1193789262 J * FloodServ services@services.oftc.net 1193789508 J * hparker ~hparker@linux.homershut.net 1193789633 Q * FloodServ Service unloaded 1193789672 J * FloodServ services@services.oftc.net 1193789713 N * weasel weasel-test 1193789722 N * weasel-test weasel 1193789787 N * weasel weasel-test 1193789791 N * weasel-test weasel 1193791206 M * paulproteus Are there advantages to Linux-Vserver over OpenVZ? 1193791233 M * Bertl I sure hope so, otherwise there would be no point in doing Linux-VServer no? 1193791246 M * paulproteus Well, there's a kernel in Debian for vserver, making me quickly prefer vserver! 1193791740 Q * _gh_ Ping timeout: 480 seconds 1193792360 M * Bertl okay, off to bed for today ... have a good one everyone! cya! 1193792366 N * Bertl Bertl_zZ 1193792843 M * cehteh http://www.secret-wg.org/ .. anyone seen that? :)) 1193793289 J * derjohn_mobil ~aj@e180218228.adsl.alicedsl.de 1193796370 N * djbclark djbc|vacation 1193798106 Q * derjohn_mobil Ping timeout: 480 seconds 1193798553 J * _gh_ ~gerrit@c-67-169-199-103.hsd1.or.comcast.net 1193798855 Q * zLinux Ping timeout: 480 seconds 1193799320 Q * mnemoc Ping timeout: 480 seconds 1193800739 Q * mire Ping timeout: 480 seconds 1193802442 J * zLinux ~zLinux@88.213.33.90 1193806472 Q * derjohn Read error: Connection reset by peer 1193806511 J * derjohn ~derjohn@80.69.42.51 1193810371 J * JonB ~NoSuchUse@kg1-98.kollegiegaarden.dk 1193811190 Q * hparker Quit: g'nite 1193813587 Q * ensc Ping timeout: 480 seconds 1193813788 J * DavidS ~david@vpn.uni-ak.ac.at 1193815907 Q * JonB Quit: This computer has gone to sleep 1193817290 J * virtuoso_ ~s0t0na@ppp91-122-59-37.pppoe.avangard-dsl.ru 1193817290 Q * virtuoso Read error: Connection reset by peer 1193818209 J * dna ~dna@105-217-dsl.kielnet.net 1193818877 J * ensc ~irc-ensc@p54B4E013.dip.t-dialin.net 1193818993 J * JonB ~NoSuchUse@kg1-98.kollegiegaarden.dk 1193819140 J * ana30 ~ana30@ANantes-257-1-29-208.w90-25.abo.wanadoo.fr 1193819239 Q * ana30 1193819471 J * derjohn_mobil ~aj@e180207101.adsl.alicedsl.de 1193821026 Q * JonB Ping timeout: 480 seconds 1193822216 Q * toidinamai Ping timeout: 480 seconds 1193822461 J * gebura ~gebura@77.192.186.197 1193822467 M * gebura hi 1193822497 N * Bertl_zZ Bertl 1193822503 M * Bertl morning folks! 1193822558 M * gebura hi Bertl ! 1193822642 M * Bertl okay, off for now (got some work to do) back later ... 1193822743 N * Bertl Bertl_oO 1193822880 J * click_ click@ti511110a080-1849.bb.online.no 1193822996 Q * click Ping timeout: 480 seconds 1193823024 J * toidinamai ~frank@svenska.toidinamai.de 1193823191 J * puck ~puck@leibniz.catalyst.net.nz 1193824087 J * kir_home ~kir@63.116.222.46 1193824215 Q * kir_home Read error: No route to host 1193824330 N * esa` eSa| 1193824332 J * kir_home ~kir@63.116.222.46 1193824333 Q * mountie Ping timeout: 480 seconds 1193824350 J * mountie ~mountie@trb229.travel-net.com 1193824417 J * kir ~kir@63.116.222.46 1193824506 Q * kir Read error: Connection reset by peer 1193824553 Q * kir_home Read error: No route to host 1193825472 J * lilalinux nas@dslb-084-058-243-028.pools.arcor-ip.net 1193825732 Q * FireEgl Quit: Bye... 1193826563 J * lilalinux_ ~plasma@80.69.41.3 1193826936 M * Yvo good morning 1193826951 M * gebura you too 1193827006 Q * lilalinux Ping timeout: 480 seconds 1193827129 J * pmenier ~pme@LNeuilly-152-22-72-5.w193-251.abo.wanadoo.fr 1193827594 Q * quasisane Read error: Connection reset by peer 1193827789 P * friendly12345 1193828360 J * FireEgl FireEgl@4.0.0.0.1.0.0.0.c.d.4.8.0.c.5.0.1.0.0.2.ip6.arpa 1193828483 J * Punkie ~Punkie@melkor.coolhousing.net 1193828789 J * lilalinux__ nas@dslb-084-058-243-028.pools.arcor-ip.net 1193828850 Q * lilalinux_ Read error: Connection reset by peer 1193828851 J * lilalinux_ ~plasma@80.69.41.3 1193829189 J * Julius ~julius@p57B24DDC.dip.t-dialin.net 1193829291 Q * lilalinux__ Ping timeout: 480 seconds 1193829351 Q * Aiken Quit: Leaving 1193831925 J * mire ~mire@15-171-222-85.adsl.verat.net 1193832961 Q * AStorm Quit: ET calling home 1193833237 J * natacha28 ~natacha28@ANantes-257-1-29-208.w90-25.abo.wanadoo.fr 1193833320 Q * natacha28 1193833367 J * mnemoc ~amery@kilo105.server4you.de 1193834155 J * JonB ~NoSuchUse@kg1-20.kollegiegaarden.dk 1193834718 Q * mire Ping timeout: 480 seconds 1193835692 Q * _gh_ Ping timeout: 480 seconds 1193835736 J * hparker ~hparker@linux.homershut.net 1193835919 Q * glen_ Server closed connection 1193835938 J * glen_ ~glen@elves.delfi.ee 1193836179 J * lili26 ~lili26@d033.dhcp212-198-248.noos.fr 1193836333 N * Bertl_oO Bertl 1193836343 J * _gh_ ~gerrit@c-67-169-199-103.hsd1.or.comcast.net 1193836349 M * Bertl welcome lili26! 1193836598 M * southtel Hey Bertl...I asked yesterday about bridging, and you explained the whole layer2/3 issue with vserver...is there a way to have a "bridged" openvpn setup within vserver? 1193836601 Q * mnemoc Ping timeout: 480 seconds 1193836626 M * southtel Specifically, I'd like to have a single subnet, rather than a separate, routed subnet for the vpn. 1193836674 M * Bertl well, you can set up all that on the host, and just use the configured IP for the guest 1193836685 M * Bertl but you cannot do layer 2 stuff inside a guest 1193836717 Q * pmenier Read error: Connection reset by peer 1193836735 J * pmenier ~pme@LNeuilly-152-22-72-5.w193-251.abo.wanadoo.fr 1193836757 M * Bertl but bridging is not required for having a single network range 1193836784 M * Bertl just make a smaller subnet for the vpn 1193836808 M * southtel So that will work? That's what I've been pondering doing as of this morning. 1193836856 M * southtel And just set up the routing rules as appropriate...essentially just like on the FAQ. 1193836857 M * Bertl yes, as a route for a smaller network within a larger will get priority 1193836898 M * Bertl the only thing you need to do different is routing the remaining ranges between the vpn endpoints 1193836914 M * Bertl (which could be simple host routes, for example) 1193837034 J * yarihm ~yarihm@84-75-102-236.dclient.hispeed.ch 1193837070 J * larsivi ~larsivi@101.84-48-201.nextgentel.com 1193837154 M * southtel Great, thanks! Weather I like it or not, I'm going to learn networking. 1193837324 J * aj_ ~aj@e180223086.adsl.alicedsl.de 1193837359 J * mnemoc ~amery@kilo105.server4you.de 1193837482 M * Bertl southtel: can't hurt :) 1193837662 Q * lili26 1193837726 Q * derjohn_mobil Ping timeout: 480 seconds 1193837776 M * Bertl southtel: btw, one tip from my side: double check every single configuration and try to actually test each and every route, one by one 1193837887 J * lola22 ~lola22@d033.dhcp212-198-248.noos.fr 1193837894 Q * JonB Quit: This computer has gone to sleep 1193838977 J * ema ~ema@rtfm.galliera.it 1193839372 Q * lola22 1193839857 Q * _gh_ Read error: Connection reset by peer 1193839897 J * _gh_ ~gerrit@c-67-169-199-103.hsd1.or.comcast.net 1193839949 J * dreamind ~dreamind@p54A78820.dip0.t-ipconnect.de 1193839984 N * dreamind Guest83 1193840069 N * Guest83 dreamind 1193840075 M * dreamind hi folks 1193840383 Q * _gh_ Ping timeout: 480 seconds 1193840443 M * Bertl hey dreamind! 1193840456 M * dreamind hi Bertl :) 1193840479 M * dreamind sorry but for 2.6.23 I gave up ;) - I'm now using 2.6.22 :D 1193840500 M * dreamind works so far for me, with linux-vserver and vmware server on the same machine :) 1193840501 M * Bertl hehe 1193840535 M * dreamind I just dunno about the consequences, when I modify the dirinfo (or what the name was) struct of xfs... 1193840573 M * dreamind uint16 is in there and should be uint32... - for the flags bitmask 1193840587 M * Bertl the xfs structs should be already fine IIRC, you want to change the checks for the specific flags 1193840613 M * dreamind yes there is a second struct if I remember correct 1193840617 M * dreamind but its nowhere used. 1193840632 M * dreamind or a second value, don't have the code here... 1193840645 M * dreamind dinfo2_flags or something like that 1193840687 M * Bertl yes, I added that one, and the flags, but not the checks 1193840697 M * dreamind ah ok :) 1193840712 M * dreamind I can hack a bit on that tomorrow, but today (at work) I have to do some asterisk stuff... 1193840716 Q * toidinamai Ping timeout: 480 seconds 1193840724 M * dreamind did I yet say, asterisk has very bad code? 1193840726 M * dreamind ;) 1193840741 M * ruskie there's some other project out there that's a fork of it 1193840741 M * Bertl how so? 1193840744 M * daniel_hozac Bertl: just FYI, i submitted the patch to libvirt yesterday. 1193840755 M * Bertl daniel_hozac: excellent work! thanks! 1193840762 M * dreamind ruskie: yes, openpbx, now named callweaver 1193840762 M * ruskie callweaver I belive 1193840766 M * ruskie ypu 1193840767 M * ruskie yup 1193840770 M * dreamind ruskie: buts its just a asterisk fork 1193840778 M * dreamind ruskie: and it has the same problems. 1193840781 M * ruskie lol 1193840804 M * dreamind for example asterisk does not correctly write on a socket it uses for its "manager" interface 1193840819 M * dreamind and besides that, I don't understand, why the heck they are not using RPC. 1193840831 M * Bertl for what? 1193840837 M * dreamind for remote crontrol 1193840850 M * Bertl remote control as in? 1193840852 M * dreamind I work for a company which wrote a webfrontend for callcenters 1193840867 M * dreamind and we need to be able to dial via a webinterface and monitor some other aspects of asterisk (events) 1193840876 M * dreamind and for that we need to comunicate with the asterisk server. 1193840894 M * Bertl isn't there some CAPI implementation for that purpose? 1193840895 M * dreamind currently we use the manager interface (text based, which is not consistent and hard to parse) 1193840899 M * dreamind no not capi 1193840908 M * dreamind capi is the lowlevel interface to isdn cards 1193840942 M * dreamind and well, I personally would prefer rpc or maybe xml-rpc for that remote interface, but the asterisk implementation sucks 1193840959 M * dreamind mainly because of dropping bytes and being inconsistent - so very hard to parse. 1193840959 M * Bertl what do they provide for this purpose? 1193840993 M * dreamind http://www.voip-info.org/wiki-Asterisk+manager+API <-- that manager interface 1193840997 M * dreamind its really not good. 1193841023 M * daniel_hozac have you submitted patches for an RPC interface? 1193841090 J * _gh_ ~gerrit@c-67-169-199-103.hsd1.or.comcast.net 1193841095 M * dreamind daniel_hozac: no, my boss here at work didn't want me do do such huge patches, or bigger work 1193841115 M * dreamind and for me personally I don't see a reason to do such a thing, because I don't need that feature :) 1193841651 J * JonB ~NoSuchUse@kg1-98.kollegiegaarden.dk 1193842403 Q * southtel Remote host closed the connection 1193842796 J * dowdle ~dowdle@scott.coe.montana.edu 1193842816 M * dowdle Good nowing. 1193842817 M * Bertl wb dowdle! 1193843097 M * Bertl okay, off for now, back later .. happy Halloween! 1193843105 N * Bertl Bertl_oO 1193843905 Q * JonB Quit: This computer has gone to sleep 1193843932 J * quasisane ~sanep@c-76-118-191-64.hsd1.nh.comcast.net 1193844812 Q * shorawitz99 Remote host closed the connection 1193844831 J * mire ~mire@15-171-222-85.adsl.verat.net 1193844844 Q * _gh_ Ping timeout: 480 seconds 1193844933 J * kir_home ~kir@12.172.70.4 1193845408 Q * ||Cobra|| Remote host closed the connection 1193845626 J * ||Cobra|| ~cob@pc-csa01.science.uva.nl 1193845646 Q * ||Cobra|| 1193845667 J * ||Cobra|| ~cob@pc-csa01.science.uva.nl 1193845673 Q * yarihm Quit: This computer has gone to sleep 1193845747 J * toidinamai ~frank@svenska.toidinamai.de 1193845917 Q * Punkie Quit: Odcházím 1193846220 Q * the-me Server closed connection 1193846223 J * the-me Patrick@Linux-Dev.org 1193846871 Q * gebura Quit: Quitte 1193847141 J * _gh_ ~gerrit@bi01p1.co.us.ibm.com 1193847631 Q * derjohn Read error: Connection reset by peer 1193847671 J * derjohn ~derjohn@dslb-084-058-253-034.pools.arcor-ip.net 1193848196 Q * larsivi Ping timeout: 480 seconds 1193848373 J * yarihm ~yarihm@guest-docking-nat-1-130.ethz.ch 1193848686 Q * toidinamai Ping timeout: 480 seconds 1193848950 Q * sid3windr Remote host closed the connection 1193848954 J * toidinamai ~frank@svenska.toidinamai.de 1193849041 Q * kir_home Quit: Ухожу я от вас 1193849397 J * sid3windr luser@bastard-operator.from-hell.be 1193850387 Q * yarihm Quit: Leaving 1193851090 Q * igraltist Ping timeout: 480 seconds 1193851167 Q * mjt Quit: reboot time 1193852739 Q * pmenier Quit: Konversation terminated! 1193852822 Q * ard Ping timeout: 480 seconds 1193852893 Q * mire Ping timeout: 480 seconds 1193853098 J * bonbons ~bonbons@2001:960:7ab:0:20b:5dff:fec7:6b33 1193853421 Q * ema Quit: leaving 1193853862 M * paulproteus daniel_hozac, others: Do you know if Fedora provides a metapackage I can yum install that would give me a base Fedora system? 1193853873 M * paulproteus As if I installed from DVD, that is - GUI and all? 1193853934 M * dowdle paulproteus: Given all of the software that gets updated by fedora after the release of install media... you'd want a minimal install and then post install installation to get latest packages anyway. 1193853957 M * dowdle clear 1193853959 M * dowdle opps 1193854546 Q * dreamind Quit: dreamind 1193854781 J * mire ~mire@15-171-222-85.adsl.verat.net 1193854883 Q * bonbons Ping timeout: 480 seconds 1193855285 Q * arachnist Quit: brb/bbl 1193855795 M * daniel_hozac paulproteus: yum groupinstall 1193855873 M * daniel_hozac paulproteus: you'd want at least Core, "GNOME Desktop Environment" and "X Window System". 1193855946 M * paulproteus I don't see "Core", but I see the others, and I'm grabbing a handful right now. Thanks. (-: 1193855980 M * daniel_hozac Core and base may be anaconda internal groups, i'm not sure. 1193856076 Q * fatgoose Quit: fatgoose 1193856245 Q * baggins Server closed connection 1193856257 J * baggins ~baggins@kenny.mimuw.edu.pl 1193856358 J * fatgoose ~samuel@76-10-149-199.dsl.teksavvy.com 1193857108 M * dowdle To get a list of groups... there is a yum command... grouplist? 1193857124 J * aj__ ~aj@e180217122.adsl.alicedsl.de 1193857135 M * dowdle To test out a VPS, one of the things I'd do is group install all available groups... with a few exceptions. 1193857136 M * daniel_hozac yes. 1193857323 J * igraltist ~user4@kasten-edv.de 1193857342 J * meandtheshell ~markus@85.127.115.184 1193857363 Q * waldi Server closed connection 1193857365 J * waldi ~waldi@bblank.thinkmo.de 1193857526 Q * aj_ Ping timeout: 480 seconds 1193857685 J * bonbons ~bonbons@2001:960:7ab:0:20b:5dff:fec7:6b33 1193858419 J * julius_ ~julius@p57B246A8.dip.t-dialin.net 1193858824 Q * smithbone Quit: Coyote finally caught me 1193858856 Q * Julius Ping timeout: 480 seconds 1193858904 J * smithbone rsmith@opensysadmin.com 1193859028 J * comfrey ~comfrey@72.11.120.223 1193859541 M * bXi how does one toggle 64bit or 32bit again? 1193859593 M * daniel_hozac linux32 in /etc/vservers//personality 1193859617 J * ard ~ard@gw-tweakb16.kwaak.net 1193859810 M * bXi and i need a x86 stage 4 for those right? 1193859825 M * daniel_hozac well, yeah. 1193859835 M * bXi okay 1193859843 A * bXi builds the first 32bit gentoo vserver 1193859980 Q * blizz Server closed connection 1193859981 J * blizz ~stephan@evilhackerdu.de 1193860660 J * ruskie_ ruskie@goatse.co.uk 1193860728 J * fb fback@red.fback.net 1193860730 J * danman danman@eliza.wigner.bme.hu 1193860739 J * sladen_ paul@starsky.19inch.net 1193860746 J * bragon_ ~bragon@2001:7a8:aa58::1 1193860747 J * matti_ matti@acrux.romke.net 1193860756 J * [Guy] ~korn@elan.rulez.org 1193860770 J * opuk_ ~kupo@c213-100-138-228.swipnet.se 1193860772 Q * sladen cation.oftc.net kilo.oftc.net 1193860772 Q * fb_ cation.oftc.net kilo.oftc.net 1193860772 Q * danman_ cation.oftc.net kilo.oftc.net 1193860772 Q * Vudumen cation.oftc.net kilo.oftc.net 1193860772 Q * pusling cation.oftc.net kilo.oftc.net 1193860772 Q * phreak`` cation.oftc.net kilo.oftc.net 1193860772 Q * Red_Devil cation.oftc.net kilo.oftc.net 1193860772 Q * ruskie cation.oftc.net kilo.oftc.net 1193860772 Q * daniel_hozac cation.oftc.net kilo.oftc.net 1193860772 Q * opuk cation.oftc.net kilo.oftc.net 1193860772 Q * Guy- cation.oftc.net kilo.oftc.net 1193860772 Q * Adrinael_ cation.oftc.net kilo.oftc.net 1193860772 Q * bragon cation.oftc.net kilo.oftc.net 1193860772 Q * matti cation.oftc.net kilo.oftc.net 1193860772 Q * ag- cation.oftc.net kilo.oftc.net 1193860773 J * Adrinael adrinael@rid7.kyla.fi 1193860774 N * matti_ matti 1193860780 J * Red_Devil ~red@lounge.datux.nl 1193860781 J * ag- ~ag@fedaykin.roxor.cx 1193860781 J * Vudumen 59c3211349@perverz.hu 1193860784 J * daniel_hozac ~daniel@c-051472d5.08-230-73746f22.cust.bredbandsbolaget.se 1193860795 N * [Guy] Guy- 1193860805 J * phreak`` ~phreak``@deimos.barfoo.org 1193860813 N * matti Guest121 1193860822 N * ruskie_ ruskie 1193860830 M * mnemoc .oO 1193861835 Q * phedny Server closed connection 1193861853 J * phedny ~mark@ip56538143.direct-adsl.nl 1193862705 J * larsivi ~larsivi@101.84-48-201.nextgentel.com 1193862745 Q * hparker Remote host closed the connection 1193863057 Q * nox Server closed connection 1193863071 J * nox ~nox@static.88-198-17-175.clients.your-server.de 1193863196 J * hparker ~hparker@linux.homershut.net 1193863824 J * _jmcaricand_zzz ~jmcarican@d77-216-142-218.cust.tele2.fr 1193864067 Q * mountie Remote host closed the connection 1193864160 J * pusling pusling@77.75.162.71 1193864163 J * mountie ~mountie@trb229.travel-net.com 1193864743 Q * FloodServ synthon.oftc.net services.oftc.net 1193864892 J * JonB ~NoSuchUse@kg1-98.kollegiegaarden.dk 1193865527 J * faheem ~faheem@152.16.8.94 1193865570 M * faheem When I try to run vserver build using yum I get 1193865571 M * faheem You are using a version of yum which is insecure and broken in chroot 1193865571 M * faheem related operations; either apply the patches shipped in the 'contrib/' 1193865571 M * faheem directory of util-vserver, or ask the author of yum to apply them 1193865571 M * faheem (preferred). 1193865591 M * faheem Er, what I am supposed to do? Patch yum? 1193865617 M * daniel_hozac for instance. 1193865644 M * daniel_hozac ignoring it works too, but that's less than ideal. i'm not sure how safe that is on Debian either. 1193865685 Q * bXi Server closed connection 1193865689 J * bXi bluepunk@irssi.co.uk 1193865690 M * faheem daniel_hozac: has anyone suggested patching yum to the Debian maintainer of yum. That would seem the logioal person. 1193865712 M * daniel_hozac i have no idea. 1193865718 M * faheem The contrib directory doesn't seem to be in the Debian package of util-vserver... 1193865739 M * daniel_hozac you're looking at the source? 1193865751 J * FloodServ services@services.oftc.net 1193865790 M * faheem It's in the source. Yikes, there is a whole series of patches! 1193865808 M * faheem Oh, sorry. thats for different versions. 1193865824 M * faheem I'll check on the Debian yum sit. 1193865845 M * faheem is this a security hole or something? 1193865847 M * paulproteus faheem, File a bug with Debian and link the channel to the bug number. 1193865860 M * daniel_hozac yes. 1193865872 M * faheem Can someone point me to some doc about this? 1193865884 M * daniel_hozac that's why it says "You are using a version of yum which is insecure and broken in chroot related operations" ;) 1193865885 Q * JonB Quit: This computer has gone to sleep 1193865900 M * faheem paulproteus: No idea what link the channel to the bug number means. 1193865913 M * faheem daniel_hozac: Ok, so is there is a security advisory, or what? 1193865914 M * daniel_hozac it means you paste the link. 1193865923 M * paulproteus e.g. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405762 1193865927 M * daniel_hozac no. 1193865956 Q * _jmcaricand_zzz Quit: KVIrc 3.2.4 Anomalies http://www.kvirc.net/ 1193865981 M * faheem Ok, I'll be a busybody and send a bug report. Ok if I direct enquiries to vserver? 1193866027 M * faheem ha, someone beat me to it. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=347882 1193866089 Q * mire Ping timeout: 480 seconds 1193866092 M * faheem I assume this patch is still needed? 1193866113 M * daniel_hozac since you don't have it applied, yes. 1193866144 M * faheem daniel_hozac: vserver auto-detects this, then. 1193866153 M * daniel_hozac yes, of course. 1193866161 M * faheem Writing to the bug report, should I cc the list or something? 1193866262 M * daniel_hozac feel free to CC me and/or ensc... 1193866278 M * faheem ensc? 1193866340 M * daniel_hozac he's the one who wrote util-vserver and most of those patches. 1193866363 M * dowdle From out of nowhere... here's a picture with me and LWN's Jon Corbet from 2000. http://www.sandersonline.org/v/Warren-Kassie/lug/CLIQ2001/album01/jonathan_scott.jpg.html 1193866378 M * paulproteus May I ask which is which? 1193866398 M * paulproteus I guess the guy with the name tag is the LWN guy. 1193866442 M * dowdle I'm the guy on the right. 1193866450 M * dowdle With the goofy TUX on his sweatshirt. 1193866472 M * dowdle I was looking for a picture of our deceased LUG founder and ran across some ancient pictures. 1193866563 M * faheem Is esnc Enrico Scholz? 1193866602 Q * dna Quit: Verlassend 1193866666 M * daniel_hozac yes. 1193866677 M * daniel_hozac that is what /whois says... 1193866706 J * Aiken ~james@ppp121-45-222-198.lns2.bne1.internode.on.net 1193866773 Q * julius_ Remote host closed the connection 1193866853 M * faheem Ok, sent message to bug. 1193866887 M * paulproteus I'm curious - why aren't these patches part of upstream? 1193866917 M * faheem paulproteus: Maybe someone needs to tell upstream about them. :-) 1193866936 M * daniel_hozac skvidal thinks hostfs and chrootfs are ugly, and doesn't really care about this use-case. 1193866977 M * faheem Oh, seth vidal is the maintainer, is he? I think I've met him (I work at Duke). 1193866986 M * faheem Writing from my office at Duke, actually... 1193867012 M * daniel_hozac feel free to go poke him :) 1193867020 M * daniel_hozac or wait, he left duke, didn't he... 1193867021 Q * aj__ Ping timeout: 480 seconds 1193867029 M * dowdle paulproteus: If you want to see the progress "containers" have made into the mainline kernel, go to google and type in "containers" and "kernel" and "site:lwn.net" and see what you get. 1193867036 M * faheem daniel_hozac: Dunno. 1193867052 M * dowdle I haven't done it but I'm guessing that should turn up a fairly good list of links that document container additions to the mainline... which have been fairly extensive. 1193867074 M * dowdle LWN has a search function but it absolutely sucks. 1193867119 M * faheem daniel_hozac: is this patch only an issue while yum is actually running? 1193867128 M * daniel_hozac faheem: hmm? 1193867129 M * faheem I mean this security hole? 1193867161 M * dowdle paulproteus: It is believed that most of the features we have in Linux-VServer and OpenVZ... and related, lesser known projects... will all be part of the mainline within a year to two years. 1193867191 M * daniel_hozac faheem: it's a problem in yum, it might read configuration from the guest while operating in the host. 1193867256 M * dowdle paulproteus: That search suggestion actually works out quite well. 1193867279 M * daniel_hozac dowdle: i doubt Linux-VServer's feature-set will ever be in mainline. 1193867284 M * faheem daniel_hozac: Sounds nasty. 1193867297 Q * comfrey Ping timeout: 480 seconds 1193867301 M * dowdle daniel_hozac: Not the implimentation... but features similiar. 1193867314 M * daniel_hozac dowdle: i specifically said feature-set... 1193867368 M * paulproteus dowdle, Thanks, that is interesting. 1193867370 M * dowdle daniel_hozac: I guess I have a broader definition of feature-set. 1193867381 M * faheem daniel_hozac: Unfortunately, the version of yum shipped in etch/lenny/sid is 2.4, and there is no patch against 2.4. :-) 1193867382 M * paulproteus Is there a reason to prefer OpenVZ over Linux-Vserver, or vice versa, right now? 1193867383 M * dowdle Or maybe a narrower one. 1193867386 M * paulproteus "not really" is a fine answer. (-; 1193867401 M * dowdle paulproteus: There is a funny page that kinda summarizes. 1193867411 A * paulproteus hopes you'll point me to some lolcats 1193867415 M * dowdle I'm going to write one up... after I get my interview questions back from Bertl. 1193867428 M * daniel_hozac faheem: IIRC the 2.3.4 patch worked fine for 2.4.x. 1193867447 M * dowdle But I don't think one has a significant advantage over another one... as they both work very well... but have their shiney areas and their not so shiney areas. 1193867463 M * faheem daniel_hozac: oK, I'll copy the bug accordingly. 1193867477 M * paulproteus dowdle, That's the impression I get. daniel_hozac What sort of features do you think Vserver has that mainline will never have? 1193867488 M * daniel_hozac faheem: you might also want to mention that yum is at 3.2.7 right now... 1193867519 M * dowdle paulproteus: See also any recent public speech by Andrew Morton about the Linux kernel.. specifically the "future" portion. 1193867525 M * daniel_hozac paulproteus: IP address isolation. 1193867539 M * faheem daniel_hozac: Yes, wonder what is up with that. :-) 1193867671 M * dowdle paulproteus: Here's the humorous page: http://www.fsfe.org/it/fellows/rca/from_out_there/from_zero_to_virtualization_linux_vserver_vs_openvz 1193867681 M * faheem I think I'm done spamming the Debian BTS. :-) 1193867797 M * dowdle daniel_hozac: I recall something about network related stuff and containers in the mainline but not sure what... so I probably shouldn't have mentioned it. 1193867818 M * daniel_hozac dowdle: netns is level 2, meaning virtualized network stack. 1193867833 M * faheem Well, I ran the "insecure" version of yum, but when I enter, no yum is installed?! What should I do? 1193867856 M * daniel_hozac faheem: http://linux-vserver.org/Installation_on_CentOS#Install_a_guest 1193867870 M * faheem daniel_hozac: Oh, right. Forgot about that. Sorry. 1193868027 M * paulproteus dowdle, thanks. (-: 1193868027 M * dowdle daniel_hozac: Would not layer 2 isolation be a superset of layer 3 isolation? :) 1193868054 M * daniel_hozac dowdle: yes, but that means configuration and performance overhead. 1193868093 M * daniel_hozac i.e. it's no longer enough to just assign the address, you now have to route/bridge it across to the guest too. 1193868104 M * dowdle The only configuration overhead I'm aware of is assigning an IP address and nameserver def. 1193868136 M * daniel_hozac with a virtualized network stack? 1193868150 M * dowdle As a user that's all I've ever done with mine. 1193868165 M * dowdle The user tools might have done additional work for me?!? 1193868176 M * daniel_hozac obviously. 1193868198 M * daniel_hozac that's kind of why they're there... 1193868226 M * daniel_hozac doesn't change the fact that it becomes much more of an administrative burden, and also adds to the complexity of the network setup. 1193868237 M * dowdle But you don't really configure user tools so I've only had to give an IP and a nameserver value. Of course I haven't done NAT or advanced firewalling or any of that stuff. 1193868249 M * daniel_hozac so debugging things is no longer as simple as ping -I google.com. 1193868308 M * dowdle daniel_hozac: You obviously know more than I do about it... especially from the code perspective. 1193868320 M * dowdle It's one of those... added features or added complexity issues. 1193868345 M * faheem networking is broken inside the centos guest. Doesn't seem to even have an /etc/resolv.conf. Should I add one? 1193868360 M * daniel_hozac if you want to resolve names, that seems like a good idea, no? 1193868373 M * faheem daniel_hozac: Yes, but why isn't it there already? 1193868388 M * faheem I hate adding things not already there in case I break something... 1193868392 M * daniel_hozac have you put a resolv.conf in /etc/vservers/.defaults/files to be used during vserver ... build? 1193868400 M * dowdle It is my understanding that it is really hard to come up with a test case where the speed of the additional layer abstraction is measurable. 1193868405 M * faheem daniel_hozac: No. 1193868415 M * faheem daniel_hozac: don't think so. 1193868415 M * daniel_hozac faheem: so where should it come from, telepathy? magic? :) 1193868417 M * dowdle Err... speed = speed difference or overhead 1193868424 M * faheem daniel_hozac: Host system? 1193868440 M * paulproteus (fwiw, the Debian xen (not vserver) tools guess that you want the system's /etc/resolv.conf among other config files in the guest by default) 1193868447 M * daniel_hozac faheem: that's assuming things about your setup. i don't want to do that. 1193868459 M * faheem daniel_hozac: Ok, fair enough. 1193868459 M * daniel_hozac faheem: if you want to use the host's resolv.conf, put it in /etc/vservers/.defaults/files. 1193868465 M * faheem Ok. 1193868470 M * dowdle paulproteus: IS that a good thing or a bad thing (assuming host's resolv.conf)? 1193868503 M * paulproteus dowdle, Well, I find it friendly, esp. as it's an option that's disableable in the program that makes Xen guests. 1193868566 M * dowdle paulproteus: You could just as easily decide to copy /etc/resolv.conf from host machine to VPS private space as part of creation. It is such a minor configuration detail, given the vast differences in approachs of Xen and OS Virtualization. 1193868581 M * paulproteus Surely, dowdle. 1193868602 M * paulproteus This is the kind of thing where you guys have an opinion and pick one, and either position is reasonable. 1193868648 M * dowdle paulproteus: I had a guy on an openvz IRC channel ask how he could somehow hardcode the nameserver definitions such that every VPS had the same info... and I had to question just how hard it was to include "--nameserver nnn.nnn.nnn.nnn" in the creation command line. 1193868825 M * micah or use configuration management tools such as puppet... 1193868879 M * dowdle micah: If you are already using puppet, ok maybe... but if not, getting from 0 to 60 with puppet I'm sure takes much more effort than copy/paste of --nameserver {value} 1193868934 M * micah that is true, but if you start to really engage with vservers you will find the amount of server configurations to exponentially increase 1193868934 M * daniel_hozac with util-vserver, you could add such an option to /etc/vservers/.defaults/apps/build/options ;) 1193869042 M * dowdle I'd be interested in reading the discussions that lead upto the change from a single config file to a directory structure. 1193869086 M * daniel_hozac it's easier to use programmatically. 1193869139 M * dowdle I need to become a program someday. 1193869258 M * daniel_hozac it also becomes easier to express more complex data structures. 1193869274 M * daniel_hozac e.g. the scheduler settings would suck ass in a flat-file. 1193869482 Q * duckx Remote host closed the connection 1193869555 N * BobR_afk BobR 1193869926 M * dowdle daniel_hozac: Not if you forced XML on everyone... which I'm glad you didn't do. 1193869956 M * daniel_hozac XML's not that bad... 1193869960 M * daniel_hozac ;) 1193870122 N * BobR BobR_afk 1193870123 M * daniel_hozac (i only tell myself that right now so i don't get disgusted...) 1193870235 J * anna30 ~anna30@ANantes-257-1-94-46.w90-25.abo.wanadoo.fr 1193870323 J * yarihm ~yarihm@84-75-102-236.dclient.hispeed.ch 1193870326 Q * anna30 1193870427 N * Bertl_oO Bertl 1193870431 J * mire ~mire@15-171-222-85.adsl.verat.net 1193870475 M * Bertl yeah, we should definitely switch to XML, I'm sure that way we can manage to have more config data than guest data :) 1193870490 J * comfrey ~comfrey@66.206.87.117 1193870521 M * daniel_hozac :) 1193870558 M * daniel_hozac libvirt uses XML... ;) 1193870582 M * mnemoc does libvirt support vserver? 1193870587 M * daniel_hozac soon. 1193870596 M * mnemoc :) 1193870606 M * daniel_hozac https://www.redhat.com/archives/libvir-list/2007-October/msg00273.html 1193870618 M * daniel_hozac (i.e. still work in progress) 1193870776 M * mnemoc :D 1193871227 Q * mire Ping timeout: 480 seconds 1193871261 Q * michal Ping timeout: 480 seconds 1193871610 M * daniel_hozac Bertl: http://people.linux-vserver.org/~dhozac/p/m/testfs-lsxid-fix01.diff 1193871657 M * daniel_hozac test 034 was mysteriously failing because i have a guest with tag 200 :) 1193871694 M * Bertl ah, nice one ... 1193872064 Q * Johnnie Ping timeout: 480 seconds 1193872202 J * fatgoose_ ~samuel@76-10-149-199.dsl.teksavvy.com 1193872385 J * michal ~michal@www.rsbac.org 1193872416 J * aj__ ~aj@p5B23E8F4.dip.t-dialin.net 1193872562 Q * fatgoose Ping timeout: 480 seconds 1193872649 J * Johnnie ~jdlewis@c-67-163-142-234.hsd1.pa.comcast.net 1193873183 Q * bonbons Quit: Leaving 1193873786 Q * meandtheshell Quit: Leaving. 1193874633 M * Yvo good night 1193874640 M * Bertl night Yvo! 1193874761 P * dowdle Until tomorrow. 1193874780 Q * DavidS Quit: Leaving. 1193874792 Q * fs Server closed connection 1193874877 Q * brc Ping timeout: 480 seconds