Subject: Re: [vserver] vnamespace error
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Fri, 11 Dec 2009 14:46:36 +0100

On Fri, Dec 11, 2009 at 11:24:39AM +0530, Chaitra Gorantla wrote:
> Hi Herbert Poetz,

> Thanks  a lot for your support.

you're welcome!

> I have now used util-vserver-0.30.216-pre2720 package..

do you read what I write?

be aware that with this version, your isolation
(among other security issues) is not working
properly ...

> I am now able to create and run the containers:):)

> How ever, i am not using dietlibc..is this ok??

you have been warned (at build time) and using
any module libc will result in further security
issues (which is why we use dietlibc) ...

> any effects because of this??

expect various seemingly unrelated issues and
practically non existing security with your
setup ...

best,
Herbert

> Thank you...
> Regards,
> Chaitra GN
> 
> 
> ________________________________________
> From: Herbert Poetzl [herbert@13thfloor.at]
> Sent: Friday, December 11, 2009 11:21 AM
> To: Chaitra Gorantla
> Cc: vserver@list.linux-vserver.org
> Subject: Re: [vserver] vnamespace error
> 
> On Fri, Dec 11, 2009 at 10:30:23AM +0530, Chaitra Gorantla wrote:
> > Hii Herbert Poetzl,
> 
> > As per your suggestions , i updated to util-vserver-0.30.216-pre2864.
> 
> > Below is the testme.sh results. Could pass all the tests.
> 
> > Linux-VServer Test [V0.17] Copyright (C) 2003-2006 H.Poetzl
> > chcontext is working.
> > chbind is working.
> > Linux 2.6.27.18 #5 SMP PREEMPT Thu Dec 10 14:51:50 KST 2009 mips64
> > Ea 0.30.216 273/default (St) <v13,net,v21,v22,v23,netv2>
> > VCI: 0002:0304 5236 13000fb1 (KtTbsPHIW)
> > ---
> > [000]# succeeded.
> > [001]# succeeded.
> > [011]# succeeded.
> > [031]# succeeded.
> > [101]# succeeded.
> > [102]# succeeded.
> > [201]# succeeded.
> > [202]# succeeded.
> 
> good, the isolation issue is gone now ...
> 
> > however, when i try to create a new container
> 
> so you succeeded in building a guest?
> if so, what was the build command you used?
> 
> > and run, i get the below error.
> 
> > vcontext: pivot_root(): Invalid argument
> 
> well, obviously you didn't follow my advice to
> update the kernel too, and now you are hitting
> the pivot issue fixed in vs2.3.0.36.5 (for 2.6.27.x)
> http://vserver.13thfloor.at/Experimental/delta-pivot-fix01.diff
> 
> note that there are at least 10 more fixes we
> did between your kernel version and the current
> http://vserver.13thfloor.at/ExperimentalT/patch-2.6.27.39-vs2.3.0.36.8.diff
> 
> > An error occured while executing the vserver startup sequence; when
> > there are no other messages, it is very likely that the init-script
> > (/etc/rc.d/rc 3) failed.
> 
> > Common causes are:
> > * /etc/rc.d/rc on Fedora Core 1 and RH9 fails always; the 'apt-rpm' build
> >   method knows how to deal with this, but on existing installations,
> >   appending 'true' to this file will help.
> 
> > Failed to start vserver 'vps1'
> 
> > please help me regarding this.
> 
> already did .. twice :)
> 
> best,
> Herbert
> 
> > Regards,
> > Chaitra GN
> >
> > This Email may contain confidential or privileged information for the intended recipient
(s) If you are not the intended recipient, please do not use or disseminate the information,
notify the sender and delete it from your system.
> >
> > ______________________________________________________________________
> 
> ______________________________________________________________________
> 
> This Email may contain confidential or privileged information for the intended recipient
(s) If you are not the intended recipient, please do not use or disseminate the information,
notify the sender and delete it from your system.
> 
> ______________________________________________________________________