search for: hudoklin

...: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: Ubuntu Status: NEW Severity: critical Priority: P5 Component: ip_conntrack AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy: jakahudoklin at gmail.com Estimated Hours: 0.0 Created an attachment (id=355) --> (http://bugzilla.netfilter.org/attachment.cgi?id=355) iptables config I found bug in nf_conntrack, when cleaning up conenctions. It is highly reproducaple with following setup: kernel: Ubuntu 11.04(natty) 2.6.38-8-server...

...0" auth_unix_ro = "none" auth_unix_rw = "none" Can you please tell me easy to setup distro with systemd that user namespaces work, so i can compare. Thanks! On Mon, Sep 9, 2013 at 3:08 AM, Gao feng <gaofeng@cn.fujitsu.com> wrote: > On 09/06/2013 07:32 PM, Jaka Hudoklin wrote: > > Hello! > > > > Okay i tried again with only staticly linked busybox: > > offlinehacker:~/ $ /home/offlinehacker/busybox/busybox > > BusyBox v1.17.1 (Debian 1:1.17.1-8) multi-call binary. > > Copyright (C) 1998-2009 Erik Andersen, Rob Landley, Denys Vla...

It seems to be working now, what I needed was libvirt built with libcap support and also securityfs patch. Thanks! On Mon, Sep 9, 2013 at 1:08 PM, Jaka Hudoklin <jakahudoklin@gmail.com>wrote: > I applied your patch, but no success. What bothers me is that connection > gets reseted. By the way, i'm using systemd, with process started in > forking mode and as daemon. Could this cause any problems? > > This is my libvirtd.conf, if it...

...LIBVIRT_DEBUG is set to 1 and i get much more messages. If there's any my granular debug please let me know. PS: I forgot to mention my version of libvirt is 1.1.2 Thanks, Jaka! On Fri, Sep 6, 2013 at 3:41 AM, Gao feng <gaofeng@cn.fujitsu.com> wrote: > On 09/06/2013 03:15 AM, Jaka Hudoklin wrote: > > Hello! > > > > I'm testing user namespaces and I have quite some problem getting them > to work. > > > > First of all, I have user namespaces support enabled in kernel: > > > > offlinehacker:~/ $ uname -r > > 3.10.10 > > offlin...

Hello! How do i get pass this error? offlinehacker:~/ $ virsh --debug 0 -c lxc:/// create o1.xml create: file(optdata): o1.xml error: Failed to create domain from o1.xml error: internal error: No valid cgroup for machine c1 My cgroups seem to be mounted: cgroup on /sys/fs/cgroup/systemd type cgroup

...op libvirtd[1542]: internal error: guest failed to start: 2013-09-05 19:08:57.781+0000: 19036: debug Looks like .oldroot, dev, proc and sys gets created with mapped permissions(499:100), but container fails to start. Any help or direction how to get this working would be appriciated, Thanks, Jaka Hudoklin!

On 09/04/2013 07:05 AM, Jaka Hudoklin wrote: > Hello! > > How do i get pass this error? > > offlinehacker:~/ $ virsh --debug 0 -c lxc:/// create o1.xml > > create: file(optdata): o1.xml > error: Failed to create domain from o1.xml > error: internal error: No valid cgroup for machine c1 > Can you give...

On 09/06/2013 07:32 PM, Jaka Hudoklin wrote: > Hello! > > Okay i tried again with only staticly linked busybox: > offlinehacker:~/ $ /home/offlinehacker/busybox/busybox > BusyBox v1.17.1 (Debian 1:1.17.1-8) multi-call binary. > Copyright (C) 1998-2009 Erik Andersen, Rob Landley, Denys Vlasenko > and others. Licens...

On 09/06/2013 03:15 AM, Jaka Hudoklin wrote: > Hello! > > I'm testing user namespaces and I have quite some problem getting them to work. > > First of all, I have user namespaces support enabled in kernel: > > offlinehacker:~/ $ uname -r > 3.10.10 > offlinehacker:~/ $ ls /proc/self/ns/ > ipc@ mnt@...