# compatibility of util-vserver alpha branch

LIBDIR/capchroot
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/distrib-info (removed)
Command line interface compatibility: no
replaced by vpkg
Functional compatibility: no
LIBDIR/fakerunlevel
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/filetime
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/ifspec
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/install-* (removed)
Command line interface compatibility: no
Replaced by more general build-methods which are building vservers from apt-repositories.
Functional compatibility: no
LIBDIR/listdevip
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/parserpmdump
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/readlink
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/rootshell
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/sample.sh (removed)
Command line interface compatibility: no
incompatible with recent configuration style.
Functional compatibility: no
LIBDIR/save_s_context (removed)
Command line interface compatibility: no
incompatible with recent configuration style; partially replaced by save_ctxinfo.
Functional compatibility: yes
LIBDIR/setattr
Command line interface compatibility: no
Has been moved into SBINDIR. Lots of new option were added to support new functionality.
Functional compatibility: no
It is possible to recurse directories and it supports all vserver related attributes (admin, hide, watch, barrier, iunlink).
LIBDIR/showattr
Command line interface compatibility: no
Has been moved into SBINDIR. Lots of new option were added to support new functionality.
Functional compatibility: no
It is possible to recurse directories and it supports all vserver related attributes (admin, hide, watch, barrier, iunlink). The output has been changed: the flags are now in the first column and they are displayed in a symbolic manner.
LIBDIR/showperm
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/vbuild (broken)
Command line interface compatibility: yes
Functional compatibility: no
will be removed/rewritten soon.
LIBDIR/vcheck (broken)
Command line interface compatibility: yes
Functional compatibility: no
will be removed/rewritten soon.
LIBDIR/vprofile (removed)
Command line interface compatibility: no
incompatible with recent configuration style.
Functional compatibility: no
LIBDIR/vreboot
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/vserverkillall (removed)
Command line interface compatibility: no
vkill contains the needed functionality already.
Functional compatibility: no
LIBDIR/vservers.grabinfo.sh
Command line interface compatibility: yes
Functional compatibility: yes
LIBDIR/vunify (rewritten)
Command line interface compatibility: no
CLI has been changed to reflect new functionality. Now, it accepts either a single vserver, or (directory,excludelist) pairs as arguments. The old "refserver vserver1 vserver2 ..." syntax is gone.
Functional compatibility: limited
vunify allows to unify generic paths, or vservers with preconfigured reference vservers. The filelist is not taken from packagemanagement anymore, but every file which has a counterpart in the reference-path(s)/vserver(s) and is not in an excludelist will be unified. A part of the excludelist will be generated dynamically with information from the packagemanagement about configfiles.
SBINDIR/chbind
Command line interface compatibility: yes
Functional compatibility: yes
SBINDIR/chcontext
Command line interface compatibility: yes
Functional compatibility: yes
Return code in '--disconnect' case is now more correctly.
SBINDIR/rebootmgr
Command line interface compatibility: yes
Functional compatibility: yes
SBINDIR/reducecap
Command line interface compatibility: yes
Functional compatibility: yes
SBINDIR/vdu
Command line interface compatibility: yes
Functional compatibility: yes
SBINDIR/vfiles (broken)
Command line interface compatibility: yes
Functional compatibility: no
will be removed/rewritten soon.
SBINDIR/vkill (rewritten)
Command line interface compatibility: yes
Functional compatibility: limited
It uses native kernel interface now and is secure (in opposite to the old perl implementation).
SBINDIR/vps (rewritten)
Command line interface compatibility: yes
Functional compatibility: limited
It has been rewritten into C and output might have been changed slightly.
SBINDIR/vpstree
Command line interface compatibility: yes
Functional compatibility: yes
SBINDIR/vrpm (rewritten)
Command line interface compatibility: yes
Functional compatibility: limited
It has been rewritten into a secure, native C implementation. Unpacking of files happens in host-ctx, but scriptlets are executed in vserver context. The rpm database will/can be hold outside of the vserver and there will never be access on it from the inside (neither direct, nor by scriptlets). This is implemented through an LD_PRELOAD wrapper which provides own, secure NSS functions too.
SBINDIR/vserver (rewritten)
Command line interface compatibility: limited
It accepts all the old arguments, but adds lots of new ones. This program is intended as the basic vserver management tool; e.g. to unify a vserver you can execute "vserver XX unify", to install a package "vserver XX install PKG" and so on.
Functional compatibility: limited
This tool is rewritten to completely and is now resistant against symlink attacks. It uses the new configuration scheme and the iproute2 tools instead of ifconfig for network setup. Old-style vserver can be still started through this tool, but modifications/building of them is not possible anymore.
SBINDIR/vserver-copy (broken)
Command line interface compatibility: yes
Functional compatibility: no
will be removed/rewritten soon.
SBINDIR/vserver-stat (rewritten)
Command line interface compatibility: yes
Functional compatibility: yes
It has been rewritten to use the new libvserver API. The output has been changed slightly.
SBINDIR/vtop
Command line interface compatibility: yes
Functional compatibility: yes
SBINDIR/exec-cd (new)
Functional compatibility: yes
changes into a directory in a secure manner and executes a program there.
LIBDIR/rpm-fake-resolver (new)
Functional compatibility: yes
NSS resolver; used by vrpm and executed in vserver-ctx.
LIBDIR/rpm-fake.so (new)
Functional compatibility: yes
LD_PRELOAD wrapper; used by vrpm.
LIBDIR/vapt-get-worker (new)
Functional compatibility: yes
Helper script for vapt-get.
LIBDIR/vpkg (new)
Functional compatibility: yes
Generic interface for package management; it allows to install, remove or query packages in a distribution independent manner. It can be seen as the successor of distrib-info.
LIBDIR/vrpm-preload (new)
Functional compatibility: yes
Helper script for vrpm.
LIBDIR/vrpm-worker (new)
Functional compatibility: yes
Helper script for vrpm.
LIBDIR/vserver-build (new)
Functional compatibility: yes
Builds a vserver from scratch and allows to select the used method. It will be called by the "vserver XY build" command.
SBINDIR/vapt-get (new)
Functional compatibility: yes
Wrapper for apt-get; currently only the apt-rpm port is supported. Metadata will/can be stored outside of the vserver. This program call vrpm.
SBINDIR/chxid (new)
Functional compatibility: yes
This program assigns the associated context of an inode. It replaces parts of the vserver-quota tools.
SBINDIR/lsxid (new)
Functional compatibility: yes
This program shows the associated context of an inode. It replaces parts of the vserver-quota tools.
SBINDIR/new-namespace (new)
Functional compatibility: yes
This program starts a program within a new namespace which is created with CLONE_NEWNS. It is used e.g. by vrpm to map the rpm-database into the vserver in a secure manner.
SBINDIR/vlimit (new)
Functional compatibility: yes
This is an interface to the rlimit syscalls which allow to limit resource-usage of contexts.
SBINDIR/vrsetup (new)
Functional compatibility: yes
This program allows to setup vroot devices. It replaces vrsetup from the vr-tools