2 <!DOCTYPE compatibility SYSTEM "compatibility.dtd" []>
5 <title>compatibility of util-vserver alpha branch</title>
7 <program name="capchroot">
8 <location>LIBDIR</location>
9 <clicompat status="yes"/>
10 <funccompat status="yes"/>
13 <program name="distrib-info" status="removed">
14 <location>LIBDIR</location>
15 <clicompat status="no">
16 <text>replaced by <pref>vpkg</pref></text>
18 <funccompat status="no"/>
21 <program name="fakerunlevel">
22 <location>LIBDIR</location>
23 <clicompat status="yes"/>
24 <funccompat status="yes"/>
27 <program name="filetime">
28 <location>LIBDIR</location>
29 <clicompat status="yes"/>
30 <funccompat status="yes"/>
33 <program name="ifspec">
34 <location>LIBDIR</location>
35 <clicompat status="yes"/>
36 <funccompat status="yes"/>
39 <program name="install-*" status="removed">
40 <location>LIBDIR</location>
41 <clicompat status="no">
42 <text>Replaced by more general build-methods which are building vservers from apt-repositories.</text>
44 <funccompat status="no"/>
47 <program name="listdevip">
48 <location>LIBDIR</location>
49 <clicompat status="yes"/>
50 <funccompat status="yes"/>
53 <program name="parserpmdump">
54 <location>LIBDIR</location>
55 <clicompat status="yes"/>
56 <funccompat status="yes"/>
59 <program name="readlink">
60 <location>LIBDIR</location>
61 <clicompat status="yes"/>
62 <funccompat status="yes"/>
65 <program name="rootshell">
66 <location>LIBDIR</location>
67 <clicompat status="yes"/>
68 <funccompat status="yes"/>
71 <program name="sample.sh" status="removed">
72 <location>LIBDIR</location>
73 <clicompat status="no">
74 <text>incompatible with recent configuration style.</text>
76 <funccompat status="no"/>
79 <program name="save_s_context" status="removed">
80 <location>LIBDIR</location>
81 <clicompat status="no">
82 <text>incompatible with recent configuration style; partially replaced by <pref>save_ctxinfo</pref>.</text>
84 <funccompat status="yes"/>
87 <program name="setattr">
88 <location>LIBDIR</location>
89 <clicompat status="no">
90 <text>Has been moved into SBINDIR. Lots of new option were added to support new functionality.</text>
92 <funccompat status="no">
93 <text>It is possible to recurse directories and it supports
94 all vserver related attributes (admin, hide, watch, barrier,
99 <program name="showattr">
100 <location>LIBDIR</location>
101 <clicompat status="no">
102 <text>Has been moved into SBINDIR. Lots of new option were added to support new functionality.</text>
104 <funccompat status="no">
105 <text>It is possible to recurse directories and it supports all
106 vserver related attributes (admin, hide, watch, barrier,
107 iunlink). The output has been changed: the flags are now in the
108 first column and they are displayed in a symbolic manner.</text>
112 <program name="showperm">
113 <location>LIBDIR</location>
114 <clicompat status="yes"/>
115 <funccompat status="yes"/>
118 <program name="vbuild" status="broken">
119 <location>LIBDIR</location>
120 <clicompat status="yes"/>
121 <funccompat status="no">
122 <text>will be removed/rewritten soon.</text>
126 <program name="vcheck" status="broken">
127 <location>LIBDIR</location>
128 <clicompat status="yes"/>
129 <funccompat status="no">
130 <text>will be removed/rewritten soon.</text>
134 <program name="vprofile" status="removed">
135 <location>LIBDIR</location>
136 <clicompat status="no">
137 <text>incompatible with recent configuration style.</text>
139 <funccompat status="no"/>
142 <program name="vreboot">
143 <location>LIBDIR</location>
144 <clicompat status="yes"/>
145 <funccompat status="yes"/>
148 <program name="vserverkillall" status="removed">
149 <location>LIBDIR</location>
150 <clicompat status="no">
151 <text><pref>vkill</pref> contains the needed functionality
154 <funccompat status="no"/>
157 <program name="vservers.grabinfo.sh">
158 <location>LIBDIR</location>
159 <clicompat status="yes"/>
160 <funccompat status="yes"/>
163 <program name="vunify" status="rewritten">
164 <location>LIBDIR</location>
165 <clicompat status="no">
166 <text>CLI has been changed to reflect new functionality. Now, it
167 accepts either a single vserver, or (directory,excludelist)
168 pairs as arguments. The old "refserver vserver1 vserver2 ..."
169 syntax is gone.</text>
171 <funccompat status="limited">
172 <text>vunify allows to unify generic paths, or vservers with
173 preconfigured reference vservers. The filelist is not taken from
174 packagemanagement anymore, but every file which has a counterpart
175 in the reference-path(s)/vserver(s) and is not in an excludelist
176 will be unified. A part of the excludelist will be generated
177 dynamically with information from the packagemanagement about
182 <program name="chbind">
183 <location>SBINDIR</location>
184 <clicompat status="yes"/>
185 <funccompat status="yes"/>
188 <program name="chcontext">
189 <location>SBINDIR</location>
190 <clicompat status="yes"/>
191 <funccompat status="yes"/>
194 <program name="rebootmgr">
195 <location>SBINDIR</location>
196 <clicompat status="yes"/>
197 <funccompat status="yes"/>
200 <program name="reducecap">
201 <location>SBINDIR</location>
202 <clicompat status="yes"/>
203 <funccompat status="yes"/>
207 <location>SBINDIR</location>
208 <clicompat status="yes"/>
209 <funccompat status="yes"/>
212 <program name="vfiles" status="broken">
213 <location>SBINDIR</location>
214 <clicompat status="yes"/>
215 <funccompat status="no">
216 <text>will be removed/rewritten soon.</text>
220 <program name="vkill" status="rewritten">
221 <location>SBINDIR</location>
222 <clicompat status="yes"/>
223 <funccompat status="limited">
224 <text>It uses native kernel interface now and is secure (in
225 opposite to the old perl implementation).</text>
229 <program name="vps" status="rewritten">
230 <location>SBINDIR</location>
231 <clicompat status="yes"/>
232 <funccompat status="limited">
233 <text>It has been rewritten into C and output might have been changed slightly.</text>
237 <program name="vpstree">
238 <location>SBINDIR</location>
239 <clicompat status="yes"/>
240 <funccompat status="yes"/>
243 <program name="vrpm" status="rewritten">
244 <location>SBINDIR</location>
245 <clicompat status="yes"/>
246 <funccompat status="limited">
247 <text>It has been rewritten into a secure, native C
248 implementation. Unpacking of files happens in host-ctx, but
249 scriptlets are executed in vserver context. The rpm database
250 will/can be hold outside of the vserver and there will never be
251 access on it from the inside (neither direct, nor by
252 scriptlets). This is implemented through an LD_PRELOAD wrapper
253 which provides own, secure NSS functions too.</text>
257 <program name="vserver" status="rewritten">
258 <location>SBINDIR</location>
259 <clicompat status="limited">
260 <text>It accepts all the old arguments, but adds lots of new
261 ones. This program is intended as the basic vserver management
262 tool; e.g. to unify a vserver you can execute "vserver XX unify",
263 to install a package "vserver XX install PKG" and so on.</text>
265 <funccompat status="limited">
266 <text>This tool is rewritten to completely and is now resistant
267 against symlink attacks. It uses the new configuration scheme
268 and the iproute2 tools instead of ifconfig for network
269 setup. Old-style vserver can be still started through this tool,
270 but modifications/building of them is not possible
275 <program name="vserver-copy" status="broken">
276 <location>SBINDIR</location>
277 <clicompat status="yes"/>
278 <funccompat status="no">
279 <text>will be removed/rewritten soon.</text>
283 <program name="vserver-stat" status="rewritten">
284 <location>SBINDIR</location>
285 <clicompat status="yes"/>
286 <funccompat status="yes">
287 <text>It has been rewritten to use the new libvserver API. The
288 output has been changed slightly.</text>
292 <program name="vtop">
293 <location>SBINDIR</location>
294 <clicompat status="yes"/>
295 <funccompat status="yes"/>
298 <program name="exec-cd" status="new">
299 <location>SBINDIR</location>
300 <funccompat status="yes">
301 <text>changes into a directory in a secure manner and executes a
302 program there.</text>
306 <program name="rpm-fake-resolver" status="new">
307 <location>LIBDIR</location>
308 <funccompat status="yes">
309 <text>NSS resolver; used by <pref>vrpm</pref> and executed in
314 <program name="rpm-fake.so" status="new">
315 <location>LIBDIR</location>
316 <funccompat status="yes">
317 <text>LD_PRELOAD wrapper; used by <pref>vrpm</pref>.</text>
321 <program name="vapt-get-worker" status="new">
322 <location>LIBDIR</location>
323 <funccompat status="yes">
324 <text>Helper script for <pref>vapt-get</pref>.</text>
328 <program name="vpkg" status="new">
329 <location>LIBDIR</location>
330 <funccompat status="yes">
331 <text>Generic interface for package management; it allows
332 to install, remove or query packages in a distribution
333 independent manner. It can be seen as the successor of
334 <pref>distrib-info</pref>.</text>
338 <program name="vrpm-preload" status="new">
339 <location>LIBDIR</location>
340 <funccompat status="yes">
341 <text>Helper script for <pref>vrpm</pref>.</text>
345 <program name="vrpm-worker" status="new">
346 <location>LIBDIR</location>
347 <funccompat status="yes">
348 <text>Helper script for <pref>vrpm</pref>.</text>
352 <program name="vserver-build" status="new">
353 <location>LIBDIR</location>
354 <funccompat status="yes">
355 <text>Builds a vserver from scratch and allows to select the
356 used method. It will be called by the "vserver XY build"
361 <program name="vapt-get" status="new">
362 <location>SBINDIR</location>
363 <funccompat status="yes">
364 <text>Wrapper for apt-get; currently only the apt-rpm port
365 is supported. Metadata will/can be stored outside of the
366 vserver. This program call <pref>vrpm</pref>.</text>
371 <program name="chxid" status="new">
372 <location>SBINDIR</location>
373 <funccompat status="yes">
374 <text>This program assigns the associated context of an inode. It
375 replaces parts of the vserver-quota tools.</text>
379 <program name="lsxid" status="new">
380 <location>SBINDIR</location>
381 <funccompat status="yes">
382 <text>This program shows the associated context of an inode. It
383 replaces parts of the vserver-quota tools.</text>
387 <program name="new-namespace" status="new">
388 <location>SBINDIR</location>
389 <funccompat status="yes">
390 <text>This program starts a program within a new namespace which is
391 created with CLONE_NEWNS. It is used e.g. by <pref>vrpm</pref> to
392 map the rpm-database into the vserver in a secure manner.</text>
396 <program name="vlimit" status="new">
397 <location>SBINDIR</location>
398 <funccompat status="yes">
399 <text>This is an interface to the rlimit syscalls which allow to
400 limit resource-usage of contexts.</text>
404 <program name="vrsetup" status="new">
405 <location>SBINDIR</location>
406 <funccompat status="yes">
407 <text>This program allows to setup vroot devices. It replaces
408 vrsetup from the vr-tools</text>