On Tue, 20 Apr 2010 11:29:38 -0500 (CDT) "Corey Wright" <undefined@pobox.com> wrote: > On Tue, April 20, 2010 2:47 am, ben@bristolwireless.net wrote: > > Quoting "Jeff Jansen" <jeff.jansen@kkoncepts.net>: > > > >> ben@bristolwireless.net wrote on 2010-Apr-20: > >>> I'd also like to point out that there's 2.6.32 Linux-Vserver kernels > >>> in the > >>> backports.org repo now too, which are also good. > >> > >> I'd be interested to hear about the experiences of folks who are using > >> the > >> vserver kernel and util-vserver packages from backports.org. Does it > >> "solve" > >> the problems that the standard lenny kernels have? > >> > >> Is backports tracked by the debian security team? It looks like it > >> from here: > >> > >> http://security-tracker.debian.org/tracker/status/release/stable-backports > >> > >> but I thought you were "on your own" for security in backports. :-) > >> > >> TIA > >> > >> Jeff Jansen > >> > >> > > > > Backported 2.6.32 kernels work really well, they are more of less > > current patches and so much better than 2.6.26 from Lenny. > > > > I made this page section for Sid which is also relevant if you want to > > use cgroups: http://tinyurl.com/y5nu9cf . You'd need to apply the > > patch for Lenny: http://tinyurl.com/y5642dw , or get a newer > > util-vserver somehow also (for cgroups, most other stuff works). > > i previously backported a cgroup-ns patch from util-vserver cvs to lenny's > package to address what you noted at the bottom of > http://linux-vserver.org/util-vserver:Cgroups#Ben.27s_install_on_Debian_Squeeze.2FSid. > i don't currently have access to that patch, but when i do later this > week, i'll attach it to a follow-up to this email. stupid me! i remembered the patch, but i forgot that it only applies to util-vserver's sysv & gentoo init scripts (which mount cgroup), and debian provides their own init script. upstream change (in util-vserver revision 2882 and later) http://svn.linux-vserver.org/projects/util-vserver/changeset/2882/trunk/scripts/vserver.functions corey > to the original poster, i've posted how to backport testing's/squeeze's > util-vserver (with patch). i've built and am using the resulting package, > but i don't have anywhere to host it. i'm not going to approach > backports.org with the package, but i would support the effort if someone > else wanted to. > > my production environment uses 2.6.27 and the lenny util-vserver with > minor patches (conservative) while my testing environment uses 2.6.32 and > the backport (not exactly bleeding edge, but more progressive). > > > There is no backports.org version of util-vserver. I personal mainly > > use a slightly patched version of Lenny's util-vserver, or the one > > from repo.psand.net. > > > > You aren't "on your own" with backports, the difference is that > > backports aren't managed in the same way. So far as I understand it, > > individual packages are maintained by people who aren't necessarily > > official Debian package maintainers. Most of them will release > > security updates when updated packages are available in Sid, but as > > you know fixes aren't gauranteed to be timely in Sid. Some backports > > maintainers will also patch independently of sid updates too. > > see the bottom of http://backports.org/dokuwiki/doku.php?id=faq for > backports.org simplified security update policy or > http://backports.org/dokuwiki/doku.php?id=contribute for the site's > processes. > > > > > Cheers, > > == > > From Ben Green > > corey > -- > undefined@pobox.com >