OpenVZ Forum


Home » General » Support » *SOLVED* quagga on FC5 and RHEL4
Re: quagga on FC5 and RHEL4 [message #7069 is a reply to message #6283] Mon, 02 October 2006 21:45 Go to previous messageGo to previous message
poelzi is currently offline  poelzi
Messages: 1
Registered: October 2006
Junior Member
I ran into the same problem the last two days. I just learning bgp so it was kinda hard to find Smile

i managed to run quagga (bgpd + zebra) inside a vz instance with some hackts. 0.99.5 is the version i used and i had to change the configure parameters:

        ./configure \
                --prefix=/usr \
                --libexecdir=/usr/lib/quagga \
                --sbindir=/usr/lib/quagga \
                --sysconfdir=/etc/quagga \
                --localstatedir=/var/run/quagga \
                --enable-exampledir=$(T)/usr/share/doc/quagga/examples/ \
                \
                $(USE_SNMP) \
                --enable-vtysh \
                --enable-isisd \
                --disable-capabilities \
                --enable-watchquagga \
                --enable-ospf-te \
                --enable-opaque-lsa \
                --enable-user=root \
                --enable-group=root \
                --enable-ipv6 \
                --enable-ospfclient=yes \
                --enable-ospfapi=yes \
                --enable-multipath=64 \
                --enable-vty-group=quaggavty \
                --enable-configfile-mask=0640 \
                --enable-logfile-mask=0640 \
                --enable-rtadv \
                --enable-tcp-md5 \
                --disable-netlink \
                --with-libpam


netlink doesn't work and gets only permission denied returns. because using ioctl with capabilities didn' work eigher. Then I found that capabilities seems to be broken here, running zebra as root without capabilies compiled in, works fine. Here on ubuntu, zebra runs default under user quagga.
zebra seems to request capabilities NET_ADMIN, SYS_ADMIN and NET_RAW when i remember correctly. For my tests i gave the instance all available und running capabilities (hope this didn't screw something up). At the beginning I only gave these three and some other caps to the instance, so quagga could continue after trying cap_set_proc, which worked.

Not sure if it matters, but some of the interface in the instance are vpn tun and tap devices. On one tap device is bgpd running.

kindly regards
daniel
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: *SOLVED* Problem with 026test018.1 vps runs into failcnt
Next Topic: Mount in vps
Goto Forum:
  


Current Time: Fri Oct 03 16:10:33 GMT 2025

Total time taken to generate the page: 0.11122 seconds