1175474534 Q * Piet Ping timeout: 480 seconds
1175475419 Q * micah Read error: Operation timed out
1175475420 J * micah ~micah@micah.riseup.net
1175477453 M * Bertl okay, off to bed ... have a good one everyone!
1175477458 N * Bertl Bertl_zZ
1175477937 J * s0undt3ch_ ~s0undt3ch@80.69.34.154
1175477980 Q * s0undt3ch_ 
1175477991 Q * s0undt3ch Read error: Connection reset by peer
1175477996 J * s0undt3ch ~s0undt3ch@80.69.34.154
1175479620 Q * phycho 
1175485604 Q * softi42 Ping timeout: 480 seconds
1175486207 J * softi42 ~softi@p549D60CC.dip.t-dialin.net
1175486986 Q * ensc Ping timeout: 480 seconds
1175488975 Q * glut Ping timeout: 480 seconds
1175489252 J * glut glut@no.suid.pl
1175491378 J * ensc ~irc-ensc@p54b4f76e.dip.t-dialin.net
1175492016 N * DoberMann[ZZZzzz] DoberMann
1175492567 Q * Aiken Remote host closed the connection
1175492910 J * Aiken ~james@ppp250-73.lns2.bne4.internode.on.net
1175494603 N * DoberMann DoberMann[PullA]
1175496248 J * duckx ~Duck@tox.dyndns.org
1175496981 T * harry http://linux-vserver.org/ | latest stable 2.2.0, 2.0.3-rc2, devel 2.3.0.12, stable+grsec 2.0.2.1, 2.2.0 | util-vserver-0.30.212, 0.30.213-rc5 | libvserver-1.0.2 & vserver-utils-1.0.3 | He who asks a question is a fool for a minute; he who doesn't ask is a fool for a lifetime -- share the gained knowledge on the Wiki, and we'll forget about the minute ;) 
1175497865 T * daniel_hozac http://linux-vserver.org/ | latest stable 2.2.0, 2.0.3-rc2, devel 2.3.0.12, stable+grsec 2.0.2.1, 2.2.0 | util-vserver-0.30.212, 0.30.213-rc6 | libvserver-1.0.2 & vserver-utils-1.0.3 | He who asks a question is a fool for a minute; he who doesn't ask is a fool for a lifetime -- share the gained knowledge on the Wiki, and we'll forget about the minute ;)
1175498513 Q * Hollow Ping timeout: 480 seconds
1175498515 Q * phreak`` Ping timeout: 480 seconds
1175498706 Q * infowolfe Read error: Connection reset by peer
1175498799 M * Wonka can't establish tcp connection to linux-vserver.org:80 somehow...
1175498806 M * Wonka "timed out"
1175498866 M * daniel_hozac the server just died, apparently ;)
1175498881 M * daniel_hozac (Hollow and phreak`` timing out is usually a good indicator of that)
1175499142 J * yarihm ~yarihm@whitehead2.nine.ch
1175499201 M * Wonka bad idea of it...
1175499505 M * daniel_hozac yeah.
1175499616 Q * ensc Killed (NickServ (GHOST command used by ensc_))
1175499625 J * ensc ~irc-ensc@p54b4ffee.dip.t-dialin.net
1175499659 M * Wonka any idea when it will run afgain?
1175499661 M * Wonka -f
1175499780 M * daniel_hozac whenever Hollow/phreak`` notice it/can deal with it, i guess.
1175499932 M * Wonka 'k
1175499986 J * Pazzo ~ugelt@dialin-225136.rol.raiffeisen.net
1175500138 J * dna ~naucki@189-245-dsl.kielnet.net
1175501468 J * ema ~ema@rtfm.galliera.it
1175502410 M * matti Morning folks.
1175502524 J * DoberMann_ ~james@AToulouse-156-1-82-234.w86-196.abo.wanadoo.fr
1175502631 J * phreak`` ~phreak``@deimos.barfoo.org
1175502633 Q * DoberMann[PullA] Ping timeout: 480 seconds
1175503631 Q * mattzerah_ Quit: mattzerah_
1175503734 J * Piet hiddenserv@tor.noreply.org
1175504218 Q * Piet Ping timeout: 480 seconds
1175504388 J * mattzerah ~matt@121.50.222.55
1175504529 M * Pazzo Hi @ll!
1175504532 M * Pazzo http://pastebin.ca/420627
1175504560 M * matti Hi Pazzo!
1175504562 M * matti How are you?
1175504571 M * Pazzo Does anyone know, why there are no interrupts on the second core on this AMD 64 (X2)?
1175504576 M * Pazzo hi matti!
1175504582 M * Pazzo fine, thnx
1175504585 M * Pazzo ltns :o)
1175504587 M * Pazzo and you?
1175504604 M * matti Not bad, thanks :)
1175504613 J * Piet hiddenserv@tor.noreply.org
1175504615 M * matti Pazzo: Can you check the /proc/interrupts?
1175504629 M * matti Pazzo: See, how interrupts are balanced per-cpu.
1175504636 M * matti Hello Piet!
1175504648 M * matti Pazzo: Bay the way - very nice machine.
1175504662 M * Pazzo http://pastebin.ca/420630
1175504824 M * Pazzo btw: not soooo nice machine - I prefer this one: http://pastebin.ca/420631  ;o)
1175504836 Q * fosco Quit: Reconnecting
1175504839 J * fosco fosco@konoha.devnullteam.org
1175504883 M * matti Let me see.
1175504908 M * Pazzo cat /proc/irq/0/smp_affinity  -> 01 on first hos, ff on second one
1175504950 J * meandtheshell ~markus@85-124-38-186.dynamic.xdsl-line.inode.at
1175504960 M * Pazzo s/hos/host/
1175505055 M * Pazzo any idea?
1175505239 M * matti Give ma a second :)
1175505243 M * matti I am at work right now :)
1175505251 M * matti Being constantly distracted!
1175505254 M * matti They want me to work!
1175505260 M * matti And this prevents me from chatting on IRC ;p
1175505262 M * matti ;D
1175505272 M * Pazzo sorry :o)
1175505279 M * matti No worries ;]
1175505287 M * Pazzo they really want you to work? bastards!!!
1175505303 M * matti Yes!
1175505304 M * matti I know!
1175505305 M * matti ;]
1175505345 M * matti How dare they!
1175505348 M * matti ;-0
1175505368 M * Pazzo echo "ff" > /proc/irq/0/smp_affinity
1175505373 M * Pazzo results in:
1175505381 M * Pazzo /proc/irq/0/smp_affinity  => 0x0f
1175505404 M * Pazzo (on a host with 2 HT cpus)
1175505416 M * daniel_hozac is it using an APIC?
1175505417 M * matti Question: did you enabled in-kernel irq load balancing?
1175505425 M * Pazzo and now it stopped using cpu0 and uses cpu3
1175505430 M * matti daniel_hozac: Yes, it seems so.
1175505447 M * Pazzo CONFIG_IRQBALANCE=y
1175505470 M * Pazzo hi daniel_hozac!!
1175505473 M * matti Did you ever tried to use this user-space daemon called irq_balancer?
1175505475 M * daniel_hozac hello
1175505486 M * matti It comes with RHCE and SuSE.
1175505489 M * matti AFAIK
1175505502 M * Pazzo what about apic?
1175505537 M * Pazzo irqbalance: no, never. should I?
1175505567 M * matti I am just 
1175505574 M * matti I am just gathering thoughts.
1175505574 M * matti :)
1175505577 M * matti Sorry.
1175505586 M * Pazzo "Balance the IRQ's once?" ->
1175505591 M * matti What is your timer frequency? 100 Hz?
1175505594 M * matti 250?
1175505594 M * Pazzo makes sense on a HT system
1175505605 M * Pazzo but doesn't on a multi-cpu one
1175505620 M * Pazzo and what about a a dual-cpu ht system??
1175505625 M * Pazzo *gg*
1175505644 M * matti SMP is not the same as SMT.
1175505645 M * matti ;]
1175505662 M * matti Dual Core is some kind of SMP, but you can have per-core sheduler.
1175505679 M * matti Correct me if I'm wrong.
1175505686 M * Pazzo CONFIG_HZ=1000
1175505693 M * Pazzo shit
1175505700 M * matti Whooo...
1175505703 M * matti A way too much.
1175505707 M * Pazzo yep
1175505717 M * matti Pazzo: Can you paste your config :)
1175505775 M * Pazzo sure... just a sec
1175505799 M * Pazzo from a host with a recent kernel?
1175505933 M * Pazzo http://pastebin.ca/420641
1175506070 M * matti Let's see.
1175506136 M * matti That is the X2 machine?
1175506144 M * Pazzo irqbalance is continously switching from cpu to cpu after some seconds!?
1175506146 M * matti CONFIG_MPENTIUM4=y
1175506146 M * Pazzo no
1175506164 M * matti So, you do have troubles with IRQ on both machines?
1175506189 M * Pazzo this is once again another one  :o)
1175506208 M * Pazzo no, the 64bit host is fine
1175506213 M * Pazzo (non-AMD)
1175506224 M * matti Hang on.
1175506228 M * matti I get lost ;]
1175506236 M * Pazzo the config is from a dual-core xeon 2,8 GHz, HT
1175506236 M * matti Which is not working as you want?
1175506250 M * Pazzo (32bit)
1175506272 M * Pazzo sorry for the confusion :o)
1175506275 M * matti Well so, can you paste config from it :)
1175506279 M * matti Not a problem :)
1175506288 M * Pazzo the config is from this host
1175506301 M * matti Oh.
1175506307 M * Pazzo I'll post also the config from the X2 host, just a sec
1175506340 M * Pazzo (but please don't over-optimise it - I would like to use it on more than just one host ;-)
1175506419 M * matti :)
1175506891 M * matti Pazzo: Mate, you OK?
1175506891 M * matti ;]
1175507176 M * Pazzo yep, I'm fine. but @ work too, sorry :o) config is on the way...
1175507197 M * matti Aye.
1175507198 M * matti :
1175507199 M * matti ;D
1175507231 M * Pazzo http://pastebin.ca/420654
1175507243 M * Pazzo (it's an older one)
1175507259 M * Pazzo I mean: the host is running an old kernel
1175507271 M * Pazzo this is the X2 one
1175507308 M * matti And this kernel have issues with irq balancing, right?
1175507331 M * Pazzo yes
1175507367 M * Pazzo but also the above one has this problems -> 32bit dual-cpu xeon
1175507370 M * matti Which IO scheduler you're using on every-day (default) basis?
1175507496 M * Pazzo that's a good question :-p I thought cfq - but doesn't seem so - just a sec please
1175507532 M * matti CONFIG_DEFAULT_IOSCHED="cfq"
1175507562 M * matti So, you may skip building-in CONFIG_IOSCHED_AS and CONFIG_IOSCHED_DEADLINE.
1175507579 M * matti Or at least choose two of them only or build them as modules :)
1175507691 M * Pazzo sounds reasonably :)
1175507701 M * Pazzo does it do any harm this way?
1175507708 M * matti CONFIG_SCHED_MC - do you really need this on this Xen machine?
1175507713 M * matti Pazzo: No.
1175507721 M * matti Pazzo: It is just a tiding up thing ;p
1175507727 M * matti Pazzo: Sorry ;] It is not important ;]
1175507747 M * matti You want this:
1175507748 M * matti CONFIG_REGPARM
1175507755 M * matti But you do not want this:
1175507758 M * matti CONFIG_SECCOMP
1175507775 M * matti And on server you really do not want this: 
1175507776 M * matti CONFIG_HZ_1000
1175507781 M * matti And probably want this:
1175507783 M * matti CONFIG_HZ_100
1175507807 M * Pazzo CONFIG_HZ: full ACK :o)
1175507814 M * matti I think, that you do not want legacy power management as well.
1175507824 M * matti As well as APM in module.
1175507831 M * matti When ACPI is used, APM is not working.
1175507832 M * matti ;)
1175507859 M * matti You may want this:
1175507860 M * matti CONFIG_PCI_MSI
1175507867 M * Pazzo CONFIG_REGPARM, CONFIG_SCHED_MC, CONFIG_SECCOMP -> I'll google for them, atm I have no idea what they are used for
1175507871 M * matti You probably do not need this:
1175507872 M * matti CONFIG_SCx200
1175507891 M * matti CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG - you really want this?
1175507929 M * Pazzo I'm using this config since a very old P3 - just changing little things from host to host and from kernel to kernel. I really should restart a fresh config from scratch ;o)
1175507936 M * matti Oh I see :)
1175507947 M * Pazzo :(
1175507961 M * matti Pazzo: I know, from my little experience, that being in touch with all the changes in kernel is hard.
1175507970 M * matti Pazzo: And there's not documentation for most cases :)
1175508003 M * Pazzo you're sooooooooo right :)
1175508025 M * matti Pazzo: You probably do not need some parts of netfilter as well.
1175508044 M * Pazzo I really like playing around with netfilter *gg*
1175508060 M * matti Pazzo: When Netfilter guys introduced netlink socket for netfilter, some code was marked obsolete.
1175508062 M * Pazzo but most of the stuff should be compiled as a module
1175508067 M * matti Pazzo: This iis not a rocket science :)
1175508069 M * Pazzo aaaah, ok
1175508115 M * matti Also.
1175508139 M * matti You do not really want legacy and obsolete code for your IDE thingy.
1175508144 M * Pazzo (-> the introduction of the netlink socket has been a really good step in the right direction :)
1175508155 M * matti It makes kernel boot more slowly, and it is very old piece of code, very crappy ;]
1175508166 M * matti If you machine is using SATA only.
1175508176 M * matti Get rid of all unnecessary IDE drivers.
1175508183 M * matti Put all handy in modules.
1175508196 M * matti And stick with SATA/SCSI only.
1175508216 M * matti Pazzo: Yes, Netfilter is a very good project tho, very mature.
1175508218 M * Pazzo That's also a wise suggestion ;-)
1175508251 M * matti Pazzo: Yes, and by using native drivers instead of "all purpose" one, you make thing working better.
1175508272 M * matti Pazzo: By avoiding things like "I don't not the IRQ, I will probe it later".
1175508273 M * Pazzo Have to leave for a moment, I'm back in 5 minutes...
1175508288 M * Pazzo In the meantime: A BIG HUG!! And many thanks :)
1175508289 M * matti Those are not native drivers, and in most cases crappy :)
1175508297 N * Pazzo PazZzzooo
1175508299 M * matti A hug?
1175508301 M * matti Oh dear.
1175508302 M * matti :)
1175508321 M * matti Hm.
1175508327 M * matti I hope I am a good replacement for Bertl.
1175508344 M * matti :)
1175508554 Q * shedi Quit: Leaving
1175508962 N * PazZzzooo Pazzo
1175508962 M * Pazzo re
1175508970 M * matti Welcome back Pazzo :)
1175508983 M * Pazzo matti: you are a really good replacement!
1175508989 M * Pazzo no hug? even better :o)
1175509002 M * matti Pazzo: This config is indeed strange, lot of stuff there ;]
1175509025 M * matti Pazzo: I'm affraid I am not as that good - Bertl have a hell of knowledge and experience.
1175509029 M * matti Pazzo: I don't :)
1175509036 M * matti Pazzo: I am just a tiny little geek ;p
1175509103 M * Pazzo don't be self-effacint!
1175509125 M * matti ;-p
1175509134 M * matti Pazzo: Is this a production machine?
1175509135 M * Pazzo btw: how can I find out wich process / thread is running on which cpu?
1175509218 M * Pazzo matti: the X2 -> yes, but not by me ;-) In my company we are running mostly xeon / scsi hosts
1175509228 M * Pazzo (I would prefer opterons :)
1175509266 M * harry 2.2.0 vserver + grsec running in production here :)
1175509272 M * Pazzo But our latest XEONs (http://pastebin.ca/420631) are not that bad :o)
1175509307 M * matti Hi harry :)
1175509311 M * matti harry: How are you?
1175509341 M * matti Pazzo: Actually Opterons are better - Intel and PAE can be tricky.
1175509345 M * harry bad
1175509346 M * harry very bad
1175509354 M * matti harry: Why?
1175509358 M * harry i'
1175509364 M * harry i've got a fulltime job
1175509369 M * harry a collegue is overworked
1175509372 M * harry so he got help
1175509377 M * harry he was supposed to start today
1175509380 M * matti That suppost to be a good news?
1175509384 M * matti :)
1175509400 M * matti You don't like to work for full time?
1175509483 M * matti Pazzo: top patched for SMP should help you :)
1175509487 M * harry so that he could ge worked in
1175509489 M * matti Pazzo: top -C or -Cb
1175509494 M * matti Pazzo: Also htop i SMP aware.
1175509499 M * harry because our only blackboard administrator is getting married
1175509506 M * matti Pazzo: But both of them are hard to read to be honest.
1175509512 M * harry (the previous admin stopped because it was "unworkable with only 2)
1175509516 M * harry now he's doing it alone
1175509520 M * matti :(
1175509525 M * harry but getting married, today, his collegue would get started
1175509533 M * harry he just called: i've signed in another company
1175509538 M * harry i'm not comming
1175509542 M * harry so now, i have my job
1175509546 M * matti Lot things happend lately.
1175509548 M * harry and the other more than fulltime job
1175509564 M * harry so now i'm sitting here with 2 overloaded fulltime jobs
1175509570 M * matti :<
1175509579 M * matti I understand your frustration.
1175509582 M * harry and in 6 weeks i'll have to do the "new" one on my own
1175509603 M * matti harry: There's not way for your employer to hire more people?
1175509605 M * harry as i said: that job is too much to do with 2 people
1175509609 M * harry yes
1175509613 M * matti Why?
1175509620 M * harry its just too much work
1175509636 M * matti This is the University work or some private company?
1175509636 M * harry the other one that should have started today doesn't want to start ==> no new one
1175509644 M * harry university
1175509660 M * harry new job announcement will be made
1175509665 M * harry but that takes a few months
1175509667 M * matti What is your field of work?
1175509669 M * matti Servers only?
1175509673 M * matti Or whole network?
1175509675 M * harry and collegue gets married in 6 weeks
1175509683 M * harry sysadmin
1175509694 M * harry but with seriously advanced network setups too
1175509694 M * matti And nobody wants to work for your Uni?
1175509697 M * harry SAN connections
1175509700 M * harry NAS-boxes
1175509707 M * matti harry: That is not a rocket science.
1175509708 M * harry seems so ;)
1175509714 M * matti harry: I work with hardware like that.
1175509716 M * harry matti: then get your ass over here
1175509733 M * matti harry: I am thinking about this right now :)
1175509741 M * harry but do know... we've got 30.000 students @ kuleuven
1175509744 M * Pazzo matti: top, f, j -> does the job too :)
1175509744 M * harry 11k personel
1175509747 M * Pazzo matti: top, f, j -> does the job too :)
1175509763 M * harry 12 other university's and other schools
1175509772 M * harry so totally a setup of approx 150k users
1175509775 M * matti And only two people?
1175509780 M * harry yup
1175509785 M * matti That is a major OVERKILL for two people.
1175509786 M * harry 2 sysadmin
1175509792 M * matti I cannot believe that :)
1175509795 M * harry some developers
1175509818 M * harry they are just students... using that stuff
1175509824 M * harry we don't do development
1175509829 M * matti Hm...
1175509830 M * harry just system administration
1175509833 M * matti It is Belgium?
1175509846 M * harry ESS disk system on san
1175509849 M * matti Damn, I've just started a job in Cambridge ;p
1175509851 M * harry DS4300 disks
1175509860 M * matti Bad timing.
1175509864 M * matti Really bad timing :/
1175509867 M * harry netapp 3050's which we overload
1175509897 M * harry we have Gbit connections
1175509898 M * harry on all
1175509902 M * harry but... they are overloaded
1175509906 M * matti harry: I will spread the news about vacant amoung my colleagues.
1175509912 M * harry so we need to split interswitch trunks etc...
1175509923 M * harry hehe
1175509928 M * matti There's a lot of work there.
1175509930 M * matti I can imagine.
1175509931 M * harry do that :)
1175509938 M * matti harry: Will do.
1175509939 M * matti ;]
1175509943 M * Pazzo harry: sound's like real fun ;]
1175509953 M * harry Pazzo: it's a challenge
1175509961 M * harry but i've got a DR plan that i have to finish
1175509967 M * harry and ESX integration in our serverpark
1175509969 M * matti Pazzo: It is more than a challange rather a work ;]
1175509979 M * harry vserver work, firewalling, security
1175509985 M * harry upgrading/implementing new servers
1175509986 M * matti Pazzo: Everybody expects a miracles from you on every-day basis ;)
1175509997 M * matti Pazzo: And this is very stressful and frustrating ;]
1175509999 M * harry matti: uhu
1175510016 M * matti harry: I was working as sys-admin at my uni in Krakow.
1175510029 M * matti harry: I know the feeling then.
1175510050 M * matti From some point of view this is good job - nice hardware and lot to learn.
1175510070 M * matti But on the other hand it is just a royal pain in the backsit :)
1175510126 M * matti harry: Go and your directors (whatever they are) and ask for more people.
1175510129 J * shedi ~siggi@ftth-237-144.hive.is
1175510130 M * harry hehe
1175510136 M * harry matti: there is money for more people
1175510142 M * matti Damn.
1175510145 M * matti Always about money.
1175510146 M * harry as i said... a new one was supposed to start today
1175510150 M * matti I hate money :<
1175510153 M * harry but he decided he didn't want to come
1175510159 M * matti Bastard.
1175510160 M * harry so now we're back to square 1...
1175510168 M * Pazzo harry: instead of finishing a DR plan you could also try to cause a real DR situation - just let things happen and try to document everything that goes wrong, then you have your DR plan *gg*
1175510187 M * harry and the sysadmin that was waiting for hte new one is getting married... so you can't postpone that untill there is a NEW new one
1175510203 M * harry Pazzo: i've got my DR hardware :)
1175510212 M * harry i think i'll just see what i'll do
1175510299 M * Pazzo harry: that's great :)  -> Hey, the sales people said that their product does DR and Security and everything we need. Just let's buy it, and everything is fine ;-)
1175510311 N * Pazzo PazZzzoooo
1175510313 M * PazZzzoooo back soon
1175510318 M * harry wish it were that simple
1175510324 M * harry i've set up a good system
1175510329 M * harry just need to .... do it all :)
1175510332 M * harry ==> time!!
1175510736 Q * phreak`` Remote host closed the connection
1175510939 Q * mattzerah Remote host closed the connection
1175510941 J * mattzerah ~matt@121.50.222.55
1175511239 J * Hollow ~hollow@styx.xnull.de
1175511477 Q * Aiken Quit: Leaving
1175513131 Q * ema Quit: leaving
1175513451 Q * yarihm Quit: Leaving
1175513732 J * LiNuX ~Trwork@85.104.83.124
1175514357 Q * LiNuX Quit: < Klavye [ 5.FinaL ] > [ http://www.klavye.web.tr ] - irc.klavyescript.org - Lee
1175515615 N * PazZzzoooo Pazzo
1175516095 M * Pazzo re
1175516112 M * Pazzo any idea why there is no CONFIG_IRQBALANCE in my 64bit kernels?
1175517066 J * wimalopaan ~KVIrc@p54A5AF25.dip0.t-ipconnect.de
1175517433 J * Tor ~Whoppix27@83-103-90-57.ip.fastwebnet.it
1175517446 M * Tor sera
1175517452 M * Tor nn c-[ nessuno
1175518396 M * Pazzo ciao
1175518479 Q * Tor Quit: Leaving
1175521959 Q * Val Quit: BitchX: for distribution only with a new PC
1175522008 N * Bertl_zZ Bertl
1175522014 M * Bertl morning folks!
1175522062 M * harry heya Bertl 
1175522065 M * harry congrats on release!
1175522118 M * daniel_hozac morning Bertl!
1175522140 M * Bertl harry: tx!
1175522165 A * harry running the vs2.2.0-grsec kernel for a few hours now :)
1175522170 M * harry working like a charm atm :)
1175522311 M * Bertl great!
1175522323 M * harry yeah, i know how much you dislike grsec :p
1175522353 M * Borg- any reasons of that dislike?
1175522383 M * Bertl no, folks constantly get me wrong on that ...
1175522395 M * harry don't know really... i like the pax part, mprotect, segmexec, some "hardening" features of grsec (spender's part)
1175522398 M * Bertl my opinion on grsec is the following:
1175522432 M * Bertl - most folks apply/use it without configuring it, which doesn't really add anything except for the basic protection part
1175522463 M * Bertl - combined patches of two security systems tend to step on their toes if you aren't _very_ careful
1175522473 M * Bertl   (and Linux-VServer is a security system)
1175522485 M * Bertl - most parts of grsec are not really context aware
1175522510 M * Bertl - most folks do not know why they want to add grsec ...
1175522519 M * harry fun part of the combination of grsec and vserver: they work at a different level :)
1175522541 M * Bertl I ask everybody who uses grsec with Linux-VServer what features he uses/appreciates (from grsec)
1175522578 M * Bertl and the answer I constantly keep getting is: I apply it because of the increased security .. no I don't use any policy or features except for those that come out of the box
1175522663 M * wimalopaan Hi Bertl, would like to step into the cifs-inside-guest issue again ...
1175522675 M * Bertl make that :)
1175522694 M * harry Bertl: you're right... but i don;t use the rbac system either
1175522704 M * harry just aslr and other "basic" protection stuff
1175522720 M * harry it does have usefull stuff in it, but you have to know what to enable, and what not
1175522732 M * harry that's why i have the readme and some example configs :)
1175522734 M * wimalopaan I got a patch working to eliminate the remaining kernel_thread call, no all uses kthread_run, but the problem remains
1175522741 M * harry aslr is a big advantage tough
1175522758 M * harry segmexec and/or pageexec too, userland deref etc... too
1175522762 M * Bertl harry: so what I would fine a 100 times more useful, is to work with michal` in getting stuff like pax integrated with Linux-VServer 
1175522801 M * Bertl and to extract really usefull stuff from grsec and put it into Linux-VServer-Hardened :)
1175522836 M * harry problem is that pipacs and spender don't have the time to keep developing both :)
1175522862 M * harry hell, they can't keep the patches somewhat up to date
1175522877 M * Bertl harry: that would be your job then (breaking out relevant parts and updating them)
1175522894 M * harry and afaik, there aren't any (serious) collisions in pax and vserver
1175522906 M * Bertl even better, no?
1175522915 M * harry Bertl: would be possible, IF they would make a split up patch for every release
1175522926 M * harry but as it is now, i have to do it all myself
1175522952 M * harry and splitting up all the pax features is a real bitch (same goes for grsec part... but a tiny bit simpler since it's not that "advanced"
1175523005 M * Bertl well, michal` already agreed to work on something like that (at some point)
1175523020 M * harry nice
1175523040 M * harry i'm interested to help , off course... but as i said earlier... i just got "promoted" to a second fulltime job
1175523043 M * harry (same paycheck)
1175523078 M * daniel_hozac wimalopaan: are you running the new kernel?
1175523128 M * wimalopaan yes:
1175523128 M * wimalopaan  
1175523128 M * wimalopaan vxW: xid=115 tried to spawn a kernel thread.
1175523128 M * wimalopaan  CIFS VFS: cifs_mount failed w/return code = -12
1175523128 M * wimalopaan vxW: xid=115 tried to spawn a kernel thread.
1175523128 M * wimalopaan  CIFS VFS: cifs_mount failed w/return code = -12
1175523130 M * wimalopaan gs ~ # uname -a
1175523130 M * wimalopaan Linux gs 2.6.20-vs2.3.0.11-gentookthread_cifs #6 SMP Mon Apr 2 09:04:24 CEST 2007 i686 Intel(R) Pentium(R) M processor 1200MHz GenuineIntel GNU/Linux
1175523132 M * wimalopaan gs ~ #                    
1175523182 M * wimalopaan If I first mount from the host and afterwards from the guest it works (that is, the cifs-thread has been started from the host)
1175523292 M * wimalopaan if i understand correctly, kthread_create places the new thread on the helper_wq, which is done by kthread, yes?
1175523357 M * wimalopaan i posted the patch on the ml
1175523408 M * daniel_hozac lkml?
1175523416 M * wimalopaan no vserver
1175525183 Q * Piet Ping timeout: 480 seconds
1175525477 J * Piet hiddenserv@tor.noreply.org
1175525631 J * chand ~chand@212.99.51.254
1175525631 M * chand yop
1175525637 M * daniel_hozac hello
1175526778 M * wimalopaan think I found the problem ;-)
1175526804 M * wimalopaan used the wrong cifs-module ... sorry for the noise
1175526818 M * wimalopaan I'll be back with serious results
1175526879 M * Bertl np
1175526887 M * wimalopaan first, it looks as if the cifs-demux-thread ist started 
1175526905 M * wimalopaan now I can mount from inside the guest
1175527245 J * |wimalopaan| ~KVIrc@p54A593FC.dip0.t-ipconnect.de
1175527285 J * b0c1 ~boci@pool-2860.adsl.interware.hu
1175527317 Q * FireEgl Quit: ...
1175527465 Q * wimalopaan Ping timeout: 480 seconds
1175527735 J * stefani ~stefani@tsipoor.banerian.org
1175528234 P * click [IRSSI]
1175528349 J * dna_ ~naucki@189-245-dsl.kielnet.net
1175528605 Q * dna Ping timeout: 480 seconds
1175528944 Q * Pazzo Quit: Verlassend
1175529030 J * EvilDin ~Snake@BSN-77-83-28.dsl.siol.net
1175529032 M * EvilDin hi
1175529035 M * EvilDin do i need Automatically Assign Loopback IP (VSERVER_AUTO_LBACK) [Y/n/?]
1175529045 M * EvilDin in what case should i need this
1175529204 M * Bertl did you read the help?
1175529350 M * yang Hello EvilDin Bertl
1175529361 M * EvilDin hi
1175529370 M * EvilDin i read, and i don't think that need this
1175529379 M * EvilDin i don't even get what does it mean
1175529379 M * EvilDin D:
1175529395 M * Bertl so then don't select it :)
1175529405 M * EvilDin i did set N :D
1175529432 M * Bertl hey yang!
1175529625 M * yang Bertl: We could proceed with mips, if you managed to tune the kernel ?
1175529703 M * Bertl no, I have no idea left, the debian config you gave me obviously doesn't allow 2.6.19 kernels (vanilla) to boot either
1175529723 M * Bertl I guess we have to wait for a mainline release which boots on mips
1175529735 M * Bertl (on your mips that is)
1175529756 M * Bertl according to the maintainer, there is no problem with those kernels :/
1175529777 M * yang Bertl: as Ralf said, these indigo 2 machines might have some problems
1175529807 M * Bertl yes, you might want to give a 2.6.19/2.6.20 debian kernel a try, but I doubt that will work either
1175529834 M * Bertl if it works, then the debian distro has some incompatibilities from the bootloader or so ...
1175529844 M * Bertl (or they add mips specific patches)
1175529965 M * FaUl Bertl: apropos mips - i have still that dual-ultrasparc and mips-maschine here that i want to contribute to the vserver-developement ;-)
1175529988 M * Bertl sounds good, how can we use them?
1175529988 M * FaUl argh, have to leave now, sorry
1175530002 M * Bertl np, cya
1175530004 N * DoberMann_ DoberMann[PullA]
1175530318 M * yang Bertl: you have a parisc machine for testing?
1175530936 Q * harry Ping timeout: 480 seconds
1175531240 M * matti Bertl: :))))))))
1175531283 M * matti Damn, I get distracted in work and I cannot look on the channel.
1175531289 M * Bertl yang: yes, I have one in my basement
1175531437 M * daniel_hozac Bertl: on the feature matrix, what is "legacy proc filesystem"? s_context in /proc/self/status?
1175531454 M * Bertl I guess
1175531470 M * daniel_hozac hehe, okay.
1175531558 M * yang Bertl: nice...I thought if you needed one I could give it to you
1175531588 J * harry ~harry@d54C2508C.access.telenet.be
1175531617 M * Bertl yang: I'm pretty sure there are a lot developers who would like to use/have one
1175531630 J * bonbons ~bonbons@83.222.39.201
1175531637 M * Bertl yang: IIRC, debian dropped support because of missing hardware or so?
1175531638 M * yang Bertl: vserver developers?
1175531651 M * Bertl probably vserver developers too
1175531699 M * yang Bertl: well, its always possible to get it for nearly no money from EBAY if someone has a wish, I wanted to give it to you freely.
1175531716 M * Bertl what machine is it?
1175531723 M * yang its apollo 712
1175531734 M * yang 32bit only
1175531800 M * Bertl hmm, isn't that a 9000 machine?
1175531803 M * yang yes
1175531824 M * Bertl that should be 64bit, IIRC, just userspace is always 32bit on linux
1175531836 M * yang well, linux runs in 32bit only
1175531847 M * yang there were some 64bit versions for other parisces
1175531876 M * yang according to their comparison table chart
1175531895 M * Bertl do you have a /proc/cpuinfo for that?
1175531908 N * DoberMann[PullA] DoberMann
1175531958 M * daniel_hozac Bertl: http://linux-vserver.org/Feature_Matrix
1175531963 M * daniel_hozac please correct me where i'm wrong :)
1175532856 J * Piet_ hiddenserv@tor.noreply.org
1175532971 M * Bertl daniel_hozac: what do I know ... I'm on vacation (30%) :)
1175532984 M * Bertl daniel_hozac: looks good at the first glance ...
1175533268 Q * Piet Ping timeout: 480 seconds
1175533846 Q * arachnist Quit: bbl
1175536689 J * arachnist arachnist@088156185052.who.vectranet.pl
1175537287 M * matti Uf.
1175537304 M * matti Damn.
1175537306 M * matti I missed Pazzo.
1175537308 M * matti :<
1175537414 M * daniel_hozac Bertl: hehe, when are you leaving tomorrow?
1175537501 J * Aiken ~james@ppp250-73.lns2.bne4.internode.on.net
1175537512 M * matti Bertl: How are you?
1175537525 M * matti daniel_hozac: He is uploading hi tropical island probaby ;p
1175537531 M * matti daniel_hozac: 60% left ;p
1175537545 Q * arachnist Quit: bbl
1175537644 M * Bertl matti: busy downloading tropical island ... :)
1175537656 M * matti :)
1175537675 M * matti Bertl: Don't forget apply 1.01 patch.
1175537699 M * matti Bertl: If you don't then you'll miss local karaoke competition ;p
1175537701 M * matti ;D
1175537798 M * matti daniel_hozac: So it seems, that most feature-rich is 2.1?
1175537836 M * daniel_hozac well, in a way. 2.3 will catch up once i add the new features.
1175537948 M * matti :)
1175537961 Q * chand Quit: chand
1175537991 Q * Aiken Quit: Leaving
1175538021 J * Aiken ~james@ppp250-73.lns2.bne4.internode.on.net
1175538320 J * arachnist arachnist@088156185052.who.vectranet.pl
1175538375 Q * Aiken Quit: Leaving
1175538390 J * Aiken ~james@ppp250-73.lns2.bne4.internode.on.net
1175538483 Q * Aiken 
1175538593 J * Aiken ~james@ppp250-73.lns2.bne4.internode.on.net
1175538668 P * |wimalopaan| Time makes no sense
1175538725 Q * Aiken 
1175539087 M * matti How can I change PayPal language to English? :)
1175539145 M * Bertl hum, from what?
1175539145 J * Aiken ~james@ppp250-73.lns2.bne4.internode.on.net
1175539261 M * matti Geben Sie Ihre Kreditkartendaten ein, oder loggen Sie sich ein und bezahlen schnell und sicher mit PayPal.
1175539264 M * matti :>
1175539288 M * matti How is United Kingdom in German?
1175539305 M * matti Britische ... I pressume.
1175539339 M * Bertl paypal should have a language you can select
1175539366 M * matti Besides "Land" I don't see any.
1175539395 M * matti Well, not important, heh.
1175539431 M * matti When I select Britische ... I get an error: "Geben Sie einen Betrag größer als Null ein." :)
1175539437 M * matti Interesting.
1175539452 M * matti Bertl: No worries, don't bother about that.
1175539478 M * matti Bertl: It is probably mu fault.
1175539649 M * Wonka "United Kingdom" is "Vereinigtes Königreich"
1175539667 M * Wonka maybe simplay "Großbritannien"
1175539696 J * DavidS ~david@217.19.46.18
1175539716 M * matti Wonka: Oh.
1175539729 M * matti Wonka: Thanks, and what this error means?
1175539741 M * Wonka "Enter a value greater zero"
1175539762 M * Wonka sounds somewhat... confused :)
1175539767 M * matti Wonka: Thanks and sorry for troubles.
1175539770 M * Wonka np
1175539823 M * matti OK, I gave up.
1175539853 M * matti How can I make a donation by using my own PP account? Bertl's e-mail is enough?
1175539881 M * Wonka <- doesn't use paypal
1175539923 M * matti weasel: It is handy sometimes.
1175539988 M * weasel ?
1175539997 M * matti weasel: Whops, sorry.
1175540005 A * weasel hits matti for being as lazy as he is
1175540020 M * matti weasel: I am writing using one hand right now ;)
1175540035 M * matti weasel: I carry my notebook in second.
1175540041 M * weasel hah
1175540065 A * matti goes for a walk, because there's so lovelly day.
1175540071 M * Wonka they all say that...
1175540075 Q * arachnist Quit: leaving
1175540279 M * matti OK.
1175540389 Q * xp_prg Remote host closed the connection
1175540968 J * arachnist arachnist@088156185052.who.vectranet.pl
1175541620 Q * mnemoc Remote host closed the connection
1175541720 J * FireEgl Proteus@adsl-61-136-122.bhm.bellsouth.net
1175541810 J * infowolfe ~infowolfe@c-67-164-195-129.hsd1.ut.comcast.net
1175542263 Q * Piet_ Ping timeout: 480 seconds
1175542324 J * Piet_ hiddenserv@tor.noreply.org
1175542543 J * mnemoc ~amery@kilo105.server4you.de
1175543744 J * ema ~ema@rtfm.galliera.it
1175545958 M * Bertl night folks! ...
1175545960 N * Bertl Bertl_zZ
1175545972 J * yarihm ~yarihm@84-75-97-207.dclient.hispeed.ch
1175546535 Q * bonbons Quit: Leaving
1175546649 M * matti Good night Bertl.
1175546882 Q * FireEgl Quit: ...
1175548304 Q * DavidS Quit: Leaving.
1175549664 N * DoberMann DoberMann[ZZZzzz]
1175549763 M * brcc_ Is it possible to have a parallel console ? Two linux servers plugged using a parallel cable
1175549774 M * brcc_ Off-topic :)
1175549840 Q * b0c1 Quit: Távozom
1175550793 Q * ema Quit: leaving
1175551111 Q * meandtheshell Quit: Leaving.
1175551575 Q * dna_ Quit: Verlassend
1175552125 Q * yarihm Quit: Leaving
1175552632 J * fem ~chatzilla@82-40-218-233.cable.ubr01.dunb.blueyonder.co.uk
1175552638 N * fem marl
1175552659 M * marl hi there
1175552778 M * marl can anyone point me in the rite direction to solve the folloowing problem? when trying to build a vserver gurst, i get 'W: http://archive.ubuntu.com/ubuntu/dists/dapper/main/binary-i386/Packages.gz was corrupt' and if i try to manually downlaod the file and run 'gunzip Packages.gz' i get 'gunzip: Packages.gz: not in gzip format'
1175552785 M * marl anyone any idea wats going wrong?
1175552917 M * matti marl: It is working in my case.
1175552942 M * marl matti, any chance u could give me an md5sum on the packages.gz file?
1175552969 M * matti Yes.
1175552981 M * matti b9c2c520b64286ace887eb5f8c0f53b3  Packages.gz
1175552993 M * matti matti@acrux ~ $ file Packages.gz
1175552993 M * matti Packages.gz: gzip compressed data, from Unix, max compression
1175552998 M * marl totally differant from mine :(
1175553010 M * matti Wait.
1175553020 M * marl i'll try a differant route to the internet
1175553032 M * matti http://deadbeef.info/tmp/Packages.gz
1175553077 M * Aiken marl to add insult to injury I grapped that .gz and can gunzip it
1175553108 M * Aiken b9c2c520b64286ace887eb5f8c0f53b3  Packages.gz
1175553119 M * Aiken corrupt download?
1175553126 M * matti Seems so.
1175553132 M * Aiken 821373 bytes
1175553136 M * matti Or HDD/filesystem problem.
1175553142 M * matti Or... memory ;D
1175553171 M * matti But, I don't know. I am just a little user.
1175553174 M * matti :)
1175553369 M * marl hope its not harddrive of memory, brand new machine :(
1175553392 M * marl am rebooting it jhust now after setting it to use another broadband connection, will see if htat works :(
1175553400 M * matti marl: Well, even brand new machines have issues.
1175553415 M * marl true
1175553430 M * marl but dont appear to have had any otherproblems with this machine inthe install or anythig like that
1175553501 M * matti Fair enough.
1175553508 M * marl :) differant broadband connection worked!!!!!
1175553512 M * marl thanks guys
1175553518 M * matti No problem.
1175553522 M * matti I didn't helped at all.
1175553531 M * matti But you're always welcome.
1175553532 M * matti :)
1175553543 Q * mattzerah Remote host closed the connection
1175553555 J * mattzerah ~matt@121.50.222.55
1175553581 M * marl you confirmed the md5 was wrong and that ment i could miss out a ton of other checks that would have taken me all night!
1175553605 M * marl would never have considered the broadband was giving me a c
1175553616 M * marl curupted file
1175553628 M * matti Who know.
1175553634 M * matti :)
1175553646 M * matti I am glad, that you manage to solve the problem.
1175553684 P * stefani I'm Parting (the water)
1175553716 M * marl think i just discovered that it may have been the content filter kicking in on the broadband connection that blocked the file, but dansguardian wasnt showing anything in the logs :(
1175553784 M * marl anyone know of a vs pre configured with ldap for samba?
1175554509 Q * EvilDin Quit: AnacønÐa · "In order to get a loan you must first prove you don't need it"
1175555437 M * mnemoc hi, what's the "term" used to describe the kind of virtualization vserver does?
1175555487 M * mnemoc i saw a paper about paravirtualization vs. ??? oncw
1175557807 J * FireEgl Atl-NA@adsl-61-136-122.bhm.bellsouth.net