1311552478 N * Bertl_oO Bertl 1311553017 J * piA piA@188-192-165-86-dynip.superkabel.de 1311553020 Q * fLoo Read error: Connection reset by peer 1311554652 Q * piA 1311556746 J * SkyNet2000 ~SkyNet200@71-81-25-51.dhcp.gwnt.ga.charter.com 1311558151 M * jrklein Bertl: gtk. ty! 1311558181 M * jrklein It was not in my tool version, but I'll keep that in mind when I upgrade. 1311558250 M * jrklein There's always a chance it would have upon reboot. I rebooted after installing the kernel, but not after installing the tools. 1311558274 M * Bertl it's part of the runlevel scripts 1311558286 M * Bertl so I presume executing them would have done the trick 1311558429 M * jrklein ah yes.. I see it in init.d/util-vserver 1311559092 Q * ccxCZ Quit: ZNC - http://znc.sourceforge.net 1311559289 J * ccxCZ ~ccxCZ@193.209.forpsi.net 1311559603 J * aj__ ~aj@p4FFD0963.dip.t-dialin.net 1311559983 Q * derjohn_foo Ping timeout: 480 seconds 1311560060 Q * jrklein Remote host closed the connection 1311560148 J * jrklein ~osx@2001:470:1f0f:572::250:160 1311560207 M * jrklein I confirmed that util-vserver restart && vservers-default start DID init cgroups. 1311560458 M * Bertl excellent! 1311561653 Q * SkyNet2000 Quit: Leaving 1311561667 J * SkyNet2000 ~SkyNet200@71-81-25-51.dhcp.gwnt.ga.charter.com 1311563374 M * Bertl off to bed now ... have a good one everyone! 1311563382 N * Bertl Bertl_zZ 1311566901 Q * jrklein Remote host closed the connection 1311566903 J * jrklein ~osx@2001:470:1f0f:572::250:160 1311567993 J * sannes ~ace@cm-84.209.106.118.getinternet.no 1311570752 J * ghislain ~AQUEOS@adsl2.aqueos.com 1311573615 Q * SkyNet2000 Quit: Leaving 1311574004 Q * fichte` Quit: bashpipe 1311574014 J * FIChTe ~fichte@bashpipe.de 1311574025 Q * nkukard Remote host closed the connection 1311574030 J * ncopa ~ncopa@3.203.202.84.customer.cdi.no 1311576036 Q * hijacker Remote host closed the connection 1311577254 J * hijacker ~hijacker@213.91.163.5 1311577512 J * BenG ~bengreen@cpc12-aztw24-2-0-cust146.aztw.cable.virginmedia.com 1311579341 J * kir ~kir@swsoft-msk-nat.sw.ru 1311579363 M * arekm Bertl_zZ: hm, when net ns is used then netstat -nlp shows no listening sockets in guest. AFAIK this worked fine before 1311579383 M * arekm Bertl_zZ: when isolation is used then there is no such problem 1311579487 Q * BenG Ping timeout: 480 seconds 1311582447 Q * josef_ Remote host closed the connection 1311582559 J * josef_ ~josef@gw-gbg.ilait.se 1311582619 J * BenG ~bengreen@cpc12-aztw24-2-0-cust146.aztw.cable.virginmedia.com 1311583102 J * SwenTjuln ~SwenTjuln@77-111-2-36.ipv4.tusmobil.si 1311583829 M * daniel_hozac arekm: sounds like an upstream bug. 1311585202 M * Guy- daniel_hozac: how can I make a guest not have its own mount namespace? 1311585237 M * Guy- (it's my impression from reading the great flower page that 'nonamespace' turns off all namespaces, not just mount) 1311586072 M * SwenTjuln daniel_hozac: do you also maintain rhel packages for el6 ? 1311586132 Q * BenG Quit: I Leave 1311587153 N * Bertl_zZ Bertl_oO 1311587762 Q * aj__ Ping timeout: 480 seconds 1311587829 M * daniel_hozac no, nonamespace just disables the mount namespace. 1311587840 M * daniel_hozac it also disables the current chroot escape mechanism. 1311587872 M * daniel_hozac SwenTjuln: hmm, i'm not sure :-) 1311587898 M * daniel_hozac i don't have a rHEL6 host yet. 1311587971 M * daniel_hozac thank you irssi. 1311588015 J * BenG ~bengreen@cpc12-aztw24-2-0-cust146.aztw.cable.virginmedia.com 1311588129 M * padde is there a way to force a VServer to use a particular IP address for requests? specifically a squid instance should use a specific address, and I just can't get it to 1311588233 M * daniel_hozac it'll use the primary address... 1311588247 M * padde daniel_hozac: hm, and there is no way to change that? 1311588319 M * daniel_hozac change what's the primary address? 1311588369 M * SwenTjuln daniel_hozac: up to me then ... :) 1311588376 J * ant-1 ~ant-1@80.78.6.61 1311588401 M * padde daniel_hozac: I want one vserver to use that particular IP address, since it'll get routed through a different WAN port 1311588415 M * padde daniel_hozac: is there a way to do that with iptables on the host or something? 1311588567 M * ant-1 Hello everybody! I'm searching for the vserver API for a week but I can't find it. 1311588772 M * hijacker padde, it is called SNAT 1311588807 M * hijacker or even bind the public address to the vserver itself, if that'd be dedicated address and just forward it 1311588884 M * padde hijacker: actually the IP address is configured as the VServers IP address, and the squid also reacts on that ip address - but when it makes a HTTP request, it does not use that IP address 1311588912 M * padde hijacker: which causes the routing of that request to go through the wrong WAN 1311588961 M * padde hijacker: how exactly could I make the squid HTTP requests originate from that VServer's IP address with SNAT? 1311589009 M * daniel_hozac SwenTjuln: just run rpmbuild -tb *.tar.bz2 --without beecrypt. to build util-vserver... 1311589021 M * daniel_hozac ant-1: hmm? 1311589043 M * daniel_hozac padde: what kernel are you using? 1311589055 M * daniel_hozac a vserver cannot use an address that is not assigned to it. 1311589065 M * padde daniel_hozac: but it *is* assigned to it 1311589076 M * padde daniel_hozac: 2.6.32-71.18.2.el6.vs2.3.0.36.29.6.10.i686 1311589109 M * ant-1 daniel: Is there an API to use vserver? 1311589116 M * daniel_hozac padde: you're gonna have to actually describe your setup 1311589137 M * daniel_hozac ant-1: API for what? 1311589141 M * daniel_hozac you have the kernel API. 1311589146 M * daniel_hozac you have the libvserver.so API. 1311589151 M * daniel_hozac you have the Python API. 1311589155 M * daniel_hozac you have the bash API. 1311589204 M * padde daniel_hozac: pretty simple: there is a host with 2 NICs, one NIC is connected to the DMZ (eth0), and one to INTERNAL (eth1). all in all there are 7 IP addresses, one for each of the six VServers, and one for the host 1311589241 M * padde daniel_hozac: the host's IP address is 192.168.0.30 on eth1, and then there is a VServer called 'web2' with the IP address 192.168.0.18 1311589325 M * padde daniel_hozac: when a browser has 192.168.0.18:3128 as proxy set, 'web2' responds, *but* it makes the HTTP request not with 192.168.0.18, but with another IP address (supposedly 192.168.0.30, because that's the primary IP address) 1311589397 M * hijacker padde, those are all private addresses 1311589438 M * hijacker does the host have a public IP address assigned? 1311589484 M * padde hijacker: indeed. they are all behind a router. that router has two WAN connections, WAN1 and WAN2. now I want that 'web2' proxy server's requests to go out through WAN2, which is why I configured the router to route packets originating from 192.168.0.18 through WAN2 - everything else goes out through WAN1 1311589497 M * daniel_hozac padde: well, paste ip a; ip r; iptables -t nat -nvL 1311589499 M * padde hijacker: no, it doesn't, and it doesn't need one 1311589613 M * padde daniel_hozac: http://p173.de/gp/index.php?id=16d00764b6 1311590452 M * Bertl_oO padde: and the guest has only 192.168.0.18 assigned? 1311590959 Q * BenG Quit: I Leave 1311590995 M * daniel_hozac padde: so how do you tell that the guest doesn't use 192.168.0.18? 1311591021 M * padde Bertl_oO: yes 1311591108 M * padde daniel_hozac: by the fact that the router doesn't route the packets through the correct WAN, i verified that the exact same route configuration for another non-vserver box gets routed correctly 1311591174 M * daniel_hozac have you tried connecting to other things? 1311591183 M * daniel_hozac i.e. local things where you can actually see the local IP? 1311591215 M * Bertl_oO or run tcpdump/wireshark to record the actual requests 1311591295 M * padde daniel_hozac: no, I should try that. i'm on the way home now though, and it's a little inconvenient to do that from my phone. so you are saying that it *should* automatically use the .18 ip address? 1311591309 M * daniel_hozac yes, of course. 1311591318 M * padde Bertl_oO: i'll do that, as soon as i have a proper keyboard again 1311591326 M * Bertl_oO especially if the guest has only .18 assigned 1311591401 M * padde ok, thanks. I'll continue tomorrow then..  1311594026 J * aj__ ~aj@ip-81-210-228-102.unitymediagroup.de 1311598615 Q * ant-1 Remote host closed the connection 1311598993 M * SwenTjuln daniel_hozac: "rpmbuild -tb *.tar.bz2 --without beecrypt" complains about dietlibc dependency. No such pkg for el6 though. 1311599307 M * daniel_hozac even in EPEL? 1311599547 M * SwenTjuln let me take a look 1311599581 J * BenG ~bengreen@cpc12-aztw24-2-0-cust146.aztw.cable.virginmedia.com 1311599683 J * nkukard ~nkukard@41-133-248-130.dsl.mweb.co.za 1311599695 M * SwenTjuln missing in EPEL also 1311599858 M * SwenTjuln i've built it successfully with "rpmbuild -tb util-vserver-0.30.216-pre2982.tar.bz2 --without beecrypt --without dietlibc". Not sure if it works yet 1311599868 M * daniel_hozac well 1311599881 M * daniel_hozac without diet is usually a bad idea. 1311599903 M * SwenTjuln ok... 1311599911 M * SwenTjuln i don't like bad ideas :D 1311599939 M * SwenTjuln so....should I rebuild srpm from el5? 1311599975 M * daniel_hozac probably 1311600000 M * SwenTjuln let me try that 1311600246 Q * BenG Remote host closed the connection 1311601366 M * SwenTjuln daniel_hozac: for the record. I used http://fedora.inode.at/fedora/linux/releases/15/Everything/source/SRPMS/dietlibc-0.33-0.1504.20101223.fc15.src.rpm 1311601404 M * daniel_hozac sounds reasonable. 1311601409 M * daniel_hozac does it work? :) 1311601444 M * SwenTjuln installed dietlibc and rebuilded util-vserver successfully 1311601565 M * Guy- daniel_hozac: "[nonamespace] also disables the current chroot escape mechanism" <- only one of them, no? barriers should still work, shouldn't they? 1311601609 M * daniel_hozac yes, barriers are the old mechanism. 1311601620 M * daniel_hozac not really used anymore. 1311601694 J * BenG ~bengreen@cpc12-aztw24-2-0-cust146.aztw.cable.virginmedia.com 1311601783 Q * BenG Remote host closed the connection 1311601819 M * Guy- what does that mean? 1311601867 M * Guy- ("they're not checked for everywhere they should", or "they'll disappear soon", or "they've stopped working months ago", ...?) 1311601908 M * daniel_hozac they're not really tested anymore. 1311601948 M * Guy- OK, thanks 1311603280 M * SwenTjuln daniel_hozac: yes it installs. But it wont play with http://rpm.hozac.com/dhozac/rhel/6/vserver/x86_64/ this kernel. Probably kernel/patch to old 1311603486 M * daniel_hozac what doesn't work? 1311603619 J * ryker ~Adium@c-98-213-172-127.hsd1.in.comcast.net 1311603894 M * SwenTjuln daniel_hozac: http://paste.linux-vserver.org/20534 1311605101 M * daniel_hozac i'm building a much newer kernel now 1311605535 J * dowdle ~dowdle@scott.coe.montana.edu 1311605624 M * SwenTjuln daniel_hozac: me to 1311605687 M * SwenTjuln daniel_hozac: I have a problem, though. Rpmbuild throws following warning at me: "boolean symbol IPV6 tested for 'm'? test forced to 'n'" 1311605715 M * SwenTjuln Does this mean that I wont be able to use IPV6? 1311605959 M * karasz kernel 2.6.32.41-vs2.3.0.36.29.7 1311605976 M * karasz util-vserver 0.30.216-pre2883 1311606011 M * SwenTjuln karasz: stable? 1311606034 M * karasz i cannot seem to be able to force services inside the guest to listen on 127.0.0.1 1311606058 M * karasz !sigle_ip in nflags results in services listening on 0.0.0.0 1311606078 M * karasz i ment ~single_ip 1311606130 M * SwenTjuln how about without ~single_ip? 1311606203 M * SwenTjuln karasz: this is actually not such a big problem for me as I am behind firewall 1311606261 M * SwenTjuln daniel_hozac: will you make RPMs available? 1311606377 J * BenG ~bengreen@cpc12-aztw24-2-0-cust146.aztw.cable.virginmedia.com 1311606402 M * daniel_hozac SwenTjuln: yeah. 1311606477 M * SwenTjuln i've just successfully build 2.6.38.8 RPM, but I forgot to set buildid :( 1311606763 Q * BenG Quit: I Leave 1311606889 J * BenG ~bengreen@cpc12-aztw24-2-0-cust146.aztw.cable.virginmedia.com 1311608969 J * petzsch ~markus@dslb-188-103-059-254.pools.arcor-ip.net 1311609083 Q * petzsch 1311609202 J * petzsch ~markus@dslb-188-103-059-254.pools.arcor-ip.net 1311609220 J * ryker1 ~Adium@c-76-16-115-27.hsd1.in.comcast.net 1311609238 Q * ncopa Quit: Leaving 1311609293 Q * petzsch 1311609311 J * hparker ~hparker@2001:470:1f0f:32c:beae:c5ff:fe01:b647 1311609381 Q * ryker Ping timeout: 480 seconds 1311609582 Q * eyck Ping timeout: 480 seconds 1311609940 J * bonbons ~bonbons@2001:960:7ab:0:2c70:6195:d167:c1b5 1311610608 Q * BenG Quit: I Leave 1311611535 Q * aj__ Read error: No route to host 1311612919 J * jamieson ~jamieson@71.11.175.78 1311617398 N * Bertl_oO Bertl 1311618807 J * derjohn_mob aj@tmo-039-54.customers.d1-online.com 1311620303 J * ryker ~Adium@c-76-16-115-27.hsd1.in.comcast.net 1311620303 Q * ryker1 Read error: Connection reset by peer 1311622678 Q * derjohn_mob Ping timeout: 480 seconds 1311623613 Q * ghislain Quit: Leaving. 1311624544 J * derjohn_mob aj@88.128.172.223 1311625403 J * BenG ~bengreen@cpc12-aztw24-2-0-cust146.aztw.cable.virginmedia.com 1311625538 M * jamieson are there any huge disadvantages in terms of isolation between linux-vserver and xen? 1311625742 M * jamieson in other words, if I deploy abusive users in vservers, are there any ways that they could abuse shared resources (like disk I/O) versus Xen? Disk I/O is Xen's (and vmware etc) achilles' heel -- are there any other ones of these for vservers? so far I've been blessed with great customers, but just wondering if, say, running bonnie++ would have more of an impact with vserver versus xen 1311625799 M * jamieson every tiny EC2 instance that I've tried is dog slow compared to my vserver instances, and am also wondering if they just have heavier users or what. 1311625853 M * jrayhawk well, and hypervisors obviously involve a lot more context switching and scheduling overhead 1311625905 M * jamieson jrayhawk: definitely. seems like vserver wins out in almost any way... and with vserver's new cgroup etc (or ubc in ovz), what's the risk.. 1311625928 M * jamieson dreamhost's vps have lots of reports of dog-slowedness also 1311625978 M * jrayhawk the performance is more dependant on how aggressively a given hosting company oversells their resources. 1311625985 M * jamieson (they're running on linux-vserver) .. wonder if there are any more huge providers like that. 1311626009 M * jamieson jrayhawk: yes, but xen isn't supposed to be able to be oversold (wondering if they're using loopback images instead of lvm on EC2)... 1311626042 Q * bonbons Quit: Leaving 1311626049 M * jamieson if you didn't oversell at all, the real differentiation is disk I/O, right? anything else? obviously lots of things like file handles (eaten up by bittorrent, for instance) 1311626072 P * kir Leaving. 1311626082 M * jamieson I've had an errant user (me!) take down a xen box altogether with too much torrenting 1311626090 M * jamieson all legal of course :) 1311626118 M * jrayhawk Ha ha, I would've expected a xen domU to actually be harder to DoS than a vserver 1311626146 M * jrayhawk err, a xen domU to cause a system-wide DoS, rather. 1311626147 M * jamieson me too! but why... 1311626161 M * jamieson in other words, what specific factors can cause a vserver to dos the whole box 1311626217 M * jamieson only disk i/o? lots of resource limiting options... token-based cpu accounting seems decent enough, are there any hidden pitfalls with that... generally the biggest issue seems to be I/O for any of these solutions. what about heavy mysql users. 1311626262 M * jamieson drupal (i'm not a fan:) on a heavy site, for instance... does vserver suffer at all compared to xen for something that's resource intensive on the DB? 1311626292 M * jrayhawk The amount of unschedulable code (and available interface to that code) is enormous on the Linux kernel and fairly small on the Xen hypervisor. 1311626340 M * jrayhawk Local userspace DoSes on the Linux kernel are not particularly rare and can't realistically be relied upon not to exist. 1311626357 M * jamieson agreed -- but what specific vectors could they take? 1311626387 M * jamieson i'm not talking malicious -- just regular usage with normal applications... cpu, ram, i/o? something else entirely? 1311626486 M * jamieson i'm asking for this reason: if I run 100 vservers on a single box, am I likely to have to deal with contention issues/evil users frequently, or will it be the exception, in general terms. in xen, everyone takes a big performance hit and it seems like you can still take down the box in normal use (ie torrents) 1311626517 M * jamieson (and EC2 -- slow as molasses, even with xen, and apparently without overselling) 1311626525 M * jrayhawk I don't see the hardware paths themselves being an issue, only scheduling. Process and I/O scheduling are (mostly) adequately solved problems, everything we run into now is a matter of code causing deadlocks or otherwise having termination problems. 1311626526 M * Bertl given that cpu and io schedulers are configure properly, you can at least mitigate extremly hostile behaviour 1311626534 M * Bertl *configured 1311626588 M * Bertl in general you benefit from the advanced sharing and minimal overhead of isolation vs. full machine virtualization 1311626595 M * jamieson Bertl -- what about non-hostile behavior like heavy DB usage, torrenting, etc? does the i/o nice and limits work as well as xen's? (single filesystem with disk limits via chxid, not using single lvm per vserver) 1311626634 M * Bertl well, IMHO xen is almost dead, so I prefer to compare it with kvm instead 1311626639 M * jamieson Bertl - that makes so much sense to me! that's basically the conclusion I came to as well - the few times that I might actually have issues with errant vservers are more than offset by the additional performance /flexibility of vserver 1311626656 M * jamieson Bertl, ok, that's cool (and interesting point!) 1311626675 M * Bertl and basically kvm is scheduled like a normal process, with some virtualization parts doing the devices (I/O etc) 1311626691 M * jamieson oh! didn't realize that. 1311626718 M * Bertl so, yes, the Linux-VServer scheduling is comparable to kvm except for the fact that the processes are all scheduled on the same kernel 1311626735 M * jamieson excellent... 1311626754 M * Bertl where in the kvm case, a 'single' process handles all guest scheduling/processes 1311626780 M * jamieson ok. i see... so there's no real advantage except for extreme cases 1311626795 M * Bertl advantage of what? 1311626803 M * jamieson of kvm over vserver 1311626821 M * jamieson or is there no kvm isolation advantage at all? 1311626822 M * Bertl the advantage of kvm over Linux-VServer is that you can run your own kernel 1311626832 M * jamieson ah (and for my purposes, who cares..) 1311626832 M * Bertl or even a different operating system 1311626858 M * Bertl the disadvantage is that you have to pay the price for the virtual machine 1311626858 M * jamieson any advantage of ubc over cgroups aside from the ability to tweak a lot more knobs and switches? 1311626867 M * jamieson totally agreed!! 1311626876 M * jamieson big price. 1311626909 M * Bertl there are no ubc in Linux-VServer, that's OVZ, we use a similar but lightweight mechanism for everything not already covered by cgroups 1311626935 M * jamieson right, sorry, knew that -- was asking about OVZ vs vserver and you answered that ;-) 1311626938 M * jamieson is vserver going to turn into lxc? what's happening there? lxc is pitched as more modern, but it doesn't seem to over any real advantage except for some easier management for a few things 1311626956 M * jamieson s/over/offer/ 1311626976 J * gcj ~chris@cpc30-cmbg15-2-0-cust86.5-4.cable.virginmedia.com 1311626983 M * Bertl well, lxc is solely based on the kernel mechanisms present in recent kernels 1311627011 M * jamieson will vserver eventually move in that direction (cgroups only, right?)? is vserver going away? 1311627019 M * Bertl so once the kernel isolation matures it will basically replace Linux-VServer 1311627027 M * jamieson oh :-( 1311627034 M * Bertl i.e. all which will be left is the Linux-VServer interface 1311627039 M * Bertl (i.e. the userspace part) 1311627048 M * jamieson ok... that's where i found most of the bugs in lxc... the scripts have lots of bugs 1311627067 M * jrayhawk Yeah, the problems with LXC right now are that the userspace sucks, and they really don't care about whole-userspace virtualization. 1311627075 M * jamieson ah ok 1311627078 M * jrayhawk It's more of chroot-on-crack 1311627084 M * Bertl but my estimation is that this will not happen in the next year or two 1311627085 M * jamieson so at least for now vserver > lxc 1311627094 M * jrayhawk Missing, for instance, is any sort of /proc security. 1311627106 M * jamieson ok that makes me happy i decided to stay with vserver!! 1311627116 Q * sannes Remote host closed the connection 1311627127 M * jamieson yes, i noticed there was a lot of things wide open with /dev as well... i was surprised 1311627143 M * jamieson networking was a pain in the butt too. 1311627144 M * jrayhawk Well, you can at least specify which dev nodes to allow. 1311627153 M * jamieson jrayhawk: yes that's true 1311627170 M * jamieson defaults were wacked, that's the big thing... and i would be worried i'd forget something. 1311627191 M * jamieson jrayhawk: it's really is more of a chroot-on-crack vs a full containering like vserver or openvz 1311627206 M * jamieson does openvz offer any big advantages over vserver? 1311627240 M * jamieson i'm sorry if these are faq's! 1311627293 M * Bertl you have to ask the OVZ folks for that I guess 1311627329 M * jamieson Bertl: fair enough. you've been super helpful, thanks so much! i'm glad that vserver is very much still alive!! 1311627346 M * jrayhawk I think OVZ has more CPU and I/O scheduling flexibility, but it's been a long time since I looked and I'm sure cgroups has shaken up a lot of stuff. 1311627349 M * Bertl 10 years and still kicking :) 1311627365 M * jamieson i've actually been using it since about 2002, switched from usermode linux back then! ;-) 1311627377 M * jamieson mostly small stuff. now i'm planning to launch a vps service based on it. 1311627401 M * Bertl jrayhawk: I doubt that, mainly because older kernels had a fairly advanced scheduler ( Linux-VServer ) and newer kernels use the mainline cgroup functionality on both 1311627434 M * jamieson jrayhawk: debian seems to use fair scheduling for i/o by default? 1311627443 M * jamieson (or Bertl) :) 1311627509 M * Bertl no idea what debian uses, but the kernel default is the cfq for I/O 1311627509 M * jamieson FAQ says default is anticipatory, but that doesn't seem to be the case on my debian kernel.. 1311627526 M * jrayhawk http://wiki.openvz.org/Proc/user_beancounters is the interesting scheduling stuff 1311627527 M * jamieson ok! faq is wrong then 1311627530 M * Bertl well, that was true a few years ago when this was written 1311627549 M * jamieson oic ... 1311627620 M * jamieson jrayhawk: based on a little of my research, ubc ~= token based accounting with a bit easier interface and some extra abilities in cgroups, but i can't really figure out if any of those extra capabilities are really essential or just nice to have 1311627636 M * jrayhawk Yeah, I've never wanted any of those 1311627701 M * jrayhawk I'm sure it's a significant advantage to *somebody*. 1311627701 M * jamieson you guys have really set my mind at ease... thanks so much for answering all my questions!! 1311627717 M * Bertl you're welcome! 1311627744 M * jamieson btw thank you for all your work on linux-vserver, it's a work of art. i love it. 1311627945 M * Bertl again, you're welcom, and note that you can donate some money or time to the cause 1311627950 M * Bertl *welcome 1311627962 M * Bertl (see wiki page) 1311627966 M * jamieson doing that now! 1311627974 M * jamieson thanks again, ttys 1311628314 Q * hparker Quit: Quit 1311628595 M * jrayhawk http://lxc.sourceforge.net/download/procfs/ huh 1311629186 M * jamieson i don't get it -- is that how lxc proxies /proc? 1311629220 M * Bertl it seems that you can use this patch to provide a 'modified' /proc 1311629255 M * jamieson how does vsrver do it? 1311629336 M * Bertl by tagging /proc entries 1311629368 M * Bertl but you probably could use those patches as well 1311629432 M * jamieson interesting 1311630356 M * jamieson i'm updating the faq with a few of these answers you gave me above.. in particular, please review new faq entry and make sure it's appropriate: http://linux-vserver.org/Frequently_Asked_Questions#What_is_the_status_of_Linux-Vserver.3F 1311630470 M * Bertl except for the capitalization of Linux-VServer it looks fine 1311630797 M * jamieson ah i'll fix that ;-) 1311630836 M * jamieson and i just donated $10 (not much i know) but more to come once i get launched! 1311630867 A * jamieson is away: dinner 1311631444 Q * BenG Quit: I Leave 1311631535 Q * derjohn_mob Read error: Connection reset by peer 1311631873 N * ensc Guest3599 1311631883 J * ensc ~irc-ensc@p4FEC609F.dip.t-dialin.net 1311632113 Q * gcj Quit: Leaving 1311632294 Q * Guest3599 Ping timeout: 480 seconds 1311634533 Q * dowdle Remote host closed the connection 1311634857 J * derjohn_mob ~aj@88.128.244.29 1311635956 J * ryker1 ~Adium@c-76-16-115-27.hsd1.in.comcast.net 1311635956 Q * ryker Read error: Connection reset by peer 1311635984 Q * ryker1 Remote host closed the connection 1311637380 M * Bertl off to bed now ... have a good one everyone! 1311637387 N * Bertl Bertl_zZ