1244160199 Q * _gh_ Ping timeout: 480 seconds
1244160238 Q * thierryp Ping timeout: 480 seconds
1244161847 J * jescheng ~jescheng@proxy-sjc-1.cisco.com
1244162018 J * thierryp ~thierry@sah215.atp.nicta.com.au
1244162092 M * jescheng i'm using naddress command to remove ip from vserver. but i'm getting vc_net_remove invalid argument error.
1244162144 M * jescheng vserver: 2.2.0.5 , util-vserver 215, kernel 2.6.22
1244162182 M * jescheng is this function only supported with the ipv6 patch?
1244162250 Q * hparker Quit: Read error: 104 (Peer reset by connection)
1244162275 M * jescheng the command i used is: naddress --nid 2 --remove --ip 2.2.2.2/24
1244162690 Q * FireEgl Quit: Leaving...
1244162821 Q * chun Ping timeout: 480 seconds
1244163071 J * Wonka produziert@chaos.in-kiel.de
1244163721 M * Bertl jescheng: no, it is not supported to remove single IPs at all
1244163751 M * Bertl recent util-vserver handles that by removing all IPs and adding the others back IIRC
1244164940 M * daniel_hozac no, it's using vc_net_remove.
1244164948 M * daniel_hozac --set can be used though.
1244165093 M * jescheng yes, i tried --set. it does work, but it also removes all ip
1244165160 M * jescheng so in the v6 patch, i see that there's some code to remove single ip instead of all. is this planned to be in 2.3?
1244165160 M * daniel_hozac yes.
1244165416 M * jescheng ok. one more question, does the latest 2.3 patch supporting ipv6?
1244165581 M * jescheng (i.e. are all the changes in v6 patch planned to be incorporated into 2.3)
1244165684 J * chun ~sonicvari@158.37.56.5
1244165757 J * imcsk8 ~ichavero@189.155.140.201
1244165778 M * jescheng danilel_hozac: sorry i have to drop off. i'll check back in a bit.
1244166059 Q * derjohn Ping timeout: 480 seconds
1244166213 J * derjohn ~derjohn@80.69.41.3
1244166384 M * Bertl daniel_hozac: there was a repeated request for --bind mounting a file inside a guest (specifically over some proc entries)
1244166406 M * Bertl (just wanted to let you know that there is a demand :)
1244166456 M * Bertl daniel_hozac: so it would be good to implement a simple (single IP) remove in the kernel yes? or do you have other plans? (regarding the vc_net_remove)
1244166481 J * FireEgl Proteus@2001:470:e056:1:4::
1244167028 M * Bertl daniel_hozac: the 'flower page' seems to need an update too .. e.g. the peer entry is not listed there yet
1244167100 M * Bertl jescheng: yes, recent vs2.3 has all the ipv6 stuff
1244167837 Q * ViRUS Remote host closed the connection
1244171029 M * Bertl off to bed now ... have a good one everyone!
1244171035 N * Bertl Bertl_zZ
1244172002 Q * jescheng Remote host closed the connection
1244172012 J * jescheng ~jescheng@proxy-sjc-1.cisco.com
1244172165 Q * allquixotic Read error: Operation timed out
1244173163 Q * nenolod_ Read error: Connection reset by peer
1244173768 J * nenolod nenolod@petrie.dereferenced.org
1244174035 Q * FireEgl Remote host closed the connection
1244174839 J * FireEgl FireEgl@173-16-9-10.client.mchsi.com
1244175962 Q * thermoman Server closed connection
1244175963 J * thermoman ~thermoman@84.201.90.210
1244178620 Q * derjohn_mob Ping timeout: 480 seconds
1244178809 J * net147 ~net147@60-242-179-244.static.tpgi.com.au
1244178920 Q * net147 
1244179164 J * derjohn_mob ~aj@c192219.adsl.hansenet.de
1244180269 Q * balbir Read error: Operation timed out
1244180954 Q * eyck Server closed connection
1244180955 J * eyck XtUnk64C@nat03.nowanet.pl
1244183210 Q * derjohn_mob Ping timeout: 480 seconds
1244184713 Q * imcsk8 Quit: This computer has gone to sleep
1244184792 J * scientes ~scientes@174-21-88-43.tukw.qwest.net
1244184946 J * doener_ ~doener@i59F5600C.versanet.de
1244185047 Q * doener Ping timeout: 480 seconds
1244185114 Q * _nono_ Server closed connection
1244185127 J * _nono_ ~gomes@libation.ircam.fr
1244186401 Q * jescheng Remote host closed the connection
1244186451 J * jescheng ~jescheng@proxy-sjc-1.cisco.com
1244186931 Q * xdr Quit: Lost terminal
1244189699 Q * thierryp Ping timeout: 480 seconds
1244191354 Q * PowerKe Server closed connection
1244191366 J * PowerKe ~tom@d5153A5EC.access.telenet.be
1244192285 N * Bertl_zZ Bertl
1244192290 M * Bertl morning folks!
1244193001 J * gnuk ~F404ror@pla93-3-82-240-11-251.fbx.proxad.net
1244193057 M * Bertl off for now ... bbl
1244193082 N * Bertl Bertl_oO
1244193748 J * BenG ~bengreen@94-169-110-10.cable.ubr22.aztw.blueyonder.co.uk
1244194074 J * kir ~kir@swsoft-msk-nat.sw.ru
1244194410 J * balbir ~balbir@58.69.53.246
1244195978 Q * docelic Read error: Connection reset by peer
1244196054 Q * morrigan Remote host closed the connection
1244196172 J * bragon ~Alexandre@alucard.bragon.info
1244196175 M * bragon Hi
1244196208 M * bragon harrydg: i installed your patch a few month ago : http://people.linux-vserver.org/~harry/patch-2.6.27.15-vs2.3.0.36.4-grsec2.1.12-20090210.diff
1244196216 M * bragon but i have many kernel freeze with him
1244196222 M * bragon many many freeze
1244196233 M * bragon around 15 days uptime my server crash
1244196246 M * bragon i want to upgrade to http://people.linux-vserver.org/~harry/patch-2.6.29.2-vs2.3.0.36.12-grsec2.1.14-20090513.diff
1244196251 M * bragon 1) it is a good idea ?
1244196258 J * derjohn_mob ~aj@tmo-100-88.customers.d1-online.com
1244196268 M * bragon 2) do you know issues with the 2.6.27.15 patch ?
1244196422 Q * balbir Read error: Operation timed out
1244197041 M * BenG <bragon> 1) it is a good idea ?
1244197050 M * BenG why would it not be?
1244198167 M * bragon BenG: it's not stable patch, just patch for testing
1244198172 M * bragon my serveur is in production
1244198187 M * BenG fair enough
1244198211 M * BenG I don't think it'll do you worse than 15 days uptime though!
1244198219 M * bragon true :)
1244198236 M * BenG what's the nature of the crash you get?
1244198244 M * bragon i don't know
1244198248 M * bragon nothing in dmesg !
1244198252 M * bragon nothing in the logs
1244198269 M * bragon nothing on the screen when we would see with a screen
1244198304 N * Bertl_oO Bertl
1244198307 M * Bertl back now ...
1244198311 M * bragon i'm happy to have a APC-reboot ! in order to make hard reboot when it freeze
1244198358 M * Bertl bragon: most issues should be resolved with a recent 2.6.27.x or 2.6.29.x kernel
1244198383 M * Bertl but of course, grsec adds another layer, which might complicate things further
1244198409 M * Bertl i.e. if you upgrade, do not upgrade to an old patch
1244198451 M * bragon Bertl: i'll test with the 2.6.29.2 kernel and the lastest harry's patch
1244198499 M * Bertl better test with 2.6.29.4 and vs2.3.0.36.14 :)
1244198516 M * Bertl or at least add the mainline and Linux-VServer updates/fixes
1244198551 M * Bertl also, having and using a serial console is always a good idea, IMHO
1244198564 M * bragon hum
1244198598 M * bragon i need to have access to another server in the same place
1244198606 M * bragon i'll be possible i guess
1244198647 M * Bertl it is quite easy to daisy-chain machines via serial
1244198673 M * bragon Bertl: the machine is in a datacenter
1244198681 M * Bertl i.e. A-ser0 -> B-ser1, B-ser0 -> C-ser1 ...
1244198702 M * Bertl in our datacenters, serial cables are permitted, YMMV :)
1244198709 M * bragon Bertl: :)
1244198712 M * bragon i must go there
1244198716 M * bragon just that :)
1244198738 M * Bertl yeah, but just once, and to be precise, you should have done so a long time ago :)
1244198769 M * Bertl anyway, it was just a suggestion ... helps tracking down issues if used properly
1244198791 M * bragon it's a good suggestion, and i'll listen it !
1244199259 J * thierryp ~thierry@intern174.lnk.telstra.net
1244200151 M * pmjdebruijn most datacenter permit serial cables to a certain degree
1244200163 M * pmjdebruijn though not all provide console server services
1244200183 M * pmjdebruijn thought it's hard to get a server without IPMI/DRAC/iLO/LOM these days
1244200231 M * Bertl yep, and most IPMI/DRAC/iLO/LOM support at least some broken way to get a serial connection to the machine (which is good :)
1244200642 M * pmjdebruijn huh
1244200646 M * pmjdebruijn with those you don't need serial
1244200659 M * pmjdebruijn most have a Java applet which shows the actual console in realtime
1244200673 M * pmjdebruijn it's not ideal... but certainly good enough for emergencies...
1244200684 M * pmjdebruijn with iLO, a powercycle can be requested via https
1244200731 M * pmjdebruijn my own ancient RiLOE II (which was an add-in board back then), can even take it's own power supply
1244200749 M * Bertl well, those java applets usually suck big time, and also a copy of the text console is quite inferior to a serial connection
1244200750 M * pmjdebruijn besides being fed by PCI (for which the machine has two PSU's anyways)
1244200771 M * pmjdebruijn Bertl: generally it all sucks... but it good enough for emergencies...
1244200802 Q * jescheng Remote host closed the connection
1244200803 M * pmjdebruijn Bertl: anyway, the Java applets work pretty well these days... if you have a proper JRE
1244200810 M * Bertl if text scrolls out of the screen (which usually happens), you've already lost with a text console, but on serial, all can be recorded
1244200816 M * pmjdebruijn true
1244200852 J * jescheng ~jescheng@proxy-sjc-1.cisco.com
1244200865 M * Bertl I prefer VSP via ssh, fortunately most iLO/LOM can do that nowadays (although they often need an update or special config)
1244200953 M * Bertl the whole VGA and remote graphical/text console is the result from 10 years Micro$oft and Personal Computer BIOS nonsense
1244200990 M * Bertl mainframes 10 years ago had better remote support than most server systems nowadays
1244201124 M * fb_ Bertl: nah
1244201144 M * fb_ Bertl: sun's server had terrible serial too ;)
1244201179 M * fb_ Bertl: and this openboot (s)prom...
1244201221 Q * BenG Quit: I Leave
1244201306 Q * blizz Server closed connection
1244201308 J * blizz ~stephan@62.27.20.121
1244201498 J * geb ~geb@43.4.82-79.rev.gaoland.net
1244202511 M * pmjdebruijn Bertl: :)
1244203064 Q * geb Quit: Quitte
1244203074 J * geb ~geb@earth.gebura.eu.org
1244203612 M * Bertl nap attack ... bbl
1244203616 N * Bertl Bertl_zZ
1244204865 J * ktwilight_ ~keliew@69.81-240-81.adsl-dyn.isp.belgacom.be
1244204865 Q * ktwilight_ Remote host closed the connection
1244204985 Q * ktwilight Ping timeout: 480 seconds
1244205156 M * pmjdebruijn silly question...
1244205193 M * pmjdebruijn say, I have filesystems mounts inside a vserver, and I'm shutting down the vserver? will vserver try to cleanly umount them... or does it rely on rc5.d init scripts to do this?
1244205647 J * ktwilight_ ~keliew@69.81-240-81.adsl-dyn.isp.belgacom.be
1244205814 Q * thierryp Quit: ciao folks
1244206346 Q * vasko Server closed connection
1244206347 J * vasko ~vasko@unreal.rainside.sk
1244206347 A * vasko is gone. Gone since Sun Feb 15 13:57:00 2009
1244206353 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa
1244206900 M * geb pmjdebruijn, the better way is to use /etc/vserver/$foo/fstab, it will (u)mount the filesystem automaticly
1244206966 M * geb if you really want mounting fs in the guest you 'll have to edit guest's caps (see http://linux-vserver.org/Capabilities_and_Flags ) but it will reduce the security
1244207606 Q * neofutur Server closed connection
1244207606 J * neofutur ~neofutur@xena.ww7.be
1244208511 T * * http://linux-vserver.org/ |stable 2.2.0.7, devel 2.3.0.34, grsec 2.3.0.36|util-vserver-0.30.215|libvserver-1.0.2|vserver-utils-1.0.3| He who asks a question is a fool for a minute; he who doesn't ask is a fool for a lifetime -- share the gained knowledge on the Wiki, and we forget about the minute.
1244208511 T * ChanServ -
1244208547 M * geb do you have an example ?
1244208558 M * geb i use it for bind mounts
1244208623 Q * ghislainocfs2 Ping timeout: 480 seconds
1244208626 M * pmjdebruijn /opt/software/ai /opt/ftp/ai    none    ro,bind         0       0
1244208634 M * pmjdebruijn all inside the vserver
1244208658 M * geb i think fstab is the better way...
1244208663 M * geb sorry i have to go ...
1244208666 M * pmjdebruijn well
1244208678 M * pmjdebruijn would /opt/software/ai be related to _outside_ the vserver?
1244208685 M * pmjdebruijn wouldn't
1244208731 M * geb use /vserver/foo/opt/software/ai if you want to it ?
1244208802 M * pmjdebruijn I seriously don't want to hardware my vserver path in my fstab
1244208804 M * pmjdebruijn that's uber-nasty
1244208818 M * pmjdebruijn s/hardware/hardcore/
1244208821 M * pmjdebruijn grrr
1244208823 M * pmjdebruijn hardcode
1244208831 M * pmjdebruijn :)
1244208905 Q * derjohn_mob Ping timeout: 480 seconds
1244209674 Q * doener_ Remote host closed the connection
1244210272 J * doener ~doener@i59F5600C.versanet.de
1244211687 N * Bertl_zZ Bertl
1244212940 J * jasiii ~jasiii@fw01.ssiservices.biz
1244212982 J * dowdle ~dowdle@scott.coe.montana.edu
1244213133 J * pmenier ~pmenier@ACaen-152-1-45-222.w83-115.abo.wanadoo.fr
1244213203 M * Bertl back now ...
1244213325 M * simon` anyone here tinkered with libevent? I'm wondering if I should event_set() once for E_READ and once for E_WRITE if I want different callbacks for each. (sorry for off-topic, but apparently the library isn't widespread enough for anyone on #c channels to use it)
1244213414 M * Bertl hmm, and that's a good reason to ask on the Linux-VServer channel? :)
1244213455 M * simon` hehe, squeeze me.
1244213486 Q * meebey Server closed connection
1244213487 J * meebey meebey@booster.qnetp.net
1244213665 M * Bertl well, doesn't it report the event in someway? i.e. so that you could have one callback with the proper argument identifying the type of event?
1244213805 M * simon` yes, the callback is fed an optional argument. I could just put some info on how the event was invoked in that argument. thanks.
1244214473 Q * hparker Quit: Read error: 104 (Peer reset by connection)
1244215006 J * derjohn_mob ~aj@tmo-104-209.customers.d1-online.com
1244215202 Q * jescheng Remote host closed the connection
1244215242 J * jescheng ~jescheng@proxy-sjc-1.cisco.com
1244215391 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa
1244215859 M * jasiii Hello, everyone.
1244215876 M * jasiii We have a vserver which insists on running vmstat.
1244215895 M * jasiii This complains about lack of access to /proc.
1244215916 M * jasiii Is it a simple as adding /proc/vmstat to vprocunhide?
1244215926 M * jasiii or are there some caveats to doing that?
1244216186 J * imcsk8 ~ichavero@148.229.1.11
1244216272 M * hparker I'd want to know why it needs vmstat
1244216344 J * ktwilight__ ~keliew@191.240-64-87.adsl-dyn.isp.belgacom.be
1244216471 J * mrfree ~mrfree@host1-89-static.40-88-b.business.telecomitalia.it
1244216690 M * Bertl jasiii: well, if you want to run vmstat inside the guest, you need to unhide the proc entry .. note that this will be for all guests, and thus, all guests will have access to that entry then ... but it is as simple as adding it to the vprocunhide files
1244216752 Q * ktwilight_ Ping timeout: 480 seconds
1244216766 M * Bertl jasiii: also note that the vmstat info will not be virtualized, i.e. it will show host stats
1244216930 M * jasiii Thanks, Bertl.
1244216935 M * jasiii I did notice that.
1244216952 M * jasiii I suppose there is no way to limit visibility to a single guest, correct.
1244216972 M * Bertl well, there is, but it is quite tricky
1244217004 M * Bertl i.e. you could --bind mount over that entry in all other guests, to hide the data
1244217021 Q * hparker Quit: Read error: 104 (Peer reset by connection)
1244217029 M * jasiii Ah, OK.
1244217072 M * jasiii We need vmstat because Zimbra requires it for statistics.
1244217096 M * Bertl sounds like a broken design, if it cannot be turned off
1244217150 J * nkukard ~nkukard@196.38.64.208
1244217177 M * jasiii We have been very impressed with Zimbra except for this bit.
1244217185 M * Wonka hm. replace the vmstat binary with something that outputs dummy data?
1244217201 M * Wonka and Zimbra is mighty, yes
1244217209 M * Bertl if it uses the vmstat binary, then it might be the way to go
1244217376 Q * geb Remote host closed the connection
1244217462 Q * mrfree Quit: Leaving
1244218653 M * jasiii Sorry - 
1244218661 M * jasiii I was balancing a couple of different calls.
1244218680 M * jasiii It does use the vmstat binary.
1244218697 M * jasiii On the other hand, the data might be handy to have even if it needs some additional interpretation.
1244218707 M * jasiii So no security holes - just extra data, correct?
1244218836 M * jasiii Is there any difference between setting up vprocunhide in the vprocunhidefiles in the util-vserver directory and . . . 
1244218850 M * jasiii setting it up in /etc/vservers/.defaults?
1244219052 M * jasiii Wonka, do you have some experience setting up Zimbra inside a vserver? If so, perhaps I could pick you brain as it installs for us and appears to run but there are some issues deep down (statistics and severe data loss) which may be related to its interaction with VServer.
1244220150 M * Bertl jasiii: the vprocunhidefiles is the 'default' if there is no default (i.e. the secure default) which gets overwritten if you install never utils
1244220176 M * Bertl jasiii: the .defaults is the place to put them, IIRC, you can even 'source' the system defaults there
1244220434 M * jasiii Ah, OK.  That makes sense.  Thanks.
1244221069 M * Wonka jasiii: I only use zimbra...
1244221251 Q * nkukard Quit: Leaving
1244221452 Q * imcsk8 Quit: This computer has gone to sleep
1244221517 Q * gnuk Quit: NoFeature
1244221866 J * imcsk8 ~ichavero@148.229.1.11
1244222055 J * geb ~geb@43.4.82-79.rev.gaoland.net
1244222321 Q * jasiii Quit: using sirc version 2.211+KSIRC/1.3.12
1244222385 Q * kir Quit: Leaving.
1244222694 Q * derjohn_mob Ping timeout: 480 seconds
1244223560 J * derjohn_mob ~aj@tmo-096-211.customers.d1-online.com
1244223792 J * Floops[w]1 ~baihu@205.214.201.176
1244223894 Q * Floops[w] Ping timeout: 480 seconds
1244224296 Q * geb Quit: Quitte
1244224308 J * geb ~geb@earth.gebura.eu.org
1244224527 Q * derjohn_mob Ping timeout: 480 seconds
1244224925 Q * geb Quit: Quitte
1244226440 J * geos_one ~chatzilla@chello084115149052.4.graz.surfer.at
1244226858 Q * geos_one Quit: ChatZilla 0.9.84 [Firefox 3.0.10/2009050120]
1244229172 J * nkukard ~nkukard@196.38.64.208
1244229528 J * Keeper longhorn40@90.151.195.173
1244229542 M * Keeper hi
1244229602 Q * jescheng Remote host closed the connection
1244229632 J * jescheng ~jescheng@proxy-sjc-1.cisco.com
1244229857 M * Keeper Who may be already trying to put Gentoo host kernel 2.6.29.4?
1244230614 Q * eyck Remote host closed the connection
1244230645 J * eyck Ybclenav@89.186.2.58
1244232189 Q * nkukard Quit: Leaving
1244232544 Q * larsivi Ping timeout: 480 seconds
1244232849 J * bonbons ~bonbons@2001:960:7ab:0:2c0:9fff:fe2d:39d
1244232939 J * uva_ bno@118-160-163-253.dynamic.hinet.net
1244233394 Q * uva Ping timeout: 480 seconds
1244233586 M * Keeper tested, works fine
1244233596 Q * Keeper Quit: Keeper
1244233610 M * Bertl excellent!
1244234463 J * hijacker_ ~hijacker@87-126-142-51.btc-net.bg
1244235149 Q * ensc|w Remote host closed the connection
1244236012 Q * scientes Read error: Operation timed out
1244236101 J * ensc|w ~ensc@www.sigma-chemnitz.de
1244236113 Q * arekm Ping timeout: 480 seconds
1244236332 J * arekm arekm@carme.pld-linux.org
1244236632 Q * hijacker_ Quit: Leaving
1244236645 Q * ensc|w Remote host closed the connection
1244236689 Q * bonbons Quit: Leaving
1244236689 J * ensc|w ~ensc@www.sigma-chemnitz.de
1244236959 M * Bertl off to bed now ... have a good one everyone!
1244236965 N * Bertl Bertl_zZ
1244238608 J * derjohn_mob ~aj@p5B23E3AB.dip.t-dialin.net
1244239720 Q * z0d Server closed connection
1244239721 J * z0d ~z0d@artifact.hu
1244239915 M * harrydg bragon: that's the first i hear about crashes with the 2.6.27 series... then again, i don't run that anymore, and not everything might get to me, so if you have a reproducable problem or know how i can troubleshoot?
1244239936 M * harrydg if you fear it's in the grsec/pax part, take a vanilla kernel and see what happens there...
1244239977 M * harrydg but i did fix a bug that was in the combined patch in the latest 2.6.29 patch... (i've heared some people have had problems with it, but it seemed in the end to be all end-user problems)
1244240783 M * pmjdebruijn harrydg: crashes with 2.6.27? 
1244241318 Q * simon` Quit: If there's one thing you can say about mankind, there's nothing kind about man.
1244243321 Q * dowdle Remote host closed the connection
1244243459 N * Bertl_zZ Bertl
1244243466 M * Bertl back now .. couldn't sleep ...
1244243545 M * Bertl harrydg: it probably depends on the 2.6.27 version, we found and fixed a bunch of issues recently ... so that might be related
1244244002 Q * jescheng Remote host closed the connection
1244244032 J * jescheng ~jescheng@proxy-sjc-1.cisco.com
1244245336 J * ghislainocfs2 ~Ghislain@adsl2.aqueos.com
1244245684 Q * ghislainocfs21 Ping timeout: 480 seconds
1244246291 M * harrydg Bertl: always nice to hear bugs are solved\
1244246311 A * harrydg off to bed now
1244246319 M * harrydg i bet i can sleep... tired as hell!
1244246379 M * Bertl have a good one!
1244246395 M * harrydg will do, tnx