Subject: Re: [vserver] [Virengepr üft] Re: Problems with OpenSuSE 10.2 as guest
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Tue, 19 Aug 2008 18:46:22 +0200

On Tue, Aug 19, 2008 at 01:40:40PM +0200, Mr. WebLover wrote:
> Hi Thomas,
> 
> thanks for your reply !
> 
> Thomas Weber schrieb:
> >Am Dienstag, den 19.08.2008, 12:31 +0200 schrieb Mr. WebLover:
> >  
> >>Raoul Bhatia [IPAX] schrieb: 
> >>    
> >>>Mr. WebLover wrote:
> >>>      
> >
> >  
> >>>>My Problem is, that the system useses the /sys (sysfs) and
> >>>>i can not mount sysfs within the guest.
> >>>>        
> >
> >That's how it's supposed to be.
> >    
> >  
> >>>try to use host:/etc/vservers/guest/fstab to mount sysfs
> >>>
> >>>cheers,
> >>>raoul
> >>>  
> >>>      
> >>Hi raoul,
> >> i have this entry in the guest fstab, but it would not be mounted.
> >>If i try to mount /sys manual like mount -t sysfs none /sys or mount
> >>-t sysfs sysfs /sys
> >>inside the guest a error comes up : permission denied ...
> >>
> >>Without /sys the network dosen't work ....

as said before, you do not want the 'network' to
be brought up by the guest, as it will fail anyway
what you want is to remove/disable the network
specific runlevel scripts

> >Did you actually read any documentation?
> >  
> yes, i have read all doc's that i found. It's right, that is not the
> best way to put all from /proc oder /sys into a guest. My goal is
> simply at this time, to get an opensuse 10.2 guest running ....
> Then i can look, what security risks are nd how to fix them.

not a good approach, first doing all insecure and then
'hoping' to be able to fix up the security issues 

> Ok, you say, all network configuration are outside. 
> But, i become no lo device up, in the guest.

depending on the Linux-VServer kernel (patch) version, 
you will see an lo device or not, in any case, if you
configure the guest properly, you do not really need
any 'lo' at all

> Where can i find good informations for the network setup inside 
> the guest?

there is none, you do all the network setup on the host

> (to be configured outside over (etc/vserver/<guest>/....)

basically you assign one (or more) IP(s) to the guest
and the guest is able to use them, the networking
details are the same as for any Linux system

http://linux-vserver.org/Frequently_Asked_Questions_scratch#F._Network_Usage.3F

best,
Herbert

> 
> >You can't mount anything or configure your network inside the guest[*].
> >That's all done outside the guest.
> >For the networking stuff: just disable the parts (initscripts) where the
> >guest tries to setup the interface. I don't have (or need) /sys mounted
> >in my guests.
> >
> >  
> Du you use OpenSuse as a guest ?
> 
> best regards,
> Torten
> >  Tom
> >
> >[*]well, It's possible but for sure not recommended at your current
> >experience level ;-)
> >
> >
> >
> >
> >
> >
> >
> >________________________________________________________________________________
> >
> >  Diese E-Mail wurde auf Viren und gefährliche Anhänge durch das
> >  AttNet E-Mail Sicherheitssystem untersucht und ist wahrscheinlich 
> >  virenfrei.
> >
> >  © 2007 Ingenieurbüro AttNet - Torsten Albrecht Dipl.-Ing. IT
> >  Schillerstraße 5 - 67304 Kerzenheim - E-Mail: info@attnet.de
> >
> >
> >
> >  
> 
> 
> 
> ________________________________________________________________________________
> 
>  Diese E-Mail wurde auf Viren und gefährliche Anhänge durch das
>  AttNet E-Mail Sicherheitssystem untersucht und ist wahrscheinlich 
>  virenfrei.
> 
>  © 2007 Ingenieurbüro AttNet - Torsten Albrecht Dipl.-Ing. IT
>  Schillerstraße 5 - 67304 Kerzenheim - E-Mail: info@attnet.de
>