Editing
Installation on Debian
(section)
From Linix VServer
Jump to navigation
Jump to search
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
== Distro Specific Notes == === Buster === The buster release is really using systemd so to create a guest use something like <pre> vserver buildbuster64 build -n buildbuster64 -m debootstrap --i-know-its-there --context <number> --hostname <whetever.net> -- -d buster -- --arch=amd64 <br/> --exclude=systemd-sysv,systemd,libsystemd0 <br/> --include=cron,sysvinit-core,sysvinit-utils;<br/> </pre> Also the utils could have issue starting, if you have this issue starting the guest you can apply this patch to util vserver: <br/> <pre> Index: util-vserver-0.30.216-pre3131/scripts/vserver.functions =================================================================== --- util-vserver-0.30.216-pre3131.orig/scripts/vserver.functions +++ util-vserver-0.30.216-pre3131/scripts/vserver.functions @@ -324,7 +324,7 @@ function _generateInitOptions test -n "$RUNLEVEL_START" || RUNLEVEL_START=3 test -n "$RUNLEVEL_STOP" || RUNLEVEL_STOP=6 - for i in /etc/init.d/rc /etc/rc.d/rc; do + for i in /etc/init.d/rc /etc/rc.d/rc /lib/init/rc /usr/lib/init/rc; do test -x "$vdir/vdir/$i" || continue INITCMD_START=( "$i" "$RUNLEVEL_START" ) INITCMD_STOP=( "$i" "$RUNLEVEL_STOP" ) </pre> === Stretch === The situation for guests and host is identical to that of Jessie. One enhancement is that a version of util-vserver featuring SystemD compatibility (solving the problem with Jessie listed below), is now available at [http://repo.psand.net/info/ repo.psand.net]. The patch set was put up for review in August 2016 by AlexanderS. Please test this and send any results to the Linux-Vserver mailing list. A new version of util-vserver has been compiled for repo.psand.net featuring the AlexanderS patch set. The packages have the same names as the traditional package but have -systemd appended to them thus: * util-vserver-systemd - utilities for managing Linux-VServer guests * util-vserver-systemd-build - tools which can be used to build vservers * util-vserver-systemd-core - core utilities of util-vserver-systemd * util-vserver-systemd-legacy - legacy scripts for util-vserver-systemd * util-vserver-systemd-python - python-bindings for util-vserver-systemd * util-vserver-systemd-sysv - initscripts for util-vserver-systemd The mainline util-vserver packages are still available in Stretch too. === Jessie === ==== Systemd on guests ==== For building new guests, or upgrading old ones, systemd needs to be prevented from installing. * To make sure systemd is not present after upgrade see [http://without-systemd.org/wiki/index.php/How_to_remove_systemd_from_a_Debian_jessie/sid_installation] * To install a guest without systemd present a working example is: vserver jessie64 build -n jessie64 -m debootstrap --i-know-its-there \ --context 44000 --hostname jessie64.whatever.com -- \ -d jessie -- --arch=amd64 --include=sysvinit-core,sysvinit,sysvinit-utils \ --exclude=systemd; ==== Systemd on hosts ==== Systemd must also be removed from hosts. With it present the host will lose it's /proc /sys and /dev on host starts or stops. See advice on how to remove it at [http://without-systemd.org/wiki/index.php/How_to_remove_systemd_from_a_Debian_jessie/sid_installation]. ==== Getting Jessie Guests to Shutdown Properly ==== Disable "/etc/init.d/sendsigs" completely, so it doesn't kill off any processes too early (vserver stop will do that anyway if it hits the timeout). rm /etc/init.d/sendsigs update-rc.d sendsigs remove I also removed the "halt" and "reboot" scripts, though that's probably not necessary. Add kill script links in /etc/rc6.d for "cron", "dbus" and "ssh". These don't exist because their init scripts have a blank "Default-Stop" header. The simplest way to remedy this is to add override headers in /etc/insserv/overrides and force insserv to rebuild the links; this is a bit convoluted but is better than modifying the init scripts in case an upgraded package has newer ones, which won't be installed if the originals have been modified. for s in cron dbus ssh; do sed -rn -e 's/^(# Default-Stop:).*$/\1 0 1 6/' -e '/^### BEGIN INIT INFO/,/^### END INIT INFO/p' /etc/init.d/$s > /etc/insserv/overrides/$s done /sbin/insserv -v -d === Wheezy === There are some issues with Wheezy's 3.2.55 Kernel and Util-vserver. * Util-vserver 0.30.216-pre3060-1 from the APT repository (repo.psand.net) moves vshelper to a new location. If you attempt to manage guests (restart, start, etc) without restarting the util-vserver service, vserver will display "vshelper functionality" errors. The util-vserver service will notify the kernel of the new location when the service is restarted. However, restarting util-vserver will also restart all of your guests. You can immediately notify the kernel of the new vshelper location (without restarting util-vserver or your guests) by running the following command: echo /usr/lib/x86_64-linux-gnu/util-vserver/vshelper >| /proc/sys/kernel/vshelper === Squeeze === There is one small issues with Squeeze's own Util-vserver: * Util-vserver shipping with debian, does not have the symbolic link for squeeze, fixed by ln -s debian /usr/lib/util-vserver/distributions/squeeze === Lenny === There are many issues with Lenny's own 2.6.26 Kernel and Util-vserver. In lenny the tools are for the 2.2 version of vservers, you can find on beng repository packages for the 2.3 version of util-vserver until it is integrated in debian. See * [[util-vserver:Devdebianpackage]] - Info about debian v2.3 package from the community * explanation on how to use this repository from: http://repo.psand.net/info How to use the Debian Repository ==== Hard CPU scheduling ==== This will not work in the Debian 'Lenny' Kernel, the patch used simply does not contain any of this functionality. ==== Problems due to Xattrs ==== There are two sets of issues within the Lenny kernel caused by the change in value of the Xattrs (extended attributes) applied to file in Vserver setups. The patch used in Debian Lenny uses Xattr flags which are set in positions which differ from the flags set by Debian kernels as well as most of the mainline Vserver patches. This result is that Xattrs of files in a non lenny system appear to have completely different flags in Lenny and vice versa. Since these flags are crucial to vserver hashification and chroot security, they can have devastating effects on Vserver guests and on host system security. If you have recently moved to or away from the stock Lenny Vserver kernel, have look at the symptoms below to see if any match your experiences, and apply the fixes/use another kernel as you see fit. As of writing these issue has not been corrected within the Debian archive. These fixes must be applied whenever moving vserver guest '''from''' or '''to''' the Debian 'Lenny's vserver kernel. For more details and a more concise explanation see [http://irc.13thfloor.at/LOG/2009-05/LOG_2009-05-12.txt Bertls IRC explanation ]. ===== Chroot Security Problems ===== Linux-Vserver uses file Xattrs to protect guest superusers from being able to view files above their root, preventing access to host file. This creates issues for anyone who: * has created a guest with a Debian 2.6.26-*-vserver kernel and wishes to use it with another kernel. * has created a guest with a different kernel and wishes to use it on a Debian 2.6.26-*-vserver kernel based host. In effect, the barrier normally in place for guest servers is not recognised by the kernel (the chroot problem) in the situation above and/or immutable links will not function correctly (the unification problem)failing to break when overwritten) in a unified guest setup. Symptoms suffered may include: * the possibility of vserver guest processes escaping their chroots and accessing other parts of the filesystem * guest not starting To fix the barrier flags for a current kernel, see [[Secure_chroot_Barrier#Solution:_Secure_Barrier | these instructions]]. Note that on some setups a barrier flags will appear on all directories under the guest hierarchy, and need to be unset in order to allow the servers to run. Use showattr to reveal the state of play for your guests and fix appropriately. ===== Unification Problems ===== There is a discrepancy between the immutable-unlink flag used for file unification, the process used in vhashify. This creates considerable issues for anyone who: * has unified guests with a Debian 2.6.26-*-vserver kernel and wishes to use them with another kernel. * has unified guests with a different kernel and wishes to then it on a Debian 2.6.26-*-vserver kernel based host. Symptoms suffered may include: * file that cannot be deleted * any process involving the writing of files in guests not working * files not being unlinked on write To fix the problem each file must be unlinked then the unification re-applied, or one could try this script submitted to [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508523 bugs.debian.org]. ==== /proc/mounts issue ==== The vserver's /proc/mounts let appear the vserver path on the host. lsof (for example) is able to print it. ==== "Ghosts" guests ==== ===== Issue ===== Sometimes a guests loose it's name in vserver-stats and is acting like a zombie. It's impossible to restart or kill it. Stopping all the guests with the util-vserver init.d script doesn't solve the issue. vkill --xid $CTX doesn't either. ===== Fix ===== echo 50 > /var/run/vservers/$vserver Seems to fix the issue -----------
Summary:
Please note that all contributions to Linix VServer may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
Linix VServer:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
Navigation menu
Page actions
Page
Discussion
Read
Edit
History
Page actions
Page
Discussion
More
Tools
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
About
Overview
Paper
News
Developers
Donations
Search
Getting Started
Downloads
FAQs
Documentation
Support
Participate
How to participate
Report a Bug
Communicate
Teams/Projects
Hall of Fame
Resources
Archives
Recent Wiki Changes
Pastebin
Related Projects
VServer Hosting
Happy VServer Users
Tools
What links here
Related changes
Special pages
Page information