Utah Open Source Conference 2009 15 September 2009 @ 09:58 am
spacer
dowdle
Just wanted to post a blurb saying that there will be an OpenVZ booth at the Utah Open Source Conference 2009. I will also be giving a presentation entitled, Introduction to OS Virtualization, Containers, and OpenVZ.

So, if you live anywhere near Utah or the mid-west, please try to attend and stop by the booth and say hello.

What: Utah Open Source Conference 2009
When: October 8-10, 2009
Where: Miller Campus of the Salt Lake Community College

See links above for more details. I'll be driving from the Bozeman, Montana area which is approximately 413 miles.
Tags: openvz
Permanent LinkLeave a comment
FUDforum upgrade and troubles 09 July 2009 @ 05:59 pm
spacer
k001
I finally did an upgrade of forum software used on forum.openvz.org. As any big upgrade, it went not so flawlessly as I wanted it to. Read on for some details.

The first problem is "Compact messages" operation caused all the messages to, hmm, be ultimately compacted, or in plain words deleted. Have restored it from the backup, so a few messages written after the last backup were lost. I apologize if it caused any problems for you. Some people may still find messages that

Next problem is forum theme -- basically you have to recreate it from scratch, haven't done that yet, still thinking of what layout will be more convenient.

Yet another problem we found only today is with private messaging, basically rendering it useless. The thing is, a new version of forum software introduced a separate limits on total size of private messages for admins and moderators. Strange enough, upgrade script did't care and just set the new values to zero! Tracked it down by reading the source code, fixed the limits, problem solved. Fortunately no one has seen it, except for the admins and moderators -- which is kinda funny.

Also, I fixed a bug in the forum code (well, technically not a bug but a bad interaction of old version of PHP vs. forum software) which prevented indexing of non-latin (i.e. cyrillic, i.e. russian) messages. So now it's possible for Russian-speaking users to use search.

Finally, I am still a bit unsure if the forum functions fine after the upgrade. So if you find any problems with forum, please let me know.
Tags: forum, infrastructure, openvz
Permanent Link5 comments | Leave a comment
wiki spam fighting 06 July 2009 @ 07:50 pm
spacer
k001
Yet again I spent almost full working day trying to improve antispam protection on wiki.openvz.org.

Currently 99% of all spam on the web is link spam -- bad guys are adding lots of links to the sites they promote in order to increase page rank values for that sites. In fact they get no profit from that, since in all recent mediawiki installation (including wikipedia itself) all the external links comes with ref="nofollow" attribute. That attribute is respected by Google crawler and other such bots and basically means "ignore this link".

Nevertheless spammers keep inserting trash into such wikis. Recently such activity mostly comes in a form of a user page (or user talk page) creation that looks like, well, a legitimate user page (something along the lines of "My name is John Doe, I'm Java coder, my hobbies are swimming and fishing") but with a blatant plug added ("Here are some cool sites: [1] [2] [3] ...").

For about 2 years or so wiki.openvz.org asks you to login/register in order to edit, so anonymous edits are not allowed. That helps a bit, but still there are bots that performs register, log in and post.

So now I have added another restriction: users that have just registered can not create new pages. Here "just registered" means "registered less than 24 hours ago". Note that such users can still freely edit existing pages. Let's see if it helps.

Oh, almost forgot to say it: looks like captchas don't work at all! Either spammers have good OCR tools, or they hire enough human beings to "manually" decipher those cryptic images.
Tags: openvz, spam, wiki
Permanent Link7 comments | Leave a comment
Back from the LinuxTag 30 June 2009 @ 10:03 pm
spacer
notbuu
First, hello to all!

Second, my friend Bernhard and I helped Kir with his booth on the LinuxTag. It was a great pleasure for us because Kir is a really cool guy. We had the chance to hear and learn a lot about Kernel development and OpenVZ in general. Also it was very nice to discuss our OpenVZ server farm at work with Kir's Know How. Quote "Kir: Uhh, you perl scripts are really hardcoded" - :o)

I hope we will see us before the next LinuxTag next year. As we spoke about we decide to help the project by doing support on the forum/blog and maybe some wiki stuff (system use case).

For all readers we took some pictures from the booth and us. You can find them on our blog page systec.blogsite.org.

Thank you - It was a lot of fun - Mario
Tags: berlin, event, germany, linuxtag, openvz
Permanent Link3 comments | Leave a comment
Conferences, conferences... 22 June 2009 @ 10:10 pm
spacer
k001
I am almost ready for the LinuxTag, my flight from Moscow to Berlin is tomorrow mid-day. I have prepared booklets, even in German (thanks to Mario and Bernhard, OpenVZ users from Austria who will also help me with the booth). And I will even have a monitor to demo Overo Gumstix running Linux (thanks to Björn from XtreemFS). So if you are visiting LinuxTag this year, come to say hello!

If you happen to be on a different continent, North America, then I welcome you to visit LinuxSymposium. This is a quite a big annual event, and unlike LinuxWorld (which is now called OpenSourceWorld) they haven't changed their name for 10 years (well, hmm, actually they dropped the Ottawa prefix since this year it will be held in Montreal -- but at least they left the Linux part, the one that is most important for me). For the LinuxSymposium I am preparing a tutorial and a BoF. So, again, come to say hello! :)
Tags: canada, event, germany, linuxsymposium, linuxtag, openvz
Permanent Link1 comment | Leave a comment
LinuxTag: any volunteers? 10 June 2009 @ 08:24 pm
spacer
k001
I have just got my passport back from the German embassy today, with a shiny new Schengen visa and booked tickets to Berlin. Yes, this is for LinuxTag event which will take place in Berlin, Germany, from 24th to 27th of June. OpenVZ will have a booth on the show.

Are there any OpenVZ users living not too far from Berlin* who can help me with the booth (i.e. be a booth star together with me)? Please contact me by leaving a comment here or email to kir at openvz dot org, I need your help.

* from my perspective every German city is not too far from Berlin :) but YMMV.
Tags: berlin, event, germany, linuxtag, openvz
Permanent Link3 comments | Leave a comment
Completion in vzctl 22 May 2009 @ 04:09 pm
spacer
k001
There is a nice feature in vzctl (well, technically not in vzctl binary itself; it just comes in vzctl package) that many people don't know about -- completion. This basically makes it able to save a few keystrokes when typing.

Say you want to create a container. You type vzct and press <TAB> -- it completes that to vzctl and a space after. This is usual feature of bash -- it looks all the binaries available in $PATH and tries to complete their names.

Now let's see the vzctl completion:
# vzctl cr<TAB>
completes to
# vzctl create
and then after yet another <TAB> it suggests a CT ID which is the MAX+1 (i.e. if you have containers 101, 102 and 105 it will suggest 106):
# vzctl create 106
Now we want to specify an OS template:
# vzctl create 106 --os<TAB>
will get you to
# vzctl create 106 --ostemplate
and then you press <TAB> again twice to see the list of available OS templates:
# vzctl create 106 --ostemplate <TAB><TAB>
centos-5-x86 centos-5-x86-devel fedora-9-x86 suse-11.1-x86

Now you type in the first few characters of the OS template you want to use:
# vzctl create 106 --ostemplate f<TAB>
and it will complete that to
# vzctl create 106 --ostemplate fedora-9-x86
Now, unless you want to specify --config or some other parameters, just press Enter.

This completion is smart -- say, if you want to start a container, type in
# vzctl start <TAB><TAB>
and it will give you the list of container IDs that can be started (i.e. all the stopped containers).

And so on and so forth. Well, you say, it doesn't work! In that case you have to enable it, here's how.

On a RHEL, CentOS or Fedora system run yum install bash-completion and then relogin (i.e. log out and log in again). If your host system is Gentoo, run emerge bash-completion and then eselect bashcomp enable vzctl. I hope someone will comment on how to enable this for Debian/Ubuntu/SUSE or whatever your favorite distro is.
Tags: openvz, vzctl
Permanent Link4 comments | Leave a comment
new templates are almost here 19 May 2009 @ 06:31 pm
spacer
k001
I am preparing an updated set of precreated templates; those should be ready tonight or tomorrow, available from the usual place.

In addition to a bunch of updated templates, this time we add a few new ones:
- Fedora 10 (aka Cambridge)
- openSUSE 11.1
- Ubuntu 9.04 (aka The Jaunty Jackalope)

OpenSUSE is interesting -- apparently they dropped yum (which was available in 10.3 and 11.0 but not in 11.1) and now they have something called zypper. Also note that openSUSE lacks the code name. Apparently the SUSE guys are already aware of the issue and have a plan to fix it -- the next release (openSUSE 11.2) will be codenamed Fichte, after the German XIIX century philosopher. Subsequent openSUSE releases will also be named after famous philosophers -- Rousseau, Voltaire, Lessing (although I'm not sure which Lessing do they have in mind, probably Theodor). Interesting... maybe they got the naming idea from OpenVZ kernels. ;)

Also, during the next update (i.e. in about a month, not now) we are going to remove a few templates that are old and unsupported:
- Debian 3.1 "Sarge" (EOL 30 Mar 2008)
- Fedora 7 (EOL 13 Jul 2008)
- openSUSE 10.3 (EOL 19 Sep 2008)
- Fedora 8 (EOL 7 Jan 2009)
- Ubuntu 7.10 (EOL 18 Apr 2009)
Anybody who's using those distros inside containers should updated to something more (r|d)ecent and supported. You have been warned.

PS For people who use our stable kernels (i.e. RHEL5 branch) -- please note that you have to update to the latest kernel (028stab062.3 at the moment) in order to use Fedora 10 in containers. This is due to a few new system calls recently added to the Linux kernel which Fedora 10 userland expect to have in the kernel. Those syscalls were just backported to our RHEL5 branch by the OpenVZ team.
Tags: kernel, openvz, templates
Permanent Link14 comments | Leave a comment
plone vs. mediawiki 02 April 2009 @ 12:33 pm
spacer
k001
I promised to write more non-OpenVZ specific stuff. Here we go.

About 3 years ago I wrote about my experiences with Plone and Mediawiki. I just reread it this morning because someone left a comment there and it went into my email.

So I briefly visited plone.org to see what are they up to. Insteresting, they fixed some of what I was moaning about in that old post (the part about Joe the user). Apparently Plone 3 has wiki syntax support, versioning and history, and I guess a bunch of other cool features.

I'm not sure if it is any faster now, and whether it's easier to tweak and modify. I hope it is.

But oh no, I don't have enough courage to try it. Although Mediawiki lacks a few features of "the proper CMS" like Plone which I miss, although I prefer Python to PHP, I am still pretty happy using Mediawiki for openvz.org. So I let well enough alone.
Tags: mediawiki, open source, plone
Permanent LinkLeave a comment
Fear no KLOC 25 March 2009 @ 04:18 pm
spacer
k001
From time to time, somebody critisizes OpenVZ kernel patch for its intrusiveness and size. Right, it is big and intrusive -- it adds a whole lot of new features into the kernel. But how big is it?

spacer Our engineer prepared some stats on three different kernels:
1. OpenVZ stable kernel (based on 2.6.18-RHEL5);
2. OpenVZ development kernel (based on 2.6.27);
3. RHEL5.3 kernel (based on 2.6.18).
You can see the results by clicking the image at the right.

Some notes for the graph. For OpenVZ kernels, we distinguish between core kernel changes and the stuff that is built as modules. For RHEL kernel, we break the patchset down into a few categories, such as drivers, Xen, GFS, ext4 and so on; "other" means everything not covered by any other category. The numbers are thousands lines of code added and deleted, combined. A table below the graph has some more details, like how many files were changed, how many lines added and deleted.

Now to the conclusions. Two major points can be made:
1. Even without drivers, RHEL5 kernel patches add/delete 434 KLOCs*, which is 8.5x times bigger then OpenVZ kernel modifications (51 KLOC). So, yes, OpenVZ patch set is big, but not that big.
2. OpenVZ based on mainstream 2.6.27 kernel requires 40% less** modifications to the kernel due to on-going effort to integrate the functionality into mainstream.

* KLOC is a thousand lines of source code.
** we only count the core changes, omitting the modules.
Tags: kernel, openvz, red hat, rhel, statistics
Permanent Link3 comments | Leave a comment
live from SCALE7x 22 February 2009 @ 05:26 pm
spacer
k001
Greetings from SCALE7x! Today will be the second (and the last) day of the show. Yesterday I did a presentation titled "Recent Advances in the Linux Kernel resource management". The scope of the talk is much more technical and narrow than my usual talk about containers. More to say, I was focusing more on mainstream Linux kernel (i.e. cgroups and memory controller) than on OpenVZ kernel (i.e. user beancounters).

I think the talk was well received and I had about 10 different interesting questions, one is puzzling enough so I was not able to provide a good answer. This is definitely a sign of a good audience.

If anyone is interested in slides from my presentation, they are available: OpenOffice ODP (276K), PDF (409K), PPT (437K).
Tags: conference, expo, los angeles, openvz, scale7x
Permanent Link5 comments | Leave a comment
if (time() == 1234567890) celebrate(); 14 February 2009 @ 01:35 am
spacer
k001
Disclaimer:This post is not really related to OpenVZ, but who cares? I don't... :) So from now on I will be writing more here, on just about everything.

In UNIX systems, system time is accounted as a number of seconds since so-called "UNIX epoch" -- 1 January 1970 00:00:00 UTC. This number of seconds is returned by system call time(), plus there are library routines to convert it to more human-appealing formats.

You can guess the number is pretty big nowdays, incrementing every second. In fact, it's already over a million seconds, and in about 1 hour it will be equal to 1234567890. For some people this is a good enough reason to have a beer or two in a good company. Check www.1234567890day.com/ for 1234567890 parties around the globe. As for myself, I will just watch the number growing. Some kind of a meditation, similar to staring at an open fire, or flowing water, or people at work... I can do that for hours! Just kidding...

On Linux, you can see the current time() using date +%s command. Enjoy.
Tags: fun, time, unix
Permanent LinkLeave a comment
Getting ready for SCALE7x 12 February 2009 @ 07:03 pm
spacer
k001
In about a week I will be in Los Angeles for the annual Southern California Linux Expo, a.k.a. SCALE. It is quite a big event. Well, not quite as big as LinuxWorld or Linux Symposium, but still big enough and growing bigger each year. I'd like to say this conference is of good spirit, whatever that means.

Like the last year, we were granted a booth in the dot-org area (#63), plus I will be giving a talk titled "Recent advances in the Linux resource management", talking about cgroups, memory controller and stuff. Because of the booth I am not coming along -- Lesya Novaselskaya will hostess the booth. Lesya is working for Parallels as a Quality Assurance engineer, her job is to test various software including OpenVZ in order to make it bullet-proof and rock solid.

spacer We still have lots of things to do to be fully prepared for the event. I have already created a brand new OpenVZ t-shirt design codenamed "kernel classics" which you can see on the right (also, here is the back design in hi-res). It plays around the fact that we name our 2.6.26- and 2.6.27-based kernels after famous Russian writers and painters, respectively. If you will be at the conference and tell us your OpenVZ story, you get your t-shirt. If you are not going to visit SCALE but eager to get such a t-shirt (not the same since I'm ordering from a different place, but with the very same graphics) you can buy it from cafepress (previous "container lifecycle" t-shirt is also available).

I hope I will also prepare the new DVD images containing a live CD OpenVZ distro which could be used to get a feeling of what OpenVZ is without installing it, plus all the latest kernels, tools and templates.
Tags: california, conference, expo, los angeles, openvz, scale
Permanent Link1 comment | Leave a comment
'dab' Debian/Ubuntu Appliance Builder released! 20 January 2009 @ 09:56 am
spacer
xomxorp
We just published our Debian/Ubuntu appliance builder for OpenVZ (of course perfectly usable on Proxmox VE).

Short description

Creating high quality appliances is a difficult task and requires deep knowledge of the underlying operating system. So we created the 'Debian Appliance Builder' to simplify that task. 'dab' is a script to automate the creation of OpenVZ appliances. It is basically a rewrite of debootstrap in perl, but uses OpenVZ instead of chroot and generates OpenVZ templates. Another difference is that it supports multi-stage building of templates. That way you can execute arbitrary scripts between package installation steps to accomplish what you want.

Furthermore, some common tasks are fully automated - like setting up a database server (mysql or postgres). To accomplish minimal template creation time, packages are cached to a local directory, so you do not need a local Debian/Ubuntu mirror (although this would speed up the first run). All generated templates includes an appliance description file. Those can be used to build appliance repositories.

Virtual appliances are a well known and quite successful way to demonstrate and run server software. But till now, no high quality appliance builder for OpenVZ was available.

Anybody is talking about the economic and financial crisis – a good chance to bring powerful open source software to the enterprise customer – start now using OpenVZ for virtual appliances!

All details:
pve.proxmox.com/wiki/Debian_Appliance_Builder

Best Regards,

Martin Maurer

martin@proxmox.com
www.proxmox.com
____________________________________________________________________
Proxmox Server Solutions GmbH
Kohlgasse 51/10, 1050 Vienna, Austria


Tags: openvz
Permanent Link4 comments | Leave a comment
2.6.27 kernel and Russian painters 19 January 2009 @ 06:18 pm
spacer
k001
A new 2.6.27-based OpenVZ branch is opened, and the first 2.6.27-based OpenVZ is released.

The idea of using names instead of numbers for kernel releases is working for 2.6.26, and we decided to have some fun with 2.6.27 kernels, too. These kernels are [to be] named after famous Russian painters, of course in the alphabetical order.

First 2.6.27 OpenVZ kernel is named after Ivan Konstantinovich Aivazovsky. Aivazovsky is a great painter and I'd love to add a link to some of his masterpieces here, but while trying to find a good reproduction of "The Ninth Wave" I realized that a typical notebook/PC is incapable of displaying such art. Then you try to fit a 2x3 meters painting into a 22" computer screen, nothing good is to be expected. Even in case of high resolution copy stored in a lossless format you either see a full picture but details are lost, or you see some part of it with all the details but then you don't see the full picture. So be aware that a painting that you see online is a pathetic shadow of what you can enjoy in a real (i.e. offline) museum or art gallery.

The 2.6.27-aivazovsky kernel, on the other side, is perfect for you PC, so enjoy.
Tags: 2.6.27, kernel, openvz
Permanent Link3 comments | Leave a comment
New year, new stuff 09 January 2009 @ 08:17 pm
spacer
k001
Consider this as a new year gifts from Father Frost, or Dad Moroz, or Santa Clous, or me, if you so prefer.

First gift is a new fresh set of precreated templates, which spent quite some time in beta before. Those are the same templates, but updated couple of days ago, plus there is Ubuntu-8.10 added. I hope I will update those monthly or so, since now I have some automation in place. A 'date' column was added to list of template files on wiki so you can easily see how old are those.

Second one is new shiny SSL certificates for https://wiki.openvz.org/ and https://bugzilla.openvz.org/. I call it shiny because they are neither self-signed nor bough from a commercial certificate authority. As you can see they are CAcert.org certificates. CAcert is an organisation which is building so-called web of trust, and acts as a certificate authority for its members. If you need free certificates, you are welcome to join. And, if you decide to trust CAcert as a certificate authority and your browser isn't configured for it yet, you have to import their root certificate.

Finally, a new 2.6.24 kernel is coming out later today. Others will follow. Update: here it is, 2.6.24-ovz007.1.
Tags: admin, cacert, openvz
Permanent Link5 comments |