1256774622 Q * dowdle Remote host closed the connection 1256775224 Q * mmouse 1256776864 J * uva bno@118-160-167-89.dynamic.hinet.net 1256777344 J * fLoo ~fLoo@2001:6f8:119b:ffff::1 1256780130 Q * hparker Quit: Read error: 104 (Peer reset by connection) 1256780836 J * scientes__ ~scientes@174-21-153-224.tukw.qwest.net 1256781763 J * hparker ~hparker@65.171.118.206 1256781860 J * laptopnenolod ~nenolod@cpe-67-246-196-110.maine.res.rr.com 1256783508 Q * hparker Quit: Read error: 104 (Peer reset by connection) 1256786075 M * Bertl off to bed now ... have a good one!~ 1256786080 N * Bertl Bertl_zZ 1256788809 J * saulus_ ~saulus@c152077.adsl.hansenet.de 1256789216 Q * SauLus Ping timeout: 480 seconds 1256789223 N * saulus_ SauLus 1256790221 J * imcsk8 ~ichavero@189.135.86.13 1256792063 Q * jpic Ping timeout: 480 seconds 1256792380 Q * _Shiva_ Ping timeout: 480 seconds 1256792582 J * _Shiva_ shiva@whatcha.looking.at 1256793700 Q * balbir_ Read error: Connection reset by peer 1256794678 J * balbir_ ~balbir@122.172.45.246 1256795286 Q * balbir_ Ping timeout: 480 seconds 1256796854 Q * lau Ping timeout: 480 seconds 1256797676 Q * laptopnenolod Read error: Connection reset by peer 1256797711 J * laptopnenolod ~nenolod@cpe-67-246-196-110.maine.res.rr.com 1256799198 J * ghislainocfs2 ~Ghislain@adsl2.aqueos.com 1256799513 J * yarihm ~yarihm@77-58-27-192.dclient.hispeed.ch 1256799788 Q * yarihm 1256800776 J * geb ~geb@earth.gebura.eu.org 1256800822 M * geb hi 1256800991 J * ncopa ~ncopa@90.149.48.245 1256801181 J * larsivi ~larsivi@37.80-202-217.nextgentel.com 1256801702 M * hijacker_ morning 1256803842 J * tokkee tokkee@osprey.tokkee.org 1256804089 J * yarihm ~yarihm@office-zrh.youngsolutions.ch 1256804526 J * friendly ~friendly@ppp118-209-136-134.lns20.mel6.internode.on.net 1256805014 J * thierryp ~thierry@lns-bzn-47f-62-147-212-202.adsl.proxad.net 1256805834 Q * thierryp Remote host closed the connection 1256806407 M * ncopa mornin 1256806419 M * ncopa yesterday i made an app with a bug 1256806426 M * ncopa bug in fork/exec 1256806432 M * ncopa caused a forkbomb 1256806435 M * geb haha 1256806451 M * ncopa the not su funny thing was that it brought down the entire vserver 1256806453 M * ncopa everything 1256806465 M * ncopa i reached to do "reboot" in vserver guest 1256806488 M * ncopa but with 8 cores forking new processes and only one cpu running kill... 1256806494 M * ncopa it didnt help 1256806527 N * Bertl_zZ Bertl 1256806532 M * Bertl morning folks! 1256806541 M * ncopa what i found slightly troublesome was that defautl config in linux kernel allowed a normal user bring the entire box to its knees 1256806544 M * Bertl ncopa: sounds like you had no fork limit/protection on? 1256806545 M * ncopa morning bertl 1256806550 M * ncopa yup 1256806587 M * Bertl so I hope, from now on, you'll set the limits properly :) 1256806599 M * ncopa where is the correct place to set for limit/protection so default settings does not allow this? 1256806617 M * ncopa this is a setting that is easy to forget 1256806631 M * ncopa and you dont assume you are vulnerable to this by default 1256806658 M * Bertl /etc/vservers/vserver-name/rlimits 1256806695 M * ncopa i want patch util-vserver to install a sane default for each new vserver 1256806702 M * Bertl (specifically the nproc limit) 1256806717 M * ncopa what would you consider a "sane default"? 1256806732 M * Bertl well, obviously the non-limit is a 'sane' default for normal linux machines (as you figured) 1256806747 J * harobed ~sklein@pda57-1-82-231-115-1.fbx.proxad.net 1256806747 M * ncopa i disagree on that one 1256806779 M * Bertl my general suggestion on setting limits is to test drive a guest, then set the limits to 2-3 times the maximum observed (for most values) 1256806813 M * geb ncopa, considere digging daniel_hozac about a /etc/vservers/.skel :) 1256806814 M * harobed hi, my system with vserver has switched my root partition on read only after 15 days uptime. 1256806835 M * harobed I've this errer in dmesg : [1366416.782108] EXT3-fs error (device md1): ext3_free_blocks: Freeing blocks in system zones - Block = 131072, count = 1 1256806835 M * harobed [1366416.782161] Aborting journal on device md1. 1256806835 M * harobed [1366416.782386] Remounting filesystem read-only 1256806846 M * geb not vserver related 1256806861 M * harobed what do you thing ? it's hardware error or software ? 1256806867 M * ncopa i had similar issues with xfs years ago 1256806889 M * geb verify your raid , with cat /proc/mdstat 1256806890 M * harobed I haven't error with fsck and smartdisk 1256806896 M * geb if good 1256806896 M * Bertl harobed: any additional info in dmesg? 1256806896 M * geb umount it, fsck it , remount it 1256806905 M * geb if bad, reconstruct your raid 1256806924 M * harobed I look my /proc/mdstat 1256806929 M * ncopa im interested in a "sane" default nproc limit for /etc/vservers/.skel 1256806937 M * harobed Personalities : [raid1] 1256806937 M * harobed md1 : active raid1 sda2[0] sdb2[1] 1256806937 M * harobed 487749376 blocks [2/2] [UU] 1256806937 M * harobed 1256806937 M * harobed md0 : active raid1 sda1[0] sdb1[1] 1256806938 M * harobed 96320 blocks [2/2] [UU] 1256806940 M * harobed 1256806942 M * harobed unused devices: 1256806970 M * harobed Bertl, what ? 1256806977 M * Bertl ncopa: for guest, running a single service, something like 10 will do, for a guest running a large apache/php/tomcat setup, you might need about 1000 :) 1256806982 M * Bertl harobed: (please use paste.linux-vserver.org for everything longer than 3 lines) 1256806990 M * harobed Bertl, ok 1256806991 M * harobed sorry 1256807030 M * geb ncopa, i am doing something like in my own script (just cp -r /etc/vservers/.skel/rlimits), it should be very easy to patch util-vserver , to add it (if daniel_hozac is interested) 1256807043 M * ncopa yeah 1256807055 M * harobed my raid is good 1256807066 M * ncopa hm 1256807092 M * ncopa i need a value that allows most installs, but does not a gues allow kill the box 1256807105 M * ncopa i mentioned this on linux ml 2005 1256807114 M * ncopa no-one cared 1256807179 M * ncopa i bet there are more minor distros vulnerable to that still 1256807186 M * Bertl yeah, I guess it is one of those questions like: how much ram should my server have? where the proper answer is ... enough! :) 1256807202 M * ncopa yes 1256807219 M * ncopa i think kernel set nproc limit based on amount of ram 1256807239 M * ncopa i tested to half it 1256807239 M * geb it also depend of the cpu, the usage etc... 1256807255 M * ncopa and swap 1256807262 M * ncopa if you have swap you are dead 1256807273 M * Bertl I'd say, if you look at all your guests, take the current maximum for the number of processes and double that, _you_ should be fine :) 1256807299 M * ncopa i want a sane deafult limit for my distro 1256807308 M * ncopa i want my users to be safe 1256807317 M * Bertl that doesn't really make sense to me 1256807342 M * ncopa i was thinking in the lines 1256807349 M * ncopa set nproc to 2048 or similar 1256807355 M * ncopa a user set up a new vserver box 1256807357 M * ncopa it runs 1256807359 M * ncopa he forgets it 1256807371 M * Bertl there is no one-fits-all, that's a common distribution mistake 1256807382 M * ncopa true 1256807383 M * ncopa but 1256807390 M * Bertl (please use paste.linux-vserver.org for everything longer than 3 lines) 1256807411 M * ncopa current no-limit is worse 1256807428 M * ncopa as now every user should tweak it 1256807438 M * ncopa if i set it to 2048 1256807450 M * ncopa then will only those who need more need to tewak it 1256807460 M * ncopa if i dont set it, they need to tweak it anyways 1256807463 M * ncopa they just dont know 1256807492 M * Bertl the interesting part is, for the last 7? years, there have been two or three reports in that direction, where the first one was the reason for adding that specific limit and the over mem fork blocker 1256807509 M * Bertl and the last one is yours now :) 1256807559 M * ncopa i remeber last time i bumped into this i checked nproc limits on other *nixes 1256807564 M * Bertl so, despite the fact that _everybody_ who doesn't set the limit is vulnerable (and basically everybody on a 'normal 1256807570 M * Bertl ' linux system as well) 1256807630 M * Bertl it seems to work out fine, and I think, mainly because providers with potentially hostile environment simply set the limit, while other users have no problem without 1256807648 M * ncopa i think most big distros set a limit 1256807659 M * ncopa by default 1256807664 M * ncopa its easy to test 1256807666 J * thierryp ~thierry@lns-bzn-47f-62-147-212-202.adsl.proxad.net 1256807673 M * Bertl there is no process limit on root on any distro I know 1256807693 M * Bertl some distros started setting default user limits, yes 1256807696 M * ncopa my env is not hostile. it waas a bug 1256807711 M * ncopa and it was not as root 1256807718 M * Bertl yeah, Linux gives you enough rope to shoot yourself in the foot :) 1256807739 M * ncopa freebsd does not 1256807744 M * ncopa nor openbsd 1256807747 J * davidkarban ~david@199.123.broadband11.iol.cz 1256807748 M * Bertl well, if it wasn't as guest root, then your (guest) distro did something wrong, no? 1256807749 M * ncopa nor osx 1256807754 M * ncopa yeah 1256807761 M * ncopa i suppose so 1256807772 M * ncopa thats why i need to fix my distro 1256807793 M * Bertl okay, but that's really unrelated to Linux-VServer or the Linux-VServer limits then 1256807826 M * ncopa well... 1256807855 M * ncopa im curious how many of you are confident that running a forkbomb wont kill your box 1256807864 M * ncopa as root in a vserver guest 1256807922 M * Bertl I'd say, at least after my posting with the nice bash smiley (some years ago) nobody expects it to be 'safe' without limits :) 1256807946 M * ncopa years ago.. 1256807955 M * ncopa we have a new generation newbies comming up... 1256808056 Q * thierryp Remote host closed the connection 1256808062 M * Bertl well, go ahead, make a nice up-to-date posting to remind folks 1256810784 J * jpic ~jpic@perso.chocolatpistache.com 1256810813 M * jpic hi, i can't start mysql or postgres on any vserver anymore: http://nopaste.com/p/aUaNuMETA they all claim that the socket is already used ... please help! 1256810941 M * harobed I've posted this message on mailing list : http://list.linux-vserver.org/archive?mss:3172:200910:gbbchddfhpkcchjhifdo 1256810954 J * jpic_ ~jpic@quaoar.ww7.be 1256810959 M * harobed may be this can help me and also other users 1256810977 Q * jpic 1256811133 M * Bertl jpic_: recent kernel, and you are using ipv6? 1256811171 M * jpic_ Bertl: no ipv6, no recent kernel change (2.6.29) 1256811189 M * jpic_ the only recent modification is that an ip was added to an interface 1256811199 M * jpic_ which is only a shorewall modification 1256811413 M * Bertl well, then maybe mysql + co is right, and you simply have something already running on that port 1256811434 M * Bertl (could as well be on the host or in a different guest, sharing some IP(s)) 1256811694 M * jpic_ another guest sharing 127.0.0.1? 1256811785 M * jpic_ i just checked, no othe rguest is using 192.168.1.101 anway 1256811853 M * jpic_ i just have 0 mysql or pgsql that could start 1256811876 M * Bertl ah, 127.0.0.1, single IP and single IP special casing on? but mysql trying to bind and <127.0.0.1>? 1256811897 M * jpic_ mysql just wants 127.0.0.1:3366 1256811903 M * jpic_ *127.0.0.1:3306 1256811937 M * Bertl okay, please upload the contents of /proc/virtnet//* for that guest 1256811967 M * jpic_ http://nopaste.com/p/aZ02z8VElb 1256812188 M * jpic_ same error even with shorewall disabled ... 1256812190 M * Bertl as you can see (maybe :) your guest has a single IP assigned and also uses the single IP special casing 1256812214 M * jpic_ "special casing"? 1256812238 M * Bertl well, it's a kernel compile time option to set that automatically 1256812250 M * jpic_ is that an issue? 1256812264 M * Bertl you can disable it by putting ~single_ip in the 'nflags' config file 1256812301 M * Bertl depends on what mysql does, but it would be my first guess, as 127.0.0.1 will not be available in that guest 1256812312 M * jpic_ yes, that's the objective 1256812343 M * Bertl now, the next question is, do you want mysql to bind the guest local 127.0.0.1 or the global 127.0.0.1? 1256812344 M * jpic_ also there is a broken link in /etc/vservers/thatvserver: cache -> /etc/vservers/.defaults/cachebase/mamatoro 1256812352 M * jpic_ local guest 127.0.0.1 1256812365 M * Bertl okay, then add that nflag and restart the guest 1256812380 M * Bertl what util-vserver version do you use? 1256812449 M * jpic_ 0.30.216-pre2849 1256812519 M * jpic_ i added "~single_ip" (wihtout quotes) in /etc/vservers/mamatoro/nflags and restarted the guest, but mysqld still can't bind 1256812586 M * jpic_ should i try with "~VC_NXF_SINGLE_IP" ? 1256812589 M * Bertl okay, then please start it with 'strace -fF -o mysqld.trace /path/to/mysqld' and upload the trace file somewhere 1256812614 M * Bertl no, you can check in /proc/virtnet//*, the nflags are listed there 1256812634 M * Bertl 0x100 is the single_ip, so it should end now in 0200 instead of 0300 1256812649 M * jpic_ trace: http://nopaste.com/p/aqAarHcXl 1256812653 Q * friendly Quit: Leaving. 1256812664 M * jpic_ bind(8, {sa_family=AF_INET, sin_port=htons(3306), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EADDRNOTAVAIL (Cannot assign requested address) 1256812698 M * jpic_ true, that worked: Flags: 0000000406000200 1256812816 Q * laptopnenolod Ping timeout: 480 seconds 1256812816 M * Bertl inside the guest, what does 'ifconfig -a' or 'ip a ls' show? 1256812846 M * Bertl and what is the exact kernel and Linux-VServer patch version? 1256812883 M * jpic_ interresting! it looks normal except that there is no loopback: http://nopaste.com/p/a3ETwtdiI 1256812889 M * jpic_ 2.6.29.2-grsec2.1.14-vs2.3.0.36.12-jpic-v5 1256812919 M * jpic_ it worked a few months ... wihtout a single problem, but it looks like it crashed this morning adn i have no idea why 1256812935 M * jpic_ nothing interrestign in the host logs 1256813077 M * jpic_ is it normal that the guest doesn't have any loopback interface? that looks strange to me 1256813179 M * harobed also about my issue : "For a period of 2 months, the server file system has switched three times into the readonly mode", when I launch fsck I've many many many message : "Deleted inode 10838433 has zero dtime". Is it important information ? 1256813202 M * harobed it isn't issue about " Problems due to Xattrs " ? 1256813329 M * Bertl jpic_: nope, with your config, it should show an lo 1256813354 M * Bertl harobed: what kernel version? 1256813397 M * harobed 2.6.26-1-vserver-686 1256813425 M * Bertl ah, the known-broken debian one ... why am I not surprised :) 1256813464 M * Bertl I'd suggest to update to 2.6.31.x (fix all the messed up attributes and do a thorough fsck on the filesystem and you should be fine) 1256813499 M * harobed Bertl, I didn't found information about it on http://www.linux-vserver.org/Installation_on_Debian 1256813503 M * jpic_ Bertl: at least it works on 192.168.1.101, do you suggest to fix mysqld/postmaster bind ip or the loopback? 1256813535 M * harobed Bertl, I need to compile kernel from source or I have a binary kernel package ? 1256813951 M * Bertl jpic_: I suspect either something in your guest config is messed up, or your kernel is (somewhat) broken, if you like, you can wrap up the guest and its config (tar should do with proper options) and I'll test drive it here to see what is wrong 1256814372 M * Bertl harobed: there are folks (see ML) which provide prebuilt kernels for debian 1256814398 M * Bertl harobed: but IMHO, the better approach is to build your own, custom tailored kernel 1256815045 M * jpic_ thanks for checking Bertl, that's very nice 1256815075 A * jpic_ awaits to know if he's an idiot or if a bug was hit xD 1256815321 M * Bertl everything fine .. start here without any issues: http://paste.linux-vserver.org/13587 1256815360 M * Bertl (well, except for the missing mount points, but that's expected) 1256815387 M * Bertl btw, you do not need to use dummy0 or aliases, but YMMV (i.e. as you can see, it works anyways) 1256815690 M * jpic_ i don't unless i want to forward ports? 1256815715 M * Bertl nah, in any case, dummy0 is not involved 1256815733 M * Bertl if it were, the packets would get dropped (dummy0 is a datasink) 1256815768 M * jpic_ nothing is logged to syslog when i restart net.lo in the vserver 1256815879 M * jpic_ interresting, the host doesn't have lo neither 1256815965 M * jpic_ ok, for some reason net.lo was not starte dby the host. Starting it on the host fixed the issue! 1256815969 M * jpic_ thanks Bertl 1256815977 M * jpic_ i owe you a beer ;) 1256816039 M * jpic_ i'm going to take more precautions 1256816110 M * jpic_ on my other gentoo setups, there was no need to start net.lo ... i wonder what happens 1256816157 M * Bertl on the guest, no network setup is required, on the host, you have to setup the 'normal' network stuff 1256816185 M * jpic_ i don't understand why lo doesn't up itself on boot anymore 1256816364 M * jpic_ i'll investigate at night, thanks again 1256816991 J * hparker ~hparker@65.171.118.206 1256817221 M * Bertl you're welcome! 1256817410 Q * yarihm Quit: This computer has gone to sleep 1256817604 J * doener ~doener@i59F55090.versanet.de 1256817711 Q * doener_ Ping timeout: 480 seconds 1256819236 J * yarihm ~yarihm@guest-docking-nat-1-036.ethz.ch 1256819447 Q * PowerKe Ping timeout: 480 seconds 1256819524 M * geb micah, here ? :) 1256819710 Q * jpic_ Quit: leaving 1256819837 J * SubZero ~SubZero@chello089076140236.chello.pl 1256820987 J * thierryp ~thierry@lns-bzn-47f-62-147-212-202.adsl.proxad.net 1256821434 J * xdr_ ~xdr@h-238-74.A219.priv.bahnhof.se 1256821542 Q * xdr Ping timeout: 480 seconds 1256822275 J * PowerKe ~tom@d5153A2D7.access.telenet.be 1256822324 Q * yarihm Quit: This computer has gone to sleep 1256825719 J * balbir_ ~balbir@122.172.32.211 1256826431 J * SubZero_ ~SubZero@chello089076140236.chello.pl 1256826640 J * MooingLe1ur ~troy@shells195.pinchaser.com 1256826648 J * carnage ~carnage@voip-colo-74-86-148-74.link2voip.com 1256826656 J * mathx_ ~math@sizone.org 1256826670 J * agaffney_ ~agaffney@71-81-81-131.dhcp.stls.mo.charter.com 1256826673 J * dowdle ~dowdle@scott.coe.montana.edu 1256826687 Q * SubZero synthon.oftc.net weber.oftc.net 1256826687 Q * hparker synthon.oftc.net weber.oftc.net 1256826687 Q * scientes__ synthon.oftc.net weber.oftc.net 1256826687 Q * agaffney synthon.oftc.net weber.oftc.net 1256826687 Q * infowolfe synthon.oftc.net weber.oftc.net 1256826687 Q * MooingLemur synthon.oftc.net weber.oftc.net 1256826687 Q * carnage_ synthon.oftc.net weber.oftc.net 1256826687 Q * sardyno synthon.oftc.net weber.oftc.net 1256826687 Q * puck synthon.oftc.net weber.oftc.net 1256826687 Q * mathx synthon.oftc.net weber.oftc.net 1256826687 Q * routinedecilit synthon.oftc.net weber.oftc.net 1256826687 Q * faheem synthon.oftc.net weber.oftc.net 1256826696 J * faheem ~faheem@rrcs-70-63-128-198.midsouth.biz.rr.com 1256826704 N * agaffney_ agaffney 1256826746 Q * manana Ping timeout: 480 seconds 1256826842 J * puck ~puck@leibniz.catalyst.net.nz 1256826874 J * infowolfe ~infowolfe@c-76-105-242-186.hsd1.or.comcast.net 1256827241 J * manana ~mayday090@84.17.25.149 1256827333 J * sardyno ~me@pool-173-75-5-88.pitbpa.fios.verizon.net 1256827339 J * hparker ~hparker@65.171.118.206 1256830221 Q * urbee Ping timeout: 480 seconds 1256830266 J * urbee ~quoteS@BSN-143-37-10.dial-up.dsl.siol.net 1256830365 Q * thierryp Remote host closed the connection 1256830420 M * ghislainocfs2 bertl: a silly question, is there any work that you foresee on the quota for shared partition for 2.3 :) ? 1256830439 A * ghislainocfs2 hide behind a rock 1256830610 Q * AndrewLee Read error: Connection reset by peer 1256830811 J * AndrewLee ~andrew@u7.hlc.edu.tw 1256831092 Q * geb Ping timeout: 480 seconds 1256831213 M * Bertl ghislainocfs2: quota or disk limits? 1256831280 Q * Piet Remote host closed the connection 1256831305 Q * infowolfe Ping timeout: 480 seconds 1256831323 M * ghislainocfs2 bertl: quota 1256831419 M * Bertl not planned, there are filesystems (e.g. xfs) which have a notion of 'project id' that can be used for this purpose, but for the typical filesystems, it's too intrusive and the kernel quota system doesn't allow for more than the traditional quota (yet) 1256831444 M * Bertl (we had that with the quota hashes, but the demand was neglectable) 1256831502 J * Piet ~piet@04ZAABUV9.tor-irc.dnsbl.oftc.net 1256831512 M * ghislainocfs2 bertl: yes i was pretty sure it was like this :) just wanted to check as there is quite some job done lately :) 1256831754 J * geb ~geb@earth.gebura.eu.org 1256832085 M * mathx_ so 1256832091 M * mathx_ vhashify doesnt work, or im doing this wrong? 1256832098 M * mathx_ two vservers sposta be identical 1256832104 M * mathx_ i build cloned one. 1256832107 M * mathx_ have NOT touched fstab 1256832108 M * mathx_ stat /data/vservers/chick*/etc/fstab | grep Inode 1256832108 M * mathx_ Device: fd00h/64768d Inode: 3525426701 Links: 1 1256832108 M * mathx_ Device: fd00h/64768d Inode: 295758487 Links: 1 1256832151 M * mathx_ cant find two identical files anywhere. 1256832163 M * mathx_ (rather, two files sharing the same inode). isnt it done with hardlinks? 1256832793 M * Bertl http://linux-vserver.org/Frequently_Asked_Questions#How_do_I_manage_a_multi-guest_setup_with_vhashify.3F 1256832837 M * Bertl once the hash store exists, and the guest is unified/hasified, the clone build method will also create hardlinked copies 1256832893 M * Bertl also note that by default only binaries and libraries are hashified (or the other way round, config files are usually excluded) 1256833000 M * mathx_ oh. 1256833007 M * mathx_ how can i force include more stuff 1256833014 M * mathx_ like the whole server? cuz its mostly data i want cloned 1256833022 M * mathx_ cuz there's 80 gigs of that and like what, a whole GIG maybe of binaries 1256833069 M * mathx_ (and yes of course i followed the faq there, which doesnt say much about what's common between cloned servers) 1256833173 M * Bertl http://www.nongnu.org/util-vserver/doc/conf/configuration.html 1256833182 M * Bertl search for vunify and exclude there 1256833230 M * Bertl (there is a default and per guest config) 1256833324 M * mathx_ kcool 1256833376 N * mathx_ mathx 1256833380 M * mathx thx! 1256833472 M * Bertl you're welcome! 1256834664 J * hijacker ~hijacker@87-126-142-51.btc-net.bg 1256835463 Q * jrdnyquist Quit: Leaving 1256835568 Q * manana Ping timeout: 480 seconds 1256835613 Q * BWare Quit: *p00f* 1256835918 J * bonbons ~bonbons@2001:960:7ab:0:2c0:9fff:fe2d:39d 1256836084 J * manana mayday_216@84.17.25.144 1256836118 Q * davidkarban Quit: Ex-Chat 1256836586 Q * harobed Quit: Ex-Chat 1256836787 Q * SubZero_ 1256836979 M * geb harry, here ? 1256837002 M * geb i was running a linux-image-2.6.29.6-grsec2.1.14-vs2.3.0.36.14 1256837008 M * geb http://paste.linux-vserver.org/13589 1256837039 M * geb also http://paste.linux-vserver.org/13590 1256837090 M * geb => the kernel crashed after a flood of "refcount overflow detected in" in a very short timeframe (4 seconds) 1256837157 J * thierryp ~thierry@lns-bzn-47f-62-147-212-202.adsl.proxad.net 1256837330 M * geb i think that the flood of recount overflow may have caused the crash of the kernel but i am really not sure... 1256837810 J * yarihm ~yarihm@guest-docking-nat-1-097.ethz.ch 1256838525 Q * yarihm Quit: This computer has gone to sleep 1256838545 J * yarihm ~yarihm@guest-docking-nat-1-097.ethz.ch 1256839026 Q * yarihm Ping timeout: 480 seconds 1256839085 Q * thierryp Remote host closed the connection 1256839247 M * geb i added a complete log and the kernel config at http;//poolp.org/~gebura/ 1256843768 Q * arekm Ping timeout: 480 seconds 1256843818 Q * ncopa Ping timeout: 480 seconds 1256843833 J * ncopa ~ncopa@90.149.48.245 1256844140 J * arekm arekm@carme.pld-linux.org 1256844554 J * thierryp ~thierry@lns-bzn-47f-62-147-212-202.adsl.proxad.net 1256844618 Q * mnemoc Quit: leaving 1256844798 Q * karasz Quit: leaving 1256845010 Q * imcsk8 Quit: This computer has gone to sleep 1256845035 M * harry geb: i know... :) 1256845044 M * harry working on it in the latest kernel... 1256845347 Q * ncopa Quit: Ex-Chat 1256845384 M * geb :-) 1256845466 M * geb so, you think that the problem is from your patch, not from grsecurity itself ? (i was thinking about dropping a mail to grsec team) 1256845586 Q * nkukard Ping timeout: 480 seconds 1256845653 J * nkukard ~nkukard@196.212.73.74 1256845662 Q * thierryp Remote host closed the connection 1256846436 Q * manana Ping timeout: 480 seconds 1256846959 J * manana ~mayday090@84.17.25.149 1256847319 J * mnemoc ~amery@chewbacca.easy-cloud.net 1256847319 J * yepsen ~yepsen@pdbn-5d82473e.pool.mediaWays.net 1256847345 M * yepsen hi i search a update howto for 2.6.18-6-vserver-amd64 to 2.6.26-2-vserver-amd64 :/ 1256847526 J * laptopnenolod ~nenolod@cpe-67-246-196-110.maine.res.rr.com 1256847660 Q * mnemoc Quit: leaving 1256848430 J * mnemoc ~amery@shell.opensde.net 1256848642 M * geb yepsen, debian ? 1256848654 M * geb simply apt-get update && dist-upgrade 1256848697 M * geb *but* 2.6.26 kernel has some bugs, you may building your own, or using zbla.org/debian || http://kernels.bristolwireless.net/ 1256848720 M * geb the bugs are documented here http://linux-vserver.org/Installation_on_Debian 1256848780 M * geb do you know if the author of http://kernels.bristolwireless.net/ is here (i found a "bug" on his kernel) 1256849296 J * karasz ~karasz@shell.opensde.net 1256849697 J * duckx ~Duck@81.57.39.234 1256849874 Q * manana Read error: Connection timed out 1256849913 J * manana ~mayday090@84.17.25.149 1256850288 Q * SauLus Remote host closed the connection 1256850312 J * saulus ~saulus@c152077.adsl.hansenet.de 1256850459 J * mathx_ ~math@sizone.org 1256850478 Q * laptopnenolod synthon.oftc.net graviton.oftc.net 1256850478 Q * sardyno synthon.oftc.net graviton.oftc.net 1256850478 Q * dowdle synthon.oftc.net graviton.oftc.net 1256850478 Q * mathx synthon.oftc.net graviton.oftc.net 1256850478 Q * MooingLe1ur synthon.oftc.net graviton.oftc.net 1256850478 Q * FireEgl synthon.oftc.net graviton.oftc.net 1256850478 Q * nenolod synthon.oftc.net graviton.oftc.net 1256850478 Q * QMan synthon.oftc.net graviton.oftc.net 1256850478 J * QMan_ ~QMan@gateway.qsolutions.org 1256850642 Q * agaffney synthon.oftc.net osmotic.oftc.net 1256850642 Q * carnage synthon.oftc.net osmotic.oftc.net 1256850642 Q * balbir_ synthon.oftc.net osmotic.oftc.net 1256850642 Q * DreamerC synthon.oftc.net osmotic.oftc.net 1256850642 Q * Snow-Man synthon.oftc.net osmotic.oftc.net 1256850642 Q * fback synthon.oftc.net osmotic.oftc.net 1256850642 Q * Guest1461 synthon.oftc.net osmotic.oftc.net 1256850687 Q * hparker synthon.oftc.net larich.oftc.net 1256850687 Q * puck synthon.oftc.net larich.oftc.net 1256850687 Q * faheem synthon.oftc.net larich.oftc.net 1256850687 Q * uva synthon.oftc.net larich.oftc.net 1256850687 Q * gerrit synthon.oftc.net larich.oftc.net 1256850687 Q * mugwump synthon.oftc.net larich.oftc.net 1256850687 Q * tam synthon.oftc.net larich.oftc.net 1256850687 Q * micah synthon.oftc.net larich.oftc.net 1256850708 J * Guest1461 ~Genghis@ph34r.my.d-n-s.org.uk 1256850708 J * fback fback@red.fback.net 1256850708 J * Snow-Man ~sfrost@tamriel.snowman.net 1256850708 J * DreamerC ~DreamerC@122-116-181-118.HINET-IP.hinet.net 1256850708 J * balbir_ ~balbir@122.172.32.211 1256850708 J * carnage ~carnage@voip-colo-74-86-148-74.link2voip.com 1256850708 J * agaffney ~agaffney@71-81-81-131.dhcp.stls.mo.charter.com 1256850708 J * dowdle_ ~dowdle@scott.coe.montana.edu 1256850708 J * MooingLemur ~troy@shells195.pinchaser.com 1256850725 Q * FloodServ Service unloaded 1256850756 J * hparker ~hparker@65.171.118.206 1256850756 J * puck ~puck@leibniz.catalyst.net.nz 1256850756 J * faheem ~faheem@rrcs-70-63-128-198.midsouth.biz.rr.com 1256850756 J * uva bno@118-160-167-89.dynamic.hinet.net 1256850756 J * gerrit ~gerrit@ionscale.com 1256850756 J * mugwump ~samv@watts.utsl.gen.nz 1256850756 J * tam ~tam@gw.nettam.com 1256850756 J * micah ~micah@micah.riseup.net 1256850858 Q * mathx_ synthon.oftc.net weber.oftc.net 1256850858 Q * mnemoc synthon.oftc.net weber.oftc.net 1256850858 Q * nkukard synthon.oftc.net weber.oftc.net 1256850858 Q * AndrewLee synthon.oftc.net weber.oftc.net 1256850863 J * mathx_ ~math@sizone.org 1256850863 J * mnemoc ~amery@shell.opensde.net 1256850863 J * nkukard ~nkukard@196.212.73.74 1256850863 J * AndrewLee ~andrew@u7.hlc.edu.tw 1256851144 J * nenolod ~nenolod@petrie.dereferenced.org 1256851193 J * FireEgl Proteus@2001:470:e056:1:4::9 1256851334 J * sardyno ~me@pool-173-75-5-88.pitbpa.fios.verizon.net 1256851355 J * laptopnenolod ~nenolod@cpe-67-246-196-110.maine.res.rr.com 1256851986 J * FloodServ services@services.oftc.net 1256852132 Q * yepsen Ping timeout: 480 seconds 1256852507 Q * hijacker Quit: Leaving 1256853036 M * fback good evening! 1256853244 J * yepsen ~yepsen@pdbn-5d826058.pool.mediaWays.net 1256853295 Q * bonbons Quit: Leaving 1256854483 Q * mnemoc Quit: Reconnecting 1256854484 J * mnemoc ~amery@shell.opensde.net 1256854577 Q * mnemoc 1256854578 J * mnemoc ~amery@shell.opensde.net 1256854594 Q * mnemoc 1256854897 Q * geb Quit: / 1256854952 Q * yepsen Ping timeout: 480 seconds 1256854986 J * yepsen ~yepsen@pdbn-5d825dc2.pool.mediaWays.net 1256855592 J * geb ~geb@earth.gebura.eu.org 1256855593 Q * geb 1256859229 Q * dowdle_ Remote host closed the connection 1256859446 J * ghislainocfs21 ~Ghislain@adsl2.aqueos.com 1256859540 Q * fLoo Ping timeout: 480 seconds 1256859655 Q * ghislainocfs2 Ping timeout: 480 seconds 1256859707 Q * Loki|muh Quit: leaving 1256859901 J * thierryp ~thierry@lns-bzn-47f-62-147-212-202.adsl.proxad.net 1256859986 J * fLoo ~fLoo@2001:6f8:119b:ffff::1 1256860295 Q * thierryp Remote host closed the connection