On Tue, Sep 11, 2007 at 06:36:23PM -0700, Dallas Kashuba wrote: > On Sep 7, 2007, at 7:17 AM, Herbert Poetzl wrote: > > > >On Fri, Sep 07, 2007 at 08:20:21AM +0200, Daniel Hokka Zakrisson > >wrote: > > > >>Herbert Poetzl wrote: > >> > >>>yeah, please provide the following debug info: > >>> > >>>- complete rpc and nfs(d) debug output for all > >>> cases, i.e. root/user on host/guest > >>>- Linux-VServer debug dmesg output > >>> > >>>we know that the subtree checks (depending on > >>>the nfs version) cause some issues, and I think > >>>we can fix them with sufficient data ... > >>> > >> > >>Didn't we come to the conclusion that this problem was due to the > >>extra vx_capable in vfs_kern_mount when this was discussed on IRC, > >>which ought to be just vx_ccaps? > >> > > > >should be easy to test, in this case 2.3.0.19 > >should not have this issue at all, no? > > > >but I would guess some problems with subtree > >mounts ove NFS will still remain ... > > > >anyway, maybe Dallas can test that too? > > > > > This .snapshot 'operation not permitted' happens on the host as well > as the guest so I have done some testing on a host with nothing else > running on it and no guests set up. I enabled debugging in the > VServer kernel but didn't see any applicable messages in dmesg. Is > there something else I should do with that? > > I was unable to locate a 2.3.0.19 patch, but I did try the latest > 2.3.0.18 on a 2.6.22.6 kernel with no other patches and saw the same > behavior as with the older kernel (2.6.19.7) and vserver patch > (patch-2.6.19.7-vs2.2.0-grsec2.1.10-20070402.diff) we're using in > production. > > Here are my test cases with associated NFS client and RPC debug output. > > 1. Non-root user attempting to "cd /mnt/vservers/.snapshot". > Resulted in "Operation not permitted" [longer debug info zapped] > I hope that helps! yes, looks good, will look into this soon best, Herbert > Dallas > > > >best, > >Herbert > > > > > >>>TIA, > >>>Herbert > >>> > >>> > >>>>Thanks! > >>>>Dallas > >>>> > >>