Shlrm.org Blag » fedora

Fedora, old MaraDNS, and IPv6 == FAIL

David Kowis — Sat, 05 Mar 2011 18:16:46 +0000

Given the “end of IPv4″ I decided I shouldset up IPv6 on my network and see if I can’t start doing things over that instead. Unfortunately, however, it appears that my DNS server internal to my network, maradns, sucks at IPv6 until version 2.0. Fedora has it at 1.3.something. Debian has it at 1.4. WTF Fedora?

I’ve been working on building MaraDNS 2.0 RPMs for Fedora 13 and 14, but I don’t know the RPM SPEC structure very well. The 2.0 version of MaraDNS has separated the authoritative resolver from the recursive resolver, which is wise. But it means I need to build a spec file that produces two RPMs. I suppose I could build a separate spec file for each one, but that doesn’t seem like the right way to do things.

Userspace cgroups in Fedora 14

David Kowis — Mon, 22 Nov 2010 00:08:35 +0000

There was a lot of buzz on the interblags about a 200-line kernel patch that enables per-tty cgroups automatically. Apparently, one can add them trivially to their home directory without having to patch any kernels.

This blog post talks about how to do it, but it didn’t cooperate with Fedora 14 very well. A bit of googleing later and I found this mailing list post that did it for me. Now I have userspace cgroups for each terminal I open. Handy, I suppose. Might be more useful on an SSH server to guarantee that each person logging in can’t overwhelm the system for the others.

Fedora 14 and Intel Gigabit Adaptors

David Kowis — Sun, 21 Nov 2010 22:39:54 +0000

To be fair, it’s not Fedora 14 that’s at fault. The 2.6.35 kernel has a regression in the e1000e driver for some Ethernet adaptors.

It was quite tricky to figure out, especially right after 14 came out, as I didn’t have an ethernet connection, and when I was able to get the connection up, and I asked on the IRC channel, no one had any insight. I let 14 stew a while, and the rest of the internet came up with similar problems. Turns out that the kernel driver included in 2.6.35 has issues. There’s some patches in the works, but I don’t know if they’ll get pulled down into 2.6.35. The fix is in 2.6.36.

Until then, you can get the latest driver directly from the e1000e’s SourceForge website here. Make, then make install it as root and you’ll be good to go. This driver version worked for me on a Intel Corporation 82566DC Gigabit Network Connection (rev 02).

Attempted haxx0ring by a botnet

David Kowis — Wed, 03 Nov 2010 19:55:25 +0000

Hooray for Logwatch.

It appears that someone['s botnet] was trying to hack my little server yesterday. I have a good portion of attempted logins as root from a slew of hosts. 194 separate hosts with multiple attempts from more than a few. This might explain the horrible internet connectivity problems I was having the other day.

Not really sure what I did to piss off some script kiddie. Perhaps I got someone’s attention? I haven’t blagged about anything controversial recently. Not even in politics. I did submit my resume to Monster.com, perhaps someone is determining if they can hire me as a Systems Administrator?

Logwatch entries follow after the break.

These are the relevant entries from the logwatch email I received today. I’ve sanitized them just a smidge.

Pam_unix’s logwatch section

sshd’s logwatch section

--------------------- pam_unix Begin ------------------------

 dovecot:
    Authentication Failures:
       : 139 Time(s)
    Unknown Entries:
       session closed for user : 139 Time(s)
       session opened for user  by (uid=0): 139 Time(s)

 sshd:
    Authentication Failures:
       root (189.22.10.3): 6 Time(s)
       root (189.8.88.10): 4 Time(s)
       root (222.173.107.103): 4 Time(s)
       root (112.215.7.123): 3 Time(s)
       root (122.116.133.14): 3 Time(s)
       root (190.68.61.66): 3 Time(s)
       root (212.116.138.149): 3 Time(s)
       root (220.232.206.71): 3 Time(s)
       root (91.142.242.165): 3 Time(s)
        (): 2 Time(s)
       root (119.62.128.110): 2 Time(s)
       root (12.234.198.58): 2 Time(s)
       root (122.117.211.109): 2 Time(s)
       root (130.231.15.12): 2 Time(s)
       root (133.42.149.193): 2 Time(s)
       root (189.2.187.4): 2 Time(s)
       root (189.20.205.210): 2 Time(s)
       root (189.210.153.50): 2 Time(s)
       root (190.1.171.108): 2 Time(s)
       root (190.248.8.19): 2 Time(s)
       root (190.253.223.162): 2 Time(s)
       root (190.29.2.204): 2 Time(s)
       root (190.68.117.18): 2 Time(s)
       root (190.68.117.82): 2 Time(s)
       root (194.2.25.13): 2 Time(s)
       root (195.78.46.99): 2 Time(s)
       root (195.81.144.28): 2 Time(s)
       root (200.105.228.202): 2 Time(s)
       root (200.111.111.51): 2 Time(s)
       root (200.187.60.60): 2 Time(s)
       root (200.242.100.30): 2 Time(s)
       root (200.248.10.200): 2 Time(s)
       root (201.238.197.3): 2 Time(s)
       root (202.53.225.162): 2 Time(s)
       root (212.224.142.100): 2 Time(s)
       root (212.92.23.139): 2 Time(s)
       root (213.129.249.99): 2 Time(s)
       root (213.23.211.11): 2 Time(s)
       root (218.241.156.219): 2 Time(s)
       root (219.117.236.219): 2 Time(s)
       root (222.107.61.161): 2 Time(s)
       root (41.204.194.154): 2 Time(s)
       root (58.246.85.122): 2 Time(s)
       root (59.106.27.49): 2 Time(s)
       root (62.97.49.6): 2 Time(s)
       root (64.182.136.46): 2 Time(s)
       root (70.247.71.201): 2 Time(s)
       root (74.55.60.90): 2 Time(s)
       root (75.125.235.162): 2 Time(s)
       root (81.221.15.140): 2 Time(s)
       root (82.119.240.3): 2 Time(s)
       root (85.22.60.6): 2 Time(s)
       root (85.24.138.173): 2 Time(s)
       root (87.86.55.4): 2 Time(s)
       root (89.250.247.28): 2 Time(s)
       root (91.144.170.50): 2 Time(s)
       root (93.104.243.162): 2 Time(s)
       root (93.152.158.141): 2 Time(s)
       root (93.157.210.254): 2 Time(s)
       root (93.93.191.186): 2 Time(s)
       root (115.186.131.106): 1 Time(s)
       root (122.115.35.242): 1 Time(s)
       root (122.221.65.18): 1 Time(s)
       root (123.231.21.19): 1 Time(s)
       root (124.92.251.2): 1 Time(s)
       root (125.255.49.179): 1 Time(s)
       root (140.115.155.221): 1 Time(s)
       root (146.134.30.157): 1 Time(s)
       root (146.83.216.201): 1 Time(s)
       root (147.83.52.103): 1 Time(s)
       root (161.132.77.16): 1 Time(s)
       root (163.19.1.92): 1 Time(s)
       root (163.247.46.150): 1 Time(s)
       root (174.143.234.81): 1 Time(s)
       root (180.168.5.184): 1 Time(s)
       root (189.112.139.83): 1 Time(s)
       root (189.114.56.253): 1 Time(s)
       root (189.47.135.118): 1 Time(s)
       root (189.47.206.203): 1 Time(s)
       root (190.128.29.4): 1 Time(s)
       root (190.144.1.98): 1 Time(s)
       root (190.144.103.146): 1 Time(s)
       root (190.152.145.54): 1 Time(s)
       root (190.165.136.11): 1 Time(s)
       root (190.182.3.143): 1 Time(s)
       root (190.2.3.85): 1 Time(s)
       root (190.254.197.10): 1 Time(s)
       root (190.255.182.106): 1 Time(s)
       root (194.94.121.238): 1 Time(s)
       root (195.162.22.59): 1 Time(s)
       root (195.24.37.122): 1 Time(s)
       root (196.0.5.114): 1 Time(s)
       root (196.10.224.108): 1 Time(s)
       root (196.12.232.100): 1 Time(s)
       root (196.20.71.66): 1 Time(s)
       root (196.201.230.18): 1 Time(s)
       root (196.43.83.170): 1 Time(s)
       root (200.101.12.86): 1 Time(s)
       root (200.123.4.25): 1 Time(s)
       root (200.160.121.246): 1 Time(s)
       root (200.175.79.150): 1 Time(s)
       root (200.182.126.166): 1 Time(s)
       root (200.25.180.75): 1 Time(s)
       root (200.79.53.211): 1 Time(s)
       root (201.155.88.252): 1 Time(s)
       root (201.21.49.185): 1 Time(s)
       root (201.227.239.11): 1 Time(s)
       root (201.238.211.133): 1 Time(s)
       root (201.41.215.154): 1 Time(s)
       root (202.120.46.2): 1 Time(s)
       root (202.147.244.165): 1 Time(s)
       root (202.171.148.106): 1 Time(s)
       root (202.177.24.199): 1 Time(s)
       root (202.39.49.109): 1 Time(s)
       root (202.53.250.42): 1 Time(s)
       root (202.71.140.165): 1 Time(s)
       root (203.110.245.243): 1 Time(s)
       root (203.122.225.226): 1 Time(s)
       root (203.183.81.155): 1 Time(s)
       root (203.58.188.17): 1 Time(s)
       root (203.72.59.6): 1 Time(s)
       root (204.38.191.170): 1 Time(s)
       root (208.115.111.200): 1 Time(s)
       root (208.179.176.66): 1 Time(s)
       root (209.203.18.122): 1 Time(s)
       root (209.88.156.132): 1 Time(s)
       root (210.196.168.137): 1 Time(s)
       root (210.51.57.139): 1 Time(s)
       root (211.234.100.205): 1 Time(s)
       root (211.239.172.188): 1 Time(s)
       root (211.9.48.203): 1 Time(s)
       root (212.155.135.204): 1 Time(s)
       root (212.92.23.24): 1 Time(s)
       root (213.215.10.116): 1 Time(s)
       root (213.215.247.194): 1 Time(s)
       root (213.235.133.209): 1 Time(s)
       root (213.97.211.74): 1 Time(s)
       root (217.119.231.143): 1 Time(s)
       root (217.15.197.136): 1 Time(s)
       root (217.159.148.62): 1 Time(s)
       root (217.166.213.218): 1 Time(s)
       root (217.220.124.90): 1 Time(s)
       root (217.8.80.9): 1 Time(s)
       root (219.234.81.209): 1 Time(s)
       root (219.94.144.73): 1 Time(s)
       root (24.75.21.4): 1 Time(s)
       root (38.112.30.222): 1 Time(s)
       root (58.215.75.55): 1 Time(s)
       root (58.221.249.66): 1 Time(s)
       root (59.124.223.238): 1 Time(s)
       root (59.124.78.179): 1 Time(s)
       root (61.31.200.49): 1 Time(s)
       root (62.129.164.36): 1 Time(s)
       root (62.94.161.156): 1 Time(s)
       root (64.117.46.243): 1 Time(s)
       root (64.164.215.91): 1 Time(s)
       root (64.185.113.237): 1 Time(s)
       root (65.111.177.12): 1 Time(s)
       root (65.111.177.212): 1 Time(s)
       root (65.70.247.20): 1 Time(s)
       root (66.115.174.80): 1 Time(s)
       root (66.240.254.216): 1 Time(s)
       root (67.222.236.19): 1 Time(s)
       root (69.159.244.44): 1 Time(s)
       root (72.51.43.242): 1 Time(s)
       root (72.54.128.19): 1 Time(s)
       root (72.90.111.10): 1 Time(s)
       root (74.189.117.98): 1 Time(s)
       root (74.80.48.25): 1 Time(s)
       root (75.125.69.82): 1 Time(s)
       root (75.160.204.13): 1 Time(s)
       root (79.170.186.119): 1 Time(s)
       root (79.38.79.53): 1 Time(s)
       root (80.26.69.233): 1 Time(s)
       root (81.168.103.177): 1 Time(s)
       root (81.18.250.224): 1 Time(s)
       root (81.255.107.145): 1 Time(s)
       root (82.145.241.5): 1 Time(s)
       root (82.187.183.124): 1 Time(s)
       root (83.238.170.128): 1 Time(s)
       root (84.19.182.97): 1 Time(s)
       root (84.40.53.32): 1 Time(s)
       root (85.145.196.239): 1 Time(s)
       root (85.214.25.226): 1 Time(s)
       root (87.244.204.196): 1 Time(s)
       root (87.63.208.238): 1 Time(s)
       root (88.40.179.242): 1 Time(s)
       root (89.251.106.242): 1 Time(s)
       root (89.39.28.239): 1 Time(s)
       root (93.82.242.114): 1 Time(s)
       root (94.127.136.74): 1 Time(s)
       root (94.83.231.154): 1 Time(s)

 ---------------------- pam_unix End -------------------------

Here’s the section from sshd itself. It’s a bit more noisier than just reporting authentication failures.

 --------------------- SSHD Begin ------------------------

 Users logging in through sshd:
    :
        (raziel.shlrm.org): 2 times

 Refused incoming connections:
       110.8.75.19: 1 Time(s)
       165.Red-217-127-98.staticIP.rima-tde.net: 1 Time(s)
       190.144.1.98: 1 Time(s)
       221.232.155.6: 1 Time(s)
       222.237.78.139: 2 Time(s)
       60.191.47.54: 1 Time(s)
       60.195.250.54: 1 Time(s)
       74.203.204.99: 2 Time(s)
       78.97.93.150: 1 Time(s)
       ms.onpcs.com: 2 Time(s)
       nc-65-40-234-248.sta.embarqhsd.net: 1 Time(s)
       p23171-ipbffx02osakakita.osaka.ocn.ne.jp: 2 Time(s)
       sphinx.wbsconnect.com: 1 Time(s)

 Error in PAM authentication:
    User not known to the underlying authentication module for root from 112.215.7.123 : 3 Time(s)
    User not known to the underlying authentication module for root from 115.186.131.106 : 1 Time(s)
    User not known to the underlying authentication module for root from 119.62.128.110 : 2 Time(s)
    User not known to the underlying authentication module for root from 12.234.198.58 : 2 Time(s)
    User not known to the underlying authentication module for root from 122.115.35.242 : 1 Time(s)
    User not known to the underlying authentication module for root from 122.116.133.14 : 3 Time(s)
    User not known to the underlying authentication module for root from 122.117.211.109 : 2 Time(s)
    User not known to the underlying authentication module for root from 122.221.65.18 : 1 Time(s)
    User not known to the underlying authentication module for root from 123.231.21.19 : 1 Time(s)
    User not known to the underlying authentication module for root from 124.92.251.2 : 1 Time(s)
    User not known to the underlying authentication module for root from 125.255.49.179 : 1 Time(s)
    User not known to the underlying authentication module for root from 130.231.15.12 : 2 Time(s)
    User not known to the underlying authentication module for root from 133.42.149.193 : 2 Time(s)
    User not known to the underlying authentication module for root from 140.115.155.221 : 1 Time(s)
    User not known to the underlying authentication module for root from 146.134.30.157 : 1 Time(s)
    User not known to the underlying authentication module for root from 146.83.216.201 : 1 Time(s)
    User not known to the underlying authentication module for root from 147.83.52.103 : 1 Time(s)
    User not known to the underlying authentication module for root from 161.132.77.16 : 1 Time(s)
    User not known to the underlying authentication module for root from 163.19.1.92 : 1 Time(s)
    User not known to the underlying authentication module for root from 163.247.46.150 : 1 Time(s)
    User not known to the underlying authentication module for root from 174.143.234.81 : 1 Time(s)
    User not known to the underlying authentication module for root from 180.168.5.184 : 1 Time(s)
    User not known to the underlying authentication module for root from 189.112.139.83 : 1 Time(s)
    User not known to the underlying authentication module for root from 189.114.56.253 : 1 Time(s)
    User not known to the underlying authentication module for root from 189.2.187.4 : 2 Time(s)
    User not known to the underlying authentication module for root from 189.20.205.210 : 2 Time(s)
    User not known to the underlying authentication module for root from 189.210.153.50 : 2 Time(s)
    User not known to the underlying authentication module for root from 189.22.10.3 : 6 Time(s)
    User not known to the underlying authentication module for root from 189.47.135.118 : 1 Time(s)
    User not known to the underlying authentication module for root from 189.47.206.203 : 1 Time(s)
    User not known to the underlying authentication module for root from 189.8.88.10 : 4 Time(s)
    User not known to the underlying authentication module for root from 190.1.171.108 : 2 Time(s)
    User not known to the underlying authentication module for root from 190.128.29.4 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.144.1.98 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.144.103.146 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.152.145.54 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.165.136.11 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.182.3.143 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.2.3.85 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.248.8.19 : 2 Time(s)
    User not known to the underlying authentication module for root from 190.253.223.162 : 2 Time(s)
    User not known to the underlying authentication module for root from 190.254.197.10 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.255.182.106 : 1 Time(s)
    User not known to the underlying authentication module for root from 190.29.2.204 : 2 Time(s)
    User not known to the underlying authentication module for root from 190.68.117.18 : 2 Time(s)
    User not known to the underlying authentication module for root from 190.68.117.82 : 2 Time(s)
    User not known to the underlying authentication module for root from 190.68.61.66 : 3 Time(s)
    User not known to the underlying authentication module for root from 194.2.25.13 : 2 Time(s)
    User not known to the underlying authentication module for root from 194.94.121.238 : 1 Time(s)
    User not known to the underlying authentication module for root from 195.162.22.59 : 1 Time(s)
    User not known to the underlying authentication module for root from 195.24.37.122 : 1 Time(s)
    User not known to the underlying authentication module for root from 195.78.46.99 : 2 Time(s)
    User not known to the underlying authentication module for root from 195.81.144.28 : 2 Time(s)
    User not known to the underlying authentication module for root from 196.0.5.114 : 1 Time(s)
    User not known to the underlying authentication module for root from 196.10.224.108 : 1 Time(s)
    User not known to the underlying authentication module for root from 196.12.232.100 : 1 Time(s)
    User not known to the underlying authentication module for root from 196.20.71.66 : 1 Time(s)
    User not known to the underlying authentication module for root from 196.201.230.18 : 1 Time(s)
    User not known to the underlying authentication module for root from 196.43.83.170 : 1 Time(s)
    User not known to the underlying authentication module for root from 200.101.12.86 : 1 Time(s)
    User not known to the underlying authentication module for root from 200.105.228.202 : 2 Time(s)
    User not known to the underlying authentication module for root from 200.111.111.51 : 2 Time(s)
    User not known to the underlying authentication module for root from 200.123.4.25 : 1 Time(s)
    User not known to the underlying authentication module for root from 200.160.121.246 : 1 Time(s)
    User not known to the underlying authentication module for root from 200.175.79.150 : 1 Time(s)
    User not known to the underlying authentication module for root from 200.182.126.166 : 1 Time(s)
    User not known to the underlying authentication module for root from 200.187.60.60 : 2 Time(s)
    User not known to the underlying authentication module for root from 200.242.100.30 : 2 Time(s)
    User not known to the underlying authentication module for root from 200.248.10.200 : 2 Time(s)
    User not known to the underlying authentication module for root from 200.25.180.75 : 1 Time(s)
    User not known to the underlying authentication module for root from 200.79.53.211 : 1 Time(s)
    User not known to the underlying authentication module for root from 201.155.88.252 : 1 Time(s)
    User not known to the underlying authentication module for root from 201.21.49.185 : 1 Time(s)
    User not known to the underlying authentication module for root from 201.227.239.11 : 1 Time(s)
    User not known to the underlying authentication module for root from 201.238.197.3 : 2 Time(s)
    User not known to the underlying authentication module for root from 201.238.211.133 : 1 Time(s)
    User not known to the underlying authentication module for root from 201.41.215.154 : 1 Time(s)
    User not known to the underlying authentication module for root from 202.120.46.2 : 1 Time(s)
    User not known to the underlying authentication module for root from 202.147.244.165 : 1 Time(s)
    User not known to the underlying authentication module for root from 202.171.148.106 : 1 Time(s)
    User not known to the underlying authentication module for root from 202.177.24.199 : 1 Time(s)
    User not known to the underlying authentication module for root from 202.39.49.109 : 1 Time(s)
    User not known to the underlying authentication module for root from 202.53.225.162 : 2 Time(s)
    User not known to the underlying authentication module for root from 202.53.250.42 : 1 Time(s)
    User not known to the underlying authentication module for root from 202.71.140.165 : 1 Time(s)
    User not known to the underlying authentication module for root from 203.110.245.243 : 1 Time(s)
    User not known to the underlying authentication module for root from 203.122.225.226 : 1 Time(s)
    User not known to the underlying authentication module for root from 203.183.81.155 : 1 Time(s)
    User not known to the underlying authentication module for root from 203.58.188.17 : 1 Time(s)
    User not known to the underlying authentication module for root from 203.72.59.6 : 1 Time(s)
    User not known to the underlying authentication module for root from 204.38.191.170 : 1 Time(s)
    User not known to the underlying authentication module for root from 208.115.111.200 : 1 Time(s)
    User not known to the underlying authentication module for root from 208.179.176.66 : 1 Time(s)
    User not known to the underlying authentication module for root from 209.203.18.122 : 1 Time(s)
    User not known to the underlying authentication module for root from 209.88.156.132 : 1 Time(s)
    User not known to the underlying authentication module for root from 210.196.168.137 : 1 Time(s)
    User not known to the underlying authentication module for root from 210.51.57.139 : 1 Time(s)
    User not known to the underlying authentication module for root from 211.234.100.205 : 1 Time(s)
    User not known to the underlying authentication module for root from 211.239.172.188 : 1 Time(s)
    User not known to the underlying authentication module for root from 211.9.48.203 : 1 Time(s)
    User not known to the underlying authentication module for root from 212.116.138.149 : 3 Time(s)
    User not known to the underlying authentication module for root from 212.155.135.204 : 1 Time(s)
    User not known to the underlying authentication module for root from 212.224.142.100 : 2 Time(s)
    User not known to the underlying authentication module for root from 212.92.23.139 : 2 Time(s)
    User not known to the underlying authentication module for root from 212.92.23.24 : 1 Time(s)
    User not known to the underlying authentication module for root from 213.129.249.99 : 2 Time(s)
    User not known to the underlying authentication module for root from 213.215.10.116 : 1 Time(s)
    User not known to the underlying authentication module for root from 213.215.247.194 : 1 Time(s)
    User not known to the underlying authentication module for root from 213.23.211.11 : 2 Time(s)
    User not known to the underlying authentication module for root from 213.235.133.209 : 1 Time(s)
    User not known to the underlying authentication module for root from 213.97.211.74 : 1 Time(s)
    User not known to the underlying authentication module for root from 217.119.231.143 : 1 Time(s)
    User not known to the underlying authentication module for root from 217.15.197.136 : 1 Time(s)
    User not known to the underlying authentication module for root from 217.159.148.62 : 1 Time(s)
    User not known to the underlying authentication module for root from 217.166.213.218 : 1 Time(s)
    User not known to the underlying authentication module for root from 217.220.124.90 : 1 Time(s)
    User not known to the underlying authentication module for root from 217.8.80.9 : 1 Time(s)
    User not known to the underlying authentication module for root from 218.241.156.219 : 2 Time(s)
    User not known to the underlying authentication module for root from 219.117.236.219 : 2 Time(s)
    User not known to the underlying authentication module for root from 219.234.81.209 : 1 Time(s)
    User not known to the underlying authentication module for root from 219.94.144.73 : 1 Time(s)
    User not known to the underlying authentication module for root from 220.232.206.71 : 3 Time(s)
    User not known to the underlying authentication module for root from 222.107.61.161 : 2 Time(s)
    User not known to the underlying authentication module for root from 222.173.107.103 : 4 Time(s)
    User not known to the underlying authentication module for root from 24.75.21.4 : 1 Time(s)
    User not known to the underlying authentication module for root from 38.112.30.222 : 1 Time(s)
    User not known to the underlying authentication module for root from 41.204.194.154 : 2 Time(s)
    User not known to the underlying authentication module for root from 58.215.75.55 : 1 Time(s)
    User not known to the underlying authentication module for root from 58.221.249.66 : 1 Time(s)
    User not known to the underlying authentication module for root from 58.246.85.122 : 2 Time(s)
    User not known to the underlying authentication module for root from 59.106.27.49 : 2 Time(s)
    User not known to the underlying authentication module for root from 59.124.223.238 : 1 Time(s)
    User not known to the underlying authentication module for root from 59.124.78.179 : 1 Time(s)
    User not known to the underlying authentication module for root from 61.31.200.49 : 1 Time(s)
    User not known to the underlying authentication module for root from 62.129.164.36 : 1 Time(s)
    User not known to the underlying authentication module for root from 62.94.161.156 : 1 Time(s)
    User not known to the underlying authentication module for root from 62.97.49.6 : 2 Time(s)
    User not known to the underlying authentication module for root from 64.117.46.243 : 1 Time(s)
    User not known to the underlying authentication module for root from 64.164.215.91 : 1 Time(s)
    User not known to the underlying authentication module for root from 64.182.136.46 : 2 Time(s)
    User not known to the underlying authentication module for root from 64.185.113.237 : 1 Time(s)
    User not known to the underlying authentication module for root from 65.111.177.12 : 1 Time(s)
    User not known to the underlying authentication module for root from 65.111.177.212 : 1 Time(s)
    User not known to the underlying authentication module for root from 65.70.247.20 : 1 Time(s)
    User not known to the underlying authentication module for root from 66.115.174.80 : 1 Time(s)
    User not known to the underlying authentication module for root from 66.240.254.216 : 1 Time(s)
    User not known to the underlying authentication module for root from 67.222.236.19 : 1 Time(s)
    User not known to the underlying authentication module for root from 69.159.244.44 : 1 Time(s)
    User not known to the underlying authentication module for root from 70.247.71.201 : 2 Time(s)
    User not known to the underlying authentication module for root from 72.51.43.242 : 1 Time(s)
    User not known to the underlying authentication module for root from 72.54.128.19 : 1 Time(s)
    User not known to the underlying authentication module for root from 72.90.111.10 : 1 Time(s)
    User not known to the underlying authentication module for root from 74.189.117.98 : 1 Time(s)
    User not known to the underlying authentication module for root from 74.55.60.90 : 2 Time(s)
    User not known to the underlying authentication module for root from 74.80.48.25 : 1 Time(s)
    User not known to the underlying authentication module for root from 75.125.235.162 : 2 Time(s)
    User not known to the underlying authentication module for root from 75.125.69.82 : 1 Time(s)
    User not known to the underlying authentication module for root from 75.160.204.13 : 1 Time(s)
    User not known to the underlying authentication module for root from 79.170.186.119 : 1 Time(s)
    User not known to the underlying authentication module for root from 79.38.79.53 : 1 Time(s)
    User not known to the underlying authentication module for root from 80.26.69.233 : 1 Time(s)
    User not known to the underlying authentication module for root from 81.168.103.177 : 1 Time(s)
    User not known to the underlying authentication module for root from 81.18.250.224 : 1 Time(s)
    User not known to the underlying authentication module for root from 81.221.15.140 : 2 Time(s)
    User not known to the underlying authentication module for root from 81.255.107.145 : 1 Time(s)
    User not known to the underlying authentication module for root from 82.119.240.3 : 2 Time(s)
    User not known to the underlying authentication module for root from 82.145.241.5 : 1 Time(s)
    User not known to the underlying authentication module for root from 82.187.183.124 : 1 Time(s)
    User not known to the underlying authentication module for root from 83.238.170.128 : 1 Time(s)
    User not known to the underlying authentication module for root from 84.19.182.97 : 1 Time(s)
    User not known to the underlying authentication module for root from 84.40.53.32 : 1 Time(s)
    User not known to the underlying authentication module for root from 85.145.196.239 : 1 Time(s)
    User not known to the underlying authentication module for root from 85.214.25.226 : 1 Time(s)
    User not known to the underlying authentication module for root from 85.22.60.6 : 2 Time(s)
    User not known to the underlying authentication module for root from 85.24.138.173 : 2 Time(s)
    User not known to the underlying authentication module for root from 87.244.204.196 : 1 Time(s)
    User not known to the underlying authentication module for root from 87.63.208.238 : 1 Time(s)
    User not known to the underlying authentication module for root from 87.86.55.4 : 2 Time(s)
    User not known to the underlying authentication module for root from 88.40.179.242 : 1 Time(s)
    User not known to the underlying authentication module for root from 89.250.247.28 : 2 Time(s)
    User not known to the underlying authentication module for root from 89.251.106.242 : 1 Time(s)
    User not known to the underlying authentication module for root from 89.39.28.239 : 1 Time(s)
    User not known to the underlying authentication module for root from 91.142.242.165 : 3 Time(s)
    User not known to the underlying authentication module for root from 91.144.170.50 : 2 Time(s)
    User not known to the underlying authentication module for root from 93.104.243.162 : 2 Time(s)
    User not known to the underlying authentication module for root from 93.152.158.141 : 2 Time(s)
    User not known to the underlying authentication module for root from 93.157.210.254 : 2 Time(s)
    User not known to the underlying authentication module for root from 93.82.242.114 : 1 Time(s)
    User not known to the underlying authentication module for root from 93.93.191.186 : 2 Time(s)
    User not known to the underlying authentication module for root from 94.127.136.74 : 1 Time(s)
    User not known to the underlying authentication module for root from 94.83.231.154 : 1 Time(s)

 **Unmatched Entries**
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(adsl-pool2-130.metrotel.net.co) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(208-115-111-200-reverse.wowrack.com) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(189-20-205-210.customer.tdatabrasil.net.br) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(5a.3c.374a.static.theplanet.com) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(host89-251-106-242.hnet.ru) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(12-177-111-65.serverpronto.com) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(74-203-204-99.static.twtelecom.net) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(adsl-pool2-143.metrotel.net.co) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(222-237-78-139.tongkni.co.kr) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(fw.mairie-rueilmalmaison.fr) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(host148-106.ipaddress.jp) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(196.201.230.18.reverse.kdn.co.ke) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(170.83-43-196.Admin.morogoro.ttcldata.net) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(74-80-48-25.GLB.dyn.lusfiber.net.48.80.74.in-addr.arpa) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(189-210-153-50.static.axtel.net) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(212-177-111-65.serverpronto.com) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(pin-064-185-113-237.cust.pocketinet.com) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(su93254216.aspadmin.net) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(75.25-180.uio.satnet.net) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(slavierobsb253.static.gvt.net.br) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(austrodach-trading-fo.b.astral.ro) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(q-224.n-81.18.250.qore.nl) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(dsl-201-155-88-252-sta.prod-empresarial.com.mx) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(static-Adsl190-248-8-19.une.net.co) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(ns.km20838-05.keymachine.de) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(adsl-pool2-108.metrotel.net.co) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(pcpQLOGICpcs) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(server150.fiscalia.cl) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(217-220-124-90-static.albacom.net) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(202-177-24-199.kddi.net.hk) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(93-93-191-186.aspserveur.com) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(dweb35.webfaction.com) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(server.colo250-042.indo.net.id) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(static-adsl190-29-2-204.une.net.co) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(mail.tbmg.com.au) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(89-39-28-239.samtv.ro) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(201-41-215-154.bnut3300.ipd.brasiltelecom.net.br) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(host-49-6.pool.intred.it) failed : 2 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(HOST.FLGR.BG) failed : 3 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(static.kpn.net) failed : 1 time(s)
 syslogin_perform_logout: logout() returned an error : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(customer-static-2-3-85.iplannetworks.net) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(0x573fd0ee.cpe.ge-0-1-0-1101.arcnqu1.customer.tele.dk) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(202.204.244.87.in-addr.arpa) failed : 1 time(s)
 warning: /etc/hosts.allow, line 8: can't verify hostname: gethostbyname(payweb.surguttel.ru) failed : 1 time(s)

 ---------------------- SSHD End -------------------------

I’m reasonably confident that syslogin_perform_logout error is from a botched VM. Fedora 14 needs a more recent kernel than my DomU’s are getting and so that box is hosed. My two attempts to update to Fedora 14 have ended horribly, but that’s a different story.

Building ruby 1.9 on Fedora 13

David Kowis — Sat, 19 Jun 2010 18:19:23 +0000

Was harder than it should’ve been. I got annoyed.

You need to install openssl-devel, zlib-devel, bison, gcc, make, patch, tar, and maybe gcc-c++ (although I don’t think this one is needed).

Go get the latest ruby 1.9 source, as of this writing 1.9-p378, and extract it somewhere. Then go get the patches on this bug, at the specific comment. You will need to apply at least the openssl-build-fix patch, since fedora uses openssl 1.0 and it’s not yet into ruby 1.9. Then follow your typical ./cofnigure, make, and make install stuff. I installed mine into a prefix of /opt/ruby so that it wouldn’t affect any fedora ruby stuff that it might want. I then added ruby’s path to the end of my user’s PATH variable.

That’ll get you a working ruby 1.9 in Fedora.

xm pause testing

David Kowis — Sun, 02 May 2010 00:05:31 +0000

When I got xm pause working, I was quite excited. However, it doesn’t work in all cases. I’ve done some testing to figure out what combination of things cause it to fail.

All of this is using xen 4.0 hypervisor, the kernel from here, and a pvops domU kernel built by hand.

Using blktap2 backed disks in the vhd format (vhd-util create -n name -s 1024) xm pause fails. The user-space disk devices are never released, and only a hard reboot will get it to function again.
Using a different driver for the blktap2, tap:tapdisk:aio, also fails to pause.
Using phy:/ backed disks, say through LVM works fine. The domU will pause, and resume nicely.

It would seem that there is something not quite ready to be used regarding the blktap2 backend, so I wouldn’t reccomend using it.

I also tried to use the original tap:aio drivers, but I cannot as they don’t seem to exist. I guess I’ll be using the plain old phy:/ drivers for now. That’s not a big deal as I don’t have any second xen machine to do anything fancy that the tap:aio drivers would provide. I guess I should poke on a mailing list or something.

xen pv_ops domU

David Kowis — Sat, 01 May 2010 23:30:19 +0000

…means I can finally pause/suspend a domU vm again!

Finding this information should’ve been obvious, but for some reason it wasn’t. Maybe I had some silly mental block or something. Anyways, get the kernel source from here. Then build it for your architecture. If you want to build a 32-bit kernel for some 32-bit domUs, and you’re running on 64-bit, it’s as easy as make ARCH=i386 . This does work and I’ve verified it. Had to fool a Fedora domU into beleiving that it really was a 32-bit system.

I’ve found make tarbz2-pkg to be quite handy in packaging up the kernel to be deployed.

I have verified that this works in Xen 3.4.2 on a patched 2.6.29.6 kernel.

On my Xen 4.0 test box, it fails to suspend. I’m using the blktap2 stuff, and perhaps that doesn’t pause well. As far as I understand it, that blktap2 should not affect suspending, but I’m going to test it with some logical volume based vms. I usually use the lvm backed disks anyway, but the blktap2 stuff offers some interesting features, if it were to work. Not being able to pause stuff probably isn’t good, but again, I’m not sure what’s causing it.

Apparently, that is what’s causing it. The domU will pause and unpause just fine when using an lvm backed disk, rather than the blktap2 ones. I should test a couple of other combinations to see if things like tap:aio will behave, as that’s needed for nifty things like remus.

Xen 4.0 released

David Kowis — Wed, 07 Apr 2010 12:37:45 +0000

Finally!

From the official page:

The Xen 4.0 release contains a number of important new features and updates including:

Blktap2 – High performance VHD implementation supporting snaphots and clonces including live snapshots

Netchannel2 – Support for new Smart NICs with multi-queue and SR-IOV functionality

Fault Tolerance – Live transactional synchronization of VM state between physical servers

Libxenlight – New library providing higher-level control of Xen between various toolstacks

PV-USB and VGA Pass-through

SourceMage has already updated packages for it.

There’s a repository and src RPMs available for Fedora here. Specifically the Xen 4.0 src RPM. I’ll try to remember to fire up a build on my xen DomU that I use to build RPMs for me :)

Fedora 12 Xen RPMs

David Kowis — Tue, 17 Nov 2009 20:02:57 +0000

I built these on a recently updated Fedora 12 box. I haven’t yet had an opportunity to test them. If you do use them and they work great, or not, post in the comments please.

Xen 3.4.2 rpms for Fedora 11 x86_64

David Kowis — Thu, 12 Nov 2009 15:46:46 +0000

I was using xen 3.4.1 on my fedora 11 Domain0, but I couldn’t ever suspend anything. xm save always failed. Someone on IRC suggested that it was the guest kernel that was to blame. Turns out it was xen 3.4.1.

After many hours searching the intertubes for a srpm or a spec file for building xen 3.4.2 for fedora, I decided that I would hack an existing one to 3.4.2 and hope for the best.

It built after I removed a few patches. The patches mostly complained about being already applied, so I assume the bugs the patches were addressing were fixed in 3.4.2. I have generated rpms for x86_64 and put the spec file up on my site. Enjoy.