compatibility of util-vserver alpha branch

LIBDIR/capchroot

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/distrib-info (removed)

Command line interface compatibility: no

replaced by vpkg

Functional compatibility: no

LIBDIR/fakerunlevel

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/filetime

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/ifspec

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/install-* (removed)

Command line interface compatibility: no

Replaced by more general build-methods which are building vservers from apt-repositories.

Functional compatibility: no

LIBDIR/listdevip

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/parserpmdump

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/readlink

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/rootshell

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/sample.sh (removed)

Command line interface compatibility: no

incompatible with recent configuration style.

Functional compatibility: no

LIBDIR/save_s_context (removed)

Command line interface compatibility: no

incompatible with recent configuration style; partially replaced by save_ctxinfo.

Functional compatibility: yes

LIBDIR/setattr

Command line interface compatibility: no

Has been moved into SBINDIR. Lots of new option were added to support new functionality.

Functional compatibility: no

It is possible to recurse directories and it supports all vserver related attributes (admin, hide, watch, barrier, iunlink).

LIBDIR/showattr

Command line interface compatibility: no

Has been moved into SBINDIR. Lots of new option were added to support new functionality.

Functional compatibility: no

It is possible to recurse directories and it supports all vserver related attributes (admin, hide, watch, barrier, iunlink). The output has been changed: the flags are now in the first column and they are displayed in a symbolic manner.

LIBDIR/showperm

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/vbuild (broken)

Command line interface compatibility: yes

Functional compatibility: no

will be removed/rewritten soon.

LIBDIR/vcheck (broken)

Command line interface compatibility: yes

Functional compatibility: no

will be removed/rewritten soon.

LIBDIR/vprofile (removed)

Command line interface compatibility: no

incompatible with recent configuration style.

Functional compatibility: no

LIBDIR/vreboot

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/vserverkillall (removed)

Command line interface compatibility: no

vkill contains the needed functionality already.

Functional compatibility: no

LIBDIR/vservers.grabinfo.sh

Command line interface compatibility: yes

Functional compatibility: yes

LIBDIR/vunify (rewritten)

Command line interface compatibility: no

CLI has been changed to reflect new functionality. Now, it accepts either a single vserver, or (directory,excludelist) pairs as arguments. The old "refserver vserver1 vserver2 ..." syntax is gone.

Functional compatibility: limited

vunify allows to unify generic paths, or vservers with preconfigured reference vservers. The filelist is not taken from packagemanagement anymore, but every file which has a counterpart in the reference-path(s)/vserver(s) and is not in an excludelist will be unified. A part of the excludelist will be generated dynamically with information from the packagemanagement about configfiles.

SBINDIR/chbind

Command line interface compatibility: yes

Functional compatibility: yes

SBINDIR/chcontext

Command line interface compatibility: yes

Functional compatibility: yes

Return code in '--disconnect' case is now more correctly.

SBINDIR/rebootmgr

Command line interface compatibility: yes

Functional compatibility: yes

SBINDIR/reducecap

Command line interface compatibility: yes

Functional compatibility: yes

SBINDIR/vdu

Command line interface compatibility: yes

Functional compatibility: yes

SBINDIR/vfiles (broken)

Command line interface compatibility: yes

Functional compatibility: no

will be removed/rewritten soon.

SBINDIR/vkill (rewritten)

Command line interface compatibility: yes

Functional compatibility: limited

It uses native kernel interface now and is secure (in opposite to the old perl implementation).

SBINDIR/vps (rewritten)

Command line interface compatibility: yes

Functional compatibility: limited

It has been rewritten into C and output might have been changed slightly.

SBINDIR/vpstree

Command line interface compatibility: yes

Functional compatibility: yes

SBINDIR/vrpm (rewritten)

Command line interface compatibility: yes

Functional compatibility: limited

It has been rewritten into a secure, native C implementation. Unpacking of files happens in host-ctx, but scriptlets are executed in vserver context. The rpm database will/can be hold outside of the vserver and there will never be access on it from the inside (neither direct, nor by scriptlets). This is implemented through an LD_PRELOAD wrapper which provides own, secure NSS functions too.

SBINDIR/vserver (rewritten)

Command line interface compatibility: limited

It accepts all the old arguments, but adds lots of new ones. This program is intended as the basic vserver management tool; e.g. to unify a vserver you can execute "vserver XX unify", to install a package "vserver XX install PKG" and so on.

Functional compatibility: limited

This tool is rewritten to completely and is now resistant against symlink attacks. It uses the new configuration scheme and the iproute2 tools instead of ifconfig for network setup. Old-style vserver can be still started through this tool, but modifications/building of them is not possible anymore.

SBINDIR/vserver-copy (broken)

Command line interface compatibility: yes

Functional compatibility: no

will be removed/rewritten soon.

SBINDIR/vserver-stat (rewritten)

Command line interface compatibility: yes

Functional compatibility: yes

It has been rewritten to use the new libvserver API. The output has been changed slightly.

SBINDIR/vtop

Command line interface compatibility: yes

Functional compatibility: yes

SBINDIR/exec-cd (new)

Functional compatibility: yes

changes into a directory in a secure manner and executes a program there.

LIBDIR/rpm-fake-resolver (new)

Functional compatibility: yes

NSS resolver; used by vrpm and executed in vserver-ctx.

LIBDIR/rpm-fake.so (new)

Functional compatibility: yes

LD_PRELOAD wrapper; used by vrpm.

LIBDIR/vapt-get-worker (new)

Functional compatibility: yes

Helper script for vapt-get.

LIBDIR/vpkg (new)

Functional compatibility: yes

Generic interface for package management; it allows to install, remove or query packages in a distribution independent manner. It can be seen as the successor of distrib-info.

LIBDIR/vrpm-preload (new)

Functional compatibility: yes

Helper script for vrpm.

LIBDIR/vrpm-worker (new)

Functional compatibility: yes

Helper script for vrpm.

LIBDIR/vserver-build (new)

Functional compatibility: yes

Builds a vserver from scratch and allows to select the used method. It will be called by the "vserver XY build" command.

SBINDIR/vapt-get (new)

Functional compatibility: yes

Wrapper for apt-get; currently only the apt-rpm port is supported. Metadata will/can be stored outside of the vserver. This program call vrpm.

SBINDIR/chxid (new)

Functional compatibility: yes

This program assigns the associated context of an inode. It replaces parts of the vserver-quota tools.

SBINDIR/lsxid (new)

Functional compatibility: yes

This program shows the associated context of an inode. It replaces parts of the vserver-quota tools.

SBINDIR/new-namespace (new)

Functional compatibility: yes

This program starts a program within a new namespace which is created with CLONE_NEWNS. It is used e.g. by vrpm to map the rpm-database into the vserver in a secure manner.

SBINDIR/vlimit (new)

Functional compatibility: yes

This is an interface to the rlimit syscalls which allow to limit resource-usage of contexts.

SBINDIR/vrsetup (new)

Functional compatibility: yes

This program allows to setup vroot devices. It replaces vrsetup from the vr-tools