1183766433 J * onion_ onion@virasto.com 1183766450 M * onion_ hi, is http://vserver.13thfloor.at/Experimental/patch-2.6.21.5-vs2.2.0.diff safe to test? 1183766494 M * mjt things are always safe to test (unless it can kill your cat or whatnot) 1183766513 M * onion_ i've got 4 cats, so i think so? 1183766532 M * mjt i doubt this particular patch will kill either of them 1183766533 M * Bertl it is considered a release, so it should be safe :) 1183766560 M * mjt all cat-killing bugs seems to be fixed. 1183766561 M * Bertl nevertheless, I cannot guarantee anything (i.e. #include std.disclaimer :) 1183766565 M * Supaplex my /bin/cat died! oh no! 1183766579 M * mjt by the way 1183766608 M * mjt i've got a new motherboard for my home PC ( VIA C7-based). And it had an.. interesting issue. 1183766627 M * mjt some progs, /bin/cat is one of them, crashed with almost 100% probability 1183766642 M * Bertl precompiled for i686? 1183766644 M * Supaplex ouuu an epidemic 1183766657 M * mjt C7 *is* i686 1183766674 M * Bertl almost :) 1183766681 M * mjt the mobo was defective - i replaced it with another and now it's rock-solid 1183766736 M * onion_ does c7 have aes encryption engine? 1183766804 M * mjt yes 1183766818 M * Bertl via padlock 1183766835 M * mjt padlock: Using VIA PadLock ACE for AES algorithm. 1183766835 M * mjt padlock: Using VIA PadLock ACE for SHA1/SHA256 algorithms. 1183766858 M * slack101 man this OpenVCP really just wont work 1183766861 M * onox what are all those cryptography options in kernel config all about? 1183766871 M * mjt lol 1183766881 M * mjt about cryprography maybe? 1183766885 M * onox no 1183766893 M * onox what are they used for? 1183766894 M * onion_ nice, supposedly it's fast in cpu 1183766907 M * onox i mean: there is already a md5sum/sha1sum program 1183766921 M * mjt i haven't tried hw crypto yet 1183766925 M * Bertl onox: for kernel side encryption/hashing/digest 1183766927 M * onox why would I need to enable some md5, in my kernel? 1183766940 M * mjt onox: think ipsec for example 1183766944 M * onox Bertl: user programs need to support it right? 1183766948 M * mjt or encrypted filesystem 1183766952 M * onion_ for hiding your secret videos 1183766983 M * mjt via padlock is supported by openssl for example 1183767010 M * mjt and can be used by kernel for stuff like ipsec and cryptoloop 1183767029 M * Supaplex slack101: hint, add debugging information at suspect points. 1183767032 M * mjt (i don't remember if the kernel uses crypto stuff in other areas) 1183767040 M * slack101 Supaplex, i am 1183767072 M * slack101 still not working 1183767408 A * Supaplex kicks vmware into shape 1183767418 M * Supaplex my bad. I rsync --exclude=/var not /dev :P 1183767449 M * slack101 doesnt help i dont have linux installed right now either 1183767449 M * Supaplex no worries. it landed in a staging area, in preperation to be chopped up into more isolated guests. 1183767463 M * slack101 my nix partition its pool of errors and i dont know why 1183767515 M * Supaplex poor poor boy. 1183767585 M * slack101 so re installing linux i have ot do also 1183767598 M * slack101 not using gentoo this time 1183767685 M * slack101 Supaplex, imma try thier openvcp gui the actual C app see if its the php scirpt or if its the daemon giving problems 1183767702 M * Supaplex again? 1183767715 M * slack101 if this works, and i fix it its a very good coded app, and they used the C for the daemon which was smart 1183767759 M * mjt openvcp uses util-vserver, right? 1183767779 M * slack101 maybe 1183767791 M * slack101 well it does use parts of it 1183767807 M * slack101 axtually 1183767809 M * slack101 i dont thin kso 1183767847 A * Supaplex abuses rsync to his advantage 1183768416 Q * meandtheshell Quit: Leaving. 1183768466 M * slack101 write my own script orrr keep trying to get openvcp to work hmmmmm 1183768533 M * onion_ aah, kernel config fsck up with make oldconfig from 20 -> 21. Missing serial driver now :/ 1183768742 M * onion_ aah, not missing but serial ports are now swapped ? why?!?! 1183768840 M * Supaplex blame udev! 1183768845 M * Supaplex or congress 1183768854 M * Supaplex anything in the changelog? 1183769005 N * onox onox`zZzZ 1183769035 M * onion_ "Can't connect to UPS [apc] (apcsmart-ttyS1)" nor ttyS0... damn 1183769048 Q * bzed Quit: Leaving 1183769100 M * onion_ well vserver started fine! 1183769194 J * DoberMann_ ~james@AToulouse-156-1-97-248.w90-30.abo.wanadoo.fr 1183769301 Q * DoberMann[ZZZzzz] Ping timeout: 480 seconds 1183769459 M * Supaplex kewl 1183769612 M * Supaplex sigggghhhargh 1183769738 J * coderanger ~coderange@c-65-96-210-168.hsd1.ma.comcast.net 1183769961 M * Bertl wb coderanger! 1183770049 M * slack101 wb coderanger 1183770050 M * slack101 ! 1183770062 M * slack101 Bertl, am i allowed to do that too ? 1183770093 M * Bertl as long as you are not over your lines-per-day limit, yes :) 1183770638 A * Supaplex chases down guest, postgres 8.1 issues 1183770714 M * coderanger Bertl, slack101: Thanky 1183770758 M * Supaplex chaching. 1183770942 M * Supaplex schweetnezz 1183771379 M * slack101 im about to give up on OpenVCP =( 1183771693 M * Supaplex you poor thing 1183771711 M * Supaplex maybe next week... 1183772757 M * onion_ http://bugzilla.kernel.org/show_bug.cgi?id=8562 - nice 1183773317 M * onion_ ups.status: OL ... -> bed, good night! 1183773368 Q * onion_ Quit: leaving 1183773481 M * coderanger Bertl: Do you know how chroots interact with abstract unix sockets? 1183773511 M * Bertl hmm, I would assume: not at all 1183773591 M * coderanger Hrmm, /me knows almost nothing about them other than that dbus uses them by default 1183773620 M * Bertl well, shouldn't be hard to adapt my code to test them 1183773713 M * coderanger We want to be able to control which containers can connect to the session bus (which is over an abstract socket right now), but its not clear to me how to do that 1183773740 M * coderanger With a normal socket its easy to just link or not link the file into the new container 1183773752 M * Bertl well, you have the PEERTAG (besides the existing PEERCRED) to do that 1183773777 M * Bertl IIRC, dbus has some kind of checks for this stuff (the uid/gid), you just have to extend that to the xid 1183773788 M * Bertl (in this case called tag) 1183773807 M * coderanger Thats at the dbus level, not at the socket-access level though 1183773842 M * Bertl ah, so you want to block access? 1183773855 M * coderanger I am already adding stuff to control it at the dbus level, it would just be nice to be able to have containers that have no possible way to get to dbus 1183773859 M * coderanger not that big a deal though 1183773877 M * coderanger (since our policy gets veto control in the bus process anyway) 1183773879 M * Bertl okay, how does dbus 'connect' work? 1183773899 M * Bertl is that normal socket connection dispatching? 1183773914 M * Bertl if so, you could drop the incoming connection right after a check 1183773936 M * Bertl if you look at my code, the conenction can be checked before being accepted IIRC 1183774061 M * coderanger Like I said, that would be intercepting it at the dbus level 1183774069 M * coderanger not blocking access to the socket itself 1183774132 M * coderanger With a normal file-based socket there is a very simple way to block access to the socket, don't link the file into the chroot 1183774150 M * Bertl correct 1183774156 M * coderanger I just can't tell if that is possible with abstract sockets, as they seem to sit in their own namespace 1183774261 M * Bertl well, they might be covered by the ipc namespace (not 100% sure though) 1183774279 M * Bertl as usual, the best way is to try that out 1183774291 M * coderanger I'm writing some stuff to do tests, but I think I'll stop for today and start again in the AM 1183774292 M * coderanger yeah 1183774297 M * coderanger thanky :) 1183774390 M * Bertl np 1183775549 M * slack101 yep im about done wioth openvcp 1183776925 M * Supaplex so you are nearly done fixing all the bugs? 1183777058 M * slack101 Supaplex, sitll cant get the major one 1183777071 J * Aiken ~james@ppp121-45-220-241.lns2.bne1.internode.on.net 1183777103 Q * Aiken 1183777133 A * Supaplex wonders where the %*@$( the fuseblock for the ups is hiding 1183777157 M * Supaplex on a brigher note, I got postgres migrated with success 1183777404 M * Bertl okay, off to bed now ... have a good one everyone! 1183777411 N * Bertl Bertl_zZ 1183777725 Q * onox`zZzZ Quit: blaat 1183779783 J * Johnnie ~jdlewis@c-67-163-246-136.hsd1.pa.comcast.net 1183780712 Q * Johnnie Ping timeout: 480 seconds 1183781003 Q * slack101 Ping timeout: 480 seconds 1183781554 J * Johnnie ~jdlewis@c-24-23-102-241.hsd1.pa.comcast.net 1183781761 Q * Hurga Remote host closed the connection 1183782874 Q * Johnnie Ping timeout: 480 seconds 1183784471 J * Daniel15 ~daniel@adsl.daniel15.com 1183784782 J * Johnnie ~jdlewis@c-67-163-246-136.hsd1.pa.comcast.net 1183786026 J * zLinux ~zLinux@88.213.31.27 1183786102 Q * zLinux Remote host closed the connection 1183786180 J * zLinux ~zLinux@88.213.31.27 1183786286 Q * zLinux Remote host closed the connection 1183786353 J * zLinux ~zLinux@88.213.31.27 1183787839 J * ch24 ~vh@201.141.118.158 1183788728 P * ch24 1183792553 J * Aiken ~james@ppp121-45-220-241.lns2.bne1.internode.on.net 1183793639 J * DavidS ~david@p57A487C8.dip0.t-ipconnect.de 1183797512 J * bonbons ~bonbons@2001:5c0:85e2:0:20b:5dff:fec7:6b33 1183800272 Q * Daniel15 Read error: Connection reset by peer 1183800764 J * meandtheshell ~markus@85.127.117.37 1183801062 J * Daniel15 ~daniel@adsl.daniel15.com 1183801338 Q * Daniel15 1183802528 Q * nou Ping timeout: 480 seconds 1183802678 J * nou Chaton@causse.larzac.fr.eu.org 1183803081 A * waldi waits for the xen patches in -mm to show up in mainline 1183804144 N * DoberMann_ DoberMann 1183805053 J * bzed ~bzed@dslb-084-059-117-215.pools.arcor-ip.net 1183806203 Q * Aiken Remote host closed the connection 1183808307 N * Bertl_zZ Bertl 1183808312 M * Bertl morning folks! 1183808438 M * waldi -rc5 builds at least ... 1183809428 M * Bertl good :) 1183810483 P * eSa| Leaving 1183810634 J * ema ~ema@rtfm.galliera.it 1183810777 M * meandtheshell Bertl: I got two questions regarding "ssh root@server_RZ "dump 0zf - / " | restore rf -" 1183810777 M * meandtheshell - what if I have XFS instead of ext3 1183810777 M * meandtheshell - the difference to rsync is that the upper works on block layer as opposed to rsync on the file system layer - yes? 1183810929 M * Bertl a) you are screwed :) b) somewhat (dump/restore is at lower level) 1183810953 M * Bertl dump/restore is ext2/3 only 1183810965 M * meandtheshell right - ext3 only 1183811004 M * meandtheshell so the lower level should equal less data to be transferred with dump/restore than with rsync 1183811026 M * Bertl rsync is quite smart nowadays (if configured properly) 1183811038 M * meandtheshell I rsync my workstation @home every day to a remote server which is about 1 GiB each day 1183811039 M * Bertl also you can do incremental stuff with rsync too 1183811056 J * esa ~esa@ip-87-238-2-45.adsl.cheapnet.it 1183811063 M * Bertl how do you manage to get 1GiB of changes? 1183811146 M * meandtheshell I sync everything from / down with this options --exclude vanilla/ --exclude media/ --exclude tmp/ --exclude dev/ --exclude proc/ --exclude sys/ 1183811150 M * meandtheshell ;-] 1183811160 M * meandtheshell plus I am on DebianGNU/Linux SID 1183811170 M * meandtheshell upgrade twice a day 1183811206 M * Bertl -azxHP ? 1183811227 A * meandtheshell checks what those options mean 1183811383 M * meandtheshell Bertl: ok, -P is probably something I could add 1183811438 M * meandtheshell something similar than dump/restore for XFS would be fine 1183811446 M * meandtheshell do you 1183811454 M * meandtheshell know anything? 1183811492 M * Bertl no, but maybe the XFS folks know something 1183811517 J * slack101 ~default@cpe-71-74-65-95.insight.res.rr.com 1183811528 M * Bertl good morning slack101! 1183811545 M * slack101 yes good morning :P 1183811563 M * slack101 got ot get up bright and ealy to get my vserver stuff done today 1183811622 M * slack101 early*\ 1183811639 M * slack101 i think all hope if gone with openVCP 1183811758 M * meandtheshell Bertl: ok. Is the dump/restore thing still your preferred way to handle a sync between machines (remote/local) or is there maybe something better you use now ... I am open minded to any input ... 1183811802 M * Bertl no, for sync-ing two machines dump/restore is not the best option 1183811813 M * meandtheshell but? 1183811837 M * Bertl here rsync is definitely the better one, but for doing a compressed backup of a guest, dump/restore is a good choice on ext2/3 1183811881 M * meandtheshell I see - well, then I would be better of with rsync no matter what file system anyways 1183811899 M * meandtheshell would you agree on that? 1183811938 M * Bertl yep, you might consider using the rsync daemon if the network can be trusted (or the data is non-sensitive) 1183811978 M * meandtheshell right, as a matter of fact I use the daemon with VPN - works fine 1183813744 Q * ema Quit: leaving 1183816567 Q * DavidS Quit: Leaving. 1183819165 Q * ntrs_ Read error: Connection reset by peer 1183820168 M * Supaplex morning 1183820184 M * Bertl good morning! 1183820214 M * Supaplex postgresql is so well behaved under vserver now. 1183820639 M * Bertl how so? 1183820654 M * Bertl did you limit it or what? 1183820934 M * Supaplex it ran ok before, but I'm pleased with vserver to 1183821001 M * Bertl ah, okay, tx for the feedback! 1183823567 M * Bertl okay, off for dinner .. back alter 1183823572 M * Bertl *later even 1183823577 N * Bertl Bertl_oO 1183824226 Q * ensc Ping timeout: 480 seconds 1183825614 J * ensc ~irc-ensc@p54B4F9E6.dip.t-dialin.net 1183826682 M * slack101 Supaplex, morning 1183826736 M * Supaplex ay' 1183826775 M * slack101 ]=[]]]\ 1183826849 M * Supaplex is that your frustrated look? 1183826872 N * Bertl_oO Bertl 1183826885 M * Bertl looks more like a viking with a long beard :) 1183826898 M * Supaplex wb Bertl 1183826904 M * slack101 was a typo actually 1183826904 M * Bertl or maybe a cow with a big chin? 1183826907 M * slack101 cleaning my keyboard 1183826922 M * slack101 but it turned out pretty good for an accident :P 1183826925 M * Bertl slack101: please clean your keyboard on a different channel :) 1183826936 M * slack101 i ddint mean to push enter :P 1183826947 M * Supaplex excuses 1183826969 M * slack101 i found out the error in the openvcp 1183826978 M * slack101 its in the daemon not the web gui :P 1183827048 M * Supaplex how difinitive 1183827165 M * slack101 yes 1183827179 M * slack101 now the daemon seems like it knows what its doing but hmmm 1183827369 M * Supaplex still having doubts huh? 1183827390 M * slack101 well im trying ot figure out why the daemon wont connect right 1183827414 M * slack101 its a small problem im sure 1183827428 M * Supaplex one line of source code... 1183827439 M * Supaplex does an older version work? 1183827462 M * slack101 one line of course code ? 1183827466 M * slack101 souce* 1183827471 M * slack101 yes the older 1 did wor k 1183827481 M * slack101 but this one has really nice badnwidth with iptables 1183827485 M * slack101 last version they used ipfm 1183827488 M * Supaplex you could do a binary search between versions 1183827567 M * slack101 i wonder how much of the daemon they changed 1183827569 M * slack101 hmmmm 1183827573 M * slack101 well the ip stuff 1183827596 M * slack101 Supaplex, did you make those directories ? 1183827623 M * Supaplex what directories? 1183827637 M * Supaplex I scraped openvcp anyway 1183827724 M * slack101 ah 1183827732 M * slack101 i think i found the problem 1183827739 M * slack101 stupid bug once again 1183827743 A * Supaplex has a brain, not a gui 1183827804 M * slack101 its not for me 1183827811 M * slack101 customers need it 1183827822 M * slack101 i got a guy that ask me once every 15 mins to restart his vserver 1183827844 M * Supaplex you should charge extra for that sort of nonsense 1183827852 M * slack101 it should be free 1183827860 M * slack101 with a panel they cna od it themselves 1183827864 M * Supaplex if that's what you want to work for 1183827881 M * Supaplex in the meantime you don't have that option 1183827883 M * slack101 what do you mean ? 1183827897 M * slack101 more like once every 2-3 hours 1183827948 M * Supaplex I know I'd end up paying $5 for each reboot request I go over my quota 1183827970 M * slack101 you would have no customers 1183827974 M * slack101 5.00 per reboot lol 1183828082 M * Supaplex it's called a quota for a reason 1183828104 M * Supaplex they get 5 free a month, if they need more than that, they're costing *me* money. 1183828126 M * Supaplex now, if I had a control panel available, and it worked, sure they can do that on their own. I'll still only affect their quota if they call me. 1183828180 M * Supaplex you're taxing yourself with "diminishing returns" everywhere. 1183828221 M * slack101 use a control panel 1183828230 M * slack101 no one would use you when they can get it for free 1183828256 M * Supaplex provided the control panel wasn't garbage 1183828265 M * Supaplex but you're all to aware of that issue, right? 1183828287 M * slack101 lol 1183828292 M * slack101 i dont think its garbage 1183828297 M * slack101 i think theres just a small bug 1183828315 M * Supaplex but it's not a small issue 1183828339 M * Supaplex a fuse is a small part, but w/o it, bigger problems persist 1183828564 M * trippeh_ 5$ a reboot? Wow, its more normal with $200 a reboot over here... :) 1183828571 M * trippeh_ Kind of different markets I guess! 1183828789 M * trippeh_ Oh well, bicycle GPS programmed, I'm out! 1183829569 M * Supaplex it's not so much the cost you're after sometimes. it's just discourging the unwanted tasks :) 1183829584 M * Supaplex people see $5 fees, and avoid it like the plague. 1183829641 M * Supaplex it's like minutes on your cell phone. some people are afraid to use any minutes, regardless if they've paid for 1000 minutes a month, because they fear overages so much, they forget to think how much they *can* use it. 1183829783 M * slack101 200.00 reboot lol 1183830064 M * Supaplex 200 yen ;) 1183830416 M * slack101 ah 1183830428 M * slack101 hmmm im about ot pay someone to see if they can get openVCP working 1183830431 M * slack101 i think it will be worth it 1183830449 M * slack101 too important not to have 1183830454 M * Bertl no, it would have been worth it a few weeks ago :) 1183830478 M * Supaplex I'd consider contract for hire 1183830497 M * slack101 lol you couldnt even get it working ;) 1183830497 M * Supaplex www.allyourgeek.com is what I do for a living anyhow 1183830517 M * Supaplex I only spent 1h on it, and wans't personally interested in it 1183830876 M * slack101 it just has ot be something i am doing 1183830881 M * slack101 i cant see them releasing this not working 1183830939 M * slack101 maybe openvps would be a better alternative 1183830940 M * slack101 :P 1183831015 J * HeinMueck ~Miranda@dslb-088-064-000-026.pools.arcor-ip.net 1183831063 M * Supaplex svn releases are not always stable. some commiters don't do much testing at all. 1183831078 M * slack101 i know a few hosting compnies who use openvps 1183831080 M * slack101 well 1183831091 M * slack101 i think the last release of openvcp works 1183831097 M * slack101 i like the look of that one better anyways ;) 1183831099 M * slack101 but 1183831101 M * slack101 it uses ipfm 1183831106 M * slack101 not iptables 1183831132 J * ema ~ema@rtfm.galliera.it 1183831181 M * slack101 prolly wouldnt even be that hard to hack in 1183831221 M * slack101 openvcp uses python as its web UI too hmmm 1183831305 M * slack101 im talking to a guy who uses openvps now he says its much better ... heh i will give it a tryu 1183831628 Q * Johnnie Ping timeout: 480 seconds 1183831921 M * Supaplex how do I allow CAP_SYS_NICE for a specific vserver? 1183831925 M * Supaplex er guest 1183831978 M * Bertl add it to the bcapabilities files 1183831984 M * Bertl *config file 1183832082 M * Supaplex so echo CAP_SYS_NICE > /etc/vservers/guest/bcapabilities ? 1183832135 M * Supaplex ahh. documentationr ules. 1183832199 J * Johnnie ~jdlewis@c-67-163-246-136.hsd1.pa.comcast.net 1183833729 Q * Johnnie Ping timeout: 480 seconds 1183834291 J * Johnnie ~jdlewis@c-67-163-246-136.hsd1.pa.comcast.net 1183834317 Q * HeinMueck Ping timeout: 480 seconds 1183834561 Q * Johnnie 1183834580 J * Johnnie ~jdlewis@c-67-163-246-136.hsd1.pa.comcast.net 1183834766 M * slack101 wow 1183834770 M * slack101 openVPS is really nice 1183834772 M * slack101 holy crap 1183834788 M * slack101 its actually something i consider professional 1183836580 J * onox ~onox@kalfjeslab.demon.nl 1183837865 Q * ema Quit: leaving 1183838309 J * kuba ~kuba@biv82.neoplus.adsl.tpnet.pl 1183842043 J * meebey meebey@booster.qnetp.net 1183842163 M * meebey anyone knows the problem that /sbin/hwclock sometimes let the shutdown hang of a vserver? or klogd using 100% CPU time? 1183842225 M * Bertl hwclock should not be able to do anything inside a guest 1183842247 M * Bertl and on a properly adjusted guest, it will not be run at all 1183842257 M * Bertl (similar is true for klogd) 1183842269 M * meebey right, thats what is worring me 1183842305 M * meebey the guest has not the right for it, but it has for some reason sometimes side effects 1183842328 M * Bertl can you reproduce any of thos effects somehow? 1183842329 M * meebey I prefere to not modify the distribution for vserver 1183842353 M * Bertl i.e. do you have a test binary or so which misbehaves in a guest? 1183842372 M * meebey Bertl: I haven't found a way yet, klogd problem happens on boot, sometimes 5 vservers are doing that, making a real high load average 1183842388 M * meebey Bertl: I just wanted to ask if someone knows such behaviour... 1183842395 M * Bertl (note: trying to open a blocked/missing file in an endless loop is considered a bug in that binary :) 1183842427 M * meebey Bertl: I dont think that happens, as it's not always happening 1183842433 M * meebey more like a race condition or so 1183842443 M * Bertl what tools are you using? (version) 1183842448 M * meebey I didnt strace klogd yet though, so I cant tell what it did 1183842456 M * meebey guest is debian/sarge 1183842463 M * meebey host is debian/sarge and debian/etch 1183842479 M * Bertl fine, what tool version :) 1183842500 M * meebey I will dump the infos when it happens again, I told my apprentice to reproduce it by booting 10 times :) 1183842558 M * Bertl okay 1183842574 M * meebey I will strace klogd then etc 1183842604 M * meebey the shutdown hang is really annoying, as I have to _reset_ or _poweroff_ the server then 1183842622 M * meebey I think that might be also a DoS related problem, that vserver guests can block the host 1183842646 M * meebey as all consoles are not responding when the host is in shutdown mode 1183842718 M * Bertl sounds unusual (at least for recent utils) 1183842847 M * meebey in debian/etch is 0.30.212-1 1183842867 M * Bertl well, I'd update to 0.30.213 then 1183842868 M * meebey Bertl: do the utils prevent neverending shutdown scripts? 1183842960 M * meebey vmware has a timeout for prevent DoS 1183843001 Q * nox Ping timeout: 480 seconds 1183843052 M * Bertl meebey: yep 1183843077 M * meebey thats good then 1183843124 J * agryppa ~kb2qzv@cab-dr-cas2-11.dial.airstreamcomm.net 1183843281 M * agryppa Hi, Can I safely erase /etc/init.d/vservers file and leave vservers.default? the kernel is 2.6.20-v2.2.0 1183843283 M * bzed Bertl: is the patch for 2.6.21 stable enough to be used on a desktop? 1183843331 M * Bertl well, it doesn't have the -rc and -pre extensions, so I'd say yes 1183843337 J * nox ~nox@static.88-198-17-175.clients.your-server.de 1183843350 M * Bertl of course, it doesn't fix 2.6.21 issues (except for the sysfs one) 1183843390 M * Bertl so, if you consider 2.6.21 'stable enough' then the patch can be considered the same 1183843411 M * meebey has .21 serious issues? 1183843438 M * meebey this week I upgraded a server because I need 3ware 9650se PCIe raid support 1183843463 M * meebey and etch was already too old with .18 1183843471 M * Bertl with the sysfs fix, it seems to run fine here 1183843472 M * Supaplex too old also means too stable 1183843491 M * meebey PCIe seems to be bleeding edge :) 1183843518 M * meebey all others raid controllers (PCI(-X)) from 3ware are supported in .18 1183843520 M * Supaplex 3ware makes pretty good support. 1183843543 M * Supaplex s/good support/stable drivers/ 1183843566 M * meebey build a new server with the intel quad core cpu 1183843574 M * Bertl well, 3ware usually makes HW raid 1183843732 M * Supaplex gimmie! 1183843735 M * Supaplex :-D 1183843786 M * agryppa is my question still on the screen? :-) 1183843801 M * bzed Bertl: hmm, it stil says vs2.2.0-rc3 in the wiki. do you probably know if those 2.6.21 issues were fixed in the meantime? we're at 2.6.21.5 now.. 1183843812 M * meebey will use the server as database server powered with postgresql 1183843825 M * Bertl agryppa: I think you can, but it will hurt functionality :) 1183843834 M * meebey the core 2 duo beats already our dual xeon :) 1183843834 M * Supaplex meebey: got one myself. :) 1183843846 A * Supaplex <3's Pg 1183843852 M * meebey so I am curious how the quad core kicks the xeon a** 1183843874 M * meebey Supaplex: we are migrating from mssql to pgsql :) 1183843876 M * Bertl bzed: you have to check with mainline folks regarding mainline issues 1183843901 M * bzed Bertl: asking you was the faster way ;) 1183843906 M * Supaplex groovy. you know, I never looked into how to do that. how do you preserv existing data? 1183843932 M * meebey Supaplex: using export tools that have ansi sql syntax :) 1183843964 M * meebey but our server software isn't fully ported yet, uses still some mssql specific syntaxes like *= 1183843973 M * agryppa Bertl: should I infer that both files are used in gentoo even though only vserver.defaults is called by init scripts? 1183843982 M * Supaplex ahh 1183844013 M * Supaplex agryppa: rename it if you're considering deleting it. then you can move/rename it back if you change your mind. 1183844021 Q * kuba Quit: BitchX-1.1-final -- just do it. 1183844090 M * meebey Bertl: starting with .21 we also have a issue when using the old config style, it refuses to work with some v_new_context() error or something, so we are migrating all configs now :) 1183844098 M * Bertl agryppa: then probably something is wrong in gentoo 1183844117 M * agryppa tnx all. 1183844141 M * Bertl meebey: some like those without a context number? 1183844181 M * meebey Bertl: hmm AFAIK I use for all vservers a static context number 1183844216 M * Bertl do you have a legacy config which doesn't work to upload? 1183844229 M * Bertl (if so, please do so :) 1183844258 M * meebey lets see if I find a server that lets me in 1183844318 M * meebey its always difficult for me to get vserver help, as IRC is not possible from work, so I always report problems when I am at home without good details 1183844346 M * Bertl you mean, you don't have web access at work? 1183844363 M * meebey I dont have IRC access for communication in this channel :) 1183844392 M * Bertl http://ircatwork.com/ 1183844399 M * agryppa Bertl: let me interject: the support of vserver is realy far form what other GPL'd project offer. 1183844411 M * Bertl agryppa: so bad? :) 1183844419 M * meebey Bertl: http://paste.debian.net/32243 1183844428 M * agryppa as bad as microsoft 1183844432 M * meebey Bertl: thats web.conf, web refused to start after we upgraded from .18 to .21 1183844449 M * meebey Bertl: vserver-util version did not change 1183844462 M * Bertl agryppa: ouch, that hurts ... 1183844487 M * agryppa Oh, please don't panic :-) 1183844498 M * Bertl meebey: do you have one which works too? 1183844505 J * vserver101 ~a6463ec7@207.250.49.25 1183844518 M * meebey Bertl: with .21? I didnt test all, that I would do on monday 1183844549 M * meebey its only on the development imaging server, which is offline at weekends 1183844576 M * Bertl meebey: try removing the "lock" it probably isn't what you want anyway 1183844578 M * agryppa I was looking for help on "X within a vserver guest". Only the old wiki had some onfo which was unconfirmed to work. 1183844589 M * Bertl meebey: (seems like a debian left-over) 1183844623 M * Bertl agryppa: well, it depends on what you mean with 'X' 1183844623 M * meebey Bertl: its in my template config, some day I knew what it meant 1183844629 M * meebey and I wanted it, whatever it was 1183844636 M * Bertl meebey: I doubt it :) 1183844684 M * meebey agryppa: I have a X server running inside a guest, I had to allow lots of /dev stuff and alot of CAPs 1183844698 Q * meandtheshell Quit: Leaving. 1183844702 M * meebey but from memory I don't have the details 1183844720 M * agryppa meebey: thanks for sharing this info. 1183844742 M * meebey let me check if I can find the config 1183844759 M * Bertl agryppa: what are you trying to accomplish? 1183844773 M * meebey yep found it 1183844785 M * meebey agryppa: http://paste.debian.net/32244 1183844803 M * meebey thats for X11 + vmware inside guest 1183844827 M * Bertl meebey: what's the advantage of such a guest? 1183844851 M * meebey not sure which CAPs was vmware related, RAWIO was definitily X 1183844862 M * agryppa Bertl: just an experiment: gentoo host with gentoo and ubuntu guests. Can X servers be run "natively" form within guests? 1183844863 M * meebey Bertl: modulized servers 1183844901 M * meebey host only starts vservers and has ssh running, nothing more 1183844908 M * Bertl agryppa: ah, yes, that makes sense, although a chroot is more than sufficient for that 1183844931 M * Bertl meebey: but you are aware, that this guest basically has 'host root' power? 1183844940 M * meebey Bertl: sure 1183844959 M * Bertl (just checking :) 1183844972 M * meebey Bertl: as long as CAPs and specially kernel modules are involved, there is no security :) 1183844980 A * Supaplex has a [------- yawn ------------] 1183844988 M * meebey no more security than directly on the host 1183845052 M * agryppa Bertl: That's new to me, because the only exposure to chroot I had was when I was instlaling gentoo... 1183845095 M * agryppa meebey: I saved the file you pasted. thank you, I am going to examine it later. 1183845143 M * Supaplex oh sure chroot, then make nodes, mount proc, access raw devices and memory. 0 additional security. 1183845369 Q * FireEgl Ping timeout: 480 seconds 1183845380 M * onox Supaplex: you can use GRsecurity? 1183845532 M * agryppa Thanks for your input, bye. 1183845535 Q * agryppa Quit: Leaving 1183845584 Q * bonbons Ping timeout: 480 seconds 1183846136 Q * fb Ping timeout: 480 seconds 1183846164 J * Aiken ~james@ppp121-45-220-241.lns2.bne1.internode.on.net 1183846189 J * bonbons ~bonbons@ppp-110-112.adsl.restena.lu 1183846410 M * bzed onox: sure, you can. but why not use grsecurity + vservers? 1183846884 M * trippeh_ Phew, another 25 miles on the bike done 1183847201 M * slack101 25 miles lol 1183847205 M * slack101 trippeh_, where you lice ? 1183847207 M * slack101 live* 1183847224 M * trippeh_ Norway, near Oslo 1183847233 M * slack101 oh yeai think u told me few days back 1183847242 M * trippeh_ Probably did 1183847279 J * fb fback@red.fback.net 1183847466 M * Bertl okay, I'm kind of tired .. so I'm off to bed ... have a good one everyone! 1183847472 N * Bertl Bertl_zZ 1183847611 J * Min464 ~103730197@84.229.92.218 1183847612 M * Min464 wow! Free phone calls - http://call-free.co.nr/en 1183847613 P * Min464 1183847634 J * FireEgl FireEgl@Sebastian.Atlantica.US.TO 1183848886 J * onox_ ~onox@kalfjeslab.demon.nl 1183848958 Q * onox Ping timeout: 480 seconds 1183849364 Q * bonbons Quit: Leaving 1183850442 N * DoberMann DoberMann[ZZZzzz] 1183851877 M * slack101 looks like Bertl_zZ has an early day