On Fri, Dec 4, 2009 at 11:04 PM, Fajar A. Nugraha <fajar@xxxxxxxxx> wrote:
> On Thu, Dec 3, 2009 at 2:02 AM, Rudi Ahlers <Rudi@xxxxxxxxxxx> wrote:
>> I know kexec can do something like
>> this for security patches, but I don't know much about kexec, and I
>> don't want to mess up a production server either.
>
> AFAIK current implementation of kexec works like a reboot, only
> without going through BIOS and bootloader. At least that's how it was
> implemented in Ubuntu
But have you, or anyone else, used kexec on a running server yet? And
how do I use it, without breaking anything?
>
>> So, has anyone done
>> something like this before? I need to load a new kernel for one of the
>> domU's iptables to work, but don't want to reboot the whole server and
>> cause downtime for the other domU's.
>
> You shouldn't need to that. What changes did you made on dom0? My
> setup works fine with iptables on domU in a mostly-default setup.
>
Not much. The domU's can't use iptables, at all.
On a domU:
-bash-3.2# iptables -L
iptables v1.3.5: can't initialize iptables table `filter': iptables
who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
And the domU's kernel:
-bash-3.2# uname -a
Linux spare5.securehosting.co.za 2.6.18-128.7.1.el5xen #1 SMP Mon Aug
24 09:14:33 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
The host node's kernel:
root@usaxen02:[~]$ uname -a
Linux usaxen02.securehosting.co.za 2.6.18-128.7.1.el5xen #1 SMP Mon
Aug 24 09:14:33 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
So, I thought of upgrading the kernel on both, and see if that helps at all?
> --
> Fajar
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
>
--
Kind Regards
Rudi Ahlers
CEO, SoftDux Hosting
Web: http://www.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|