1211328217 Q * dowdle Remote host closed the connection 1211329449 Q * SpComb Ping timeout: 480 seconds 1211331869 J * doener ~doener@i577B9A75.versanet.de 1211331976 Q * doener_ Ping timeout: 480 seconds 1211334614 Q * balbir Ping timeout: 480 seconds 1211343888 J * cryptronic ~oli@p54A3B62F.dip0.t-ipconnect.de 1211345869 J * sharkjaw ~gab@64.28.12.166 1211346154 Q * cryptronic Quit: Leaving. 1211347842 J * Slydder ~chuck@194.59.17.53 1211349401 Q * hparker Quit: g'nite 1211350514 Q * nkukard Quit: Leaving 1211350563 J * nkukard ~nkukard@196.212.73.74 1211352271 Q * Slydder Remote host closed the connection 1211352460 J * Slydder ~chuck@194.59.17.53 1211353203 J * dna ~dna@6-225-dsl.kielnet.net 1211353251 J * rgl ~rgl@bl8-141-81.dsl.telepac.pt 1211353597 A * rgl waves 1211353736 Q * Slydder Remote host closed the connection 1211353941 J * eSa| ~kvirc@ip-87-238-2-45.static.adsl.cheapnet.it 1211353941 Q * eSa| Killed (charon.oftc.net (Nick collision (new))) 1211353984 J * eSa| ~kvirc@ip-87-238-2-45.static.adsl.cheapnet.it 1211353984 J * _eSa|_ ~kvirc@ip-87-238-2-45.static.adsl.cheapnet.it 1211354081 Q * _eSa|_ 1211354308 J * Slydder ~chuck@194.59.17.53 1211355356 N * DoberMann[ZZZzzz] DoberMann 1211355474 J * jsambrook ~jsambrook@aelfric.plus.com 1211356121 J * DavidS ~david@p4FCC201B.dip0.t-ipconnect.de 1211356642 Q * Slydder Read error: Connection reset by peer 1211356765 J * Slydder ~chuck@194.59.17.53 1211356778 Q * Slydder Remote host closed the connection 1211357622 J * ktwilight_ ~ktwilight@164.71-66-87.adsl-dyn.isp.belgacom.be 1211358004 Q * ktwilight Ping timeout: 480 seconds 1211358168 J * ktwilight ~ktwilight@158.73-66-87.adsl-dyn.isp.belgacom.be 1211358436 Q * Genghis Ping timeout: 480 seconds 1211358584 Q * ktwilight_ Ping timeout: 480 seconds 1211358888 J * Slydder ~chuck@194.59.17.53 1211360595 J * esa ~esa@ip-87-238-2-45.static.adsl.cheapnet.it 1211360606 Q * esa` Ping timeout: 480 seconds 1211360614 Q * eSa| Ping timeout: 480 seconds 1211360697 Q * Slydder Quit: Leaving. 1211360757 J * ktwilight_ ~ktwilight@105.115-66-87.adsl-dyn.isp.belgacom.be 1211360812 Q * ktwilight Read error: Connection reset by peer 1211360973 J * Slydder ~chuck@194.59.17.53 1211361056 J * kir ~kir@swsoft-msk-nat.sw.ru 1211361110 J * Genghis ~Genghis@got.debian-inside.com 1211361149 N * Genghis Guest67 1211361188 J * eSa| ~kvirc@ip-87-238-2-45.static.adsl.cheapnet.it 1211361241 N * Guest67 Genghis 1211361894 Q * Slydder Quit: Leaving. 1211362085 J * Slydder ~chuck@194.59.17.53 1211362105 M * pmjdebruijn lo 1211362114 M * pmjdebruijn I'm going to enforce a RSS limit 1211362125 M * pmjdebruijn I'm determining what it realistically should be 1211362140 M * pmjdebruijn vserver-stat gives me this 1211362142 M * pmjdebruijn 1904 118 655.1M 266.3M 1h01m17 53m42s27 4d19h14 1211362155 M * yang pmjdebruijn: you can set it to any desired value 1211362174 M * pmjdebruijn vlimit -c 1904 -rss 300000 1211362205 M * pmjdebruijn should prevent the RSS from going above 300.0M right? 1211362211 M * pmjdebruijn I mean, vlimit works with pages 1211362226 M * pmjdebruijn does vserver-stat also should pages? or does vserver-stat display megabytes 1211362434 M * pmjdebruijn s/should/display/ 1211362510 J * ktwilight ~ktwilight@224.79-66-87.adsl-dyn.isp.belgacom.be 1211362565 M * pmjdebruijn or should i set vlimit -c 1904 -rss 75000 ? 1211362767 M * pmjdebruijn so basically I'm trying to understand vserver-stat 1211362835 M * pmjdebruijn does 266.3M mean 266300 pages, ergo 1040megabyte? 1211362879 P * fanto666 1211362893 M * pmjdebruijn or does 266.3M mean 266.3megayte, ergo 68172 pages 1211362946 Q * ktwilight_ Ping timeout: 480 seconds 1211362972 M * ard I thought vlimit was in pages 1211362981 A * ard is not sure 1211362985 M * pmjdebruijn yes it is 1211362990 M * pmjdebruijn but what does vserver-stat display? 1211362998 M * ard Eh, bytes 1211363054 M * pmjdebruijn so 266.3M RSS mean 266.3megaytes, thus 68172 pages? 1211363062 M * ard I guess so :-) 1211363076 M * ard That's at least how I am graphing it :-) 1211363113 M * ard you can see this kind of info als in /proc/virtual I thought 1211363120 M * pmjdebruijn I'm have a look 1211363155 M * ard /proc/virtual//limit I guess 1211363210 M * ard Heheh.... 1211363226 M * ard I hacked vserver-stat for munin, and I just could have awked it :-( 1211363629 Q * Slydder Quit: Leaving. 1211363802 J * Slydder ~chuck@194.59.17.53 1211366711 M * nkukard hi guys, could you point me at a document describing rsyincing/copying/backingup vservers? 1211366719 M * nkukard ie. the order in which to copy the files and what i need to copy 1211366990 M * ard if everything is down: just rsync /var/lib/vservers/ and /etc/vservers/ 1211367008 M * ard make sure you don't follow symlinks, and use --numeric-ids 1211367169 M * ard it will copy anything you need... 1211367494 Q * phedny_ Remote host closed the connection 1211367962 M * nkukard wow 1211367964 M * nkukard thanks ard 1211368183 Q * Slydder Remote host closed the connection 1211368388 J * Slydder ~chuck@194.59.17.53 1211368624 Q * hijacker Read error: Connection reset by peer 1211368828 N * phedny Guest75 1211368834 J * phedny ~mark@phedny.vps.van-cuijk.nl 1211368929 N * Bertl_zZ Bertl 1211368934 M * Bertl morning folks! 1211368958 J * hijacker ~hijacker@213.91.163.5 1211369039 Q * sharkjaw Ping timeout: 480 seconds 1211369060 J * sharkjaw ~gab@64.28.12.166 1211369268 Q * hijacker Remote host closed the connection 1211369646 J * friendly ~friendly@ppp121-44-194-142.lns3.mel4.internode.on.net 1211369995 M * fb Bertl: morning :) 1211370011 M * fb Bertl: any ideas about this netstat issue? 1211370088 M * Bertl which is? 1211370432 J * hijacker ~hijacker@213.91.163.5 1211370583 Q * Slydder Remote host closed the connection 1211370608 M * fb Bertl: give me two moments, i prepare some pastes 1211370625 M * Bertl np, take your time, I have to run now .. but should be back in an hour or so 1211370636 N * Bertl Bertl_oO 1211370639 M * Bertl_oO okay, bbl 1211370777 Q * hijacker Remote host closed the connection 1211370815 J * Slydder ~chuck@194.59.17.53 1211371142 J * hijacker ~hijacker@213.91.163.5 1211371344 M * fb Bertl_oO: http://paste.linux-vserver.org/12119 1211371609 Q * Slydder Quit: Leaving. 1211372117 J * Slydder ~chuck@194.59.17.53 1211372172 J * ema ~ema@rtfm.galliera.it 1211372300 Q * ema 1211372378 J * ema ~ema@rtfm.galliera.it 1211372554 Q * ema 1211372705 J * SpComb terom@zapotek.paivola.fi 1211373310 J * pmenier ~pme@LNeuilly-152-22-72-5.w193-251.abo.wanadoo.fr 1211373999 Q * friendly Quit: Leaving. 1211374302 M * daniel_hozac fb: you were using grsec, right? 1211374421 Q * Aiken Remote host closed the connection 1211374687 N * Bertl_oO Bertl 1211374689 M * Bertl back now 1211374736 M * Bertl fb: what kernel/patches? 1211374908 M * fb daniel_hozac: yes 1211374915 Q * Slydder Read error: Connection reset by peer 1211374922 M * fb Bertl: 2.6.22.19-c3-2-grsec2.1.11-ipv6-vs2.2.0.6 1211374958 M * daniel_hozac if you can reproduce without grsec, let us know. 1211374964 M * Bertl hmm, could you try with a mainline patch please? 1211374972 M * fb (now i have to leave for an hour or so) 1211375017 J * Slydder ~chuck@194.59.17.53 1211375701 Q * sharkjaw Remote host closed the connection 1211376482 M * zbyniu re 1211376504 M * zbyniu Bertl, daniel_hozac: i have small patch for you :) 1211376507 M * zbyniu http://zz.iapt.pl/delta-cap_context_in_selinux.diff 1211376642 J * hparker ~hparker@linux.homershut.net 1211377821 N * Guest75 phedny_ 1211378252 Q * Slydder Quit: Leaving. 1211378721 Q * daniel_hozac Remote host closed the connection 1211379409 J * ema ~ema@rtfm.galliera.it 1211379611 J * mick_work ~clamwin@h-74-2-196-226.miatflad.covad.net 1211379698 M * Bertl zbyniu: could you explain what the selinux definitions can be used for? 1211380466 Q * fb Ping timeout: 480 seconds 1211380594 Q * kir Quit: Leaving. 1211380655 J * dowdle ~dowdle@scott.coe.montana.edu 1211381028 J * fb fback@red.fback.net 1211382110 J * balbir ~balbir@122.167.194.182 1211382819 Q * Wonka Remote host closed the connection 1211383186 J * Wonka produziert@chaos.in-kiel.de 1211383478 M * Wonka http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=456996 hit me... 1211383805 M * Bertl lol 1211384202 M * zbyniu Bertl: for allow vserver commands to use CAP_CONTEXT 1211384263 M * zbyniu w/o this it will be denied and logged as use unknown cap afair 1211384275 M * Bertl i.c. 1211384392 M * Bertl okay, will add that to the next patch then 1211384421 J * mrfree ~mrfree@host1-89-static.40-88-b.business.telecomitalia.it 1211384471 M * FaUl Wonka: yea, i could just hit ctrl-c the last time before more then one vserver was shut down 1211384498 M * FaUl that "shutting down stuff" thing should really not be 1211384510 M * zbyniu Bertl: did you create fix for sparc or i have to make it myself? ;) 1211384535 M * Bertl well, I'd appreciate a patch there, no question 1211384579 M * zbyniu ok 1211384994 Q * balbir Ping timeout: 480 seconds 1211385563 M * openblast a silly question: does anyone use kde4 inside a vserver? i have a strange problem there with the http kioslave, but its probably a kde bug 1211385661 J * balbir ~balbir@122.167.203.215 1211385680 M * Bertl openblast: do you run kde inside the guest, or do you run the entire X server there? 1211385715 M * openblast no i run it inside a guest and use freenx to connect there from my host xserver 1211385934 M * Bertl i.c. and what exactly is the problem? i.e. what messages do you see, what doesn't work? 1211386003 M * openblast ok, the kioslaves somehow can only talk to the network very slow... 300-500bytes/s 1211386017 M * openblast i tried several other things, as firefox and ping.. works fine 1211386053 M * openblast and i got that with 2 guests, but ok on the same host 1211386060 M * openblast perhaps i will try that again on another host 1211386122 M * Bertl hmm, double check that your guest has a proper resolv.conf and no strange proxy or so set 1211386148 M * openblast ok i will do that now 1211386152 M * Bertl i.e. that resolv.conf looks similar to the host, and no strangely different proxy settings are in the environment 1211386202 M * openblast hm 1211386204 M * openblast frickel / # printenv | grep HTTP 1211386204 M * openblast HTTP_PROXY= 1211386209 M * openblast is this a problem? 1211386221 M * openblast on the host the HTTP_PROXY var is undefined 1211386266 J * searme4 ~pedro@195-23-123-25.net.novis.pt 1211386288 M * Bertl welcome searme4! 1211386299 M * Bertl openblast: shouldn't be ... but you can 'unset' it 1211386300 M * searme4 hey there 1211386300 M * sid3windr openblast: empty should not be a problem 1211386313 M * openblast hm ok 1211386324 M * openblast i unset it... the bug still occurs 1211386334 M * searme4 anyone knows what these constant messages on syslog mean: kernel: vxW: [�ps�,27053:#102|102|0] did lookup hidden ffff8100caace050[#0,2] �/dev/pts/0�. 1211386334 M * openblast nameserver is ok 1211386355 M * Bertl openblast: also a 'tcpdump -vvnei ethX host ' might help 1211386379 M * openblast ok ill try that 1211386395 M * Bertl searme4: it means that your guest (#102) process (ps) did try to access /dev/pts/0, which does belong to the host 1211386409 M * searme4 ohh 1211386411 J * bonbons ~bonbons@2001:960:7ab:0:2c0:9fff:fe2d:39d 1211386415 M * Bertl searme4: this could easily be cause by old util-vserver entering a guest :) 1211386437 M * searme4 hmm im using 2.3 now, but kept util-vserver from etch 1211386464 M * searme4 maybe started happening when i switched to 2.3 1211386466 M * Bertl you might want to grab those tools from backport 1211386473 M * Bertl +s 1211386684 M * searme4 oh im gonna try 1211386685 M * searme4 thanks 1211386703 M * searme4 ive used from backports when trying ipv6, but didnt now 1211387586 M * openblast ah Bertl i got something... if i use https it works flawlessly(i tried in konqueror) 1211387600 M * openblast but if i try http this happens: http://rafb.net/p/AIsYEG59.html 1211387604 M * openblast i tried www.ccc.de 1211387738 M * openblast do you have an idea what could cause the bad udp checksum? 1211388008 J * larsivi ~larsivi@144.84-48-50.nextgentel.com 1211388088 M * openblast oh sorry! i have to leave... ill catch up later :) 1211388152 Q * larsivi 1211388227 J * larsivi ~larsivi@144.84-48-50.nextgentel.com 1211388744 M * Bertl openblast: the bad checksums are from checksum offloading 1211389197 Q * pmenier Quit: Konversation terminated! 1211390911 J * jmcaricand jm@177.28.193-77.rev.gaoland.net 1211391115 M * wp anyone who knows where i can grab a pure-ftpd dbeian package without CAP from ? 1211391213 Q * mrfree Quit: Leaving 1211391220 J * fatgoose ~samuel@76-10-149-199.dsl.teksavvy.com 1211391267 M * Bertl wp: hmm, why do you need one? 1211391267 M * jmcaricand wp: You can rebuid the package 1211391305 M * wp jmcaricand: im not that familiar yet with apt :) 1211391339 M * wp Bertl: because pure-ftpd doesnt work in a vserver, it misses capabilities according to some posts :) 1211391431 M * Bertl wp: that should be solved in all recent kernels, i.e. 2.2.x and 2.3.x 1211391447 M * wp hmmm ok 1211391455 M * wp i dont get any logging out of it when i try to start it 1211391504 M * Bertl so it just fails or so? 1211391552 M * Bertl maybe 'strace -fF -o ftp.log ...' could help? 1211391620 M * wp 4782 capset(0x19980330, 0, {CAP_CHOWN|CAP_DAC_READ_SEARCH|CAP_SETGID|CAP_SETUID|CAP_NET_BIND_SERVICE|CAP_NET_ADMIN|CAP_SYS_CHROOT|CAP_SYS_NICE, CAP_CHOWN|CAP_DAC_READ_SEARCH|CAP_SETGID|CAP_SETUID|CAP_NET_BIND_SERVICE|CAP_NET_ADMIN|CAP_S 1211391625 M * wp YS_CHROOT|CAP_SYS_NICE, 0}) = -1 EPERM (Operation not permitted) 1211391628 M * wp i think it dies on that one? 1211391640 M * Bertl could be, what kernel do you use on the host? 1211391649 M * wp 2.6.18-6-vserver-amd64 1211391660 M * Bertl that's from debian stable? 1211391664 M * wp yes, Etch 1211391701 M * Bertl micah: do you know what vserver version that uses? 1211391896 M * wp looks like he's not here :) 1211392231 M * jmcaricand wp: So try to rebuid your package. It's very simple 1211392256 M * wp i dont know if i fix it with the above message? 1211392314 M * jmcaricand First : cd /tmp; apt-get source pure-ftpd; apt-get build-dep pure-ftpd 1211392392 M * jmcaricand wp: cd /tmp/pure-ftpd-1.0.21 1211392510 M * jmcaricand Edit debian/rules and change cfgflags variable to add --without-capabilities option 1211392517 M * wp ok 1211392571 M * jmcaricand wp: you can rebuild your package with dpkg-buildpackage 1211392625 M * wp jmcaricand: thanks, ill try! :) 1211392898 Q * marl Quit: Get out of that boring IRC client! It's no good for you. Bersirc 2.2 is your answer! [ http://www.bersirc.org/ - Open Source IRC ] 1211392968 Q * hparker Quit: Read error: 104 (Peer reset by connection) 1211393945 Q * ema Quit: leaving 1211394884 Q * searme4 Quit: Leaving 1211395327 Q * jmcaricand Quit: ERC Version 5.3 (IRC client for Emacs) 1211395646 M * micah Bertl: I *think* its vs2.0.2.2-rc9, but waldi would know for sure because there have been some modifications to it (for security I think) 1211395681 M * Bertl ah, okay, thanks, was what I expected 1211395740 M * micah Bertl: yes, thats right, its that patch, plus some fixes 1211395945 M * Bertl vserver specific fixes? 1211396355 M * openblast Bertl: hi im back... thank you for your help ill ask the kde developers about that 1211396407 Q * bonbons Quit: Leaving 1211396438 M * micah Bertl: yes, like a couple security fixes 1211396464 M * micah Bertl: changelog lists the following: 1211396474 M * micah bugfix/all/vserver/proc-link-security.patch ([SECURITY][vserver] Fix access checks for the links in /proc/$pid.) 1211396487 M * micah CVE-2008-0001 1211396494 M * micah [vserver] Fix overflow in network accounting. (closes: #412132) 1211396499 M * micah [vserver] Fix lock accounting. (closes: #417631) 1211396514 M * micah bugfix/all/vserver/net-mount-fix.patch (Fix mounting of network filesystems with VX_BINARY_MOUNT caps, closes: #418076) 1211396536 M * micah bugfix/all/vserver/cross-context-renice-fix.patch ([SECURITY] Fix a vulnerability that permits renicing processes in other contexts. (closes: #412143), See CVE-2007-0241) 1211396542 M * micah thats all 1211396552 M * micah so 6 changes on top of vs2.0.2.2-rc9 1211398321 M * Bertl okay, thanks, let me mark that for future use 1211398355 M * Bertl -- DEBIAN - KERNEL - 2.6.18-6-vserver 1211399775 Q * DavidS Quit: Leaving. 1211401195 J * Aiken ~james@ppp121-45-230-114.lns1.bne4.internode.on.net 1211401603 M * Hawq hello 1211401607 M * Bertl hey 1211401647 Q * fb Read error: Connection reset by peer 1211401654 J * fb fback@red.fback.net 1211401712 Q * rgl Quit: Saindo 1211401738 M * Hawq I think I'm stuck at debugging my problem :( I can't force kernel to log anything more than I pasted yesterday 1211401781 M * Bertl care to remind me of the kernel version? 1211401794 M * Hawq I tried old version of rpm on host, I tried older util-vserver... no change 1211401798 M * Hawq 2.6.25.4 1211401816 M * Bertl there is a new patch, you might want to try that one 1211401861 M * Hawq 5KB more. maybe it will help :) I'll give it a try 1211401957 M * Hawq btw, grsec for 2.6.25 is broken too :) it doesn't compile on some architectures 1211402055 N * DoberMann DoberMann[PullA] 1211402106 M * zbyniu Hawq: upgrade your patches 1211402136 M * Hawq zbyniu: just started building vserver kernel now :) 1211402183 M * zbyniu i mean pax 1211402208 M * Hawq err, I'm too lazy to merge changes from paxguy1 patches :/ 1211402237 M * zbyniu btw, mainline does not compile also on ppc with some options... 1211402244 M * zbyniu use diff3 1211403932 N * DoberMann[PullA] DoberMann 1211404055 J * Piet ~piet@tor.noreply.org 1211404546 Q * fatgoose Quit: fatgoose 1211405556 Q * fb Ping timeout: 480 seconds 1211405923 M * Bertl okay, off to bed for now ... maybe back later 1211405930 N * Bertl Bertl_zZ 1211406166 J * hparker ~hparker@linux.homershut.net 1211407014 Q * larsivi Remote host closed the connection 1211407328 J * dna_ ~dna@6-225-dsl.kielnet.net 1211407710 Q * dna Ping timeout: 480 seconds 1211408124 J * marl ~marl@84.13.35.31 1211408321 M * marl hi folks, i have been using debootstrap to build vservers for a while now, but now debootstrap has been updated to 1.0.9, vserver build no longer removes the unwanted startup scripts, i thought this function was part of vserver-utils, and not debootstrap, does anyone have a list of the services that are actually required to run on a fresh ubuntu/debian guest? (or does anyone have a program that will disable all boot up scripts bar the required ones for a new guest 1211408399 M * Hawq hm. no luck with newer vserver patch on 2.6.25.4, build still doesn't work (same errors and same short debug info) 1211408500 M * Hawq anyway, time to go sleep. g'nite. 1211408519 M * marl note hawq 1211409223 J * docelic ~docelic@78.134.199.11 1211410797 J * mire ~mire@186-169-222-85.adsl.verat.net 1211411610 Q * dna_ Quit: Verlassend 1211411746 Q * dowdle Remote host closed the connection 1211411868 Q * Piet Quit: Piet 1211412525 Q * docelic Quit: http://www.spinlocksolutions.com/ 1211412870 Q * mire Quit: Leaving 1211412988 N * DoberMann DoberMann[ZZZzzz] 1211413352 Q * Linus Quit: I'll Be Back!