1168736014 J * FireEgl Proteus@adsl-61-147-216.bhm.bellsouth.net 1168736833 Q * dna Quit: Verlassend 1168737488 J * agryppa1 ~kb2qzv@cab-dr-cvx1-100.dial.airstreamcomm.net 1168737531 M * agryppa1 good evening, I need help in network setup 1168737545 M * daniel_hozac what's the problem? 1168737557 M * agryppa1 guest gentoo has empty resolve.conf, don't know why 1168737594 M * daniel_hozac probably because you didn't put anything in it yet? 1168737603 M * agryppa1 that's true 1168737615 M * agryppa1 but how is it supposed to be populated? 1168737628 M * daniel_hozac echo nameserver x.y.z.w > /etc/resolv.conf? 1168737634 M * agryppa1 I'd like dhcp do that, how? 1168737645 M * Bertl that is a little trickier 1168737673 M * Bertl you have to request the stuff via dhcp, providing a specific client identifier 1168737685 M * Bertl (and that has to be done on the host) 1168737771 M * agryppa1 my guest's /etc/conf.d/net is still empty. Is that to stay that way then? 1168737789 M * Bertl typically yes, you set up the stuff from the host 1168737805 M * Bertl where you also do the NAT stuff and firewalling 1168737819 M * agryppa1 from the host and ON the host? within host's filesystem? 1168737883 M * Bertl from the host (probably in one of the guest start scripts), on the host (as ip config there), within the hosts filesystem? not necessarily 1168737943 M * Hollow the net service in gentoo is a complete dummy, it wonÄt do anything .. 1168737950 M * Hollow at least for baselayout-vserver 1168738006 M * agryppa1 hm... I am still clueless. How about daniel_hozac's suggestion? Would resolv.conf on a guest keep the setting? 1168738042 M * daniel_hozac unless you change it, yes 1168738044 M * agryppa1 across reboot, that is... 1168738072 M * Hollow probably the easiest way is to: cp -L /etc/resolv.conf /vservers//etc/resolv.conf (on the host) 1168738277 M * agryppa1 Now then, the startup script net.eth0 on a guest shouldn't ever be started? At this moment my guest has an IP of 192.168.0.3 but it got it at "build" time 1168738384 M * Hollow if you look at /etc/init.d inside, you will see that most init scripts a re linked to dummy 1168738403 M * Hollow i.e. also the net.* scripts are dummy 1168738416 M * Hollow they are just around to satisfy the dependency for other init scripts 1168738470 M * agryppa1 OK, thank you 1168738504 M * Hollow yw! 1168739111 M * agryppa1 I need answers on syslog-ng within guest ? 1168739175 M * Bertl hmm, what's the probelm there? 1168739213 M * agryppa1 in the gentoo-vserver howto an example shows the command "ps ax" revealing syslog-ng running an a guest. My guest cannot start it. It is a very fresh gentoo install from stage3 1168739236 M * Bertl does it say something _why_ it doesn't start? 1168739252 M * agryppa1 /etc/init/syslog-ng says permission denied or so 1168739273 M * agryppa1 let me see once more 1168739273 M * daniel_hozac on what? 1168739314 M * agryppa1 /etc/init.d/syslog-ng start [ ok ] 1168739314 M * agryppa1 * Starting syslog-ng ... 1168739314 M * agryppa1 Error opening file /proc/kmsg for reading (Operation not permitted) 1168739314 M * agryppa1 Error initializing configuration, exiting. 1168739315 M * agryppa1 * Failed to start syslog-ng 1168739326 M * agryppa1 this happens on guest 1168739357 M * daniel_hozac either enable the virtualized syslog, or comment/remove /proc/kmsg from your syslog-ng configuration. 1168739366 J * sladen_ paul@starsky.19inch.net 1168739368 Q * sladen Remote host closed the connection 1168739399 M * agryppa1 how to enable virtualized syslog? 1168739437 M * daniel_hozac VXC_SYSLOG 1168739578 M * agryppa1 that's beyond me. How about the other solution. the line in syslog-ng.conf says: 1168739580 M * agryppa1 source src { unix-stream("/dev/log"); internal(); pipe("/proc/kmsg"); }; 1168739611 M * agryppa1 Should I just remove pipe("/proc/kmsg"); 1168739616 M * daniel_hozac yes. 1168739642 M * agryppa1 and the VXC_SYSLOG how do you eat it :-) 1168739699 M * daniel_hozac echo syslog >> /etc/vservers//ccapabilities 1168739884 M * agryppa1 hm... I do not have the file ccapabilities in that directory. Am I to create it and put a line "syslog" in it? where is the VXC_SYSLOG ? 1168739958 M * daniel_hozac yes. 1168739996 M * agryppa1 I am gonna try it. thank you. 1168740008 M * daniel_hozac VXC_SYSLOG is what it's called in the kernel. while that name works for the utils too, traditionally the prefix isn't used and lowercase is just easier. 1168740084 M * agryppa1 I am gonna restart the guest right now and try to start syslog-ng 1168740149 M * agryppa1 You are good. Look at this: 1168740153 M * agryppa1 /etc/init.d/syslog-ng start [ ok ] 1168740154 M * agryppa1 * Starting syslog-ng ... 1168740178 M * agryppa1 there is an OK at the line's end. 1168740211 M * agryppa1 Fantastic. But what do I need it for :-) just kidding :-) 1168740226 M * Bertl lol 1168740379 M * agryppa1 I can imagine that such tricks wil somehow be included in future versions of util-vserver script... 1168740405 M * daniel_hozac unlikely. 1168740417 M * daniel_hozac IIRC syslog-ng isn't even in the stage3. 1168740618 M * agryppa1 I am an experimenter at this stage. My guest is being updated to the latest versions of packages. It is a bare minimal of a working system. I was wondering: can I install xdm in guest and see the guest in the chooser of the host? 1168741123 M * Bertl sure 1168741349 M * agryppa1 that's good. I'll work on it. 1168741381 Q * DavidS Read error: Connection reset by peer 1168742385 J * Aiken_ ~james@tooax8-120.dialup.optusnet.com.au 1168742704 Q * Aiken Ping timeout: 480 seconds 1168743328 Q * agryppa1 Quit: Leaving 1168743614 M * hardwire Aiken_: does AoE support partitions? 1168743636 M * Bertl I would assume so ... 1168743667 M * hardwire I would to 1168743677 M * hardwire thinking that may be the least invasive method of supporting loopback partitions :) 1168743706 M * hardwire it would be steller if linux could boot and root via AoE easily, even via an initrd 1168743768 M * hardwire don't even start if you are gonna say I am totally lame :) 1168743772 M * hardwire cause I sorta am 1168743783 M * hardwire just don't waste your breath is all 1168744853 M * hardwire aoe works beautifully! 1168744859 M * hardwire dear lord its sexy 1168744873 M * hardwire as long as you don't mind some asshole in your server room unconnecting your hard drives 1168745069 J * agryppa1 ~kb2qzv@cab-dr-cvx1-100.dial.airstreamcomm.net 1168745220 M * agryppa1 Hi, I was unaware that there exists a baselayout-vserver-1.11.14-r4 for use WITHIN vservers. When building a guest from stage3 (vserver guest build ... stage3 /path/to/stage3) I set initstyle plain. Is there a way I can convert it into --initstyle gentoo without too much hassle? 1168745252 M * daniel_hozac i thought initstyle gentoo required baselayout 1.13. 1168745314 M * agryppa1 I haven't emerged baselayout yet. what is my system then? 1168745325 M * agryppa1 my guest, that is. 1168745347 M * daniel_hozac depends on which stage3 you used, i suppose. 1168745373 M * agryppa1 the one that was linked from gentoo howto site. 1168745411 M * agryppa1 stage3-amd64-20060317.tar.bz2 1168745451 M * agryppa1 the thing is that I have used (--initstyle plain) I didn't know what it meant at that time. 1168745469 M * daniel_hozac you'll still need it then. 1168745579 M * agryppa1 Can I convert to initstyle gentoo using baselayout-vserver in the guest? 1168745615 M * hardwire heh.. so all the AoE tools are shell scripts 1168745617 M * hardwire this should be easy 1168745689 M * daniel_hozac i don't think so, i'm not sure what the exact status of initstyle gentoo is. 1168745740 M * agryppa1 OK, so with my current setup what did I get. A gentoo vserver with what kind of startup scripts? 1168745762 M * daniel_hozac hmm? 1168745772 M * agryppa1 never mind. I am lost. 1168745835 M * agryppa1 You see the gentoo vsever howto ends on that part of the vserver installation process where the real work should begin. 1168745877 M * daniel_hozac what real work? 1168745943 Q * Zaki Ping timeout: 480 seconds 1168745963 M * Bertl setting up apache? psotfix? 1168745972 M * agryppa1 I mean the installation of a vserver. Alas the command "vserver myguest build" is not the final stage of the installation is it? 1168745994 M * daniel_hozac well, you have a guest after that, no? 1168746003 M * daniel_hozac what you do with it depends entirely on your needs. 1168746029 Q * FireEgl Read error: Connection reset by peer 1168746032 M * agryppa1 this baselayout-vserver thingy in the portage, for whom is it? 1168746050 M * daniel_hozac hmm? it's for guests. 1168746088 M * daniel_hozac if you got a vserver stage3, it will already have it installed. 1168746116 M * agryppa1 would it show if I emerge -s baselayout in the guest? 1168746130 M * daniel_hozac i have no idea. 1168746139 M * daniel_hozac i'm not a Gentoo person. 1168746152 M * daniel_hozac and i broke my Gentoo guest the last time i played around with the baselayouts. 1168746194 M * agryppa1 Again, you are good. Look at this and sorry for the hassle: 1168746196 M * agryppa1 emerge -s baselayout-vserver 1168746197 M * agryppa1 Searching... 1168746197 M * agryppa1 [ Results for search key : baselayout-vserver ] 1168746197 M * agryppa1 [ Applications found : 1 ] 1168746197 M * agryppa1 * sys-apps/baselayout-vserver 1168746197 M * agryppa1 Latest version available: 1.11.14-r4 1168746199 M * agryppa1 Latest version installed: 1.11.14-r4 1168746203 M * agryppa1 Size of files: 139 kB 1168746205 M * agryppa1 Homepage: http://dev.croup.de/proj/gentoo-vps 1168746207 M * agryppa1 Description: Filesystem baselayout and init scripts for Linux-VServer 1168746209 M * agryppa1 License: GPL-2 1168746227 M * Bertl agryppa1: we have a pastebin for pasting more stuff 1168746236 M * Bertl (paste.linux-vserver.org) 1168746239 M * agryppa1 OK, sorry 1168746245 M * Bertl np, now you know 1168746324 M * agryppa1 with this baselayout-vserver in place in my guest how does that relate to the fact that I set --initstyle plain? Am I ok? 1168746391 M * daniel_hozac AFAIK baselayout-vserver still requires initstyle plain. 1168746448 M * agryppa1 Thanks for the info. 1168746479 M * daniel_hozac you might want to ask someone authoritative on the subject though, but i think Hollow is sleeping. 1168746501 M * agryppa1 Oh, ok. 1168746503 M * Bertl Hollow, phreak`` both should know the ugly details :) 1168746625 M * agryppa1 the machine I am using is an amd63 3000+ and the stage3 from which I started is outdated. Pity there are not more current ones. How about if I wanted to install a different distro on my gentoo host? Is that easy? I found almost no howtos on the subject. 1168746646 M * Bertl debian should be trivial 1168746659 M * daniel_hozac Fedora/CentOS should just require that you install yum. 1168746694 M * agryppa1 really? and the rest will go from the net? Are the any links? 1168746747 M * agryppa1 on linux-vserver.org there are howtos I know 1168746753 M * daniel_hozac usually there are instructions on the distro specific pages. 1168746768 M * daniel_hozac e.g. http://oldwiki.linux-vserver.org/VServer+installation+Fedora+Core+5 1168746783 M * agryppa1 but nothing of type GentooHost + FedoraGuest 1168746795 M * agryppa1 Thanks. 1168746800 M * daniel_hozac because the guest build procedure is the same regardless of the host. 1168746810 M * daniel_hozac you just need to make sure you have the needed tools installed. 1168746823 M * daniel_hozac i.e. rpm and yum in the case of Fedora/CentOS. 1168746890 M * agryppa1 oh, ok. Sounds good. 1168746992 M * Bertl the debian will install without any prerequisites ... 1168747007 M * Bertl that's why I suggested it, not because I prefer it :) 1168747118 M * agryppa1 Yeah. thank you guys for bearing with me. I appreciate you help. It's getting late here in Wisconsin. I'l see you next time. thank you very much 1168747131 M * Bertl you're welcome! have fun! 1168747201 Q * agryppa1 Quit: Leaving 1168748327 J * h3x ~renix@cpe-76-171-107-85.socal.res.rr.com 1168748348 M * h3x hello 1168748384 J * FireEgl Atl-NA@adsl-61-147-216.bhm.bellsouth.net 1168748402 M * h3x can someone help plz 1168748411 M * h3x I run vserver vserver1 build -n vserver1 --hostname vserver1.renix.org --interface eth0:192.168.1.31/24 -m debootstrap -- -d sarge 1168748417 M * h3x but it seems to do nothing 1168748847 M * daniel_hozac so it finished but doesn't leave you with a guest, or what? 1168748862 J * Zaki ~Zaki@88.213.59.176 1168748931 M * h3x nope, I run vserver vserver1 start and gives me ... 1168748947 M * h3x Can not find a vserver-setup at '/usr/local/etc/vservers/vserver1/' 1168748988 M * daniel_hozac so what does the build command output? 1168749013 M * h3x nothing actually 1168749043 M * daniel_hozac nothing at all? 1168749054 M * daniel_hozac debootstrap is really verbose. 1168749065 M * h3x nope 1168749093 M * h3x doesn't do anything just returns to the shell after I execute it 1168749117 M * daniel_hozac what's your host distribution? 1168749129 M * h3x slackware 1168749158 M * daniel_hozac what does vserver --debug ... say? 1168749195 M * h3x its pretty verbose output 1168749201 M * h3x want me to paste it? 1168749204 M * daniel_hozac yes. 1168749215 M * daniel_hozac at paste.linux-vserver.org, that is. 1168749302 M * h3x awesome =) 1168749392 M * h3x daniel, mind if I bug u later? 1168749401 M * h3x I'm on my way out 1168749437 M * daniel_hozac if i'm still here, not at all. 1168749479 M * h3x thx =) 1168750238 Q * Radiance Remote host closed the connection 1168755082 J * phormix ~nobody@S0106004063da6463.ok.shawcable.net 1168755091 M * Bertl welcome phormix! 1168755124 M * phormix Danke. Please excuse me if I'm a little off, I think the last time I used IRC was around the beginning of the decade 1168755159 M * phormix Was wondering if anyone around here can tell me if it's doable to run x.org from within the vserv 1168755160 M * Bertl np, not much changed since ... IIRC :) 1168755191 M * Bertl Xorg as the hardware part or Xorg as X11 in general, as 'server' for a client? 1168755232 M * phormix X11 in general, and to actually run an X session within the vserv of a machine 1168755248 J * Radiance 2644ca0f46@halt.1984world.eu 1168755255 M * phormix so "vserver myvs enter" and then starting GDM or just startx, whatever 1168755273 M * Bertl that works perfectly fine, for the hardware access, you need to give certain 'insecure' permissions 1168755293 M * Bertl e.g. running a headless Xorg with xdmcp over network is no problem 1168755293 M * phormix Yeah, I've heard part of that 1168755305 M * Radiance hmm any one encountered mysql and clamav complaining about not finding directories or unable to create socket within a vserver ? Despite that directories are there and have the correct permissions. 1168755320 M * Bertl phormix: ssh-ing to a guest and forwarding X11 is no problem either 1168755332 M * phormix Radiance: What happens if you try to access the directories manually? 1168755341 M * Radiance it just works, no errors 1168755355 M * phormix Hmmm. weird 1168755362 M * Radiance this is for clamav: 1168755364 M * Radiance Starting ClamAV daemon: LibClamAV Error: cl_loaddbdir(): Can't open directory /var/lib/clamav 1168755364 M * Radiance ERROR: Unable to open file or directory 1168755370 M * Radiance and this is mysql: 1168755378 M * Radiance /usr/bin/mysqladmin: connect to server at 'localhost' failed 1168755378 M * Radiance error: 'Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)' 1168755379 M * Radiance Check that mysqld is running and that the socket: '/var/run/mysqld/mysqld.sock' exists! 1168755381 M * Bertl do you try as root? 1168755384 M * phormix Is clamav running as an alternate user? 1168755397 M * Radiance yes, tried to run clamav as root but it keeps giving those errors 1168755419 M * Bertl nah, what I meant is, do _you_ try to access those dirs as root? 1168755422 M * Radiance yes clamav is running as clamav, permissions are all set in passwd/group, including those of the dir 1168755447 M * Radiance BertI, yes, you want me to try as a normal user ? like clamav ? 1168755452 M * Bertl yep 1168755457 M * Radiance ok hold on :) 1168755464 M * phormix Anyhow, my situation is that I've got a NAT'ing server that runs my little network here, and a USB-phone adaptor (that runs in X with Skype) that I want to be running constantly, but not within the environment of my normal server... 1168755518 M * Radiance hmm, it says No Shell 1168755525 M * phormix Oh, I had that 1168755527 M * Bertl phormix: you will have to 'copy' the USB devices into the guest, except for that, it should work, unless the USB driver/device needs special permissions 1168755533 M * Radiance despite that i changed false to bash in passwd and removed "!" 1168755535 M * phormix If your vserver is running from /home, check the permissions on /home 1168755549 M * Radiance it's running from its own partition 1168755560 M * phormix No weird permissions on the partition? 1168755561 M * Bertl Radiance: yes, not only that, also the permissions of the entire guest root dir 1168755576 M * Bertl 000 is _not_ a good mask :) 1168755583 M * Radiance like this: /vserver/test 1168755589 M * Radiance BertI, ok lemme check heh 1168755616 M * phormix I think the thing creates an ALSA device, one sec I'll see if it comes up within the vserv 1168755637 M * Bertl it wont create the device in the guest 1168755654 M * Bertl but you can probably copy those devices to the guest and use them there 1168755686 M * phormix I was thinking about that. 1 moment I'll see if I can find out what they are 1168755725 M * Radiance permissions in guest root look normal, (running the same vps on a different server, compared them to that) 1168755783 M * phormix What happens if you (outside of guest root) su jdoe and then cd /path/to/guestroot/ 1168755789 M * Radiance i tried to google about that clamav error and although it occured to alot of ppl at times they usually fixed it by permissions or creating missing directories. Yet in my case permissions and directories are all there, compared them to the same vps running on another server. 1168755804 M * Radiance lemme try 1168755879 M * Radiance works just fine 1168755948 M * daniel_hozac have you checked the permissions on all of the directories? 1168755955 M * Radiance ah fuck 1168755957 M * Radiance got it 1168755991 M * Radiance i had /vserver/test <---- the permissions on vserver were o-rwx 1168756010 M * Radiance i mean for test 1168756022 M * Radiance test was o-rwx 1168756036 M * Radiance i set o+rx test and now it works 1168756076 M * Radiance for /vserver i did o-rwx to prevent a few ppl from accessing the vserver from the host 1168756116 M * phormix :-) I did a similar thing not too long ago so that message was a bit familiar to me 1168756133 M * phormix It's those things that you spend about 5 min screwing up and 2hours fixing that make you go DOH 1168756143 M * Radiance i didn't know it would cause this issue actually, by doing o-rwx on the mountpoint of the guest 1168756191 M * Bertl well, the 'mount point' becomes the 'root dir' 1168756201 M * Radiance i thought since the vserver is started as root that it would not be an issue hehe 1168756210 M * Bertl and when you ever changed the permission of / you know the effects :) 1168756217 M * Radiance :-) 1168756228 M * phormix I did mine with just a changeroot (no vs) but same result and error messages 1168756229 M * Radiance well got a bit wiser tonight :) 1168756246 M * Radiance thanks for the quick input hehe 1168756258 M * Radiance i hate to admit it but it i spend about 3 hours on this 1168756265 M * Radiance checking and tripple checking 1168756270 M * phormix I did the same thing last night so it was fresh in my mind (and yeah, about 1.5 to 2h time spent figuring it) 1168756295 M * phormix I have my vserv in /home (no space elsewhere) and when I did a chmod o-rwx /home/* it did that to me 1168756304 M * phormix well /home/vserver/ 1168756314 M * Radiance well at least i read almost all possible situation where clamav goes haywire on a normal system (and mysql) lol 1168756325 M * Radiance nasty hehe 1168756507 M * phormix Hmmm, now what do I need to allow SSH X-forwarding to work in the vserv. I remember adding "X11UseLocalHost no" to sshd_config, but there was something else... 1168756512 M * phormix About the loopback I think it was 1168756535 M * phormix Anyone remember what that might be? 1168756579 Q * FireEgl Read error: No route to host 1168756636 M * Radiance phormix, didn't try that myself else i'd help ya bud hehe 1168756661 J * FireEgl ~FireEgl@adsl-17-137-63.bhm.bellsouth.net 1168756673 M * phormix ah well, I figured it out once before so I'll give 'er a shot again 1168756687 M * phormix right now running an X app while SSH'ed just sits and spins 1168756963 M * Bertl who spins? 1168756983 M * phormix Sorry, I mean that it just sits there not actually doing anything 1168756995 M * Bertl check that you have a DISPLAY set 1168757008 M * Bertl also check that the guest has xauth installed 1168757023 M * Bertl and of course, ssh/d x11 forwarding is enabled 1168757032 M * phormix That is, I don't get any errors 1168757056 M * Bertl must not give an error if DISPLAY points to localhost:0.0 e.g. 1168757125 M * phormix taviss@maestro-vs:~$ set | grep DISPLAY 1168757125 M * phormix DISPLAY=maestro-vs:10.0 1168757166 M * Bertl that looks at least fine 1168757180 M * Bertl is maestro-vs in /etc/hosts? 1168757193 M * phormix Yes, as 127.0.0.2 1168757207 M * daniel_hozac and that address is assigned to the guest? 1168757210 M * phormix Which is what I configured lo as for the vserv 1168757248 M * Bertl you should not use 127.x addresses for guests 1168757267 M * Bertl also double check X11UseLocalhost in sshd config 1168757291 M * phormix X11UseLocalhost no 1168757334 M * Bertl change that to yes 1168757364 M * phormix k one sec 1168757920 Q * FireEgl Ping timeout: 480 seconds 1168758005 M * phormix well, I get errors now at least :) 1168758018 M * phormix X11 connection rejected because of wrong authentication. 1168758018 M * phormix X connection to localhost:11.0 broken (explicit kill or server shutdown). 1168758058 M * Bertl what is localhost bound to? 1168758099 M * Bertl (should be the first ip assigned to the guest) 1168758118 M * phormix I tried it is as both 127.0.0.1 and 127.0.0.2 (lo is still 127.0.0.2) 1168758146 M * Bertl ahem, you should definitely assign a non 127.x ip to your guest 1168758157 M * Bertl also make that the first ip of your guest 1168758172 M * Bertl (unless you are testing 2.3.x of course) 1168758201 M * phormix nope, 2.1.9 at the moment 1168758209 M * Bertl take a private ip, e.g. 10.0.0.1 for that, and put it on dummy0 if you like 1168758218 M * daniel_hozac 2.1.9? 1168758229 M * Bertl yeah, interesting :) 1168758271 M * phormix sorry, v.2.1.1, grsec is 2.1.9 1168758278 M * Bertl ah, grsec :) 1168758281 M * phormix erm, 2.2.0 1168758299 M * phormix and I'm not using the grsec stuff just yet, just in there for later use 1168758326 M * Bertl well, if all else fails, try with a mainline patch (without grsec) 1168758341 M * phormix OK, in regards to the IP's of the guest 1168758387 M * phormix Let's say the main machine has an IP (eth1) of 192.168.253.1, and I also run SSH from within the vserver (different port), how would I be configuring these interfaces then? 1168758395 J * comfrey_ ~comfrey@70.91.185.84 1168758413 M * Bertl depends on what you want to accomplish 1168758427 M * Bertl a typical setup as I would do it would look like this: 1168758438 M * phormix Allow SSH'ing to 192.168.253.1 with X11 forwarding.. 1168758440 M * Bertl - host 192.168.253.1/22 sshd 1168758450 M * Bertl - guest 192.168.253.2/22 sshd 1168758464 M * Bertl that will allow you to reach both of them via ssh 1168758474 M * Bertl on the local lan as well as one from the other 1168758500 M * phormix OK. Right now I have host 192.168.253.1/2222 sshd, and guest 192.168.253.1/22 1168758501 Q * comfrey Ping timeout: 480 seconds 1168758504 M * Bertl to do that, you simply need to restrict the host sshd to / 1168758513 M * Bertl 192.168.253.1 1168758534 M * phormix one moment 1168758535 M * Bertl well, sharing the ip between guest and host might lead to complications 1168758570 M * phormix I thought it would be safe with different ports but perhaps not, 1 moment I'll change my host config and then redo the guest as well 1168758595 M * Bertl it might lead to complications with the xauth, that is :) 1168758603 M * phormix I think that might be the case 1168759047 M * Bertl okay, I guess I'm off to bed now ... 1168759055 M * phormix alrighty. Thanks for the pointers 1168759067 M * daniel_hozac good night! 1168759082 M * Bertl phormix: you're welcome! and good luck (note, it works here, so it should be no biggie :) 1168759085 M * Bertl daniel_hozac: thanks! 1168759090 N * Bertl Bertl_zZ 1168759330 M * phormix Ahh, for the record, I also had to add a little section to my firewall rules for the 192.168.253.2 interface, works now. 1168759424 M * phormix ah well, I'm off 1168759435 M * phormix g'night all 1168759437 Q * phormix Quit: I am going away 1168760071 J * juggo ~lemur@h-68-166-181-4.sttnwaho.covad.net 1168760111 M * juggo does anyone know a fast way to monitor the disk usage of vservers? 1168760127 M * daniel_hozac use disk limits? 1168760154 M * juggo could you explain how? 1168760171 M * daniel_hozac http://oldwiki.linux-vserver.org/Disk+Limits 1168760364 M * juggo reading 1168760472 M * juggo any known issues with using tagxid on xfs? or if the mount point is not the vservers directory but its parent? 1168760479 Q * click Ping timeout: 480 seconds 1168760516 M * daniel_hozac tagxid should work fine on xfs. 1168760542 M * daniel_hozac you have your guests on the same filesystem as /? 1168760574 M * juggo no, on an encrypted disk, mounted as /crypt so /crypt/vservers 1168760590 M * daniel_hozac ok, that should be fine then. 1168760645 M * juggo ok, and if I go through the steps to do this where would the disk limits and usage be available, /proc/virtual/??? 1168760677 M * daniel_hozac no, vdlimit --xid 1168760693 J * Aiken__ ~james@tooax7-199.dialup.optusnet.com.au 1168760797 M * juggo ok, is it possible to set up such a system and not set limits, just use it to monitor usage? 1168760826 M * daniel_hozac make the "limit" the size of your filesystem. 1168760852 M * juggo ok thanks, I think that's what I needed to know 1168760874 M * juggo I was looking at my vserver sizes with du, which takes a while to run, and some were much bigger than I realized 1168760891 M * juggo so I want to get a munin plugin for disk usage 1168760902 M * juggo to keep a better eye on things 1168761004 Q * Aiken_ Ping timeout: 480 seconds 1168761031 M * juggo but du takes too long to run, almost 10m on the last system I ran it on, and while I wouldn't set the size to be the filesystem I might set something arbitrarily high like 100GB 1168761049 M * daniel_hozac makes sense. 1168761078 M * daniel_hozac note that (v)du will still need to run to calculate the guest size in some circumstances. 1168761083 M * daniel_hozac (the page explains that) 1168761145 M * juggo I'm not seeing that 1168761169 M * daniel_hozac first sentence in the fourth section. 1168761203 M * juggo ok, but that's automatic right? 1168761219 M * daniel_hozac automatic, yes. but it might delay the startup. 1168761231 M * juggo ok, good to know 1168761238 M * daniel_hozac but under normal circumstances, it shouldn't be necessary. 1168761267 M * juggo right, just non-graceful stops, someone knocks the power cable out of the box in the rack 1168761293 M * daniel_hozac exactly. 1168761321 M * juggo ok thanks for the help I think that's what I'm looking for, now I just need to schedule the time to bring down the vservers on one of my boxes to try it, maybe later tonight 1168761683 J * FireEgl ~FireEgl@adsl-17-137-63.bhm.bellsouth.net 1168761878 J * Nam ~nam@S0106001195551ff0.va.shawcable.net 1168761925 M * Nam has the code for vservers network changes without reboot gone stable yet? 1168761935 M * daniel_hozac hmm? 1168761946 M * Nam as in, the vserver can have new ip's added/removed without restarting the vserver 1168761956 M * daniel_hozac that has been possible since 2.0. 1168761962 M * daniel_hozac before that too, i imagine. 1168761980 M * Nam Bertl said it was in the dev three, but going stable within the next 2-3 months like 4-5 months ago 1168761984 M * daniel_hozac however, if your guest only has one IP address, you'll need to restart all the services. 1168762022 M * Nam from my talks with Bertl, 2.0 didn't have that, it was i believe 2.1 he said that was coming 1168762024 M * daniel_hozac he must've misunderstood what you were asking. 1168762035 M * Nam we had some big long talks about it 1168762039 M * daniel_hozac 2.0 _does_ have the entire net API. 1168762042 M * Nam and i checked back multiple times with him 1168762067 M * Nam hmm... 1168762078 M * daniel_hozac $ grep -c vc_net_add ../patch-2.6.12.4-vs2.0.diff 1168762078 M * daniel_hozac 3 1168762100 M * Nam so, with 2.0+, when making changes to the IP's, do you just change the config file and it's done? or do you have to apply it somehow? 1168762153 M * daniel_hozac _if_ your guest has 2+ IP addresses already, and you have util-vserver 0.30.212+, naddress --nid --add --ip / would let the guest use it. 1168762175 M * daniel_hozac you'd have to add it to the host manually first. 1168762190 M * daniel_hozac to use the configuration files, you'd have to restart the guest. 1168762348 M * Nam naddress added in 212? 1168762354 M * daniel_hozac right. 1168762364 M * Nam i have 204 on one of my servers, no naddress there 1168762365 M * Nam ok 1168762382 M * Nam that's good to know, thx 1168762392 M * Nam your guys really support this project well, appreciate it 1168762415 M * daniel_hozac you're welcome! 1168762425 M * Nam i'm developing a CPanel replacement right now 1168762438 M * Nam which includes this project for the vserver capabilities 1168762464 M * Nam when we go public, hopefully it gives a lot of credibility to this project and it's capabilities 1168762623 M * daniel_hozac btw, 2.3 will remove the first part of the requirement, i.e. you'll be able to add addresses to guests that have just one IP. 1168762674 M * Nam ahh... so right now, if a guest has only one ip address in the configuration, that command will not work? 1168762684 M * Nam only once multiple addresses are added? 1168762703 M * daniel_hozac the services will need to be restarted for the change to take effect. 1168762717 M * daniel_hozac there's an optimization that triggers whenever a guest just has one IP address. 1168762748 M * Nam the services within the guest? or the entire guest? 1168762755 M * daniel_hozac the services within the guest. 1168762770 M * Nam ah, well that would depend on the service wouldn't it? 1168762773 M * daniel_hozac but since you're restarting them all after adding the address, you might as well just restart the whole thing. 1168762780 M * daniel_hozac how so? 1168762807 M * Nam for instance, apache, you need to add it to the config file so that it responds, unless * is used, but regardless, the applications need to redetect the ip addresses 1168762835 M * daniel_hozac usually apps bind to 0.0.0.0 though. 1168762845 M * daniel_hozac so as to not have you hardcode the addresses in tons of configuration files. 1168762896 M * Nam i'm automating all the services, so restarting them will be simple 1168762914 M * Nam just rebooting an entire guest just to add a new ipaddress is a bit excessive 1168762924 M * Nam disconnects people and stuff 1168762935 M * daniel_hozac well... restarting all the services has basically the same effect. 1168762984 M * Nam depends on the service doesn't it, apache can do a restart which waits for all connection to finish, then restarts very quickly 1168762991 M * Nam same with email 1168762997 M * Nam postfix and other applications 1168763017 M * daniel_hozac right, but what's stopping them from doing the same thing on a reboot? 1168763071 M * Nam well, rebooting causes everything to shut down and then restart, and not done gracefully waiting for connections to finish 1168763114 M * daniel_hozac but why don't you make the reboot gracefully wait on the connections? 1168763135 M * daniel_hozac (though that seems like a bad idea, what if someone's downloading a giant file over a dialup connection?) 1168763229 M * Nam that's why instead of restarting the entire guest, i'd rather just restart the required services 1168763242 M * Nam for instance, if the IP is only used in apache, why restart all services? 1168763267 M * daniel_hozac normally when you add an IP address to a server, you want it to be used by all the services. 1168763277 M * daniel_hozac IMVLE, of course. 1168763279 M * Nam because it's a hosting panel, customers can lease ip's and assign them to what ever services they want 1168763299 M * Nam well, the main IP is access by all services 1168763305 M * Nam the other IP's are configurable 1168763333 M * Nam they could be strictly for websites, or for websites and FTP, or whatever else 1168763378 M * Nam the most likely scenario is customers setting up SSL HTTPS sites 1168763394 M * Nam since it requires an IP for each domain/port 1168763407 M * daniel_hozac right. 1168763426 M * Nam https://joeblow.com:443/ can only be accessed via on ip address 1168763441 M * Nam so, if he has like 5 sites, he needs seperate IP's for each 1168763446 M * daniel_hozac i know. 1168763453 M * Nam FTP won't change though, unless they want to 1168763470 M * Nam but there is no reason for it since it's already accessible via another IP and dns entries 1168763473 M * Nam ;) 1168766939 J * Aldo ~Aldo@pD957D935.dip.t-dialin.net 1168767007 M * Aldo hi 1168767364 J * bonbons ~bonbons@83.222.37.103 1168768465 Q * softi42 Ping timeout: 480 seconds 1168769027 Q * ard Quit: /me gaat uppen van 2.6.8 naar 2.6.19.2 met vserver 1168769077 J * softi42 ~softi@p549D5659.dip.t-dialin.net 1168769474 J * DavidS ~david@chello062178045213.16.11.tuwien.teleweb.at 1168769735 J * ard ~ard@gw-cistron.kwaak.net 1168771285 J * dna ~naucki@114-198-dsl.kielnet.net 1168771654 Q * duckx Ping timeout: 480 seconds 1168773119 P * Aldo Kopete 0.12.3 : http://kopete.kde.org 1168774283 J * FaUl immo@shell.chaostreff-dortmund.de 1168774284 M * FaUl weha 1168774761 Q * derjohn Ping timeout: 480 seconds 1168775229 J * duckx ~Duck@tox.dyndns.org 1168776220 Q * ensc Killed (NickServ (GHOST command used by ensc_)) 1168776230 J * ensc ~irc-ensc@p54B4DA31.dip.t-dialin.net 1168777292 Q * juggo Ping timeout: 480 seconds 1168778977 J * Aiken_ ~james@tooax6-184.dialup.optusnet.com.au 1168779304 Q * Aiken__ Ping timeout: 480 seconds 1168780469 J * derjohn ~derjohn@80.69.41.2 1168780472 J * lilalinux ~plasma@80.69.41.2 1168780523 J * lilalinux_ ~plasma@dslb-084-058-211-219.pools.arcor-ip.net 1168780953 Q * lilalinux Ping timeout: 480 seconds 1168782739 J * xenoborg ~xenoborg@dyndsl-091-096-073-123.ewe-ip-backbone.de 1168782747 P * xenoborg 1168782970 Q * lilalinux_ Quit: Leaving 1168783269 J * derjohn2 ~aj@dslb-084-058-208-046.pools.arcor-ip.net 1168783862 J * s0undt3ch_ ~s0undt3ch@bl9-227-96.dsl.telepac.pt 1168783973 J * _dmax ~semaj@bl9-227-96.dsl.telepac.pt 1168784296 Q * s0undt3ch Ping timeout: 480 seconds 1168784296 N * s0undt3ch_ s0undt3ch 1168784326 Q * dmax Ping timeout: 480 seconds 1168784330 N * _dmax dmax 1168785085 Q * miller7 1168785141 J * click click@ti511110a080-2339.bb.online.no 1168785199 J * Aldo ~Aldo@pD957D935.dip.t-dialin.net 1168785363 M * Aldo hi 1168785537 Q * m`m`h Ping timeout: 480 seconds 1168786090 J * m`m`h ~simba@deb30.mgts.by 1168786248 Q * FireEgl Quit: ... 1168787696 Q * michal` Ping timeout: 480 seconds 1168787995 Q * mire Ping timeout: 480 seconds 1168788007 J * michal` ~michal@www.rsbac.org 1168788931 P * Aldo Kopete 0.12.3 : http://kopete.kde.org 1168789150 J * mire ~mire@2-166-222-85.adsl.verat.net 1168792107 M * Hollow daniel_hozac: you around? 1168792774 Q * Aiken_ Ping timeout: 480 seconds 1168793308 Q * gcj Quit: Leaving 1168793312 M * matti Hi Hollow. 1168793318 M * Hollow heya matti 1168794248 M * daniel_hozac Hollow: pong 1168794309 M * Hollow daniel_hozac: when using vserver-build without an network device given to --interface it always warns to set nodev, is there a reason why vserver-build does not automagically set nodev then? 1168794376 M * daniel_hozac maybe to make sure it's intentional? i don't know actually. 1168794770 M * Hollow daniel_hozac: personally, it's annoying since i always use gentoos net scripts to setup all interfaces .. 1168794781 M * Hollow but maybe it makes sense for other setups 1168794807 Q * dna Ping timeout: 480 seconds 1168795919 J * nayco ~nayco@lns-bzn-59-82-252-133-14.adsl.proxad.net 1168795944 M * nayco hello, all :-) ! 1168796230 N * Bertl_zZ Bertl 1168796234 M * Bertl morning folks! 1168796383 M * Bertl hey nayco! :) 1168796875 J * FireEgl Proteus@2001:5c0:84dc:1:211:9ff:feca:b042 1168796953 M * meandtheshell Bertl: morning! 1168796953 M * meandtheshell Question: Since POSIX Capabilities do not need 32bit of the Capability bitmap it was/is possible to incorporate (into the POSIX bitmap which comes with vanilla) the bitmap/bitmask in order to introduce and control per-context limits - right? So a portion of the original POSIX bitmap is now used by Linux-VServer to store the per-context information. Not sure I got this right ... 1168796999 M * daniel_hozac uh, the usual capabilities are using 31 bits. 1168797026 M * daniel_hozac the 32nd is used for CAP_CONTEXT, which basically lets you call sys_vserver. 1168797051 M * Bertl yep, the CAP_CONTEXT is now the _only_ one added by Linux-VServer 1168797076 M * Bertl all other capabilities are 'per guest' so they use a separate 64bit field 1168797089 M * Bertl (which is of course stored elsewhere) 1168797093 M * meandtheshell hm - ok - I see - and this one (only one) allows for all per-context limits to be managed - right? 1168797106 M * meandtheshell ah ... hm ... 1168797108 M * Bertl nope, it allows to send management syscalls 1168797121 M * Bertl sys_vserver() is a multiplexor 1168797144 M * Bertl it allows for _many_ different commands, some of them are classified as management commands 1168797152 M * Bertl for those, you require the CAP_CONTEXT 1168797233 M * meandtheshell ok - /me got smarter now but what I still not understand is: where are these 64bit fields located/keept to allow all the per-context limit shebang? 1168797260 M * daniel_hozac in the context structure. 1168797261 M * Bertl we have a structure per context 1168797282 M * meandtheshell ah - structure like structures in C? 1168797282 M * Bertl it is created when a context is created, and it will live until the last reference to it is dropped 1168797317 M * Bertl yes, it contains all the ugly details, like scheduler info, accounting data, limits, etc 1168797337 M * meandtheshell ok - I see 1168797358 M * Bertl the context structure is hashed once it is active, so that it can be looked up via the syscall commands by a reference handle (xid) 1168797420 M * meandtheshell so O(1) - fine ... 1168797433 M * Bertl typically, yes 1168797443 M * meandtheshell 64bits ... that's a lot 1168797459 M * Bertl well, we saw that 32bit (posix) is not that much :) 1168797478 M * meandtheshell right - sure - why not - doesn't hurt :) 1168797499 M * Bertl we not only have the 64bit capability set 1168797513 M * Bertl we also have a capability mask (for the posix caps) 1168797525 M * Bertl and a flag word (for on/off features) 1168797596 M * meandtheshell can you elaborate that please? especailly a word about the capabity mask. Has it something to do with the POSIX bitmap that comes with vanilla? 1168797627 M * Bertl yep, it 'masks' exactly that bitmap, restricting the capability set 1168797647 M * Bertl in earlier versions, we applied that mask to all posix capability ops 1168797670 M * Bertl this, for example, made bind (which is broken in the way it uses capabilities :) fail 1168797688 M * Bertl since some time now, we apply that mask on checks only 1168797727 M * meandtheshell ah - so "MASK & CAPSET" like usual masking in C? 1168797728 M * Bertl so broken apps like bind 'think' they have the capability they are looking for, despite not being able to excersice it 1168797777 M * Bertl yes, but the posix capability system is a little more complex 1168797834 M * meandtheshell sure - I was just asking about the basic principle :) 1168798170 J * juggo ~lemur@h-68-166-181-4.sttnwaho.covad.net 1168798190 M * Bertl welcome juggo! 1168798195 M * juggo thanks 1168798201 M * juggo so I setup some disk limits last night 1168798214 M * Bertl congrats! 1168798233 M * juggo but vdlimit doesn't seem to track the live usage 1168798261 M * Bertl how did you test? 1168798261 M * juggo is it supposed to or did I not do something right 1168798275 M * juggo vdlimit --xid monitor3 /var/lib/vservers/monitor3/ 1168798276 M * juggo 2348 /var/lib/vservers/monitor3/ 1168798276 M * juggo space_used=892220 1168798276 M * juggo space_total=52428800 1168798276 M * juggo inodes_used=26803 1168798277 M * juggo inodes_total=1000000 1168798277 M * juggo reserved=5 1168798286 M * juggo it's had the same values for the last several hours 1168798295 M * juggo vdu --xid monitor3 --space /var/lib/vservers/monitor3/ 1168798296 M * juggo /var/lib/vservers/monitor3/ 863100 1168798305 M * Bertl okay, did you enable xid tagging for the partition the guest is on? 1168798310 M * juggo yes 1168798326 M * Bertl what tools do you use? 1168798341 M * juggo although... would a symlink screw things up 1168798370 M * juggo the vservers are actually on /crypt/vservers and /var/lib/vservers is a symlink to that 1168798399 M * Bertl should not cause a problem, as long as /crypt/vservers is tagged 1168798404 M * juggo right it is 1168798424 M * juggo not sure about tools, just the stuff on the wikipage chxid, lsxid, vdlimit, vdu 1168798450 M * juggo if there are tools to debug further they would be useful to know about 1168798455 M * Bertl I mean, what version of the tools do you use? 1168798460 M * juggo ah 1168798514 M * Bertl also, what filesystem is /crypt/vservers ? 1168798517 M * juggo using the pre-packaged debian kernel 2.6.18-3 util-vserver: 0.30.210 1168798525 M * juggo xfs 1168798546 M * Bertl hmm, not sure we added the disk limits for xfs .. let me check 1168798592 M * juggo thanks 1168798720 M * Bertl nope, jfs, reiser, ext2 and ext3 1168798732 M * juggo ah, well that would explain it then 1168798772 M * Bertl are you especially attached to xfs? 1168798773 M * juggo i guess that's what happens when you don't stick with ext3 1168798808 M * juggo well performance is nicer than ext3, but have disk limits is more important 1168798849 M * Bertl you might also utilize the xfs specific project quota 1168798881 M * juggo yeah I had looked into that 1168798948 M * Bertl and if you are interested in testing new stuff, we can also implement the missing dlimit accounting for xfs 1168798999 M * juggo possibly, I have 1 box that is for testing vserver stuff 1168799005 M * juggo though, our vserver boxes might be rebuilt int he not too distant future 1168799031 M * juggo so we may revisit the filesystem choices 1168799247 M * juggo looks like project quota for xfs isn't supported in sarge 1168799406 M * Bertl as I said, just let me know if you are sure you want that feature and you are willing to test it :) 1168799635 M * juggo ok I'll keep in mind, seems like a good feature to add for the sake of completeness, but we may choose another route before it sees the light of day 1168799640 M * juggo thanks for the help though 1168800277 M * Bertl you're welcome! 1168802844 Q * shedi Quit: Leaving 1168802986 M * Bertl okay, off for now ... back later ... 1168802992 N * Bertl Bertl_oO 1168803051 J * shedi ~siggi@inferno.lhi.is 1168803175 J * Aldo ~Aldo@pD957D935.dip.t-dialin.net 1168803180 M * Aldo hi 1168803533 M * DavidS hey Aldo 1168803538 M * Aldo hi 1168803562 M * Aldo CAn yozu say me, how I can change the Hostname of a Linux-vServer? 1168803579 M * FaUl Aldo: hostname foo 1168803595 M * Aldo in the Linux-vServer? 1168803629 M * FaUl or - if you whish to change it permanently - in /etc/vservers/