debian.systs.org - a private debian repository of Thorsten Schifferdecker

New release is out, ovz005.1, uploaded to lenny repository at debian.systs.org

OpenVZ project has released an updated 2.6.24 based kernel.
Read below for more information. Everybody who is using
this kernel branch is advised to upgrade.

Changes
=======
* rebase to 2.6.24.7 kernel to accomodate influx of CVE fixes
* fix for checkpointing and restore of processes which done shmat(2)
* epoll(2) fix in CPT to checkpoint some Fedora template
* fix crash when /vz is on NFS export
* restore plethora of /proc/net/* files inside VE which userspace
utilities relies on.
* fix long standing dcache accounting misinteraction with SLUB
* fix occasional oopses when reading /proc/net/{udp,tcp}
* fix minor lockdep warnings

For the complete list of changes in this release, see
http://git.openvz.org/?p=linux-2.6.24-openvz;a=log;h=v2.6.24-ovz005

NOTE that this is development kernel branch.

Compatibility
=============
* No new issues

Security updates for Debian precreated etch and lenny vzctl os templates:

amd64 :

vzctl-ostmpl-debian-4.0-amd64-minimal
vzctl-ostmpl-debian-4.0-i386-minimal
vzctl-ostmpl-debian-5.0-amd64-minimal
vzctl-ostmpl-debian-5.0-i386-minimal

i386:

vzctl-ostmpl-debian-4.0-i386-minimal
vzctl-ostmpl-debian-5.0-i386-minimal

The precreated vzctl-os-templates can be found on http://forzza.systs.org/ostemplates/ , too.

The old vzctl os templates are removed!

[SECURITY] Fix an SMP race to prevent reordering of flock updates
and accesses to the descriptor table on close().
See CVE-2008-1669

updated kernel images:

etch :

fzakernel-2.6.18-486
fzakernel-2.6.18-686
fzakernel-2.6.18-686-bigmem
fzakernel-2.6.18-amd64

lenny :

fzakernel-2.6.24-486
fzakernel-2.6.24-686
fzakernel-2.6.24-686-bigmem
fzakernel-2.6.24-amd64

security update of linux-patch-openvz, uploaded to debian lenny repository at debian.systs.org:

Merge git.openvz.org tree, included the patch for fix SMP ordering hole in fcntl_setlk() (CVE-2008-1669)

New Kernels uploaded to “lenny” repository at debian.systs.org :

fzakernel-2.6.24-686
fzakernel-2.6.24-686-bigmem

ovzkernel-2.6.24-686

SRC and Package uploaded to “lenny” debian repository at debian.systs.org.

Now include the linux-patch-openvz in my Debian lenny repository at debian.systs.org;

I’ve used the git repostitory from Alexander GQ Gerasiov <gq@cs.msu.su> at git.gq.net.ru .
and build for Debian linux-source-2.6.24-6, and last commit at git.openvz.org.

Add Lenny to you apt sources.list

# echo “deb http://debian.systs.org/debian lenny openvz” >> /etc/apt/sources.list

The Debian precompiled OpenVZ kernel images are now in build queues.

I’ve taken the new 2.6.24 OpenVZ out of the git repository , i386 kernel config from openvz.org and built a kernel package:

1st experience:

* chkpnt / restore works
* add/del IPv4 works, IPv6 not
* some kernel errors are pointing out, but the OpenVZ function works (at the moment)

For testing only, a debian gpg-signed repository is online: de (gpg-key)

http://debian.systs.org/debian gitty openvz

Debian Signing Key is outdated, please fetch the new one :
# wget http://debian.systs.org/dso_archiv_signing_key.asc

or at mirror at download.openvz.org
# wget http://download.openvz.org/debian-systs/dso_archiv_signing_key.asc

Import gpg as root:
# apt-key add dso_archiv_signing_key.asc

Thanks.

uploaded to openvz Repository at debian.systs.org :

flavour “ovz”:
“”””””””””””””
ovzkernel-2.6.18
ovzkernel-2.6.18-smp
ovzkernel-2.6.18-enterprise

flavour “fza”:
“””””””””””””
fzakernel-2.6.18-486
fzakernel-2.6.18-686
fzakernel-2.6.18-686-bigmem
fzakernel-2.6.18-amd64

Please give some feedback, if someting goes right or wrong ?!