From: Gilles (gilles_at_harfang.homelinux.org)
Date: Fri 12 Aug 2005 - 11:50:27 BST
Hello.
> > if i restart my network interface i get this msg:
> > Setting up IP spoofing protection: /etc/init.d/networking: line
> > 17: /proc/sys/net/ipv4/conf/all/rp_filter: Operation not permitted
> > /etc/init.d/networking: line
> > 17: /proc/sys/net/ipv4/conf/default/rp_filter: Operation not permitted
> > /etc/init.d/networking: line 17: /proc/sys/net/ipv4/conf/eth0/rp_filter:
> > Operation not permitted
> > /etc/init.d/networking: line 17: /proc/sys/net/ipv4/conf/eth1/rp_filter:
> > Operation not permitted
> > /etc/init.d/networking: line 17: /proc/sys/net/ipv4/conf/lo/rp_filter:
> > Operation not permitted
> > rp_filter.
> > Reconfiguring network interfaces...SIOCSIFADDR: Permission denied
> > SIOCSIFFLAGS: Permission denied
> > SIOCSIFFLAGS: Permission denied
> > Failed to bring up lo.
> > Ignoring unknown interface eth0=eth0.
>
> which is expected, as the guests are not allowed
> to mess with the network config, only the host is ...
>
> > and when i shut down the vserver i get this msg:
> >
> > Deactivating swap...umount: none: not found
> > umount: /tmp: must be superuser to umount
> > Not superuser.
> > done.
> > Unmounting local filesystems...umount: none: not found
> > umount: /tmp: must be superuser to umount
> > umount: /dev/hdv1: not found
> > umount: /: not mounted
> > done.
> > mount: permission denied
> > Rebooting... ifdown: shutdown eth0: Permission denied
> > ifdown: shutdown eth0: Permission denied
> > ifdown: shutdown eth1: Permission denied
>
> which is harmless, but if you want it to go away,
> just remove the hardware related shutdown scripts
> (symlinks) so that the guest will not attempt to
> do hardware stuff on shutdown ...
>
Here below is a simplistic script which I've used in order
to get rid of the hardware-related packages (and some others:
check the list to be sure you don't need those) which were
installed by 'debootstrap':
#!/bin/bash
#####
#
# This script is intended to be run inside a Debian vserver
# (after being installed through the "debootstrap" method)
# in order to fix various things:
#
# - Remove spurious (i.e. hardware-related) links in the
# /etc/rc[S1-5].d directories
# - Remove unnecessary packages (aiming at a minimal system)
# - Adding some useful missing packages
#
#####
set -e
#
# Remove hardware, kernel, network, mail packages
#
REMOVE_PACKAGES="
pciutils fdutils
makedev base-config klogd sysklogd modutils
logrotate cron at
ppp pppconfig pppoe pppoeconf
console-common console-data console-tools
telnet netkit-inetd netbase tcpd ifupdown wget ipchains dhcp-client
exim4 exim4-base exim4-config exim4-daemon-light
cpio nvi tasksel manpages iptables
"
ADD_PACKAGES="
less ssh screen netcat
"
apt-get -u remove $REMOVE_PACKAGES
apt-get -u install $ADD_PACKAGES
HTH,
Gilles
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver