1151021028 M * Radiance hiya guys 1151021072 M * Radiance test 1151021075 M * harry 12 1151021091 M * doener_ 12? 1151021098 M * harry test 12 :) 1151021124 P * Radiance - 1151021132 J * Radiance e24b4f8ebd@halt.1984world.eu 1151021136 M * Radiance ok :) 1151021139 M * harry :) 1151021143 M * Radiance thanks harry ;) 1151021146 M * harry what for? :) 1151021152 A * harry didnt do anything 1151021155 M * Radiance for squeezing me :) 1151021161 M * harry lol 1151021180 M * Radiance btw, if i use a private ip in vserver 1 then it's no problem to use the exact same private ip in vserver 2 right ? 1151021223 M * doener_ should be fine, just take care, that the one vserver does not tear the address down while the other one is using it ;) 1151021231 M * doener_ and of course, each port can only be used once 1151021239 M * harry its not recommended ;) 1151021265 M * harry doener_: any ideas on how to lower the priority on routing over that 192.168 network? 1151021268 M * Radiance lol ok 1151021276 M * Radiance i'll change it heh 1151021285 M * doener_ i'm just checking the routing kernel source, I have nothing here to test it 1151021304 M * harry where are you? maybe i can help 1151021346 M * doener_ inet_select_addr right now 1151021375 M * harry config:/usr/local/config/kernel# ls -d linux-2.*|wc -l 1151021376 M * harry 36 1151021385 A * harry has to trim down on kernel trees imho ;s 1151021401 M * doener_ heh, bertl has thousands 1151021426 M * harry yeah 1151021437 A * harry might backport rc24 to 2.6.16.20 btw 1151021448 M * doener_ not .22? 1151021456 M * daniel_hozac there's a .22 now? 1151021462 M * harry that 2.6.17 is gonna be more than a laugh than 2.6.16 1151021469 M * harry doener_: i'm running rc22 now 1151021479 M * daniel_hozac he meant 2.6.16.22. 1151021481 M * harry but i'm not upgrading my servers to 2.6.17 1151021484 M * harry ah. 1151021484 P * koft 1151021490 M * harry is there a 2.6.16.22 ??? 1151021492 M * daniel_hozac yes. 1151021497 M * doener_ http://lkml.org/lkml/2006/6/22/355 1151021497 M * harry GOD DAMMIT! 1151021510 M * harry pffffffft... bastards 1151021602 M * harry they're really pushing it 1151021602 M * Radiance lol it looks like every day a new kernel version comes out 1151021603 M * Radiance kinda sux 1151021608 M * harry uhu! 1151021625 M * harry all because they stopped writing GOOD code 1151021628 M * Radiance they should take time to develop a stable version instead of correcting 1 bit and then releasing a new one 1151021659 M * daniel_hozac with security issues, you want the new release out ASAP though. 1151021671 M * Radiance with good coding you don't need to release quickly 1151021697 M * daniel_hozac people aren't perfect. 1151021699 M * harry i can't reboot all my servers every week... 1151021702 M * daniel_hozac people write code. 1151021714 M * daniel_hozac ergo, code will not be perfect. 1151021716 A * harry no time for discussion 1151021720 M * harry it's 2.15 am 1151021726 M * harry i've got a meeting at 9am 1151021732 M * harry so... bed! 1151021733 M * Radiance code will never be perfect, but one can try to put more time in it and then release it 1151021737 M * harry daniel_hozac: code USED to be better 1151021765 M * Radiance not saying they're doing a bad job, just it kinda is insane to keep pressing a button and a new release is out before i wake up 1151021809 M * doener_ harry: seems that the routing rules do not affect source address selection... don't know if that changed or id my memory was just playing tricks on me... 1151021833 M * harry doener_: so, on what basis does it select a source address for my vservers? 1151021852 M * harry purely on : eth0 -> eth1 -> eth2 -> eth3 ? 1151021893 M * anonc if anyone is up on the COW tech in vserver 2.1, what is it about an iunlink'd file that makes 'rm' think its write protected? 1151021910 M * harry on the order of the declaration of the networks? 1151021916 M * daniel_hozac just iunlink? or immutable too? 1151021918 M * doener_ it checks the routes only AFAICT, because if it finds a route, the rule that would lead to that rule will always match 1151021928 M * anonc iunlink only 1151021943 M * doener_ so it's probably depending on the number of the routing table, not the rules 1151021954 M * daniel_hozac well, given that iunlink is invert unlink... 1151021962 M * harry is there a way to dynamically change them ? 1151021976 M * harry /etc/iproute2/rt_tables you mean, right? 1151021992 M * doener_ exactly 1151021996 M * anonc its not immutable - you can remove it - its just that rm says 'do you really want to remove this write protected file' and that appears to be a problem on gentoo, where emerge bombs out rather than remove it when trying to merge a package 1151022005 M * doener_ last statement was really confusing, I know ;) 1151022008 M * harry doener_: how do you "reload" those things? 1151022036 M * daniel_hozac anonc: then it has be immutable as well, or the removal would be denied. 1151022046 M * harry i can't restart the entire policy routing stuff ;:) 1151022061 M * harry but i'm afraid that will be the only sollution :S 1151022096 M * doener_ hm, how do you process output line-wise with bash? 1151022109 M * harry read ? 1151022110 M * daniel_hozac x | { while read LINE; do ...; done }? 1151022147 M * doener_ ah, nice :) 1151022162 A * harry off to bed now 1151022169 M * harry thanks for the help, all!!! 1151022173 Q * shuri Quit: Quitte 1151022185 M * harry especially doener_ , daniel_hozac , ray6 ! 1151022203 M * harry and everyone else who helped... but i think you were the only ones :) 1151022204 M * doener_ harry: ip r s table $OLD | { while read LINE; do ip r a $LINE table $NEW; done } 1151022215 M * harry doener_: hmmmm... 1151022230 M * doener_ something like that should at least "copy" the table (use number as $OLD and $NEW) 1151022237 M * harry is that advisable in "production" ? 1151022250 M * doener_ you can rename them later in /etc/whatever-the-file-was 1151022259 M * doener_ I'd probably test it on some other box first ;) 1151022279 M * harry doener_: tomorrow then maybe... now it's 2.30am, and im' 3km from work 1151022292 A * harry copy pastes the rule tough ;) 1151022319 Q * japan Remote host closed the connection 1151022320 M * doener_ and you need to adjust your rules before deleting the old tables of course 1151022334 M * harry uhu 1151022342 M * harry i think i might make a new kernel tomorrow 1151022342 M * anonc daniel_hozac: http://paste.linux-vserver.org/116 1151022359 M * doener_ (as the whole naming stuff is userspace, the rules actually contain the table numbers), but duplicating the rules while doing the adjustments is most probably fine 1151022364 M * harry 2.6.16.22, latest grsec, rc24 from vserver 1151022382 M * harry then just change the numbers, and reboot ;) 1151022399 M * daniel_hozac anonc: --iunlink == IUNLINK|IMMUTABLE. 1151022404 M * harry doener_: i think the "overlapping" names can give probs 1151022423 M * harry anyway , time for bed, no testing today :) 1151022427 M * harry goodnight all! 1151022429 M * daniel_hozac anonc: i don't really see anything unexpected there though. 1151022429 M * doener_ good night 1151022480 M * doener_ anonc: CoW in action 1151022482 M * daniel_hozac anonc: although, rm doesn't make me confirm the removal. 1151022561 M * doener_ ah, you wondered about the "rm" not the "cat" part... oops 1151022617 M * doener_ daniel_hozac: it does prompt here as well 1151022620 M * anonc doener_: i know - the COW stuff works exactly as i'd expect - except with the rm stuff - and it appears that whatever it is about the iunlink file that makes rm confirm for removal also stops the package management from deleting files marked iunlink - can someone with an rpm of deb based system confirm whether that package manager is able to remove files marked iunlink? 1151022647 M * daniel_hozac # rpm -q coreutils 1151022647 M * daniel_hozac coreutils-5.93-7.2 1151022664 M * doener_ 5.96-3 here 1151022676 M * daniel_hozac rpm doesn't use rm to remove files. 1151022798 M * doener_ access("b", W_OK) = -1 EACCES (Permission denied) 1151022802 M * anonc i'm not expecting rm to be used by the package managers - i'm just trying to work out whether whatever rm triggers on to ask for confirmation is also present in any other package managers (as it appears to be in emerge) 1151022837 M * doener_ that's wrong, isn't it? 1151022888 M * daniel_hozac i guess it is. 1151022912 M * anonc i should clarify that what i've done is create a gentoo vserver then cp -la it, then find /vservers/vservercopy -type f -exec setattr --iunlink {} \; 1151022963 M * anonc i have a full strace of emerge bombing out on the merge 1151023000 M * doener_ anonc: search for access.*W_OK.*EACCESS in it 1151023080 M * daniel_hozac doener_: fs/namei.c:permission should check for !IS_COW in the IS_IMMUTABLE if, right? 1151023111 M * anonc the actual error from emerge is: OSError: [Errno 1] Operation not permitted: '/etc/nscd.conf' 1151023122 M * anonc this being glibc that i was trying to merge 1151023122 M * daniel_hozac what operation? 1151023129 M * anonc but thats a python error 1151023135 M * daniel_hozac indeed. 1151023181 M * anonc here's the command i used to log the strace - are these the right flags? strace -fF -o /root/emerge.trace emerge --usepkg glibc 1151023188 M * daniel_hozac looks fine. 1151023286 M * anonc grepping for EACCESS in the strace file doesn't yield anything - the relevant snippet where it bombs is: 17667 write(2, "OSError", 7) = 7 1151023286 M * anonc 17667 write(2, ": ", 2) = 2 1151023286 M * anonc 17667 write(2, "[Errno 1] Operation not permitte"..., 45) = 45 1151023286 M * anonc 17667 write(2, "\n", 1) = 1 1151023286 M * anonc 17667 ioctl(2, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 1151023287 M * anonc 17667 write(2, "\33]2; *** terminating.\7", 22) = 22 1151023292 M * anonc sorry about that spam 1151023300 M * daniel_hozac right above that. 1151023305 M * daniel_hozac something would've returned EPERM. 1151023306 M * daniel_hozac what? 1151023326 M * anonc http://paste.linux-vserver.org/117 1151023360 M * anonc yup - just a sec 1151023367 M * doener_ daniel_hozac: yep 1151023399 M * doener_ daniel_hozac: EPERM? 1151023429 M * daniel_hozac EPERM is Operation not permitted, no? or am i a bit too tired to not check facts? 1151023442 M * anonc the first file that it actually errored on when i started investigating this was /etc/rpc (hence the snippet now at http://paste.linux-vserver.org/118) 1151023449 M * doener_ yeah, but where does that come from then? 1151023458 M * daniel_hozac that's what i wanted to know. 1151023473 M * doener_ permission() return EACCES 1151023476 M * daniel_hozac utimes... 1151023500 M * anonc 17667 utimes("/etc/rpc", {1150970380, 0}) = -1 EPERM (Operation not permitted) 1151023536 M * doener_ ah, in do_utimes fs/open.c 1151023540 M * daniel_hozac yep. 1151023677 M * doener_ I wonder if all IS_IMMUTABLE checks will actually need the additional IS_COW check 1151023709 M * daniel_hozac i guess most of them will. 1151023909 J * Cocobu ~Cocobu@ntp2.mana.pf 1151023939 M * Cocobu hi, when I try to mknod inside a vserver i've got a permission denied, how to fix this ? 1151023974 M * daniel_hozac that's a security measure. 1151024005 M * daniel_hozac if your guest is able to create devices as it pleases, it can easily wreck your host. 1151024019 M * Cocobu i know, but where to look to enable it just for a time 1151024032 M * daniel_hozac echo CAP_MKNOD >> /etc/vservers/.../bcapabilities 1151024041 M * Cocobu and then disable when the node is created 1151024073 M * anonc i'd expect atimes and mtimes to be changeable whether or not a file is marked immutable - is that wrong? 1151024099 M * Cocobu when I'll restart my vserver, is the node still be available ? 1151024149 J * doener ~doener@i5387C394.versanet.de 1151024149 M * daniel_hozac anonc: apparently. 1151024160 M * daniel_hozac Cocobu: yes. 1151024174 M * doener hmpf... 1151024244 M * doener anonc: hm, atimes maybe, but mtimes? 1151024258 M * anonc just testing them now on a non-vserver kernel 1151024282 M * daniel_hozac utimes is pretty clear about it, you can't set the times of an immutable file. 1151024363 M * anonc mmm - linux and freebsd differ on immutable files and atimes. freebsd updates it, linux doesn't 1151024400 Q * doener_ Ping timeout: 480 seconds 1151024410 M * doener NOTES 1151024410 M * doener Linux does not allow changing the time stamps on an immutable file, or 1151024410 M * doener setting the time stamps to something other than the current time on an 1151024410 M * doener append-only file. 1151024463 N * sarnold sars 1151024559 M * anonc doener: i confirm those notes 1151024588 M * anonc i guess a delta is required :) 1151024593 M * doener so does the source ;) I just wanted to say that it is documented in the manpage 1151024604 M * doener indeed 1151024621 M * doener daniel_hozac: will you take care of auditing the IS_IMMUTABLE calls or shall I do that? 1151024652 M * daniel_hozac feel free :) 1151024665 M * anonc linux manpages can be a touch behind the source... 1151024754 Q * FireEgl Ping timeout: 480 seconds 1151024832 Q * Nam Ping timeout: 480 seconds 1151024871 J * Nam ~nam@142.179.93.180 1151026240 M * doener guess it will have to wait till tomorrow then, I'm too tired... 1151026245 M * doener good night! 1151026247 Q * doener Quit: leaving 1151027043 J * FireEgl Atlantica@Atlantica.DollarDNS.Net 1151027363 J * Aiken_ ~james@tooax8-004.dialup.optusnet.com.au 1151027534 J * click click@ti511110a080-0813.bb.online.no 1151027675 Q * Aiken Ping timeout: 480 seconds 1151028342 M * daniel_hozac ugh, sorry, i'm not used to irssi. 1151028708 J * dos000 ~dos000@216.58.42.145 1151028984 M * dos000 anyone: i have a box in a colocation that if i use a private ip (192.168.a.b) suddenly starting virtual guests takes so much time. any idea why ? anything to do with netmask ? 1151029175 M * daniel_hozac are you NATing them so that they have internet access? 1151029243 M * dos000 daniel_hozac, no nat (yet) as soon as i create the vguest. the take loooooong time to come up and down 1151029286 M * dos000 daniel_hozac, i just tried creating a fake eth0:1 with the private ip to see if this changes anything. 1151029428 M * dos000 daniel_hozac, also in my local lan i have box configured with an ip 192.168.3.1/24 i see the same problem when i create a guest with an ip that is outside the netmask 1151029433 M * daniel_hozac anything using DNS would have to wait for it to time out. 1151029478 M * dos000 daniel_hozac, what tho .. and also anyway i can stop the timing out. 1151029607 M * dos000 i cannot add a route to stop this timing out ? 1151029616 M * daniel_hozac just NAT the guests. 1151029623 M * daniel_hozac so they'll have internet access. 1151029670 M * dos000 daniel_hozac, how .. ? just iptable to route packet in and out of the guests ? 1151029733 M * daniel_hozac iptables -t nat -A POSTROUTING -s -j SNAT --to 1151029796 M * dos000 thats it ? 1151029806 M * dos000 no sepacial route commands ? 1151029886 M * daniel_hozac no. 1151029939 M * dos000 thank you so much ! 1151032809 J * Brio ~Guest@pool-70-16-99-242.port.east.verizon.net 1151032823 M * Brio Hello 1151032848 M * daniel_hozac hi 1151032868 M * Brio a/s/l/ 1151032993 M * Brio ugh 1151032998 Q * Brio Quit: Brio 1151034088 J * m4z_ m4z@bastard-operator.from-hell.net 1151034088 Q * m4z Read error: Connection reset by peer 1151036572 Q * Nam Ping timeout: 480 seconds 1151036965 J * coocoon ~coocoon@84.160.105.178 1151036995 M * coocoon morning 1151037577 Q * coocoon Ping timeout: 480 seconds 1151037860 J * f_ ~f_@83-215-237-1.seek.stat.salzburg-online.at 1151038616 Q * FireEgl Ping timeout: 483 seconds 1151039162 J * coocoon ~coocoon@84.160.84.160 1151039832 Q * wenchien Ping timeout: 480 seconds 1151039896 J * matti_ matti@linux.gentoo.pl 1151039921 Q * matti Read error: Connection reset by peer 1151039924 N * matti_ matti 1151039992 J * Nam ~nam@70.78.64.62 1151040095 J * EKC ~EKC@netblock-66-245-252-180.dslextreme.com 1151040295 J * FireEgl Atlantica@Atlantica.US 1151042393 M * cdrx hi 1151042987 Q * cdrx Ping timeout: 480 seconds 1151043406 J * meandtheshell ~markus@85-124-206-250.dynamic.xdsl-line.inode.at 1151043763 J * Milf ~Miranda@ipsio92.ipsi.fraunhofer.de 1151044133 Q * f_ Quit: This computer has gone to sleep 1151044136 J * f_ ~f_@83-215-237-1.seek.stat.salzburg-online.at 1151044738 N * otaku42_away otaku42 1151045286 J * schimmi ~sts@port-212-202-73-176.dynamic.qsc.de 1151045525 J * ||Cobra|| ~cob@pc-csa01.science.uva.nl 1151045756 J * Aiken__ ~james@tooax6-156.dialup.optusnet.com.au 1151045997 J * cskarby ~cs@195.1.31.69 1151046075 Q * Aiken_ Ping timeout: 480 seconds 1151046508 J * cdrx ~legoater@cimai.net4.nerim.net 1151047366 J * kir__ tis-21f34a@213.152.157.70 1151048368 Q * schimmi Ping timeout: 480 seconds 1151049330 Q * Hollow Quit: Konversation terminated! 1151049687 J * dna ~naucki@dialer-146-47.kielnet.net 1151050086 J * schimmi ~sts@aquila.tcs.ifi.lmu.de 1151050228 J * Hollow ~hollow@cl-52.muc-02.de.sixxs.net 1151050995 Q * Hollow Quit: Konversation terminated! 1151051144 J * Hollow ~hollow@cl-52.muc-02.de.sixxs.net 1151051501 J * bonbons ~bonbons@83.222.39.166 1151053227 Q * Hunger neutron.oftc.net charon.oftc.net 1151053227 Q * Vudu neutron.oftc.net charon.oftc.net 1151053227 Q * derjohn neutron.oftc.net charon.oftc.net 1151053227 Q * mnemoc neutron.oftc.net charon.oftc.net 1151053227 Q * Adrinael neutron.oftc.net charon.oftc.net 1151053227 Q * Snow-Man neutron.oftc.net charon.oftc.net 1151053227 Q * lilo2 neutron.oftc.net charon.oftc.net 1151053227 Q * Aiken__ neutron.oftc.net charon.oftc.net 1151053227 Q * Milf neutron.oftc.net charon.oftc.net 1151053227 Q * Cocobu neutron.oftc.net charon.oftc.net 1151053227 Q * tokkee neutron.oftc.net charon.oftc.net 1151053227 Q * sladen neutron.oftc.net charon.oftc.net 1151053227 Q * FaUl neutron.oftc.net charon.oftc.net 1151053227 Q * starlein neutron.oftc.net charon.oftc.net 1151053227 Q * virtuoso neutron.oftc.net charon.oftc.net 1151053227 Q * _jake- neutron.oftc.net charon.oftc.net 1151053227 Q * anonc neutron.oftc.net charon.oftc.net 1151053227 Q * _Kara neutron.oftc.net charon.oftc.net 1151053227 Q * morrigan neutron.oftc.net charon.oftc.net 1151053227 Q * ag- neutron.oftc.net charon.oftc.net 1151053227 Q * FireEgl neutron.oftc.net charon.oftc.net 1151053227 Q * FloodServ neutron.oftc.net charon.oftc.net 1151053227 Q * baggins neutron.oftc.net charon.oftc.net 1151053227 Q * sid3windr neutron.oftc.net charon.oftc.net 1151053227 Q * pagano neutron.oftc.net charon.oftc.net 1151053227 Q * cemil neutron.oftc.net charon.oftc.net 1151053227 Q * BenBen neutron.oftc.net charon.oftc.net 1151053227 Q * daniel_hozac neutron.oftc.net charon.oftc.net 1151053227 Q * kir neutron.oftc.net charon.oftc.net 1151053227 Q * insomniac neutron.oftc.net charon.oftc.net 1151053227 Q * lonewolff neutron.oftc.net charon.oftc.net 1151053227 Q * locksy neutron.oftc.net charon.oftc.net 1151053227 Q * sukria neutron.oftc.net charon.oftc.net 1151053227 Q * Zaki neutron.oftc.net charon.oftc.net 1151053227 Q * Wenix neutron.oftc.net charon.oftc.net 1151053227 Q * waldi neutron.oftc.net charon.oftc.net 1151053227 Q * samuel_ neutron.oftc.net charon.oftc.net 1151053227 Q * meandtheshell neutron.oftc.net charon.oftc.net 1151053227 Q * m4z_ neutron.oftc.net charon.oftc.net 1151053227 Q * phedny neutron.oftc.net charon.oftc.net 1151053227 Q * eyck_ neutron.oftc.net charon.oftc.net 1151053227 Q * h01ger neutron.oftc.net charon.oftc.net 1151053227 Q * SNy neutron.oftc.net charon.oftc.net 1151053227 Q * weasel neutron.oftc.net charon.oftc.net 1151053227 Q * trasher neutron.oftc.net charon.oftc.net 1151053227 Q * otaku42 neutron.oftc.net charon.oftc.net 1151053227 Q * dsoul neutron.oftc.net charon.oftc.net 1151053227 Q * ray6 neutron.oftc.net charon.oftc.net 1151053227 Q * Medivh neutron.oftc.net charon.oftc.net 1151053227 Q * samueltc_ neutron.oftc.net charon.oftc.net 1151053227 Q * f_ neutron.oftc.net charon.oftc.net 1151053227 Q * AndrewLee neutron.oftc.net charon.oftc.net 1151053227 Q * ddlp neutron.oftc.net charon.oftc.net 1151053227 Q * MrX neutron.oftc.net charon.oftc.net 1151053227 Q * vasko neutron.oftc.net charon.oftc.net 1151053227 Q * dhansen neutron.oftc.net charon.oftc.net 1151053227 Q * cohan neutron.oftc.net charon.oftc.net 1151053227 Q * abi neutron.oftc.net charon.oftc.net 1151053227 Q * bogus neutron.oftc.net charon.oftc.net 1151053227 Q * meebey neutron.oftc.net charon.oftc.net 1151053227 Q * trippeh neutron.oftc.net charon.oftc.net 1151053227 Q * blackfire neutron.oftc.net charon.oftc.net 1151053227 Q * [PUPPETS]Gonzo neutron.oftc.net charon.oftc.net 1151053227 Q * nokoya neutron.oftc.net charon.oftc.net 1151053227 Q * Johan neutron.oftc.net charon.oftc.net 1151053227 Q * cehteh neutron.oftc.net charon.oftc.net 1151053227 Q * dna neutron.oftc.net charon.oftc.net 1151053227 Q * kir__ neutron.oftc.net charon.oftc.net 1151053227 Q * cdrx neutron.oftc.net charon.oftc.net 1151053227 Q * ||Cobra|| neutron.oftc.net charon.oftc.net 1151053227 Q * s0undt3ch neutron.oftc.net charon.oftc.net 1151053227 Q * fs neutron.oftc.net charon.oftc.net 1151053227 Q * blizz neutron.oftc.net charon.oftc.net 1151053227 Q * Radiance neutron.oftc.net charon.oftc.net 1151053227 Q * Bertl_oO neutron.oftc.net charon.oftc.net 1151053227 Q * Hollow neutron.oftc.net charon.oftc.net 1151053227 Q * Wonka neutron.oftc.net charon.oftc.net 1151053227 Q * bonbons neutron.oftc.net charon.oftc.net 1151053227 Q * Nam neutron.oftc.net charon.oftc.net 1151053227 Q * coocoon neutron.oftc.net charon.oftc.net 1151053227 Q * dos000 neutron.oftc.net charon.oftc.net 1151053227 Q * shedi neutron.oftc.net charon.oftc.net 1151053227 Q * Greek0 neutron.oftc.net charon.oftc.net 1151053227 Q * gerrit neutron.oftc.net charon.oftc.net 1151053227 Q * sars neutron.oftc.net charon.oftc.net 1151053227 Q * DreamerC neutron.oftc.net charon.oftc.net 1151053227 Q * Loki|muh neutron.oftc.net charon.oftc.net 1151053227 Q * micah neutron.oftc.net charon.oftc.net 1151053227 Q * bon neutron.oftc.net charon.oftc.net 1151053227 Q * gdm neutron.oftc.net charon.oftc.net 1151053227 Q * phreak`` neutron.oftc.net charon.oftc.net 1151053227 Q * DaKoba neutron.oftc.net charon.oftc.net 1151053227 Q * mugwump neutron.oftc.net charon.oftc.net 1151053433 J * Wonka produziert@chaos.in-kiel.de 1151053433 J * DaKoba ~Hossa@212.110.98.7 1151053433 J * phreak`` ~phreak``@140.211.166.183 1151053433 J * mugwump ~samv@watts.utsl.gen.nz 1151053433 J * gdm ~gdm@64.62.195.81 1151053433 J * bon bon@193.93.72.10 1151053433 J * micah ~micah@208.99.202.72 1151053433 J * Loki|muh loki@213.133.125.66 1151053433 J * DreamerC ~dreamerc@59.112.10.125 1151053433 J * sars ~sarnold@sarnold.noc.oftc.net 1151053433 J * gerrit ~gerrit@67.160.146.170 1151053433 J * Greek0 ~greek0@85.255.145.201 1151053433 J * shedi ~siggi@130.208.221.254 1151053433 J * dos000 ~dos000@216.58.42.145 1151053433 J * coocoon ~coocoon@84.160.84.160 1151053433 J * Nam ~nam@70.78.64.62 1151053433 J * Hollow ~hollow@cl-52.muc-02.de.sixxs.net 1151053433 J * bonbons ~bonbons@83.222.39.166 1151053433 J * Hunger Hunger.hu@Hunger.hu 1151053433 J * samuel_ ~samuel@jupe.quebectelephone.com 1151053433 J * waldi ~waldi@bblank.thinkmo.de 1151053433 J * Wenix ~wenix@81.7.189.11 1151053433 J * Zaki ~Zaki@88.213.19.115 1151053433 J * sukria ~sukria@www.sukria.net 1151053433 J * locksy ~locksy@mrtg.sisgroup.com.au 1151053433 J * lonewolff ~lonewolff@adleman.lonewolff.info 1151053433 J * insomniac ~insomniac@slackware.it 1151053433 J * kir ~kir@swsoft-mipt-nat.sw.ru 1151053433 J * daniel_hozac ~daniel@c-2d1472d5.010-230-73746f22.cust.bredbandsbolaget.se 1151053433 J * BenBen ~benny@defiant.wavecon.de 1151053433 J * cemil ~cemil@defiant.wavecon.de 1151053433 J * pagano ~pagano@131.154.5.20 1151053433 J * sid3windr luser@bastard-operator.from-hell.be 1151053433 J * baggins baggins@kenny.mimuw.edu.pl 1151053433 J * FloodServ services@services.oftc.net 1151053433 J * morrigan morrigan@212.16.62.52 1151053433 J * ag- ag@caladan.roxor.cx 1151053433 J * _Kara ~Kashira@wan14.ihredomainadresse.de 1151053433 J * anonc ~anonc@staffnet.internode.com.au 1151053433 J * jake- psybnc@murlocs.org 1151053433 J * virtuoso ~s0t0na@shisha.spb.ru 1151053433 J * starlein ~star@fo0bar.de 1151053433 J * FaUl immo@shell.chaostreff-dortmund.de 1151053433 J * sladen paul@starsky.19inch.net 1151053433 J * tokkee ~tokkee@ssh.faui2k3.org 1151053433 J * Cocobu ~Cocobu@ntp2.mana.pf 1151053433 J * FireEgl Atlantica@Atlantica.US 1151053433 J * Milf ~Miranda@ipsio92.ipsi.fraunhofer.de 1151053433 J * Aiken__ ~james@tooax6-156.dialup.optusnet.com.au 1151053437 J * mnemoc ~amery@kilo105.server4you.de 1151053437 J * lilo2 ~0710AAD4@tor-irc.dnsbl.oftc.net 1151053437 J * Snow-Man ~sfrost@kenobi.snowman.net 1151053437 J * derjohn ~derjohn@80.69.37.19 1151053437 J * Vudu ~vudumen@perverz.hu 1151053437 J * Adrinael adrinael@hoasb-ff09dd00-79.dhcp.inet.fi 1151053456 J * dna ~naucki@dialer-146-47.kielnet.net 1151053456 J * kir__ tis-21f34a@213.152.157.70 1151053456 J * cdrx ~legoater@cimai.net4.nerim.net 1151053456 J * ||Cobra|| ~cob@pc-csa01.science.uva.nl 1151053456 J * Radiance e24b4f8ebd@halt.1984world.eu 1151053456 J * s0undt3ch ~s0undt3ch@bl7-241-58.dsl.telepac.pt 1151053456 J * fs fs@213.178.77.98 1151053456 J * blizz ~blizz@evilhackerdu.de 1151053456 J * Bertl_oO herbert@212.16.62.52 1151053503 Q * lonewolff Ping timeout: 480 seconds 1151053518 J * meandtheshell ~markus@85-124-206-250.dynamic.xdsl-line.inode.at 1151053518 J * m4z_ m4z@bastard-operator.from-hell.net 1151053518 J * phedny ~mark@volcano.p-bierman.nl 1151053518 J * eyck_ eyck@ghost.anime.pl 1151053518 J * h01ger ~holger@socket.layer-acht.org 1151053518 J * SNy c37e4bcf2a@bmx-chemnitz.de 1151053518 J * weasel weasel@weasel.noc.oftc.net 1151053518 J * trasher daniel@derichs.info 1151053518 J * otaku42 ~otaku42@legolas.otaku42.de 1151053518 J * dsoul darksoul@vice.ii.uj.edu.pl 1151053518 J * ray6 ~ray@vh5.gcsc2.ray.net 1151053518 J * Medivh ck@paradise.by.the.dashboardlight.de 1151053518 J * samueltc_ ~samuel@levinux.UQAR.UQUEBEC.CA 1151053598 Q * sukria Ping timeout: 480 seconds 1151053638 Q * blizz arion.oftc.net unununium.oftc.net 1151053638 Q * s0undt3ch arion.oftc.net unununium.oftc.net 1151053638 Q * cdrx arion.oftc.net unununium.oftc.net 1151053638 Q * kir__ arion.oftc.net unununium.oftc.net 1151053638 Q * dna arion.oftc.net unununium.oftc.net 1151053638 Q * ||Cobra|| arion.oftc.net unununium.oftc.net 1151053638 Q * Radiance arion.oftc.net unununium.oftc.net 1151053638 Q * Bertl_oO arion.oftc.net unununium.oftc.net 1151053638 Q * fs arion.oftc.net unununium.oftc.net 1151053657 J * f_ ~f_@83-215-237-1.seek.stat.salzburg-online.at 1151053657 J * AndrewLee ~andrew@tnlug.linux.org.tw 1151053657 J * ddlp ~niko@dsl081-142-022.chi1.dsl.speakeasy.net 1151053657 J * MrX ~urk@219.95.2.229 1151053657 J * dhansen ~dave@sprucegoose.sr71.net 1151053657 J * vasko ~vasko@unreal.rainside.sk 1151053657 J * cohan ~cohan@koniczek.de 1151053657 J * trippeh atomt@x.vx.no 1151053657 J * abi ~abi@enz.schiach.de 1151053657 J * bogus ~bogusano@fengor.net 1151053657 J * meebey meebey@booster.qnetp.net 1151053657 J * blackfire blackfire@dp70.internetdsl.tpnet.pl 1151053657 J * [PUPPETS]Gonzo gonzo@langweiligneutral.deswahnsinns.de 1151053657 J * nokoya young@hi-230-82.tm.net.org.my 1151053657 J * Johan ~finger@lounge.datux.nl 1151053657 J * cehteh foobar@cehteh.homeunix.org 1151053658 Q * AndrewLee Read error: Connection reset by peer 1151053663 J * AndrewLee ~andrew@tnlug.linux.org.tw 1151053707 J * dna ~naucki@dialer-146-47.kielnet.net 1151053707 J * kir__ tis-21f34a@213.152.157.70 1151053707 J * cdrx ~legoater@cimai.net4.nerim.net 1151053707 J * ||Cobra|| ~cob@pc-csa01.science.uva.nl 1151053707 J * Radiance e24b4f8ebd@halt.1984world.eu 1151053707 J * s0undt3ch ~s0undt3ch@bl7-241-58.dsl.telepac.pt 1151053707 J * fs fs@213.178.77.98 1151053707 J * blizz ~blizz@evilhackerdu.de 1151053707 J * Bertl_oO herbert@212.16.62.52 1151054062 J * lonewolff ~lonewolff@adleman.lonewolff.info 1151055326 M * _Kara mornin 1151055344 J * DarthVader ~Aniken@203.177.212.163 1151055621 J * yelifu ~hongdanst@202.38.114.129 1151055880 Q * shedi Quit: Leaving 1151056663 N * m4z_ m4z 1151056683 N * m4z help 1151056692 N * help m4z 1151057262 M * derjohn _Kara, ? 1151057275 M * _Kara ja? 1151057562 P * _Kara 1151057568 J * _Kara ~Kashira@wan14.ihredomainadresse.de 1151057571 M * _Kara test 1151057574 M * _Kara :) 1151057577 M * _Kara hi all 1151057578 M * cskarby hi 1151058081 P * cskarby 1151058200 J * shedi ~siggi@213.190.108.50 1151059147 Q * cdrx Ping timeout: 480 seconds 1151059892 J * sukria ~sukria@www.sukria.net 1151060264 J * id23 ~id@p5081239A.dip0.t-ipconnect.de 1151060290 M * id23 hi #vserver 1151060321 M * id23 whats new in -rc24 compared to -rc23 ? 1151060425 M * _Kara http://linux-vserver.org/ChangeLogDevelExperimental 1151060458 M * id23 oh thanx - i thought there is no changelog for the experimental stuff 1151060519 M * id23 delta-flock-fix01 is that one critical ? 1151060533 M * _Kara I have no idea to be honest 1151060652 M * mnemoc usually -fix* are critical :) 1151060686 M * id23 k 1151060712 Q * kir__ Ping timeout: 480 seconds 1151060829 M * id23 reboot - new kernel 1151060831 Q * id23 Quit: Leaving 1151061488 J * cdrx ~legoater@cap31-3-82-227-199-249.fbx.proxad.net 1151061719 Q * shedi Read error: No route to host 1151061795 J * shedi ~siggi@213.190.108.50 1151062680 Q * Aiken__ Ping timeout: 480 seconds 1151064205 Q * Milf iridium.oftc.net xenon.oftc.net 1151064205 Q * Cocobu iridium.oftc.net xenon.oftc.net 1151064205 Q * FaUl iridium.oftc.net xenon.oftc.net 1151064205 Q * starlein iridium.oftc.net xenon.oftc.net 1151064205 Q * virtuoso iridium.oftc.net xenon.oftc.net 1151064205 Q * jake- iridium.oftc.net xenon.oftc.net 1151064205 Q * anonc iridium.oftc.net xenon.oftc.net 1151064205 Q * _Kara iridium.oftc.net xenon.oftc.net 1151064205 Q * morrigan iridium.oftc.net xenon.oftc.net 1151064205 Q * sladen iridium.oftc.net xenon.oftc.net 1151064205 Q * ag- iridium.oftc.net xenon.oftc.net 1151064205 Q * tokkee iridium.oftc.net xenon.oftc.net 1151064305 J * _Kara ~Kashira@wan14.ihredomainadresse.de 1151064305 J * Milf ~Miranda@ipsio92.ipsi.fraunhofer.de 1151064305 J * Cocobu ~Cocobu@ntp2.mana.pf 1151064305 J * tokkee ~tokkee@ssh.faui2k3.org 1151064305 J * sladen paul@starsky.19inch.net 1151064305 J * FaUl immo@shell.chaostreff-dortmund.de 1151064305 J * starlein ~star@fo0bar.de 1151064305 J * virtuoso ~s0t0na@shisha.spb.ru 1151064305 J * jake- psybnc@murlocs.org 1151064305 J * morrigan morrigan@212.16.62.52 1151064305 J * ag- ag@caladan.roxor.cx 1151064305 J * anonc ~anonc@staffnet.internode.com.au 1151064480 Q * Milf Ping timeout: 480 seconds 1151065205 J * lilalinux ~plasma@dslb-084-058-205-116.pools.arcor-ip.net 1151065679 J * doener ~doener@i5387C2AB.versanet.de 1151065847 Q * lonewolff Ping timeout: 480 seconds 1151065862 M * doener morning 1151066125 M * _Kara hi there 1151066913 Q * samueltc_ Ping timeout: 480 seconds 1151066965 Q * dos000 Quit: Leaving 1151067500 Q * coocoon Quit: KVIrc 3.2.0 'Realia' 1151067555 J * coocoon ~coocoon@84.160.84.160 1151067595 J * wenchien ~wenchien@221-169-69-23.adsl.static.seed.net.tw 1151067650 J * Milf ~Miranda@141.12.8.92 1151067829 Q * EKC Read error: Connection reset by peer 1151067846 J * EKC ~EKC@66.245.252.180 1151068725 J * cattivik ~andrea@147.162.213.101 1151069106 M * cattivik is there a particular version of GCC which is preferred for compiling the 2.6.X kernels for VServer...? 1151069160 M * cehteh just use the one you normally use 1151069192 M * cattivik cehteh: thanks! 1151069194 M * daniel_hozac as long as it compiles working kernels :) 1151069202 M * cattivik :] 1151069213 M * cehteh afaik even most recent 4.x series work .. but be careful :) 1151069227 M * cehteh mhm or try tcc ;) 1151069269 M * cehteh http://fabrice.bellard.free.fr/tcc/tccboot.html 1151069341 M * cattivik cehteh: is GCC 3.x (or even 2.95) still preferred for the linux kernel, in general? The kernel's README still reports 2.95 as the best choice... (2.4.14)... 1151069351 Q * ||Cobra|| Remote host closed the connection 1151069362 M * _Kara GCC 3.x should work fine 1151069365 M * cehteh cattivik: debian uses 4.x by now 1151069379 M * cehteh wall youll notice when it doesnt work .. for sure :) 1151069429 M * cehteh i would suggest using the one which is defaut on your distrib .. and if in doubt use 3.x 1151069429 M * daniel_hozac 4.1.1 and 4.0.2 here. 1151069439 M * Hollow cehteh: using gcc 4.1.1 1151069449 M * Hollow :) 1151069465 M * cattivik cehteh: i did use it and everything's working, VServers too, but i got a loto of warnings in compilation and everything seems quite slow (maybe for other reasons but... I don't know...) 1151069509 M * cattivik cehteh: i mean I used 4... 1151069531 M * cehteh i never compiled a kernel with 4.x yet .. but i am planning to try that next 1151069532 M * cattivik ops, 4.1.2... :] 1151069545 M * cattivik ehm 1151069583 M * daniel_hozac my build logs indicate i get 2681 warnings on 686, but just 803 on x86_64... 1151069583 M * cehteh 4.1 could optimize better theoretically .. but when things seem slow better analyze the case until you find the exact reason 1151069590 Q * sladen Ping timeout: 480 seconds 1151069602 M * cattivik cehteh: yeah... 1151069628 M * cattivik cehteh: tcc: ehheeh! I shoud try! 1151069725 M * cehteh cattivik: that was a joke .. well it should work but tcc optimized almost nothing 1151069738 M * cehteh i use tcc sometimes but wont use it for a kernel 1151069751 M * cattivik cehteh: heehee! :] 1151069782 M * cehteh well tcc is serious .. for some uses, like a emedded C compiler in other applications and such ... 1151069802 M * cehteh or testing code fast .. and check if your code would compiler with anything else but gcc :) 1151069911 M * cattivik daniel_hozac: I wish I had one... :-) 1151069915 M * phedny I have a question: is there any capability I must assign to a guest so it can use ALSA for sound output? 1151069932 M * cattivik cehteh: sure... 1151069939 J * sladen paul@starsky.19inch.net 1151069942 M * daniel_hozac phedny: devices ought to suffice. 1151069943 M * phedny sound is working through /dev/dsp, but I have an app that wants ALSA and keeps giving errors 1151069958 M * phedny daniel_hozac: I've replicated all /dev/snd/* devices, but it's not working :( 1151069967 M * daniel_hozac phedny: why not? 1151069976 M * phedny wait a minute 1151069982 M * cattivik thanks to all of you, you're always so kind 1151069989 M * cattivik I have to go now, bye 1151069997 Q * cattivik Quit: Client exiting 1151070038 M * phedny just at the moment I asked the question, I suddenly thought: maybe file permissions 1151070048 M * phedny chmod 0660 /dev/snd/* did the trick :) 1151071808 J * jhaig ~jhaig@mantis.office.netline.net.uk 1151071889 M * jhaig How can I set up a host so that guests, each with their own ip address, can be accessed directly on all ports? If I turn iptables off then (for example) I can connect to an ftp server on a guest but it seems that iptables on the host blocks this. 1151071919 M * jhaig I want the guests themselves to deal with their own firewalls. 1151071934 J * dna_ ~naucki@dialer-146-47.kielnet.net 1151072151 M * lilalinux /lib/modules is empty in my guest, how do I get the capi support from the host? 1151072217 Q * dna Ping timeout: 480 seconds 1151072544 M * cehteh lilalinux: thats somewhat insecure .. --bind mounting the /lib/modules from the host to the guest and allow module loading to the guest 1151072567 M * cehteh CAP_SYS_ADMIN ? 1151072727 J * mkhl ~mkhl@200-148-41-141.dsl.telesp.net.br 1151072736 N * dna_ dna 1151073110 M * daniel_hozac jhaig: networking happens on the host, which means that firewalling has to happen on the host. 1151073143 Q * schimmi Read error: Connection reset by peer 1151073200 J * s0undt3c1 ~s0undt3ch@bl7-255-167.dsl.telepac.pt 1151073214 M * daniel_hozac lilalinux: why do you need /lib/modules at all? just load the modules on the host. 1151073286 M * cehteh daniel_hozac: that is sometimes complicated when the software you use interacts dynamically with module loading/unloading 1151073303 M * cehteh usb stuff, iptables .. and seems like capi stuff too 1151073319 M * cehteh prolly fixable but requires more work 1151073321 M * daniel_hozac still, loading the modules on the host will make them available. 1151073345 M * cehteh well you cant pass dynamic module parameters with that 1151073368 M * daniel_hozac what does dynamic mean in this context? 1151073393 M * cehteh mhm a fake insmod/modprobe in the guest which delegates the loading to the host might solve that 1151073481 M * daniel_hozac whatever software is calling modprobe manually is broken, IMHO. there are already ways to get modules autoloaded on demand. 1151073551 M * cehteh there are some modules which require dynamic parameters .. contrack modules for specific protocols take parameters if you want to run that protocol on a different port and such 1151073606 M * daniel_hozac aren't module parameters exposed through sysfs these days? 1151073639 Q * Milf Quit: Miranda IM! Smaller, Faster, Easier. http://miranda-im.org 1151073662 Q * s0undt3ch Ping timeout: 480 seconds 1151073662 M * lilalinux daniel_hozac: thx 1151073671 N * s0undt3c1 s0undt3ch 1151073708 Q * _Kara Remote host closed the connection 1151074164 M * cehteh daniel_hozac: dunno, would be definately better 1151074200 M * cehteh but vserver doesnt mount sysfs or? and there is no sysfs security? 1151074228 M * daniel_hozac true. 1151074238 M * daniel_hozac i wouldn't want my guests changing kernel parameters though.. 1151074288 M * jhaig daniel_hozac: OK, but (for starters) how should the firewall be set up so that a guest can be accessed via ftp (for example)? 1151074310 M * daniel_hozac just like you would if it ran on the host. 1151074345 M * daniel_hozac iptables -A INPUT -d -p tcp --dport 21 -j ACCEPT 1151074469 M * jhaig Ahem, I was using the wrong port. Oops! ;-) 1151074527 Q * sladen Ping timeout: 480 seconds 1151074531 N * nokoya nokoyaz 1151074581 J * sladen paul@193.28.45.41 1151074794 M * jhaig OK, so I can set up iptables on the host. However, what I really want is to be able to give a virtual server to a user who is then responsible for it completely, and may want to edit firewall rules himself. Is there any way of doing this? 1151074877 M * cehteh jhaig: you can let the user make his own iptables but load then from the host ... and carefully filter enter them only into his own chains .. using some setup in the host to multiplex into the guests chains 1151074936 M * lilalinux I have capi20 installed in my host, in guest the device nodes are created with the correct rights, but it still can't access it: ioctl(3, CAPI_INSTALLED, 0) = -1 ENXIO (No such device or address) 1151074954 M * lilalinux modules are loaded 1151074973 M * cehteh lilalinux: maybe you need to mknod some entry's in /dev ? 1151074989 M * jhaig cehteh: I'm using CentOS, which uses the /etc/sysconfig/iptables files. I assume I would need to hack the /etc/init.d/iptables script to do this. 1151075021 M * cehteh jhaig: yes .. well i suggest firehol.sf.net for firewalling .. but it has not the features i described 1151075025 M * lilalinux cehteh: did that 1151075032 M * lilalinux permissions are fine, too 1151075045 M * cehteh lilalinux: soory cant help you further ... 1151075099 M * cehteh jhaig: actually i have no real need for that but always thought about integrating such .. if someone pays me for that work i will do it :) 1151075119 M * jhaig If I do it, will you pay me for it? :-P 1151075139 M * jhaig Actually, if I do it and get it working, I'll upload it (if my boss lets me open source it) 1151075154 M * cehteh when i need it and have some money left, maybe :P 1151075176 M * cehteh which is a likely not 1151075366 M * doener lilalinux: hm, that seems to mean that no capi card is in CARD_RUNNING state 1151075378 M * doener I don't see how Linux-VServer would influence that though... 1151075386 J * stefani ~stefani@tsipoor.banerian.org 1151075553 M * lilalinux doener: right, forgot to tweak /etc/isdn/capi.conf :( 1151075627 M * tokkee jhaig: If your modifying GPL'ed software you _have_ to open source your changes... 1151075732 M * tokkee s/your/you're/ ;-) 1151075968 M * doener tokkee: well, doesn't mean that he has to give away his software ;) 1151076009 M * tokkee doener: Are you sure? I think, that's what the GPL requires... 1151076038 M * doener the GPL is about distribution, if he does not distribute his software, the GPL doesn't affect him... 1151076074 P * stefani I'm Parting (the water) 1151076111 M * doener it's totally fine to modify for example the Linux kernel and never give away your modified kernel. if and only if you give your modified kernel to anyone, the GPL comes into play 1151076134 M * tokkee Hum... you're right ;-) 1151076172 M * tokkee What about if you use the software in a company? Isn't that kind of distributing the software? 1151076213 M * doener I once read something about that, IIRC it was in the FSF's GPL FAQ 1151076248 M * tokkee Ah... okay. 1151076253 M * daniel_hozac you're not required to send all of your changes upstream. 1151076312 M * doener http://www.gnu.org/licenses/gpl-faq.html#InternalDistribution 1151076327 M * doener and http://www.gnu.org/licenses/gpl-faq.html#UnreleasedMods 1151076352 M * tokkee Thx. 1151076400 M * jhaig tokkee: If you modify GPL'ed software then you have to open source your changes *IF* you release it back to the public. 1151076431 M * doener guess he got it by now ;) 1151076441 M * jhaig Sorry, I just read the first statement without reading the following discussion. 1151076457 M * tokkee ;-) 1151076566 M * jhaig We have a modified version of FreeRadius but I don't think we can open source our changes because there may be company confidential information in it. 1151076656 M * tokkee jhaig: Well... actually you also have to open source it if you don't solely use it privately, which imho is not the same as "release it back to the public" ;-) 1151076668 M * cehteh exactly 1151076683 M * jhaig It is used only on our servers. 1151076731 M * tokkee The purpose of a lot of servers is to be publicly available ;-) 1151076790 M * tokkee Anyway... this is probably something that lawyers should think about ;-) 1151076802 M * jhaig The purpose of a Radius server is to authenticate people wanting to use our services. 1151076827 Q * MrX Ping timeout: 480 seconds 1151076844 M * doener you don't distribute the software by making the servers offering services provided through that software 1151076877 M * jhaig I didn't think so. Otherwise, Google would probably have to release all their code. 1151076899 M * doener jhaig: I know, but tokkee seemed to imply that 1151076940 M * tokkee doener: Hum? Isn't that what http://www.gnu.org/licenses/gpl-faq.html#UnreleasedMods states? 1151077008 M * tokkee "However, putting the program on a server machine for the public to talk to is hardly "private" use, so it would be legitimate to require release of the source code in that special case." 1151077033 M * jhaig It goes on "We are thinking about doing something like this in GPL version 3, but we don't have precise wording in mind yet." 1151077037 M * doener tokkee: as stated there, it might be required in GPLv3 1151077064 M * jhaig In fact, the first two sentences are " The GPL permits anyone to make a modified version and use it without ever distributing it to others. What this company is doing is a special case of that. Therefore, the company does not have to release the modified sources." 1151077068 M * doener GPLv2 covers only distribution of the software, that cases would be usage 1151077087 M * doener s/cases/case/ 1151077108 M * tokkee IC... guess I misunderstood that part. 1151077129 M * EKC There is a well-known "API loophole" in GPL v2. And GPLv3 is not retroactive. Distribution under the GPL is defined as distributing the source, object code, or executable. 1151077180 M * jhaig I suspect a lot of projects would not take on GPL3 if it does enforce that. Another RADIUS server we use, Radiator, is open source but not free. I do not think they would be too pleased if every ISP who used them posted their code for everyone to download. 1151077256 M * EKC offtopic: What is the smallest debian vserver that anyone has created? Is there a script that I could use? 1151077274 M * EKC I tried debootstrap, but I can't get it <100mb 1151077288 M * tokkee EKC: How do you define "debian vserver"? ;-) 1151077323 M * EKC Something that can run apt-get to run any package in the sarge repository. 1151077342 M * doener hm, let me try... 1151077479 M * tokkee EKC: Something like "dpkg --root=/vserver-root -i bash apt-get +dependencies"? ;-) 1151077583 M * EKC What does that do? dpkg is giving me "unale to access dpkg status area: no such file or directory" 1151077646 M * doener *sigh* I should have chosen the 6Mbit line instead of 2Mbit... 1151077704 M * tokkee EKC: Well... it installs bash apt-get using /vserver-root as the root directory. You need to manually download all package files and resolve the dependencies and you probably have to create /vserver-root/var/lib/dpkg before. 1151077791 M * EKC ah. got it. I guess I can cherry-pick my way to a minimalist apache vserver. 1151077803 M * doener OT: does anyone now a nice image viewer for linux? (something like IrfanView in the windoze world) 1151077840 M * cehteh i dont know ifranview ... but gqview is really nice 1151077857 M * tokkee EKC: However, it's probably easier to debootstrap a minimal system and remove any unwanted software manually after that... 1151077872 M * doener I tried a few ones, but they either rely on some stupid thumbnail window or lack a hotkey to reload the current image or can't cycle the images in the current directory in a smart way... 1151077884 M * tokkee doener: ack... gqview is quite nice... 1151077914 M * EKC Right. I'm just trying to get down to the size of DSL: 50mb. w/o the need for a kernel, that must be possible for a vserver. 1151077953 M * doener tokkee: can you get rid of the directory tree and the thumbnails? I don't need them to waste my screen real estate... 1151077967 M * cehteh doener: in gqview you can configure quite a lot things 1151077979 M * tokkee doener: I don't know... have a look at the configuration menu. 1151077997 J * schimmi ~sts@port-212-202-73-176.dynamic.qsc.de 1151078008 M * cehteh you can switch the sidepane to a listview or completely off .. or toggle to fullscreen 1151078199 N * otaku42 otaku42_away 1151078332 M * doener tokkee, cehteh: almost perfect, lacks only one important option, but by far the best I've used so far. thanks! 1151078363 M * cehteh which option? 1151078371 M * doener nvm, just found it :) 1151078380 M * cehteh hehe 1151078381 M * doener was in an unexpected place 1151078399 J * Viper0482 ~Viper0482@p54975122.dip.t-dialin.net 1151078403 M * doener (zoom to fit, but only if image is larger than window) 1151078404 M * cehteh autorotate based on exif tags? :) 1151078408 M * cehteh ah ok 1151078432 M * doener povray doesn't generate exif tags *g* 1151078441 M * cehteh lol 1151078459 M * cehteh mhm .. why not .. i bet you can add that 1151078476 M * cehteh for some things it would even make sense 1151078479 M * doener would that make sense? 1151078484 M * doener heh :) 1151078490 M * cehteh exif tags in povray generated images 1151078501 A * doener has no idea about exif tags, so... 1151078521 M * cehteh you have a virtual camera in povray ... so you could store some attributes 1151078525 M * doener now I just miss closing the window 1151078533 M * cehteh try q 1151078555 M * doener it's ^Q (at least they've chosen the GTK default, gliv uses ^C o.O) 1151078586 A * cehteh uses ion ... so its Windows+C 1151078617 M * doener hm, true, I could configure FVWM to handle ESC for gqview :) 1151078818 Q * DarthVader Quit: Leaving 1151078964 J * MrX ~urk@219.95.14.144 1151079032 M * doener now it's perfect :) 1151079477 J * shuri ~shuri@64.235.209.226 1151079656 M * shuri anybody here? 1151079672 M * shuri i got some strange permison error within some vserver 1151079747 Q * jhaig Quit: Download Gaim: http://gaim.sourceforge.net/ 1151079761 M * shuri when i restart the vserver some files change owner and group and connot be access anymore 1151079788 M * doener using tagxid and dynamic context id? 1151079796 M * shuri yes 1151079801 M * doener that's a broken setup 1151079810 M * shuri how can i fix that? 1151079821 M * doener your files get tagged with xid A and after restart your vserver has xid B 1151079827 M * shuri ok 1151079836 M * shuri i must use static context? 1151079852 M * doener daniel_hozac: could you explain how to fix that? I'm not sure about a non-destructive way (regarding the disk-limit values) 1151079857 M * doener yes 1151079877 M * shuri and how to fix the perm to the static context number 1151079993 M * shuri vcontext: vc_create_context(): Invalid argument 1151080088 M * shuri i cnnaot start the vserver anymore with a static context file 1151080280 M * shuri doener, ? 1151080571 Q * yelifu Quit: 1151080817 M * daniel_hozac shuri: is the number between 2 and 49151? 1151080826 M * shuri yes 1151080852 M * shuri let me retry with a lower number 1151080892 M * shuri ok is now working with 2500 1151080909 M * daniel_hozac what did you try before? 1151080920 M * shuri 49158 1151080921 M * shuri lol 1151080930 M * daniel_hozac so not between 2 and 49151. 1151080934 M * shuri sorry 1151080956 M * Hollow crappy dynids 1151080968 M * shuri ok now is there a way to fix the perm issue? 1151080976 M * shuri apache: bad group name www-data 1151080993 M * shuri ls -al /etc/group 1151080993 M * shuri ls: /etc/group: No such file or directory 1151080999 M * shuri but the file is there.. 1151081035 M * shuri chxid? 1151081037 M * daniel_hozac yep. 1151081214 M * shuri good!! 1151081287 M * shuri should i chxid -c 2500 -R /vservers/VS1 1151081292 M * shuri all the vserver dir? 1151081541 M * shuri i got my answer :) 1151081556 M * shuri thank you all! 1151081560 M * shuri is now fix 1151081947 M * Hollow daniel_hozac: btw, there is a problem with exec/enter/vlogin on alpha 1151081969 M * Hollow it simply doesn't recognize any key beside ctrl-c 1151081978 M * Hollow or at least it doesn't output anything 1151081982 M * Hollow beside the prompt 1151082105 Q * Hollow Quit: Konversation terminated! 1151082140 N * sars sarnold 1151082473 J * Hollow ~hollow@cl-52.muc-02.de.sixxs.net 1151082499 J * kir_home tis-a9e590@213.152.157.70 1151082507 J * kir__ tis-16ddf3@213.152.157.70 1151082755 M * doener EKC: I got a debian etch (amd64) minimum vserver down to 61MB (18MB compressed). 1151082783 M * EKC awesome! how did you do it? 1151082784 M * doener it lacks apt caches though, after "apt-get update" it will inflate to about 87MB IIRC 1151082802 M * daniel_hozac Hollow: hmm? 1151082829 M * Hollow daniel_hozac: i first thought it was caused by unsafe device nodes, but /dev is safe 1151082830 M * EKC doener: that's fine. I just want to run a webserver 1151082832 M * Hollow and i have no idea 1151082856 M * doener well, it only has apt and cron (besides the essential packages and dependencies) 1151082881 M * doener I can upload the .tbz 1151082886 M * daniel_hozac Hollow: maybe dietlibc is broken on alpha too? 1151082890 M * daniel_hozac (like on sparc) 1151082915 M * EKC doener: that'd be great. How did you do it? Remove packages one-by-one after debootstrap? 1151082934 M * Hollow daniel_hozac: most certainly 1151082946 M * Hollow was this the VEOF patch? 1151082998 M * daniel_hozac yeah. 1151083031 M * doener EKC: used aptitude to remove all packages that weren't required, replaced debconf-i18n by debconf english, purged all packages I don't need, finally purged aptitude and removed the apt caches from /var/{cache,lib}/apt 1151083226 M * daniel_hozac Hollow: the kernel and dietlibc seem to agree though. 1151083233 N * Bertl_oO Bertl 1151083236 M * Bertl evening folks! 1151083241 M * doener evening Bertl! 1151083241 M * daniel_hozac evening Bertl! 1151083266 M * Bertl how is it going? my network will be fixed next week (or so) :/ 1151083292 M * daniel_hozac ouch, so long? i'm sorry. 1151083303 Q * eyck_ Ping timeout: 480 seconds 1151083307 M * EKC doener: I wasn't even aware of aptitude. It's really neat! 1151083372 M * doener EKC: try going to the "Installed packages" entry and pressing M. That will mark all packages as "installed as a dependency" and select all packages on which no other package depends for removal 1151083403 M * doener in the dependency handling options, you can choose if recommended packages should be treated like a dependency for that 1151083416 M * doener (F10 toggles the menu) 1151083603 M * EKC that's really simple and convenient. just saved 15mb. Thanks for the tip! 1151083691 M * Bertl okay, looks as everything is fine .. will be back later (hopefully) 1151083696 N * Bertl Bertl_oO 1151083716 M * doener you're welcome 1151083730 Q * lilalinux Remote host closed the connection 1151083887 M * doener EKC: note that plain apt-get does not mark packages that got installed as a dependency so that aptitude knows about that. I usually use aptitude only, and you can even just do "aptitude install foo" which will do The Right Thing when it comes to dependencies 1151083932 Q * kir_home Ping timeout: 480 seconds 1151083934 Q * kir__ Ping timeout: 480 seconds 1151083957 M * EKC aptitude is going to save me a lot of time. 1151084150 J * brc_ bruce@20151231118.user.veloxzone.com.br 1151084163 Q * brc_ Remote host closed the connection 1151084412 J * brc_ bruce@20151231118.user.veloxzone.com.br 1151084767 M * coocoon hello bertl 1151085371 J * enet ~jpduyx@146.50.228.22 1151086044 Q * coocoon Ping timeout: 480 seconds 1151086217 P * enet 1151086726 J * coocoon ~coocoon@84.160.108.26 1151086834 Q * shedi Ping timeout: 480 seconds 1151087246 Q * cdrx Quit: Leaving 1151088607 J * kir__ tis-3644c3@213.152.157.70 1151088983 Q * coocoon Quit: Changing server... 1151089615 J * coocoon ~coocoon@84.160.108.26 1151090184 J * shedi ~siggi@130.208.221.254 1151091886 Q * mkhl Read error: Connection reset by peer 1151092037 J * yelifu ~hongdanst@202.38.114.129 1151093291 M * coocoon AndrewLee: hello? 1151094575 Q * Viper0482 Remote host closed the connection 1151096281 Q * f_ Quit: This computer has gone to sleep 1151096292 Q * kir__ Ping timeout: 480 seconds 1151096494 J * mire_ ~mire@247-166-222-85.COOL.ADSL.VLine.verat.net 1151096684 J * eyck_ eyck@ghost.anime.pl 1151096915 J * f_ ~f_@83-215-237-1.seek.stat.salzburg-online.at 1151097828 Q * f_ Quit: This computer has gone to sleep 1151097953 Q * yelifu Quit: 1151097962 J * yelifu ~hongdanst@202.38.114.129 1151098526 Q * mire_ Quit: Leaving 1151098763 Q * Cocobu Remote host closed the connection 1151098908 J * kir_home tis-0e43a6@213.152.157.70 1151099173 M * doener daniel_hozac: more CoW problems :( 1151099177 M * doener failed to chmod `//usr/bin/newgrp.dpkg-tmp': Operation not permitted 1151099215 M * daniel_hozac yeah, i think that's been on the todo-list. 1151099220 M * doener not sure what dpkg is doing, but we probably should apply link breakage on chmod anyway 1151099222 M * daniel_hozac to break links on chmod/chown/etc. 1151099223 M * doener ah, ok 1151099246 M * daniel_hozac or at least, i remember someone mentioning the problems. 1151099266 M * daniel_hozac however, is /usr/bin/newgrp.dpkg-tmp really a COW file? 1151099289 M * daniel_hozac the .dpkg-tmp would imply it's the file it rename(2)s over the original file, IMO. 1151099308 M * doener atjola:/vservers/mysql/usr/lib# showattr pt_chown.dpkg-tmp 1151099308 M * doener ----UI- pt_chown.dpkg-tmp 1151099332 M * doener after "touch pt_chown.dpkg-tmp" the update succeeded 1151099369 M * daniel_hozac hmm, dpkg renames the original and then works on it? 1151099406 M * doener seems so, but maybe that was some post-inst script, I'll take a look 1151099420 M * doener hm, post-inst makes no sense... 1151099640 M * doener wow, there are lots of those .dpkg-tmp files by now... guess that vserver needs a re-setup soon... 1151099675 M * daniel_hozac hehe 1151099687 M * daniel_hozac wouldn't that be breaking regular hashification for debian too though? 1151099694 M * daniel_hozac i.e. on 2.0 without COW? 1151099739 M * doener probably, the IS_COW macro is just a rename of $WHATEVER_IS_WAS_NAMED_IN_2.0, isn't it? 1151099753 M * doener and probably appears in the same places 1151099817 M * daniel_hozac yeah, i think so. 1151100702 Q * nox_ Ping timeout: 480 seconds 1151100862 Q * kir_home Ping timeout: 480 seconds 1151101081 Q * shedi Quit: Leaving 1151102852 Q * meandtheshell Quit: bye bye ... 1151102905 Q * doener Ping timeout: 480 seconds 1151103346 Q * shuri Quit: Quitte 1151103515 N * sarnold sars 1151103902 Q * bonbons Quit: Leaving 1151104326 J * nox ~nox@noxlux.de 1151105156 Q * coocoon Quit: KVIrc 3.2.0 'Realia' 1151105996 J * coocoon ~coocoon@84.160.108.26