Marc Fiuczynski [Sat, 18 Jun 2005 05:55:28 +0000 (05:55 +0000)]
added setsched and dlimit vserver syscall support
Steve Muir [Wed, 15 Jun 2005 22:16:36 +0000 (22:16 +0000)]
pl_mom needs us to retain functionality for starting a single vserver
Steve Muir [Wed, 15 Jun 2005 22:04:47 +0000 (22:04 +0000)]
vserver start: allow caller to wait for vserver to be started
Steve Muir [Wed, 15 Jun 2005 21:39:57 +0000 (21:39 +0000)]
Don't bother trying to gracefully shutdown vservers
Steve Muir [Wed, 15 Jun 2005 21:15:19 +0000 (21:15 +0000)]
vserver prep: set runlevel in /var/run/utmp, mount /proc and /dev/pts
Steve Muir [Wed, 15 Jun 2005 21:14:17 +0000 (21:14 +0000)]
vserver-init start functionality subsumed by Node Manager
Steve Muir [Wed, 8 Jun 2005 19:11:08 +0000 (19:11 +0000)]
Closer approximation to how the vserver script starts a vserver; still
need to fix up /var/run/utmp and mount /proc and /dev/pts
Steve Muir [Wed, 8 Jun 2005 18:05:06 +0000 (18:05 +0000)]
Simpler use of chroot and chcontext
Steve Muir [Fri, 3 Jun 2005 22:05:34 +0000 (22:05 +0000)]
Fix the open and start methods
Steve Muir [Fri, 3 Jun 2005 19:47:59 +0000 (19:47 +0000)]
Return child's PID when starting a vserver
Steve Muir [Fri, 3 Jun 2005 19:23:42 +0000 (19:23 +0000)]
Add method to start a vserver
Marc Fiuczynski [Thu, 2 Jun 2005 20:53:04 +0000 (20:53 +0000)]
bump release number
Marc Fiuczynski [Thu, 2 Jun 2005 19:56:08 +0000 (19:56 +0000)]
Fixed vlimit. This program lets us set various per-vserver limits. In
particular, we can now set nproc limits (aka the vserver equivalent to
CKRM numtasks). There are other limits that apparently just work, too,
such as resident-set-size, number of open files, etc., that I'll start
playing with, too.
Steve Muir [Wed, 25 May 2005 17:57:19 +0000 (17:57 +0000)]
Build a Python modules RPM
Steve Muir [Mon, 23 May 2005 19:23:57 +0000 (19:23 +0000)]
Update from util-python
Steve Muir [Mon, 23 May 2005 19:22:42 +0000 (19:22 +0000)]
Add method to enter a vserver
Steve Muir [Fri, 20 May 2005 21:45:19 +0000 (21:45 +0000)]
Beginnings of vserver module to support manipulation of vservers without
jumping through shell hoops
Mark Huang [Wed, 18 May 2005 17:52:27 +0000 (17:52 +0000)]
- bump release number since different from planetlab-3_0_1
Mark Huang [Tue, 3 May 2005 17:16:54 +0000 (17:16 +0000)]
bump release number for vuseradd /etc/shadow fix
Mark Huang [Tue, 26 Apr 2005 21:23:28 +0000 (21:23 +0000)]
- openssh-server 3.8 and above refuse login for "locked" accounts. replace
'!!' with '*' in the shadow password file.
- XXX still need a way to fix existing accounts. probably a script that
does this for every active vserver (/etc/vservers/*.conf)
Steve Muir [Thu, 7 Apr 2005 19:37:25 +0000 (19:37 +0000)]
Fix vuserdel to unmount all mountpoints before deleting vserver
Marc Fiuczynski [Mon, 3 Jan 2005 16:31:48 +0000 (16:31 +0000)]
Use getpwnam_r to work around problems with getpwnam on FC3 and Gentoo boxes.
Fix suggested by Gao Chan from Tsinghua.
Mark Huang [Tue, 30 Nov 2004 18:19:17 +0000 (18:19 +0000)]
bump release number
Mark Huang [Mon, 29 Nov 2004 21:57:41 +0000 (21:57 +0000)]
- turn on /etc/init.d/vservers
Mark Huang [Mon, 29 Nov 2004 21:56:45 +0000 (21:56 +0000)]
- bootcd doesn't support extended attribute bits, so "setattr --barrier
/vservers" in the rpm %post scriplet won't actually work during
the initial install. Make sure it's set every time vcached is run.
Mark Huang [Tue, 23 Nov 2004 14:56:03 +0000 (14:56 +0000)]
PL3118 and PL3131 fix: use the correct ext2 attribute bits if possible;
immulink changed from bit 15 to bit 27 in 2.6.x.
Mark Huang [Tue, 23 Nov 2004 14:54:35 +0000 (14:54 +0000)]
PL3118 and PL3131 fix: provide new option "--barrier" to showattr and
setattr to set the barrier bit. Also use the correct ext2 attribute
bits if possible; immulink changed from bit 15 to bit 27 in 2.6.x. Also
provide bit clearing options such as those provided in 0.30.196
(i.e. "--!immutable" or "--~immutable", remember to backslash the ! and
~ characters on the command line).
This program sucks. The 0.30.196 version isn't much better. We should
just hack e2fsprogs chattr.
Mark Huang [Tue, 23 Nov 2004 14:47:35 +0000 (14:47 +0000)]
PL3118 and PL3131 fix: do not reset the immutable bits on vservers
scheduled for deletion. Rely on vbuild to set the immulink bit correctly
on cloned vservers. rm -rf should not fail if the bit is set correctly.
Mark Huang [Tue, 23 Nov 2004 14:26:45 +0000 (14:26 +0000)]
change chroot() escape fix to setting the barrier bit rather than the immulink bit, which has changed and is now not even settable by chattr anymore anyway
Mark Huang [Fri, 19 Nov 2004 20:51:47 +0000 (20:51 +0000)]
- vcached no longer runs as a daemon
- do not restart vservers when package is upgraded
Mark Huang [Fri, 19 Nov 2004 20:32:14 +0000 (20:32 +0000)]
- don't run in single shot mode by default
Mark Huang [Fri, 19 Nov 2004 20:27:24 +0000 (20:27 +0000)]
- add option "-s" to run a single pass (e.g. along with "-f" from
/etc/cron.d/vcached)
Mark Huang [Wed, 17 Nov 2004 20:58:06 +0000 (20:58 +0000)]
bump release number to 6 for rc4
Mark Huang [Wed, 17 Nov 2004 20:37:32 +0000 (20:37 +0000)]
- clean up some more junk on failure
Marc Fiuczynski [Wed, 17 Nov 2004 20:34:25 +0000 (20:34 +0000)]
PL2445
Both vcached and vuseradd now print a warning message when vbuild succeeds
but the resulting new vserver image is smaller in size than the
vserver-reference image.
Marc Fiuczynski [Wed, 17 Nov 2004 19:35:47 +0000 (19:35 +0000)]
PL2445
- Reverted to using "du -s" rather than "du -b -s". Note that after
several cases where the said test failed on a particular PlanetLab
production machine, I can no longer cause the failure with "du -b -s".
This indicates that there is something odd going on with vbuild and/or
the underlying filesystem.
- Fix exit code bug. When the du size test fails, vuseradd will now exit
with a non-zero code. This way node manager wont think the
/vservers/$NAME vserver was created, eventhough it was not.
- Removing slice account from /etc/passwd upon vbuild or "du" error.
Mark Huang [Tue, 16 Nov 2004 17:07:57 +0000 (17:07 +0000)]
bump release number to 5 for rc3
Marc Fiuczynski [Tue, 16 Nov 2004 05:15:39 +0000 (05:15 +0000)]
PL3026: Updated to support large files (i.e., those >2GB).
Marc Fiuczynski [Tue, 16 Nov 2004 04:51:30 +0000 (04:51 +0000)]
PL3026: This is the upgraded version of vdu that maintains an internal
hash table of files with a nlink count > 1. Only if vdu sees all hard
links to a particular inode does it add its size and block count to the
total.
Mark Huang [Mon, 15 Nov 2004 20:16:40 +0000 (20:16 +0000)]
bump release number
Marc Fiuczynski [Fri, 12 Nov 2004 18:44:09 +0000 (18:44 +0000)]
PL2445 Use -b option to du to avoid rounding errors.
Mark Huang [Mon, 8 Nov 2004 16:24:13 +0000 (16:24 +0000)]
bump release number
Mark Huang [Sat, 6 Nov 2004 16:10:42 +0000 (16:10 +0000)]
- don't create the symbolic link /home/slice/.ssh, this is not how
pl_sshd works
Mark Huang [Thu, 4 Nov 2004 18:11:59 +0000 (18:11 +0000)]
bump release number
Mark Huang [Wed, 3 Nov 2004 19:46:48 +0000 (19:46 +0000)]
- start vcached slightly later
Mark Huang [Wed, 3 Nov 2004 15:33:20 +0000 (15:33 +0000)]
- PL2479 and PL2299 fix: no access to restricted ports
Mark Huang [Wed, 3 Nov 2004 15:33:11 +0000 (15:33 +0000)]
- PL2479 and PL2299 fix: no access to restricted ports if --secure is
passed (default in /usr/sbin/vserver)
Mark Huang [Wed, 27 Oct 2004 15:11:41 +0000 (15:11 +0000)]
change URL to repository location
Mark Huang [Tue, 26 Oct 2004 04:45:54 +0000 (04:45 +0000)]
- giving slices 60 seconds to start isn't realistic. Revert to previous
vserver-init behavior, fork off all vserver init routines (except for
high priority/system slices who can set BACKGROUND=no in their .conf
files, e.g. pl_netflow). vserver exit routines still get 60 seconds to
complete, then they are forcibly killed.
- log stdout/stderr to slice's /var/log/boot.log and close stdin for
their init routines. This may break sensitive SysV init scripts that
assume terminal access.
Mark Huang [Tue, 26 Oct 2004 03:11:23 +0000 (03:11 +0000)]
PL2695 fix: remove context profile file
Marc Fiuczynski [Wed, 20 Oct 2004 21:45:43 +0000 (21:45 +0000)]
calls 'service resman stop ' rather than the vs2ckrm off directly
Marc Fiuczynski [Wed, 20 Oct 2004 21:45:15 +0000 (21:45 +0000)]
calls 'service resman start ' rather than the *limit scripts directly
Mark Huang [Wed, 20 Oct 2004 19:01:52 +0000 (19:01 +0000)]
- PL2580 WAR: disklimit code is malfunctioning
Mark Huang [Wed, 20 Oct 2004 19:00:52 +0000 (19:00 +0000)]
- turn resource management off after stopping but before deleting the
vserver
Marc Fiuczynski [Wed, 20 Oct 2004 02:56:23 +0000 (02:56 +0000)]
Integrated with resman operations to enable/disable resource management
on vservers that are added/deleted, respectively.
Marc Fiuczynski [Mon, 18 Oct 2004 17:54:51 +0000 (17:54 +0000)]
Removed ULIMIT setting. Let CKRM do the task limit.
Mark Huang [Thu, 14 Oct 2004 18:39:56 +0000 (18:39 +0000)]
- start later, after ssh and vserver-reference
Mark Huang [Wed, 13 Oct 2004 02:39:54 +0000 (02:39 +0000)]
- deprecated
Mark Huang [Wed, 13 Oct 2004 02:39:17 +0000 (02:39 +0000)]
- CAP_CONTEXT not defined in linuxcaps.h, and is definitely something we
want to remove
Mark Huang [Wed, 13 Oct 2004 02:37:02 +0000 (02:37 +0000)]
- rotate /var/log/vcached.log
Mark Huang [Wed, 13 Oct 2004 02:35:47 +0000 (02:35 +0000)]
- add -l contortion so that backgrounded processes can re-open the log
file after it's rotated
- handle SIGHUP: re-open the log file
- print warning if vcached is already running
- setsid to detach from the controlling terminal and close stdout,
stdin, stderr before forking
Mark Huang [Tue, 12 Oct 2004 21:27:15 +0000 (21:27 +0000)]
- zap immutable bit before nuking failed vserver build
Marc Fiuczynski [Mon, 11 Oct 2004 19:56:46 +0000 (19:56 +0000)]
$%^!*& rpm #&!^*
Fix to properly install vsh as /bin/vsh.
Marc Fiuczynski [Mon, 11 Oct 2004 19:38:48 +0000 (19:38 +0000)]
Fix so that vsh works from /bin/vsh again.
Marc Fiuczynski [Mon, 11 Oct 2004 19:03:52 +0000 (19:03 +0000)]
updated vsh from /bin/vsh to /usr/sbin/vsh
Marc Fiuczynski [Mon, 11 Oct 2004 18:49:00 +0000 (18:49 +0000)]
Updated so users can build on even on systems without auto* support.
Marc Fiuczynski [Mon, 11 Oct 2004 18:08:11 +0000 (18:08 +0000)]
Added vsh.
Marc Fiuczynski [Mon, 11 Oct 2004 15:42:59 +0000 (15:42 +0000)]
man page for the new vsh command.
Marc Fiuczynski [Mon, 11 Oct 2004 15:35:18 +0000 (15:35 +0000)]
Fixed version of vsh.c that no longer uses planetlab.c.
Moreover, it parses the S_CAPS entry in /etc/vservers/<vserver>.conf for
the various CAP options. It does so with better error checking than the
prior version.
Marc Fiuczynski [Mon, 11 Oct 2004 15:34:03 +0000 (15:34 +0000)]
Fixes for vsh.
vsh.c no longer usese planetlab.c. This is in preparation of sending a patch
file back to the util-vserver maintainer.
Marc Fiuczynski [Mon, 11 Oct 2004 14:57:53 +0000 (14:57 +0000)]
It looks like vsh was never built due to a makefile bug.
Mark Huang [Sun, 10 Oct 2004 19:00:55 +0000 (19:00 +0000)]
- add missing shift in restart rule
Marc Fiuczynski [Sat, 9 Oct 2004 05:47:13 +0000 (05:47 +0000)]
Now reading in the S_CAPS values from the vserver's /etc/vservers/<name>.conf
file. In this way, vserver will add to the current shell the appropriate
capabilities.
Mark Huang [Wed, 22 Sep 2004 17:55:12 +0000 (17:55 +0000)]
PL2143 workaround and general vuseradd regression fix: add slice user to
/etc/sudoers
Marc Fiuczynski [Tue, 21 Sep 2004 01:06:06 +0000 (01:06 +0000)]
vdlimit is a replacement for the prior tools used to set disklimits.
The prior tools appear to have been a hack on top of the quota support.
NOTE that the vdlimit code was taken from Herbert Poetzl's Experimental
website. It is vdlimit 0.01. The code didn't compile and was standalone.
I integrated it with util-vserver, but it needs further integration. Have
already sent Herbert email about this and another minor problem.
Marc Fiuczynski [Fri, 17 Sep 2004 20:08:04 +0000 (20:08 +0000)]
fix for bind mount problem
Marc Fiuczynski [Fri, 17 Sep 2004 09:39:55 +0000 (09:39 +0000)]
Checking in the latest version. However, I think this file should be
removed from the repository, as it is automatically generated by automake.
Marc Fiuczynski [Fri, 17 Sep 2004 09:38:45 +0000 (09:38 +0000)]
Accounts for hardlinks more accurately than the original version that came
with util-vserver. The original version ignored to account for all files
whose hard link count > 1. This version maintains a table of such files
and then accounts for their size if it visits all hard links.
Marc Fiuczynski [Fri, 17 Sep 2004 09:35:52 +0000 (09:35 +0000)]
A simple replacement for the "big" vsh that was used by PlanetLab 2.0.
Still need to address bind mount issues.
Marc Fiuczynski [Fri, 17 Sep 2004 09:34:58 +0000 (09:34 +0000)]
This file contains vserver specific code. It is only used by vsh.c, but
at an earlier point was also used by vsuexec.c (not included in the
repository). At some point in the future the code in planetlab.c should
migrate into vsh.c. Moreover, some of the code is redundant with support
provided by the util-vserver library. This should be cleaned up and then
the file should be deprecated.
Marc Fiuczynski [Fri, 17 Sep 2004 09:31:24 +0000 (09:31 +0000)]
added vsh ; vlimit needs to be fixed so that it compiles, but we don't use it right. Will fix vlimit later
Mark Huang [Fri, 27 Aug 2004 16:34:37 +0000 (16:34 +0000)]
- group names have a 16 character maximum limit. Since I can't see a
reason for slices to need custom group names, just assign them to the
"slices" group.
- do a basic sanity check on the new vserver: see if the apparent disk
usage of the new vserver is less than that of the reference image.
Mark Huang [Thu, 26 Aug 2004 22:29:54 +0000 (22:29 +0000)]
regenerate
Mark Huang [Thu, 26 Aug 2004 22:29:38 +0000 (22:29 +0000)]
- install /usr/lib/util-vserver/sample.conf instead of using a bogus
/etc/vservers/vserver-reference.conf
- also chkconfig vservers
Mark Huang [Thu, 26 Aug 2004 22:28:49 +0000 (22:28 +0000)]
- install /usr/lib/util-vserver/sample.conf instead of using a bogus
/etc/vservers/vserver-reference.conf
Mark Huang [Thu, 26 Aug 2004 22:28:23 +0000 (22:28 +0000)]
- execute /etc/rc.vinit first for backward compatibility
Mark Huang [Thu, 26 Aug 2004 22:27:42 +0000 (22:27 +0000)]
- start me last, kill me first
- pass args to restart
Mark Huang [Thu, 26 Aug 2004 17:24:25 +0000 (17:24 +0000)]
- add /etc/vcached.conf to file list
Mark Huang [Thu, 26 Aug 2004 17:22:45 +0000 (17:22 +0000)]
use install-data-hook to link /etc/init.d/vservers
Mark Huang [Thu, 26 Aug 2004 16:55:07 +0000 (16:55 +0000)]
regenerated
Mark Huang [Thu, 26 Aug 2004 16:54:49 +0000 (16:54 +0000)]
- allow specification of particular vservers to start/stop
Mark Huang [Thu, 26 Aug 2004 16:51:44 +0000 (16:51 +0000)]
- background startup/shutdown of vservers
Mark Huang [Thu, 26 Aug 2004 16:51:32 +0000 (16:51 +0000)]
- move vcached configuration here
Mark Huang [Thu, 26 Aug 2004 16:51:11 +0000 (16:51 +0000)]
- set ONBOOT to yes
- fix regexps so that S_CONTEXT and ONBOOT are always reset to their
correct values
Mark Huang [Thu, 26 Aug 2004 16:50:34 +0000 (16:50 +0000)]
- remove iproot junk we don't use (chbind, ifconfig_iproot, nodev, etc.)
- by default, give vservers 60 seconds to complete rc
initialization/shutdown cleanly, then terminate/kill the processes
Mark Huang [Thu, 26 Aug 2004 16:48:48 +0000 (16:48 +0000)]
- get configuration from /etc/vcached.conf
Mark Huang [Thu, 26 Aug 2004 16:48:37 +0000 (16:48 +0000)]
- add /etc/vcached.conf
Mark Huang [Thu, 26 Aug 2004 16:47:34 +0000 (16:47 +0000)]
- moved install-exec-hook rule here
- make a symlink from vservers to vserver-init for backward
compatibility with sidewinder
Mark Huang [Thu, 26 Aug 2004 16:47:01 +0000 (16:47 +0000)]
- move install-exec-hook rule to toplevel Makefile.am
Mark Huang [Thu, 26 Aug 2004 16:46:43 +0000 (16:46 +0000)]
- remove IPROOT junk that we don't use