4gb seg fixup after reformatting

[root@linux ~]# rpm -q glibc.i386
glibc-2.5-65
[root@linux ~]# rpm -q glibc.i686
package glibc.i686 is not installed

it works as expected. now production server works but files gone. hope to get files back using backup disk.

[solved] 4gb fixup problem end

WARNING: try at your own risk.
2. not use this function when memory below 512MB
3. this break down my production server http://blog.apis17.info/2011/09/segmentation-fault-after-glibci386.html -reformat and reinstall solve the problem

finally 4gb fixup on xen is finally gone. (now i have openvz too :) 2.6.18-274.el5.028stab093.2xen

it fixed using i386 version of glibc

#yumdownloader glibc.i386

then yum downloading 'glibc-2.5-65.i386.rpm' package

#rpm -Uvh --force glibc-2.5-65.i386.rpm

it force 32bit glibc version. default my centos  use i686 even os 32-bit. you can read my previous entries. (thanks to cloudlinux forum)

after several hours recovering back from my lost glibc uninstall thanks to webmin saving my life.
and NEVER use this command rpm -e glibc


now i'm ready to get dangerous on production server. will update this post later.

secure tmp on openvz container

http://www.faqforge.com/linux/controlpanels/ispconfig2/secure-tmp-and-devshm-directories-in-a-openvz-enviroment/

Create the script:

vi /etc/vz/conf/VPSID.mount

and insert the following lines:

#!/bin/bash mount -n --bind -onosuid,noexec /vz/vps/VPSID/tmp /vz/root/VPSID/tmp mount -n --bind -onosuid,noexec /vz/vps/VPSID/shm /vz/root/VPSID/dev/shm exit ${?}

now make the sscript executable:

chmod 700 /etc/vz/conf/VPSID.mount

csf on openvz [ another reference ]

still no luck. trying another way:

this is detailed instruction:

http://eitwebguru.com/install-and-configure-csf-on-a-vps-part-i-enable-firewall-modules/

vzctl set VEID --iptables ipt_REJECT --iptables ipt_tos --iptables ipt_TOS --iptables ipt_LOG --iptables ip_conntrack --iptables ipt_limit --iptables ipt_multiport --iptables iptable_filter --iptables iptable_mangle --iptables ipt_TCPMSS --iptables ipt_tcpmss --iptables ipt_ttl --iptables ipt_length --iptables ipt_state --iptables iptable_nat --iptables ip_nat_ftp --save

others:

http://piyecarane.wordpress.com/2009/08/30/how-to-enable-csf-on-openvz-container/

On the node server :
Modify IPTABLES_MODULES on /etc/sysconfig/iptables-config

IPTABLES_MODULES="ip_conntrack_netbios_ns ipt_conntrack ipt_LOG ipt_owner ipt_state ip_conntrack_ftp iptable_nat ip_nat_ftp ip_tables ipt_multiport iptable_filter ipt_limit"

then launch : service iptables restart
to restart iptables services

Then modify IPTABLES on /etc/vz/vz.conf

IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state iptable_nat ip_nat_ftp ip_tables ipt_conntrack ip_conntrack_ftp ipt_LOG ipt_owner"
then launch : /etc/init.d/vz restart

iptables csf with openvz container

required modules

iptable_filter iptable_mangle ipt_limit ipt_multiport ipt_tos ipt_TOS ipt_REJECT ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_LOG ipt_length ip_conntrack ip_conntrack_ftp ip_conntrack_irc ipt_conntrack ipt_state ipt_helper iptable_nat ip_nat_ftp ip_nat_irc

How to test?

perl /etc/csf/csftest.pl

read more: http://kb.parallels.com/en/746