1234742401 M * pflanze Well let me describe what I want my vserver guests to work like.
1234742430 M * Bertl ah, now we are getting somewhere :)
1234742454 M * pflanze I want them to have an ip "for" localhost. This ip should not be accessible from other vservers, I need to take care of that by using iptables, in vs2.2 and also in vs2.3.
1234742489 M * Bertl not really
1234742490 M * pflanze I want that broken programs using 127.0.0.1 as target address still work. I call this "remapping magic".
1234742494 M * pflanze Not?
1234742514 M * Bertl okay, so you want loopback isolation, fine
1234742526 M * pflanze yes, loopback isolation if that's what you call it.
1234742542 M * Bertl k, what elese?
1234742544 M * Bertl *else
1234742620 M * pflanze Sometimes it's interesting to know what "outgoing ip" (source ip) processes are using, by default; i.e. 0.0.0.0 for outgoing connections. This is "(2)" in my cases list above. 
1234742651 M * pflanze This is what I call "magic two", but it's not magic, it's the normal kernel behaviour to use the first ip usable for that network it finds.
1234742668 M * Bertl okay, that's mostly unrelated to Linux-VServer (i.e. policy routing related)
1234742674 M * pflanze yep, ok
1234742708 M * pflanze Then there is the case where processes are binding to 0.0.0.0 (i.e. "*"), and they should bind to all ip's they've been assigned; this worked in vs2.2 and I expect it will work as is in vs2.3
1234742724 M * pflanze (I've never given that much thought, it just worked)
1234742735 M * Bertl correct
1234742765 M * pflanze Ok.
1234742780 M * Bertl so, for the setup you want, I'd suggest the following:
1234742796 M * Bertl 1) enable auto_lback (config and flag)
1234742813 M * Bertl 2) disable single IP special casing
1234742830 M * Bertl 3) assign a single IP (the public one) to the guest
1234742842 M * pflanze ok. 
1234742844 M * Bertl 4) set your 'localhost' to 127.0.0.1 in the guest
1234742863 M * pflanze One question though, how do I know which 127.a.b.c address was taken?
1234742869 M * pflanze Since I will need that for iptables, right.
1234742895 M * Bertl you won't need iptable setups to keep guests from doing crosschat on 127.x.x.x
1234742921 M * Bertl but you can get that ip from proc or calculate it from the nid
1234742922 M * pflanze ahh, ok back to "yes there is something new which makes those safe":)
1234742942 M * pflanze nah, then it's cool and unnecessary to know the ip.
1234743415 Q * nou Ping timeout: 480 seconds
1234743580 J * nou Chaton@causse.larzac.fr.eu.org
1234743796 M * pflanze So, can I disable single IP special casing without kernel recompilation? (vserver util setting?) I can't see it on the flower page.
1234743851 M * Bertl http://linux-vserver.org/Capabilities_and_Flags (nflags)
1234743885 M * pflanze ok, thanks.
1234744181 Q * cyqu Ping timeout: 480 seconds
1234744464 J * cyqu ~cyqu@193.43.249.169
1234744739 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa
1234747992 Q * cyqu Ping timeout: 480 seconds
1234748454 J * tito ~irc___irc@tito.prolink.org
1234748463 J * cyqu ~cyqu@193.43.249.169
1234748543 M * tito hi i have a problem, i am using kernel 2.6.28.4 with vs2.3.0.36.7. on my vservers, i am unable to ping any host as a non-root user (i had to add NET_RAW cap to allow root to ping).
1234748553 M * tito is it normal behaviour? what can i do about it?
1234748580 M * Bertl well, it is quite normal that unpriviledged users cannot ping
1234748601 M * Bertl i.e. you need to give certain capabilities to ping to work for them
1234748618 M * Bertl (like setting suid or giving a capability)
1234748650 M * tito i checked that ping has suid root
1234748669 M * Bertl using debian?
1234748672 M * tito i wanted nagios to be able to ping
1234748673 M * tito yes
1234748689 M * Bertl then please update util-vserver, as the version in debian is broken
1234748714 M * tito oh ok i will try that then ^^
1234748723 M * tito thanks a lot
1234748752 M * Bertl np
1234748817 M * Bertl and you can remove CAP_NET_RAW when done as well (only makes your guest insecure)
1234751760 M * tito ok will do ^^
1234751773 M * tito bye
1234751776 Q * tito 
1234752291 Q * geb Remote host closed the connection
1234752800 M * Bertl off to bed now ... have a good one everyone!
1234752804 N * Bertl Bertl_zZ
1234753248 J * aj__ ~aj@e180197159.adsl.alicedsl.de
1234753677 Q * derjohn_foo Ping timeout: 480 seconds
1234755616 Q * cyqu Ping timeout: 480 seconds
1234755896 J * cyqu ~cyqu@193.43.249.169
1234757257 J * balbir_ ~balbir@122.172.63.30
1234758646 Q * nenolod Quit: my eyes cannot compute this misery.
1234758662 J * nenolod nenolod@petrie.dereferenced.org
1234759145 J * Aiken ~Aiken@ppp118-208-45-4.lns3.bne1.internode.on.net
1234759421 Q * cyqu Ping timeout: 480 seconds
1234759896 J * cyqu ~cyqu@193.43.249.169
1234763759 Q * balbir_ Ping timeout: 480 seconds
1234764010 Q * SpComb Remote host closed the connection
1234764013 J * SpComb terom@zapotek.paivola.fi
1234767314 J * balbir_ ~balbir@59.145.136.1
1234768996 Q * hparker Quit: Read error: 104 (Peer reset by connection)
1234769036 J * klike mike@no.phear.eu
1234769741 M * klike is there any new vserver+grsec patch for 2.6.28?
1234769882 Q * balbir_ Ping timeout: 480 seconds
1234769967 Q * aj__ Ping timeout: 480 seconds
1234770194 J * kwowt ~quote@pomoc.ircnet.com
1234770196 M * kwowt Bertl_zZ
1234770197 M * kwowt eh
1234770199 M * kwowt asleep
1234770202 M * kwowt anyone else around?:P
1234770903 J * aj__ ~aj@51.42.69.80.in-addr.net-lab.net
1234771074 Q * Aiken Remote host closed the connection
1234771139 J * Aiken ~Aiken@ppp118-208-45-4.lns3.bne1.internode.on.net
1234771311 J * balbir_ ~balbir@59.145.136.1
1234771657 J * ghislainocfs2 ~Ghislain@adsl2.aqueos.com
1234771952 Q * ghislainocfs21 Ping timeout: 480 seconds
1234771959 P * ghislainocfs2 
1234772550 J * harobed ~harobed@pda57-1-82-231-115-1.fbx.proxad.net
1234772772 J * cga ~weechat@62.196.2.6
1234773526 J * doener_ ~doener@87.123.147.255
1234773626 Q * doener Ping timeout: 480 seconds
1234774223 J * ghislainocfs2 ~Ghislain@adsl2.aqueos.com
1234774585 J * friendly ~friendly@ppp121-44-218-114.lns10.mel4.internode.on.net
1234775643 J * esa bip@ip-87-238-2-45.static.adsl.cheapnet.it
1234775699 J * pmenier ~pme@LNeuilly-152-22-72-5.w193-251.abo.wanadoo.fr
1234775752 Q * Aiken Remote host closed the connection
1234775787 J * davidkarban ~david@88.86.104.103
1234775907 J * Aiken ~Aiken@ppp118-208-45-4.lns3.bne1.internode.on.net
1234777096 J * gnuk ~F404ror@pla93-3-82-240-11-251.fbx.proxad.net
1234779107 M * Scurz hello
1234779147 M * Scurz I've changed something in /etc/rsyslog.conf but now, I get this message http://pastebin.fr/3518 ; why ? I've seen this comes from the proc security, right ?
1234779271 N * Bertl_zZ Bertl
1234779275 M * Bertl morning folks!
1234779293 M * Bertl kwowt: why not just ask what you want to ask?
1234779328 Q * friendly Quit: Leaving.
1234779408 M * Bertl Scurz: no idea why rsyslog exits with signal 15 ... you probably need to strace -fF it to find that out
1234779448 M * Scurz yep
1234779521 M * kwowt Bertl: cuz i wanted to ask ya how we did that thing where i could look what u were doing on my machine
1234779534 M * Bertl screen?
1234779690 M * kwowt oh, screen
1234779691 M * kwowt ok
1234779947 J * Slydder1 ~chuck@dslb-088-072-230-006.pools.arcor-ip.net
1234781849 M * Bertl off for a nap ... bbl
1234781872 N * Bertl Bertl_zZ
1234782811 Q * kwowt Ping timeout: 480 seconds
1234784481 Q * Slydder1 Ping timeout: 480 seconds
1234784495 J * JonB ~NoSuchUse@130.227.63.19
1234784539 M * JonB what happens to the keys i press after doing a vserver $name enter ?
1234784554 M * JonB it takes a little while, and the keys i pressed are gone
1234785157 J * Slydder1 ~chuck@dslb-088-074-033-121.pools.arcor-ip.net
1234787250 Q * Aiken Remote host closed the connection
1234788371 M * pmjdebruijn hmmm
1234788390 M * pmjdebruijn I noticed the vserver version number is increasing for 2.6.28 but it isn't for 2.6.27
1234788629 Q * jrdnyquist Quit: Leaving
1234788772 J * geb ~geb@92.140.128.197
1234789495 M * ktwilight pmjdebruijn, IIRC newer vserver version has scheduling which still needs to be ported to .27
1234789762 M * pmjdebruijn ok
1234789916 M * pmjdebruijn :(
1234789930 M * ktwilight :(
1234789940 A * pmjdebruijn thinks it's odd everybody all gung-ho about 2.6.28
1234789947 M * ktwilight think Bertl_zZ is working on it, since .27 will be supported for a long while
1234789950 M * pmjdebruijn 2.6.27 will be long term maintained...
1234789953 M * ktwilight 'xactly
1234789960 M * ktwilight .28 has some nifty stuff though
1234789964 M * pmjdebruijn like?
1234789983 M * ktwilight ext4 is stable, lots of changes in xfs, and some other stuff i dunno and don't care (yet) :)
1234790004 M * JonB how about a filesystem optimized for flash storage
1234790006 M * pmjdebruijn I wouldn't use ext4 in 2.6.28 anyways, whether or not they're calling it stable
1234790010 M * ktwilight JonB, ah, that too
1234790018 M * ktwilight http://kernelnewbies.org/Linux_2_6_28 <- full list pmjdebruijn
1234790019 M * pmjdebruijn JonB: how's it called?
1234790037 M * JonB ktwilight: one that does not try to make it's own wear level algorithm?
1234790053 M * JonB maybe i shiould have said one optimized for SSD disks
1234790060 M * ktwilight optimised for ssd
1234790062 M * pmjdebruijn JonB: how is it called, I don't see it that quickly
1234790070 A * pmjdebruijn doesn
1234790071 M * JonB i dont know
1234790081 M * JonB i was kind of asking if there was such a thing
1234790086 M * pmjdebruijn probably not
1234790108 M * ktwilight ah, yes, there is. it's actually been released since .27 http://kernelnewbies.org/Linux_2_6_27#head-b8ec452c4a02e08d68deeba6f471680e15e42019
1234790116 M * ktwilight UBIFS
1234790152 M * pmjdebruijn UBIFS does not work with block based devices, but pure flash based devices, handled by the MTD subsystem in Linux
1234790159 M * pmjdebruijn it's a JFFS2 successor
1234790165 M * ktwilight yup
1234790169 M * pmjdebruijn it's _not_ for general use... only for embedded-ish stuff
1234790182 M * JonB but SSD emulates block devices
1234790187 M * ktwilight wouldn't it work if you have flash-based storage?
1234790195 M * pmjdebruijn no
1234790201 M * pmjdebruijn MTD != normal block device
1234790213 M * pmjdebruijn JonB: "emulates"?
1234790219 M * pmjdebruijn SSD = block device
1234790230 M * JonB well yes and no
1234790235 A * pmjdebruijn doesn't really get the hype about SSDs yet
1234790245 M * pmjdebruijn it's not proven reliable yet
1234790247 M * ktwilight i don't get anything :)
1234790248 M * JonB but the underlying flash which the SSD uses is not a block device
1234790254 M * JonB pmjdebruijn: access time is fast
1234790261 M * pmjdebruijn JonB: don't care... the hardware abstracts that
1234790284 M * pmjdebruijn JonB: if it's not proven reliable, everything else is irrelevant...
1234790307 M * pmjdebruijn most affordable SSD's are MLC flash... which basically means it's a smart USB stick
1234790322 M * pmjdebruijn SLC flash SSD's are small and expensive
1234790335 M * JonB pmjdebruijn: some MLC flash are pretty fast 
1234790343 M * pmjdebruijn JonB: and unreliable!
1234790363 M * JonB pmjdebruijn: not that unreliable
1234790378 M * pmjdebruijn JonB: I wouldn't put customer data on it
1234790395 M * pmjdebruijn no real storage vendor even has ssd's for sale
1234790399 M * JonB i would put my own data on them
1234790405 M * pmjdebruijn JonB: I wouldn't
1234790409 M * JonB is sun a real storage vendor?
1234790424 M * pmjdebruijn does Sun offer SSD's in it's enterprise storage products?
1234790430 M * JonB yes it does
1234790461 M * JonB does sun offer anything which is not enterprise stuff?
1234791133 M * pmjdebruijn JonB: link?
1234791237 A * ard thought that with MLC you have to do the same kind of error correction as on harddisk
1234791253 M * ard keeping in mind that with MLC the failure rate is slightly higher
1234791254 M * pmjdebruijn error correction isn't directly related to SLC/MLC as far as I know
1234791272 M * pmjdebruijn ard: SLC lasts 10x as long as MLC according to most specs
1234791283 M * ard actually reading the MLC makes it flip bits in adjacent pages
1234791302 M * ard or better: reading can flip bits in adjacent pages
1234791312 M * pmjdebruijn sounds scarry
1234791316 M * ard that's why I prefer nand-flash with ubifs
1234791332 M * pmjdebruijn ard: where do you buy 500GB nand-flash with mtd?
1234791336 M * ard it's not that scary... you have OOB data to store your ecc
1234791370 M * ard Heheh... /me only has 2G in his epc 700
1234791385 A * pmjdebruijn is talking about storage arrays
1234791390 M * ard :-)
1234791403 A * ard was just dropping by and reading only the last few lines ;-)
1234791447 M * ard but you're right if you say that MLC is unreliable, that's why it needs real big ECC's
1234791459 M * ard which the SSD should do for you
1234791490 M * ktwilight speaking of which, anyone tried out BadRAM? supposed to simulate ECC on the kernel level
1234791512 A * ard not yet
1234791526 M * ard I am just destroying the flash in real life :-)
1234791540 M * ard If the flash dies, the netbook can be scrapped
1234791547 M * ktwilight ::)
1234791568 M * ard the netbook was available in certain stores for 90 euro's :-)
1234791614 M * ktwilight :O that's real cheap!
1234791621 M * ktwilight which part of EU?
1234791621 M * pmjdebruijn ktwilight: you want to simulate ecc errors?
1234791669 M * ktwilight pmjdebruijn, no, i mean simulate correction.
1234791725 M * ard ktwilight : mediamarkt in the netherlands
1234791742 M * ktwilight mediamarkt in belgium sucks then :/
1234791790 M * pmjdebruijn ktwilight: what does badram have to do with that? badram detected to writing, and reading back if I'm not mistaken...
1234791794 J * saulus ~saulus@c135005.adsl.hansenet.de
1234791814 M * ktwilight pmjdebruijn, doesn't badram detect bad ram sectors and not use those?
1234791869 Q * esa Read error: Connection reset by peer
1234791872 M * pmjdebruijn not dynamically I think
1234791878 J * esa bip@ip-87-238-2-45.static.adsl.cheapnet.it
1234791882 M * pmjdebruijn you use memtest to see which sectors are broken... and avoid those
1234791883 M * pmjdebruijn anyawy
1234791894 M * ktwilight o :/
1234791894 M * pmjdebruijn running a server with badram is very very very very bad practice
1234791923 M * ktwilight of course :)
1234792074 M * ard ktwilight : you can always buy the $199 version with build in wifi on linux-handhelds.com :-)
1234792090 M * ard That's also the company that sponsored me for doing a 2.6 kernel port
1234792145 M * ktwilight sweet
1234792228 A * ard was actually ruining his epc 700 when trying to solder the wifi inside the casing
1234792266 Q * trippeh Ping timeout: 480 seconds
1234793050 M * JonB pmjdebruijn: http://www.sun.com/storage/disk_systems/unified_storage/7410/specs.xml
1234793062 M * JonB pmjdebruijn: Write Flash Accelerator option (write-optimized SSD) 
1234793482 M * pmjdebruijn that's not a full SSD array
1234793624 M * JonB i agree
1234793632 M * JonB but it does use SSD for storage
1234793643 M * JonB and i would say that sun only does enterprise stuff
1234793645 M * pmjdebruijn for _some_ storage
1234793669 M * pmjdebruijn looks like an oversized write cache
1234793697 M * JonB which will still get ALL the writes
1234793703 M * JonB meaning it will be used
1234793710 M * JonB meaning it will be worn out
1234793827 M * pmjdebruijn anyway
1234793839 M * pmjdebruijn I wouldn't invest in such stuff, at least until 2 or 3 years later...
1234793928 M * JonB ok
1234794039 M * pmjdebruijn storage is probably the only area where you absolutely do not want to be adventurous...
1234794062 M * JonB i agree
1234794069 M * JonB but i dont mind risking my own data
1234794115 M * JonB maybe because the value is next to nothing
1234794274 J * ghislainocfs21 ~Ghislain@adsl2.aqueos.com
1234794477 Q * ghislainocfs2 Ping timeout: 480 seconds
1234795071 Q * JonB Ping timeout: 480 seconds
1234795149 J * ensc_ ~irc-ensc@p57AA747B.dip.t-dialin.net
1234795214 N * ensc Guest301
1234795215 N * ensc_ ensc
1234795242 Q * Supaplex synthon.oftc.net resistance.oftc.net
1234795242 Q * awk synthon.oftc.net resistance.oftc.net
1234795250 J * Supaplex ~supaplex@166.70.62.193
1234795250 J * awk ~awk@security.web.za
1234795256 Q * Guest301 Ping timeout: 480 seconds
1234795456 Q * daniel_hozac Remote host closed the connection
1234795498 Q * klike Remote host closed the connection
1234795745 J * daniel_hozac ~daniel@2002:5043:693::102
1234795789 Q * balbir_ Ping timeout: 480 seconds
1234795828 J * ghislainocfs2 ~Ghislain@adsl2.aqueos.com
1234795833 Q * ghislainocfs2 Read error: Connection reset by peer
1234796077 N * Bertl_zZ Bertl_oO
1234796107 Q * daniel_hozac Remote host closed the connection
1234796137 Q * ghislainocfs21 Ping timeout: 480 seconds
1234796341 J * klike mike@no.phear.eu
1234796358 J * daniel_hozac ~daniel@2002:5043:693::102
1234796761 J * ghislainocfs2 ~Ghislain@adsl2.aqueos.com
1234796800 J * trippeh atomt@uff.ugh.no
1234796859 Q * daniel_hozac Remote host closed the connection
1234796877 J * daniel_hozac ~daniel@2002:5043:693::102
1234796952 Q * klike Remote host closed the connection
1234797015 J * klike mike@no.phear.eu
1234797178 Q * daniel_hozac Remote host closed the connection
1234797362 J * ghislainocfs21 ~Ghislain@LPuteaux-151-41-11-129.w217-128.abo.wanadoo.fr
1234797503 J * daniel_hozac ~daniel@2002:5043:693::102
1234797503 Q * daniel_hozac Remote host closed the connection
1234797520 Q * ghislainocfs21 
1234797538 J * ghislainocfs21 ~Ghislain@LPuteaux-151-41-11-129.w217-128.abo.wanadoo.fr
1234797571 Q * ghislainocfs2 Ping timeout: 480 seconds
1234797773 J * Fitzdsl c129def7@webchat.mibbit.com
1234797783 M * Fitzdsl hi everybody
1234797793 M * pmjdebruijn lo
1234797797 M * Fitzdsl I need to resize the /tmp of a guest
1234797806 M * Fitzdsl i tried to follow the faq
1234797817 M * mnemoc Fitzdsl: use vnamespace and remount it larger
1234797831 M * mnemoc Fitzdsl: or just edit the fstab and restart the guest
1234797870 Q * cga Quit: WeeChat 0.2.6
1234797887 J * cga ~weechat@62.196.2.6
1234797916 M * Fitzdsl before i ask a silly question, what is XID, in the vnamespace command ?
1234797949 M * ard de context id or context name (vserver name)
1234797990 M * mnemoc xid is the context id (see vserver-stat) but the tools are so kind to translate the names automaticaly :)
1234797994 M * ard although I must admit that I have problems doing things in another namespace
1234798015 J * daniel_hozac ~daniel@2002:5043:693::102
1234798038 M * Fitzdsl ok, my mistake
1234798041 M * Fitzdsl thx guys
1234798575 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa
1234799102 Q * geb Ping timeout: 480 seconds
1234799612 Q * davidkarban Quit: Ex-Chat
1234799652 J * geb ~geb@92.140.146.128
1234800666 Q * harobed Ping timeout: 480 seconds
1234800756 J * dowdle ~dowdle@scott.coe.montana.edu
1234801230 Q * Fitzdsl Quit: http://www.mibbit.com ajax IRC Client
1234801438 Q * geb Ping timeout: 480 seconds
1234801536 J * JonB ~NoSuchUse@192.38.8.25
1234801914 J * trippeh_ atomt@uff.ugh.no
1234801932 Q * trippeh Read error: No route to host
1234801982 Q * JonB Quit: This computer has gone to sleep
1234802013 J * geb ~geb@92.140.131.241
1234803034 N * Bertl_oO Bertl
1234803101 M * Bertl ard: how so? (note: context != namespace)
1234803406 J * BARONE ~TuttoIRC@87.13.163.240
1234803425 P * BARONE 
1234804113 J * bonbons ~bonbons@2001:960:7ab:0:2c0:9fff:fe2d:39d
1234804116 Q * nou Ping timeout: 480 seconds
1234804514 Q * hparker Quit: Read error: 104 (Peer reset by connection)
1234804701 J * hparker ~hparker@2001:470:1f0f:32c:215:f2ff:fe60:79d4
1234805067 Q * cyqu Ping timeout: 480 seconds
1234805244 J * JonB ~NoSuchUse@77.75.164.169
1234805568 J * cyqu ~cyqu@193.43.249.169
1234805891 Q * bragon Quit: leaving
1234806369 Q * hparker Quit: Quit
1234806432 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa
1234806542 J * trippeh atomt@uff.ugh.no
1234806543 Q * trippeh 
1234806608 J * bragon ~Alex@geekshell.ipv6.geeknode.org
1234806899 N * pmenier pmenier_off
1234806942 Q * esa Ping timeout: 480 seconds
1234807469 Q * cga Quit: WeeChat 0.2.6
1234808348 Q * geb Remote host closed the connection
1234808498 J * hijacker ~hijacker@87-126-142-51.btc-net.bg
1234808863 J * balbir_ ~balbir@122.172.57.139
1234809351 Q * JonB Quit: This computer has gone to sleep
1234810952 J * esa bip@ip-87-238-2-45.static.adsl.cheapnet.it
1234811177 J * ghislainocfs2 ~Ghislain@LPuteaux-151-41-11-129.w217-128.abo.wanadoo.fr
1234811341 Q * ghislainocfs21 Ping timeout: 480 seconds
1234811772 Q * cyqu Ping timeout: 480 seconds
1234811799 Q * tam Remote host closed the connection
1234811813 J * tam ~tam@gw.nettam.com
1234814285 J * JonB ~NoSuchUse@77.75.164.169
1234814321 Q * gnuk Quit: NoFeature
1234814968 Q * balbir_ Read error: Connection reset by peer
1234816828 J * hipahyl ~hipahyl@193.43.249.169
1234817627 Q * Slydder1 Ping timeout: 480 seconds
1234818171 J * cga ~weechat@94.36.93.49
1234818319 J * Slydder1 ~chuck@dslb-088-072-252-083.pools.arcor-ip.net
1234818789 J * _markus__ ~chatzilla@chello084112136139.36.11.vie.surfer.at
1234818793 P * independence 
1234818795 M * _markus__ hi
1234818798 M * JonB hi
1234818843 M * _markus__ I've enabled SINGLE_IP (accidentally, it seems) in my kernel. I would like to disable this behavior. Besides recompiling, is there a way to disable it during runtime? Some configuration somewhere?
1234818906 M * Bertl http://linux-vserver.org/Capabilities_and_Flags (check nflags)
1234818957 J * harobed ~harobed@arl57-1-82-231-110-14.fbx.proxad.net
1234819018 M * _markus__ Ah, yes, I see. I came over this but wasn't sure ... In my vservers I've no "nflags" file, so I guess due my kernel it's enabled. How would I've to modify/create the file to only disable SINGLE_IP?
1234819292 Q * JonB Quit: Leaving
1234819617 Q * harobed Ping timeout: 480 seconds
1234819648 Q * cga Quit: WeeChat 0.2.6
1234819889 J * JonB ~NoSuchUse@77.75.164.169
1234820075 M * Bertl echo ~single_ip >/etc/vservers/<guest>/nflags
1234820235 Q * bonbons Quit: Leaving
1234820451 M * _markus__ , . o O (got it)
1234820455 M * _markus__ thx :-)
1234820494 M * _markus__ Bertl: this effictively means, given the kernel options SINGLE_IP=y, it is by default on and by default otherwise and can be managed with this flag; right?
1234820797 J * cga ~weechat@94.36.93.49
1234821019 M * ard Bertl : mounting stuff within a vnamespace doesn't show up in the running vserver, or trying to umount /tmp
1234821644 M * Bertl ard: hmm?
1234821672 M * Bertl _markus__: the kernel option selects the default, yes
1234821706 M * Bertl (note that it is automagically turned off when you have more than one IP assigned
1234821757 Q * JonB Quit: Leaving
1234822058 M * _markus__ Bertl: no I completly understand, thank you very much!
1234822254 M * _markus__ now
1234822260 M * _markus__ (damn it's too late)
1234822520 J * mib_sk4aoi3p 5210b53a@webchat.mibbit.com
1234822614 M * _markus__ Btw, just out of curiosity: there hasn't been a new release for quite some time. On the other, there's nothing I'm missing anyway. Are the technical / roadmap reasons for the stall, or is it just that no one (bertl? :) has time right now?
1234822730 P * mib_sk4aoi3p 
1234822737 J * nou Chaton@causse.larzac.fr.eu.org
1234822985 Q * hijacker Quit: Leaving
1234823176 A * ard will check it out again tomorrow
1234823186 A * ard must sleep
1234823196 M * ard stupid working hours
1234823360 Q * infowolfe Remote host closed the connection
1234823528 Q * cga Quit: WeeChat 0.2.6
1234823890 Q * FloodServ synthon.oftc.net services.oftc.net
1234823947 Q * zbyniu Ping timeout: 480 seconds
1234824145 J * infowolfe ~infowolfe@c-76-105-242-186.hsd1.or.comcast.net
1234824334 J * FloodServ services@services.oftc.net
1234824479 Q * _markus__ Quit: ChatZilla 0.9.84 [Firefox 3.0.6/2009011913]
1234824765 J * Aiken ~Aiken@ppp118-208-45-4.lns3.bne1.internode.on.net
1234825591 N * ensc Guest10
1234825601 J * ensc ~irc-ensc@p57AA747B.dip.t-dialin.net
1234825711 Q * Guest10 Ping timeout: 480 seconds
1234826317 J * emcepe ~mcp@wolk-project.de
1234826317 Q * mcp Read error: Connection reset by peer
1234826323 N * emcepe mcp
1234826453 Q * Aiken Remote host closed the connection
1234826476 J * Aiken ~Aiken@ppp118-208-45-4.lns3.bne1.internode.on.net
1234827756 J * saulus_ ~saulus@d003189.adsl.hansenet.de
1234827849 J * geb ~geb@AOrleans-253-1-60-202.w92-140.abo.wanadoo.fr
1234827863 Q * saulus Ping timeout: 480 seconds
1234827891 M * geb hi
1234828080 M * Bertl hi