Re: [vserver] Problem with delete vserver with SYS_ADMIN set

From: Herbert Poetzl <herbert_at_13thfloor.at>
Date: Thu 25 Aug 2011 - 13:30:31 BST
Message-ID: <20110825123031.GY6542@MAIL.13thfloor.at>

On Thu, Aug 25, 2011 at 10:15:24PM +1000, Steve Kieu wrote:

>> an what happens when you do not give those ccapabilities?

> without these, it behaves normally - delete fine, no problem so
> far. It only happens in sparc , not in x86 and x86_64.

that would suggest that something inside the guest
happens which requires those ccapabilities

any idea what that could be on a 'normal' guest
start?

>> could you upload the entire log for that and keep the
>> resulting filesystem for further investigation?

> I will try tomorrow with ext3. Have migrated all vs into
> another host so it can be free to experiment.

> What log are you talking about? dmesg log or kernel.log.

the log of your guest start/stop and the errors you
get (basically a copy of the shell input/output)
but of course, if you get some output in dmesg,
please add that as well

> Should I strace it when
> I do a rm -rf /var/lib/vservers/NAME?
> (after vserver NAME delete failed, I tried to manually
> rm -rf it and same error.

yes, please do so, from the information you provided
so far, it sounds like something inside the guest is
either modified or mounted (in some strange way) so
this information could be quite helpful

> I can work around this limitation after all we I hit the brick
> wall - will sshfs mount from the host through vserver fstab
> which will work fine I guess.It might even be better solution
> in terms of security; vserver is still only virtualization for
> sparc for now (lxc is still far more unstable in my test). so
> it is good if this can be fixed.

I'm pretty sure we can identify the issue and if it is
actually Linux-VServer related we will fix it :)

best,
Herbert

PS: if you have some time for interactive testing, you
could pay a visit to the IRC channel and look for Bertl

> Thanks,

>> Repeat with mkfs.ext4 - still the same

>> let's stick with ext3 for now, that's easier to debug :)

> -- Steve Kieu
Received on Thu Aug 25 13:30:58 2011

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 25 Aug 2011 - 13:30:58 BST by hypermail 2.1.8