Subject: Re: [vserver] DHCP - How to
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Tue, 17 Jun 2008 20:08:49 +0200

On Thu, May 15, 2008 at 12:27:31PM +0200, Olivier wrote:
> 2008/5/15 Daniel Hokka Zakrisson <daniel@hozac.com>:
> 
> > Thomas Weber wrote:
> > >
> > > Am Dienstag, den 13.05.2008, 22:18 +0200 schrieb Guenther Fuchs:
> > >
> > >> /etc/vserver/[YOUR-GUEST-NAME]/bcapabilities contains here
> > >>
> > >> NET_BIND_SERVICE
> > >> NET_RAW
> > >> SYS_RESOURCE
> > >>
> > >> that should be all you need to get the dhcpd working, nothing more,
> > >> nothing else. Anyone is welcome to correct me if I'm wrong
> > >
> > > NET_RAW and SYS_RESOURCE are enough for me to make dhcp work (ISC DHCP
> > > 3.0.4)
> >
> > Right. CAP_NET_BIND_SERVICE is given to guests by default.
> >
> > --
> > Daniel Hokka Zakrisson
> 
> 
> Editing a new bcapabilities file helped me to quickly solve my DHCP issue :
> 
> # cat /etc/vserver/ipbx/bcapabilities
> NET_RAW
> SYS_RESOURCE
> 
> 1. This doc ( http://linux-vserver.org/util-vserver:Capabilities_and_Flags )
> does not mention a way to check this capabilities has been set. Is there a
> way to check those 2 parameters are correctly set and passed to a specific
> guest ?

you can check capabilities and flags via procfs or
via the Linux-VServer kernel API

> 2. ASAP, I will try to add something inside Wiki about DHCP setting.

please add a note that such a guest is inherently
insecure (network wise)

TIA,
Herbert

> Regards and thanks for your help