1273194559 Q * Romster Ping timeout: 480 seconds 1273199416 J * Romster ~romster@202.168.100.149.dynamic.rev.eftel.com 1273201250 J * SauLus_ ~SauLus@c135243.adsl.hansenet.de 1273201626 Q * SauLus Ping timeout: 480 seconds 1273201626 N * SauLus_ SauLus 1273207821 N * Bertl_zZ Bertl 1273207825 M * Bertl morning folk! 1273207924 M * Bertl +s 1273209213 M * Bertl off for breakfast now ... bbl 1273209218 N * Bertl Bertl_oO 1273210284 J * ntrs ~ntrs@77.28.166.170 1273211306 J * ghislain ~AQUEOS@adsl2.aqueos.com 1273211548 J * mtg ~mtg@port-87-193-189-26.static.qsc.de 1273212047 N * Bertl_oO Bertl 1273212051 M * Bertl back now ... 1273212156 J * ncopa ~ncopa@180.40.189.109.customer.cdi.no 1273212641 J * petzsch ~markus@dslb-188-103-057-194.pools.arcor-ip.net 1273213169 Q * petzsch Quit: Leaving. 1273213488 Q * derjohn_mob Ping timeout: 480 seconds 1273214845 M * Bertl off for now .. bbl 1273214849 N * Bertl Bertl_oO 1273214922 J * ktwilight ~keliew@91.179.217.240 1273215161 Q * ktwilight_ Ping timeout: 480 seconds 1273216791 J * BenG ~bengreen@cpc2-aztw22-2-0-cust521.aztw.cable.virginmedia.com 1273217212 N * Bertl_oO Bertl 1273217223 M * Bertl back now ... 1273217450 J * derjohn_mob ~aj@213.238.45.2 1273219100 J * imcsk8 ~ichavero@87.Red-80-35-114.staticIP.rima-tde.net 1273221198 J * ntrs_ ~ntrs@77.29.87.101 1273221627 Q * ntrs Ping timeout: 480 seconds 1273221882 J * thierryp ~thierry@s252roc.vpn.inria.fr 1273222198 Q * thierryp Quit: ciao folks 1273222223 Q * balbir Read error: Connection reset by peer 1273222328 Q * bsarora Read error: Connection reset by peer 1273222636 Q * BenG Remote host closed the connection 1273223044 J * thierryp ~thierry@s242roc.vpn.inria.fr 1273223079 J * balbir ~balbir@122.172.15.92 1273223288 Q * imcsk8 Quit: This computer has gone to sleep 1273223345 Q * arekm Quit: leaving 1273223360 J * sannes ~ace@195.139.9.176 1273223506 M * sannes I'm trying to enable using namespaces within a vserver adding "namespace" to /etc/vservers/guest/ccapabilities (restarting the vserver), however when doing unshare -m /bin/bash it says operation not permitted, what am I forgetting? (I was sure that this worked a couple of months ago) 1273223541 M * Bertl you probably have an evil namespace enabled and no unshare mask set 1273223557 N * DoberMann[ZZZzzz] DoberMann 1273223561 J * barismetin ~barismeti@zanzibar.inria.fr 1273223669 M * sannes unshare mask? hm 1273223698 M * sannes And what is evil an namespace? :P 1273223796 J * arekm arekm@carme.pld-linux.org 1273223820 M * Bertl CONFIG_PID_NS and CONFIG_NET_NS might be bad for unsharing inside a guest 1273223898 Q * thierryp Remote host closed the connection 1273223917 M * sannes I have UTS, PID and User namespace, should i disable those? 1273223926 M * sannes (do not have pid and net ns) 1273223946 M * Bertl PID vs pid? 1273223964 M * Bertl do you mean IPC? 1273223991 M * Bertl and are you sure that PID and NET are disabled in the kernel config? 1273224073 M * sannes ugh 1273224082 A * sannes misread 1273224093 M * sannes yes, I mean IPC 1273224148 Q * swenTjuln Ping timeout: 480 seconds 1273224152 M * sannes Bertl: yes, I am sure 1273224183 M * Bertl okay, can you strace -fF the unsahre for me and upload somewhere? 1273224264 Q * arekm Remote host closed the connection 1273224455 M * sannes sure, but it stops on the unshare(CLONE_NEWNS); (actually have a small program myself, same thing) 1273224679 M * sannes http://pastebin.org/205820 1273224780 M * sannes Oh, and I'm running: 2.6.32.2 + vs2.3.0.36.30.4 if it matters 1273224793 M * Bertl cat /proc/virtual//status 1273224803 M * Bertl (with the guest xid please :) 1273224899 M * sannes http://pastebin.org/205827 1273224903 M * Bertl tx 1273224956 M * sannes and using util-vserver 0.30.216_pre2883 1273225027 M * Bertl will take a little, my server is currently unreachable 1273225068 M * sannes I'm in no rush :) 1273225158 M * sannes I remember I tried it out before the util-vserver had the namespace ccapabilit name and I had to do 0x20000 or something like that to enable the VXC_NAMESPACE thing and was very happy when it worked, and I now finally had some more time to play around with it and now it did not work, so I was wondering if it was all in my head earlier :P 1273225230 M * Bertl two more zeroes, but yes ... ah, maybe you have the CGROUP_NS enabled? 1273225239 Q * balbir Ping timeout: 480 seconds 1273225289 M * sannes zcat /proc/config.gz | grep CGROUP says no 1273225328 M * Bertl okay, then we have to wait for now ... 1273225329 M * urbee ok, i screwed up something, i've added the main host IP in the vserver creation command, and in the middle of install my server went offline - could that be the reason? :) 1273225332 M * urbee i did not run it though 1273225356 M * Bertl unlikely, but could be 1273225381 M * urbee I: Configuring tasksel... 1273225381 M * urbee I: Base system installed successfully. 1273225385 M * urbee this is where it stopped 1273225417 M * Bertl if you specified the device too, i.e. eth0: ... then util-vserver probably brought the IP down after configuration 1273225435 M * urbee yeah 1273225439 M * Bertl means, you need to connect via serial console and bring it up again 1273225441 M * urbee that was it :) 1273225445 M * urbee i've got it up and running 1273225453 M * urbee just happy it wasnt some hardware failure AGAIN!! 1273225659 J * arekm ~arekm@carme.pld-linux.org 1273226015 J * balbir ~balbir@122.172.163.242 1273226200 M * Bertl off for lunch ... bbs 1273226204 N * Bertl Bertl_oO 1273227100 J * imcsk8 ~ichavero@87.Red-80-35-114.staticIP.rima-tde.net 1273228268 J * jrklein ~jrklein@2001:0:53aa:64c:0:5010:b97d:df43 1273228293 J * mcp ~mcp@wolk-project.de 1273228409 Q * imcsk8 Quit: This computer has gone to sleep 1273229162 Q * balbir Ping timeout: 480 seconds 1273229358 N * Bertl_oO Bertl 1273229361 M * Bertl back now .. 1273229456 M * Waldgeist wb 1273229697 J * balbir ~balbir@122.172.41.67 1273230407 J * imcsk8 ~ichavero@87.Red-80-35-114.staticIP.rima-tde.net 1273231746 Q * imcsk8 Quit: This computer has gone to sleep 1273231918 M * sannes :) 1273231945 M * sannes Bertl: Any luck connecting to your server yet? 1273231967 Q * ntrs_ Read error: Connection reset by peer 1273231989 J * ntrs_ ~ntrs@77.28.175.166 1273233221 M * Bertl sannes: not yet 1273233828 Q * barismetin Quit: Leaving... 1273233845 J * barismetin ~barismeti@zanzibar.inria.fr 1273235297 J * jrklein_ ~jrklein@2001:0:53aa:64c:0:5010:b97d:df43 1273235350 Q * jrklein Ping timeout: 480 seconds 1273235350 N * jrklein_ jrklein 1273235370 Q * ktwilight Quit: dead 1273235965 J * dna ~dna@176-210-103-86.dynamic.dsl.tng.de 1273236645 J * petzsch ~markus@dslb-188-103-057-194.pools.arcor-ip.net 1273237162 Q * petzsch Quit: Leaving. 1273239903 Q * balbir Ping timeout: 480 seconds 1273240038 Q * derjohn_mob Ping timeout: 480 seconds 1273240514 J * balbir ~balbir@122.172.23.49 1273241412 Q * balbir Read error: Connection reset by peer 1273242737 J * dowdle ~dowdle@scott.coe.montana.edu 1273242823 J * ntrs__ ~ntrs@77.28.171.198 1273242868 J * balbir ~balbir@122.172.43.120 1273242994 J * ViRUS ~mp@p579B5EED.dip.t-dialin.net 1273243189 M * sannes Bertl: Anything I could check out for you? 1273243249 M * Bertl yes, in the source code, where EPERM is returned :) 1273243263 Q * ntrs_ Ping timeout: 480 seconds 1273243307 M * Bertl but my server should be back shortly :) 1273243343 J * thierryp ~thierry@home.parmentelat.net 1273243383 Q * balbir Ping timeout: 480 seconds 1273243584 Q * thierryp Remote host closed the connection 1273243830 J * derjohn_mob ~aj@tmo-100-248.customers.d1-online.com 1273244205 M * sannes Bertl: The if (!vx_capable(CAP_SYS_ADMIN, VXC_NAMESPACE)) return -EPERM; part? 1273244249 M * Bertl yes, but that one should be fine, as you should have virtual CAP_SYS_ADMIN, and definitely have VXC_NAMESPACE 1273244261 M * daniel_hozac (you are root, right?) 1273244273 M * sannes (daniel_hozac: yes :P) 1273244282 M * Bertl i.e. there is likely to be another one in the callpath 1273244592 Q * FireEgl Remote host closed the connection 1273244848 Q * derjohn_mob Ping timeout: 480 seconds 1273245184 J * imcsk8 ~ichavero@87.Red-80-35-114.staticIP.rima-tde.net 1273245188 J * balbir ~balbir@122.172.43.120 1273245484 J * FireEgl Proteus@WTF.4.1.0.c.0.7.4.0.1.0.0.2.ip6.arpa 1273245950 J * thierryp ~thierry@home.parmentelat.net 1273246507 Q * Waldgeist Ping timeout: 480 seconds 1273246583 Q * manana Remote host closed the connection 1273247379 P * sannes 1273247618 Q * ntrs__ Ping timeout: 480 seconds 1273248605 Q * mtg Quit: Verlassend 1273249246 Q * dowdle Remote host closed the connection 1273249335 J * dowdle ~dowdle@scott.coe.montana.edu 1273249634 Q * ncopa Quit: Ex-Chat 1273249645 Q * barismetin Quit: Leaving... 1273250057 Q * jrklein Quit: jrklein 1273251885 J * hparker ~hparker@2001:470:1f0f:32c:215:f2ff:fee0:9872 1273254912 Q * dna Quit: Verlassend 1273255816 M * Bertl off for dinner .. bbl 1273255827 N * Bertl Bertl_oO 1273256068 J * ntrs ~ntrs@77.28.30.127 1273256467 Q * hparker Quit: Quit 1273256617 Q * imcsk8 Quit: This computer has gone to sleep 1273256688 J * hparker ~hparker@2001:470:1f0f:32c:215:f2ff:fee0:9872 1273257849 J * fzylogic ~fzylogic@dsl081-243-128.sfo1.dsl.speakeasy.net 1273257861 M * fzylogic Bertl_oO: there? 1273258336 J * petzsch ~markus@p4FF47C17.dip.t-dialin.net 1273258618 J * jholland ~jholland@wsip-70-168-108-26.dc.dc.cox.net 1273259264 Q * jholland Remote host closed the connection 1273259473 Q * hparker Quit: Quit 1273259800 J * harobed ~harobed@arl57-1-82-231-110-14.fbx.proxad.net 1273259944 J * petzsch1 ~markus@p4FF47AAF.dip.t-dialin.net 1273260166 Q * petzsch1 1273260200 Q * petzsch Ping timeout: 480 seconds 1273260315 N * Bertl_oO Bertl 1273260324 M * Bertl fzylogic: I am now ... 1273260369 M * fzylogic found a cgroup-related bug in mainline, but it looks like something the vserver patch already attempts to fix 1273260387 M * fzylogic somehow some guest processes are getting set to oom_adj=-17 1273260419 M * fzylogic when there's an OOM with a cgroup in which all remaining processes are -17, the kernel gets stuck in an infinite loop 1273260445 M * fzylogic php5.cgi invoked oom-killer: gfp_mask=0xd0, order=0, oom_adj=-17 1273260451 M * fzylogic example of a -17 guest process 1273260544 M * fzylogic but it looks like any guest processes with OOM_DISABLE should be getting reset to OOM_ADJUST_MIN in fs/proc/base.c 1273260579 M * fzylogic wanted to get your input before I bring it up on the container list 1273260637 J * bonbons ~bonbons@2001:960:7ab:0:2c0:9fff:fe2d:39d 1273262097 Q * sur5r Remote host closed the connection 1273262552 J * petzsch ~markus@p4FF47AAF.dip.t-dialin.net 1273263091 M * fzylogic any thoughts? 1273263093 Q * petzsch Quit: Leaving. 1273265555 J * derjohn_mob ~aj@e181200246.adsl.alicedsl.de 1273265909 Q * fLoo Remote host closed the connection 1273266016 M * Bertl yes, we prohibit setting unkillable processes inside a guest 1273266027 M * Bertl but it would be a good idea to fix that for mainline cgroups 1273266186 M * fzylogic any idea how my guest processes are still coming up as -17 then? 1273266214 M * fzylogic it's crashing a few hosts each week 1273266414 Q * ntrs Ping timeout: 480 seconds 1273266675 Q * thierryp Quit: ciao folks 1273267199 J * hparker ~hparker@2001:470:1f0f:32c:215:f2ff:fee0:9872 1273269922 Q * derjohn_mob Ping timeout: 480 seconds 1273270424 J * imcsk8 ~ichavero@65.Red-80-38-6.staticIP.rima-tde.net 1273270833 Q * hparker Quit: Quit 1273271923 Q * imcsk8 Quit: This computer has gone to sleep 1273273323 Q * dowdle Remote host closed the connection 1273273969 Q * bonbons Quit: Leaving 1273276143 Q * harobed Ping timeout: 480 seconds