Tag Info

Hot answers tagged

15

HA! I finally found the problem myself. It's more related to programming than server admin, but I decided to put the answer here anyway because by searching google I found I'm not the only one with that kind of problem (and since Apache hangs, the first guess is that there's a problem with the server). The issue is not with Apache, but with my Wordpress. ...


9

They are pretty dramatically different technologies. Xen provides full virtualization and varying degrees of paravirtualization. OpenVZ, on the other hand uses a container model, without any hardware or system virtualization. OpenVZ is more efficient, from a memory usage perspective, than Xen, because the host kernel is shared across all guests. Xen ...


9

If you use mod_wsgi daemon mode, it doesn't matter which Apache MPM you use, although suggested that for UNIX systems worker MPM be used unless you are stuck with having to also host PHP applications using mod_php as some PHP extensions aren't thread safe. The suggestion that you have to have worker MPM in order to use mod_wsgi daemon mode is wrong. What is ...


9

If you vz is number 101, than use the following to set it two 2 CPUs (change the number accordingly): vzctl set 101 --cpus 2 --save No restart of the VE required. The --save makes it so when the VE is rebooted, the changes will still be there. vzctl --help for other resources that can be set.


7

Due to the update of vzctl from 4.6 to 4.7 they changed the setting of nf_conntrack to be disabled by default. (https://openvz.org/Download/vzctl/4.7/changes) Corresponding commit message: ... Disable conntrack for VE0 by default IP conntrack functionality has some negative impact on venet performance (uo to about 10%), so they better be ...


6

Swapfiles are only supported on some openvz setups, and disabled on purpose by some admins so you cant use up much more resources than you've been alocated. You probably need to upgrade your vps.


6

simfs is not an actual filesystem; it's a map to a directory on the host (by default /vz/private/<veid>). To check the filesystem, you have to check the host filesystem from the host, which also means you have to bring down every container on the host. If you believe it's necessary to check the filesystem, schedule a maintenance period and notify all ...


6

You want to install grub. Without it, how are you going to boot Ubuntu after the upgrade? You shouldn't treat a virtual server any differently than a physical one, both need a bootloader to bootstrap the OS at boot.


6

One major difference between Xen and OpenVZ is that with Xen, there is no overselling. When you get a Xen VPS with 512M RAM, you get 512M RAM. With OpenVZ it's all kinda smoke and mirror. The host might claim "Guaranteed RAM: 512M" and "Burstable RAM: 1G" but in reality there's no way to guarantee anything with OpenVZ. Depending on what other VPS ...


6

That is definitely the error you get when APC runs out of memory. When I (re)build servers, I often forget to increase this value to 128 M (suitable for my application) and that is the exact error you see.


6

OpenVZ is great at letting you share directories without the need for Samba or NFS overhead. To see how it works do a bind mount to root (not private) when the container is running: mount --bind /vz/private/109/common-stuff /vz/root/108/common-stuff To make the share persistent over container reboots: Put Script A into /etc/vz/conf/108.mount Run chmod ...


5

The best-practice is to use whatever kernel that comes with your distribution-channels. But if you're compiling your own, you certainly can use the old .config file for the basis of your new config. The tricky part is all the added modules between 2.6.27 and 2.6.32. The way I see it you have two options Option 1: Do all the research What's new in each ...


5

To the best knowledge at the time of this writing there were still critical issues with /proc filtering. They ought to be addressed in Linux Kernel 3.6 or later. Since I'm facing the same problem as you I've done some investigation and I'm not yet convinced that LXC is an alternative to Linux VServer. If you decide not to switch to LXC have a look at the ...


5

OpenVZ isn't really virtualization. It's containerization. So each container sees the system that it's on as it's own. To control how much cpu time each VE can get you have to assign each VE cpucredits. This page goes into how set the limits on each VE. Edit: Just found this in the vzctl man page. --cpulimit num[%] Limit of CPU usage for the VE, in per ...


4

I'm using OpenVZ on my servers (I used to run Xen before). It's not real virtualization like Xen or KVM. OpenVZ is runing multiple isolated instances (containers). It's much easier to maintain, and performance overhead is near zero. If you want to use OpenVZ and Ubuntu, use 8.04 LTS because there is official OpenVZ kernel image.


4

You could try to work around directly calling on /dev/simfs with a timed dd command: time (dd if=/dev/zero of=/tmp/test bs=64k count=16k > /dev/null; sync) Probably not as accurate as a true benchmark, though. Just a workaround. Example output: 16384+0 records in 16384+0 records out 1073741824 bytes (1.1 GB) copied, 6.13276 seconds, 175 MB/s real ...


4

I am a fan of OpenVZ. I am also a Proxmox user. OpenVZ is "just" a hardened chroot (with fine grained control and networking). The kernel is the same in the "containers" and on the host itself. OpenVZ is lightweigth because of its design. It works perfectly fine as long as you need linux guests only. If your hardware supports hw virtualization you can use ...


4

Ok, I just found out the directory was marked as "immutable" as can be checked with lsattr. After doing a chattr -i /root everything works now as expected :)


4

Basically, there is no such thing as "Debian" virtualization. There is a Linux Kernel hypervisor called KVM. A number of projects have arisen around it, one of them which is a rather well supported "install & run" package is Proxmox VE - it includes web-based management and even has support for the more sophisticated features like live migration of ...


4

You only actually need MASQUERADE if your global IPv4 address changes frequently (such as on ADSL) otherwise, SNAT is generally preferable. Instead of the MASQUERADE rule, use SNAT like so: iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to-source 1.2.3.4 replace 1.2.3.4 with the actual public IP of the VM... also, I would expect eth0 to ...


4

I prefer nginx over lighttpd for following reasons: Easier and more sane config format. More and better documented modules It is actively maintained and developed. Last major release was 2 years ago. Only pros of lighttpd over nginx 1. Talking to backends via HTTP/1.1 2. Automatic spawning of FastCGI backends


4

Some parts OpenVZ were merged into the official kernel but not enough to run OpenVZ. So you do need a separately patched kernel. The best way to install an OpenVZ is through a package manager. On CentOS / RedHat variants you probably will need to add some external repositories. On Debian stable (6.0) the OpenVZ kernel image is in the official repository and ...


4

You really need to get more details from your hosting provider about how the spams were sent. A list of the services running on your machine would be helpful too. A few possibilities: You might be running an SMTP server without knowing it. To deactivate it, uninstall whatever package is acting as an SMTP server (popular options are postfix, exim, ...


4

Use veth. In VE: /sbin/ip -6 addr add IPv6_ADDR/112 dev eth0


4

http://wiki.openvz.org/User_Guide/Operations_on_Containers#Starting.2C_Stopping.2C_Restarting.2C_and_Querying_Status_of_Container in case of a Container that is known to be corrupt, you may use the --fast switch: # vzctl stop 101 --fast Stopping container ... Container was stopped Container is unmounted Make sure that you do not use the --fast ...


4

Look at /proc/user_beancounters, more specifically, at the failcnt column. For all the non-zero entries, you'll need to increase the barrier/limit accordingly, it's probably just OpenVZ killing your processes for hitting them. Here is a description of each column: http://wiki.openvz.org/Proc/user_beancounters For accountable parameters, the field held ...


4

May I ask what the hell for? Check: http://kb.simplywebhosting.com/idx/6/067/article/ The "Unit" has no specific meaning but defines priority. So, one 10, another 20 means the second gets - when CPU is the limit - twice as much power than the first. Over 500k in granularity sounds - non,sensible.


3

In the node definition, you are not using the class virt, but the custom type virt. You'll find it in modulename/lib/puppet/type. It needs a provider, (modulename/lib/puppet/provider) but cannot find one suitable for your system. To include the class virt, you could use one of the following: include virt or class ( 'virt': } The reason it's not ...


3

man openvpn: --local host Local host name or IP address for bind. If specified, OpenVPN will bind to this address only. If unspecified, OpenVPN will bind to all interfaces. So, if you do not specify any "local" directive, openvpn server will listen on all interfaces. You can check this with netstat -nlp. You should see something like: udp ...



Only top voted, non community-wiki answers of a minimum length are eligible