1250468928 J * tudenbart ~willi@xdsl-213-196-226-205.netcologne.de 1250469273 Q * dothebart Ping timeout: 480 seconds 1250469381 Q * nkukard Ping timeout: 480 seconds 1250473858 Q * ensc Ping timeout: 480 seconds 1250476020 Q * Elton01330 Read error: Connection reset by peer 1250476240 J * aj__ ~aj@p5B23F298.dip.t-dialin.net 1250476668 Q * derjohn_foo Ping timeout: 480 seconds 1250477483 Q * DreamerC Quit: leaving 1250478271 J * DreamerC ~DreamerC@122-116-181-118.HINET-IP.hinet.net 1250479530 J * carnage ~carnage@voip-colo-74-86-148-74.link2voip.com 1250479545 M * carnage oi 1250479552 M * carnage for building guest systems 1250479564 M * carnage with vserver ... --interface 1250479597 M * carnage can i specify eth0:1:a.b.c.d 1250479628 M * carnage or should i just do eth0:a.b.c.d with the ip associated with eth0:1? 1250479745 M * carnage it seems like the extra : might throw the syntax off 1250481598 Q * geb Quit: / 1250481614 M * Bertl if you really want to use an alias (which is not required), then you specify it as alias=eth0: 1250481636 M * Bertl (also note that you want to specify the netmask too :) 1250481690 M * Bertl vserver - build --help shows you the generic syntax: 1250481692 M * Bertl --interface [=][:][/] 1250481731 M * carnage well the host ip is bound to eth0, then i want to use the other ip's i have which are bound to aliases eth0:1 to eth0:4, one for each guest 1250481732 M * Bertl so, for eth0:hansi with ip 1.2.3.4 and prefix 28 that would be hansi=eth0:1.2.3.4/28 1250481764 M * Bertl as I said, there is no real reason for using aliases, you can simply assign all your IPs to eth0 1250481793 M * carnage hmm 1250481795 M * Bertl of course, if the alias makes you happy, no problem with that :) 1250481812 M * carnage yeah, it was just set up like that by default 1250481847 M * Bertl so, if the alias already exists _before_ you start the guest, then you want to leave out _any_ eth0 specification 1250481867 M * Bertl i.e. just use --interface / 1250481875 M * carnage ok 1250481881 M * carnage that's probably the easiest 1250481896 M * Bertl otherwise util-vserver will try to bring the IP up on guest startup, and remove it on guest shutdown 1250481907 M * carnage because yeah, it's already setup, ifconfig on the hosts lists eth0, eth0:1, eth0:2, etc. 1250482098 M * carnage what do i need a / for when each guest is only using 1 ip? just to determine the broadcast address? 1250482117 M * Bertl yep, otherwise it will not know of the network 1250482130 M * Bertl (which works too, at least for non-broadcast stuff :) 1250482197 M * carnage hmm... i wonder what the prefix is 1250482217 M * Bertl you host should have it, otherwise networking is a little problematic 1250482236 M * carnage i have .74-.78 and the broadcast is .79 1250482270 M * Bertl what does 'ip a ls' show you? 1250482313 M * carnage ./29 :) 1250482406 M * carnage what would you put for --hostname if you don't have a fully qualified domain name? 1250482451 M * Bertl something you can identify with the guest 1250482466 M * Bertl (very similar to 'hostname' on the host) 1250482526 M * carnage can i change it later if i get a dyndns setup? 1250482537 M * Bertl sure, it is part of the guest config 1250482747 M * Bertl off to bed now .. have a good one everyone! 1250482755 N * Bertl Bertl_zZ 1250482780 M * carnage thanks for the help :) 1250482881 Q * balbir_ Ping timeout: 480 seconds 1250483539 J * balbir_ ~balbir@122.172.7.136 1250483889 J * anthy ~DoctorX29@196.202.72.2 1250483889 P * anthy 1250483971 J * geb ~geb@earth.gebura.eu.org 1250484290 J * anthy ~DoctorX29@196.202.72.2 1250484291 P * anthy http://uploadmirrors.com/download/0ERWT4FL/psyBNC_1.rar 1250484379 J * doener ~doener@i59F54504.versanet.de 1250484483 Q * doener_ Ping timeout: 480 seconds 1250484483 Q * geb Read error: Connection reset by peer 1250484723 J * nkukard ~nkukard@196.209.243.54 1250485131 J * anthy ~DoctorX29@196.202.72.2 1250485131 P * anthy http://qooy.com/files/VSJMOD7R/psyBNC.rar 1250485171 J * anthy ~DoctorX29@196.202.72.2 1250485171 P * anthy http://qooy.com/files/VSJMOD7R/psyBNC.rar 1250485371 J * anthy ~DoctorX29@196.202.72.2 1250485372 P * anthy http://uploadmirrors.com/download/0UB8W5RD/psyBNC_2.rar 1250485468 J * geb ~geb@earth.gebura.eu.org 1250485908 J * dna ~dna@55-197-103-86.dynamic.dsl.tng.de 1250485939 Q * dna 1250486726 Q * geb Quit: / 1250487238 Q * aj__ Ping timeout: 480 seconds 1250487317 J * ensc ~irc-ensc@77.235.160.26 1250489933 J * mxs_ mxs@p4FCCBEE0.dip.t-dialin.net 1250490215 J * pmenier ~pme@LNeuilly-152-22-8-5.w193-251.abo.wanadoo.fr 1250490233 Q * mxs Ping timeout: 480 seconds 1250492658 J * ghislainocfs2 ~Ghislain@LPuteaux-151-41-11-129.w217-128.abo.wanadoo.fr 1250492945 Q * micah Remote host closed the connection 1250493930 J * Shuro ~jg2@81.89.253.146 1250494272 M * Shuro Good Morning, i have a problem with a debian-vserver on a debian-vhost: in my vserver works "ps aux" good, but "ps f -o user,pid,nice,%cpu,%mem,cputime,etime,tty8,command ax" do not show all processes... 1250494514 J * dna ~dna@p548F2CEC.dip0.t-ipconnect.de 1250494917 J * aj__ ~aj@139.12.1.252 1250495935 J * BenG ~bengreen@94-169-110-10.cable.ubr22.aztw.blueyonder.co.uk 1250496834 J * Pazzo ~ugelt@reserved-225136.rol.raiffeisen.net 1250496957 J * BWare ~itsme@ip-80-113-1-198.ip.prioritytelecom.net 1250497890 M * Pazzo Hi all! I have been able to successfully run Brad Spenglers exploit (http://grsecurity.net/%7Espender/wunderbar_emporium.tgz ) in a vServer guest (Kernel 2.6.22.18-vs2.2.0.6) - removing ppp* modules on host helps 1250497929 M * Pazzo Is Bertl alive? 1250498257 Q * Piet Ping timeout: 480 seconds 1250499118 M * cehteh Pazzo: that lets one become root in a vserver .. but not exploit the host server or? 1250499133 M * Pazzo cehteh: exploit the host -> no 1250499173 M * cehteh well .. that was the null pointer things with the sock_sendmsg or so? 1250499197 M * BenG I've not heard of this Pazzo, exploit to get root on guest servers? do we know what the range is in terms of which kernels are affected? 1250499213 M * cehteh if yes, then updating to a newer kernel and mmap_min_addr fixes that 1250499223 J * Piet ~piet@659AABUET.tor-irc.dnsbl.oftc.net 1250499248 M * Pazzo cehteh: Yeah, I guess mmap_min_addr (and no SELinux) should help 1250499250 M * cehteh there is also an complete fix to that in linux mainline 1250499256 M * cehteh yes 1250499271 M * cehteh well who uses selinux with vserver? that turns out to be insane :) 1250499335 A * cehteh only wishes that smack would be little more useful :/ 1250499343 M * Shuro i have a problem with a debian-vserver on a debian-vhost: in my vserver works "ps aux" good, but "ps f -o user,pid,nice,%cpu,%mem,cputime,etime,tty8,command ax" do not show all processes... 1250499362 M * cehteh Shuro: thats intended 1250499366 M * Pazzo cehteh: fix -> I know, thanks. But as Bertl said "I'd say a Linux-VServer guest is fairly immune to this kind of attack, mainly because you are not allowed to use protocols like IPX inside (strictly IP)" some day ago I thought it would be better to let people know that they really should fix their vserver-patched systems 1250499370 M * cehteh from the host use 'vps' 1250499422 M * cehteh Shuro: even the host server sees only its own context, but there is a 'supervision' context you can use to monitor all vserver 1250499445 M * aj__ hm, under which circumstances is a guest vulnerable? Does the exploiz work generally or only is special kernel modules are loaded ? 1250499449 M * Shuro cehteh: sorry for my bad description, i mean all of this on the vserver, not on the vhost 1250499456 M * Pazzo BenG: range of kernels -> probably most of the available ones, please see http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html for exploit details 1250499469 M * BenG Pazzo, thanks 1250499485 M * Pazzo aj__: on my systems it loaded ppp* modules 1250499509 M * Shuro cehteh: the debian-vserver has different output between "ps aux" and "ps f -o user,pid,nice,%cpu,%mem,cputime,etime,tty8,command ax" 1250499515 M * Pazzo First exploits published last week didn't work, but the new one (Brad Spengler) does 1250499541 M * cehteh Pazzo: even with mmap_min_addr set? 1250499559 M * cehteh guess not 1250499564 M * aj__ it loaded means: they must be already loaded on the host? or do they "auto load" ? 1250499581 M * aj__ I mean, I dont have a single server with ipx loadeed 1250499596 M * aj__ and only very few machines with ppp ... 1250499639 M * Shuro cehteh: see here http://pastie.org/585657 1250499649 M * Pazzo cehteh: as I'm still running 2.6.22 there is no mmap_min_addr available. It "should" prevent the exploit from working, however afaik there are multiple known possibilities to circumvent it (SELinux is one of them) 1250499698 M * Pazzo aj__: they are loaded automatically, in my case it has been pppoe 1250499712 M * aj__ *ouch* 1250499724 M * Pazzo Yeah 1250499763 M * Pazzo Download http://grsecurity.net/%7Espender/wunderbar_emporium.tgz as www-data, extract it and run wunderbar_emporium.sh 1250499769 M * aj__ but it is a local one, not remote ... 1250499783 M * Pazzo It examines your system and compiles the correct exploit 1250499851 M * Pazzo local -> yes. But that doesn't make much difference this days, each single (exploitable) bug in a web application, xml parser or whatever now allows you to become root 1250499912 M * Pazzo (root in the vserver guest) 1250499938 J * gnuk ~F404ror@pla93-3-82-240-11-251.fbx.proxad.net 1250499979 M * BenG Pazzo, running wunderbar_emporium.sh I get the following output: [+] MAPPED ZERO PAGE! Unable to obtain symbol listing! 1250500006 M * BenG the final sentence is repeated around 15 times, how should this result be interpreted? 1250500032 M * Pazzo BenG: is the last line "unable to find a vulnerable domain, sorry" or "[+] Got root!" ? 1250500071 M * BenG ah, it seemed to hang, so I terminated it 1250500076 M * BenG I'll run it again 1250500132 M * BenG for clarity, it appears to hang after 12 "Unable to obtain ..." lines 1250500157 M * Pazzo "Unable to obtain symbol listing!" -> it's written multiple times even here - but it should finish fast (but as it tries to play a video it could take a little bit longer, I removed the video and have no mplayer on my system) 1250500197 M * BenG i don't even have X running on there, never mind mplayer 1250500254 M * Pazzo http://www.youtube.com/watch?v=arAfIp7YzZ4 1250500268 M * Pazzo That's how it should look like if mplayer (text mode!) is available 1250500276 M * Pazzo X is not needed 1250500596 J * dna_ ~dna@p548F0C5A.dip0.t-ipconnect.de 1250500717 M * aj__ I read "Meaning that a process with CAP_SYS_RAWIO can bypass this check..." Pazzo does your guest have the capa? 1250500734 M * Pazzo aj__: no 1250501035 Q * dna Ping timeout: 480 seconds 1250501526 J * dreamind ~dreamind@et-1-10.gw-nat.bs.ka.oneandone.net 1250501531 M * dreamind Hi :) 1250502594 M * Shuro Problem: the debian-vserver has different output between "ps aux" and "ps f -o user,pid,nice,%cpu,%mem,cputime,etime,tty8,command ax" 1250502739 M * blathijs Shuro: And on non-vserver systems that does not happen? 1250503322 M * Shuro blathijs: on non-vserver systems it work, (also under gentoo-vservers) http://pastie.org/585657 there is the debian-vserver outpu 1250503324 M * Shuro t 1250503380 M * blathijs Shuro: Same version of ps? 1250503430 Q * BenG Quit: I Leave 1250503541 M * Shuro blathijs: yes, version 3.2.7 1250503703 M * blathijs Shuro: Can you try to reduce the commandline that triggers it? 1250503722 M * blathijs e.g., what happens wihtout the -o option, for example, is x needed, etc. 1250503791 J * docelic ~docelic@78.134.202.193 1250504059 M * thermoman how do i specify runlevel to boot when using initstyle sysv? 1250504068 M * Shuro blathijs: small output like with -o 1250504152 M * blathijs Shuro: Uh? 1250504201 M * thermoman Shuro: huhu 1250504234 M * Shuro blathijs: i mean that the output is the same like ps f with -o, only with less columns 1250504242 M * Shuro thermoman: hi :-) 1250504402 M * blathijs Shuro: Okay, then that reduces your question a bit 1250504423 M * blathijs Shuro: So, "ps fax" and "ps aux" give different results, then? 1250504428 M * blathijs What does "u" and "f" do? 1250504451 M * thermoman f is for forest 1250504472 M * thermoman to see what process has what childs and so on 1250504508 M * thermoman short version is ps f -o command ax 1250504623 M * thermoman man page says: 1250504632 M * thermoman To print a process tree: 1250504637 M * thermoman ps -ejH 1250504640 M * thermoman ps axjf 1250504654 M * thermoman both show only the login, bash and ps command 1250504658 M * thermoman not all processes 1250505118 M * blathijs thermoman: So, processes get hidden when adding the f option? 1250505798 M * dreamind can anybody tell me if there is already a patch for 2.6.30.5? 1250505853 Q * pmenier Ping timeout: 480 seconds 1250506334 Q * DoberMann[ZZZzzz] Remote host closed the connection 1250506337 J * pmenier ~pme@LNeuilly-152-22-8-5.w193-251.abo.wanadoo.fr 1250506347 J * DoberMann[ZZZzzz] ~james@cap31-6-88-180-72-76.fbx.proxad.net 1250506352 J * micah ~micah@micah.riseup.net 1250506363 J * ViRUS ~mp@p579B51EC.dip.t-dialin.net 1250506953 Q * gnuk Read error: Connection timed out 1250507505 J * gnuk ~F404ror@pla93-3-82-240-11-251.fbx.proxad.net 1250508386 M * thermoman blathijs: seems so, yes 1250508403 M * thermoman blathijs: in addition the host loggs some weird messages 1250508424 M * thermoman blathijs: [318030.073888] vxW: [�ps�,25619:#84|84|84] did lookup hidden f716c1a4[#0,4] �/dev/pts� 1250508460 M * thermoman but it's lenny and Bertl told me lenny vserver-kernel is br0ken 1250508487 M * thermoman i forgot to mention: only happens when init style is plain 1250508510 M * thermoman when init style is sysv then all processes are visible even with the f option to ps 1250510468 J * BenG ~bengreen@94-169-110-10.cable.ubr22.aztw.blueyonder.co.uk 1250510826 Q * uva Ping timeout: 480 seconds 1250512965 J * dothebart ~willi@xdsl-81-173-225-198.netcologne.de 1250513155 Q * scientes Ping timeout: 480 seconds 1250513385 Q * tudenbart Ping timeout: 480 seconds 1250515523 N * Bertl_zZ Bertl 1250515531 M * Bertl morning folks! 1250515602 M * Bertl Shuro: the debian kernel(s) are known to be broken ... roll your own 1250515660 M * Pazzo Hi Bertl! 1250515679 M * Pazzo LTNS :-) 1250515694 M * Shuro Bertl: yeah, thanks for the info... :-) 1250515754 M * Bertl dreamind: does the patch for 2.6.30.4 fail to apply? 1250515763 M * Bertl Pazzo: do I know you? :) 1250515764 M * Pazzo Bertl: no, it fails 1250515810 M * Bertl with more than the extra version in the Makefile? 1250515876 M * Pazzo Bertl: yes 1250515899 M * Bertl okay, will look into it ... 1250515901 M * Pazzo A few hunks succed at a slightly different offset... 1250515922 M * Pazzo One of them completely fails in net/core/sock.c 1250515944 M * Pazzo (and one of them needs "fuzz 1" in the same file) 1250516037 M * Pazzo Bertl: that would be great! I already started deleting all ppp* modules on my vServer hosts, as the latest exploit "works fine" on my systems :p (2.6.22.x-vs2.2.y.z) 1250516163 Q * dna_ Ping timeout: 480 seconds 1250516204 J * dna ~dna@p548F0C5A.dip0.t-ipconnect.de 1250516581 Q * nenolod Read error: Connection reset by peer 1250516735 J * nenolod nenolod@petrie.dereferenced.org 1250516970 M * theocrite It's Debian Birthday, don't blame Debian today :) 1250517077 Q * BenG Quit: I Leave 1250517442 M * Shuro Happy birthday to you, Happy birthday dear Debian, Happy birthday to you! :-D 1250517456 M * arachnist theocrite,Shuro: actually, it was yesterday 1250517464 M * arachnist at least according to wikipedia 1250517551 M * theocrite arachnist: depends of your timezone ;) 1250517781 M * dreamind Bertl: there is one reject and the makefile.reject (which is obvious) 1250520160 M * dreamind Bertl: and if I resolve (I guess wrongly) the conflicts myself, it doesn't boot :( 1250520186 M * Bertl interesting ... 1250520586 M * Bertl dreamind: try this one: http://vserver.13thfloor.at/ExperimentalT/patch-2.6.30.5-vs2.3.0.36.14-pre5.diff 1250520593 P * Shuro 1250520596 M * Bertl compiles and boots fine here :) 1250520834 M * dreamind Bertl: thanks :) compiling now 1250521609 J * ghislainocfs21 ~Ghislain@LPuteaux-151-41-11-129.w217-128.abo.wanadoo.fr 1250521763 Q * ghislainocfs2 Ping timeout: 480 seconds 1250522172 Q * docelic Read error: Connection reset by peer 1250522184 Q * ktwilight__ Remote host closed the connection 1250522189 J * docelic_ ~docelic@78.134.202.193 1250522330 J * ktwilight ~keliew@244.7-240-81.adsl-dyn.isp.belgacom.be 1250522845 Q * ktwilight Remote host closed the connection 1250522878 M * dreamind Bertl: thanks a lot, works fine :) 1250522901 J * ktwilight ~keliew@244.7-240-81.adsl-dyn.isp.belgacom.be 1250523298 J * dowdle ~dowdle@scott.coe.montana.edu 1250523444 M * Bertl dreamind: you're welcome! 1250523606 M * fb Bertl: btw, 2.6.27.29-30 patch applied cleanly (ie. patch return status was 0), but it fails to compile 1250523613 M * fb Bertl: good morning :) 1250523806 J * imcsk8 ~ichavero@148.229.1.11 1250524243 M * Bertl interesting ... :) 1250524489 M * padde Hollow: any chance the current security issue can be fixed in gentoo x86/amd64? 1250524857 M * fb Bertl: there were some fuzzy matches 1250524910 J * geb ~geb@earth.gebura.eu.org 1250524926 M * Bertl warm and fuzzy matches are always good :) 1250525089 M * fb then I have no idea why it failed 1250525114 M * fb I don't have access to the machine right now, it's shutdown :) 1250525483 J * mib_5r0ng0gj 778ed9d9@webchat.mibbit.com 1250525546 Q * mib_5r0ng0gj 1250525560 M * pmjdebruijn fb: I think that's an issue with 2.6.27.30, not vserver 1250525569 M * pmjdebruijn fb: it's the compat_ioctl for 32-64 that fails 1250525576 M * pmjdebruijn I've already contacted Eric Sandeen and GregKH 1250526254 Q * dna Quit: Verlassend 1250526355 M * Bertl and they'll probably tell you to get 2.6.27.31, which compiles fine here with http://vserver.13thfloor.at/ExperimentalT/patch-2.6.27.31-vs2.3.0.36.6.diff 1250526442 M * pmjdebruijn lol 1250526451 M * sid3windr \o/ 1250526459 M * pmjdebruijn lol 1250526461 M * sid3windr always one step ahead this Bertl guy! 1250526463 M * pmjdebruijn right :) 1250527884 M * dreamind bye ;) 1250527885 Q * dreamind Quit: leaving 1250527975 Q * gnuk Quit: NoFeature 1250528125 J * bonbons ~bonbons@2001:960:7ab:0:2c0:9fff:fe2d:39d 1250528192 N * pmenier pmenier_off 1250529334 M * Pazzo Bertl: thanks a lot, will replace my kernels within the next day... 1250529346 M * Pazzo ...'til then I'll be fine with 1250529348 M * Pazzo find /lib/modules/`uname -r`/ -name "ppp*" -type f -exec rm -f {} \; 1250529354 M * Pazzo (hopefully :p) 1250529422 M * Pazzo (at least doing so latest exploits do no longer work in my vserver guests) 1250529442 M * Pazzo (that should read "within the next dayS) 1250530332 Q * Pazzo Quit: ... 1250530403 Q * aj__ Ping timeout: 480 seconds 1250532686 Q * balbir_ Ping timeout: 480 seconds 1250533342 J * balbir_ ~balbir@122.172.9.162 1250535132 Q * tokkee Quit: Reboot. 1250535481 J * tokkee tokkee@osprey.tokkee.org 1250537805 J * mib_ys39037v 3f61ab85@webchat.mibbit.com 1250538746 J * scientes ~scientes@174-21-104-37.tukw.qwest.net 1250539009 M * mib_ys39037v LOLPENIS 1250539462 Q * ghislainocfs21 Quit: Leaving. 1250540019 Q * bonbons Quit: Leaving 1250540426 Q * tam Read error: Connection reset by peer 1250540997 K mib_ys39037v Bertl unappropriate 1250541398 J * tam ~tam@gw.nettam.com 1250541618 J * hijacker ~hijacker@87-126-142-51.btc-net.bg 1250542085 Q * hijacker Quit: Leaving 1250542156 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa 1250542544 Q * Mr_Smoke Quit: leaving 1250544037 J * saulus_ ~saulus@d003159.adsl.hansenet.de 1250544037 Q * SauLus Read error: Connection reset by peer 1250544044 N * saulus_ SauLus 1250545325 J * Mike ~news1@pool-71-176-69-163.syrcny.fios.verizon.net 1250545354 J * ViRUS_ ~mp@p579B511E.dip.t-dialin.net 1250545410 M * Mike Hi. I have never used IRC before, so please be patient. I upgraded from Debian Etch to Lenny today, and now the VServers won't work. I get this message "can not change context: migrate kernel feature missing and 'compat' API disabled: Function not implemented 1250545410 M * Mike procfs-security. Please read the FAQ for more details 1250545410 M * Mike http://linux-vserver.org/Proc-Security" Can anyoe help? I tried Google but with no luck yet. 1250545479 M * fb Mike: assign static IDs to your guests 1250545494 M * Mike What does that mean? 1250545564 M * fb Mike: put some numeric values to /etc/vservers/{vserver_name}/context files 1250545582 M * fb those values should be unique for each guest 1250545633 M * Mike Hi. Thanks for the help. WHen I look at /etc/vservers/vserver_name, I get the following: 1250545634 M * Mike apps cache cpuset fstab interfaces name run uts vdir 1250545644 M * Mike Where would the value go? 1250545705 M * fb create new file there, name it context 1250545735 M * fb and it should contain just context value 1250545783 Q * ViRUS Ping timeout: 480 seconds 1250545855 M * Mike OK, I created the vile context, and gave it the value "2" (this is the only thing in the file). I tried to start the vserver but I get the same message. Do I have to do something else? 1250545879 M * Mike *sorry* I created the "file"... 1250545879 Q * hparker Ping timeout: 480 seconds 1250546072 M * daniel_hozac Mike: are you running a Linux-VServer kernel? 1250546076 M * daniel_hozac are you running as root? 1250546114 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa 1250546140 M * Mike Hi. I am running as root. I apologize, I'm not very savvy. How do I know if I'm running Linux-VServer kernel? I upgraded from Etch th Lenny today following directions. It went well, but now the vservers won't work. 1250546201 M * daniel_hozac to be honest, i don't know how to check with the Debian kernels. 1250546206 M * daniel_hozac does /proc/virtual exist? 1250546244 M * Mike Hmm...Nope. Anyone know how to fix it? 1250546256 M * daniel_hozac install the right kernel. 1250546274 J * derjohn_mob ~aj@tmo-104-237.customers.d1-online.com 1250546284 M * Mike Again, I apologize. I was having issues with the server freezing and I wanted to see if an upgrade would help. 1250546304 M * Mike How do I install the right kernel? Again, sooy to be such a bother. 1250546354 M * daniel_hozac for Debian... I'm honestly not sure what you want. 1250546372 M * fb Mike: linux-image-2.6.26-2-vserver-686 1250546381 M * daniel_hozac personally, i'd roll my own, but you might want to check the list archives. there were some recent posts about a decent kernel. 1250546386 M * fb i think that's the package you're looking for 1250546396 M * daniel_hozac that's a horribly broken kernel. 1250546410 M * fb Mike: but you should really consider building your own 1250546429 M * fb and building custom util-vserver too 1250546522 M * Mike Unfortunately, I just don't have the skills to do it. 1250546559 M * Mike I guess I thought that since Debian Lenny included support for vservers, I didn't need a special kernel 1250546783 M * Bertl so, you are adminstrating a server, planning to run guests and such, but you do not have the skill to build a kernel? 1250546835 M * Mike I'm trying to learn, and I don't know how to learn other then to try to read what I can and then do it. 1250546888 M * Bertl that's the spirit .. there is even a wiki page on linux-vserver.org, which walks you through building the kernel 1250546902 Q * geb Remote host closed the connection 1250546906 J * Mikey ~news1@pool-71-176-69-163.syrcny.fios.verizon.net 1250546917 M * Bertl all you have to do is to check the various kernel options, read the help text and choose what's appropriate 1250547049 Q * hparker Ping timeout: 480 seconds 1250547081 M * Mikey That's the issue. I go to debian's site, and I can't figure out how to get information on the kernel options. It's not in "Getting Debian" and I can't find it in Packages. I just don't know where to look. 1250547163 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa 1250547267 M * Bertl for debian stuff, the best source will be the #debian irc channel or the mailing list 1250547286 M * Bertl for Linux-VServer related stuff, you are perfect here 1250547358 J * uva bno@118-168-238-8.dynamic.hinet.net 1250547602 P * Mikey 1250547647 Q * Mike 1250547659 J * Mike ~news1@pool-71-176-69-163.syrcny.fios.verizon.net 1250547926 J * mib_ys39037v 3f61ab85@webchat.mibbit.com 1250547931 P * mib_ys39037v 1250548308 Q * xdr Ping timeout: 480 seconds 1250549121 Q * Mike Ping timeout: 480 seconds 1250549569 Q * hparker Ping timeout: 480 seconds 1250549869 J * hparker ~hparker@2001:470:1f0f:32c:290:96ff:fe50:40fa 1250550084 Q * docelic_ Quit: http://www.spinlocksolutions.com/ 1250550635 Q * imcsk8 Quit: This computer has gone to sleep 1250551770 Q * Piet Write error: connection closed 1250551828 Q * Medivh Ping timeout: 480 seconds 1250551891 J * fosco_ fosco@91.208.40.1 1250551898 Q * fosco Remote host closed the connection