This is Bavaria, Germany!
Configure your daemons to listen only to the IP-address of the mothersystem
Are there any ports used on the mother-system which are also used in a child-system?Check with "netstat -l"
It is said that vserver is part of the standard-kernel from 2.4.26 on... hopefully. I you get in trouble take a look at http://www.linux-vserver.org/index.php?page=linux-vserver_administrators_guide
Try to find a kernel-image package. I took this one: kernel-image-2.4.18ctx_rev01_i386.deb (here to download, only with <137 GBytes Harddisk). I f you have larger disks then 137 GBytes you have to have a kernel >= 2.4.20
Install kernel like this:
# apt-get install initrd-tools
# apt-get install kernel-package
# dpkg
-i kernel-image-2.4.18ctx_rev01_i386.deb
Take care about /etc/lilo.conf:
# uncomment this:
message=/boot/bootmess.txt
prompt
# single-key
delay=100
timeout=100
default=li2418ctx
image=/boot/vmlinuz-2.4.18ctx
label=linux2418ctx
read-only
# This is not here when you simply install the kernel-package
# important: you get a boot panic if you don't do that
initrd=/boot/initrd.img-2.4.18ctx
...
Here is how to compile the kernel with the patch...
|
# Where are all your child-servers living? |
|
# Most easy thing is to have an own ip-address for each vserver |
What capabilities shall the server have? You can set these values for S_CAPS in /etc/vservers/xx.conf:
|
Capability |
Description |
|
CAP_NET_RAW |
You can create arbitrary ip-packets |
|
CAP_SYS_TIME |
You are allowed to set time: date, netdate, xntpd |
|
CAP_NET_BROADCAST |
You are allowed to send broadcast-packets, i.e. Samba |
|
CAP_NET_BIND_SERVICE |
Bind ports below 1024 |
|
CAP_CHOWN |
You are allowed to change owner of files |
|
CAP_SYS_ADMIN |
You are allowed to do everything, includes mounting filesystems! |
Constants are from capability.h
Examples are for my vserver mysql5
|
vserver mysql5 start|stop |
Start/Stop a server |
|
vserver-stat |
Status of running servers |
|
vserver mysql5 enter |
Enter the given vserver |
This is what happens:
tanzwut:~# vserver mail2 stop Stopping the virtual server mail2 Server mail2 is running ipv4root is now 10.95.81.71 Can't set the new security context : Invalid argument sleeping 5 seconds Killing all processes chcontext version 0.29 chcontext [ options ] command arguments ... ... |
Find out the security-context-number of your vserver:
tanzwut:/etc/vservers# vserver mail2 enter ipv4root is now 10.95.81.71 Host name is now mail2 New security context is 2 |
Put this number in your /etc/vservers/[vservername].conf:
... # Because of: Can't set the new security context # Wenn doing "vserver mail2 stop" S_CONTEXT=2 |
|
Last modified: 28.10.2005 07:38 Impressum |
Wozu Witze ausdenken?
Das Leben schreibt sie selbst: Das haben wir jetzt 40 Jahre so gemacht, warum sollten wir das ändern? |
Why inventing jokes?
Real life does a better job: We are doing it this way for 40 years, why should we change it? |