> some of you asked about feature set of Virtuzzo 7 and difference between free
> and commercial versions. We have prepared table with feature comparison for
> OpenVZ -stable, Virtuozzo 7 and other virtualization solutions -
> https://openvz.org/Comparison
>
> Pay attention it is not a final feat
> The point is that in your use case ZFS works very well and saves you 1TB of
> disk space. Great for you. For my use case the overhead of learning and
> deploying ZFS greatly outweighs the handful of GBs I might potentially save in
> disk space.
Don't get me wrong, but zfs is totally simply to
> we want find people who still use simfs for OpenVZ containers.
> Do we have such users?
All proxmox VE users (as we do not have ploop support).
___
Users mailing list
Users@openvz.org
https://lists.openvz.org/mailman/listinfo/users
> I know Proxmox is a huge Debian fan... does Debian offer ZFS kernel modules
> and if not, why not? How about Proxmox VE?
Besides, I would like to improve support for more storage types on OpenVZ.
I think direct support for zfs, rbd, dm-thin would be great (snaphshot, clone).
But for me the cur
> Unless I misunderstood, they also say there that ZFS code can be merged into
> the Linux source tree... but that distributing a binary built from it would be
> a no-no.
They claim distributing as binary module is no problem! They have split the code
into spl (Solaris porting Layer), and a sepa
> License issues of ZFS.
>
> License issues is not an critical because installing of ZFS is
> straightforward and do not require any deep integration to system or
> kernel and work on almost any kernel.
OpenZFS and zfsonline people claim that it is perfectly valid to ship
zfs binary kernel module
> Apparently Proxmox guys patched the kernel. Could you please
> 1 ask them to provide the patch
> 2 file a bug to bugzilla.openvz.org
Hi Kir,
this patch is here:
https://git.proxmox.com/?p=pve-kernel-2.6.32.git;a=blob;f=bridge-patch.diff;h=6780d621ec1411352fe11f0e573fb53da57c3812;hb=HEAD
I jus
Just downloaded the new stable kernel:
http://wiki.openvz.org/Download/kernel/rhel6/042stab053.5
But the last changelog entry is:
%changelog
* Thu Jan 19 2012 Frantisek Hrbata [2.6.32-220.4.1.el6]
I thought this should be 2.6.32-220.7.1.el6? So what version is that kernel
exactly?
- Dietmar
> Why? Save time and effort just get it directly from the hardware node as my
> example shows using /vz/root/VEID/proc/net/dev.
Well, that file is simply not there on my system (latest openvz 2.6.32 kernel).
I can only see it inside the VM.
So what kernel do you use exactly?
- Dietmar
__
> Each container has one also...for example for VEID=17801
Oh, so I do not need to call 'vzctl exec' to get that data?
- Dietmar
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
0 0 0
> [root@xc7 ubc]#
>
> Dietmar Maurer wrote:
> > Is there some interface to get statistics for venet device? I found and old
> patch:
> >
> > http://forum.openvz.org/index.php?t=msg&th=459&goto=2581&#msg_2581
> >
Is there some interface to get statistics for venet device? I found and old
patch:
http://forum.openvz.org/index.php?t=msg&th=459&goto=2581&#msg_2581
but seems that this is not included in current 2.6.32 kernel?
- Dietmar
___
Users mailing list
Use
> I'm experimenting with this now. I converted vzkernel-2.6.32-
> 042stab037.1.x86_64.rpm into a deb and used it to boot but AWS did not want
> to run it. Complaining about XEN options. I see that the older kernel
> versions had
> specific XEN builds. I'm going to try and recompile the 2.6.32-042
> virtbox1:~# vzctl enter 103
> entered into CT 103
> [r...@pxebox /]# ps aux
> USER PID %CPU %MEMVSZ RSS TTY STAT START TIME COMMAND
> root 1 0.0 0.0 2068 612 ?Ss 20:42 0:00 init [3]
> root21 0.0 0.010016 ?S20:42 0:00 [in
> > Newer openVZ kernels does not work well with KVM.
> > http://bugzilla.openvz.org/show_bug.cgi?id=1610
> >
> > Br, martin
>
> Not really true, I'm currently running
> 2.6.18-194.8.1.el5.028stab070.2 + kvm-83 from opennode with several
> winxp amd win2003 servers for 2 weeks now without any issu
> I believe, 2.6.32 is just more honest on fsync and really forces drive
> to save data.
We use reasonable RAID controllers with BBU here. Such controller can handle >
1000 fsync/sec. So IMHO above argument does not count at all.
- Dietmar
___
User
Hi Kir,
> These numbers very much resemble fsync() rate with write cache enabled
> (~1000/sec) and disabled (50-70/sec).
> check write cache settings with hdparm + check whether you have barrier
> mount option on ext3.
I use exactly the same system. The only thing I change is the kernel. kernel
NO, I talk about performance at the host.
From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On Behalf Of
Roberto Mello
Sent: Dienstag, 24. August 2010 14:48
To: users@openvz.org
Subject: Re: [Users] slow fsync rate
On Tue, Aug 24, 2010 at 4:36 AM, Dietmar Maurer
mailto:diet
Hi all,
we observe very slow fsync rates on newer 2.6.32 kernel with OpenVZ:
It is possible to reproduce the problem with sysbench:
# sysbench --test=fileio --file-num=1 --file-total-size=50G --file-fsync-all=on
--file-test-mode=seqrewr --max-time=100 --file-block-size=4096 --max-requests=0
ru
> $ wget http://whatismyip.org
>
> on CTs on one server, it outputs the public IP address of the CT,
> which is fine, while on the other machine it outputs the IP address of
> the HN.
>
> Any idea what is wrong?
wget downloads files - so I am not sure what you mean?
You connect to the wrong IP
> The following page:
>
> http://ftp.openvz.org/contrib/utils/vzdump/
>
> links to:
>
> http://www.proxmox.com/cms_proxmox/en/virtualization/openvz/vzdump/
>
> which gives a 404 error.
We removed that page. The vzdump sources can be found at:
ftp://download.proxmox.com/sources/
Kir, please c
> So far as duplicating your observations with this VNC bug, I haven't
> found the time to give an Ubuntu KVM VM with SDL(X11) a try. Sorry. I
> say report it as a bug to the Red Hat folks and see what they say.
Well, the bug is clearly OpenVZ related, and only occur with newer
version of OpenVZ.
>> Those delays are not there with previous OpenVZ kernels (seem to be
>> related to recent scheduler changes).
>>
>> Can you reproduce it using the WindowsServer2008R2 install?
>
>I don't have any media/licenses for Windows 2008 Server R2. Is that the only
>OS affected?
As I posted before, you
>No clock setting there either. Maybe I do have the problem but just
>attributed it to remote X lag
Hi Scott,
the bug is really obvious if you use my test case over X11. The problem does
not show up if
you use the default VNC screen driver.
But if you do a WindowsServer2008R2 install you can
Hi Scott,
> No, the OpenVZ Project does NOT provide KVM module packages. For that,
> see a fairly new project named OpenNode. It's available as both an
> addon repo for CentOS and a bare-metal iso installer.
>
> http://opennode.activesys.org/
>
> I've been using / testing their latest release
We run kvm on ovz kernels. But it seems that the latest ovzkernel
has problems with posix timers, so kvm mouse movement in not smooth.
By default kvm uses timer_create() and timer_settime() syscalls.
To show the behavior I use the following command:
/usr/libexec/qemu-kvm -drive
file=ubuntu-9.04
> when i start my container i got an error "Unable to open pty: No such
> file or directory."
>
> I tried to fix it with the following:
>
> - - copied /dev from a working comtainer
> - - vzctl exec 600 update-rc.d -f udev remove
> - - vzctl exec 600 'dpkg --force-depends --purge udev'
>
> - - vz
Hi all,
On the following URL http://download.swsoft.com/virtuozzo...erence/386.htm I
can read:
"However, be aware that vzctl enter is a potentially dangerous command if you
have un-trusted users inside the Container. Your shell will have its file
descriptors accessible for the Container root in
> -Original Message-
> From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On
> Behalf Of Cliff Wells
> Sent: Dienstag, 02. Februar 2010 22:28
> To: users@openvz.org
> Subject: [Users] BUG: scheduling while atomic
>
> I'm running proxmox 1.4:
>
> Linux proxmox1 2.6.24-9-pve #
> - "Dietmar Maurer" wrote:
> > Sorry, but so far we only tested on Debian Lenny. But I guess it
> works
> > on Debian Squeeze as well.
>
> Suno, want to give that a try?
Just tested - 2.6.18 does not work with new udev (mis
> > Really, do you have more information on that?
> The current version of udev requires a kernel >= 2.6.26 (with
> CONFIG_SYSFS_DEPRECATED=n so the standard lenny kernel will not work
> anyway).
> This is caused by the need for features like CONFIG_INOTIFY_USER,
> CONFIG_SIGNALFD and sysfs improve
> On Jan 16, Dietmar Maurer wrote:
>
> > > Not at all until the new RHEL will be released, because modern
> versions
> > > of udev (like the one in Debian testing/unstable) do not support
> 2.6.18
> > > kernels.
> > Really, do you have more infor
> > I'm very glad to hear that. Would you recommend that a stock Debian
> user use your kernel for OpenVZ stuff? If so, I have to wonder how
> well it would work on the upcoming distro releases that Suno was
> talking about.
>
> Not at all until the new RHEL will be released, because modern vers
> - "Dietmar Maurer" wrote:
> > We at Proxmox ended up compiling the RHEL kernel for Debian. So we
> > now have a Debian system with RHEL kernel and OpenVZ. So far that
> works
> > quite good.
>
> I'm very glad to hear that. Would you recommend t
> What does that mean? Well as is obvious to you, as time passes, the
> number of distributions that are appropriate to use as an OpenVZ host
> node is reduced... and it appears that RHEL and CentOS truly are the
> best distros to recommend for the host node. As the type of fanboy I
> am, that do
> Would you mind sharing which exact version did you compile
I compiled 8.3.4
> and how exactly?
AFAIR I removed the drbd headers from the rh kernel source - ugly hack.
May I suggest you post that question to the drbd list - I guess they know the
solution.
- Dietmar
>
> I've managed to comp
> Hi Dietmar,
>
> ... have you send the patch to bugzilla ...?
No, I talked directly with kir, and added all modifications he suggested.
- Dietmar
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
Behalf Of Gordan Bobic
> Sent: Dienstag, 29. Dezember 2009 12:32
> To: users@openvz.org
> Subject: Re: [Users] Seeing Boot Progress for Guest VM
>
> Dietmar Maurer wrote:
> > You can find the current sources at:
> >
> > ftp://pve.proxmox.com/sources/vzctl_2009-12-22.t
g
> Subject: Re: [Users] Seeing Boot Progress for Guest VM
>
> Dietmar Maurer wrote:
> > I have sent a patch to this list a year ago, called 'init-logger'.
> >
> > We use it in proxmox ve (pve.proxmox.com) to display init output.
>
> Is this the mo
> -Original Message-
> From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On
> Behalf Of Anatoly Pugachev
> Sent: Dienstag, 29. Dezember 2009 10:33
> To: Dietmar Maurer
> Cc: users@openvz.org
> Subject: Re: [Users] Seeing Boot Progress for Guest VM
&
I have sent a patch to this list a year ago, called 'init-logger'.
We use it in proxmox ve (pve.proxmox.com) to display init output.
- Dietmar
> -Original Message-
> From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On
> Behalf Of Gordan Bobic
> Sent: Dienstag, 29. Dezembe
We also had problem with DRDB on that kernel. We ended up compiling
the DRBD module ourselves.
- Dietmar
> -Original Message-
> From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On
> Behalf Of Aleksandar Ivanisevic
> Sent: Donnerstag, 24. Dezember 2009 13:07
> To: users@op
Hi Scott,
> I've seen quite a bit of interest in using KVM and OpenVZ together.
> Proxmox VE has been doing this for some time but they use a 2.6.24-
> based kernel. Anyone using the latest OpenVZ RHEL5-based kernel and
> KVM together.
We are already testing that kernel for proxmox ve - first
Hi all,
we have done a complete rewrite of vzdump. There is not much additional
functionality for OpenVZ, mostly code cleanups.
* stop mode does not use --tmpdir anymore. So downtime is longer, but you do
not need additional space (as requested by many users)
* no more --restore option (instea
Sorry, forget my last answer. I guess the problem is your locale setting. Try
to run with LANG=C
- Dietmar
> -Original Message-
> From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On
> Behalf Of Dietmar Maurer
> Sent: Mittwoch, 02. September 2009 15:59
The problem is the '-' in the volume group name. I will fix that bug in the
next vzdump release (soon).
> -Original Message-
> From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On
> Behalf Of Nicolas Gorguès
> Sent: Dienstag, 18. August 2009 11:32
> To: users@openvz.org
> S
> Hello, list. I've been using OpenVZ since last year. Now I'd like to
> configure the cluster I've been using to use remote storage, so that
> migrations do not require to copy the container's filesystem.
>
> Reading the wiki and the forum, I've learned that NFS is not
> recommended, but I don't
> vzvdump snapshot doesn't work at fresh proxmox install :
>
>
> proxmox:~# vzdump --snapshot --compress --dumpdir /backup 101
> INFO: Starting new backup job - vzdump --snapshot --compress
> --dumpdir /backup 101
> INFO: Starting Backup of VM 101 (qemu)
> INFO: status = running
> ERROR: unable t
I have upload the new version which fixes that problem.
http://www.proxmox.com/cms_proxmox/en/virtualization/openvz/vzdump/
- Dietmar
> -Original Message-
> From: Gregory M. Turner [mailto:g...@malth.us]
> Sent: Donnerstag, 28. Mai 2009 22:42
> To: users@openvz.org; Di
What kernel patch do I need to get --swappages working with
http://git.openvz.org/?p=ubuntu-hardy-openvz;a=summary
Or isn't that possible?
- Dietmar
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
> The
> VETH_IP_ADDRESS and VE_DEFAULT_GATEWAY statements don't seem to have
> any
> effect
OpenVZ does not have that functionality. IP setup inside the CT is
only implemented for venet.
- Dietmar
___
Users mailing list
Users@openvz.org
https://open
> > One of them have 12 VEs, not CPU intensive, and we are having this
> load:
>
> You don't mention what you have for disks. On Linux the load average
> includes processes blocking on I/O. A slow disk setup can cause a
high
> load.
But then 'wa' would show a higher value.
- Dietmar
__
> Subject: [Users] openvz disk access performance
>
> According to
> http://www.scribd.com/doc/4916478/comparison-of-open-source-
> virtualization-technology
> openvz has good network performance, but bad disk access performance.
I assume those numbers are simply wrong.
- Dietmar
___
> >
> > What is we simple add 'private' IPs after visible IPs?
>
> That would make me happy, at least for my current setup. Although it's
> possible that someone might have a more complicated internal network,
> where some RFC1918 network is NATed to the outside world, but others
> not. It would n
> Even no well defined API for job automation
> (http://forum.openvz.org/index.php?t=msg&goto=10694&;)
I my opinion there is an API - called 'vzctl'
- Dietmar
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
> Please correct me if I'm wrong, but given that you have only one
> interface, I
> don't think that routing can affect address binding (which happens
> waaay before
> the kernel gets to routing any packets).
What is we simple add 'private' IPs after visible IPs?
- Dietmar
_
> It may be some another ioctl. Could you please check mount version
> inside your
> container? Then you can grep all ioctls in mount sources and found
this
> place.
Hi Vasily,
I just found the error - I forgot to close a filehandle in my
init-logger patch.
So everything works now.
many thanks
> Have you found the reason?
no, unfortunately not.
> It seems strange from my point of view.
> cmd =80041272 should be BLKGETSIZE64_32
> Seems in your case the call chain is:
> compat_sys_ioctl - > compat_ioctl_error -> compat_printk("ioctl32
...")
>
> But IMHO it should be
> ---8<---
> compat_
I have the same behavior. It works on the HN, but inside the CT there is no nat
table:
# cat /proc/net/ip_tables_names
mangle
filter
no idea why.
> -Original Message-
> From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On
> Behalf Of Pongracz Istvan
> Sent: Donnerstag, 08
> i've the same on on a my fza 2.6.24 kernel without your init-logger
> patched
> vzctl version,
> have you some bind mount from ct0 to some containers ?
no - no bind mounts.
It only happens with newer debian templates (lenny, ubuntu hardy)
- Dietmar
Ok, this is not kernel related. Seems to be related to my init-logger
vzctl patch.
Anyways, can some developer explain the content of this debug message?
It seem to be related to a mount command used inside a container.
> Jan 8 10:43:12 oahu kernel: ioctl32(mount:886): Unknown cmd fd(4)
> cmd(8
Hi all,
I am testing the newest ubuntu hardy openvz kernel (amd64).
git://kernel.ubuntu.com/ubuntu/ubuntu-hardy.git
When I start a container I get the following errors:
Jan 8 10:43:12 oahu kernel: ioctl32(mount:886): Unknown cmd fd(4)
cmd(80041272){t:12;sz:4} arg(bfaf9f48) on /
Jan 8 10:43:12
> I read that manpage multiple times, trying to figure out what exactly
> happens when. It states that specifying INADDR_ANY is equivalent to
not
> calling bind() at all before connect(). However if you read closely,
it
> does not state the semantics of such situation for "active" sockets
> (i.e. s
> Where can I find the information regarding the directories and files
> which
> each VE take from the HN ? which means files and directories are not
> taken
> from inside the VE and those directories and files are virtual from the
> HN.
AFAIK there are no such files, but some files get modified.
> On Sun, Jan 04, 2009 at 09:21:42AM +0100, Dietmar Maurer wrote:
> > How does adding an additional setting like PRIMARY_IP help? Instead
> > you can simply change the order of IP_ADDRESS. What is the
> difference?
>
> Changing the order would influence both /etc/
How does adding an additional setting like PRIMARY_IP help? Instead
you can simply change the order of IP_ADDRESS. What is the difference?
- Dietmar
> -Original Message-
> From: users-boun...@openvz.org [mailto:users-boun...@openvz.org] On
> Behalf Of Marcin Owsiany
> Sent: Samstag, 03. J
But what is with devices added with --devnodes ? Does that still work
if udev starts?
- Dietmar
> diff --git a/addons/vz-MAKEDEV/40-vz-misc.nodes b/addons/vz-MAKEDEV/40-
> vz-misc.nodes
> new file mode 100644
> index 000..8b49c26
> --- /dev/null
> +++ b/addons/vz-MAKEDEV/40-vz-misc.nodes
> @@
Hi all,
I just moved our asterisk installation into a container. Everything
worked well
besides the ztdummy timer device.
After some debugging it turns out that it is a 64bit/32bit problem.
My host is an amd64 debian etch (Proxmox VE).
Container: debian lenny 32bit - fails
Container: debian len
Hi all,
here is a slightly improved version. It work now with sysvinit and
upstart.
Any change to get that merged into upstream code?
- Dietmar
> -Original Message-
> From: Dietmar Maurer
> Sent: Mittwoch, 17. Dezember 2008 14:36
> To: users@openvz.org
> Subject: anot
Just curious, but what is the reasoning behind starting udev inside
a container? Does it makes sense at all? I normally disable udev for
all my templates.
- Dietmar
> Subject: [Users] [PATCH 6/6] addons/vz-MAKEDEV: add udev/makedev.d
file
>
> Handle the case of udev managing /dev by adding udev/
This one uses BSD pseudo terminal - seem to work much better that the
previous 'fifo' approach.
What do you think?
- Dietmar
vzctl.diff
Description: vzctl.diff
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
> but you imagine that one have two ethernet devices connected to two
> subnets on the main host ( and thats my case)
> which is veth bridged with?
Why? What is the question?
- Dietmar
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman
If you use Proxmox VE, the bridge device is automatically created for
you by
the installer. Also, bridge-utils are automatically installed.
How do you installed the system?
> > yes, veth is always bridged (automatically). So there is nothing to
> > configure on the main host.
>
> Perhaps i misre
yes, veth is always bridged (automatically). So there is nothing to
configure on the main host.
- Dietmar
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Frank
Sent: Mittwoch, 03. Dezember 2008 15:15
To: users@openvz.org
Subject: Re: [Users] Samba server using veth
Hi, th
thanks
>
> http://bugzilla.openvz.org/show_bug.cgi?id=1087
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
Hi all,
the debian documentation states
(http://www.debian.org/doc/manuals/reference/ch-gateway.en.html)
> The kernel maintains a system hostname. The initscript
/etc/init.d/hostname.sh sets the
> system hostname at boot time (using the hostname command) to the name
stored in /etc/hostname.
>
> The problem seems related to network mask which is 255.255.255.255 So,
> what can we do? What about changing netmask to 255.255.255.0? How
would
> be the gateway then?
I don't know your network setup (what gateway do you use for physical
machines?)
- Dietmar
_
> ... ok, what can we i do ;-)
Depends on what you want to work on?
Kernel 2.6.24: implement '-cpus' and make live migration stable
openvz: we need a way to describe the contents of an openvz template.
Like the control file in a debian package. And we also want apt-like
repositories for those t
> But before you start the i386 port think twice - there are many useful
> things you can do instead ;-)
Which reminds me about the following issues with openvz:
- '-cpus' is still not working with 2.6.24 - very, very, bad!
- live migration is still unstable with 2.6.24
...
- Dietmar
> @Dietmar: Btw can you plz describe where the source is downloadable ?
ftp://pve.proxmox.com/sources/
But before you start the i386 port think twice - there are many useful things
you
can do instead ;-)
- Dietmar
___
Users mailing list
Users@openvz.
> setup. We have asked about the possibility of a "lite" version that
> was for OpenVZ only but the Proxmox VE folks are interested in doing
> that... so... since the source is GPLed, if someone wants to grab the
> ball and run with it, it is possible.
One problem is that we are a small team, the
> it possible to install pve on i386 as well, the minimun packages
> and the most pve scripts are written in perl, only useing pve with
The i386 architecture has some serious drawbacks, and we do not want to
deal with them (pve itself is written in perl and not really
architecture dependent).
-
> It uses HTTPS to issue commands to the VZ nodes in the cluster? Really?
What are VZ nodes?
- Dietmar
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
> > It uses HTTPS to issue commands to the VZ nodes in the cluster?
> Really?
>
> I guess you should look at the code yourself if you want to know how it
> works.
A short overview:
Web based clients connect via HTTPS to an apache2 server (and VNC proxyies
for the java console).
Technologies: HT
> It uses HTTPS to issue commands to the VZ nodes in the cluster? Really?
I guess you should look at the code yourself if you want to know how it works.
> >> Can you talk a little about the security of the model used by
> Proxmox?
> >> Can I, on the client VZ HNs managed by Proxmox, limit what c
> > https and VNC
>
> And I would imagine that cluster nodes talk to each other over ssh,
> right?
Yes.
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
> what is the minimum HW requirements for Proxmox?
> Can it be installed on an AMD 686 single core CPU? (just for
> testing/learning of course... :-)
http://pve.proxmox.com/wiki/Installation#System_requirements
So an old AMD 686 will not work.
- Dietmar
> Whithout having gone through the docs I'm curious as to what kind of
> protocol it uses to talk to the remote VZ hosts.
https and VNC
> Can you talk a little about the security of the model used by Proxmox?
> Can I, on the client VZ HNs managed by Proxmox, limit what commands
> Proxmox can exe
> This way you'll have to either use the most weak hashing algorithm
> supported by every container OS, or risk that your modern hashing
> algorithm is not supported by some container OS.
We can customize the scripts per OS (as we do already for other
settings). And
md5 is supported on almost any
> > I think your approach won't work as is, at least in any tcb-enabled
> > system (see http://www.openwall.com/tcb/) for two obvious reasons:
> > - file where root shadow entry is stored is not /etc/shadow;
>
> I guess it is possible to detect the file and store the password?
It is a simple test
> On Tue, Nov 11, 2008 at 10:58:46AM +0100, Dietmar Maurer wrote:
> > Is there are real world example where my approach does not work?
>
> I think your approach won't work as is, at least in any tcb-enabled
> system (see http://www.openwall.com/tcb/) for two obvious reaso
And is it really possible to store the root password on NIS? What happen on
filesystem errors - usually single user mode ask for a password before fsck.
But sure,
that can't happen within a container.
- Dietmar
___
Users mailing list
Users@openvz.org
Is there are real world example where my approach does not work?
I check for /etc/shadow, and store as md5 - AFAIK the user is able to
login with that password on all distribution using pam_unix. If not, we can
still
try to read and parse the pam configuration.
It will not work for nis, but that
> The only problem is the solution is not generic. In other words, we
> can't know how different distros handle local users. It used to be
> crypt(3) and /etc/passwd (later /etc/shadow) manipulation. Now
> everybody
> uses PAM which can be configured in this or that way. For example, new
> password
> postcreate script can then modify /etc/passwd and /etc/shadow.
attached is a modified postcreate script
- Dietmar
postcreate.sh
Description: postcreate.sh
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
PROTECTED] On
Behalf Of Dietmar Maurer
Sent: Donnerstag, 06. November 2008 10:51
To: users@openvz.org
Subject: [Users] create CT with password
Hi all,
currently you need to use the following command to change the password
inside a CT:
vzctl set CTID --userpasswd root:XXX
This starts
Hi all,
currently you need to use the following command to change the password
inside a CT:
vzctl set CTID --userpasswd root:XXX
This starts/stop the CT if it is not already running.
That is OK unless you have preconfigured appliance templates which does
some
initialization at firs
Hi all,
I am looking for testers for the new vzdump version, available here:
DEB:
http://www.proxmox.com/cms_proxmox/cms/upload/vzdump/vzdump_1.1-1_all.de
b
RPM:
http://www.proxmox.com/cms_proxmox/cms/upload/vzdump/vzdump-1.1-1.noarch
.rpm
SOURCE:
http://www.proxmox.com/cms_proxmox/
You cant load modules inside the container.
- Dietmar
> this is strange because I have all those modules loaded on
> HardwareNode...
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
Btw, i just noticed that the mailing list archives are not up to date:
http://forum.openvz.org/index.php?t=thread&frm_id=7&;
Last entry is fron August 13
- Dietmar
___
Users mailing list
Users@openvz.org
https://openvz.org/mailman/listinfo/users
1 - 100 of 175 matches
Mail list logo
