About this list Date view Thread view Subject view Author view Attachment view

From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Tue 28 Jun 2005 - 16:59:10 BST


On Tue, Jun 28, 2005 at 12:03:47PM -0000, Martin Archanco wrote:
> Hello
> My name is martin and my problem is in slackware 10.1 with kernel
> 2.4.29 and patches vserver and program util-vserver.
> The problem is what have only root access and not access in the
> virtual server. Not information over this problem in google.
> The ip in master is 192.168.100.40 and the virtual is 192.168.100.44.
> The command eject in console is vserver test start
> The exit is...
> [1]root_at_depredator:/# vserver test start
> Starting the virtual server test
> Server test is not running
> ipv4root is now 192.168.100.44
> Host name is now martin
> New security context is 50
> Going multiuser...
> klogctl: Operation not permitted
> Starting sysklogd daemons: /usr/sbin/syslogd /usr/sbin/klogd -c 3 -x
> Starting OpenSSH SSH daemon: /usr/sbin/sshd
> Updating shared library links: /sbin/ldconfig
> Couldnt get a file descriptor referring to the console
> [2]root_at_depredator:/#
> That enter
> [3]root_at_depredator:/# vserver test enter
> ipv4root is now 192.168.100.44
> New security context is 50
> /dev/pts/0: Operation not permitted
> [4]root_at_martin:/#
> View netstat
> [5]root_at_martin:/# netstat -natu
> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address Foreign Address
> State
> [6]root_at_martin:/#
> Not listen services and not enter in virtual server and the ifconfig
> is correct.
> The problem is enter ssh for ip 192.168.100.44 this virtual server, my
> redirection in master ..this ifconfig....

yep, your sshd on the host has to be restricted to
a subset of the ip ranges, in your case 192.168.100.40
the easies way to do that is to add the appropriate
Listen* directive to you /etc/ssh/sshd_config and
restart the host's sshd (so that the sshd in the guest
can bind to the 192.168.100.44 ip)

HTH,
Herbert

> [7]root_at_depredator:/# ifconfig
> eth0 Link encap:Ethernet HWaddr 00:0A:E6:BA:11:D6
> inet addr:192.168.100.47 Bcast:192.168.100.255
> Mask:255.255.255.0
> UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500
> Metric:1
> RX packets:1540938 errors:1 dropped:0 overruns:0 frame:2
> TX packets:71042 errors:0 dropped:1 overruns:0 carrier:0
> collisions:0 txqueuelen:1000
> RX bytes:145947341 (139.1 Mb) TX bytes:3902997 (3.7 Mb)
> Interrupt:11 Base address:0xdc00
>
> eth0:test Link encap:Ethernet HWaddr 00:0A:E6:BA:11:D6
> inet addr:192.168.100.44 Bcast:192.168.100.255
> Mask:255.255.255.0
> UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500
> Metric:1
> Interrupt:11 Base address:0xdc00
>
> lo Link encap:Local Loopback
> inet addr:127.0.0.1 Mask:255.0.0.0
> UP LOOPBACK RUNNING MTU:16436 Metric:1
> RX packets:17 errors:0 dropped:0 overruns:0 frame:0
> TX packets:17 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0 txqueuelen:0
> RX bytes:1220 (1.1 Kb) TX bytes:1220 (1.1 Kb)
>
> The chroot barrier is correct ?
> [8]root_at_depredator:/# lsattr /vservers
> ------------- /vservers/test
> [9]root_at_depredator:/#
> Thanks and excuseme my english.....
> --
> Martin Archanco
> OpenSource & Technology
> Tel: 5238.3211
> Cel: 15.5307.7842
> http://www.nulit.com.ar
> Mail: martin_at_nulit.com.ar
>
> References
>
> 1. mailto:root_at_depredator:/
> 2. mailto:root_at_depredator:/
> 3. mailto:root_at_depredator:/
> 4. mailto:root_at_martin:/
> 5. mailto:root_at_martin:/
> 6. mailto:root_at_martin:/
> 7. mailto:root_at_depredator:/
> 8. mailto:root_at_depredator:/
> 9. mailto:root_at_depredator:/

> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 28 Jun 2005 - 16:59:38 BST by hypermail 2.1.3