Subject: IP failover with vserver (keepalived)
From: Michael Rennt <m.rennt@gmx.net>
Date: Tue, 23 Nov 2010 11:38:55 +0100

Hello everyone,

I'm trying to implement IP failover from inside a vServer with keepalived. So keepalived
inside the
vserver needs to add and remove ip addresses by itself, without having to restart the
vserver.

With CAP_NET_ADMIN and CAP_NET_RAW keepalived seems to work fine from inside the vserver,
but the
assigned ip addresses are not bound to the vserver itself, but to the host system. They
also only
show up on the host system.

Is there another cap that allows keepalived to bind an ip inside the vserver?

(vserver-tools 0.30.216-pre2772 / Kernel 2.6.29.2-vs2.3.0.36.10)

Any hints would be highly appreciated.

Thanks in advance.

All the best,

Michael