From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Wed 28 Jan 2004 - 15:39:54 GMT
On Wed, Jan 28, 2004 at 02:47:29PM +0100, Fritz Kron wrote:
> Hello,
>
> Just have installed and configured secure quotas for use
> inside vserver. Everything looks fine if in mtab ufs
> filesystem is used but in fact it is ext3.
> If ext3 is used i get the following error:
>
> root_at_webhost:~# quotacheck -maug
> quotacheck: error (2133571364) while opening /dev/hdv1
secure quota, means you are using the vroot device
instead of a real block device, right?
> Should ufs be used as mtab entry for hdv or ext3?
> Will there be problems if ufs is used in vservers mtab
> file and in fact its ext3?
yes, the fs type entry is a fake anyway, so it doesn't
matter which filesystem you specify, ufs is the best
solution atm, because it convinces the quota tools not
to try lowlevel fs access, which is prohibited in a
secure setup (via vroot) and thus allows it to succeed
> Anybody knows how to solve this?
sure I do ;)
> kind regards Fritz
HTH,
Herbert
> INSTALLATION:
>
>
> Server Setup:
>
> running a custom built 2.4.24 kernel, with vserver patches:
> patch-2.4.24-vs1.24.diff
> patch-2.4.24-vs1.24-q0.12.diff
>
> Packages installed: 0.26 vserver base/admin,
> quota-tools 3.10 and the vquota-tools 0.14-1 vrsetup.
>
> In this example, /dev/evms/lvm/vserver is the LVM2 volume group providing
> the separate partition /dev/evms/lvm/vserver/webhost for the virtual server
> webhost and /dev/vroot/webhost is the virtual root device used.
>
> kernel config:
> 'Virtual root device' enabled in 'Block devices --->'
> 'Quota support' enabled in 'File systems --->'
> 'VFS v0 quota format support' enabled in 'File systems --->'
> 'Persistend Context ID for files' at '(UID32/GID32)'
>
>
> Make node with name for vserver: mknod /dev/vroot/<vservername> b 4 0
>
>
>
> # create/modify the start/stop scripts
>
>
> ----------------- /etc/vservers/webhost.sh -----------------
>
> #!/bin/sh
> # quota for /dev/evms/lvm/vserver/webhost on /var/lib/vservers/webhost
> case $1 in
> pre-start)
>
> /bin/rm -f /var/lib/vservers/$2/dev/hdv1
> vrsetup /dev/vroot/$2 /dev/evms/lvm/vserver/$2
> /bin/cp -fa /dev/vroot/$2 /var/lib/vservers/$2/dev/hdv1
> ;;
> post-start)
> # echo "/dev/hdv1 / ufs rw,usrquota,grpquota 0 0" > /var/lib/vservers/$2/etc/mtab
> ;;
> pre-stop)
> ;;
> post-stop)
>
> vrsetup -d /dev/vroot/$2
> ;;
> *)
> echo $0 pre-start
> echo $0 pre-stop
> echo $0 post-start
> echo $0 post-stop
> ;;
> esac
>
> ----------------- /etc/vservers/webhost.sh -----------------
>
>
> # change the server fstab for quota
> /dev/hdv1 / ext3 defaults,usrquota,grpquota 0 0
>
>
> # start the server and change into it
>
> vserver webhost start
> vserver webhost enter
>
>
> # run the quotacheck tool
>
> quotacheck -maug
>
> # take a look at the quota report
>
> root_at_webhost:~# repquota -aug
> *** Report for user quotas on device /dev/hdv1
> Block grace time: 7days; Inode grace time: 7days
> Block limits File limits
> User used soft hard grace used soft hard grace
> ----------------------------------------------------------------------
> root -- 413904 0 0 18019 0 0
> daemon -- 16 0 0 5 0 0
> man -- 476 0 0 36 0 0
> mail -- 120 0 0 28 0 0
> news -- 8 0 0 2 0 0
> admin -- 20 0 0 5 0 0
> frz -- 20 0 0 5 0 0
>
>
> *** Report for group quotas on device /dev/hdv1
> Block grace time: 7days; Inode grace time: 7days
> Block limits File limits
> Group used soft hard grace used soft hard grace
> ----------------------------------------------------------------------
> root -- 413260 0 0 17939 0 0
> daemon -- 16 0 0 5 0 0
> adm -- 268 0 0 20 0 0
> tty -- 20 0 0 4 0 0
> mail -- 176 0 0 29 0 0
> news -- 8 0 0 5 0 0
> src -- 164 0 0 43 0 0
> shadow -- 76 0 0 7 0 0
> utmp -- 316 0 0 3 0 0
> staff -- 120 0 0 30 0 0
> crontab -- 40 0 0 4 0 0
> ssh -- 60 0 0 1 0 0
> admin -- 20 0 0 5 0 0
> frz -- 20 0 0 5 0 0
>
>
> root_at_webhost:~# cat /etc/mtab
> /dev/hdv1 / ufs rw,usrquota,grpquota 0 0
> proc /proc proc rw 0 0
>
>
> -------------------------X snip
>
>
>
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver