About this list Date view Thread view Subject view Author view Attachment view

From: Gilles (gilles_at_harfang.homelinux.org)
Date: Fri 12 Aug 2005 - 11:50:27 BST


Hello.
 
> > if i restart my network interface i get this msg:
> > Setting up IP spoofing protection: /etc/init.d/networking: line
> > 17: /proc/sys/net/ipv4/conf/all/rp_filter: Operation not permitted
> > /etc/init.d/networking: line
> > 17: /proc/sys/net/ipv4/conf/default/rp_filter: Operation not permitted
> > /etc/init.d/networking: line 17: /proc/sys/net/ipv4/conf/eth0/rp_filter:
> > Operation not permitted
> > /etc/init.d/networking: line 17: /proc/sys/net/ipv4/conf/eth1/rp_filter:
> > Operation not permitted
> > /etc/init.d/networking: line 17: /proc/sys/net/ipv4/conf/lo/rp_filter:
> > Operation not permitted
> > rp_filter.
> > Reconfiguring network interfaces...SIOCSIFADDR: Permission denied
> > SIOCSIFFLAGS: Permission denied
> > SIOCSIFFLAGS: Permission denied
> > Failed to bring up lo.
> > Ignoring unknown interface eth0=eth0.
>
> which is expected, as the guests are not allowed
> to mess with the network config, only the host is ...
>
> > and when i shut down the vserver i get this msg:
> >
> > Deactivating swap...umount: none: not found
> > umount: /tmp: must be superuser to umount
> > Not superuser.
> > done.
> > Unmounting local filesystems...umount: none: not found
> > umount: /tmp: must be superuser to umount
> > umount: /dev/hdv1: not found
> > umount: /: not mounted
> > done.
> > mount: permission denied
> > Rebooting... ifdown: shutdown eth0: Permission denied
> > ifdown: shutdown eth0: Permission denied
> > ifdown: shutdown eth1: Permission denied
>
> which is harmless, but if you want it to go away,
> just remove the hardware related shutdown scripts
> (symlinks) so that the guest will not attempt to
> do hardware stuff on shutdown ...
>

Here below is a simplistic script which I've used in order
to get rid of the hardware-related packages (and some others:
check the list to be sure you don't need those) which were
installed by 'debootstrap':

#!/bin/bash

#####
#
# This script is intended to be run inside a Debian vserver
# (after being installed through the "debootstrap" method)
# in order to fix various things:
#
# - Remove spurious (i.e. hardware-related) links in the
# /etc/rc[S1-5].d directories
# - Remove unnecessary packages (aiming at a minimal system)
# - Adding some useful missing packages
#
#####

set -e

#
# Remove hardware, kernel, network, mail packages
#
REMOVE_PACKAGES="
  pciutils fdutils
  makedev base-config klogd sysklogd modutils
  logrotate cron at
  ppp pppconfig pppoe pppoeconf
  console-common console-data console-tools
  telnet netkit-inetd netbase tcpd ifupdown wget ipchains dhcp-client
  exim4 exim4-base exim4-config exim4-daemon-light
  cpio nvi tasksel manpages iptables
"
ADD_PACKAGES="
 less ssh screen netcat
"

apt-get -u remove $REMOVE_PACKAGES
apt-get -u install $ADD_PACKAGES

HTH,
Gilles
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Fri 12 Aug 2005 - 11:52:17 BST by hypermail 2.1.3