<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#ffffff">
Hi,<br>
<br>
With a friend, we installed lxc on his server.<br>
We spend 1 hour on the kernel config because we didn't knew :<br>
- that lxc-checkconfig is a bash script and it can check a config
before running it<br>
- which kernel config item whas not good<br>
- that CONFIG_SECURITY_FILE_CAPABILITIES is obsolete since 2.6.33<br>
<br>
So, here is a patch for lxc-checkconfig that could save time for lxc
newbies<br>
<tt><br>
--- /usr/sbin/lxc-checkconfig 2010-03-12 14:35:38.000000000 +0100<br>
+++ /usr/local/bin/lxc-checkconfig 2010-03-14 07:46:53.940193560
+0100<br>
@@ -19,8 +19,10 @@<br>
else<br>
if [ ! -z "$mandatory" -a "$mandatory" = yes ]; then<br>
$SETCOLOR_FAILURE && echo -e "disabled" &&
$SETCOLOR_NORMAL<br>
+ echo -e "\tmissing conf: $1"<br>
else<br>
$SETCOLOR_WARNING && echo -e "disabled" &&
$SETCOLOR_NORMAL<br>
+ echo -e "\tmissing conf: $1"<br>
fi<br>
fi<br>
}<br>
@@ -35,6 +37,7 @@<br>
GREP=grep<br>
if [ ! -f $CONFIG ]; then<br>
echo<br>
+ echo "$CONFIG not found"<br>
echo "The kernel configuration can not be retrieved"<br>
echo "Please recompile with IKCONFIG_PROC or install the
kernel headers"<br>
echo<br>
@@ -66,4 +69,8 @@<br>
echo -n "Veth pair device: " && is_enabled CONFIG_VETH<br>
echo -n "Macvlan: " && is_enabled CONFIG_MACVLAN<br>
echo -n "Vlan: " && is_enabled CONFIG_VLAN_8021Q<br>
-echo -n "File capabilities: " && is_enabled
CONFIG_SECURITY_FILE_CAPABILITIES<br>
+KVER_MINOR=$($GREP '^# Linux kernel version:' $CONFIG | sed -r
's/.*2.6.([0-9]{2}).*/\1/')<br>
+[[ ${KVER_MINOR} < 33 ]] && echo -n "File capabilities: "
&& is_enabled CONFIG_SECURITY_FILE_CAPABILITIES<br>
+echo<br>
+echo "Note : Before using a new kernel config, you could check it"<br>
+echo "usage : CONFIG=/path/to/config $0"</tt><font face="Arial"><br>
<br>
Regards,<br>
<br>
Guillaume ZITTA<br>
</font>
</body>
</html>