracted by my laptop dying and having to re-ip a whole colo 1146354814 M * micah h01ger: and as you know, a working laptop makes debconf so much nicer :) 1146354818 M * h01ger micah, fair enogh :-/ 1146354836 M * _coocoon_ ok i thought that u know it no prob thanx 1146354841 A * h01ger grins - will reinstall+cryptsetup mine tomorrow :) 1146354963 M * daniel_hozac _coocoon_: http://dev.croup.de/proj/vserver-utils/browser/trunk/ 1146355063 M * _coocoon_ daniel_hozac: very nice thanx