[vserver] VERIFYCAP problem

From: Tor Rune Skoglund <trs_at_sg.no>
Date: Tue 15 Mar 2011 - 13:43:57 GMT
Message-ID: <4D7F6D1D.7090106@sg.no>

Doing some testing on a newer kernel here.....

After having created a virtual server, I get the following when trying
to run it:

----------
# vserver test start
'VERIFYCAP' can be executed as root only
capabilities are not enabled in kernel-setup

Failed to start vserver 'test'
----------

I AM root, so that's not it. Also, googling seems to show that
VERIFYCAP needs kernel CONFIG_SECURITY_CAPABILITIES . However,
there is no such option in my kernel:

platform ~ # grep CAPA /usr/src/linux/.config
platform ~ #

I have tried newer kernels, newer pacthes, newer util-vserver packages,
newer dietlibcs and so on, but are running out of ideas...

Any hints?

Here's more info:

platform ~ # uname -a
Linux platform 2.6.37.2-vs2.3.0.37-rc3.2 #4 Tue Mar 15 13:33:20 CET 2011
i686 In
tel(R) Core(TM) i7 CPU M 620 @ 2.67GHz GenuineIntel GNU/Linux

platform ~ # vserver-info
Versions:
                    Kernel: 2.6.37.2-vs2.3.0.37-rc3.2
                    VS-API: 0x00020307
                       VCI: 0x0000000013000f91
              util-vserver: 0.30.216-pre2935; Mar 9 2011, 19:05:37

Features:
                        CC: i686-pc-linux-gnu-gcc, i686-pc-linux-gnu-gcc
(Gentoo 4.4.5 p1.2, pie-0.4.5) 4.4.5
                       CXX: i686-pc-linux-gnu-g++, i686-pc-linux-gnu-g++
(Gentoo 4.4.5 p1.2, pie-0.4.5) 4.4.5
                  CPPFLAGS: ''
                    CFLAGS: '-O2 -march=i686 -pipe -std=c99 -Wall
-pedantic -W -funit-at-a-time'
                  CXXFLAGS: '-O2 -march=i686 -pipe -ansi -Wall -pedantic
-W -fmessage-length=0 -funit-at-a-time'
                build/host: i686-pc-linux-gnu/i686-pc-linux-gnu
              Use dietlibc: yes
        Build C++ programs: yes
        Build C99 programs: yes
            Available APIs: v13,net,v21,v22,v23,netv2
             ext2fs Source: e2fsprogs
     syscall(2) invocation: alternative
       vserver(2) syscall#: 273/glibc
                crypto api: beecrypt
           python bindings: no
    use library versioning: yes

Paths:
                    prefix: /usr
         sysconf-Directory: /etc
             cfg-Directory: /etc/vservers
          initrd-Directory: $(sysconfdir)/init.d
        pkgstate-Directory: /var/run/vservers
           vserver-Rootdir: /vservers

This is inside a VirtualBox virtual machine. But I cannot see how
that should matter.

- Tor Rune Skoglund
Received on Tue Mar 15 13:44:33 2011

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 15 Mar 2011 - 13:44:34 GMT by hypermail 2.1.8