[00:03] i've got 2.4.23-1.1.6 running since serveral days [00:03] no problem either [00:10] I'm running 2.4.23-ow1-vs1.20 for a few days now. Upgraded from 2.4.21-ctx17. [00:52] ensc (~ircensc@ultra.csn.tu-chemnitz.de) left irc: Read error: Connection reset by peer [00:53] ensc (~ircensc@ultra.csn.tu-chemnitz.de) joined #vserver. [00:55] Nick change: riel -> unriel [01:21] Nick change: Bertl_oO -> Bertl [01:21] hi all! [01:22] hey Bertl [01:23] @ccooke what issues did you observe? [01:39] hi there [01:39] hey herbert [01:39] jon [01:39] kestrel_: yes ? [01:39] nothing, it was a perfunctory greeting [01:40] kestrel_: okay :) [01:40] Nick change: kestrel_ -> kestrelw [01:50] netrose (~john877@CC3-24.171.21.47.charter-stl.com) joined #vserver. [02:03] Cmaj (~moi@216.113.62.236) joined #vserver. [02:04] hi [02:04] hi cmaj! [02:06] Hi Bertl great work [02:06] vs 1.20 looks really fine here [02:06] on linux-2.4.23 [02:07] great to hear ... [02:07] i use new vserver 0.29 :) [02:07] netrose (~john877@CC3-24.171.21.47.charter-stl.com) left irc: Ping timeout: 480 seconds [02:08] what do you think, shall we add a page where everybody can add his/her config and version info, together with a machine history ... something like installed on bla bla ... up for bla bla days ... [02:09] how are the 0.29er tools, haven't had the time yet to test them ... [02:09] yeas we will see what most of all use vs version [02:10] well you need e2fslib-dev and new .conf my conf needed a face lift :) [02:11] hmm, is there any documentation regarding the config changes? [02:39] yes on the site [02:39] sorry i went to eat [02:45] JonB (~jon@129.142.112.33) left irc: Quit: Client exiting [02:45] I guess I can forgive you, but next time don't do such cruel things like eating ... ;) [02:46] ahahah :) yeas sorry [02:47] do you use vs1.20 with or without the fix? [02:47] hey actually i didnt know there where a fix [02:48] no plain vanilla with vs 1.20 [02:48] http://vserver.13thfloor.at/Stuff/patch-vs1.20-fix.diff [02:48] okay, there will be a 1.21 release today ... with this included ... [02:49] if you don't experience any issues regarding nfs or local network, there is no need to update ... it is harmless ... [02:50] actually i have remove all nfs support [02:52] ill test like this for a while [02:53] Cmaj (~moi@216.113.62.236) left irc: Quit: [BX] Occifer, I'm not as think as you stoned I am! [02:54] Cmaj (~moi@216.113.62.236) joined #vserver. [02:54] */ [02:57] matta (matta@tektonic.net) left irc: Quit: Hey! Where'd my controlling terminal go? [03:12] Cmaj (~moi@216.113.62.236) left irc: Quit: BitchX-1.0c19 -- just do it. [03:59] netrose (~john877@CC3-24.171.21.47.charter-stl.com) joined #vserver. [05:17] Topic changed on #vserver by Bertl!~herbert@MAIL.13thfloor.at: http://linux-vserver.org/ || latest stable 1.21, devel 1.3.0 "Revolutions" [05:59] ooh [06:00] *g* [06:00] nice one herbert [06:25] kestrelw (~athomas@o2rosock0a.optus.net.au) left irc: Ping timeout: 485 seconds [06:30] serving (~serving@213.186.191.58) left irc: Read error: Connection reset by peer [06:40] Nesh (~dmistry@ool-4352413d.dyn.optonline.net) joined #vserver. [06:40] help! [06:41] berl@!! [06:41] yup?! [06:41] i have a vserver i added to more ip's [06:41] to the .conf [06:41] when i start the vserver it does not bring up the ip's [06:42] any clues? [06:42] i changed [06:42] IPROOT="64.106.201.144" [06:42] to [06:42] IPROOT="64.106.201.144 64.106.201.230 64.106.201.231" [06:42] have you read http://vserver.13thfloor.at/Stuff/VServer-IP-Setup-0.1.txt ? [06:42] nope reading now [06:43] hmm so I need to add a IPROOT="ALL" [06:43] to my config? [06:44] not necessarily ... what is your default setup, and what do you want to accomplish? [06:44] ok i was running this vserver for months [06:44] and the client wanted 2 more ip's [06:44] so i do what i always do [06:44] just edit the config [06:45] okay, show me the entire config ... [06:45] and add the IP's to the IPROOT="" [06:45] S_HOSTNAME="pymecompras" [06:45] IPROOT="64.106.201.144 64.106.201.230 64.106.201.231" [06:45] IPROOTDEV="eth0" [06:45] ONBOOT="yes" [06:45] S_NICE="10" [06:45] S_FLAGS="lock nproc sched hideinfo" [06:45] ULIMIT="-HS -u 128 -n 1024" [06:45] S_CAPS="CAP_NET_RAW" [06:45] # *NOT* DNS domain name, for NIS only [06:45] S_DOMAINNAME="" [06:45] thats the whole config [06:45] okay and you want the vserver to setup the aliases (all three) for you? [06:46] yup [06:46] set IPROOTDEV="" and IPROOT="eth0:64.106.201.144 eth0:64.106.201.230 eth0:64.106.201.231" [06:46] that should do the trick ... [06:48] kestrelw (~athomas@o2rosock0a.optus.net.au) joined #vserver. [06:48] nope [06:48] what do you see on vserver start [06:49] and by the way, what tools are you using? [06:49] ipv4root is now 64.106.201.144 64.106.201.230 64.106.201.231 [06:49] Host name is now pymecompras [06:49] New security context is 4 [06:49] Starting system logger: [ OK ] [06:49] Starting kernel logger: [ OK ] [06:49] Starting named: opensocket_f: bind([0.0.0.0].0): Cannot assign requested address [06:49] [root@host03:/etc/vservers]$ rpm -qa | grep util-v [06:49] util-vserver-0.26-0 [06:49] util-vserver-linuxconf-0.26-0 [06:50] okay, iproute2 tools installed? [06:50] Linux host03 2.4.22-c17f #1 Tue Oct 21 12:32:06 EDT 2003 i686 unknown [06:50] i do not remeber installing it [06:50] just 'ip' gives 'not found' or a usage message? [06:51] [root@host03:/etc/iproute2]$ ip [06:51] Usage: ip [ OPTIONS ] OBJECT { COMMAND | help } [06:51] where OBJECT := { link | addr | route | rule | neigh | tunnel | [06:51] maddr | mroute | monitor } [06:51] OPTIONS := { -V[ersion] | -s[tatistics] | -r[esolve] | [06:51] -f[amily] { inet | inet6 | ipx | dnet | link } | -o[neline] } [06:51] okay, 'ip addr list' and just copy the entries with 64.106.201.144 64.106.201.230 64.106.201.231 [06:52] inet 64.106.201.231/24 brd 64.106.201.255 scope global secondary eth0:pymecompra [06:52] thats the only one i see [06:52] i do not see the other 2 [06:52] well, you server name is how? long? [06:52] just change it to something shorter ... and it will work ... [06:52] pymecompras [06:53] oh [06:53] lemme try [06:53] you need space for and 1 2 [06:55] yay that worked [06:56] and do me a favour, upgrade to vs1.21 or at least vs1.00+fix ... [06:57] this one [06:57] patch-2.4.23-vs1.00.diff [06:57] ? [06:57] at least + the fix at http://vserver.13thfloor.at/Stuff/patch-vs1.00-fix.diff [06:58] eek i will go to [06:58] patch-2.4.23-vs1.21.diff [06:58] is my tool vserion ok tho? [06:59] util-vserver-0.26-0 [06:59] lets see what's written on the release page ... [06:59] util-vserver-0.26.tar.bz2 [06:59] yup yup [07:00] i'll do that upgrade tommrow [07:00] i am tired and i need sleep i will have to upgrade 4 boxes [07:00] :( [07:00] fine ... [07:00] Thanks for the help! [07:00] ur welcome [07:00] and i have to give clients heads up [07:03] bloody clients [07:03] bert [07:04] .. said the X server and dropped the connection ... [07:04] one last q [07:04] heh, they're so inconvenient :) [07:04] do i need config changes when i upgrade [07:04] Bawb! [07:04] hi Nesh [07:04] hih [07:04] not that I know of ... the tools are the same ... [07:04] awesome [07:12] there I just spammed all my clients [07:12] ssssh dont tell MrBawb I was spamming! [07:14] 11:04pm up 128 days, 12:52, 2 users, load average: 0.31, 0.64, 0.89 [07:14] uhg last time i rebooted was for a kernel upgrade too [07:14] heh [07:14] what about do_brk()? [07:15] i know your not talking to me [07:15] cause that means nothing [07:15] hmm 128 days with c17f, that is really long ... [07:15] heh [07:15] Nesh: the latest linux kernel local exploit [07:15] MrBawb i never did that one apprently [07:15] : [07:15] :P [07:16] heh [07:16] Dan, have you started contributing code yet? [07:16] to what? :) [07:16] vserver man [07:16] linux-vserver [07:16] ;) [07:16] I've contributed some bugreports :) [07:16] has anybody an user account on nesh server, I want to try the exploit! [07:16] haha [07:16] Bertl does that work from insie the vserver? [07:17] yes [07:17] you get access to the kernel's memory [07:17] oops [07:17] uhg i should get on top of my servers [07:17] hehe [07:17] it's quite nasty [07:17] well, the version I saw, just gives you a root shell ;) [07:17] my clients are apprently dumb heh [07:17] yeah, you could just modify your uid [07:18] i upgraed my shared hosting servers [07:18] but you could also break out of a chroot, change your capabilities [07:18] just not the vps's [07:18] someone made a loadable module to fix it [07:18] Oh yeah? [07:18] hook a brother up so i can run that for now. [07:18] since [07:18] Dear Valued Customer, [07:18] On Sunday December 14th 2003 at 12:00am all of our servers will be rebooted [07:19] for a kernel upgrade. [07:19] http://msgs.securepoint.com/cgi-bin/get/bugtraq0312/61.html [07:19] is what i told my clients. [07:21] [root@host03:/home/dmistry]$ gcc -O3 -I/lib/modules/`uname -r`/build/include -c -o brk_fix.o brk_fix.c [07:21] [root@host03:/home/dmistry]$ insmod ./brk_fix.o [07:21] ./brk_fix.o: unresolved symbol __start___kallsyms [07:21] haha [07:21] hehe [07:21] guess i am screwed :) [07:22] http://wizard.ath.cx/fixbrk.tar.gz [07:22] there's someone else's [07:22] lemme try [07:23] hehe [07:23] try it on a non-production machine :) [07:23] that one was even worse [07:24] hehe [07:24] screw it i'll leave it explotable [07:24] expliotable [07:24] you know what i mean [07:24] Dan do not hack me [07:24] you already know my passwords!@! [07:24] ahaha [07:25] Guess what [07:25] you're a security problem :) [07:25] heh yeah [07:25] but i did some perl code [07:25] dirty as hekk ut it works [07:25] hell [07:25] but [07:26] well keep at it, your perl code should clean up with experience :) [07:26] a mass email script [07:26] ok wife is yelling [07:26] need to go to bed [07:26] seeya tommorow dan the man [07:27] later [07:46] serving (~serving@213.186.191.58) joined #vserver. [08:30] okay, I go to bed ... [08:30] have a nice whatever everyone ... [08:31] Nick change: Bertl -> Bertl_zZ [11:12] Daky (brm@180-244.SPEEDe.golden.net) joined #vserver. [11:12] Daky (brm@180-244.SPEEDe.golden.net) left #vserver. [11:16] netrose_ (~john877@CC3-24.171.21.47.charter-stl.com) joined #vserver. [11:17] netrose (~john877@CC3-24.171.21.47.charter-stl.com) left irc: Read error: Connection reset by peer [11:29] netrose_ (~john877@CC3-24.171.21.47.charter-stl.com) left irc: Ping timeout: 480 seconds [13:17] mcp (~hightower@wolk-project.de) left irc: Ping timeout: 485 seconds [13:27] mcp (~hightower@wolk-project.de) joined #vserver. [13:45] maharaja (maharaja@ipax.tk) got netsplit. [13:45] Bertl_zZ (~herbert@MAIL.13thfloor.at) got netsplit. [13:46] maharaja (maharaja@ipax.tk) returned to #vserver. [13:46] Bertl_zZ (~herbert@MAIL.13thfloor.at) returned to #vserver. [13:47] JonB (~jon@129.142.112.33) joined #vserver. [13:50] Doener`` (~doener@pD9588422.dip.t-dialin.net) joined #vserver. [13:57] Doener` (~doener@pD9E128B3.dip.t-dialin.net) left irc: Ping timeout: 485 seconds [14:15] aka (~aka@h062040166017.gun.cm.kabsi.at) joined #vserver. [14:16] AGoe (~agoeres@D8ddd.d.pppool.de) joined #vserver. [14:16] hi enrico.. online? [14:17] i dont think so [14:17] looks like it.. [14:27] Zoiah (Zoiah@matryoshka.zoiah.net) got netsplit. [14:28] Zoiah (Zoiah@matryoshka.zoiah.net) returned to #vserver. [15:32] mcp (~hightower@wolk-project.de) left irc: Ping timeout: 501 seconds [15:41] mcp (~hightower@wolk-project.de) joined #vserver. [15:42] Nick change: Bertl_zZ -> Bertl [15:42] hi all! [15:42] hey Bertl [15:43] hi aka! hi Alexander! [16:16] hi herbert [16:18] hi Alec, now at home? [16:18] yep [16:18] servus herbert, ich bin auch aus A [16:47] netrose (~john877@CC3-24.171.21.47.charter-stl.com) joined #vserver. [16:57] serving (~serving@213.186.191.58) left irc: Ping timeout: 485 seconds [17:23] JonB (~jon@129.142.112.33) left irc: Quit: Client exiting [18:05] Nick change: unriel -> riel [18:06] hey rik! [18:07] @riel did you find some time to look at the stack dumps? did you see anything? [18:07] nope, didn't find anything suspicious to me [18:07] hmm, bad ... [18:11] any suggestions how to locate the lock, if it's an locking issue at all? [18:11] wait, did you have decoded alt-sysrq-p backtraces ? [18:11] 'p' means process dumps, right? [18:12] stack trace of what's currently running [18:12] I always have to use the help, as I do not remember ... [18:12] yes that's the dumps I collected ... [18:13] http://vserver.13thfloor.at/Stuff/Lock02_procs_ksymoops [18:14] that's sysrq-t [18:14] too much information to be useful ;) [18:14] okay, what gives sysreq-p then? [18:15] asyd (~asyd@jazzland.debian-fr.org) left #vserver. [18:16] @riel ahh, okay, had a look sysrq-p should be this one ... http://vserver.13thfloor.at/Stuff/Lock02_snap_ksymoops [18:16] Bertl: only what's on the cpu at that point in time [18:18] Zoiah (Zoiah@matryoshka.zoiah.net) got netsplit. [18:19] Zoiah (Zoiah@matryoshka.zoiah.net) returned to #vserver. [18:22] Bertl: ok, something in the VFS [18:22] waiting on the dcache_lock [18:23] in the same place the whole time [18:23] hmm, that probably explains why all the processes are in running state, then, yes? [18:26] yeah [18:26] mmm no, it doesn't explain all [18:26] I suspect one process scheduled while holding a spinlock [18:26] is this a spinlock or a rwsem? [18:27] and now the rest are waiting on that spinlock [18:27] the original one can't be scheduled back, because the others are spinning [18:28] would spinlock debugging help here? [18:35] @riel could there be some relation to the comment in int shrink_dcache_memory(int priority, unsigned int gfp_mask) [18:36] spinlock debugging would not help [18:36] did you modify any of the dcache code ? [18:36] nope ... [18:49] serving (~serving@213.186.190.19) joined #vserver. [18:58] shuri (~ipv6@cpu183.adsl.qc.bellglobal.com) joined #vserver. [18:58] viva la revolution [18:58] that's the spirit! [18:59] hi Bertl [18:59] hi! [19:00] hey Bertl do know know how to limite a 100 Mbits connection to 5 Mbits with traffic shipong on linux? [19:00] shaping [19:00] shipong sounds nice ;) [19:00] hehe [19:01] you can limit outgoing traffice, per se you can't limit incoming, you can only drop packets, this way backing off the source, and lowering the traffic ... [19:02] ok [19:02] the former can be done via tc and qdisc ... [19:03] need QoS support then [19:03] yeah, if you have end to end QoS, you have no problem ... [19:04] and do you know the syntax pf tc and qdisc? [19:04] for tc there are hundreds of examples flying around on the web ... [19:05] http://www.knowplace.org/shaper/examples.html [19:05] (is one) [19:06] http://www.wlug.org.nz/TrafficShaping [19:06] the reference is http://lartc.org/ [19:07] ok thanx [19:07] http://www.fibrespeed.net/~mbabcock/linux/qos_tc/ is also useful ... [19:07] so you can't limit incoming [19:07] is bad then [19:07] you can start dropping packages, this is what wondershaper et al do ... [19:07] s/packages/packets/ [19:08] how do you think that limiting incoming traffic should wokr? [19:12] dont know is why i ask [19:13] well, it sounded like, that is bad, I'll use BSD then, they know how to do it properly ... ;) [19:14] not like gee, it's bad that this can't be done with currently used protocols .. [19:15] is very bad [19:25] Zoiah (Zoiah@matryoshka.zoiah.net) got netsplit. [19:27] Zoiah (Zoiah@matryoshka.zoiah.net) returned to #vserver. [19:36] okay ... have to leave now ... cu l8er ... [19:36] Nick change: Bertl -> Bertl_oO [20:01] netrose (~john877@CC3-24.171.21.47.charter-stl.com) left irc: Ping timeout: 480 seconds [20:14] Doener`` (~doener@pD9588422.dip.t-dialin.net) left irc: Remote host closed the connection [21:16] JonB (~jon@129.142.112.33) joined #vserver. [21:19] Shuriz (~ipv6@cpu183.adsl.qc.bellglobal.com) joined #vserver. [21:19] shuri (~ipv6@cpu183.adsl.qc.bellglobal.com) left irc: Read error: Connection reset by peer [21:19] Nick change: Shuriz -> shuri [21:23] shuri (~ipv6@cpu183.adsl.qc.bellglobal.com) left irc: Read error: Connection reset by peer [21:52] netrose (~john877@CC3-24.171.21.47.charter-stl.com) joined #vserver. [22:01] Zoiah (Zoiah@matryoshka.zoiah.net) got netsplit. [22:02] Zoiah (Zoiah@matryoshka.zoiah.net) returned to #vserver. [22:08] _Zoiah (Zoiah@matryoshka.zoiah.net) joined #vserver. [22:08] Zoiah (Zoiah@matryoshka.zoiah.net) left irc: Write error: connection closed [22:23] mhepp (~mhepp@r72s22p13.home.nbox.cz) joined #vserver. [22:28] Alex^ (alex@alex.city17.org) joined #vserver. [22:28] 'lo [22:28] hey [22:36] netrose (~john877@CC3-24.171.21.47.charter-stl.com) left irc: Ping timeout: 480 seconds [22:38] AGoe (~agoeres@D8ddd.d.pppool.de) left irc: Quit: de cetero censeo aliquem necesse dormire [22:56] Doener (~doener@pD9588422.dip.t-dialin.net) joined #vserver. [23:44] Nick change: _Zoiah -> Zoiah [23:47] frz (~frz@chello212186127181.14.vie.surfer.at) joined #vserver. [23:48] helloŸŸ [23:49] hi [23:51] i suggest this is the vserver dev. channel and maybe i can get some hints about patching 2.4.23 debian kernel with 1.21 vs patch [23:52] yeah, maybe you van [23:52] can [23:52] :) [23:55] what happens when you do that ? [00:00] --- Fri Dec 12 2003